Terms of Service

1 Agreement, eligibility, and business use

These Terms are a binding agreement between you and Roman Shostak LLC, Sharjah Media City (Shams), Sharjah, United Arab Emirates (commercial licence no. 2429518.01), which operates the Service as ZSetup (“ZSetup”, “we”, “us”). You must be at least 18, be able to form a binding contract, and have authority to use and connect the relevant Zoho CRM account.

The Service is offered to businesses and professionals for use in their trade, business, or profession — it works on a Zoho CRM account, which is a business system. It is not offered for personal, family, or household purposes, and by using it you confirm that you are not acting as a consumer. If you use the Service on behalf of an organization, you represent that you are authorized to bind that organization, “you” includes it, and it is responsible for every account and user acting under it.

2 The Service

The Service is a personal AI assistant in a Chrome side panel, whose tools you can also use from a third-party AI client through the MCP connector (section 6). It works through a curated set of actions against your Zoho CRM: reading and searching records, creating and updating them, adding notes and tags, reassigning ownership, converting Leads, and sending email logged against a record. Those actions cover your standard and custom modules. The Service's record-delete tool moves records to your Zoho recycle bin rather than permanently deleting them. Zoho normally keeps them there for 60 days, and the Service — or you, from Zoho directly — can restore eligible records while they remain there and your Zoho permissions allow it. Once records are permanently removed, when that window ends or earlier if the recycle bin is emptied, the Service cannot restore them. In the side panel, record deletions ask for your final confirmation by default. Under Full access, you may choose to skip that confirmation for recoverable actions, including record deletions within the 60-day window and changes to more than 20 records. In the side panel, sending email; creating or cloning a module, including a linking or history module created as part of a field change; changing field encryption, profile permissions, or sharing properties; enabling or disabling picklist history; converting a field to use a global picklist; and any supported permanent configuration deletion always require final confirmation. Disabling picklist history can permanently delete its history module and data; global-picklist conversion can permanently replace field data or configuration. Other supported record and CRM configuration changes follow the permission mode you select. Permission modes and final confirmations apply to the side panel; the MCP connector has neither, as section 6 explains. We grant you a limited, revocable, non-exclusive, non-transferable right to use the Service for lawful CRM work under your selected plan.

The Service is an evolving product. We may add, change, limit, or remove actions, models, and features at any time, and some capabilities may be offered in a preview or early form. The assistant also keeps notes, called Knowledge, about your CRM's configuration, your organization's processes, work it has done, and your working preferences, and can search your own past conversations to recall earlier work, and AI clients you connect can use Knowledge too (section 6); the Privacy Policy describes what is kept and who can see it. Independent product by zsetup; not affiliated with or endorsed by Zoho Corporation. ZSetup does not act for Zoho Corporation. Your Zoho CRM account, its data, its API, its recycle bin, and its retention behaviour are governed by your agreement with Zoho, which we do not control.

3 Accounts, Zoho access, and responsibility for activity

Keep your password and signed-in devices secure, provide accurate account information, and notify us promptly of suspected compromise. You authorize the Service to access and act on your connected Zoho CRM account within the OAuth scopes you grant, the permission mode you select in the side panel, and the tools you enable for AI clients. You can disconnect or revoke that access at any time.

You are responsible for all activity that occurs under your account and your connected Zoho CRM account, whether carried out by you, by someone using your credentials, by the assistant acting on an instruction, approval, or permission mode you gave it, or by an AI client you connected. Every CRM action the assistant performs, and every tool call an AI client you connected makes, is performed on your behalf, using your Zoho access, as your agent. We do not review, and are not a party to, the instructions you give.

4 Acceptable use

You must not use the Service to:

• break the law, violate privacy, or infringe another person's rights;
• access CRM data or accounts you are not authorized to use;
• send malware, disrupt the Service, probe for vulnerabilities, evade usage limits, or interfere with another customer;
• automate harmful, deceptive, discriminatory, or abusive activity;
• send unsolicited or unlawful email, or email that violates Zoho's policies or the laws that apply to you; or
• resell, reverse engineer, or reproduce the Service except where law permits.

You must also comply with Zoho's terms and policies for your CRM account and with the usage policies of the model providers named in the Privacy Policy, to the extent they apply to content you submit.

5 AI output, CRM actions, and your responsibility

The Service uses large language models. AI-generated answers, field mappings, summaries, record matches, and proposed actions can be incomplete, outdated, misdirected, or wrong, and can act on the wrong record, the wrong field, or more records than you intended. You are responsible for reviewing output and for ensuring every CRM action is accurate, authorized, and appropriate before approving or relying on it. You are the decision-maker for every change; the Service is a tool that carries out your decisions. When you use the MCP connector, the language model is your AI client's, not ours, and the same responsibility applies to the tool calls it makes.

In the side panel, the default permission mode requires your approval for each CRM write and shows the proposed change. If you enable Full access, you accept that supported writes run without an approval card and that you will see what happened after, not before; you enable it at your own risk. Record deletions and changes to more than 20 records require final confirmation unless you enable the recoverable-action skip setting under Full access. Sending email; creating or cloning a module, including implicit linking or history modules; changing field encryption, profile permissions, or sharing properties; enabling or disabling picklist history; converting a field to use a global picklist; and supported permanent configuration deletions always require your explicit approval, which cannot be skipped by that setting. Other supported field and saved-view changes follow your permission mode. An approval you give is your instruction to perform that action.

Knowledge is not a CRM write: the assistant saves and edits its Knowledge notes without an approval card in every permission mode, including Chat only, because that changes nothing in Zoho. The same applies to Knowledge changes an AI client makes through the MCP connector (section 6). Its history lets you restore earlier versions. Knowledge is written by an AI model, so it can be incomplete, outdated, or wrong.

The Service is not legal, financial, medical, employment, or other professional advice, and must not be used as the sole basis for consequential decisions.

6 AI clients and the MCP connector

The MCP connector lets an AI client you choose — such as Claude, ChatGPT, Codex, or Cursor (an “AI client”) — call the Service's Zoho CRM tools and, while you allow it, its Knowledge tools on your behalf through the Model Context Protocol. You connect an AI client by signing in to the Service and allowing that client on our authorization page; you can disconnect it at any time, as the Privacy Policy describes. Connecting does not by itself entitle you to tool calls: they need a plan that includes the MCP connector (section 8). AI clients are third-party products. ZSetup is not affiliated with, endorsed by, or acting for the providers of these AI clients, and names them only to identify them. Their providers' own terms and policies govern your use of them and what they do with the data they receive, including CRM data, Knowledge, and conversation text our tools return to them. We do not operate or control any AI client and are not responsible for its behaviour, availability, or handling of data, or for your agreement with its provider.

The MCP connector has no approval cards, permission modes, or final confirmations. Your AI client can call only the tools the MCP connector offers that are enabled in your tool selection. Every tool is enabled by default; you can switch off individual tools and any capability except the read-only one (reading CRM data and setup). Your AI client, and the settings you choose in it, decide whether you are asked before a tool call runs; in a mode that runs tool calls automatically, a call — including sending email, creating or changing records, changing CRM setup or users' access, deleting records, or permanently deleting configuration — can run without you seeing it first. The tools keep the safeguards built into them: record deletion only moves records to your Zoho recycle bin, and supported permanent configuration deletions check the item's identity and dependencies first. Nothing on the MCP connector asks you to confirm a call.

Knowledge. While the memory capability (“Remember context across chats”) is enabled, your AI client can also read, search, write, edit, move, delete, and restore Knowledge notes — your personal knowledge and the organization knowledge available to your Zoho profile — and can search and read your own earlier side-panel conversations, including their titles, dates, message text, and summaries of the CRM actions the assistant ran. These calls run without any approval or confirmation. Knowledge your AI client writes to organization knowledge is visible to colleagues connected to the same Zoho organization with the same Zoho profile, and the assistant uses it in their conversations. Each change is recorded with your Zoho name (or email address) and the name the AI client presents. You can switch the memory capability off on the AI clients page of our website.

We do not review tool calls before they run. A tool call made through an AI client you connected is your instruction, whether you asked for it, your AI client chose to make it, or it was prompted by text inside a CRM record, email, web page, file, or other content your AI client read. Content of that kind can try to direct an AI client to do something you did not intend. You are responsible for which AI clients you connect, which tools you enable, how you configure your AI client, and reviewing what it does. Switching off tools you do not need and keeping your AI client's approval prompts on reduce that risk. Tool calls, including Knowledge calls, can use your Zoho organization's API allowance. We are not responsible for Zoho limits, throttling, or charges that result, and the limits in section 8 are separate from Zoho's.

7 Your data, backups, and data loss

You retain rights in data you submit or connect. You grant us the limited permission needed to host, transmit, and process it to provide, secure, and support the Service. You are responsible for having a lawful basis to process CRM and page content, for the instructions you give the assistant, and for the personal data of your own customers and contacts that the assistant handles on your behalf. Organization knowledge is visible to colleagues connected to the same Zoho organization with the same Zoho profile, and you are responsible for what you ask the assistant, or let an AI client you connected, keep in it. Our handling is described in the Privacy Policy.

Your CRM is your system of record, and you are responsible for backing it up. Apart from the Knowledge notes described in the Privacy Policy, which by design hold your CRM's configuration and not the contents of its records, the Service does not keep copies of your Zoho CRM data beyond what a conversation or tool call needs, cannot restore data that Zoho has permanently removed, and is not a backup, archival, or recovery service. Zoho offers its own backup and export features; keep backups appropriate to the value of your data before letting any tool — including this one — change it. To the maximum extent permitted by law, we are not liable for any loss, corruption, alteration, or deletion of CRM data, page content, or other data, including where it results from an action you instructed, approved, or enabled the assistant to perform, from a tool call made by an AI client you connected, from AI error, or from the behaviour of Zoho, an AI client, or another third-party service.

8 Plans, billing, and cancellation

Each plan includes a weekly usage allowance for the side panel, measured by the computing cost of the requests you make rather than by a fixed number of messages, because the cost of a request depends on the work it does. A usage week begins with your first request and runs for seven days; once it ends, a new week begins with your next request. Reaching the allowance pauses new requests until the week resets — we do not charge overage. Current approximate request equivalents for each plan are published on our pricing page.

A new account begins on a 14-day free trial of Plus, with that plan's weekly allowance and without a card. Nothing is charged during the trial, and because we hold no payment method it cannot convert into a paid subscription on its own. When the 14 days end the account moves to Free and keeps working on the smaller weekly allowance — you are never locked out for declining to subscribe. Starting a paid subscription, before or after the trial ends, is your choice and is made in Stripe.

Free provides its weekly allowance without a card. Plus ($23 per month), Pro ($94 per month) and Max ($500 per month) are monthly subscriptions billed by Stripe; each paid plan grants 5 times the weekly allowance of the plan before it. The subscription period and the usage week are separate, so a plan renewal does not reset a usage week. Taxes may apply. Paid subscriptions renew until canceled in the Stripe billing portal and remain available through the paid billing period unless Stripe ends access earlier for payment or policy reasons. Organizations that need more than Max can ask our sales team for a separate written quote.

Legacy MCP subscriptions. The MCP plan ($9 per month) is no longer offered to new subscribers. An existing MCP subscription continues at its current price, renews, and can be managed or canceled in the Stripe billing portal until it ends; it includes the MCP connector and gives the side panel the Free plan's weekly allowance.

MCP connector. Plus, Pro and Max, and the 14-day trial of Plus, include the MCP connector with the same limits on every plan — a higher plan does not allow more tool calls. Free does not include it, and tool calls from an account without it are refused. CRM tool calls are metered; Knowledge tool calls are not. Each plan that includes the MCP connector allows 10,000 metered tool calls per billing period — the current subscription period of a paid plan, or the trial itself. An account can start no more than 120 metered tool calls in any 60 seconds, and run no more than 8 tool calls of any kind at the same time across all its AI clients. A metered call counts once it is admitted for processing, whatever happens next — even if validation or a safety check then refuses it, it fails, or its outcome is uncertain. Calls refused before admission (for example because the tool is switched off, the plan does not include the MCP connector, or a limit was reached) do not count, and neither do connecting an AI client or listing the available tools. If a trial converts into a subscription before it ends, tool calls already made during the trial count toward the first paid period. Reaching the allowance pauses metered tool calls until the next billing period starts; we do not charge overage, and unused tool calls do not roll over.

You can switch between Plus, Pro and Max on the billing page. A switch takes effect immediately, and Stripe prorates it: a credit for the unused time on the plan you leave and a charge for the rest of the billing period on the new plan appear as lines on your next invoice, and nothing is charged at the moment you switch. If the credit is larger than the charge, the difference is applied to later invoices. Choosing Plus during the trial keeps the remaining trial days and first charges when they end, unless 48 hours or less of the trial remain, in which case the subscription starts and is charged immediately. Choosing Pro or Max during the trial ends the trial and starts a paid subscription that is charged immediately. Cancellation, including moving to Free, takes effect at the end of the paid billing period.

Unused weekly allowance does not roll over. Usage beyond the allowance in a given week — which can occur because a request's cost is only known once it completes — is deducted from the following week. Except where law requires otherwise, charges already paid are non-refundable. We will present material price or allowance changes before they apply to a future billing period.

9 Availability, security, and changes to the Service

The Service depends on Zoho, model providers, AI clients, Stripe, email, hosting, and network services we do not control. We may maintain, improve, suspend, or change the Service and its supported actions. No service-level agreement applies unless we agree to one in writing. We will use reasonable notice for a material reduction to a paid plan when practical.

We apply the security measures described in the Privacy Policy. No online service can prevent every attack, and you acknowledge that unauthorized access, interception, tampering, malware, denial of service, or other malicious acts by third parties can occur despite reasonable safeguards. To the maximum extent permitted by law, we are not liable for loss or damage caused by such acts of third parties, by compromise of your own credentials or devices, or by a security failure of Zoho, a model provider, or another service we do not operate, except to the extent the loss is directly caused by our failure to apply the measures the Privacy Policy describes. Nothing in this section limits any duty we have under applicable law to notify you of a security incident.

10 Disclaimers

To the maximum extent permitted by law, the Service is provided “as is” and “as available,” without warranties of any kind, express or implied, including warranties of accuracy, reliability, uninterrupted or error-free operation, security, merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that AI output will be correct, that the assistant will act on the records you intended, that any action can be reversed, that an AI client will call the tools you intended, or that Zoho, model providers, AI clients, Stripe, or any other third-party service will be available or behave as expected. No advice or information you obtain from us or through the Service creates a warranty not stated in these Terms.

11 Limitation of liability

To the maximum extent permitted by law, ZSetup and its owners, officers, employees, and contractors will not be liable for any indirect, incidental, special, consequential, punitive, or exemplary damages, or for any loss of profits, revenue, business, goodwill, or anticipated savings, loss or corruption of data, cost of substitute services, or business interruption, however caused and under any theory of liability, even if advised of the possibility. This includes, without limitation, loss arising from an action the assistant performed on your instruction, approval, or permission mode, or that an AI client you connected performed through the MCP connector; from inaccurate or unintended AI output; from records that could not be recovered; from unauthorized access or other acts of third parties; and from the acts, omissions, or unavailability of Zoho, model providers, AI clients, or other third-party services.

To the maximum extent permitted by law, our total aggregate liability for all claims arising out of or relating to the Service or these Terms in any twelve-month period will not exceed the greater of the amount you paid us for the Service in that period or US $100. The exclusions and limits in these Terms apply together and to every kind of claim, allocate risk between us in a way the pricing reflects, and survive even if a remedy fails of its essential purpose. They do not exclude or limit liability that cannot be excluded or limited under applicable law, such as liability for fraud, willful misconduct, or gross negligence, or for death or personal injury caused by negligence.

Any claim arising out of or relating to the Service must be brought within one year after the event giving rise to it, unless applicable law requires a longer period.

12 Indemnification

You will defend, indemnify, and hold harmless ZSetup and its owners, officers, employees, and contractors from and against any claims, demands, losses, liabilities, damages, penalties, and expenses (including reasonable legal fees) brought by a third party — including your organization, your customers, your contacts, your employees, Zoho, or a regulator — arising out of or relating to: your use of the Service; the instructions, approvals, and permission modes you give the assistant, the AI clients you connect and the tool calls they make, and the CRM actions performed as a result; data you submit, connect, or cause the Service to process, including your customers' personal data; email sent through the Service; your breach of these Terms, of Zoho's terms, or of applicable law; or your lack of authority to act for an organization or on a Zoho CRM account. We may take over the defence of any claim you are indemnifying, at our option, and you will cooperate reasonably.

13 Suspension and termination

You may stop using the Service, cancel a paid plan, or delete your account at any time. We may suspend or terminate access, with or without notice, for a material breach, security risk, unlawful use, non-payment, or risk to other users or the Service, and we may discontinue the Service on reasonable notice. Sections that by their nature should survive termination — including payment obligations, responsibility for activity, disclaimers, limitation of liability, indemnification, and general terms — will survive.

14 Changes to these Terms

We may update these Terms from time to time. The current version is always published at this page with its effective date at the top. For a material change we will give notice before it takes effect — by email to the address on your account, by a notice in the Service, or both — and for a change that reduces your rights we will give at least 14 days' notice where practical. Continuing to use the Service after the effective date of an updated version means you accept it; if you do not, stop using the Service and delete your account before that date. The version in effect when you created your account is recorded against it, so it is always possible to establish which terms you accepted.

15 General terms, governing law, and contact

Force majeure. We are not liable for any failure or delay caused by events beyond our reasonable control, including acts of third parties, outages or changes at Zoho, a model provider, or an AI client, internet or hosting failures, attacks, strikes, governmental action, or natural events.

Entire agreement; severability; waiver; assignment. These Terms and the Privacy Policy are the entire agreement between you and ZSetup about the Service and replace any prior understanding. If any provision is held unenforceable, it will be enforced to the maximum extent permitted and the remaining provisions will remain in full effect; in particular, each exclusion and limit in sections 6, 7, 9, 10, 11, and 12 is separate and severable. A failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; we may assign them to a successor of the Service. Nothing in these Terms creates a partnership, employment, or fiduciary relationship, and no third party has rights under them except the indemnified persons named above.

Governing law and forum. These Terms are governed by the laws of the Emirate of Sharjah and the federal laws of the United Arab Emirates, without regard to conflict-of-law rules, and any dispute will be brought exclusively in the courts of the Emirate of Sharjah, United Arab Emirates, except where applicable law gives you a non-waivable right to bring proceedings in your local courts. Before starting proceedings, you agree to contact us and give us 30 days to try to resolve the matter informally.

Notices and contact. We may give you notice by email to your account address or through the Service. Questions or notices to us may be sent to support@zsetup.com.