Terms of Service

1. Definitions

• "Service" means the AvdControl hosted application at avdcontrol.com and its tenant subdomains, together with its APIs, documentation and support.
• "Tenant" means the isolated organisation workspace we provision for you, reachable at a subdomain you choose.
• "Authorised User" means an individual you invite or provision into your Tenant, such as a service desk agent, administrator or owner.
• "Customer Data" means data you or your Authorised Users submit to the Service, and data the Service collects from your Azure environment at your direction, including session metadata such as user principal names, host pool and session host names, and audit records.
• "Your Azure Environment" means the Microsoft Azure subscriptions, Microsoft Entra ID tenant, host pools and session hosts that you own or control and to which you grant the Service access.
• "Documentation" means the user guide and setup material we publish for the Service.

2. The Service, and what it is not

The Service lets you delegate scoped Azure Virtual Desktop actions — such as viewing sessions and disconnecting, signing out or messaging a session — to people who do not hold Azure administrative roles, and records those actions in an audit trail.

Your Azure estate remains yours. We do not host your desktops, host pools or session hosts. You create an application registration in your own Microsoft Entra ID tenant and grant it the Azure role assignments described in the Documentation. The Service acts within the permissions you grant, and you may revoke those permissions at any time by deleting or disabling that application registration, or by removing its role assignments.

Your relationship with Microsoft is separate from these Terms. You are responsible for your own Microsoft licensing, Azure consumption charges, and compliance with Microsoft's terms. We are not a reseller of Microsoft products and we are not responsible for the availability, behaviour, cost or security of Your Azure Environment.

The Service is provided for business use only. It is not offered to consumers, and it is not intended for use by anyone under 18.

3. Accounts, Tenants and Authorised Users

You must give accurate registration information and keep it current. You are responsible for all activity that occurs under your Tenant, including the acts and omissions of your Authorised Users, and for their compliance with these Terms.

• Keep credentials, multi-factor authentication devices, backup codes, single sign-on secrets and SCIM tokens confidential. Do not share accounts between individuals.
• Configure roles so each Authorised User has only the access their job needs, and remove access promptly when someone leaves.
• Tell us without undue delay at [email protected] if you suspect any unauthorised access to your Tenant or to the credentials it holds.
• Subdomains are allocated for your use during the term only. You must not choose a subdomain that infringes another party's rights, impersonates another organisation, or is misleading. We may reclaim or rename a subdomain where it breaches this paragraph, or on termination.

Seat and session limits apply to each plan as described on the pricing page. If you exceed them, we will ask you to upgrade; we may apply the limits technically after notifying you.

4. Trials

New Tenants normally start with a 14-day free trial. Unless you cancel before the trial ends, the plan you selected begins automatically and the first payment is taken. You can cancel at any time during the trial from your billing settings.

Trials are provided "as is" and may be limited, changed or withdrawn. Any configuration or data created during a trial may be deleted if the trial ends without conversion to a paid plan.

5. Fees, billing and taxes

• Subscription fees are stated on the pricing page or in an order form, are charged in advance for each billing period, and are billed per portal member rather than per Azure Virtual Desktop end user.
• Payments are processed by Stripe. You authorise recurring charges to your payment method until you cancel. We do not store full card details.
• Except where required by law, fees are non-refundable and we do not provide credits for partial periods or unused capacity.
• Fees exclude taxes, duties and withholdings. You are responsible for any such amounts other than taxes on our net income, and you will gross up payments where withholding is required.
• We may change prices for a renewal term with at least 30 days' notice before the change takes effect. If you do not accept a price change, you may cancel before the renewal date.
• If payment fails, we may retry it, and we may restrict or suspend access as described in section 8. You remain liable for amounts due, and we may recover reasonable costs of collection.

Billing questions go to [email protected].

6. Your responsibilities

You are responsible for the lawfulness of your use of the Service and for the consequences of the actions your Authorised Users take through it. In particular:

• Authority over Your Azure Environment. You confirm that you own or are authorised to administer the Azure subscriptions, Entra ID tenant and host pools you connect, and that you may lawfully grant us the access required to operate the Service.
• Scope of access. You choose which subscriptions or resource groups to grant, and you should grant the narrowest scope that works. You are responsible for reviewing that scope periodically.
• Disruptive actions. Signing a user out of a session or disconnecting them can interrupt their work and may cause unsaved data to be lost. You are responsible for your internal policies, approvals and warnings around these actions.
• Transparency to your people. Where the Service shows you session information about your staff or contractors, you are responsible for telling them about that monitoring and for having a lawful basis for it under applicable data protection and employment law.
• Your own records. The Service is not a backup service. You are responsible for exporting and retaining any audit or session records you need for your own compliance purposes.

7. Acceptable use

You and your Authorised Users must comply with the Acceptable Use Policy, which forms part of these Terms. Breach of that policy is a material breach of these Terms.

8. Suspension and revocation of a Tenant

We reserve the right to suspend, restrict, revoke or terminate any Tenant, account or Authorised User, in whole or in part, with or without prior notice, at our discretion. This is a right and not an obligation, and exercising it does not waive any other remedy available to us.

We will normally give notice and, where practical, an opportunity to fix the problem. We may act immediately and without notice where we reasonably consider that delay would create risk to the Service, to us, to other customers, or to any third party. Circumstances in which we may act include:

• non-payment, a failed or reversed payment, chargeback, or expiry of a trial without conversion;
• actual or suspected breach of these Terms, the Acceptable Use Policy, or any applicable law;
• actual or suspected compromise of your Tenant, credentials or connected application registration, or activity that suggests credential misuse;
• activity that threatens the security, integrity, availability or performance of the Service or of any other customer's Tenant, including excessive or abusive load;
• use of the Service to act on an Azure environment you are not authorised to administer;
• a request or requirement from a court, regulator, law enforcement body, or a supplier we depend on, or where continued provision would place us in breach of law, sanctions or export controls;
• insolvency, bankruptcy, administration, liquidation or cessation of business by you, or a comparable event;
• fraud, misrepresentation in registration, abuse of trials or promotional pricing, or repeated re-registration to avoid limits or enforcement; or
• where we discontinue the Service or a plan, in which case we will give reasonable notice under section 20 and refund any prepaid fees covering the period after the discontinuation date.

Effect of suspension. While a Tenant is suspended, Authorised Users may be unable to sign in or to perform session actions, scheduled data collection may stop, and integrations may be disabled. Fees continue to accrue during a suspension caused by your breach or non-payment. Suspension does not by itself delete Customer Data.

Effect of revocation. Where we revoke a Tenant we may terminate this agreement under section 9, disable all access, reclaim the subdomain, and delete Customer Data in line with section 9. We may decline to provide the Service to you, to any organisation under common control with you, or to any individual involved in the conduct concerned, in the future.

We are not liable for any loss arising from a suspension or revocation properly made under this section. If we suspend or revoke a Tenant in error, we will restore access as soon as practicable, and that restoration is your sole remedy. Where suspension is not caused by your act or omission, and we do not restore the Service, we will refund prepaid fees covering the unused period.

9. Term, termination and what happens to your data

This agreement starts when you first accept it and continues while you have an active Tenant. Subscriptions renew automatically each billing period unless cancelled.

• You may cancel at any time from billing settings, effective at the end of the current billing period, or immediately if we materially breach these Terms and do not cure the breach within 30 days of written notice.
• We may terminate for cause under section 8, or for convenience on 30 days' notice, in which case we will refund prepaid fees covering the period after termination.
• Export first. Before your access ends, export any Customer Data you need. We can provide a reasonable export on request while the Tenant is still accessible.
• Deletion. After termination we archive the Tenant and then delete Customer Data, normally within 30 days of the effective date of termination, except where we are required to keep records by law, or need them for billing, tax, security investigation or the resolution of a dispute. Backups age out on their own cycle. Deletion is irreversible.
• Survival. Sections on intellectual property, confidentiality, fees accrued, disclaimers, limitation of liability, indemnities, governing law, and any term that by its nature should survive, continue after termination.

10. Our intellectual property

The Service is licensed, not sold. As between the parties, AvdControl and its licensors own all right, title and interest in and to the Service and everything comprising it, including its software, source and object code, APIs, database schemas, algorithms, architecture, user interfaces, visual design, brand assets, documentation, marketing material, and every improvement, modification and derivative work of them, together with all patents, copyright, database rights, design rights, trade marks, trade secrets and other intellectual property rights in them (the "AvdControl IP").

No rights are granted to you other than the limited licence in section 11. All rights not expressly granted are reserved. Nothing in these Terms transfers ownership of any AvdControl IP to you, and nothing in a purchase order, procurement portal or similar document changes this position.

Where you or your personnel contribute anything that is incorporated into the Service — including designs, configuration approaches, code, or documentation contributed at our request — you assign to us all intellectual property rights in that contribution, or where assignment is not possible, grant us a perpetual, irrevocable, worldwide, royalty-free, sublicensable licence to use it.

11. Your licence, and restrictions on it

Subject to these Terms and to payment of the applicable fees, we grant you a limited, non-exclusive, non-transferable, non-sublicensable, revocable licence, during the term, to access and use the Service and Documentation for your own internal business purposes.

You must not, and must not permit any Authorised User or third party to:

• copy, modify, translate, adapt or create derivative works of the Service, except as expressly permitted;
• reverse engineer, decompile, disassemble or otherwise attempt to derive the source code, structure, ideas or algorithms of the Service, except to the limited extent that this restriction cannot lawfully be excluded and you have first asked us for the interoperability information you need;
• rent, lease, lend, sell, resell, sublicense, distribute, host or otherwise make the Service available to any third party, or operate it as a service bureau or on behalf of anyone other than your own organisation, unless we have agreed a partner or reseller arrangement in writing;
• use the Service, or any information gained from it, to build, train, improve or market a product or service that competes with the Service, or to assist anyone else in doing so;
• use scraping, crawling, harvesting, automated data extraction or any undocumented interface to extract data or content from the Service, other than through APIs we publish and within their documented limits;
• run penetration tests, vulnerability scans, load tests or benchmarks against the Service, or publish the results of any such test, without our prior written consent (report suspected vulnerabilities to [email protected] instead);
• circumvent or attempt to circumvent any technical limit, seat limit, rate limit, authentication, tenant isolation or access control in the Service;
• remove, obscure or alter any proprietary notice, trade mark or attribution in the Service or Documentation; or
• use the Service in breach of the Acceptable Use Policy.

Any use outside this licence is a material breach and infringes the AvdControl IP. Because damages may not be an adequate remedy for such a breach, we may seek injunctive or other equitable relief without needing to post security.

12. Customer Data, and the limited rights we need

You own your Customer Data. We claim no ownership in it. You grant us a worldwide, non-exclusive, royalty-free licence to host, store, copy, transmit, display, back up and process Customer Data, and to grant equivalent rights to the sub-processors listed on our sub-processors page, only to the extent needed to provide, secure, support and improve the Service, to comply with law, and to enforce these Terms.

You are responsible for ensuring that you have all rights, consents and lawful bases required for us to process Customer Data as described. You must not submit to the Service any special category personal data, payment card data, health records, or data subject to specific regulatory regimes beyond ordinary business use, and you must not use the Service to store material unrelated to the operation of your Azure Virtual Desktop estate.

Service data and aggregated statistics. We may generate and use technical logs, telemetry, security signals and aggregated statistical information about the configuration, performance and use of the Service, and may use that information to operate, secure, troubleshoot, benchmark and improve our products, and to produce aggregate reporting. Such information will be aggregated or de-identified so that it does not identify you, your Authorised Users or any individual, and we will not publish anything that identifies you as the source without your consent. We do not sell Customer Data, and we do not use Customer Data to train generally available machine learning models.

13. Feedback

If you send us suggestions, feature requests, ideas or other feedback about the Service, you grant us a perpetual, irrevocable, worldwide, royalty-free, fully sublicensable and transferable licence to use, disclose and exploit that feedback for any purpose, without attribution, compensation or confidentiality obligation. You confirm you have the right to give the feedback on those terms. We are free to develop features that resemble your feedback, and this section does not give us rights in your Customer Data or Confidential Information.

14. Trade marks and publicity

"AvdControl", our logos, wordmarks and product names are our trade marks, whether registered or not. You may refer to us factually, and use our name and logo unmodified to identify us as a supplier internally. Any other use — including in marketing, press releases, domain names, app names, social media handles, advertising keywords or merchandise, or in a way that suggests endorsement, partnership or certification — needs our prior written consent, and must follow any brand guidelines we give you.

You must not register or attempt to register any trade mark, domain name, social account or company name that includes or is confusingly similar to our marks. We will not use your name or logo publicly as a customer reference without your prior written consent.

Microsoft, Azure, Microsoft Entra ID, Azure Virtual Desktop, Windows and other third-party marks are the property of their respective owners, and are used in the Service and our material for identification only. We are not affiliated with, endorsed by, or sponsored by Microsoft.

15. Third-party services and open-source components

The Service depends on third-party platforms, including Microsoft Azure, and the sub-processors listed on our sub-processors page. Your use of those platforms is governed by their own terms. We are not responsible for third-party services, for their acts or omissions, or for any change, interruption, deprecation or price change they make, and we may substitute a sub-processor in line with the Data Processing Addendum.

The Service includes open-source components licensed by their respective authors. Those components are provided under their own licence terms, which prevail over these Terms to the extent of any conflict in relation to that component. We will provide a list of components and licences on request to [email protected].

16. Intellectual property complaints

We respect intellectual property rights and expect our customers to do the same. If you believe that content in the Service, or content a customer has submitted to it, infringes your intellectual property, send a notice to [email protected] identifying yourself, the right you rely on, the material concerned and its location, what you would like done, and a statement that your complaint is made in good faith and that the information in it is accurate.

We investigate credible notices, and may remove material, disable a feature, or suspend or revoke a Tenant under section 8. Repeat infringement will result in termination. Knowingly submitting a false or abusive notice may make you liable for the resulting loss.

17. Confidentiality

Each party may receive information from the other that is marked confidential or that a reasonable person would understand to be confidential ("Confidential Information"), including Customer Data, our non-public pricing, security documentation, roadmaps and non-public aspects of the Service. The receiving party will use Confidential Information only to perform this agreement, protect it with at least reasonable care, and disclose it only to personnel and contractors who need it and are bound by comparable obligations.

These obligations do not apply to information that is or becomes public without breach, was already known free of any duty, is independently developed, or is lawfully received from a third party. A party may disclose Confidential Information where required by law or a regulator, giving the other party reasonable prior notice where lawfully able to do so. These obligations continue for five years after disclosure, and for as long as the information is a trade secret.

18. Security and data protection

We apply technical and organisational measures appropriate to the Service, including tenant isolation, encryption of stored Azure and identity provider secrets, encryption of data in transit, role-based access control, mandatory multi-factor authentication for privileged roles, and audit logging of privileged actions. Our security practices are summarised in the Data Processing Addendum.

No service is perfectly secure. You are responsible for the security decisions within your control, including the scope of Azure permissions you grant, your identity provider configuration, your role assignments, and the security of your own devices and networks. Where we process personal data on your behalf, we do so as your processor under the Data Processing Addendum, which is incorporated into these Terms.

19. Availability, support and changes to the Service

We aim to keep the Service available and to provide support during business hours, but unless we have signed a separate service level agreement with you, the Service is provided without any committed uptime, response time or support commitment. We may carry out maintenance, and will try to schedule planned maintenance that causes downtime outside UK business hours where practical.

We may change, add to or remove features. We will not make a change that materially reduces core functionality of a paid plan without giving you at least 30 days' notice; if such a change materially harms you, you may terminate the affected subscription and receive a refund of prepaid fees for the unused period.

Features labelled beta, preview, trial or experimental are provided for evaluation only, are excluded from any service commitment, may be changed or withdrawn at any time, and are provided "as is" without warranty or indemnity of any kind.

20. Disclaimer of warranties

Each party warrants that it has the authority to enter into this agreement. We warrant that we will provide the Service with reasonable skill and care.

Otherwise, and to the maximum extent permitted by law, the Service and Documentation are provided "as is" and "as available", and we disclaim all other warranties, conditions, representations and terms, whether express, implied, statutory or otherwise, including any implied warranty of merchantability, satisfactory quality, fitness for a particular purpose, title, accuracy, and non-infringement. We do not warrant that the Service will be uninterrupted, error-free or secure, that it will meet your requirements, that defects will be corrected, that data collected from Your Azure Environment will be complete, current or accurate, or that any action taken through the Service will succeed on the underlying Azure platform.

The Service is an administrative tool. It is not a security product, a compliance certification, a backup service, or a substitute for your own controls, monitoring, professional advice or record keeping. Nothing we publish is legal, regulatory or professional advice. You are responsible for validating that the Service is appropriate for your use, and you must not use it in any environment where failure could lead to death, personal injury, or severe physical, environmental or financial harm.

21. Limitation of liability

Nothing in these Terms limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for any liability that cannot lawfully be limited.

Subject to that, and to the maximum extent permitted by law:

• neither party is liable for indirect, special, incidental, consequential, exemplary or punitive loss, or for loss of profit, revenue, anticipated savings, business, goodwill, opportunity or reputation, for wasted expenditure or management time, or for loss, corruption or unavailability of data, in each case however arising and whether or not the loss was foreseeable or the party was advised of its possibility;
• each party's total aggregate liability arising out of or in connection with this agreement, whether in contract, tort (including negligence), breach of statutory duty, restitution or otherwise, is limited to the greater of (a) the total fees you paid or owed for the Service in the twelve months immediately before the first event giving rise to the liability, or (b) US$100;
• we have no liability for anything caused by Your Azure Environment, by your identity provider, by a third-party service or platform, by your configuration or role assignment decisions, by an action an Authorised User chose to take through the Service (including disconnecting or signing out a session), by your failure to keep credentials secure, or by your use of the Service in breach of these Terms; and
• you must bring any claim under this agreement within twelve months of the date you first became aware, or should reasonably have become aware, of the facts giving rise to it.

The caps in this section apply to all claims in aggregate and are not per incident. The parties agree that these limits are a reasonable allocation of risk, and that the fees for the Service reflect them.

22. Indemnities

Your indemnity. You will defend us, our affiliates and our personnel against any third-party claim, demand, action or proceeding arising out of or relating to (a) Customer Data, including a claim that it infringes a third party's rights or was processed unlawfully; (b) your or an Authorised User's use of the Service in breach of these Terms, the Acceptable Use Policy or applicable law; (c) an action taken through the Service on an Azure environment, including any claim by an affected end user, employee or contractor; (d) your failure to give any notice or obtain any consent required by data protection or employment law; or (e) a dispute between you and an Authorised User or end user. You will indemnify us against damages, costs and reasonable legal fees finally awarded or agreed in settlement of such a claim.

Our indemnity. We will defend you against a third-party claim that the Service, as provided by us and used in accordance with these Terms, infringes that third party's intellectual property rights, and will indemnify you against damages, costs and reasonable legal fees finally awarded or agreed in settlement, subject to the limits in section 21. This does not apply to a claim arising from Customer Data, from your combination of the Service with anything we did not supply, from a modification you make, from your continued use of a version after we provide a replacement, or from use in breach of these Terms. We may, at our option, modify the Service so it is non-infringing, obtain a licence, or terminate the affected subscription and refund prepaid fees for the unused period. This is our sole liability and your exclusive remedy for any intellectual property claim.

Process. The indemnified party must notify the other promptly of any claim, give the indemnifying party sole control of the defence and settlement (except that no settlement imposing a non-monetary obligation may be agreed without consent), and provide reasonable cooperation at the indemnifying party's expense.

23. Sanctions, export control and anti-corruption

Each party will comply with applicable sanctions, export control, anti-bribery, anti-money laundering and anti-corruption laws. You confirm that you, your Authorised Users, and any beneficial owner of your organisation are not the target of sanctions, are not located in or ordinarily resident in a sanctioned or embargoed territory, and are not on any restricted-party list, and that you will not make the Service available to any such person or use it for any prohibited end use. If this changes, tell us at once. We may suspend or revoke access under section 8 to comply with these laws.

24. Force majeure

Neither party is liable for failure or delay in performing its obligations (other than payment obligations) caused by an event beyond its reasonable control, including act of God, natural disaster, war, armed conflict, terrorism, civil unrest, epidemic, government action, change in law, sanctions, strike, failure of a utility, telecommunications or internet service, cyber attack, or the failure or discontinuation of a third-party platform on which the Service depends. If such an event continues for more than 60 days, either party may terminate the affected subscription on notice.

25. Changes to these Terms

We may update these Terms to reflect changes to the Service, to our business, or to legal or regulatory requirements. We will post the updated version here and change the effective date at the top of the page.

If a change materially reduces your rights or increases your obligations, we will give at least 30 days' notice before it takes effect, by email to your billing or owner contact, or by a notice in the Service. Continuing to use the Service after the change takes effect means you accept the updated Terms. If you do not accept them, you may terminate before they take effect and we will refund prepaid fees covering the unused period. Changes required by law or needed to address a security or legal risk may take effect immediately.

26. General

• Assignment. You may not assign or transfer this agreement without our written consent. We may assign it to an affiliate, or in connection with a merger, acquisition, reorganisation or sale of assets, and may use subcontractors and sub-processors to provide the Service while remaining responsible for their performance.
• Notices. Notices to you may be sent to your billing or owner email address, or posted in the Service, and are deemed received on the next business day. Notices to us must be sent to [email protected].
• Entire agreement. These Terms, together with the documents they incorporate and any order form, are the entire agreement between the parties on this subject and supersede all prior discussions and representations. Neither party relied on any statement not set out in them, save for fraudulent misrepresentation. Any terms you put forward in a purchase order, vendor portal or similar document have no effect.
• Order of precedence. If there is a conflict, a signed order form prevails over these Terms, these Terms prevail over the Acceptable Use Policy and Privacy Policy, and the Data Processing Addendum prevails on matters of personal data processing.
• Severability and waiver. If any provision is held unenforceable, it will be modified to the minimum extent needed, or severed, and the rest continues in force. A failure or delay in enforcing a right is not a waiver of it.
• No partnership or third-party rights. Nothing creates a partnership, joint venture, agency or employment relationship. No one who is not a party to this agreement has any right to enforce it.
• Independent development. Nothing prevents us from developing, acquiring or marketing products or services that compete with, or are similar to, anything you use or propose, provided we do not use your Confidential Information to do so.
• Language. These Terms are drafted in English, and the English version prevails over any translation.

27. Governing law and disputes

This agreement, and any dispute or claim arising out of or in connection with it or its subject matter or formation, including non-contractual disputes, is governed by the laws of the United Arab Emirates. The parties submit to the exclusive jurisdiction of the courts of Dubai, United Arab Emirates, save that either party may seek injunctive or other urgent interim relief in any competent court to protect its intellectual property or Confidential Information.

Before starting proceedings, each party will try in good faith to resolve the dispute by escalating it to a senior representative for 30 days from written notice. Claims must be brought individually, and not as a class, collective or representative action. Mandatory rights you have under the law of your own country of establishment are unaffected.

28. How to reach us

AvdControl provides the Service. Contact us at [email protected] for contract and intellectual property matters, [email protected] for data protection, [email protected] for security reports, [email protected] to report abuse, or [email protected] for anything else. We will provide our registered entity details and address on request.