Terms of service.

Pipp and these terms

Pipp is a shared email inbox for businesses and professional users, with optional AI assistance. Telesoft AG, Weisserlenweg 7, 8966 Oberwil-Lieli, Switzerland, provides Pipp. Contact us at hello@pipp.so.

The customer is the business or sole trader using Pipp for its work. In these terms, "you" means that customer and "we" means Telesoft AG. Pipp is for business and professional use, not personal or household use. The agreement starts when an authorized representative accepts these terms during signup. A connected application's own terms also apply to your use of that application.

Free beta: Pipp is provided as is and as available. Telesoft excludes liability for the free service as far as the law allows, including for ordinary negligence. AI and connected agents can produce harmful errors and take unintended actions. Your business must assess these risks, supervise its use and check important results. Read the AI and agent risks, agent permissions and warranty and liability exclusions before accepting.

Your account and workspace

Users must be at least 18 and able to enter a binding agreement. Anyone accepting for a business must have authority to bind it. Use your own account and keep access secure. Your business is responsible for its users and the permissions it gives them. Each workspace has a human Owner. An external agent acts for a person and cannot be the workspace Owner.

Workspace roles determine who can manage the team, inboxes and settings. Only connect applications that you are authorized to use with the workspace's data. Tell us if you believe someone has accessed your account without permission.

Beta access and pricing

Pipp is in beta. The non-AI core inbox is free forever. Pipp's AI features are free during beta and will be paid afterward. Pipp's AI features are off by default. A workspace Owner or Admin can turn them on in Settings or through an agent they connected with admin access.

The core's free pricing does not guarantee that the service or any feature will operate forever. The beta may change, be interrupted or end under the terms below.

We may change, limit, suspend or withdraw features, AI models, usage limits or agent access, including for safety, abuse, cost or provider constraints. A feature change is not by itself a change to these terms. Changes of providers that process workspace personal data follow the processing terms below. Planned closure of the whole service follows the notice provision below.

Before Pipp's AI becomes paid, we will give advance notice and a grace period to choose a subscription. Continuing with paid AI requires opt-in. Without a subscription, AI features turn off after that period and the core inbox stays free. No AI price, transition date or grace-period length has been selected. Charges from an external agent's host are separate from Pipp's pricing.

The beta has service and usage limits. Customer replies require a verified, activated sending domain assigned to the inbox. You can receive, read and draft email while setting it up. Connecting an agent does not bypass these requirements or give it separate allowances.

Your content and permitted use

You retain the rights you have in messages, attachments and other content you submit. Using Pipp does not transfer those rights to us. You give us permission to store, copy, process and transmit content only as needed to provide, maintain and secure Pipp, follow your instructions and meet legal obligations. This permission lasts only as long as those purposes and the disclosed retention require. Telesoft retains its rights in Pipp itself.

You must have the rights, lawful grounds and notices needed to submit content and share it with the people, providers and agents you authorize. Use Pipp lawfully. Do not send spam, impersonate another person, distribute malware, access data without permission, interfere with the service or bypass access controls and usage limits.

Do not deliberately use Pipp to store passwords, private keys or payment-card security codes. Do not use the beta for emergency or safety-critical decisions, or regulated workflows that require safeguards or agreements we have not supplied. Your business must decide whether Pipp is suitable for its data and obligations.

Use the published privacy notice to understand how Pipp handles account information and workspace content. Contact hello@pipp.so about privacy, access or deletion requests. The beta has no self-service account export.

Processing customer data

Your business is the controller of personal data in workspace content, or a processor acting on another controller's instructions. We act as your processor or subprocessor. If you act for another controller, you must have its authority to appoint us. Telesoft acts separately as controller for its own account administration, security and service-management records, as described in the privacy notice. This section forms the data-processing agreement between us.

We process workspace content for the duration of the service and the retention needed to end it. Processing includes receiving, storing, organizing, displaying and delivering email, notes and attachments, and carrying out the AI features and agent connections you authorize. Data can include names, contact details, message content, files and instructions concerning your users, customers and other correspondents. Your use, settings and authorized actions are documented instructions. An authorized representative can send further instructions to hello@pipp.so. We will tell you if we believe an instruction infringes applicable data-protection law. If law requires other processing, we will inform you unless prohibited.

We limit access to people who need it and are bound by confidentiality, and apply technical and organizational security measures appropriate to the risk. These include authenticated access, workspace permissions, HTTPS connections to Pipp's app and agent interface, and controls over connected agents. We will notify you of a personal-data breach affecting your workspace as quickly as possible after becoming aware of it. A notification does not itself establish fault. We will assist with data-subject requests, security duties, impact assessments and regulatory enquiries, taking into account the nature of the processing and the information available to us.

We will provide the information needed to demonstrate compliance with these processing terms. If it is insufficient, or law or a supervisory authority requires it, you or an independent auditor bound by confidentiality may audit our compliance, including by inspection. Routine audits require 30 days' written notice, take place during business hours and no more than once in twelve months, and are at your cost. We protect other customers' information during audits. These arrangements do not restrict audits or assistance required by law, following a relevant personal-data breach or at an authority's request. Any additional assistance costs must be reasonable, agreed in advance and permitted by law; they cannot delay mandatory compliance.

You generally authorize our service providers identified in the privacy notice for the features you use. We will notify you before adding or replacing a provider that processes your workspace personal data, giving you an opportunity to object on reasonable data-protection grounds. If we cannot resolve the objection, you can stop the affected feature or end the service. We require appropriate processing and confidentiality obligations from our subprocessors and remain responsible for them as applicable law requires. Cross-border processing must use the safeguards required by applicable law; these terms do not promise Swiss or EU-only processing.

At the end of processing, we will return or delete customer personal data at your choice and delete remaining copies unless law requires retention. Contact us before closing the workspace to arrange any required return. If we end the service, we will give you a reasonable opportunity to choose and arrange return before deletion. We use a reasonable secure method and a commonly used format; no custom migration is included. The beta has no self-service account export. Recovery copies follow the retention described in the privacy notice and must not be used for other purposes. Account, security and audit records retained for Telesoft's separate lawful purposes follow their disclosed retention. These processing obligations continue while we hold customer personal data.

Applications acting for you

You choose which application to connect, which workspaces it can access and what it can do. Workspace permissions cover all current and future inboxes in the selected workspace. Depending on the grant, an application can read messages, attachments, internal notes, saved summaries and your private reply and note drafts. It can also send replies, write notes or change settings for you.

Your business is responsible for the applications it authorizes and the instructions and permissions it gives them. A grant can cover ongoing work. Routine actions within that grant do not require a new Pipp approval each time. Pipp still checks your current role and saved permissions. Workspace deletion and ownership transfer require the actual Owner's confirmation in Pipp. Your host may ask for its own confirmations.

Review the permissions and the host's privacy and sharing settings before connecting. The host receives the data returned to the agent and applies its own terms and policies. We do not control the host's processing, retention or availability. Telesoft remains responsible for its own obligations under these terms. The liability section governs any exclusion or limit on damages. Connecting an agent does not enable Pipp's own AI features.

Private drafts, activity and removing access

Your reply and note drafts are private to you. Pipp and applications you authorize edit the same draft for your account. Teammates can see that you have a reply draft, but cannot read its unsent text. An authorized agent can edit or discard those drafts. Pipp records the person and connection involved in agent actions, including reply preparation and sending. Attribution on sent replies and posted notes appears inside Pipp; Pipp adds no automatic external-agent disclosure to the customer's email.

You can reduce or revoke your connection's permissions in Connected agents. A workspace Owner or Admin can remove a connection's access to that workspace. Removing access prevents new actions under that grant. It does not erase your saved draft, earlier messages, notes or activity, or copies already received by the host.

A reply awaiting its first provider dispatch is held for human review if the connection loses permission while the person remains authorized. It is cancelled if the person no longer has the required workspace permission. Removing access cannot recall mail already accepted by an email provider. Work Pipp already committed, such as domain setup, may still finish.

AI and agent risks: human oversight required

AI can confidently invent facts, omit important details, mistranslate messages, or produce misleading, unsafe, discriminatory or infringing content. Summaries, translations and suggested replies can change the meaning of the original. They are not professional advice or a substitute for your own review. We do not guarantee that an output is correct, complete, lawful or suitable for your purpose.

Messages, attachments and other material can contain malicious instructions that mislead an agent. An agent can misinterpret your instructions, disclose confidential information, send to the wrong recipient or make unintended changes within its permissions. A standing grant can allow actions without a new Pipp confirmation. Revocation cannot undo accepted sends or retrieve copies already shared with a host.

Some AI features run automatically, for example when a new message arrives. Models and providers can change, and the same request can produce different results. Administration grants carry particular risk. Depending on its grant and your role, an agent can change membership roles, AI settings, forwarding, domains and tracking, block or unblock senders, remove suppressions, or import mail Pipp had set aside.

Do not assume that outgoing email tells recipients that AI or an agent was involved. Your business is responsible for disclosures and consent required by law for its communications and any email tracking it enables. This does not transfer Telesoft's own legal duties to you.

Your business chooses whether to use AI and agents and must provide appropriate human supervision. Check important outputs against the original material, including facts, recipients, attachments and requested changes, before relying on them or allowing further action. Give agents only the access they need. Do not grant unattended sending or administration permissions if you cannot accept the consequences of an error.

Keep independent copies of important source records and a way to continue essential work if Pipp or an AI provider is unavailable. Pipp is not a backup or archival service. Do not rely on it for emergency, safety-critical, medical, legal, financial or other high-stakes decisions requiring qualified professional judgment.

Changes, suspension and leaving

You can stop using Pipp at any time. Workspace Owners can use the available closure controls or contact hello@pipp.so to end the workspace's service and arrange data handling. Removing one person's account or agent access does not delete the business's workspace content. Deletion and recovery follow the privacy notice and the processing terms above.

We may suspend or end access for unlawful use, a material breach, a security threat or a legal requirement. We will explain and allow a reasonable chance to resolve the issue where practical. We may act immediately when needed to protect people, data or the service, or to comply with law.

We will give at least 30 days' notice before planned permanent closure of the whole service or termination of your business's service without cause. This is a notice commitment, not a guarantee of uninterrupted availability during that period. Individual features and limits may change as described above. Urgent legal or security action, or action for unlawful use or material breach, may be immediate. Our obligations concerning your data continue.

We will give the workspace's Owner or an agreed business contact at least 30 days' notice of material changes to these terms. Urgent legal or security changes may take effect sooner, with notice as soon as practical. Changes apply prospectively; where acceptance is required, we will ask for it. If you do not agree, you can stop using Pipp and arrange closure before the change takes effect. Paid AI always needs the separate opt-in described above.

Your responsibility and third-party claims

Your business is responsible for its content, instructions, lawful processing and authorized users and applications. You must have the rights needed to submit content and send communications.

Your business must pay Telesoft for reasonable amounts Telesoft owes to a third party and reasonable necessary defence costs, but only to the extent caused by your business's breach of these terms or law, or intentional or negligent misuse by your business or its users, including misuse through an application you authorize. This does not apply to the extent the loss was caused by Telesoft or its providers breaching these terms or law. We will notify you promptly, let you participate in the defence and obtain your consent before agreeing to a settlement that creates a payment obligation for you. You must not unreasonably withhold that consent.

These terms create contractual rights only for your business and Telesoft. They do not restrict any third party's statutory rights, including data subjects' rights against either of us.

Warranty exclusions and liability

To the fullest extent permitted by law, Pipp and its AI features are provided as is and as available, without express or implied warranties of accuracy, completeness, availability, fitness for a particular purpose or non-infringement. We do not guarantee uninterrupted or error-free operation, email delivery, preservation or recovery of every record, or any particular business result. No uptime, support-response, automatic-export or compensation commitment is included.

To the fullest extent permitted by law, Telesoft excludes liability for loss or damage arising from or connected with the service supplied without charge, including loss caused by ordinary negligence. This exclusion covers claims in contract, tort or otherwise, including direct loss, lost data, missed or misdirected messages, AI or agent errors, loss of profit or revenue, business interruption and indirect or consequential loss.

To the extent permitted by law, these exclusions also cover liability for the people and providers we use to provide Pipp. Any responsibility that data-protection law requires us to retain for a processor we engage remains.

Your chosen connected applications and their hosts, your own mail systems and recipients' systems are separate services. We do not provide them or control their acts, retention or availability. This does not exclude Telesoft's responsibility for its own service or providers where law requires it.

If a court finds that the exclusion above cannot apply but a limitation is lawful, Telesoft's total liability for all claims connected with the service supplied without charge is limited to CHF 100. This is a fallback limit, not a promise of compensation. If a provision is invalid, the remaining provisions continue to the extent permitted by law.

These exclusions and limits do not apply to intentional misconduct, gross negligence, death or personal injury, mandatory product liability, or any other liability that cannot lawfully be excluded or limited. They do not remove or reduce the processing obligations above, Telesoft's mandatory data-protection duties or data subjects' rights. Liability to your business for breach of those obligations is excluded or limited only as far as the law permits. A service being free does not remove those duties or rights.

Any future paid AI features require your separate opt-in and the applicable commercial terms presented before purchase. These free-service exclusions do not by themselves set the liability terms for future paid features.

Law, disputes and language

Swiss substantive law governs this agreement. Subject to mandatory jurisdiction rules, the courts at Telesoft AG's registered office in Switzerland have exclusive jurisdiction. Contact hello@pipp.so first so we can try to resolve a dispute. English is the authoritative language of these terms; any translation is provided for convenience.

Terms version

2026-10-22. Effective from publication on 22 October 2026.