Cloud Terms of Service

These Terms concern hosted Kortyx Cloud, operated by Kortyx S.L. The open-source SDK and independently operated, self-hosted Studio are governed by their own licenses and operator responsibilities. Cloud is currently offered as a beta for authorized testers using synthetic or non-sensitive test data. Operator information and contact routes are available at https://kortyx.io/legal and https://kortyx.io/contact.

Kortyx Cloud provides hosted observation and evaluation tools for developer applications. This beta is for authorized adult testers using synthetic or non-sensitive test data. You must have authority to act for an organization you create. The open-source SDK and self-hosted Studio remain governed by their own licenses, not these hosted-service Terms.

Keep your account and application credentials secure. Organization owners control projects and API keys. Projects are separate data and credential scopes; access depends on current organization membership. Team features marked Soon are not available and no billing is enabled in this beta. Do not share sign-in credentials or submit another person's identity.

You retain your rights in application data. You authorize processing needed to provide the requested service, protect it, and operate backups. Minimize telemetry: prompts, outputs, traces and evaluation results may contain personal or confidential information. Do not upload credentials, special-category personal data, regulated production data or information you lack authority to process. A finalized data-processing agreement is required before approved customer personal-data processing.

Cloud evaluations call the HTTPS application endpoint you register, using the dedicated credential you provide. Your application supplies its own judge and model integrations. External model providers and endpoints have their own terms, costs and data practices. Cancellation is best effort: it cannot undo completed external calls or tool effects. Evaluation errors may be uncertain; do not assume exactly-once execution.

Do not attack the service, bypass authorization or quotas, probe another customer's data, send malware, or use the service unlawfully. Report suspected security issues privately through https://github.com/kortyx-io/kortyx/security/advisories/new. Use redacted examples in public issues. We may restrict access to protect security, address abuse, or comply with applicable obligations.

The beta can change, become unavailable, or be reset. It has no uptime or support SLA and is not suitable for critical production workloads. Keep your own source data and backups. No paid subscription or payment obligation is created here. Future paid plans require separately disclosed pricing and terms. Mandatory legal rights remain unaffected; this release establishes no additional governing-law election or limitation of liability.

Archiving a project or organization immediately blocks ordinary access and revokes its API keys. The implemented recovery window is 30 days; restored workspaces require new keys. After that window workspace data is permanently purged. Account deletion requires recent sign-in and last-owner safety checks. Backup copies follow their separate backup lifecycle. Legal acceptance evidence is retained separately rather than automatically erased with a workspace; a retention schedule for this evidence has not yet been published.

Activating a new Terms release requires fresh explicit acceptance before Cloud product access resumes. Publishing a document or editing unpublished content does not change an active release. Earlier acceptance evidence remains linked to its exact version and content hash. If you do not accept an update, you can sign out or access personal account/session and deletion controls without accepting. Privacy notices explain processing and are not blanket consent to all processing.

The onboarding flow creates an organization only after explicit user submission. Registration alone never creates an organization or counts as acceptance of these Terms.

If you enter this agreement on behalf of an organization and have authority to license its marks, that organization grants Kortyx a non-exclusive, revocable permission, during its use of Cloud, to identify it by its name and logo in the customer or user list on the Kortyx website. Kortyx will follow supplied brand guidelines and will not imply endorsement. A personal signup or company email address alone does not establish authority or a company customer relationship. Rights granted under previously accepted Terms remain unaffected. Testimonials, case studies, quotes and other promotional uses require separate written approval. This clause is not consent to marketing email.