(Legal)

Terms of Service

Effective 20 October 2026 · Tolla, operated by Dmitrii Russu, 8006 Zürich, Switzerland

These terms govern the use of Tolla, a service that shows companies the economics of their free tier: what free users cost, which of them convert and which accounts probably belong to the same person. They form a contract between you (the company that creates an account, "you" or "the Customer") and Dmitrii Russu, trading as Tolla, Stapferstrasse 3, 8006 Zürich, Switzerland ("Tolla", "we" or "us").

By creating an account or using the service you accept these terms on behalf of your company, and you confirm that you are allowed to bind it.

1. Business customers only

Tolla is offered only to businesses, for use in their trade or profession. It is not offered to consumers. When you sign up you confirm that you act for a business. If you use Tolla for a company, that company is the Customer.

2. The service

Tolla receives data your product sends to it (through our SDKs, API, browser snippet or OpenTelemetry), reads your Stripe data with a read-only key you provide, and turns this into analyses: cost and revenue per user and segment, likely duplicate accounts, opportunities and reports.

Tolla observes and reports. When it proposes a change to your free tier, the change first runs in shadow mode: Tolla works out on your data what the change would have done, and nothing changes for your users.

A change applies to your users only after you turn it on. From then on, your product asks Tolla, through our SDK or your own code, what the rule you approved says for each user, and your product applies the answer. Tolla never changes your product, your prices or your Stripe account itself. You choose and approve each change, you can stop it at any time, and you remain responsible for what your users experience and for telling them about it, for example in your own terms or pricing page. If Tolla cannot be reached, our SDK lets the request through as if no change were on.

Any action you take based on Tolla, such as changing your free tier, limiting usage or blocking accounts, is your decision and your responsibility.

We develop the service continuously. We may change, add or remove features, as long as the core purpose of the service stays the same. We will tell you in advance about changes that significantly reduce what the service does.

3. Free for your first 3 months

Your first 3 months of Tolla are free of charge, counted from the day you create your account. Features may be marked as beta and may be less reliable. Before your free months end, we will ask whether you want a paid plan; you only pay if you choose one. We will tell you the price at least 30 days before you would first pay. Fees, payment terms and any refund promise are agreed when you choose a plan.

4. Your account

You must give accurate information when you sign up and keep your password and API keys secret. Secret API keys belong on your servers only. You are responsible for everything done with your account and keys, and you must tell us at dmitrii@russu.net without delay if you think they have been misused.

5. Your data and data protection

You keep all rights to the data you send to Tolla ("Customer Data"). You give us the right to process it only to provide, secure and support the service for you, as described in these terms.

Where Customer Data includes personal data, you are the controller and we are your processor. Our Data Processing Agreement applies and is part of these terms.

You are responsible for:

  • having a lawful basis for sending us the data and for the analyses you ask for;
  • informing your users, in your privacy policy, that you use a service like Tolla to analyse usage, costs and duplicate accounts;
  • if you use our browser snippet: using it only after sign-ups and sign-ins, as a security measure, listing the _tolla_id cookie in your cookie notice and, where the law requires it, obtaining your visitors' consent, which the optional device fingerprint needs in the EU;
  • sending only the data the service needs.

You must not send us:

  • special categories of personal data, such as health data (including protected health information under HIPAA), data about racial or ethnic origin, religion, political opinions, biometric or genetic data, sex life or criminal records;
  • payment card numbers or bank account credentials;
  • content of your users' prompts, files or messages in readable form (the optional content signals accept only salted hashes);
  • data about children under 16, if you know your users are children (or under 13, for users in the United States);
  • data you collected without giving the notices or getting the consents the law requires.

We may use anonymous, aggregated statistics about how the service is used (for example the number of events processed) to run and improve it. These statistics do not identify you or any person.

6. How to read the results

Tolla's figures are estimates based on the data it receives. Links between accounts are probabilities, not proof that two accounts belong to the same person. Opportunities and savings are hypotheses to test, not promises. Tolla gives no legal, tax or financial advice.

A change you turn on keeps a control group of your users on today's free tier, so its effect can be measured, and it stops by itself if their conversion falls clearly below the control group's. This is a safety net, not a promise that a change can do no harm.

Decisions about your users are yours. If you act on a link or a score in a way that significantly affects a person, for example by closing their account, make sure a person reviews it and that the person concerned can explain themselves, as data protection law may require. Please check important results yourself before acting on them, and treat your users fairly.

7. Acceptable use

You must not:

  • use the service in breach of the law, including data protection and anti-discrimination law;
  • use it to target, track or profile people for purposes other than understanding and protecting your own product's free tier;
  • attempt to access other customers' data, test the service's security without our written permission, or disrupt it;
  • overload the service on purpose, or get around its limits;
  • copy, resell or rebuild the service, or reverse engineer it except where the law allows.

8. Third-party services

The service connects to services you choose, such as Stripe or your AI providers. Their terms apply to your use of them, and we are not responsible for them. You can disconnect them at any time.

9. Availability and support

We aim to keep Tolla available around the clock, but during the free phase we give no guarantee of availability. We may interrupt the service for maintenance, preferably at quiet times, and for urgent security reasons. Support is by email at dmitrii@russu.net.

10. Intellectual property

The service, the software, our SDKs (apart from their open-source licences), the documentation and the Tolla brand belong to us. You receive a non-exclusive, non-transferable right to use the service for your business while your account exists. If you send us feedback, we may use it freely to improve the service.

11. Confidentiality

Each party keeps the other's non-public information confidential and uses it only for this contract. This does not apply to information that is public without a breach, was already known, or must be disclosed by law or by order of an authority. The obligation lasts three years after the contract ends, and for trade secrets as long as they remain secret.

12. Warranty

We provide the service with reasonable care and skill. As far as the law allows, we give no further warranties, in particular not that the service is free of errors or uninterrupted, or that its results fit a particular purpose. This is especially so while the service is free.

13. Liability

We are liable without limit for damage we cause intentionally or through gross negligence, and for personal injury.

For any other damage, our liability is excluded as far as the law allows. Where it cannot be excluded, it is limited to the fees you paid us in the 12 months before the damage occurred, or CHF 100 if the service was free. We are not liable for indirect or consequential damage, such as lost profit, lost revenue or lost data, for decisions you take based on the service, or for the acts of auxiliary persons, as far as the law allows.

You are liable to us for damage caused by your breach of these terms, in particular sections 5 and 7, and you hold us harmless from third-party claims arising from data you sent in breach of section 5.

14. Suspension

We may suspend access to the service, entirely or for one key or workspace, if this is necessary to protect the service, other customers or people whose data is processed, for example after a security incident, a serious breach of sections 5 or 7, or misuse of a key. We tell you beforehand where we can, and lift the suspension as soon as the reason has gone.

15. Term and termination

The contract runs for an indefinite period. You can end it at any time by closing your workspace or writing to dmitrii@russu.net. We can end it with 30 days' notice by email, or immediately for good cause, for example a serious breach of sections 5 or 7.

16. Your data when you leave

You can ask for an export of your Customer Data at any time, including to switch to another provider. We provide it within 30 days in a common machine-readable format (JSON or CSV), free of charge. After the contract ends, your data stays available for export for 30 days; we then delete it as described in the Data Processing Agreement, unless the law requires us to keep it. These rights also meet the switching rules of the EU Data Act for customers in the EU. Our infrastructure is in Frankfurt, Germany, run by providers based in the United States (see Subprocessors).

17. Changes to these terms

We may change these terms for good reasons, such as new features, legal requirements or the introduction of paid plans. We will email you the changes at least 30 days before they take effect. If you do not agree, you can end the contract before then; if you keep using the service after that date, the new terms apply.

18. Final provisions

These terms, the Data Processing Agreement and any separately agreed order form are the whole agreement between us. If a provision is invalid, the rest remains in force and the invalid provision is replaced by a valid one that comes closest to its purpose. You may transfer the contract only with our written consent. Notices are given by email to the addresses we each use for the account. These terms are written in English, and the English version is binding.

These terms are governed by Swiss law, excluding its conflict-of-law rules and the United Nations Convention on Contracts for the International Sale of Goods. The courts at our seat in Zürich, Switzerland, have exclusive jurisdiction, subject to an appeal to the Swiss Federal Supreme Court.