Terms of use

1.1 The General Terms and Conditions of Sales-Surge B.V. apply to every offer, quotation and agreement about Lumo. They are published at https://www.sales-surge.io/terms. They cover, among other things, fees and payment, intellectual property, confidentiality, liability, term, force majeure and governing law.

1.2 These terms of use supplement the General Terms for the use of Lumo. They count as an addendum within the meaning of Article 2.3 of the General Terms.

1.3 For personal data the customer processes in Lumo, the data processing agreement also applies.

1.4 Sales-Surge B.V. is referred to below as "Sales Surge" or "we". The company that enters into an agreement about Lumo is "the customer".

• Lumo: the CRM Sales Surge delivers as SaaS, reachable at https://app.lumoheaven.com and crm.sales-surge.io, including the API, the MCP server, the chat widget and the customer portal.
• Workspace: a customer's environment in Lumo, with its own users, settings and data.
• User: a person with an account in the customer's workspace.
• Admin: a user with the role owner or admin.
• Customer data: all data the customer or its users put in the workspace or bring in through connections.
• Key: an API key or a key for the MCP server that gives access to a workspace.

3.1 Sales Surge sets up the customer's workspace. There is no self sign-up.

3.2 The customer appoints at least one admin. The admin invites users and gives them a role: Owner, Admin, Member or Viewer. The customer decides who has access and with which role, and is responsible for what users do in the workspace.

3.3 An account is personal. Users do not share their sign-in details and keep their password secret. Lumo offers two-step verification. We recommend that the customer makes it mandatory for admins.

3.4 When a user leaves or no longer needs access, the customer removes them from the workspace or changes their role.

3.5 If the customer suspects that someone has unauthorised access to an account, it reports this straight away to info@sales-surge.nl.

4.1 The customer and its users use Lumo for business purposes only and within the law. In any case they do not:

• put data into Lumo or send data for which they have no legal basis or consent
• send mail or messages that breach the rules on unsolicited electronic communication, such as the Dutch Telecommunications Act
• post content that is unlawful or infringes the rights of others
• try to access the workspace or data of another customer
• test or bypass Lumo's security outside the rules for reporting vulnerabilities on the security and privacy page
• load Lumo so heavily that the service falters for others, or flood the API automatically
• upload malicious code or spread it through Lumo
• resell Lumo or make it available to third parties without a written arrangement with Sales Surge

4.2 Lumo is not intended for special categories of personal data, such as health data. If the customer puts such data in Lumo anyway, it does so at its own responsibility.

5.1 Customer data is and remains the customer's. Sales Surge acquires no ownership or other right to customer data, except the right to process it as far as needed to deliver Lumo.

5.2 Sales Surge processes personal data in customer data as a processor, under the data processing agreement. We do not sell customer data and do not use it for our own purposes.

5.3 The customer is responsible for the accuracy of customer data and for the legal basis on which it processes personal data.

6.1 The AI assistant is off by default. An admin switches it on per workspace. An action that changes or sends something only runs once the user explicitly approves that action.

6.2 AI output can contain errors. The customer reviews output from the assistant and from the "report from a sentence" feature before relying or acting on it. This is in line with Article 7.5 of the General Terms.

6.3 Lead scores, health scores and duplicate detection are suggestions. The customer decides what happens with them.

6.4 With AI features, data goes to the model provider, outside the United Kingdom and the EU. Lumo only allows Anthropic's Claude API and Google's paid Gemini API. The app refuses a free key or any other provider. Under their terms those providers do not use the input to train models. Location and safeguard per provider are on the sub-processors page.

6.5 The chat widget uses no AI. Answers come from the customer's people, or are fixed messages the customer sets up, such as a message outside opening hours.

7.1 Through the API and the MCP server, the customer's own systems and AI agents can work in a workspace. An admin creates a key for this.

7.2 Keys are the customer's responsibility. The customer keeps them secret, gives each key only the permissions it needs, and revokes a key as soon as it is no longer needed or may have leaked.

7.3 Whatever happens with a customer's key counts as an act of the customer. That includes actions by an AI agent the customer runs with a key.

7.4 If the customer suspects a key has leaked, it revokes the key straight away and reports it to info@sales-surge.nl.

8.1 The customer or a user can connect Lumo to third-party services, such as Gmail, Google Calendar, Pipedrive, Facebook and Instagram lead forms, Apollo or ProspectPro. The customer or user does so with its own account and has its own agreement with that service. The use of those services is governed by their provider's terms.

8.2 The customer or user switches a connection on and can disconnect it again. Sales Surge is not responsible for the availability of, or changes to, third-party services. See also Article 10.2 of the General Terms.

8.3 When a user connects Gmail, Google Calendar or Google Analytics, Lumo uses the data from Google only for the features the user uses in Lumo, and Lumo adheres to the Google API Services User Data Policy, including the Limited Use requirements. Which data this is and how to have it deleted is on the Google integration page.

8.4 When a user connects Outlook or the Microsoft 365 calendar, Lumo uses the data from Microsoft only for the features the user uses in Lumo. Lumo asks only for delegated permissions for that user's own mailbox and calendar. If the customer's organization requires consent from an administrator, the customer's administrator gives that consent. Lumo complies with the Microsoft APIs Terms of Use. So Lumo does not use data from Microsoft for advertising or marketing and does not resell it. The user has their own agreement with Microsoft for their Microsoft account. Which data Lumo uses, how to withdraw consent and how to have data deleted is on the Microsoft 365 integration page.

9.1 Sales Surge provides Lumo on a best-efforts basis, as described in Article 3 of the General Terms. We make reasonable efforts to keep Lumo available and secure.

9.2 The database is backed up every day. There is no point-in-time recovery. The customer can export its data if it wants to keep its own copy.

10.1 Sales Surge may suspend access to a workspace, an account or a key, in whole or in part, if:

• the customer or a user acts in breach of section 4 or section 7
• there is an acute risk to the security of Lumo or of other customers
• the customer is in default, as referred to in Article 12.4 of the General Terms

10.2 We limit a suspension to what is necessary. We tell the customer as soon as possible what has been suspended and why. Once the cause has been removed, we lift the suspension.

11.1 Term and termination are set out in the proposal and in Article 12 of the General Terms.

11.2 During the term, the customer can export its data with the export functions in Lumo. We recommend doing so before the agreement ends.

11.3 After the agreement ends, Sales Surge deletes the customer data at the customer's request, as described in the data processing agreement. Data in backups only disappears once those backups rotate out.

12.1 Sales Surge may change these terms of use in the way Article 16.3 of the General Terms describes. The date of the latest version is at the top.

12.2 These terms of use are governed by Dutch law. Disputes are resolved as Article 15 of the General Terms describes.

12.3 Send questions about these terms to info@sales-surge.nl or call +31 6 5350 9843. Sales-Surge B.V., Professor W.H. Keesomlaan 12, 1183 DJ Amstelveen, the Netherlands. Chamber of Commerce (KvK) 99261758, VAT NL868907509B01. How we handle personal data is set out in the privacy statement.