Terms of Service

01Agreement to these terms

These terms are an agreement between you and [LEGAL ENTITY NAME], an Ohio limited liability company ("aiSecurityWarden", "we", "us"). By creating an account, using our client software, or using aisecuritywarden.com (together, the "Service"), you agree to them. If you use the Service for an organization, you confirm you may bind it. If you do not agree, please do not use the Service. You must be 18 or older.

02The service

aiSecurityWarden is a hosted secrets manager for AI agents and automation. It stores secrets encrypted end to end, issues machine tokens with per-token limits (project, allowed addresses, expiry), can require a person to approve access to secrets and individual agent actions, and delivers connectors that run on your own machines. It includes a website and client software for Windows, macOS and Linux. It is currently a private beta, free during the beta unless we tell you otherwise.

03Your account & responsibilities

• Keep your password, recovery key, two-factor recovery codes and machine tokens safe. You are responsible for activity under your account and tokens. We recommend two-factor sign-in.
• Choose approvers and notification channels carefully: anyone who can approve can let your agents act.
• Keep your own copy of anything you can't replace. Data export is planned; until it is available, ask us and we will help.
• Revoke a token straight away if you think it has been exposed.

04Your data

You own everything you store — secrets, connectors, project and token settings, logs. You grant us only the permission needed to store, process and deliver it to run the Service under our Privacy Policy. Because of end-to-end encryption, we handle your secrets and connectors only in a form we cannot decrypt.

05Approvals & agent actions are yours

The rules you set and the decisions you and your approvers make are your actions, not ours. An action your rules allow without asking (for example "allow" or an open time window) counts as approved by you. We deliver requests, check match codes and timeouts, enforce your rules and record the outcome. We are not responsible for what an agent does with access you allowed, or for the content of messages an agent sends after approval. Review approval requests before approving them.

06Connectors

• Built-in connectors (such as Gmail) are provided by us. You connect them with your own accounts, and for Gmail with your own Google Cloud client. Your use of the connected app is governed by that app's terms.
• Custom connectors are code you or your AI assistant write and upload. You are responsible for them and for having the right to use them. We store them encrypted, deliver them to your machines and never run them; they run on your machines.
• Connectors act with the permissions you give them in the connected app. Give them only what they need.

07Acceptable use

You agree not to:

• Use the Service to access any system, account or data you do not own or are not authorized to use.
• Attempt to bypass or tamper with approval rules, allowed addresses, limits or logging.
• Probe, load-test, reverse-engineer or disrupt the hosted Service without written permission. Found a security issue? Report it through the contact form (topic "Security report"); we will not pursue good-faith researchers who report privately and give us time to fix it.
• Use the Service, or connectors, to store or deliver malware, send spam, commit fraud, or break any law.
• Resell or white-label the hosted Service without a written agreement.

08Plans, limits & billing

• Each plan has limits (for example projects, secrets, machine tokens and custom connectors), shown on our pricing page.
• Going over a limit, or moving to a smaller plan, never deletes or locks your data: existing items keep working and you can't create new ones until you are under the limit or upgrade. Phone approvals that are no longer included fall back to approvals on the website and desktop app.
• When paid plans launch, they are sold through a merchant of record, which handles payment, tax and invoices under its own terms. Prices and renewal terms are shown before you buy. Free trials need no card.

09Software licenses

• Hosted Service: a non-exclusive, non-transferable right to use it for your own or your organization's purposes while your account is active.
• Client software (desktop admin app, command-line tools, agent connector and built-in connectors): governed by the license included with it. We intend to publish it as open source; open-source components keep their own licenses.
• The server software and the hosted Service remain ours. No other rights are granted.

10Third-party services

Notification channels (Telegram, ntfy), connected apps (such as Gmail and Google Drive), AI agents and AI model providers, and our hosting providers are third-party services governed by their own terms and privacy policies. We are not responsible for them.

11Feedback

If you send us ideas or bug reports, we may use them without obligation. Please don't include secrets or confidential information.

12Availability

During the beta there is no uptime guarantee. We aim to keep the Service running and to announce planned changes in advance. We may change, suspend or end the beta; before ending the Service we will give reasonable notice and a window to take your data with you.

13Termination

You may stop using the Service at any time and ask us to delete your account (handled as described in the Privacy Policy). We may suspend or end access that breaks these terms or threatens the Service; except for abuse, we give notice and a chance to take your data with you where reasonable. Sections 4, 5, 14, 15, 16 and 17 survive termination.

14Disclaimers

The Service is provided "as is" and "as available", to the extent the law allows. We disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, title and non-infringement. We do not promise the Service will be uninterrupted or error-free, or that it will prevent every security incident or every unwanted agent action. Security tools reduce risk; they do not remove it.

15Limitation of liability

To the extent the law allows, we are not liable for indirect, incidental, special, consequential, exemplary or punitive damages, or for lost profits, lost data, lost secrets or business interruption, even if told they were possible. Our total liability under these terms is limited to the greater of (a) the fees you paid us in the 12 months before the claim arose, or (b) US$100. These limits do not apply where the law does not allow them.

16Indemnity

If a third party makes a claim against us because of your use of the Service, your data or connectors, or your breach of these terms, you will defend and compensate us for the resulting costs and damages, except to the extent the claim is caused by our own breach or misconduct.

17General terms

• Changes: we may update these terms. Material changes come with at least 30 days' notice by email; using the Service after they take effect means you accept them.
• Governing law: the laws of the State of Ohio, USA, without regard to conflict-of-law rules. Disputes go to the state and federal courts located in Ohio. If you are a consumer in the EU or UK, your mandatory local rights still apply.
• Assignment: we may transfer these terms as part of a merger, acquisition or sale of the business; you may not transfer them without our consent.
• Severability, no waiver, entire agreement: if one clause is unenforceable, the rest still apply; not enforcing a clause is not a waiver; these terms and the Privacy Policy are the whole agreement about the Service.

18Contact

Questions about these terms, sales and plans, or security reports: use the contact form.

← Back to aiSecurityWarden