Terms of Service

• "Service": Qortara Cloud Governance, including all APIs, dashboards, documentation, and related tools provided at qortara.com and associated domains.
• "Customer," "you," "your": The individual or entity that creates an account and uses the Service.
• "Agent": An AI agent, autonomous workflow, or automated system registered with and governed by the Service.
• "Tenant": A Customer's isolated environment within the Service, containing their agents, policies, audit data, and configuration.
• "Policy Evaluation": A request to the Service to evaluate an agent action against the Customer's governance policies.

2.1. To use the Service, you must create an account by providing a valid email address and a payment method (credit card, debit card, or Azure Marketplace billing).

2.2. You are responsible for maintaining the confidentiality of your session tokens, API keys, and account credentials. You are responsible for all activity under your account.

2.3. You must be at least 18 years old and have the legal authority to enter into these Terms on behalf of yourself or the entity you represent.

2.4. You represent that you are using the Service for business or professional purposes and not as a consumer. If you are an individual, you represent that you are using the Service in connection with a trade, business, or profession.

3.1. Qortara's commercial model is being finalized. Until the Service is generally available, applicable fees, included usage, and plan structure are documented in the order form, commercial onboarding materials, or Enterprise contract you sign with MythologIQ Labs LLC. Material changes to those terms will be communicated with at least 90 days advance notice.

3.2. Payment: All fees are in US Dollars unless your order form specifies otherwise. Payment is processed by Stripe (for direct signups) or Microsoft (for Azure Marketplace signups). You authorize us to charge your payment method for all applicable fees described in your order form.

3.3. Taxes: All amounts are exclusive of applicable taxes. Sales tax, VAT, or GST is calculated and collected at checkout based on your billing address.

3.4. Failed payments: If a payment fails, we will retry up to three times over 7 days. If payment is not resolved, your account may be suspended. We will notify you by email before suspension.

3.5. Budget caps: You may set a monthly budget cap on your account. When your usage reaches the cap, the behavior you selected applies (hard cutoff or soft warning). We are not liable for charges incurred when the budget cap is set to "soft warning" mode.

3.6. For California subscribers: Your subscription will automatically renew at the then-current rate specified in your order form unless you cancel before the renewal date. You may cancel at any time from your account dashboard. Cancellation of monthly plans takes effect at the end of the current billing period.

4.1. Changes to plan: You may request an upgrade or downgrade at any time. Upgrades take effect immediately and are pro-rated for the remaining billing period. Downgrades take effect at the start of the next billing period. No refund is issued for the current period.

4.2. Cancellation: You may cancel your account at any time from the dashboard or by contacting sales. Cancellation takes effect at the end of the current billing period.

4.3. Prepaid terms: Refund terms for prepaid annual or multi-month commitments, if any, are governed by your order form.

4.4. Enterprise contracts: Enterprise accounts with custom contracts are governed by those contract terms for cancellation and termination.

4.5. Data after cancellation: Upon cancellation, your Tenant data is retained for 30 days to allow for export or reactivation. After 30 days, data is permanently deleted.

5.1. You agree to use the Service only for lawful purposes and in compliance with all applicable laws and regulations.

5.2. You will not: (a) use the Service to govern agents engaged in illegal activity; (b) attempt to circumvent, disable, or interfere with the Service's security features, rate limits, or budget enforcement; (c) reverse engineer, decompile, or extract source code from the Service; (d) resell access to the Service without our written consent; (e) use the Service in a way that disrupts or overloads our infrastructure; (f) manipulate, falsify, or artificially inflate trust scores or behavioral assessments within the trust federation system; (g) use trust scores or federation data to discriminate against organizations or individuals on the basis of protected characteristics.

5.3. Suspension: We may suspend your access to the Service immediately and without notice if: (a) your use poses a security threat to the Service or other customers; (b) your use is causing material harm to the Service's infrastructure; (c) we are required to do so by law or a regulatory authority; or (d) your account is more than 15 days past due on payment. For other violations, we will provide at least 5 business days written notice and an opportunity to cure before suspension, unless the violation is not reasonably curable.

5.4. Termination for cause: We may terminate your account for material breach of these Terms that is not cured within 15 business days after written notice, or immediately for violations described in Section 5.3(a)-(d).

5.5. Export controls and sanctions: You represent and warrant that: (a) you are not located in, organized under the laws of, or a national of any country subject to US trade sanctions or embargoes; (b) you are not on any US government restricted party list (including the SDN List, Entity List, or Denied Persons List); (c) you will not use the Service in violation of any applicable export control laws. We may restrict access from sanctioned jurisdictions and are not liable for any resulting service interruption.

6.1. The Service provides policy evaluation, audit logging, compliance evidence generation, and trust federation for AI agents. The Service evaluates agent actions against Customer-defined policies and returns allow/deny decisions via API.

6.2. Customer responsibility for policies: You are solely responsible for the content, adequacy, and correctness of the governance policies you define. Qortara evaluates actions against your policies as written. We do not review, validate, audit, or certify the adequacy of your policies for any particular regulatory framework, use case, or risk profile. The fact that Qortara enforces a policy does not constitute our endorsement that the policy is sufficient.

6.3. Customer responsibility for enforcement: The Service returns policy decisions (allow/deny) via API. You are solely responsible for ensuring your agent code respects these decisions. Qortara does not directly control, halt, modify, or override the behavior of your agents. If your agent proceeds with an action despite a deny decision from the Service, that is your responsibility.

6.4. No guarantee of agent safety: The Service reduces risk by enforcing governance policies, but does not and cannot guarantee that your agents will never take harmful, unauthorized, or illegal actions. Governance is a risk-reduction layer, not an absolute prevention mechanism. You remain solely liable for all actions taken by agents under your account, regardless of whether the Service evaluated those actions.

6.5. Compliance evidence is not legal compliance: The Service generates compliance evidence and reports referencing frameworks including SOC 2, GDPR, EU AI Act, and NIST AI RMF. This evidence is provided as a tool to support your compliance efforts. It does not constitute legal advice, a legal opinion, a certification, or a guarantee that you are compliant with any law, regulation, or standard. You should engage qualified legal counsel and certified auditors for compliance determinations.

6.6. Cross-organization trust federation: If you use the Service's trust federation features to interact with agents from other organizations, you accept that: (a) trust scores are behavioral assessments based on historical data, not guarantees or predictions of future behavior; (b) trust scores may be inaccurate, incomplete, or outdated; (c) you are solely responsible for your own access-control decisions based on trust scores; (d) Qortara is not liable for any loss or damage arising from your reliance on trust scores or from the actions of third-party agents, regardless of their trust score.

6.7. Latency and availability: Policy evaluations are provided on a commercially reasonable basis. We do not guarantee evaluation response times. You are responsible for designing your agent systems to handle evaluation timeouts, including determining whether agents should fail-open or fail-closed when the Service is unavailable or slow to respond.

7.1. We will use commercially reasonable efforts to maintain the availability of the Service. We do not guarantee any specific uptime percentage except where expressly provided in your Enterprise contract or order form.

7.2. Planned maintenance will be announced via the Service's status page with at least 24 hours advance notice when practicable.

7.3. Enterprise customers may be eligible for a Service Level Agreement with defined uptime commitments, remedies, and support response times, as described in their Enterprise contract.

8.1. Our collection, use, and protection of your data is governed by our Privacy Policy at qortara.com/privacy.

8.2. Tenant isolation: Each Customer's data is logically isolated using row-level security. Your governance data, policies, and audit events are not accessible to other Customers.

8.3. Data residency: Your data is stored in the region you select during account setup (US or EU for most plans; custom regions for Enterprise). We do not transfer your data to other regions without your consent, except as required to provide the Service.

8.4. Microsoft-sourced data: For customers who sign up via Azure Marketplace, certain data sourced from Microsoft is subject to a 30-day retention limit per the Microsoft AI Cloud Partner Program (MAICPP) terms. This data is automatically purged after 30 days unless you provide explicit consent for extended retention.

8.5. Audit trail integrity: All governance events are recorded in a cryptographically linked (Merkle-chained) audit log. We do not modify or delete individual audit events. The audit trail is designed to be tamper-evident for compliance evidence purposes.

8.6. Security incidents: In the event of a confirmed security breach affecting Customer data, we will notify affected Customers by email without undue delay after becoming aware of the breach and will provide information about the nature of the breach, the data affected, and the remedial steps taken.

9.1. Our IP: The Service, its software, documentation, and branding are the property of MythologIQ Labs LLC. These Terms do not grant you any rights to our intellectual property beyond the limited right to use the Service as described here.

9.2. Your data: You retain all rights to your data, including your governance policies, agent configurations, and audit events. We do not claim ownership of your data.

9.3. Feedback: If you provide suggestions, feature requests, or other feedback about the Service, you grant us a non-exclusive, royalty-free, perpetual license to use that feedback to improve the Service.

10.1. To the maximum extent permitted by law, Qortara's total liability to you for any claims arising from or related to these Terms or the Service is limited to the greater of (a) the amount you paid us in the 12 months preceding the claim, or (b) one hundred US dollars ($100).

10.2. In no event shall Qortara be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or business opportunity, regardless of the cause of action or the theory of liability.

10.3. The Service is provided "as is" and "as available." We make no warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, or non-infringement.

10.4. Force Majeure: Neither party shall be liable for any failure or delay in performing its obligations under these Terms to the extent caused by circumstances beyond its reasonable control, including but not limited to acts of God, natural disasters, pandemics, war, terrorism, riots, government actions, power failures, Internet disturbances, or failures of third-party service providers (including cloud infrastructure providers). If a force majeure event continues for more than 30 consecutive days, either party may terminate these Terms upon written notice without liability.

10.5. The Service relies on third-party infrastructure and service providers, including Microsoft Azure and Stripe. We are not liable for any failure, interruption, error, or delay caused by third-party providers. Our liability limitations apply fully to issues arising from third-party service dependencies.

11.1. You agree to indemnify, defend, and hold harmless MythologIQ Labs LLC and its members, managers, officers, employees, agents, and contractors from any claims, damages, losses, or expenses (including reasonable attorney fees) arising from: (a) your use of the Service; (b) your violation of these Terms; (c) the actions of AI agents governed under your account; (d) your violation of any applicable law or regulation.

12.1. These Terms are governed by the laws of the State of Maryland, USA, without regard to conflict-of-law principles.

12.2. Any dispute arising from these Terms shall first be submitted to good-faith negotiation for 30 days. If unresolved, disputes shall be resolved by binding arbitration administered by the American Arbitration Association under its Commercial Arbitration Rules, conducted virtually or in the State of Maryland. The arbitrator's decision shall be final and binding.

12.3. Nothing in this section prevents either party from seeking injunctive relief in a court of competent jurisdiction for the protection of intellectual property rights.

12.4. Class action waiver: To the maximum extent permitted by applicable law, you and Qortara each waive the right to a trial by jury and the right to participate in a class action, collective action, private attorney general action, or other representative proceeding of any kind. All disputes shall be resolved on an individual basis.

12.5. Small claims exception: Either party may bring an individual action in small claims court in the party's county of residence (or, if the party is a business, its principal place of business) if the claim qualifies.

12.6. EU/UK consumer exception: If you are located in the European Union or United Kingdom and qualify as a consumer under applicable law, nothing in this section deprives you of mandatory consumer protections under the laws of your country of residence, including the right to bring proceedings in the courts of your country of residence.

13.1. We may modify these Terms at any time. Material changes will be communicated via email to your account's registered email address at least 30 days before they take effect. For Enterprise customers with annual contracts, material changes to pricing or service scope will be communicated at least 90 days before they take effect and will not apply until the next renewal period unless agreed otherwise.

13.2. Your continued use of the Service after the effective date constitutes acceptance of the modified Terms. If you do not agree, you may cancel your account before the effective date.

14.1. Entire agreement: These Terms, together with our Privacy Policy, Data Processing Agreement, and any applicable Enterprise contract, constitute the entire agreement between you and Qortara.

14.2. Severability: If any provision is found unenforceable, the remaining provisions continue in effect.

14.3. Waiver: Failure to enforce any right or provision is not a waiver of that right or provision.

14.4. Assignment: You may not assign these Terms without our written consent. We may assign these Terms in connection with a merger, acquisition, or sale of assets.

14.5. Language: These Terms are written in English. If these Terms are translated into another language, the English version shall control in the event of any conflict.

For questions about these Terms, contact us at support@qortara.com.

MythologIQ Labs LLC