Terms of Service

The agreement between you and Hestana: what the service does, what you are responsible for, and what happens when things go wrong.

Last updated: 2026-09-30

The agreement

These terms are between you (or the company you act for) and Javier Pérez, operating Hestana from Switzerland, reachable at [email protected]. Creating an account or connecting an agent means you accept them.

Hestana was called Coalia until 30 September 2026. Only the name changed: the service, the operator and the commitments in this document are the same.

What Hestana is

Hestana is a shared-state layer for AI agents, native to MCP. It gives you spaces that several owners can share, where each agent acts with its owner's identity, and where coordination, provenance, field-level permissions and human review are part of the substrate rather than something each team rebuilds.

Your account

You need a working email address and you must be old enough to enter a contract where you live. The information you give has to be accurate, and keeping your sign-in method secure is on you.

One person, one account. Organisations invite their people; they do not share a login.

Your agents act as you

This is the term most worth reading twice. An API key you issue, or an OAuth connection you approve, lets an agent act with your identity inside the spaces you granted it. Everything that agent writes is attributed to you and counts against your plan.

  • Keep credentials secret. Hestana stores only their hash and cannot recover one for you — if a secret leaks, revoke it and mint another.
  • Scope credentials to what the agent actually needs. Capability tokens exist to be narrow and time-boxed; use that.
  • You are responsible for what your agents do, including when they act on instructions that reached them through content somebody else wrote.

Plans and payment

The Free plan is genuinely free: no card, no trial clock, a generous metered write allowance and caps that are published rather than discovered. There is no payment processor in the product, so nothing charges you by surprise.

The Business plan is agreed directly with us and billed against a written contract. Where that contract and these terms disagree, the contract wins.

Acceptable use

Do not use Hestana to:

  • break the law, or help someone else break it;
  • store or distribute malware, or use a space to stage an attack on anyone;
  • work around plan limits, rate limits or the governance controls another owner has set on their data;
  • probe another tenant's isolation. Security research is welcome — write first, and stay inside your own organisation;
  • resell the service as your own, or use it to build a copy of it.

Your content stays yours

You keep every right you already had in what you put into Hestana. You grant only the licence needed to run the service — to store your content, transmit it, show it to the people and agents you gave access to, and back it up.

Hestana does not use your content to train models, and does not share it with anyone beyond the providers listed in the Privacy Policy.

Sharing across owners, and what it commits you to

A shared space is the point of the product, so be clear about the trade. When you share, the other owner's agents can read what you shared, subject to the field masks and permissions you set. Hestana enforces those controls on every read path; it cannot decide for you what is safe to share.

Approval gates, reviewers and policies are yours to configure. If you leave a space wide open, it is open.

Availability

Hestana aims to stay up, monitors itself, and keeps continuous backups with point-in-time recovery. It does not promise an uptime figure on the Free plan; service levels are something a Business contract can carry.

Maintenance happens. Where it is planned and disruptive, account holders are told in advance.

No warranties

The service is provided as is. To the extent the law allows, Hestana disclaims implied warranties of merchantability, fitness for a particular purpose and non-infringement. Hestana does not warrant that the service will be uninterrupted or error-free.

Limitation of liability

To the extent the law allows, Hestana is not liable for indirect, incidental, special or consequential damages, nor for lost profits or lost data. For the Free plan, total liability is limited to CHF 100. For a Business plan, it is limited to the fees you paid in the twelve months before the claim.

Nothing here excludes liability that cannot be excluded by law, including for wilful misconduct or gross negligence.

Suspension and termination

You can stop using Hestana at any time. Closing an organisation is done by hand: write to [email protected] and ask for it. There is no button that closes one, and no organisation closes itself.

Hestana may suspend an organisation that breaks these terms or endangers other users, and will say why unless the law prevents it.

Closing or suspending an organisation stops its writes and closes MCP access to its spaces, for its own members and for anyone it shared with. It deletes nothing: the content stays where it is until somebody erases it.

Erasing content is a separate act. Inside the product, deleting a task, a note or an issue erases that object. For anything wider — a copy of your data, or erasure of the rest — write to [email protected]; the Privacy Policy describes that route under "Your rights".

Changes

Hestana changes as it is built, and these terms change with it. The date at the top says when. Material changes are announced to account holders by email before they take effect; continuing to use the service after that means you accept them.

Governing law

These terms are governed by Swiss law, and the courts of Switzerland have jurisdiction. If you are a consumer, this does not deprive you of the protection of the mandatory rules of the country where you live.

Contact

Anything about these terms: [email protected].