NET Genium Online - License terms

License terms of the NET Genium Online service

These license terms govern the rights and obligations between NetGenium s.r.o., with its registered office at Za Zámečkem 1037/1b, 158 00 Prague 5, Czech Republic, identification number 27092381, tax ID CZ27092381, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Entry 95657 (the “provider”), and the customer who registers and uses an instance of the NET Genium Online service (the “service”).

By registering an instance and confirming the activation link, the customer accepts these terms and enters into a contractual relationship with the provider.

The free plan — an instance with a single user — may be used by anyone, businesses and consumers alike. Paid operation is intended exclusively for businesses: credit may only be ordered by a natural or legal person using the service in the course of their business activity, and the customer confirms this condition in the order. A consumer may therefore use the service within the limits of the free plan, but cannot order credit. A consumer must be at least 18 years old.

Registration and formation of the contract

An instance is created through the registration form on the provider's website, where the customer chooses an identifier for their instance, an e-mail address, the database character set, the time zone and the date format — all of these details are required. The character set is a permanent property of the database and cannot be changed once the instance is created; the time zone and the date format can be changed later in the instance settings.
The provider sends an activation link valid for 24 hours to that address. Without confirming it, no instance is created and no data is stored.
The instance is created at identifier.netgenium.online and has its own database, separated from all other instances.
One active instance can be registered per e-mail address. Once an instance is deleted, the address becomes available for a new registration again.
The customer is responsible for the accuracy of the data entered during registration and for the security of the administrator credentials sent after activation. We recommend changing the password immediately after the first sign-in.

Scope of the service

The service includes the NET Genium platform tools for designing and running applications in a browser — edit forms, view pages, the database query designer, the script designer, print templates, reports, access control and change history. The number of applications, forms and records is not limited.

The service further includes:

Building applications with AI — the customer describes in their own words what they need to keep track of and the service creates an application from that description, including forms and view pages. The description of the request and the structure of the resulting application are passed to a language model provider; who that provider is and on what terms is set out in the Processing of Personal Data section.
The MCP server — allows an external AI assistant to be connected to the instance (Claude Code, Codex, Microsoft Copilot Studio or any other tool supporting the MCP protocol). Access is authenticated with a personal MCP token that the customer generates in their instance. A token with read or write permission makes the instance data available to the external tool; a token of a user with administrator rights additionally makes available the description of the structure of the applications of the instance and the knowledge of the NET Genium framework. The customer is responsible for issuing the token, for the scope of its permissions and for storing it securely, as well as for any processing they arrange by means of that tool.

The service does not include the following platform capabilities, which are available only with a full installation of NET Genium:

external functions — custom application logic in C#,
scheduled tasks running on the server,
accompanying Windows services,
importing application groups from another instance,
operation on the customer's own infrastructure and integration with internal systems on the corporate network,
contractual support and guaranteed availability (SLA).

A detailed description of the service is provided on the NET Genium Online page.

Price and payment by credit

An instance with a single user is free of charge with no time limit and without entering a payment card. No credit is deducted from it; any credit topped up remains unspent until the number of users grows.
Billing starts with the second user and the price is EUR 10 excl. VAT per user and month. The customer chooses the currency in the order — CZK 250, EUR 10 or USD 12 excl. VAT per user and month.
The credit must be topped up before the number of users grows beyond one. If there is no credit to deduct at the moment the second user is added, the instance switches to read-only mode; topping up the credit restores operation immediately.
Operation is paid for with credit, where one credit corresponds to one user for one month. The customer tops up the credit with any amount, at any time.
Credit may be ordered by a business only — the customer confirms this condition by ticking the box in the order. A customer who does not meet it may use the service only within the limits of the free plan.
The customer orders the credit inside the instance: they choose the number of credits and the currency, fill in their billing details and complete the payment by card in the Stripe payment gateway. Once the payment succeeds, the credit is added immediately; the customer receives the invoice by e-mail and can also download it from the confirmation page.
The customer enters their payment card details directly in the payment gateway — the provider neither sees nor stores them.
VAT is charged in accordance with applicable law. A customer from another EU member state who provides a valid VAT identification number is not charged the tax and the reverse charge mechanism applies; a customer from the EU without such a number is charged Czech VAT. A customer from outside the EU is not charged Czech VAT.
Credit is deducted once a month on the monthly anniversary of the registration, in the amount corresponding to the number of users on the day of the deduction. Users assigned to at least one user group are charged, together with the administrator account.
Nothing is charged automatically to the customer's payment card unless the customer asks for the automatic top-up of credit when placing an order. In that case the card stays saved with the payment gateway provider, which charges it for a top-up of the same size as the last order, no earlier than three days before the credit runs out. If the payment does not go through, the authorization ends and no further attempt is made.
The customer may cancel the automatic top-up at any time — inside their instance, in the credit order form using the “Turn off the automatic top-up” button, or by placing an order without ticking the automatic top-up option. The cancellation takes effect immediately and does not affect the credit the customer already has. Whether the authorization is active is visible inside the instance next to the credit balance.
Credit is prepaid operating time. If it does not cover a whole month on the day of the deduction, the remaining credit is converted into the corresponding part of the month and the instance runs until the end of that part.
The current credit balance and the day up to which the instance is paid for are visible inside the instance. The provider notifies the customer by e-mail before the credit runs out.
Once the credit is exhausted, the instance switches to read-only mode. The data remains accessible and operation resumes immediately after the credit is topped up. Operation also resumes if the number of charged users drops back to one — the instance thereby returns to the free plan.

Storage space

On the free plan the storage space is limited to 100 MB. Once the credit is topped up for the first time, the price includes storage space of 1 GB per user. Both the data stored in the database and uploaded attachments count towards this space. Once it is exhausted, the instance switches to read-only mode — the data remains accessible.

Deleting records does not free up the storage space — the database file keeps the size it has once claimed. On the free plan, operation resumes by topping up the credit, which raises the storage space to 1 GB per user. If the instance exhausts its storage space even after a top-up, the solution is to move to a full installation of NET Genium.

Customer data

The data stored in the instance is owned by the customer. The provider accesses it only to the extent necessary to operate the service, resolve technical problems or provide support requested by the customer.
Instances are operated on European servers and connections to them are encrypted.
The provider performs daily database backups and keeps them for 3 days. The backups serve solely to restore operation after a technical failure — they do not replace the customer's own data exports and give the customer no right to have individual deleted records restored.
The customer can export their data at any time using the standard platform tools — print templates producing XLSX, DOCX, PDF, HTML, CSV and TXT files.
The instance also contains the operational records (logs) the platform creates in it — for example the records of user logons. The customer manages them: the instance administrator can view, download and delete them in Reports. The provider makes no commitment as to how long they are kept; they cease to exist together with the rest of the data when the instance is deleted. A detailed description is provided in the separate guide Reports.

Processing of personal data — data processing addendum

Where the customer processes personal data in the instance, the customer is the controller and the provider is the processor. The customer is responsible for the lawfulness of the processing and for meeting the information obligations towards data subjects. This part of the terms constitutes a data processing addendum under Article 28 of Regulation (EU) 2016/679 (GDPR).

Subject matter, nature and purpose of the processing — the provider processes the personal data stored in the instance solely in order to operate the service, i.e. to make the platform available to the customer, to create backups, to resolve technical problems and to provide support requested by the customer.
Duration of the processing — for the term of the contractual relationship until the instance is deleted. After deletion, backups remain available for a maximum of 3 days; the data are then removed from them as well.
Type of data and categories of data subjects — determined solely by the customer through the applications they design in their instance and the data they store in them. The provider neither knows them in advance nor determines them in any way.
Instructions of the controller — the provider processes the data only in accordance with the customer's instructions, which consist of these terms and the configuration of the instance. The provider does not use the data for its own purposes and does not disclose it to anyone other than the sub-processors listed below.
Confidentiality — persons at the provider who may come into contact with the data are bound by confidentiality and have access only to the extent necessary to perform their tasks.
Security of processing — each instance has its own database, separated from all others, connections are encrypted (TLS), access to data is governed by the platform's permissions and user groups, changes to records are recorded in the change history, and the database is backed up regularly.
Notification of breaches — should the provider become aware of a personal data breach, it will notify the customer without undue delay by e-mail, together with the information the customer needs in order to meet its obligations under Article 33 GDPR.
Assistance — the customer exercises data subject rights (access, rectification, erasure, portability) themselves using the platform tools. Where required by the customer's obligations, the provider will offer reasonable assistance, including with a data protection impact assessment.
Erasure on termination — after the contractual relationship ends, the provider deletes the data in accordance with the “Termination of the Service” section. It retains no copies, except for backups that are still running out.
Audit — at the customer's request, the provider will supply the information needed to demonstrate compliance with this addendum.

The customer grants the provider a general authorisation to engage the sub-processors listed in the following table. The provider imposes on them the same obligations as those arising from this addendum and remains responsible for their performance. The provider will notify the customer by e-mail at least 30 days in advance of any intended change of sub-processor; should the customer object, they may stop using the service before the change takes effect.

Sub-processor	Purpose	Location and transfer mechanism
MasterDC s.r.o., company ID 26277557	hosting of the instances and of the website	data centres in Prague and Brno — European Union
Microsoft Ireland Operations Limited	Microsoft Copilot Studio — building applications with AI	environment within the EU Data Boundary; during periods of peak load the model may run outside the EU — standard contractual clauses under Commission Decision (EU) 2021/914
Microsoft Corporation	Bing search in the agent's features; governed separately by the Microsoft Services Agreement	USA — certification under the EU-US Data Privacy Framework
Anthropic PBC	fallback language model, engaged only when Copilot Studio is unavailable	USA — standard contractual clauses under Commission Decision (EU) 2021/914

The language model sub-processors are engaged only when the customer uses the AI application-building feature. They receive the description of the request entered by the user and the structure of the resulting application (table and column names) — not the records stored in the instance. Under the contractual terms of both providers, the submitted content is not used to train their models.

Obligations of the customer

The customer undertakes not to use the service to:

store or distribute content that infringes legal regulations or the rights of third parties,
disrupt the operation of the service, circumvent its security measures or attempt to access the data of other instances,
make the service available to third parties for a fee as the customer's own service.

The customer is responsible for the conduct of all users created in their instance. The steps the provider takes where these obligations are breached and where illegal content is notified are described in the part Illegal Content and Notices.

Illegal content and notices

The provider provides a hosting service within the meaning of Regulation (EU) 2022/2065 on a Single Market for Digital Services (DSA). Instances do not serve to disseminate content to the public — they are the customer's private applications, accessible only to the users the customer creates in them. Should the customer make part of their instance available to the public (for example by embedding a form for anonymous users on their own website), they do so by their own decision and at their own responsibility.

The provider does not monitor content

The provider does not monitor, review or search the content stored in instances — it has no obligation to do so and, in line with the part Processing of Personal Data, accesses the data only to the extent necessary to operate the service, resolve technical problems or provide support requested by the customer.
The content stored in an instance is the sole responsibility of the customer, including content entered by their users.
Where the provider reviews content on its own initiative, this gives rise neither to its responsibility for that content nor to any obligation of continuous monitoring.

Notifying illegal content

Anyone who believes that an instance contains illegal content may notify the provider by e-mail at abuse@netgenium.com. This address is also the provider's single point of contact for communication with public authorities and with recipients of the service; communication is possible in Czech or English.
To allow the notice to be assessed, it should contain a substantiated explanation of why the content is illegal, the exact location of the content (the instance address and, where applicable, the record or attachment concerned), the contact details of the notifying party and their statement of good faith belief that the notice is accurate.
The provider assesses notices individually and by human review — it does not use automated tools to decide them. It informs the notifying party of the outcome without undue delay.

Measures and their notification to the customer

Where the provider finds a notice justified, or where it receives an order from a public authority, it may, depending on the seriousness of the matter and with regard to proportionality:

invite the customer to remedy the situation within a set period,
switch the instance to read-only mode or otherwise restrict access to it,
suspend access to the instance in full,
terminate the contractual relationship and delete the instance in the manner described in the part “Termination of the Service”.

Where there is a risk of imminent serious harm, the provider may suspend access to the instance immediately and inform the customer afterwards.
The provider informs the customer of every measure taken by e-mail, stating its reason, scope and duration together with information about the redress described in the following paragraph.
Should the customer disagree with a measure, they may object to it at abuse@netgenium.com within 6 months of being informed. The provider assesses the objection by human review and informs the customer without undue delay; where it finds the objection justified, it lifts the measure without delay. This is without prejudice to the customer's right to bring the matter before a court.
Suspension of access to an instance or a restriction of it gives rise to no right to a refund of credit.

Notification of suspected criminal offences

Should the provider obtain information giving rise to a suspicion that a criminal offence involving a threat to the life or safety of a person has taken place or is likely to take place, it will inform the law enforcement authorities without delay.

Availability and liability

The provider makes reasonable efforts to keep the service continuously available but does not guarantee availability — the service is provided without an agreed service level (SLA).
Operation may be interrupted by necessary maintenance, framework core updates or circumstances beyond the provider's control. Planned outages are announced in advance by e-mail.
The provider is not liable for damage caused by loss of data, interruption of operation or lost profit. The provider's liability is in any case limited to the amount of credit consumed over the last twelve months.
Towards a consumer, the limitation of liability applies only to the extent permitted by consumer protection law. Liability for harm caused intentionally or through gross negligence, and for harm to a person's natural rights, is not limited.
The provider is not liable for the functionality of applications designed by the customer in their own instance, nor for the accuracy of the data stored in them.

Duration of the contract

The contractual relationship arises when the activation link is confirmed and is entered into for an indefinite period. It is not bound by any notice period or minimum subscription term — the customer ends it as described in the “Termination of the Service” section, that is by requesting the deletion of the instance or by no longer topping up the credit.

Termination of the service

The contractual relationship is entered into for an indefinite period and the customer may end it at any time — with no notice, no notice period and no obligation to pay anything further. Neither the termination of the contractual relationship nor the deletion of the instance gives rise to a claim for a refund of unused credit.

The customer requests the deletion of the instance by writing to info@netgenium.com. The provider complies with such a request without undue delay, no later than within 5 business days, including all data; the data disappears from the backups within 3 days at the latest. If the customer is a consumer, such a request at the same time exercises their statutory right to withdraw from the contract within 14 days of the activation of the instance without giving a reason; as nothing is paid for the service, no amount is refunded and the service may be ended in the same way at any later time as well.
The customer stops using the instance. The provider may delete an instance in which nobody has worked for 6 months, having given the customer at least 30 days' notice by e-mail. Signing in and working in the instance starts the period anew.
The customer stops topping up the credit — this applies only to instances with more than one user. The instance switches to read-only mode and the provider may delete it 6 months after that switch, likewise having given the customer at least 30 days' notice by e-mail. Topping up the credit at any point until then resumes operation.
The provider terminates the contractual relationship immediately in the event of a serious breach of the customer's obligations listed above; the option of suspending or restricting access to the instance before it comes to termination is described in the part Illegal Content and Notices.

Moving to a full installation

NET Genium Online and a full installation of NET Genium are built on the same framework. If the customer asks to move, the provider transfers the entire database of the instance into the full installation — applications and stored data continue unchanged. The terms of a full installation are subject to a separate agreement.

Changes to these terms

The provider may change these terms, in particular in response to the development of the service or of legal regulations. Changes are announced to the customer by e-mail at least 30 days before they take effect. If the customer does not agree with a change, they may stop using the service before the effective date, as described above.

Final provisions

The contractual relationship is governed by the law of the Czech Republic.
Unless agreed otherwise, the courts of the Czech Republic have jurisdiction over any disputes.
If the customer is a consumer, the choice of law and jurisdiction does not deprive them of the protection afforded by the mandatory provisions of the law of the country of their residence, and they may bring a dispute before the courts of that country. The body competent for the out-of-court resolution of consumer disputes is the Czech Trade Inspection Authority (adr.coi.cz).
Please send any questions about these terms to info@netgenium.com or to the provider's data box with ID 2hmpzpe; further contact details are listed on the contact page.

This is version 1.1 of the license terms, effective from 1 January 2026. The provider archives previous versions of the terms and will send them to the customer upon a request sent to info@netgenium.com.