Terms of Service

Status: Founder approved. Version: 1.1 (supersedes 1.0, archived at versions/terms-v1.0-2026-09-14.md) Effective date: September 27, 2026.

ATLASENT TERMS OF SERVICE

Last updated: September 27, 2026.

These Terms of Service ("Terms") govern your use of the AtlaSent service (the "Service") provided by AtlaSent Systems, Inc., a Delaware corporation ("AtlaSent," "we," "us"). By accessing or using the Service, you agree to these Terms. If you do not agree, do not use the Service.

Enterprise customers: if you have signed a Master Services Agreement (MSA) with AtlaSent, your use of the Service is governed by the MSA and the Order Forms thereunder, and these Terms do not apply.

1. Eligibility and accounts

1.1 Eligibility

You must be at least 18 years old and able to enter into a legally binding contract to use the Service. If you are using the Service on behalf of an organization, you represent that you have authority to bind that organization to these Terms, and "you" refers to that organization.

You may not use the Service if applicable law prohibits AtlaSent from providing the Service to you, or if you are subject to economic sanctions imposed by the US, UK, EU, or UN. You represent and warrant that (a) you are not located in, organized under the laws of, or ordinarily resident in any country or territory subject to comprehensive US, UK, EU, or UN sanctions, and (b) you are not listed on any US, UK, EU, or UN restricted-party list.

1.2 Account

You are responsible for the security of your account, API keys, and credentials, and for all activity that occurs through your account. Notify security@atlasent.io promptly upon becoming aware of any unauthorized access or use.

2. The Service

AtlaSent provides an execution-time authorization service that evaluates whether an actor is authorized to perform a given action and issues a permit token on allow decisions. AtlaSent reserves the right to modify, suspend, or discontinue any part of the Service at any time, subject to §2.4 of the MSA where applicable.

The Service consists of an API, a web-based Console, SDKs (TypeScript, Python, Go), an MCP server, and a GitHub Action, each documented at https://docs.atlasent.io.

Beta and preview features are made available "AS IS" without warranty, and AtlaSent may modify or discontinue them at any time.

3. Acceptable use

Your use of the Service must comply with the AtlaSent Acceptable Use Policy at https://atlasent.io/legal/aup, which is incorporated by reference into these Terms. Violation of the AUP is a violation of these Terms.

4. Fees and payment

4.1 Plans

The Service is offered on Free, Pro, and Enterprise plans (see https://atlasent.io/pricing). Free-plan usage is subject to the limits documented on the pricing page.

4.2 Paid plans

If you select a paid plan, you agree to pay the applicable Fees as described on the pricing page or in your subscription dashboard. All sales are final. Fees are non-refundable except as expressly stated in these Terms (including §8.3) or where required by law. This applies to all Fees, including subscription fees, renewals, upgrades, prepaid commitments, installment payments, and amounts paid by bank transfer. We may change Fees on thirty (30) days' written notice; the change applies to your next renewal cycle.

4.3 Taxes

You are responsible for all taxes other than taxes on AtlaSent's net income.

4.4 Late payment

We may suspend the Service for non-payment after fifteen (15) days' notice of past-due amounts. Past-due amounts accrue interest at the lesser of 1.0% per month or the maximum permitted by law.

5. Customer Data and privacy

5.1 Your data

As between you and us, you retain ownership of the data you submit to the Service ("Customer Data"). You grant us a non-exclusive, worldwide, royalty-free license to use Customer Data solely to provide the Service to you. Our handling of Customer Data is governed by our Privacy Policy at https://atlasent.io/legal/privacy and, where applicable, our Data Processing Agreement at https://atlasent.io/legal/dpa.

5.2 What you must not submit

Do not submit to the Service:

• Protected Health Information (PHI) governed by HIPAA without a Business Associate Agreement in place;
• payment card data (PCI-DSS scope);
• export-controlled data; or
• special categories of Personal Data as defined by GDPR Article 9.

5.3 Service Data; no training on Customer Data

We may use data about the operation of the Service that does not, alone or in combination with other reasonably available data, identify you, your End Users, or any data subject ("Service Data") to operate, secure, maintain, troubleshoot, and improve the Service. We will not attempt to re-identify Service Data, and we will not publish Service Data in a form that identifies you.

We will not use Customer Data to train any general-purpose machine- learning or large-language model. Use of Customer Data to train customer-specific models, if offered, requires your prior written opt-in.

6. Intellectual property

We own all right, title, and interest in and to the Service, including all software, documentation, and trademarks. You receive only the limited rights expressly stated in these Terms.

You retain all rights in your Customer Data and your own systems.

If you provide feedback or suggestions about the Service, we may use them freely without obligation to you.

7. Confidentiality

Each Party will protect the other's non-public information disclosed in connection with these Terms ("Confidential Information") with at least the same care it uses for its own confidential information of like kind, and no less than reasonable care, and will not disclose it except to personnel with a need to know who are bound by confidentiality obligations. Confidential Information does not include information that is publicly available, independently developed, or rightfully received from a third party.

8. Term and termination

8.1 Term

These Terms begin when you first access the Service and continue until terminated under §8.2 or §8.3.

8.2 Termination by you

You may stop using the Service at any time. To cancel a paid plan, use the cancellation flow in the Console or email support@atlasent.io. Fees for the current billing cycle are non-refundable except where required by law.

8.3 Termination by us

We may suspend or terminate your access to the Service immediately if:

• you materially breach these Terms or the AUP;
• payment is past due and remains unpaid after fifteen (15) days' notice;
• we reasonably determine that continued provision of the Service to you would violate law or expose us or other customers to material harm; or
• we discontinue the Service generally.

If we discontinue the Service generally, we will use commercially reasonable efforts to give thirty (30) days' notice and refund any prepaid Fees for the unused portion of your subscription.

8.4 Effect of termination

On termination, your right to use the Service ends. Customer Data will be handled in accordance with the Privacy Policy and DPA. Sections that by their nature should survive will survive.

9. Disclaimers

EXCEPT AS EXPRESSLY STATED IN THESE TERMS, THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" AND ATLASENT DISCLAIMS ALL OTHER WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ANY WARRANTY ARISING FROM COURSE OF DEALING OR USAGE OF TRADE. ATLASENT DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR FREE OF HARMFUL COMPONENTS.

AtlaSent's issuance of an allow decision is not an independent legal authorization for any underlying action.

10. Limitation of liability

10.1 Exclusion of consequential damages

EXCEPT FOR THE UNCAPPED MATTERS IN §10.3, NEITHER PARTY IS LIABLE FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, LOST REVENUE, LOST DATA, OR COST OF SUBSTITUTE GOODS OR SERVICES, REGARDLESS OF THE THEORY OF LIABILITY AND WHETHER OR NOT THE PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

10.2 Cap

EXCEPT FOR THE UNCAPPED MATTERS IN §10.3, ATLASENT'S AGGREGATE LIABILITY ARISING OUT OF OR IN CONNECTION WITH THESE TERMS WILL NOT EXCEED THE GREATER OF (A) ONE HUNDRED US DOLLARS ($100) OR (B) THE FEES YOU PAID ATLASENT IN THE THREE (3) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO LIABILITY.

10.3 Uncapped matters

The limitations in §10.1 and §10.2 do not apply to:

(a) your payment obligations under §4; (b) your indemnification obligations under §11; (c) either Party's breach of confidentiality obligations under §7; (d) either Party's gross negligence, willful misconduct, fraud, or fraudulent misrepresentation; or (e) liabilities that cannot be limited or excluded under applicable law.

If you are an Enterprise customer with a signed MSA, the MSA's caps and exclusions apply instead of this §10.

11. Indemnification

You will defend, indemnify, and hold AtlaSent harmless from any third-party claim arising from (a) your Customer Data, (b) your use of the Service in violation of these Terms, the AUP, or law, or (c) the underlying actions you evaluate or execute using the Service.

12. Dispute resolution; arbitration; class waiver

12.1 Arbitration agreement

Any dispute, claim, or controversy arising out of or relating to these Terms, the Service, or any prior or contemporaneous discussions (a "Dispute") will be resolved by binding arbitration administered by JAMS under its Streamlined Arbitration Rules, by a single arbitrator, in San Francisco, California or by videoconference at the arbitrator's discretion. Judgment on the award may be entered in any court of competent jurisdiction. The arbitrator has authority to award equitable relief.

12.2 Delegation

The arbitrator, and not any federal, state, or local court or agency, has exclusive authority to resolve any Dispute relating to the interpretation, applicability, enforceability, or formation of this §12, including any claim that all or any part of this §12 is void or voidable.

12.3 Class-action waiver

The Parties waive any right to bring or participate in a class, collective, or representative action. If the class-action waiver in this §12.3 is held unenforceable as to any claim or remedy, the balance of this §12 will remain in effect to the maximum extent permitted by law.

12.4 30-day opt-out

You may opt out of this §12 (and accordingly preserve your right to litigate Disputes in court) by emailing legal@atlasent.io within thirty (30) days of your first acceptance of these Terms, with the subject line "Arbitration Opt-Out" and including your account email and organization name. Opting out has no other effect on your rights under these Terms.

12.5 Carve-outs

Notwithstanding the foregoing, (a) either Party may bring an individual action in small-claims court, and (b) either Party may seek injunctive relief in court for actual or threatened breach of §6 (IP) or §7 (Confidentiality).

13. Governing law

These Terms are governed by the laws of the State of Delaware without regard to conflict of laws rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

14. Changes

We may update these Terms from time to time. If we make a material change, we will notify you by email or in-product notice at least thirty (30) days before the change takes effect. Your continued use of the Service after the change takes effect is your acceptance. If you do not accept a material change, your sole remedy is to stop using the Service.

15. California-specific notices

Under Cal. Civ. Code § 1789.3, California users are entitled to the following consumer-rights notice: the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs may be contacted in writing at 1625 N. Market Blvd., Suite N-112, Sacramento, CA 95834, or by telephone at (800) 952-5210.

AtlaSent Systems, Inc. is located at 525 Market Street, Suite 2900, San Francisco, CA 94105 and may be contacted at legal@atlasent.io.

16. General

Entire agreement. These Terms, together with the AUP, Privacy Policy, DPA (if you have signed one), and any pricing-page terms incorporated by reference, are the entire agreement between you and AtlaSent regarding the Service and supersede all prior agreements regarding the same subject matter.

Assignment. You may not assign these Terms without our prior written consent. We may assign these Terms in connection with a merger, acquisition, or sale of substantially all of our assets.

No third-party beneficiaries. There are no third-party beneficiaries to these Terms.

Severability. If any provision is held unenforceable, the rest remains in effect.

No waiver. Failure to enforce a provision is not a waiver of the right to enforce it later.

Notices to you may be by email to the address on your account, or by in-product notice. Notices to AtlaSent must be sent to legal@atlasent.io.

Changelog