Terms of Service

These Terms of Service (the "Terms") form a binding agreement between you or the legal entity you represent ("Customer", "you") and RootCX ("RootCX", "we", "us"). Entity details are available on request at legal@rootcx.com.

You accept these Terms by (a) creating a RootCX account, (b) clicking an "I agree" or equivalent control, (c) installing, downloading, or deploying any component of the Service, or (d) accessing or using the Service on behalf of an organization. If you accept on behalf of an organization, you represent that you are authorized to bind that organization to these Terms.

If you do not agree, do not access or use the Service. Separate negotiated agreements (for example, an Enterprise Order Form or MSA) will prevail over these Terms to the extent of any conflict.

RootCX provides a platform for building, deploying, and operating internal applications and AI agents on a unified runtime (the "Service"), including:

• RootCX Cloud — a managed, hosted deployment of the RootCX Core with per-project databases, compute, SSO, role-based access control, audit logs, secrets management, and the app and agent runtime.
• Self-Hosted RootCX — source-available software you may deploy on your own infrastructure, subject to the license referenced in Section 5.
• RootCX Studio and CLI — local developer tools that connect to a RootCX Core.
• AI agents and integrations — runtime, SDKs, and prebuilt connectors (e.g., Notion, Gmail, Outlook, Salesforce, Slack, GitHub, Stripe) that let apps and agents read from and write to your systems under the permissions you configure.

We may modify, add, or discontinue features of the Service at any time. Where a change is material and adverse to you, we will use commercially reasonable efforts to notify you in advance by email or in-product notice.

You must be at least 18 years old and legally capable of entering into a contract to use the Service. You may not use the Service if you are barred from doing so under the laws of your jurisdiction or any jurisdiction where RootCX operates, or if you are subject to sanctions referenced in Section 17.

You are responsible for (a) providing accurate, complete, and up-to-date account information, (b) safeguarding credentials, API keys, and tokens, and (c) all activity that occurs under your account, whether authorized or not. You must notify us promptly at contact@rootcx.com if you suspect unauthorized access.

If you provision access for additional users (for example, team members or end users of your apps), you are responsible for their compliance with these Terms and for the relationship between you and them.

RootCX Cloud is offered under Free, Pro, Team, and Enterprise plans. The current scope, included usage, compute tiers, and prices for each plan are published at rootcx.com/pricing and are incorporated into these Terms by reference.

• Free plan. Provided as-is for evaluation, proof of concept, and small internal use. Subject to usage limits and may be changed or discontinued with notice.
• Paid plans. Fees are charged in advance on a recurring basis in the currency indicated at checkout. Seat-based charges accrue when a user is added. Usage-based charges (for example, compute add-ons, AI agent hours, storage, or egress beyond included limits) are billed per the metering described on the pricing page.
• Taxes. Fees are exclusive of VAT and any other applicable taxes, duties, or withholdings, which are your responsibility except for taxes on our net income.
• Upgrades and downgrades. Upgrades take effect immediately with pro-rated charges for the remainder of the cycle. Downgrades take effect at the start of the next cycle.
• Non-payment. If a charge fails, we may suspend or downgrade paid features after reasonable notice. Amounts more than 30 days overdue may accrue interest at the lower of 1% per month or the maximum rate permitted by law.
• Refunds. Except where required by law, fees are non-refundable. We do not refund partial billing cycles, unused usage, or seats removed mid-cycle.

As between the parties, RootCX and its licensors retain all right, title, and interest in and to the Service, including its software, documentation, designs, trademarks, and any improvements or derivative works (the "RootCX Technology").

Cloud license. Subject to these Terms and payment of applicable fees, RootCX grants you a non-exclusive, non-transferable, revocable, worldwide right to access and use RootCX Cloud during your subscription term, solely for your internal business purposes.

Source-available license. The self-hostable components of RootCX are licensed under the Functional Source License, Version 1.1, Apache 2.0 Future License (FSL-1.1-ALv2). Two years after each release, that release automatically becomes available under the Apache License 2.0. The applicable license file distributed with the software governs your use of the self-hosted components and is unchanged by these Terms.

Restrictions. Except as expressly permitted by these Terms, the applicable open-source license, or mandatory law, you will not (a) resell, sublicense, or offer the Service as a hosted or managed offering to third parties; (b) remove or alter proprietary notices; (c) use the Service to build a competing product; or (d) circumvent usage limits, license keys, or security controls.

Feedback. If you send us suggestions, ideas, or feedback, you grant us a perpetual, irrevocable, royalty-free, worldwide license to use them without restriction. We are under no obligation to act on feedback.

Your data is yours. You retain all right, title, and interest in and to the data you or your users submit to, generate in, or store through the Service ("Customer Data"). You grant RootCX a limited, worldwide license to host, copy, process, transmit, and display Customer Data solely to provide, secure, and support the Service, to comply with law, and to produce aggregated, de-identified analytics that cannot reasonably be used to identify you or any individual.

Roles under data protection law. For personal data contained in Customer Data, you act as the data controller and RootCX acts as the data processor. Our processing is governed by the Data Processing Addendum (DPA) referenced in our Privacy Policy, which is incorporated into these Terms by reference.

Your responsibilities. You are responsible for the lawful basis, accuracy, quality, and content of Customer Data; for obtaining any consents required from your end users; and for configuring access controls (SSO, RBAC, secrets) appropriately for your use case.

Export and deletion. You may export Customer Data from the Service at any time during your subscription. On termination, we will make Customer Data available for export for 30 days, after which we will delete it from production systems within a reasonable period, except where retention is required by law.

The Service lets you configure AI agents that call third-party model providers (for example, Anthropic, OpenAI, Mistral) or models that you host. You are responsible for choosing a model provider, providing or authorizing credentials, and complying with that provider's terms and acceptable use policy.

• Outputs. Subject to the underlying model provider's terms, as between you and RootCX, you own the inputs and outputs generated by agents acting on your behalf.
• No training on Customer Data. We do not use Customer Data to train our own foundation models. Model providers are third parties and their data handling is governed by their terms.
• Accuracy. AI outputs may be inaccurate, incomplete, or inappropriate for your use case. You are responsible for reviewing outputs before relying on them, especially for actions affecting legal rights, health, safety, or finances.
• Agent actions. Agents act under the same permissions you grant them. Every action executed through RootCX is logged in the audit trail. You are responsible for configuring the scope of what agents can read and write.

You will not, and will not permit anyone else to, use the Service to:

• violate any law, regulation, or third-party right, including intellectual property, privacy, or publicity rights;
• send spam, phishing, or unsolicited communications, or deceive recipients about the origin of content;
• upload or transmit malicious code, probe or scan for vulnerabilities outside a sanctioned program, or circumvent authentication or rate limits;
• interfere with or disrupt the integrity or performance of the Service or the infrastructure that supports it;
• generate or distribute content that sexually exploits minors, incites violence, or facilitates unlawful surveillance;
• process data categories for which the Service is not designed (such as PCI cardholder data outside a designated scope, or regulated health data without an appropriate agreement);
• resell, sublicense, or act as a service bureau on top of RootCX Cloud, except as expressly permitted in writing.

We may investigate suspected violations and suspend access where necessary to protect the Service, other customers, or third parties. We will aim to give you notice and an opportunity to cure where feasible.

We maintain commercially reasonable administrative, technical, and organizational measures designed to protect Customer Data, including encryption in transit, access controls, and logging. A summary of controls is available on request.

We target high availability for RootCX Cloud but do not guarantee uninterrupted access under these Terms. Service-level commitments apply only where expressly agreed in a separate Service Level Agreement or Enterprise Order Form. Planned maintenance and emergency maintenance may affect availability.

By you. You will defend, indemnify, and hold RootCX harmless from and against third-party claims, damages, liabilities, and reasonable costs (including legal fees) arising out of (a) Customer Data or your use of the Service in breach of these Terms or applicable law, (b) content or actions generated by AI agents you configure, or (c) your integrations with third-party services.

By RootCX. We will defend you against third-party claims that your authorized use of the RootCX Technology infringes a valid intellectual property right, and pay damages and costs finally awarded, provided you notify us promptly, give us sole control of the defense, and reasonably cooperate. If a claim is likely, we may at our option modify the Service, procure a license, or terminate the affected subscription and refund unused prepaid fees. This Section states our entire liability for IP infringement claims.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, GOODWILL, OR DATA, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

EACH PARTY'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS WILL NOT EXCEED THE AMOUNTS PAID OR PAYABLE BY YOU TO ROOTCX FOR THE SERVICE IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM. FOR FREE USE, THE AGGREGATE LIABILITY WILL NOT EXCEED ONE HUNDRED EUROS (€100).

The above limits do not apply to (a) fraud or willful misconduct, (b) liability that cannot be excluded or limited under applicable law, or (c) either party's indemnification obligations under Section 13.

These Terms start when you first accept them and continue until terminated. Paid subscriptions renew automatically for successive periods equal to the initial term unless cancelled before the end of the current period.

Termination for convenience. You may stop using the Service or cancel a subscription at any time from the billing settings. Cancellation ends auto-renewal; previously paid fees are non-refundable.

Termination for cause. Either party may terminate for material breach not cured within 30 days of written notice. We may suspend or terminate immediately for breach of Sections 5, 9, or 16, unpaid fees, or where required by law or to prevent material harm.

Effect of termination. On termination, your right to access the Service ends. Sections that by their nature should survive (including ownership, confidentiality, payment obligations accrued before termination, disclaimers, indemnification, limitation of liability, and governing law) will survive.

These Terms are governed by the laws of Belgium, without regard to its conflict of laws rules. The UN Convention on Contracts for the International Sale of Goods does not apply.

The parties will first try to resolve any dispute informally by contacting legal@rootcx.com. If a dispute cannot be resolved within 60 days, it will be submitted to the exclusive jurisdiction of the competent courts of Brussels, Belgium. Nothing in this Section prevents either party from seeking injunctive relief in any court of competent jurisdiction to protect its intellectual property or Confidential Information.

Where you are a consumer, mandatory provisions of the law of your country of residence still apply.

Entire agreement. These Terms, the Privacy Policy, the DPA, and any Order Form or negotiated agreement constitute the entire agreement between the parties regarding the Service and supersede prior or contemporaneous understandings on the subject.

Assignment. You may not assign these Terms without our prior written consent, except to an affiliate or in connection with a merger or sale of substantially all of your assets, provided the assignee is not a competitor of RootCX. We may assign these Terms freely. Any non-permitted assignment is void.

Notices. We may give notices by email to the address on your account or by in-product notice. Legal notices to RootCX must be sent to legal@rootcx.com.

Force majeure. Neither party is liable for delay or failure caused by events beyond its reasonable control, including acts of God, war, civil unrest, labor disputes, internet or telecommunications failures, cyberattacks, or acts of government.

Independent contractors; no third-party beneficiaries. The parties are independent contractors. These Terms create no agency, partnership, or joint venture and confer no rights on any third party.

Severability; waiver. If any provision is held unenforceable, the remaining provisions remain in force. Failure to enforce any right is not a waiver of it.

Questions about these Terms? Reach us at legal@rootcx.com.

RootCX — Belgium. For general inquiries: contact@rootcx.com.