Legal

Terms of Service

The agreement between CatalystGen and organisations using HereIQ

Effective 18 August 2026CatalystGen

This replaces the AttendanceGM Terms of Service dated 25 April 2026. Same company, same platform, new name.

1This agreement

These Terms govern access to and use of HereIQ — the web and mobile applications and all associated services, together the Platform — provided by CatalystGen. By using the Platform you agree to them. If you do not agree, do not use it.

HereIQ was previously called AttendanceGM. CatalystGen is the same company that provided the Platform under that name, and these Terms replace the AttendanceGM Terms of Service dated 25 April 2026.

They apply to everyone who uses the Platform: administrators, HR staff, managers and employees. Where a separate agreement has been signed between CatalystGen and an Organization, that agreement takes precedence over anything here that conflicts with it.

2Definitions

Platform
HereIQ — the web and mobile applications and all associated services.
Organization
A company, institution or other entity that subscribes to the Platform and administers it for its workforce.
User
Any individual who accesses the Platform under an Organization's account.
Controller
The Organization, which decides what personal data is processed and why.
Processor
CatalystGen, which processes personal data on the Organization's instructions.

3Who may use it

You must be at least 18 to register as a User. Where an Organization registers anyone under 18, obtaining parental or guardian consent is the Organization's responsibility, not ours.

4Accounts

  • Registration details must be accurate and kept current.
  • You are responsible for keeping your sign-in credentials secure. We are not liable for access gained because credentials were shared or left unprotected.
  • Organizations control the accounts within their subscription and may create, manage, suspend or remove them.
  • We intervene in account matters only where the law requires it, to enforce these Terms, or to meet our data protection obligations.
  • An Organization's control does not override an individual's rights. Whatever an Organization configures, Users keep the statutory rights they have over their own personal data.

5Acceptable use

The Platform is for lawful HR and workforce management. The following are prohibited:

  • Any unlawful, unauthorised or harmful purpose
  • Submitting false, fabricated or manipulated attendance or HR records
  • Sharing credentials with anyone not entitled to them
  • Accessing, or trying to access, another Organization's data
  • Reverse engineering, decompiling, scraping or reproducing any part of the Platform
  • Circumventing or tampering with security or access controls
  • Using the Platform to harass, discriminate against or harm anyone
  • Uploading malicious code, or anything intended to disrupt the Platform
  • Misrepresenting your identity or your Organization's

Breaching this section can result in immediate suspension or termination without notice, and may carry legal liability.

6What the Organization is responsible for

As Controller, the Organization is responsible for lawful use of the Platform across its workforce. By subscribing, it agrees to:

  • Tell employees the Platform is in use for attendance and HR management, before registering them
  • Obtain any consent its own law requires before enabling optional features — location and biometric check-in in particular
  • Comply with the employment and data protection law that applies where its people work, including any obligation to consult a works council or employee representatives before monitoring attendance
  • Keep administrative credentials secure and make sure access roles match actual responsibilities
  • Respond to its employees' data requests within a reasonable time
  • Export whatever records it needs before ending its subscription

We provide the tools. Using them lawfully is the Organization's responsibility, and we are not liable for its failure to meet the duties above.

7Personal data

Use of the Platform is subject to our Privacy Policy, which forms part of these Terms. It explains what is collected, why, where it is held, how long it is kept and what rights individuals have. Where these Terms and the Privacy Policy conflict on a question of personal data, the Privacy Policy wins.

In summary: we process personal data only to deliver the subscribed services and only on the Organization's instructions; we do not use it for our own commercial purposes; people authorised to handle it are bound by confidentiality; we tell the Organization about any confirmed breach without undue delay; and on termination we make data available for export before deleting it, subject to legal retention duties.

Organizations that need a separate data processing agreement should contact us. It is provided by CatalystGen as its own document rather than being buried in these Terms.

8Biometric check-in

Where an Organization uses fingerprint hardware, templates are created and stored on the device. They are never transmitted to CatalystGen. The Platform holds only an identifier linking a device enrolment to a person.

Before enrolling anyone, the Organization is responsible for meeting the conditions its own law places on biometric data at work — which in many countries means explicit written consent, a published retention and destruction schedule, and in some cases consultation with employee representatives.

Biometric check-in is not offered to Organizations in Illinois, United States, and must not be enabled for Users located there.

9Ownership

The Platform is ours
CatalystGen owns all rights in HereIQ — software, source code, design, trademarks and related intellectual property. Nothing here transfers any of it to a User or an Organization.
Your licence to use it
Organizations and Users get a limited, non-exclusive, non-transferable, revocable licence to use the Platform for internal HR and workforce management while a subscription is active. It does not include copying, modifying, reverse engineering or redistributing any part of it.
Your data is yours
Users own their personal information and Organizations own their organisational data. Organizations grant us a limited licence to process it solely to operate and deliver the Platform, as described in the Privacy Policy.

10Fees and billing

Our Payment Policy sets out plans, prices, seat minimums, the free trial, accepted payment methods, what happens when a payment fails, refunds and cancellation. It forms part of these Terms. This section carries the commitments; the Payment Policy carries the detail, and is updated more often.

  • Subscription pricing is published on our pricing page and set out in the Payment Policy. Fees are payable in the currency and on the cycle stated there or in a signed agreement.
  • Prices are exclusive of any tax, duty or withholding, which is the Organization's responsibility unless the agreement says otherwise.
  • Fees are generally non-refundable. We will consider refunds where there has been a documented service failure that was our fault.
  • We may change pricing with reasonable notice to Organization administrators. Changes do not apply to a period already paid for.
  • Non-payment may lead to suspension after a reasonable grace period. Suspended accounts keep their data for a reasonable time, during which payment restores access.

11Availability

We make reasonable efforts to keep the Platform available and give advance notice of planned maintenance where we can. We do not offer a guaranteed uptime figure or service credits, and we would rather say so than publish a number we have not committed to honouring.

What we do instead is publish the real thing: uptime per service and ninety days of incident history, outages included, on our status page. It is linked from this site and from our security section.

We are not liable for interruptions outside our reasonable control. After any disruption, Organizations should verify their data is complete before relying on it.

12Service providers

We use third-party providers to run parts of the Platform — hosting, email delivery, error monitoring, payment processing and document storage. They are bound by contract to equivalent data protection standards.

By subscribing, Organizations consent to their use. We name them to customers under their agreement and on written request, and give notice before adding one. Beyond our contractual obligations to them, we are not responsible for their independent practices.

13Limits on our liability

The Platform is provided on an "as is" basis. To the fullest extent the law allows, CatalystGen is not liable for:

  • Indirect, incidental, consequential or punitive damages arising from use of, or inability to use, the Platform
  • Interruptions or errors not caused by our own negligence
  • Unauthorised access resulting from a failure to keep credentials secure
  • An Organization's failure to meet its responsibilities under section 6
  • Failures of third-party services beyond our reasonable control

This does not exclude liability for a personal data breach or data loss caused by our own negligence, and nothing here limits rights that cannot be excluded by law.

14Indemnity

You agree to indemnify CatalystGen, its officers and affiliates against claims, damages, losses and reasonable legal costs arising from:

  • Your breach of these Terms or of applicable law
  • Your Organization's failure to meet its responsibilities as Controller
  • Misuse of the Platform by Users registered under your Organization's account
  • Third-party claims arising from data submitted, uploaded or managed through the Platform

15Ending the agreement

  • We may suspend or terminate an account for breach of these Terms, for non-payment, or where the law requires it. We give reasonable notice except where the breach is serious or urgent.
  • Organizations may end their subscription at any time, and are responsible for exporting what they need before it takes effect.
  • On termination, data in the account is handled as described in the Privacy Policy, subject to any legally required retention.
  • Sections 7, 9, 13, 14 and 18 survive termination.

16Events outside our control

We are not liable for delay or failure caused by circumstances beyond our reasonable control — telecommunications and power failures, natural disasters, civil unrest, government action, public health emergencies, or attacks that exceed reasonable preventive measures.

When one happens we will tell affected Organizations as soon as we practically can and work to restore normal service.

17Changes to these Terms

We may update these Terms to reflect changes in the Platform, the law or our business. The revised version is posted here with a new effective date.

For material changes we notify Organization administrators in advance by email and in the Platform. Continuing to use HereIQ after the effective date means the revised Terms apply. If you do not accept them, stop using the Platform and contact us to close the account.

18Governing law and disputes

These Terms are governed by the laws of England and Wales, and the courts of England and Wales have jurisdiction over any dispute — unless a signed agreement between CatalystGen and an Organization says otherwise.

Choosing English law does not change anyone's data protection rights. Those follow the law where you live and work, and section 11 of the Privacy Policy applies wherever you are.

Before anyone goes to court, we would rather work through it:

  1. 1Tell us in writingSet out the dispute and what would resolve it. Most things end here.
  2. 2Talk it throughBoth sides make a genuine attempt to settle it directly, within a reasonable time.
  3. 3MediationIf that fails, either side may propose a mutually acceptable mediator before litigation.
  4. 4The courtsAnything still unresolved goes to the courts of England and Wales.

19Contact us

For questions about these Terms, or about a separate agreement:

These Terms set out what CatalystGen owes you, what you owe us, and what happens when something goes wrong. If a clause is unclear, ask — we would rather explain it now than argue about it later.

Uptime and incident history are published on our status page.