Terms and conditions

These Terms and conditions ("Terms") govern the use of the application services of Carmilla provided by Bright Band Srl, with registered office at Via Imbriani 20, 20158 Milano (MI), ITALY, VAT no. IT05184690963 (the "Provider"). If the user accesses the services on behalf of an organisation that has entered into a contract with the Provider (the "Customer"), that contract prevails over these Terms in case of conflict.

1. Subject of the service

Carmilla is a meter-reading and remote-management platform (AMR/AMI) for meters and plants: collection and storage of readings, a web console to view and analyse data, exports and reports, alerts, a support portal, a built-in artificial-intelligence assistant and, where enabled, an interface for external applications. The available features depend on the Customer's contract and on the user's role.

2. Account and access

• Access is through personal credentials managed by an identity provider. The user keeps their credentials safe, does not share them and reports any unauthorised use without delay.
• Every operation performed with the account is attributed to the user and recorded in the audit trail.
• Roles and permissions are assigned by the Customer or the Provider; the user only uses the features and data within their scope.
• The Provider may suspend an account in case of breach of the Terms, security risk or at the Customer's request.

3. Permitted use

The user undertakes to use the services only for the purposes set by the contract and in compliance with the law; not to attempt to access unauthorised data or features, not to interfere with the operation of the services, not to extract data in an automated way outside the interfaces provided, and not to upload unlawful or harmful content.

4. Data and ownership

Meter, plant and end-user data remain the property of the Customer, which is their controller. The Provider processes them to deliver the service, in accordance with the Privacy notice and, where applicable, the data processing agreement with the Customer. The platform, the software and the documentation remain the property of the Provider and its licensors; the user is granted a non-exclusive, non-transferable licence to use them for the duration of the relationship.

5. Built-in artificial-intelligence assistant

• The assistant ("Ask…"), where made available by the Provider, is an artificial-intelligence system: it generates answers with a language model, not with a human operator.
• Answers may be incomplete or wrong. The console data prevail; answers are not technical, tax, legal or commercial advice and must not be the sole basis for decisions.
• The assistant is enabled only after the user's explicit consent, given after being informed that messages and aggregated data are processed by a third-party provider on servers in the United States (see the Privacy notice). Consent is optional and can be withdrawn at any time from the assistant panel; without consent the console works in full.
• The user does not enter personal data of their own or of third parties (names, POD/PDR codes, addresses, contact details) in messages, nor confidential information not needed for the question.
• The assistant operates read-only within the user's scope and makes no changes. The Provider may limit the number of requests, suspend or change the feature, including for cost or security reasons, without this constituting a breach.

6. External artificial-intelligence applications (MCP)

Where the feature is enabled for the Customer's organisation, the user may connect an artificial-intelligence application of their choice to their data through the standard interface provided, authorising it with their own credentials. In that case:

• the application and its provider are chosen by the user, who accepts its terms; the Provider is not liable for the processing carried out by that provider nor for the results produced by the application;
• access is read-only (plant list and aggregated consumption per period), limited to the user's scope and subject to the same usage limits as the console;
• the user may revoke the authorisation at any time; the Customer may disable the feature for its organisation; the Provider may suspend it for security reasons.

7. Availability, maintenance, changes to the service

The Provider undertakes to keep the service available with due professional diligence, without any guarantee of continuity except as set out in a service level agreement with the Customer, if any. Maintenance may cause interruptions, normally announced in advance. The Provider may evolve or discontinue features, giving reasonable notice of material changes.

8. Data protection and sub-processors

The processing of personal data is described in the Privacy notice. The Provider uses sub-processors (technical provider of the platform, hosting, identity, the artificial-intelligence model of the assistant, the collaboration platform for the support chat) listed in the Privacy notice; the Customer gives a general authorisation for their use under Article 28(2) GDPR and is notified of changes to the list at least 30 days in advance, with the right to object on reasonable grounds.

9. Limitation of liability

To the extent permitted by law, the Provider is not liable for indirect damages, loss of profit, damages arising from improper use of the service, from incorrect data transmitted by devices or by the Customer, from unavailability of communication networks, nor for content generated by the assistant or by external applications. The Provider's overall liability towards the Customer is limited as set out in the contract. Nothing in these Terms excludes liability for wilful misconduct or gross negligence.

10. Suspension and termination

The Provider may suspend access in case of breach of the Terms, non-payment by the Customer, security risk or request by an authority. Upon termination of the contract the Customer's data are made available for export for the agreed period and then deleted, subject to retention obligations.

11. Changes to the Terms

The Provider may amend these Terms. Amendments are published on this page with the update date and, if material, presented to console users at their next login with a request to acknowledge them. Continued use of the services after that date constitutes acceptance.

12. Governing law and jurisdiction

These Terms are governed by Italian law. Any dispute arising from or related to the Terms is subject to the exclusive jurisdiction of the courts of Milano (MI), ITALY, without prejudice to mandatory consumer protection rules where applicable.

13. Contacts

For questions about these Terms: info@pec.brightband.it. Controller: Bright Band Srl — Via Imbriani 20, 20158 Milano (MI), ITALY — VAT no. IT05184690963.

Version: October 2026