Terms of Service

Version 2026-10-22, 22 October 2026. For the closed beta.

These terms are an agreement between you and Visitt AS (“we”, “us”), org. no. 921404263, Uranienborg Terrasse 9, 0351 Oslo, Norway. They apply when you use Heimiro at heimiro.com. Our privacy policy says what personal data we keep, why, for how long and where.

Heimiro is in a closed beta: we let people in by invitation, and we’re still building it. We may add, change or remove features, and some parts are only open to some accounts while we test them.

1. What Heimiro is

Heimiro gives the AI assistants you already use a shared place to work:

• The door. One address, an MCP server, that your own AIs connect to: for example Claude, ChatGPT, Grok, or any assistant that can connect to an MCP server.
• Memory. What you and your AIs save, split into workspaces, plus core memories you share with all workspaces in a space.
• Apps. Other MCP servers you add to a workspace, from our catalogue or privately, with a level for each tool: do it, ask first, or never.
• Approvals. Actions that wait for you before they happen.
• Work. Our own workspace agent, which runs on AI models we provide.
• Bots, automations and recipes. Jobs you write for the workspace agent, which it can run on a schedule, and ready-made sets of them you can install.

2. Who can use it

• You must be at least 18 years old.
• During the beta, you need an invitation: from our waitlist, or from a team that already uses Heimiro.
• If you use Heimiro on behalf of an organisation, you confirm that you may accept these terms for it, and “you” then includes the organisation.

3. Your account and spaces

• You sign in with an account you already have at a sign-in provider, such as Google. We never see or store a password. Your account with the sign-in provider is governed by that provider’s terms.
• We identify you by your account at the sign-in provider, not by your email address. We never merge two accounts because their email addresses match.
• An account is for one person. Keep your sign-in account secure. You are responsible for what is done through your account, unless it is caused by our breach of these terms.
• Your first sign-in creates a personal space with one workspace, called Home. In your personal space you are the owner: you decide its workspaces, apps and tool levels.
• Team spaces aren’t open to everyone yet. A team space is shared by several people. An owner invites someone with a link that the owner sends themselves; the link works for 7 days. Owners decide the team’s workspaces, apps and tool levels, and can change roles and remove members. Everyone in a team sees each other’s names and roles, and owners also see email addresses. The team’s memory, workspaces and apps are shared by everyone in it.
• If you leave a team, or an owner removes you, what you saved there stays with the team, and your AIs, your keys to its apps, your automations there and your requests still waiting stop at once.

4. Connecting your AIs

• You connect an AI by adding Heimiro’s address in that AI and approving the connection on our consent page. There you choose one workspace and what the AI may do: read your memory, save to your memory, suggest forgetting, use the apps in that workspace, and pin cards to your Home board.
• An AI with the right to save can add memories without asking you each time. It can’t change or delete existing memories. It can only suggest forgetting one, and nothing is forgotten until an owner confirms it on Home.
• Your AI is a service between you and its provider, for example Anthropic, OpenAI or xAI. What your AI reads from Heimiro goes to that provider under your own agreement with them. We don’t control your AI or its provider and are not responsible for them. Only connect AIs you trust with what is in the workspace.
• Each AI provider decides whether and how its AI can connect to Heimiro, and some limit it by plan or country. We can’t promise that a particular AI will connect, or keep connecting.
• You can disconnect an AI on Home at any time. It loses access at once.
• Text that reaches us from an AI, an app or a memory is treated as data, never as instructions to Heimiro.

5. Your memory and workspaces

• Your memory is split into workspaces: up to 50 workspaces in a space, and up to 10,000 memories in each. An AI sees only the workspace it was connected to, plus the core memories an owner has shared with all workspaces in the same space. Core memories are never shared with another space.
• Don’t save passwords, health information or other sensitive personal data. We reject memories we recognise as containing a Norwegian national identity number, a payment card number or an access key, but we can’t recognise everything.
• An owner can forget a memory on Home. Your AIs stop seeing it at once, and you can undo it for 30 days. Deleting a workspace deletes the memories saved in it at once, and can’t be undone.
• You can download everything you can see in Heimiro at any time from your account page, as one machine-readable file, and an owner can export a space’s memory as a Markdown file. Keys and tokens are never in the download.

6. Apps

• An app is an MCP server run by someone else, or by us. Our catalogue has our own apps and public servers we have chosen. An owner can also add a private app: any MCP server, available only in the workspace it is added to.
• When you connect your own account at an app, we keep the keys the app gives us, encrypted, so your AIs and the workspace agent can use the app for you. If you add an API key yourself, we keep it the same way. Your keys are yours alone; nobody else in your space can use them.
• Each app is provided by its provider under its own terms, wherever it runs. We choose which public servers are in the catalogue, but we don’t run, control or support apps we don’t make, and we’re not responsible for what they do.
• You are responsible for having the right to connect an app and to let your AIs use it.
• For each tool, an owner chooses a level: do it (runs without asking), ask first (waits for approval) or never. Tools start on “ask first”, unless our catalogue says the tool only reads. If an app changes a tool or adds one after an owner reviewed its tools, that tool is hidden until an owner reviews them again.
• Five kinds of action always need approval and can never be set to “do it”: moving money, deleting, sending to others, passwords and sign-in, and changing permissions. We recognise them by the tool’s name and by what the app says about the tool. An app can describe a tool wrongly, so we can’t guarantee that every such tool is caught. Check what a tool does before you set it to “do it”.
• Tools for passwords and sign-in are never used through Heimiro. We don’t accept passwords.
• We can’t undo what an app has done. Undo in Heimiro covers changes in Heimiro itself, such as forgetting or saving a memory.

7. Approvals

• When an AI calls a tool that is on “ask first”, nothing is sent to the app. The call becomes a request on Home that shows exactly what the AI wants to send.
• Only the person whose account connected the AI can approve or reject its requests, because the app is called with that person’s keys.
• When you approve, we send the request to the app once. Actions of the five kinds in section 6 need an extra confirmation. We check that the tool hasn’t changed since the AI asked.
• A request that nobody decides on expires after 7 days.
• If we can’t tell whether the app carried out a request, we say so and don’t send it again. Check in the app.
• Read a request before you approve it. Approving it is your decision.

8. Work, bots and automations

During the beta, Work and bots may only be open to some accounts.

• In Work, you give the workspace agent a task in one of your workspaces. The agent runs on AI models we choose; today that is Google’s Gemini on Vertex AI. It can read your memory, and use the apps in the workspace at the levels you set.
• Where the model runs. By default (Global) the model runs wherever our providers have capacity, which can be outside the EU. An owner of a space can choose EU only on the account page, and then the model runs in the EU. Your content is stored in Finland whatever you choose.
• If the main model is overloaded or too slow, a backup model may answer instead: Anthropic’s Claude, directly from Anthropic on Global, or on Google’s Vertex AI in the EU on EU only.
• During the task, the agent runs only what reads: searching your memory, and app tools that read and are on “do it”. Everything that would change something, such as saving or forgetting a memory or any other app tool, waits until the agent has finished, and you approve or reject each change. Only the person who gave the task decides on its changes.
• The agent’s plans and answers are generated by AI. They can be wrong, incomplete or out of date, and can repeat what the agent read. Check them before you rely on them or approve a change.
• A bot is a job you write for the agent, in one workspace. Everyone in the space can see its bots. The person who made a bot, or an owner, can change or delete it. A bot can hand a task to one other bot in the same workspace, at most two steps in a row.
• An automation runs a bot on a schedule for your account, with your keys. Only you can see and change your automations. What a bot wants to change waits for your approval in Work, and what it found shows on Home. We don’t send email about runs yet. If we start, we’ll tell you first.
• A recipe is a ready-made set of bots and automations. Installing it copies them into your workspace, where they are yours. Nothing is installed until you install it.
• We set limits on how long a task can run, how many steps it can take, and how many tasks and runs you can start, to protect the service. “Stop all” on Home stops your automations. We may pause Work or automations for everyone if something goes wrong.

9. Price during the beta

• Heimiro is free during the closed beta. We don’t take payment and don’t ask for a card.
• Before paid plans start, we’ll publish new terms with the plans and prices and ask you to accept them. Nothing is charged unless you choose a plan and pay for it.

10. Your content

• Your content is what you, your AIs and your apps put into Heimiro: memories, workspace names, cards, bots, recipes you save, tasks and their changes, requests waiting for approval, and your settings. You keep all rights to it. You are responsible for it, including that you may store it and let your AIs and apps use it.
• You let us store, copy, process and send your content only as needed to provide Heimiro to you: to show it to you, to give it to the AIs you connect, to send it to the apps you use, and to send it to our AI models when you give a task or a bot runs.
• We don’t sell your content, use it for advertising, or use it to train AI models. Under its terms for Vertex AI, Google doesn’t use it to train its models either, and neither does Anthropic under its commercial terms.
• We don’t look at your content except when you ask us to, when it is needed to keep Heimiro secure and working, or when the law requires it.

11. Acceptable use

You must not:

• use Heimiro to break the law or to infringe the rights of others;
• store or process personal data you have no right to process;
• try to reach other people’s spaces, test our security without our written permission, or get around our limits, approvals or permissions;
• use Heimiro, including through apps and bots, to attack, overload or spam other services or people;
• connect AIs or apps to Heimiro in breach of their providers’ terms;
• resell Heimiro or access to it without our written consent;
• rely on Heimiro where an error could cause death, injury or serious harm.

When you use Work and bots, you must also follow Google’s Generative AI Prohibited Use Policy and Anthropic’s Usage Policy, because our AI models run on their services.

12. Ending and suspension

• You can stop using Heimiro at any time: disconnect your AIs on Home, download your data, and delete your account on the account page. Deleting your account also deletes your personal space and any team where you are the only member. If you are the only owner of a team with other people in it, delete that team or make someone else an owner first.
• Deleting takes effect at once and can’t be undone. The data is gone from our backups within eight days. If you can’t delete something yourself, write to hab@viit.no and we delete it within 30 days.
• We may suspend or close your account, or stop an AI connection, an app or an automation, if you break these terms, if it is needed to protect you, others or Heimiro, or if the law requires it. Where we can, we tell you first and give you a chance to put it right. A suspended account loses access at once, and so do its AIs and automations.
• We may end the beta, or stop offering Heimiro, with at least 60 days’ notice, so you have time to download your data.

13. Availability and changes

• We provide Heimiro as it is and as available. It’s a beta: we don’t promise that it will always be available or free of errors. We keep daily backups, but we can’t promise that nothing is ever lost. Download your data if it matters to you.
• We may change Heimiro and these terms. When we change the terms, we show you the new version the next time you open Heimiro and ask you to accept it before you go on. If you don’t accept it, you can still disconnect your AIs and turn off your automations, download your data and delete your account, on your account page.

14. Liability

• If you are a business: our total liability under these terms is limited to what you paid for Heimiro in the 12 months before the claim arose. We are not liable for indirect loss, such as lost profit, lost business or lost data beyond what we can restore from our backups. These limits don’t apply to loss we cause intentionally or through gross negligence, or where the law doesn’t allow them. You cover our reasonable costs from claims by others that arise from your content or from your breach of these terms.
• If you are a consumer: we are liable as the consumer law where you live requires. Nothing in these terms limits your statutory rights.
• We are not responsible for what AI output says, for what your AIs or apps do, including actions you approved, or for the services of your AI providers, app providers or sign-in providers.

15. Law and disputes

These terms are governed by Norwegian law. Disputes go to Oslo District Court (Oslo tingrett). If you are a consumer, you keep the protection of the law where you live, and you can bring a claim there.

16. Other

• We may transfer this agreement to a company that takes over Heimiro. We’ll tell you before we do.
• If a part of these terms is invalid, the rest still applies. If we don’t enforce a right at once, we haven’t given it up.
• These terms and the privacy policy are the whole agreement between us about Heimiro.
• Questions: hab@viit.no.