MCP24 End User License Agreement

Effective date: 14 October 2026

This End User License Agreement (the "Agreement") is concluded between ARTISMEDIA Sp. z o.o. (the "Licensor") and the organization or person that installs or uses the Application on its Bitrix24 account (the "Licensee").

By installing or using the Application you accept this Agreement. If you do not agree, do not install or use the Application. If you accept on behalf of an organization, you confirm that you are authorised to bind it.

Please read Section 9 (AI assistants) before installing. The purpose of the Application is to pass data from your Bitrix24 CRM to an external AI service that you choose. The Licensor does not supply that AI service and is not responsible for it.

1. Definitions

1.1. Application — the MCP24 software provided as a cloud service that connects external AI assistants to a Bitrix24 account via the Model Context Protocol with a controlled scope of access, including its interfaces, documentation, updates and new versions.

1.2. Bitrix24 account — the Licensee's cloud Bitrix24 workspace or on-premise Bitrix24 installation on which the Application is installed.

1.3. Marketplace — the Bitrix24 Marketplace through which the Application is distributed.

1.4. Optional paid features — features that the Licensor may introduce in the future and offer separately for a fee. The Application itself is free of charge (Section 5).

1.5. AI assistant — an external artificial intelligence service or MCP client (for example Claude, ChatGPT, Gemini, Cursor or any other MCP client) that the Licensee, at its own choice, connects to its Bitrix24 account through the Application.

1.6. AI provider — the operator of an AI assistant (for example Anthropic, OpenAI, Google or another provider).

1.7. Connection — access of an AI assistant to the Bitrix24 account issued by the Application, linked to the specific employee of the Licensee who confirmed it, working with that employee's Bitrix24 rights (Section 9.6), and revocable at any time by that employee or by a Bitrix24 administrator of the Licensee.

1.8. Access policy — the Application settings that define what is available to AI assistants: access profile, enabled tools, pipeline scope, masking of personal data, confirmation of deletions, limits on records per response and changes per hour, and the kill switch that disables all access.

1.9. Journal — the "AI Actions (MCP24)" smart process created by the Application in the Licensee's Bitrix24 account, with its stages ("Done", "Denied by policy", "Awaiting confirmation"), fields and records. The Journal is part of the Licensee's Bitrix24 data and belongs to the Licensee.

1.10. Data subject — a natural person whose personal data the Licensee processes in its Bitrix24 account.

2. License grant

2.1. The Licensor grants the Licensee a non-exclusive, non-transferable, non-sublicensable, worldwide, revocable license to use the Application on the Licensee's Bitrix24 account for its internal business purposes for as long as the Application is installed on that account.

2.2. The Application is provided as a service (SaaS). It runs on the Licensor's infrastructure and is accessed through its interface embedded in the Bitrix24 account, through the MCP endpoint and through the Bitrix24 REST API. No copy of the Application is delivered to the Licensee.

2.3. All intellectual property rights in the Application remain with the Licensor. No rights are granted except those expressly stated.

2.4. Features of the Application include:

• an MCP endpoint to which the Licensee connects the AI assistant of its choice;
• confirmation of a Connection by an employee of the Licensee from inside the Bitrix24 account with a one-time pairing code; revocation of a Connection by the employee who owns it or by a Bitrix24 administrator;
• tools for reading and changing CRM data (search, record cards, deal lists, timeline comments and others, as defined by the current version);
• application of the Access policy to every request of the AI assistant, including masking of personal data and pipeline scope;
• confirmation of deletions by a Bitrix24 administrator or by the employee who owns the Connection, with a Bitrix24 notification to that employee;
• creation of the Journal in the Bitrix24 account on installation and recording of significant actions of the AI assistant in it;
• an "AI Actions" tab in contact and company cards and an "AI Actions" button in deal cards;
• a management page of the Application available from the main menu of the Bitrix24 account; the Access policy on it can be changed only by Bitrix24 administrators of the Licensee, other employees see it read-only.

2.5. Architecture. The Journal is created and stored in the Licensee's Bitrix24 account by standard Bitrix24 means. CRM data passes through the Licensor's servers in transit, within a single request of the AI assistant, and is not stored there. After the Application is uninstalled, the Journal and all CRM data remain in the Licensee's Bitrix24 account. The Licensor permanently stores only the service data listed in the Privacy Policy.

2.6. The Application does not supply artificial intelligence. Section 9 is an essential term of this Agreement.

3. Acceptance

3.1. This Agreement is available to the Licensee before installation at https://mcp-eu.ai-automation-agency.biz/legal/license and on the Application page in the Marketplace.

3.2. Installing the Application on a Bitrix24 account through the Marketplace and granting it the requested access permissions constitutes acceptance of this Agreement.

3.3. The Licensee may request the current version of this Agreement at any time at artismediaeu@gmail.com.

4. Scope of use

4.1. The Licensee may use the Application for its own business purposes as described in Section 2.4, and may use the Journal and its records without restriction for its own business purposes, including to demonstrate to authorities and counterparties what actions an AI assistant performed.

4.2. The number of Bitrix24 users who may use the Application is not limited by the Licensor and depends on the Licensee's Bitrix24 plan.

4.3. The number of AI assistant requests and Journal records is not limited by the Licensor, except for technical limits set by Bitrix24 for its REST API and smart processes, and reasonable limits under Section 7.4.

4.4. The Licensee may not grant the right to use the Application to third parties, except its employees and representatives acting on its behalf in its Bitrix24 account.

5. Fees

5.1. The Application is provided free of charge. No fee is payable for installing or using it, and all features under Section 2.4 are available without payment.

5.2. Optional paid features, if introduced, will be offered separately and will never be charged without the Licensee's explicit consent. Where the Licensee chooses such a feature, it is paid through the Marketplace: payment processing, billing periods and payment documents are handled by the Marketplace operator, and the Licensor does not collect payments directly. Refunds follow the Marketplace rules and mandatory law.

5.3. Declining or discontinuing an optional paid feature does not affect the features available free of charge. The Licensee's Bitrix24 data, including the Journal, is not affected in either case.

6. Licensor's obligations and rights

6.1. The Licensor shall: provide access to the Application while it is installed; make reasonable efforts to keep it operational, subject to Sections 12 and 13; provide support under Section 11; process personal data in accordance with the Privacy Policy and the GDPR; not store CRM data or personal data of the Licensee's data subjects on its servers beyond what is described in Section 2.5 and the Privacy Policy; and inform the Licensee in advance, where possible, of maintenance causing prolonged unavailability.

6.2. The Licensor may: develop and change the Application's features, interfaces, set of tools and fields it creates, and release updates without prior approval of the Licensee, provided the core purpose of the Application is preserved; perform scheduled and unscheduled maintenance; suspend or terminate access in case of material breach of this Agreement or unlawful use; engage subcontractors and hosting providers, remaining responsible for them and binding them to confidentiality (sub-processors are listed in the Privacy Policy); and name the Licensee as a user of the Application only with its prior written consent.

7. Restrictions

7.1. The Licensee shall not: (a) copy, modify, decompile or reverse engineer the Application except as permitted by mandatory law; (b) resell, sublicense, rent or provide access to the Application to third parties, or include it in its own products or services, without the Licensor's written consent; (c) remove or alter copyright notices, trademarks or names of the Licensor; (d) use the Application to build a competing product; (e) interfere with the operation or security of the Application, the Licensor's infrastructure or other customers' Bitrix24 accounts; (f) use the Application or the Journal for purposes unrelated to the Licensee's business, including disclosing information about data subjects to third parties without a legal basis; (g) use Connections for bulk export of Bitrix24 data, or attempt to circumvent the Access policy, the limits under Section 7.4 or the confirmation of deletions.

7.2. The Application limits the data available to an AI assistant and records its significant actions, but it is not a GDPR compliance tool and does not replace legal advice. The Licensee may not rely on the Application as its only and sufficient means of complying with data protection law.

7.3. The Application is not intended for special categories of personal data (Article 9 GDPR) or personal data relating to criminal convictions and offences (Article 10 GDPR).

7.4. Limits. AI assistant requests are executed through the Bitrix24 REST API, which has request rate limits set by Bitrix24. The Licensor may set reasonable technical limits on request frequency, the number of records per response and the number of changes per period, solely to prevent the Application from exhausting the Licensee's Bitrix24 limits and to prevent abuse. Such limits do not prevent normal use of the Application.

8. Licensee's responsibilities

8.1. The Licensee is the controller of the personal data in its Bitrix24 account and is responsible for having a lawful basis to process it and to make it available to an AI assistant, including data of clients, contacts, counterparties and employees, and for informing data subjects as required by Articles 13 and 14 GDPR.

8.2. The Licensee chooses the AI assistant and the AI provider on its own, assesses whether passing Bitrix24 data to them is lawful, including any transfer outside the European Economic Area, and fulfils the related obligations of a controller (Section 9).

8.3. The Licensee configures the Access policy proportionately to its tasks: it chooses the access profile, pipeline scope and masking mode, and widens them only as far as necessary (data minimisation, Article 5(1)(c) GDPR).

8.4. The Licensee reviews deletion confirmation requests in good time and revokes Connections of employees who have lost access to the Bitrix24 account. Requests through the Connection of a deactivated employee stop working once that employee's Bitrix24 authorisation can no longer be renewed, but revoking the Connection is the reliable way to end it immediately.

8.5. The Licensee keeps pairing codes, Connection addresses and tokens confidential and revokes a Connection immediately if it suspects compromise.

8.6. The Licensee is responsible for the access rights it grants to its users in Bitrix24, including access to the Journal, and for preventing use of the Application by unauthorised persons.

8.7. The Licensee notifies the Licensor without delay of any unlawful use of the Application that comes to its attention.

9. AI assistants

9.1. The Application acts as an intermediary between the Licensee's Bitrix24 account and an external AI assistant connected by the Licensee at its own choice.

9.2. The Licensor does not supply artificial intelligence. The Application contains no AI models, includes no access to them and provides no keys to services of Anthropic, OpenAI, Google or other AI providers. An account with the chosen AI provider and payment for its services are the Licensee's responsibility.

9.3. Bitrix24 data is passed to the AI assistant. This is the purpose of the Application. The decision to connect an AI assistant, the choice of AI provider and the assessment of whether the data may leave the Bitrix24 account are made by the Licensee on its own and at its own responsibility. The AI provider is the Licensee's own service provider: the Licensor is not a party to the Licensee's contract with it, does not select it, is not responsible for its processing, and the AI provider is not the Licensor's sub-processor.

9.4. The Licensor is not responsible for the AI assistant's actions. Answers, decisions and actions of an AI assistant are determined by its provider and model, not by the Application. The Application limits what is available to the AI assistant (Section 9.5) and records its significant actions in the Journal, but does not check whether they make sense and does not guarantee that they are correct. The Application cannot control what the AI provider does with data it has received.

9.5. Control measures. The Application provides access profiles, pipeline scope, masking of personal data, confirmation of deletions by a person, limits on records per response and changes per hour, and the kill switch. The most restrictive settings apply by default: the "Read only" profile and masking enabled. Widening these settings is done by the Licensee knowingly and at its own responsibility.

9.6. Access rights are defined by Bitrix24 and belong to the employee. Each Connection is linked to the employee of the Licensee who confirmed it from inside the Bitrix24 account. Requests of the AI assistant through that Connection are executed with that employee's own Bitrix24 authorisation, which Bitrix24 issues when the employee opens the Application, and therefore only within the rights Bitrix24 grants to that employee and within the access permissions of the Application: the AI assistant cannot see or change anything that the employee cannot see or change in Bitrix24. The Access policy can only narrow this scope and never extends it, whatever the settings.

If the employee's authorisation expires and cannot be renewed, or is revoked (for example, when the employee is deactivated), requests through the Connection are refused with a message asking the employee to open the Application again. The Application never substitutes the authorisation granted at installation for the employee's own. The authorisation granted at installation is used only for service operations: setting up the Application, writing the Journal, sending notifications about deletion requests and processing uninstallation. Journal records are attributed to the employee who owns the Connection and are written on behalf of the Application, so they are created even if that employee has no access to the Journal smart process.

Only a Bitrix24 administrator of the Licensee can change the Access policy, including the kill switch; the Application checks this with Bitrix24 and not with data sent by the browser. A deletion request may be confirmed by a Bitrix24 administrator or by the employee who owns the Connection; in either case the deletion is executed with the rights of the employee who owns the Connection.

9.7. The Journal is kept in the Licensee's Bitrix24 account and remains there after the Application is uninstalled. The Licensor does not guarantee completeness of the Journal if Bitrix24 fails at the time of writing.

9.8. The Application is not an information security product and does not replace the organisational measures of the controller.

10. Personal data

10.1. Personal data is processed in accordance with the MCP24 Privacy Policy (https://mcp-eu.ai-automation-agency.biz/legal/privacy). Its Section 14 (Data Processing Terms under Article 28 GDPR) forms an integral part of this Agreement.

10.2. For personal data in the Licensee's Bitrix24 account, the Licensee is the controller and the Licensor acts as a processor to the limited extent that such data passes through the Licensor's servers in order to provide the Application. CRM data, including names, phone numbers, e-mail addresses and other information from CRM records, passes through the Licensor's servers in transit, within a single request of the AI assistant, and is not stored.

10.3. Data permanently stored by the Licensor is limited to: the Bitrix24 account address, the installation ID (member_id) and the application token with which Bitrix24 signs its notifications; OAuth access and refresh tokens issued to the Application at installation and to employees who have Connections (Section 9.6); Access policy settings; numeric IDs of the Journal smart process, its stages and fields; hashes of Connection tokens with the employee and the AI assistant name; registrations of MCP clients; and the service log described in the Privacy Policy.

10.4. Pairing codes and Connections. A pairing code is valid for 10 minutes and can be used once. Connection tokens are stored by the Licensor only as hashes from which the token cannot be recovered.

10.5. Each party shall keep confidential any non-public information it learns in connection with this Agreement.

11. Support and updates

11.1. Support is provided free of charge by e-mail at artismediaeu@gmail.com and by phone at +48 693 124 346, Monday–Friday, 9:00–18:00 CET, in English, Polish or Russian. We aim to respond within two business days.

11.2. Support covers: questions about the Application's features, help with connecting an AI assistant and configuring the Access policy, and diagnosing and fixing errors of the Application.

11.3. Support does not cover: setting up or repairing the Licensee's Bitrix24 account; setting up or paying for an AI assistant or the AI provider's services; assessing whether passing data to an AI assistant is lawful, or legal review of the Licensee's documents; custom development; legal, HR or accounting advice; representing the Licensee before supervisory authorities; Bitrix24 training.

11.4. Updates are provided free of charge and are installed by the Licensor automatically, without separate consent of the Licensee. This Agreement applies to all updates and new versions.

12. Availability and on-premise Bitrix24

12.1. The Licensor makes reasonable efforts to keep the Application available but does not guarantee uninterrupted or error-free operation. Maintenance may cause short interruptions.

12.2. The Application depends on Bitrix24 and its REST API, on the AI assistant and on the hosting provider; their changes or outages are outside the Licensor's control.

12.3. On-premise Bitrix24. On an on-premise Bitrix24 installation not connected to the Bitrix24.Network service, Bitrix24 issues an access key to the Application only when a user opens it and does not allow refreshing it in the background. On such installations a Connection works while the key received when the employee who owns it last opened the Application is valid, and that employee may need to open the Application again from Bitrix24.

13. Warranty disclaimer

13.1. The Licensor warrants that it holds the rights in the Application necessary to grant the license under this Agreement.

13.2. Otherwise, to the maximum extent permitted by law, the Application is provided "as is" and "as available", without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, non-infringement and compatibility with arbitrary settings and customisations of the Licensee's Bitrix24 account.

13.3. The Licensor is not responsible for the content of CRM data or for the scope of data the Licensee has opened to an AI assistant. The Application applies the Access policy set by the Licensee: if the profile is widened, masking is disabled or no pipeline scope is set, the AI assistant receives exactly that scope of data and rights.

13.4. The Licensor does not warrant or confirm that the Licensee's processing complies with the GDPR or other data protection law. Using the Application does not by itself ensure such compliance and does not release the Licensee from its obligations as controller.

14. Limitation of liability

14.1. The Licensor is not liable for: the accuracy of data entered by the Licensee, its users or an AI assistant on their behalf; answers, decisions and actions of an AI assistant (Section 9.4); processing of data by the AI provider; consequences of deletions confirmed by the Licensee's employees; differences between the Application and standard Bitrix24 sections caused by Bitrix24 settings; interruptions caused by unavailability of Bitrix24, the AI assistant, the hosting provider or networks, exhaustion of REST API limits, or force majeure; incompleteness of the Journal due to Bitrix24 failures (Section 9.7); losses caused by the Licensee's breach of this Agreement; fines or other measures imposed on the Licensee by authorities in connection with its processing of personal data.

14.2. To the maximum extent permitted by law, the Licensor shall not be liable for indirect or consequential damages, lost profits, lost data or business interruption.

14.3. The Licensor's total liability under this Agreement is limited to EUR 100 or the amount paid by the Licensee for optional paid features of the Application in the preceding 12 months, whichever is greater.

14.4. Nothing in this Agreement limits liability for damage caused intentionally, or any liability that cannot be limited under applicable law, including the rights of consumers.

14.5. The Licensee is solely responsible towards data subjects, counterparties and authorities for the lawfulness of processing personal data in its Bitrix24 account and passing it to an AI assistant.

15. Term and termination

15.1. This Agreement is effective from installation for as long as the Licensee uses the Application.

15.2. This Agreement ends when the Licensee uninstalls the Application, by agreement of the parties, or by the Licensor for material breach by the Licensee. The Licensor may also discontinue the Application with at least 30 days' notice.

15.3. The Licensee may stop using and uninstall the Application at any time.

15.4. On uninstall, Bitrix24 notifies the Licensor, and the Licensor immediately deletes the access tokens to the Bitrix24 account, including the access tokens of employees, the data about the account and its settings, and all Connections of that account, closes open user sessions of that account and cancels pending deletion confirmation requests. The Journal and all CRM data remain in the Licensee's Bitrix24 account and stay available to it by standard Bitrix24 means. Service logs are kept as described in the Privacy Policy.

15.5. Termination does not affect obligations that arose before it.

16. Changes

16.1. The Licensor may update this Agreement. The current version is published at https://mcp-eu.ai-automation-agency.biz/legal/license with its effective date.

16.2. Material changes take effect no earlier than 30 days after publication; continued use after that date means acceptance. If the Licensee does not agree, it may stop using and uninstall the Application.

16.3. Changes do not make features that are free of charge payable without the Licensee's explicit consent (Section 5.2).

17. Governing law and disputes

17.1. This Agreement is governed by the laws of the Republic of Poland, excluding its conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods.

17.2. The parties shall first try to resolve disputes by negotiation. A complaint shall be sent in writing to artismediaeu@gmail.com or to the Licensor's registered address; the Licensor will respond within 30 days of receipt.

17.3. If no agreement is reached, disputes shall be resolved by the common court competent for the Licensor's registered office in Warsaw, unless mandatory law provides otherwise (in particular for consumers).

18. Miscellaneous

18.1. If any provision is held invalid, the remaining provisions remain in force.

18.2. This Agreement, together with the Privacy Policy, constitutes the entire agreement regarding the Application.

18.3. This Agreement does not govern the Licensee's relationship with the operator of Bitrix24 and the Marketplace, with the AI provider, or with data subjects; those relationships are governed by their own terms and by applicable law.

18.4. Legal notices are sent by e-mail: to the Licensor at artismediaeu@gmail.com, to the Licensee at the e-mail address of the Bitrix24 account administrator.

18.5. In case of discrepancies between language versions, the English version prevails.