DRAFT — NOT LEGAL ADVICE, NOT IN FORCE. This document was prepared by an AI assistant, not by a lawyer, from this repository's source code and documentation. It must be reviewed by counsel qualified in every jurisdiction in which the Service is offered before it is published, offered to anyone, or relied on. Placeholders in
[BRACKETS]are decisions for the operator; nothing in them should be invented by anyone but the operator and their lawyer.
Document version: draft-1 · Prepared: 2026-08-07 · Status: unreviewed · Effective date: [NOT IN FORCE]
These terms are an agreement between [LEGAL ENTITY NAME], a company incorporated in [JURISDICTION OF INCORPORATION] with registered office at [REGISTERED ADDRESS] ("we", "us"), and the organisation that subscribes to the hosted Service ("Customer", "you").
If you accept these terms on behalf of an organisation, you warrant that you have authority to bind it. If you do not, you may not use the Service.
The following documents form part of this agreement:
This is the most important clause in the document and it is placed early on purpose.
2.1 The software is open source. The source code is published under the MIT Licence. Under it you may use, copy, modify, merge, publish, distribute, sublicense and sell copies of the software, subject only to the condition that the copyright notice and permission notice are included in all copies or substantial portions. The MIT Licence disclaims all warranties and all liability.
2.2 If you run the software yourself, these terms do not apply to you. A self-hosted install is governed by the MIT Licence alone. We provide no support, no availability commitment, no security commitment and no data-protection undertaking for a self-hosted install, and we never see the data in one. We are not a processor of your data if you host it yourself. You are the operator, and every obligation an operator has — including choosing your model provider, your database host and your optional third-party API keys, and telling your own users and your own data subjects what you have chosen — is yours.
2.3 These terms apply to the hosted Service only — the instance we operate on your behalf at [SERVICE DOMAIN].
2.4 Attribution. We do not require you to attribute the software when you use the hosted Service. If you redistribute the software, or distribute a product built on it, the MIT Licence's notice condition applies to you and we do not waive it. Trade marks are not licensed by the MIT Licence: [LEGAL ENTITY NAME]'s name and logo may not be used to endorse or promote a derived product without written permission. [CONFIRM WITH COUNSEL — the MIT Licence is silent on trade marks, so this must be a separate express term.]
2.5 Contributions. [DECISION REQUIRED: whether contributions to the public repository are accepted under a Developer Certificate of Origin, an inbound= outbound MIT grant, or a CLA. State the chosen position here. Do not leave it unstated — an unstated inbound licence is the most common open-source legal defect.]
3.1 What it is. A hosted sales CRM with an automated research and analysis agent. It reads records you create or connect, computes coverage, connect-rate, stalled-deal and follow-up analyses over them, and surfaces findings without being asked.
3.2 What is provided today, and what is not. The connectors and capabilities actually built are listed at [STATUS PAGE / DOCUMENTATION URL]. Anything described as planned, upcoming or on a roadmap is not a commitment and is not part of this agreement. You should subscribe on the basis of what the Service does on the day you subscribe.
3.3 Deployment model. Each Customer's hosted instance runs against its own database. We do not commingle your records with another Customer's records. If we change this we will give notice under §14 and reissue the .
3.4 Beta and preview features. Any feature labelled beta, preview or early access is provided as is, may be withdrawn without notice, and is excluded from §8 (service levels) and from any warranty.
4.1 Sign-in. Access is by the identity provider we support. [STATE WHICH —
and note that as at the date of this draft the codebase also has
email-and-password sign-in enabled, which docs/security/audit-2026-08.md flags
as a release blocker. THIS MUST BE RESOLVED BEFORE LAUNCH; do not describe
authentication in a way the shipped configuration contradicts.]
4.2 Credentials. You are responsible for your users' credentials and for activity under your account. Tell us promptly at [SECURITY EMAIL] if you believe an account is compromised.
4.3 Administrators. A user with an owner or admin role in your workspace can add and remove members, change roles, connect and disconnect integrations, and select the model the agent runs on. Those choices bind you. Removing a member also deletes that user's stored provider credentials and mailbox-sync state and ends their sessions immediately.
4.4 Users you invite. You are responsible for ensuring every person you give access to is entitled to see the records in your workspace. Records in a workspace are visible to all members of that workspace by default.
You may not, and may not permit anyone to:
5.1 use the Service to send unsolicited commercial communications, or to process a contact list obtained by scraping a site behind a login, by purchase from a data broker without a lawful basis, or otherwise in breach of applicable marketing, anti-spam or data-protection law;
5.2 upload Customer Data you do not have a lawful basis to process, or that you are contractually prohibited from exporting from another system;
5.3 use the Service to process special-category or sensitive personal data, data about children, government identifiers, payment-card data, or health information. The Service is not designed for it, has no field for it, and no control specific to it. Free-text fields do not change this;
5.4 probe, scan or test the security of the Service other than under [RESPONSIBLE DISCLOSURE POLICY URL], or attempt to access another Customer's instance or data;
5.5 circumvent usage limits, resell the hosted Service, or operate it as a service bureau for third parties — note this restricts the hosted Service only; §2.1 already permits all of this for the software itself;
5.6 use output of the Service as the sole basis for a decision producing a legal or similarly significant effect on an individual — see §7.3;
5.7 enable an optional third-party capability whose provider's terms you have not read and accepted. In particular, the LinkedIn lookup capability uses a third-party API and not an official LinkedIn API; LinkedIn's terms prohibit storing their content obtained outside their own APIs, including indirectly. The capability is off by default. If you switch it on, you do so on your own assessment and at your own risk, and you indemnify us under §10 for it.
6.1 Ownership. As between us, you own Customer Data. We claim no rights in it beyond those needed to provide the Service.
6.2 Our use of it. We Process Customer Personal Data only as a Processor, on your documented instructions, under the . We do not sell it, do not use it to build a profile of any individual for our own purposes, and do not use it to train our own models.
6.3 Third-party model providers — read this. The Service sends record content to a large-language-model provider in order to produce research, briefs and answers. Whether that provider retains or trains on inputs is governed by that provider's terms, not ours. The providers in use are named in the . [STATE THE VERIFIED POSITION OF EACH PROVIDER, WITH A CITATION. Do not state a blanket "your data is never used for training" — it is not ours to give.]
6.4 Export. You may export Customer Data at any time via [EXPORT MECHANISM] during the subscription term. [UNBUILT AS AT THIS DRAFT — do not publish this clause until an export path exists.]
6.5 Deletion on termination. On termination we will delete Customer Data
within [N] days, including from backups within [M] days. [DO NOT FILL IN
A NUMBER UNTIL A TEARDOWN PROCEDURE EXISTS AND HAS BEEN TIMED; see
docs/legal/data-map.md §4.6.] We may retain a minimal suppression record — an
email address and the fact of deletion — where that is necessary to prevent a
connected mailbox from recreating a record you asked us to delete; see
and DPA §[X].
6.6 Aggregate statistics. We may compile aggregated, de-identified statistics about use of the Service, provided they cannot identify you, any individual, or any Customer Data, and we may use them to operate and improve the Service. The telemetry actually collected is described in the and can be disabled.
7.1 It is probabilistic. The Service uses large language models. Output may be wrong, incomplete, or confidently mistaken. It is a prompt for a human, not a finding of fact.
7.2 It reads untrusted text. The agent processes content it did not author —
company websites, email bodies, public profiles — any of which may contain text
crafted to influence it. We take measures against this but cannot guarantee
that output is free from the influence of injected instructions
(docs/security/audit-2026-08.md M1).
7.3 No automated decisions with legal effect. You must not use the Service as
the sole basis for a decision that produces legal or similarly significant
effects on an individual — including employment, credit, or access to a service.
Where the Service scores, ranks or prioritises, a human must remain in the loop.
[CONFIRM WITH COUNSEL against GDPR Art 22 and the CPPA's ADMT regulations,
whose status should be checked in docs/legal/research.md §3.]
7.4 No professional advice. Nothing produced by the Service is legal, financial, tax or professional advice.
8.1 [DECISION REQUIRED: whether an SLA is offered at all. A deploy-per- customer architecture with no on-call rotation should not commit to an uptime percentage. The honest position at launch is "commercially reasonable efforts, no uptime commitment", stated plainly.]
8.2 Maintenance. We may suspend the Service for scheduled maintenance with [NOTICE PERIOD] notice, and for emergency maintenance without notice.
8.3 Support. Support is provided at [SUPPORT EMAIL] during [HOURS] with [TARGET RESPONSE]. Support targets are targets, not guarantees, unless a separate signed agreement says otherwise.
9.1 Fees, the billing period, and what is included are set out at [PRICING PAGE URL] or in your order form.
9.2 Payment. Fees are payable in advance, in [CURRENCY], and are exclusive of taxes. You are responsible for all applicable taxes other than taxes on our income. [Indian operators: confirm GST treatment, including place-of-supply and reverse charge for non-resident customers.]
9.3 Changes. We may change fees on [NOTICE PERIOD — 30 days recommended] notice, effective at your next renewal. If you do not accept a change you may terminate before it takes effect.
9.4 Non-payment. We may suspend the Service after [N] days of non-payment following written notice. Suspension is not termination, and §6.5 does not run until termination.
9.5 Usage-based components. If any part of the fee depends on usage, the
metric, the measurement method and the overage rate must be stated on the pricing
page. [If the plan is flat-rate, say so and commit to it — see
docs/gtm/pricing.md, where the flat rate is itself the product claim.]
10.1 By you. You will defend and indemnify us against any third-party claim arising from (a) Customer Data, including a claim that it was collected or processed unlawfully; (b) your breach of §5; (c) your enabling of an optional third-party capability under §5.7; or (d) your use of the Service in breach of law.
10.2 By us. We will defend and indemnify you against a third-party claim that the Service, as provided by us and used in accordance with this agreement, infringes that party's intellectual property rights, and pay damages finally awarded. This does not apply to a claim arising from Customer Data, from a modification we did not make, from combination with anything we did not supply, or from the open-source software used under §2.1 rather than the hosted Service.
10.3 Each indemnity is conditional on prompt notice, sole control of the defence, and reasonable cooperation.
11.1 By us. We warrant that we will provide the Service with reasonable skill and care, and that we will not knowingly introduce malicious code.
11.2 Disclaimer. Except as expressly stated, the Service is provided "as is". To the fullest extent permitted by law we disclaim all other warranties, express or implied, including merchantability, fitness for a particular purpose, non-infringement, and any warranty that output of the agent is accurate, complete or fit for any decision.
11.3 The security posture is what it is. We describe our security measures in
the . We do not warrant that the Service is free from
vulnerabilities. [Before publication, reconcile every security statement
against docs/security/audit-2026-08.md. Understating is safe. Overstating is a
misrepresentation and, depending on jurisdiction, an unfair or deceptive
practice.]
11.4 Consumer rights. Nothing here excludes a right that cannot lawfully be excluded. This agreement is offered to businesses, not consumers.
12.1 Uncapped. Neither party limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for anything else that cannot lawfully be limited. [Confirm the jurisdiction-specific list with counsel — it differs between India, the EU/UK and the US.]
12.2 Excluded losses. Subject to §12.1, neither party is liable for indirect or consequential loss, loss of profit, revenue, goodwill, anticipated savings, or loss or corruption of data to the extent caused by the other party.
12.3 Cap. Subject to §12.1, each party's total aggregate liability under this agreement is limited to [CAP — commonly the fees paid in the 12 months before the claim].
12.4 A specific carve-out to consider. [DECISION FOR COUNSEL: a data- protection-breach carve-out at a higher multiple is standard in enterprise SaaS and will be demanded by any Customer with a procurement function. Decide it deliberately rather than discovering it in a negotiation.]
13.1 Term. The subscription runs for the period stated at purchase and renews automatically for the same period unless cancelled before renewal.
13.2 Termination for convenience. You may cancel at any time, effective at the end of the current billing period. [STATE THE REFUND POSITION EXPLICITLY.]
13.3 Termination for cause. Either party may terminate on material breach not remedied within [30] days of written notice, or immediately on the other's insolvency.
13.4 Immediate suspension. We may suspend immediately where continued use poses a security risk, causes us to breach law, or is causing material harm to the Service or another Customer. We will tell you why, and restore promptly once resolved.
13.5 Effect. On termination your access ends and §6.5 applies. Clauses that by their nature survive — §2, §6.1, §6.5, §10, §11, §12, §14, §15 — survive.
We may change these terms on [NOTICE PERIOD — 30 days recommended] written notice. Material adverse changes take effect at your next renewal, and you may terminate before they do. Changes required by law may take effect sooner, and we will say so.
15.1 Governing law and jurisdiction. [GOVERNING LAW] and the exclusive jurisdiction of the courts of [VENUE]. [This is a significant commercial decision. An Indian entity selling into the EU should expect resistance to Indian law and venue, and should take advice on whether a separate EU-facing contracting entity is warranted.]
15.2 Notices. To you, at the email of your workspace owner. To us, at [LEGAL NOTICES EMAIL / ADDRESS].
15.3 Assignment. Neither party may assign without the other's consent, except to a successor in a merger or sale of substantially all assets, with notice.
15.4 Publicity. We will not name you as a customer or use your logo without your prior written consent.
15.5 Entire agreement. This agreement, the DPA and the Privacy Policy are the entire agreement and supersede prior discussions. Nothing on a website, in a roadmap or in a sales conversation forms part of it.
15.6 Severability, waiver, no third-party rights, force majeure. Standard. [Counsel to settle drafting, including whether third-party rights under the UK Contracts (Rights of Third Parties) Act 1999 are excluded.]