Terms of Service

1. Acceptance

By creating an account, installing the SDK, calling the API, or otherwise accessing the Service, you agree to these Terms. If you accept on behalf of an organization, you confirm that you have authority to bind it.

Enterprise customers operating under a signed Master Services Agreement (“MSA”) with DapplePot: the MSA controls, and these Terms fill in any gaps the MSA does not address.

2. Definitions

• “Service” — the DapplePot website, dashboard, SDK, and API operated by DapplePot Pvt. Ltd.
• “SDK” — the dapplepot-sdk package and any client libraries we publish.
• “Customer Content” — events, prompts, completions, tool inputs and outputs, and other data you send to the Service through the SDK or API.
• “Agent” — a logical AI agent you instrument and identify with an agent_id in the Service.
• “Plan” — the subscription tier described in §4 or in your MSA.
• “End-User” — a person interacting with your Agent.
• “You” / “Customer” — the individual or organization accepting these Terms.

3. Account

You must be at least 16 years old, not on a sanctions list, and authorized to use the Service in your jurisdiction.

You agree to provide accurate signup information and keep it current. One free trial per natural person, enforced automatically at signup.

You are responsible for the security of your credentials and SDK keys and for all actions taken under them. Notify us immediately if you suspect compromise.

4. Plans, fees, and billing

4.1 Plans

We offer a Free Trial and the paid Plans Pro, Team, and Enterprise. Current prices, included usage, seat counts, and feature allocations for each Plan are published at dapplepot.com/pricing and shown to you at checkout. Enterprise terms are set out in your order form or MSA.

4.2 Billing

Self-serve Plans (Pro and Team) are billed by Lemon Squeezy acting as our Merchant of Record. Lemon Squeezy handles tax, VAT, and GST. Enterprise Plans are invoiced directly by DapplePot per your MSA.

4.3 Annual plans

Annual prepayment is discounted by approximately two months. Annual fees are prepaid and non-refundable for partial periods or unused time.

4.4 Quotas are hard caps

Once your monthly event quota is reached, further events are rejected until the next billing period or until you upgrade. There are no automatic overage charges.

4.5 Renewal and cancellation

Subscriptions auto-renew at the end of each period unless cancelled before the period ends through the billing portal (self-serve Plans) or in writing (Enterprise). Cancellation takes effect at the end of the current paid period; the workspace remains active until then.

4.6 Payment failure

If a payment fails, the billing provider may retry the charge for a reasonable period. If the charge is not recovered, the workspace enters the read-only lifecycle described in §9.3.

4.7 Price changes

We will give at least 30 days' notice before changing prices on existing Plans. Changes take effect on the next renewal after notice.

4.8 Refunds

No refunds for partial periods, unused events, or unused seats. Statutory consumer rights, where they apply, are not affected.

5. Free trial

The Free Trial runs for a fixed period from signup with capped Agents, events, and seats as shown on the pricing page. Each natural person is entitled to one trial. After expiry, the workspace enters the trial lifecycle (§9.3).

6. Acceptable use

You agree not to:

• use the Service to attack third parties or to evade lawful authority;
• reverse-engineer or attempt to extract the source of the dashboard or API (the SDK is open-source under Apache 2.0 — see §10.2);
• probe detection rules with the purpose of enabling another customer to evade DapplePot;
• resell, white-label, or wrap the Service without a written agreement with us;
• upload content that is unlawful, infringing, or violates third-party rights;
• use the Service in life-safety systems, critical infrastructure, or other high-risk applications without an MSA that addresses the use case;
• interfere with or disrupt the Service or other customers' use of it.

We may suspend or terminate access for material breach of this section per §9.

7. Customer Content and your responsibilities

7.1 Ownership

You retain all rights to Customer Content.

7.2 License to us

You grant DapplePot a worldwide, non-exclusive, royalty-free license to host, process, transmit, display, and analyze Customer Content solely to provide the Service to you and to produce derived security findings. We do not use Customer Content to train, fine-tune, or improve any machine-learning model.

7.3 Your representations

You represent and warrant that:

• you have the rights and a lawful basis to send End-User data to the Service;
• you have provided End-Users any required notices and obtained any required consents under applicable law (including GDPR, CCPA, and India's DPDP Act, as applicable);
• your use of the Service complies with applicable law.

7.4 Redaction is your responsibility

The SDK provides options to redact or scrub sensitive content before it is sent to the Service (see Privacy Policy §6 and the SDK documentation). DapplePot does not pre-scan inbound payloads to remove personal data. You are responsible for configuring the SDK appropriately for your data.

7.5 Action policies

You configure how each online security check responds — for example, logging only, redacting matched content, blocking the call, or terminating the session — in the dashboard. The behavior of your agent under those policies, and any consequences of blocked or terminated calls, is your responsibility.

8. Service operation

8.1 Security checks are signals, not guarantees

DapplePot's online checks and post-session risk scores are designed to surface risk; they do not guarantee safety, compliance, or the prevention of any specific attack. You remain responsible for production decisions about your agent.

8.2 Availability

We provide the Service on a commercially reasonable basis. We do not offer an uptime service-level agreement except where you have a signed Enterprise SLA.

8.3 Changes to the Service

We may modify the Service from time to time. For material reductions in functionality on paid Plans, we will give at least 30 days' notice.

8.4 Beta features

Features labelled “beta”, “preview”, or similar are provided as-is, may change or be removed without notice, and may carry additional terms presented at the time of enrolment.

8.5 Maintenance

Planned maintenance will be announced via the dashboard or email where feasible.

9. Suspension, termination, and post-termination

9.1 By you

You may cancel any time through the billing portal (self-serve Plans) or by giving the notice specified in your MSA (Enterprise).

9.2 By us

We may suspend or terminate your access for:

• non-payment after the billing provider's retry window expires;
• material violation of §6 (Acceptable use);
• legal obligation, court order, or government request;
• if continued provision creates a credible risk to other customers or to the Service.

We will give notice and an opportunity to cure where reasonably possible.

9.3 Lifecycle after termination or expiry

• Trial: 90 days read-only → 90 days suspended → hard delete (~6 months).
• Pro, Team, Enterprise: 730 days read-only → 90 days suspended → hard delete (~27 months from last payment).

“Read-only” means the dashboard and historical data remain accessible, ingest is blocked. “Suspended” means login is locked behind a plan picker; data remains on disk. “Hard delete” removes data from our primary databases and from sealed archive storage.

9.4 Data export

During the read-only window, you retain dashboard access to your historical data. Enterprise customers additionally receive sealed monthly audit archives.

9.5 Survival

Sections that by nature should survive (including §§4 unpaid amounts, 7.3, 10, 11, 12, 13, 14, 16, 17) will survive termination.

10. Intellectual property

10.1 Our rights

DapplePot retains all rights, title, and interest in the Service, the dashboard, detection rules, sub-check definitions, and documentation.

10.2 SDK license

The DapplePot SDK is licensed under the Apache License, Version 2.0, separate from these Terms. The SDK's licence governs your use of the SDK source and binaries; these Terms govern your use of the hosted Service the SDK talks to.

10.3 Feedback

If you send us suggestions, ideas, or feature requests, we may use them without restriction or compensation.

10.4 No use of Customer Content for model training

As stated in §7.2 and in the Privacy Policy, we do not use Customer Content to train, fine-tune, or improve any machine-learning model. We may compute aggregate operational metadata (event counts, latency, error rates, aggregate sub-check hit rates without payload content) to operate and improve Service infrastructure.

10.5 Marks and logos

Neither party may use the other's name, logo, or trademarks in marketing materials without prior written consent, except as agreed in an MSA or order form.

11. Confidentiality

Each party will protect the other's non-public information with at least the same care it uses for its own, and never less than reasonable care, and will use it only to perform under these Terms. The obligation does not apply to information that is already public, becomes public without breach, was independently developed, was lawfully received from a third party without a duty of confidentiality, or is required to be disclosed by law (with prompt notice where allowed).

12. Warranties and disclaimers

Each party warrants it has authority to enter these Terms.

13. Limitation of liability

TO THE FULLEST EXTENT PERMITTED BY LAW:

13.1 Excluded damages

Neither party will be liable for indirect, incidental, consequential, special, exemplary, or punitive damages, or for loss of profits, revenue, goodwill, or data, even if advised of the possibility.

13.2 Aggregate cap

Each party's total aggregate liability arising out of or related to these Terms is capped at the amounts paid by Customer to DapplePot in the 12 months immediately preceding the event giving rise to the claim. For trial users who have not paid, the cap is USD 100.

13.3 Carve-outs

The exclusions and cap in §13.1 and §13.2 do not apply to: a party's confidentiality breach, indemnification obligations, willful misconduct or fraud, infringement of the other party's intellectual property, or amounts that cannot be limited under applicable law.

14. Indemnification

14.1 By DapplePot

DapplePot will defend Customer against third-party claims that the Service, as provided by DapplePot and used in accordance with these Terms, directly infringes a third party's intellectual property right, and will pay damages finally awarded or agreed in settlement. If such a claim arises, DapplePot may, at its option, modify or replace the affected part of the Service, procure rights for continued use, or refund the unused portion of pre-paid fees.

14.2 By Customer

Customer will defend DapplePot against third-party claims arising from Customer Content, Customer's use of the Service in violation of these Terms, or breach of §7.3 (Customer representations), and will pay damages finally awarded or agreed in settlement.

14.3 Process

The indemnified party will give prompt notice, allow the indemnifying party to control defence and settlement (without admitting fault on the indemnified party's behalf), and provide reasonable cooperation.

15. Data protection

Our handling of personal data is described in the Privacy Policy at dapplepot.com/privacy. A Data Processing Addendum is available on request for customers who require one. For Enterprise customers, the DPA forms part of the MSA.

16. Changes to the Terms

We may update these Terms from time to time. For material changes, we will give at least 30 days' notice by email or via the dashboard. Continued use after the effective date constitutes acceptance. Prior versions will be archived and made available on request.

17. Governing law and disputes

These Terms are governed by the laws of India, without regard to conflict-of-laws principles. The courts located in Bhopal, Madhya Pradesh have exclusive jurisdiction, subject to either party's right to seek injunctive relief in any competent court.

The parties will attempt in good faith to resolve any dispute informally for 30 days before initiating formal proceedings.

Mandatory consumer-protection rights under your local law are not affected by this section.

18. General

• Entire agreement. These Terms, the Privacy Policy, and any order form or MSA between the parties are the entire agreement on the subject and supersede prior discussions.
• Assignment. You may not assign these Terms without our prior written consent. DapplePot may assign in connection with a merger, acquisition, or sale of substantially all assets.
• Waiver. Failure to enforce a provision is not a waiver of future enforcement.
• Severability. If any provision is held unenforceable, the rest remains in effect.
• Force majeure. Neither party is liable for delays or failures caused by events beyond reasonable control (acts of God, war, pandemic, internet outages, regulatory action).
• Notices. Notices to Customer go to the email on the account; notices to DapplePot go to founder@dapplepot.com with a copy to the address in §19.
• Relationship. The parties are independent contractors; nothing creates a partnership, joint venture, agency, or employment relationship.
• No third-party beneficiaries.

19. Contact