Terms of Service
The conditions under which a customer uses Bellerofonte: what the platform does, what the customer warrants when connecting a social channel, and what may not be done with the data and with the outputs of the analyses.
Last updated: 2026-09-20
This is the English translation of the Italian original, which prevails in case of discrepancy. Both versions are public and require no login.
TO BE CONFIRMED BEFORE PUBLICATION. The corporate details are those published by the Controller; the competent court is still to be confirmed, as the piavedigitalagency.it privacy notice does not state one.
Contents
- Who provides the service
- Scope of the service and who it is for
- Accounts and access
- Connecting social channels
- Permitted use and prohibited uses
- Data obtained from third-party platforms
- Intellectual property and licence to use
- Service availability and maintenance
- Fees and term
- Limitation of liability and indemnity
- Suspension, termination and what happens to the data
- Confidentiality and security
- Changes to these terms
- Governing law and jurisdiction
- Contacts
1. Who provides the service
In what follows, "Provider" means the entity identified above, "Bellerofonte" or
"the platform" means the service operated at https://dashboard.bellerofontedata.com,
"Customer" means the organisation subscribing to the service, and "User" means
the individual who accesses the platform on the Customer's behalf.
These terms apply to every access to and use of the platform. Together with the privacy policy, the cookie policy, the How we handle Meta Platform Data page and any contract signed with the Customer, they constitute the agreement between the parties. In case of conflict, the individual contract prevails.
2. Scope of the service and who it is for
Bellerofonte is a social and media intelligence platform. It collects the content and metrics of the social channels and sources the Customer designates and derives indicators from them: publishing cadence, interactions received, overall sentiment of the responses, keywords, recurring topics, period-over-period comparisons, reports and summaries.
The service is intended for organisations — public bodies, companies, publishers, associations, agencies — acting in the course of their activity. It is not a consumer service, and Italian consumer protection law does not apply to it. Registration is not permitted to anyone under 18.
Bellerofonte produces statistical and linguistic outputs generated automatically. Indicators, sentiment scores and text produced by language models are estimates: they may contain errors and do not replace the professional judgement of the person reading the report.
3. Accounts and access
Access uses named credentials. The Customer designates the authorised individuals and remains responsible for how those credentials are used, including activity carried out with its Users' credentials.
- credentials are personal and must not be shared or transferred to third parties;
- the Customer notifies the Provider without delay when an authorised User leaves, so that access can be revoked;
- any suspected unauthorised access must be reported immediately to security@piavedigitalagency.it;
- attempting to access projects, data or features other than those assigned, or circumventing the platform's access controls, is not permitted.
A Customer sees only the channels and the data of its own project. Separation between different customers' data is a property of the service and cannot be waived on request.
4. Connecting social channels
By connecting a channel — a Facebook Page, an Instagram professional account or another source — the Customer warrants that it owns that channel or that it is entitled, under a written mandate from the owner or another adequate basis, to monitor it and to have the Provider process its data.
The Customer grants the platform only those permissions it is entitled to grant, and only for the channels described in the preceding paragraph. Connecting third parties' channels using someone else's credentials, or extending monitoring to channels for which no such entitlement exists, is not permitted.
With respect to the personal data contained in the channels it connects, the Customer is the data controller and the Provider acts as processor under Art. 28 GDPR, processing the data only on the Customer's documented instructions and for the purposes of the service. The conditions of that processing are set out in the data processing agreement that supplements these terms; the operational perimeter — data categories, retention, security measures, sub-processors — is described in the privacy policy and on the Processors page.
As controller, it is for the Customer to inform data subjects and to have a legal basis for the monitoring it requests. The Provider may suspend the analysis of a channel if it receives a substantiated challenge to the legitimacy of the connection, until the matter is clarified.
5. Permitted use and prohibited uses
The Customer may use the platform and its outputs to understand and improve the public communication of itself or of the organisation it works for, for research and reporting, and for the uses set out in the contract.
Using the platform, the data or the outputs of the analyses is prohibited:
- to make eligibility determinations about a person for employment, housing, credit, insurance, social benefits, immigration status or any comparable opportunity;
- for surveillance of individuals, groups or categories — including surveillance on behalf of authorities or law enforcement — or to identify participants in protests, activists, journalists or dissidents;
- to discriminate on the basis of protected attributes (ethnic origin, nationality, religion or belief, political opinions, trade union membership, health, sexual orientation, gender identity, disability, age), or to infer such attributes;
- to build profiles of individuals, individual dossiers or behavioural histories attributed to a person;
- to re-identify individuals from aggregated or de-identified data, or to combine the data with other sources in order to single out an individual;
- to resell, transfer, license or redistribute the data or the derived outputs, including in aggregate form, to third parties;
- for unlawful purposes, to harass or intimidate anyone, to spread defamatory content, or in breach of third parties' rights;
- to train machine learning models on data obtained from third-party platforms, unless separately agreed in writing and within the limits allowed by the source platform;
- to extract data in bulk by automated means other than the export features provided, to stress-test the platform, or to attempt to reverse engineer its code or its models.
These prohibitions also apply to data in aggregated or derived form and survive termination of the contract. Breaching them is a material breach and entitles the Provider to suspend access immediately under § 11.
6. Data obtained from third-party platforms
Facebook and Instagram data is obtained exclusively through
Meta's official APIs (graph.facebook.com), using the permissions the
Customer grants in the authorisation dialog: currently
instagram_basic, instagram_manage_insights,
pages_show_list and pages_read_engagement. The Provider
does not collect data from Meta by any other means and never asks anyone for
their Facebook or Instagram credentials.
Processing of this data is subject to the Meta Platform Terms and Developer Policies, which the Provider undertakes to comply with and which the Customer undertakes not to cause to be breached through its requests. To the extent they govern the use of the data, those terms prevail over these.
Access to Meta data depends on Meta's authorisation. Meta may limit, suspend or revoke that access at any time, change its APIs or the available permissions, and require deletion of the data. If that happens, the platform features that depend on such data may be reduced or discontinued: this is not a breach by the Provider and gives rise to no claim for damages, without prejudice to the Customer's right to terminate the contract as regards the part that can no longer be delivered.
Meta-sourced data is retained for 90 days and then deleted automatically. The Provider deletes it earlier when the channel is disconnected, consent is withdrawn, the application is removed from the user's Facebook settings, the data subject requests it, or Meta or the law requires it. Removal of the content on the source platform is not one of those cases: the Provider does not detect deletions made on Facebook or Instagram, and the ingested copy follows the retention window. The details are on the How we handle Meta Platform Data page; deletion requests are submitted through the public form.
7. Intellectual property and licence to use
The software, the interface, the analysis models, the documentation, the trademarks and every other element of the platform remain the property of the Provider or of its licensors. The contract grants the Customer a non-exclusive, non-transferable and non-sublicensable licence to use the platform, limited to the term of the relationship and to the authorised Users.
The Customer subscribes to a tool; it does not purchase a dataset. Nothing in these terms transfers to the Customer ownership of data obtained from third-party platforms or of its derivatives, nor allows the Customer to pass it on. The Customer retains the content it uploads and its own analyses, which it may export in the formats provided and use subject to § 5 and to the terms of the source platforms.
The Provider may use anonymised, aggregated usage statistics to improve how the platform works, without ever exposing data attributable to a Customer, a channel or an individual.
8. Service availability and maintenance
The service is provided with professional diligence and, as regards continuity, on an "as is" basis: unless a service level is agreed in writing in the individual contract, uninterrupted availability is not guaranteed.
- planned maintenance is announced with reasonable notice and scheduled, where possible, in low-usage windows;
- urgent security work may be carried out without notice;
- the Provider may change, add or discontinue features; discontinuation of a significant feature is communicated in advance to the affected Customers;
- the service depends on third-party vendors (infrastructure, social platform APIs): upstream outages or changes may affect the platform.
Data refresh frequencies depend on the rate limits imposed by the source platforms and may vary.
9. Fees and term
Fees, usage limits, term, renewal and payment conditions are set out in the individual contract or signed order with the Customer. These terms set no price.
Unless otherwise agreed: fees are exclusive of VAT and applicable taxes; failure to pay beyond the agreed deadlines entitles the Provider to suspend the service after written notice; termination and renewal follow the individual contract.
10. Limitation of liability and indemnity
The Provider is liable for direct damages caused by its own fault within the limits set out in the individual contract and, failing that, up to the fees paid by the Customer in the twelve months preceding the event.
To the extent permitted by law, loss of profit, loss of opportunity, reputational harm and indirect damages are excluded. Liability is not limited for wilful misconduct, gross negligence, personal injury, or in any other case where the law does not allow limitation.
The Provider is not liable for the decisions the Customer takes on the basis of the indicators produced by the platform, nor for the content published on the monitored channels, which remains that of its respective authors.
The Customer indemnifies the Provider against third-party claims, including those of data subjects, supervisory authorities and the source platforms, arising from: connecting channels it was not entitled to connect; granting permissions exceeding that entitlement; using the data or the outputs in breach of § 5; failing to inform data subjects in respect of processing for which it is the controller.
11. Suspension, termination and what happens to the data
The Provider may suspend access, in whole or in part and for as long as necessary, in the event of a breach of § 4 or § 5, a concrete risk to the security of the platform or the data, a binding request from Meta or an authority, or non-payment. Suspension is notified to the Customer stating the reason and, where possible, what to do to lift it.
On termination of the relationship, for whatever cause:
- connected channels are disconnected and access tokens deleted immediately;
- Meta-sourced data is deleted within the 90-day retention window, and earlier at the Customer's request;
- the Customer may request, within 30 days of termination, an export of its own analyses and reports in the formats the platform provides; after that period the Provider does not guarantee that they can still be extracted;
- only the data needed for accounting, tax and proof-of-compliance obligations (including deletion requests and their outcome) is retained, for the statutory periods.
Clauses intended by their nature to survive — prohibited uses, intellectual property, confidentiality, limitation of liability and indemnity, governing law — remain in force after termination.
12. Confidentiality and security
Each party treats as confidential the other party's information that it learns in performing the relationship, does not disclose it to third parties and uses it only for the purposes of the contract. The obligation lasts for the duration of the relationship and for five years thereafter, and does not cover information that has become public without breach, information already known, or disclosures required by law.
The technical and organisational measures adopted by the Provider are described in the privacy policy. In the event of a personal data breach, the Provider informs the Customer without undue delay, with the information needed for the steps that fall to the Customer as controller.
Anyone who finds a vulnerability in the platform can report it following the procedure described on the Security page, or by writing to security@piavedigitalagency.it. Reports made in good faith and in line with that procedure will not be pursued by the Provider.
13. Changes to these terms
The Provider may update these terms to reflect changes to the service, to the law or to the conditions imposed by the source platforms. The updated version is published on this page with the new date at the top.
Material changes are notified to Customers at least 30 days in advance; within that period a Customer that does not accept them may terminate with effect from the date the changes take effect. Changes imposed by law or by a source platform may take effect immediately, in which case notice is given as soon as possible.
14. Governing law and jurisdiction
The relationship is governed by Italian law. Any dispute concerning the interpretation, performance or termination of these terms falls under the exclusive jurisdiction of the courts of [COMPETENT COURT TO BE CONFIRMED], unless the individual contract provides otherwise and save for mandatory rules of jurisdiction.
The parties undertake to attempt an amicable settlement before commencing proceedings. The right of data subjects to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) is unaffected.
15. Contacts
To have your data deleted there is no need to write: use the public deletion form, which issues a code you can use to track the status of your request.