Terms of service

Updated 20 October 2026 · Hercules, Midas and Nexus

These terms explain use of Yasa Hercules, Midas and Nexus. The provider is Yasa Oy (Yasa Ltd.), Finland, Business ID 3381986-4. Questions and support: info@yasa.fi.

Accounts and authorised access

Use accurate account details, protect your credentials and only act for an organisation when authorised. Keep invitations and assigned roles appropriate. Tell us promptly if you suspect unauthorised access. Hercules and Midas use a shared Yasa identity, but each workspace has its own permissions.

All Nexus login access is invitation-only. Only an invited and enabled Google or Google Workspace account can enter Nexus. Roles and resource assignments further limit what a member can see or change. Public pages can be read without an invitation. Registering for Hercules or Midas does not create a Nexus membership.

What the services provide

Hercules supports projects, tasks, collaboration and planning billable work. Midas supports invoicing, customer records, billing schedules and reports. An authorised user may connect selected Hercules work to a Midas invoice draft. Review the customer, hours, rates, currency, tax and invoice before issuing or sending it. The software does not replace accounting, tax or legal advice, and using it does not transfer your recordkeeping or tax responsibilities to Yasa.

Nexus provides controls for assigned hosting and infrastructure resources. Hosting visitors, WordPress users and game players are separate from Nexus accounts. Resource-specific hosting or support agreements remain applicable.

Hercules and Midas are free to use for now, with no current subscription fee. A future paid plan requires clear advance information and your agreement before any charge; these terms do not authorise automatic charges. Nexus access does not include a promise of free hosting. Any hosting fees, service levels or support commitments are those separately agreed with Yasa.

Responsible use and service operation

Do not access other users' data without permission, share credentials to bypass roles, distribute malware or unlawful content, send unsolicited messages, or deliberately disrupt the service. Respect third-party rights and applicable law. Security testing that could affect others or service availability needs advance agreement.

We maintain and update the services and may need planned maintenance or urgent security work. Report faults to info@yasa.fi. No uninterrupted availability or specific recovery time is promised unless separately agreed. We remain responsible for obligations imposed by applicable law and any express service agreement.

Your content and records

You retain your rights in content you supply. You authorise Yasa to host, process, back up and transmit that content as needed to provide the requested service. This permission does not give us ownership or permission to sell your content. Workspace owners control access and are responsible for the information and instructions their members provide.

Keep independent copies of records needed for your business. Midas offers reports and workspace exports to authorised users. Historical business records and revisions are preserved; archiving or cancelling is not deletion. Account closure does not automatically erase a workspace or its accounting history. See the retention explanation and contact us for a specific return, restriction or erasure request.

Data-processing terms for organisations

Where Yasa processes personal data for your organisation, your organisation is the controller and Yasa is its processor. These provisions apply to service processing for the duration of that relationship and any necessary return or lawful retention period. The subject matter is hosting and operating your selected apps and resources. Processing includes storing, organising, retrieving, displaying, exporting, transmitting, securing and backing up data according to your instructions. The data and individuals involved are your users, collaborators, customers, contacts and people identified in your uploaded content.

Yasa processes that data only on documented instructions, including authorised use of the service, unless law requires otherwise. We inform you of a conflicting legal requirement where permitted and of instructions we consider unlawful. People authorised to process the data must be bound by confidentiality. We apply appropriate security measures, including encrypted transport, controlled administrative access, workspace permissions and recovery arrangements.

The infrastructure providers described in the privacy notice support this processing. Yasa remains responsible for its subprocessors' obligations and requires appropriate data-protection terms. We notify affected controllers before adding or replacing a subprocessor, allowing an opportunity to raise a substantiated data-protection objection before the change takes effect. Transfers outside the EEA require an applicable lawful safeguard.

Taking account of the processing and available information, Yasa assists with individual-rights requests, security, breach response and required impact assessments. We notify an affected controller without undue delay after becoming aware of a personal-data breach. We provide information necessary to demonstrate these obligations and allow reasonable, appropriately secured audits by the controller or its mandated auditor.

At the end of processing, the controller may request return or deletion of personal data and copies, except where law requires retention. We coordinate this through info@yasa.fi, including retained business records and recovery copies; the archive button alone does not perform this process. An existing separately signed data-processing agreement prevails where it is more specific. The controller remains responsible for its lawful basis, notices, instructions and retention decisions.

Suspension, closure and changes

You may stop using the service and request account closure at any time. Workspace access may also be removed by its authorised owner. We may restrict access where reasonably necessary to address unlawful use, a material breach or a security risk. Where possible and lawful, we explain the reason and allow an opportunity to remedy it; urgent protection may need immediate action.

We give reasonable advance notice of material service or terms changes, explain their effect, and offer an opportunity to stop using the affected service. Changes do not impose retroactive charges or remove mandatory rights. Separate agreements and any legally required consent remain applicable.

Liability, consumer rights and disputes

Each party is responsible for its own acts and omissions under applicable law. Nothing in these terms excludes liability that cannot lawfully be excluded, or limits mandatory consumer, data-protection or other statutory rights. Specific liability or service-level terms may be agreed separately for a business service.

Finnish law applies, without removing mandatory protection available to consumers under applicable law. Contact us first to seek a practical resolution. Consumers can also contact Finnish Consumer Advisory Services and, where competent, the Consumer Disputes Board. You retain the right to bring a matter before a competent court. No exclusive forum is imposed on consumers.