Terms of Service

These Terms of Service (“Terms”) govern your access to and use of the RecallGuard platform, APIs, SDKs, and related services (collectively, the “Services”) provided by RecallGuard Infrastructure (“RecallGuard”, “we”, “us”, or “our”).

By creating an account, accessing the Services, or using our APIs, you agree to be bound by these Terms. If you are using the Services on behalf of an organisation, you represent that you have the authority to bind that organisation to these Terms. If you do not agree, do not use the Services.

You must be at least 18 years of age and have the legal capacity to enter into contracts to use the Services. The Services are intended for business and professional use. By using the Services, you represent and warrant that you meet these requirements.

You must provide accurate and complete information when registering. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. You must promptly notify us of any unauthorised access or breach of security.

You are solely responsible for any API keys generated for your agents. API key plaintext is shown exactly once at creation — RecallGuard does not store plaintext keys and cannot recover them. Treat API keys as secrets; do not commit them to source control.

Each organisation is provisioned automatically when the first user signs in with a given email domain. The first user becomes the Org Admin and is responsible for managing access and inviting additional members.

You agree not to:

• Use the Services for any unlawful purpose or in violation of applicable laws or regulations
• Submit memory content that contains illegal material, promotes harm, or violates third-party rights
• Attempt to circumvent rate limits, authentication, or access controls
• Probe, scan, or test the vulnerability of our systems without prior written consent
• Reverse-engineer, decompile, or disassemble any part of the Services
• Use the Services to build a competing product or service
• Resell, sublicense, or otherwise transfer access to the Services without our written consent
• Interfere with or disrupt the integrity or performance of the Services

RecallGuard is a governance layer, not an AI model provider. We process memory content submitted by your AI agents solely to provide the governance, review, embedding, and retrieval services you have configured. We do not use your memory content to train AI models.

You are responsible for ensuring that the memory content submitted to RecallGuard complies with all applicable laws, including data protection laws. You must obtain all necessary consents and authorisations before submitting personal data of third parties.

The governance workflow (pending → in_review → approved/rejected) is a tool to assist human reviewers. Final governance decisions remain the responsibility of your designated reviewers. RecallGuard does not make or guarantee governance decisions on your behalf.

Your use of the Services is also governed by our Privacy Policy, which is incorporated into these Terms by reference. By using the Services, you consent to the data practices described in the Privacy Policy.

You retain ownership of all memory content and data you submit to the Services. By submitting content, you grant RecallGuard a limited, non-exclusive, worldwide licence to process, store, index, and retrieve that content solely for the purpose of providing the Services.

The audit log is append-only and immutable by design. RecallGuard does not modify or delete audit log entries, even on request. This is a core product guarantee required for regulatory compliance (SOC 2, GDPR, ISO 27001). GDPR erasure requests are handled by redacting memory content, not by deleting audit log entries.

Audit log exports are stored in Amazon S3 with Object Lock and SHA-256 hash verification to ensure tamper-evidence. You may request an export of your audit data at any time via the dashboard or the export API.

RecallGuard provides the Services on an “as available” basis. We target 99.9% uptime for the core API and governance workflows. Memory write operations are designed to return within 300ms; the asynchronous embedding pipeline (PII detection, vector indexing) operates separately and may take longer.

We reserve the right to schedule maintenance windows with at least 24 hours' notice. We will not be liable for service unavailability due to factors outside our reasonable control (force majeure), including AWS outages, internet disruptions, or acts of government.

Access to the Services during the initial launch and hackathon period is provided at no charge. Future pricing, if introduced, will be communicated with at least 30 days' advance notice. Continued use of the Services after pricing changes take effect constitutes acceptance of the new pricing.

The Services, including all software, documentation, trademarks, and designs, are owned by RecallGuard and protected by intellectual property laws. These Terms do not grant you any intellectual property rights in the Services.

You retain all intellectual property rights in content you submit. You grant RecallGuard a limited licence to process your content only as necessary to provide the Services (see Section 6).

Each party agrees to maintain the confidentiality of the other party's Confidential Information and to use it only for the purposes of these Terms. “Confidential Information” means any non-public information disclosed by one party to the other that is designated as confidential or that should reasonably be understood to be confidential given its nature.

THE SERVICES ARE PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. RECALLGUARD DOES NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR FREE OF SECURITY VULNERABILITIES.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, RECALLGUARD SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOSS OF PROFITS, DATA, OR GOODWILL, ARISING OUT OF OR RELATED TO YOUR USE OF OR INABILITY TO USE THE SERVICES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Our total liability for any claim arising out of or related to these Terms or the Services shall not exceed the greater of (a) the amount paid by you to RecallGuard in the 12 months preceding the claim, or (b) £100 GBP.

You agree to indemnify, defend, and hold harmless RecallGuard and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of your: (a) use of the Services; (b) violation of these Terms; (c) violation of any third-party rights; or (d) submission of content that violates applicable law.

Either party may terminate these Terms at any time. You may delete your account via the dashboard. We may terminate or suspend your access immediately, without notice, if you materially breach these Terms, engage in unlawful activity, or if we are required to do so by law.

Upon termination: (a) your right to access the Services ceases immediately; (b) we will retain your data for up to 30 days to allow export, after which it will be deleted (subject to retention obligations in Section 6); (c) audit log entries will be retained as required by law or regulation.

These Terms are governed by and construed in accordance with the laws of England and Wales, without regard to its conflict of law provisions. Any dispute arising out of or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts of England and Wales.

Before initiating formal proceedings, the parties agree to attempt good-faith negotiation to resolve any dispute for at least 30 days.

We may modify these Terms at any time. We will provide at least 14 days' advance notice for material changes via email or dashboard notification. Your continued use of the Services after the effective date of any changes constitutes your acceptance of the updated Terms.

• Entire Agreement — These Terms, together with the Privacy Policy, constitute the entire agreement between you and RecallGuard regarding the Services
• Severability — If any provision is found unenforceable, the remaining provisions remain in full force
• No Waiver — Failure to enforce any right does not constitute a waiver of that right
• Assignment — You may not assign these Terms without our prior written consent. We may assign these Terms in connection with a merger or acquisition

For questions about these Terms:

• Email: legal@recallguard.dev
• Privacy: privacy@recallguard.dev