Terms of service (draft — counsel to review before the first paying customer)

Effective: on publication. These terms govern use of openwake.ai, api.openwake.ai and the Openwake MCP server (the "Service") operated by Openwake ("we"). By creating an API key or using the Service you agree to them.

1. The Service. Openwake is an information service: a registry of facts about what software vendors state in their own public documents (privacy policies, data processing addenda, subprocessor lists, terms), with change alerts, counterparty checks, reports and receipts. Every fact carries a quotation, a source URL and the date the document was read.

2. What the Service is not. Not legal advice. Not a rating of any vendor as safe or unsafe. Not a control that blocks anything. The counterparty check is advisory: when the Service is unreachable or returns an error, your own policy decides. We make no guarantee that the registry is complete, that a document was read on any particular day, or that a change will be detected within any period.

3. Accounts and keys. An organisation account is created by signup or by an administrator. API keys are per organisation, shown once, and may be revoked. You are responsible for their use. Keys must not be shared between organisations.

4. Plans and payment. Free and paid plans are described at /pricing. Paid plans are billed monthly or annually in advance through Stripe and renew automatically until cancelled from the account page or billing portal. Cancellation takes effect at the end of the paid period. Annual fees are refundable pro rata within 30 days of the start of the term; monthly fees are not refundable. Prices may change with 30 days' notice; existing subscriptions keep their price for 12 months after a change.

5. Customer data. You give us: an organisation name, contact and alert channels, the vendors you watch, and the counterparty checks your systems make (counterparty, data classes, decision). You do not give us content: the check API has no field for it. We process this data only to provide the Service, as described in the privacy policy and the data processing addendum, which forms part of these terms for customers subject to GDPR or UK GDPR.

6. Acceptable use. You may not: use the Service to build or populate a competing registry; resell access; probe or overload the Service beyond published rate limits; use it to make automated decisions about individuals; or misrepresent our facts as ratings or guarantees.

7. The registry, corrections and takedown. Registry content is public and may be quoted with attribution. Anyone may dispute a fact through the corrections process (/legal/corrections); requests and resolutions are public. We remove content that is shown to be factually wrong and cannot be substantiated from a public document.

8. Receipts and the ledger. Records are appended to a signed, hash-chained ledger whose head is published. A receipt is evidence of what the Service returned at a time; it is not a warranty about the counterparty.

9. Availability and support. We aim for continuous availability and publish deep health status. Support targets by plan are published at /docs. There is no service credit.

10. Intellectual property. The software is licensed under the repository licence. Registry content is ours as a compilation; the quoted passages belong to their vendors and are reproduced as short excerpts for the purpose of citation.

11. Warranty disclaimer. The Service is provided as is and as available. To the fullest extent permitted by law we disclaim all warranties, express or implied, including fitness for a particular purpose and non-infringement.

12. Limitation of liability. To the fullest extent permitted by law, our total liability for any claim arising from the Service is limited to the fees you paid in the 12 months before the claim. We are not liable for indirect, consequential or special damages, lost profits, or regulatory fines arising from your reliance on registry content.

13. Termination. You may close your account at any time. We may suspend or close accounts that breach section 6 after notice where practicable. On closure we delete customer data within 30 days of a request; ledger entries retain hashes only.

14. Changes. We may update these terms with 30 days' notice by email to the account contact; continued use after the effective date is acceptance.

15. Governing law. {Jurisdiction of the operating entity — counsel to complete}. Disputes go first to good-faith negotiation, then to the courts of that jurisdiction.

Contact. legal@openwake.ai