Legal

Terms of Service

Version 1.0 — Last updated: May 2, 2026 · Effective: May 2, 2026

⚠ Important Notice

These Terms of Service govern your use of Spanforge (the “Service”). By accessing or using Spanforge, you agree to be bound by these terms. If you do not agree, do not use the Service.

Read carefully: Sections 6 (Limitation of Liability), 7 (Indemnification), and 8 (Termination) contain important legal limitations.

1. Definitions

  • Account — Your user profile on the Spanforge platform, including login credentials and workspace configuration.
  • Data — All information submitted to or processed by the Service, including audit events, policies, approval workflows, and configuration files.
  • Documentation — Spanforge's user guides, API documentation, and best practices at docs.getspanforge.com.
  • Fees — Subscription charges for the Service, as specified in your Order Form or pricing page.
  • Service — Spanforge's platform, including the SDK, web apps, CLI tools, APIs, and hosted platform.
  • User — Any person accessing the Service on your behalf (employee, contractor, customer).
  • You / Customer — The organization that has entered into these Terms.

2. Service Description

Spanforge is a governance and compliance platform that helps you log AI decisions, define and enforce policies, audit regulatory compliance (GDPR, EU AI Act, DPDP, etc.), generate compliance evidence bundles, manage approval workflows, and detect policy violations.

Spanforge is NOT: a replacement for your own security, risk, or compliance programs; a guarantee of regulatory compliance; a replacement for legal counsel; responsible for preventing your AI model from making bad decisions; or liable for decisions made by your AI systems.

You remain responsible for your AI system's outputs and decisions, compliance with applicable laws, appropriateness of policies you define, and notifying your users that their data may be logged.

Service Availability: We aim to maintain 99.5% monthly uptime. Up to 3.6 hours of unplanned downtime per month is acceptable. Planned maintenance (announced 7 days in advance) does not count as downtime.

3. Service Level Agreement (SLA)

Standard SLA (all customers):

  • 99.5% uptime → up to 3.6 hours downtime → 10% monthly fee credit
  • 99.0% uptime → up to 7.2 hours downtime → 25% monthly fee credit
  • 95.0% uptime → up to 36 hours downtime → 50% monthly fee credit
  • <95.0% uptime → >36 hours downtime → 100% credit (full month refund)

To claim SLA credits: email sriram@getspanforge.com within 30 days of incident with timestamps and impact details. Credits apply to next invoice (not cash refunds). SLA does not apply to outages caused by your systems, third-party services, DDoS attacks, your misconfiguration, scheduled maintenance, or force majeure events.

Enterprise customers may negotiate higher uptime targets. Contact sriram@getspanforge.com.

4. Your Rights, Responsibilities & Prohibited Uses

Your rights: Access the Service 24/7 (subject to maintenance); store audit events and compliance data; export data in standard formats (JSON, CSV); request account deletion; receive technical support during business hours.

Your responsibilities: Comply with applicable laws; protect login credentials and API keys; properly configure policies and gates; inform your users that their data may be logged by Spanforge; ensure you don't submit unnecessary personal data.

Prohibited uses — You may not use Spanforge to:

  • Monitor employees without proper legal notice, or track individuals without consent
  • Violate laws or regulations; facilitate fraud, money laundering, or terrorism financing
  • Implement deceptive AI systems (deepfakes, impersonation); deploy surveillance without disclosure
  • Reverse-engineer the hosted Service; attempt unauthorized access; probe for security vulnerabilities (use sriram@getspanforge.com bug bounty instead)
  • Sell or resell the Service without permission

Enforcement: First violation: written warning, 30 days to cure. Second: account suspension. Third: account termination. Immediate action for illegal activity, threatening behavior, active DDoS attacks, or data exfiltration.

5. Payment and Fees

Free Tier: Up to 500 events/month, single user, basic docs access, community support. No credit card required.

Paid Tiers: See getspanforge.com/pricing for current rates. Monthly or annual billing (10% discount for annual). Volume discounts for 10+ teams: sriram@getspanforge.com.

Payment terms: Invoices due within 30 days. Late fees: 1.5% per month. Failure to pay results in account suspension (data preserved); 60+ days may result in data deletion.

Free trial: 14 days, full features, no automatic charge at end.

Refund policy: Monthly plans — no refunds (cancel anytime). Annual plans — full refund within 30 days if unused; no refund after 30 days. SLA violations → service credit only (not cash). If we terminate without cause → pro-rated refund of unused fees.

Taxes: You are responsible for all applicable taxes (VAT, GST, sales tax). Provide tax exemption certificate before billing if applicable.

6. Limitation of Liability

Our total liability for any claims is limited to the greater of: amounts you paid in the past 12 months, or $100 USD. This applies to breach of contract, negligence, security breaches, SLA violations, and any other legal theory.

We are NOT liable for: indirect damages, lost revenue, lost profits, lost data, business interruption, consequential or punitive damages, or third-party claims.

Exception to data loss exclusion: If data loss results from our gross negligence or willful misconduct, we remain liable for direct damages.

Our liability cap does NOT apply to: indemnification obligations, intellectual property infringement, gross negligence or willful misconduct, or violations of applicable law.

7. Indemnification

You agree to indemnify Spanforge from claims arising from: your use of the Service (configurations, policies, workflows); your violation of these Terms; your data and content (IP infringement, policy violations, employee/customer claims).

Spanforge agrees to indemnify you from claims arising from: our infringement of third-party IP (unless you modified the Service); our violation of applicable law; our gross negligence or willful misconduct.

Process: The indemnified party notifies the indemnifying party within 10 days; the indemnifying party controls the defense; both parties cooperate; consent required before settlement.

8. Termination

You can cancel anytime: Online via Settings → Account, or email sriram@getspanforge.com with “ACCOUNT DELETION REQUEST.” Effective immediately (you pay through end of billing period).

We can terminate if: payment failure (10 days' notice); prohibited use (30 days' notice except illegal activity); material breach (30 days' notice); inactivity 12+ months (60 days' notice).

Effect of termination: Account deactivated immediately; data preserved for 90 days; after 90 days all data deleted (unless legally required); pro-rated refund if terminated by us without cause.

Early data deletion: Email sriram@getspanforge.com with “DATA DELETION REQUEST.” Deletion within 5 business days unless legally required to retain. Deleted data cannot be recovered.

9. Intellectual Property

We own all IP in: the Service code and algorithms, Documentation, the T.R.U.S.T. Framework and RFC standards, and the “Spanforge” trademark and logos.

You may NOT: reverse-engineer the hosted Service; copy or modify our IP; create competing products based on our IP.

The open-source SDK is subject to its own license terms (MIT or Apache 2.0), which permit reverse-engineering. See the SDK license for details.

You retain ownership of: your data (audit events, policies, configurations) and your content (documents, code, workflows). You grant us a limited license to use your data only to provide and improve the Service.

License grant to you: A limited, non-exclusive, non-transferable, revocable license to access and use the Service. The open-source SDK is licensed separately under its own license (typically MIT or Apache 2.0).

10. Warranties and Disclaimers

We warrant that: the Service will be available 99.5% of the time (per SLA); the Service will function as described in Documentation; we have the right to grant the license.

THE SERVICE IS PROVIDED “AS IS.” We do NOT warrant that the Service will meet your specific needs, will be error-free, is “compliant” with any regulation, will prevent your AI from making bad decisions, or is free from viruses or malware.

You are responsible for: evaluating the Service before use; determining if it meets your needs; backing up your data; compliance with applicable laws.

11. Confidentiality

Each party agrees to keep the other's Confidential Information confidential, including source code, algorithms, pricing, customer data, policies, and business practices.

Exceptions: Disclosure is permitted if required by law, information is in the public domain, independently developed, or received from a third party without confidentiality obligation.

Duration: Standard confidential information — 3 years after termination. Trade secrets — indefinitely (for as long as they qualify under applicable law).

12. Dispute Resolution & Governing Law

Governing law: These Terms are governed by applicable law in the jurisdiction where Spanforge Technologies Private Limited is incorporated, without regard to conflicts of law principles. GDPR applies to EU users; CCPA to California users; DPDP to India users — regardless of choice of law.

Dispute resolution process: (1) Good faith negotiation — 30 days written notice; (2) Escalation to senior management — 14 days; (3) Optional mediation — 30 days; (4) Litigation as a last resort.

Statute of limitations: Any claim must be filed within 2 years of when you first discovered (or should have discovered) the problem. Exceptions: IP infringement claims (governed by applicable IP law) and data breach claims (governed by privacy law timelines).

13. Entire Agreement & Modifications

These Terms, together with the Privacy Policy, Data Processing Addendum (getspanforge.com/dpa), your Order Form (if any), and Documentation (docs.getspanforge.com), constitute the entire agreement between us and supersede all previous agreements.

Modifications: We may update these Terms with 30 days' notice by email. Changes apply to new subscriptions immediately and to existing subscriptions at renewal. For security or legal requirements, changes may be effective immediately. Continued use after changes take effect constitutes acceptance.

Order of precedence (conflicts): Order Form > Data Processing Addendum > These Terms > Privacy Policy.

14. General Provisions

  • Severability: If any provision is invalid, it is modified to the minimum extent necessary; remaining Terms remain in full effect.
  • Waiver: Not enforcing a right once does not waive that right for the future.
  • Force majeure: Neither party is liable for failures due to natural disasters, war, pandemics, government actions, utility outages, or major third-party outages. Payment obligations are not excused.
  • Assignment: You cannot assign these Terms without our written permission. We can assign to a successor company (with notice and 30-day opt-out for you).
  • Relationship: You and Spanforge are independent entities. No partnership, joint venture, agency, or employment relationship is created.

15. GDPR, CCPA & DPDP Special Terms

  • EU users (GDPR): You are the “controller”; we are the “processor.” Sign our DPA at getspanforge.com/dpa. Standard Contractual Clauses (SCCs) govern data transfers outside the EU.
  • California users (CCPA): You have rights under CCPA. See our Privacy Policy. We do not sell personal data.
  • India users (DPDP): Personal data is stored in India (AWS ap-south-1) where feasible. Contact sriram@getspanforge.com for DPDP issues.

16. Contact

See our Privacy Policy for full details on how we handle your data.

← Back to homePrivacy Policy →