Terms of Service

Agreement to these terms

These terms are an agreement between you and ArtifactAuth Inc., a Delaware corporation (“ArtifactAuth”, “we”, “us”), governing your use of artifactauth.com and the ArtifactAuth cloud service. By creating an account or using the service, you accept them. If you use the service on behalf of an organization, you represent that you have authority to bind that organization, and “you” means the organization.

The service

ArtifactAuth is a hosted implementation of the ArtifactAuth open specification: authorization-aware memory for AI agents. The service records labeled conversation segments and enforces their declared authorization requirements when the content is later searched or read. The open specification itself is published separately and is governed by the license in its repository, not by these terms.

We may modify the service as it evolves, and may change or discontinue features (including the free tier) with reasonable advance notice of any change that materially reduces functionality you rely on.

Accounts

You must be at least 18 years old and able to form a binding contract to create an account. You must provide accurate information, keep your credentials and API keys confidential, and promptly notify us of any unauthorized use. You are responsible for activity under your account, including activity by members of your organization and by agents acting with your credentials.

Your content

You retain all rights to the content your organization submits to the service. You grant us a limited license to host, store, and process that content solely to provide and secure the service. You are responsible for having the rights to the content you submit and for the accuracy of the authorization labels and policy configuration your organization applies to it.

Acceptable use

You agree not to:

• use the service to violate any law or the rights of others;

• attempt to circumvent the service’s authorization enforcement, probe or test its security without written permission, or access another customer’s data;

• interfere with the operation of the service or impose unreasonable load on it;

• resell or offer the service to third parties except as agreed with us in writing.

If you find a vulnerability, please report it through our responsible disclosure channel.

Fees

The service offers a free tier and paid plans as described on the pricing page. Fees are exclusive of taxes; you are responsible for any sales, use, VAT, or similar taxes, other than taxes on our income. Except where required by law or expressly agreed, fees are non-refundable. We may suspend access for accounts with overdue amounts after reasonable notice, and we will give reasonable notice before any pricing change that affects you.

Scope of enforcement

The service enforces the authorization requirements declared on your content, fail-closed: undeclared, unknown, or unverifiable requirements are treated as deny-all. Enforcement conforms to ArtifactAuth Specification v1.0, as published in the specification repository; we will give notice before adopting a later version whose guarantees materially differ. Some risks are documented as out of scope of that version — including aggregation and inference from individually authorized results, and revocation latency bounded by cache staleness. Enforcement is only as correct as the labels and policies your organization configures, and you remain responsible for that configuration. See the specification for the precise guarantees and exclusions.

Security and data protection

Customer content is encrypted in transit and at rest, and access to production systems is restricted and authenticated. We will notify affected customers of a breach involving their personal data without undue delay, consistent with applicable law. For organizations that process personal data in the service, a data processing agreement covering GDPR and CCPA requirements is available on request via the contact form. Our handling of personal information is described in the Privacy Policy.

Intellectual property

The service, website, and their content (excluding your content and the open specification) are owned by ArtifactAuth Inc. and protected by intellectual-property laws. If you send us feedback, we may use it without obligation to you.

Disclaimers

The service is provided “as is” and “as available” without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the service will be uninterrupted, error-free, or that it will prevent every unauthorized disclosure.

Indemnification

You will defend and indemnify ArtifactAuth Inc. against third-party claims, and the resulting damages and reasonable costs, arising from your content, the authorization labels and policy configuration your organization applies to it, or your use of the service in violation of these terms or applicable law.

Limitation of liability

To the maximum extent permitted by law, ArtifactAuth Inc. will not be liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data. Our total liability for any claim arising out of the service is limited to the amounts you paid us for the service in the twelve months before the claim arose, or one hundred US dollars if you have paid nothing.

Some jurisdictions do not allow the exclusion or limitation of certain damages, so parts of this section may not apply to you. Nothing in this section limits liability for gross negligence, willful misconduct, or any liability that cannot be limited under applicable law.

Termination

You may stop using the service and close your account at any time. We may suspend or terminate access for breach of these terms, giving notice where practicable. For 30 days after termination you may export your organization’s content, after which it is deleted in accordance with our Privacy Policy. Fees accrued before termination remain payable.

Governing law

These terms are governed by the laws of the State of Delaware, United States, without regard to conflict-of-laws rules. Any dispute arising out of these terms or the service will be resolved exclusively in the state and federal courts located in New Castle County, Delaware, and both parties consent to personal jurisdiction and venue there.

Export controls

You represent that you are not subject to US sanctions and are not located in an embargoed country, and you agree to comply with applicable export-control and sanctions laws when using the service.

Notices

We give formal notice to the email address associated with your account. You give formal notice to us through the contact form, and we will confirm receipt. Copyright complaints may be sent the same way.

Changes to these terms

We may update these terms as the service evolves; the current version is always posted here with its date at the top. For material changes we will give at least 30 days’ notice by email or in the console before they take effect, and you may terminate before the effective date if you do not accept them. Use of the service after a change takes effect constitutes acceptance.

General provisions

If a provision of these terms is unenforceable, the rest remains in effect, and a failure to enforce a provision is not a waiver of it. These terms, together with the Privacy Policy and any order agreed with us in writing, are the entire agreement about the service and supersede prior discussions. You may not assign these terms without our written consent; we may assign them in connection with a merger, acquisition, or sale of assets. Neither party is liable for delay or failure caused by events beyond its reasonable control. Provisions that by their nature should survive termination — including fees owed, disclaimers, indemnification, limitation of liability, and governing law — survive it.

Contact

Questions about these terms? Reach us through the contact form and we’ll route your question to the right person.