Terms of Service

These Terms of Service (the “Terms”) form a binding agreement between MB Tilfortis, a small partnership registered in Kaunas, Lithuania (“Oaura”, “we”, “us”), and the individual or organization that creates an Oaura account or uses the Service (“you”, the “Customer”).

The Terms govern your use of everything we make available as the Service:

• —this website, oaura.ai;
• —the Oaura dashboard at oaura.app;
• —the Oaura API and the embeddable chat widget;
• —the agents, connectors, knowledge bases and environments you configure in it.

You accept these Terms by creating an account, by clicking to accept them, or by using the Service. If you do not accept them, do not use the Service.

If you accept these Terms for an organization, you confirm you are authorized to bind that organization, and “you” means that organization. If you are not, you must not use the Service on its behalf.

Where documents conflict, the order is:

• —a signed order form or master services agreement (available on Enterprise);
• —our data processing addendum, for anything about processing personal data;
• —these Terms;
• —the documentation and plan limits published on the pricing page.

We may change these Terms. For changes that materially reduce your rights or increase your obligations, we will email your account administrators at least 30 days before they take effect. Continuing to use the Service after that date means you accept the new version. If you do not accept it, you may terminate under clause 11.2 before the change takes effect, and we will refund any prepaid fees covering the period after termination on a pro-rata basis. Non-material changes — clarifications, typo fixes, new sub-processors listed on the security page — take effect when posted.

You must be at least 16 years old and legally able to enter a contract. The Service is built for businesses and developers; it is not intended for personal use by children.

Give us accurate account and billing information and keep it current. We rely on your email address for notices under these Terms.

Keep your credentials and Your Keys confidential. You are responsible for everything that happens under your Account, whether or not you authorized it, except to the extent it results from our own failure to secure the Service. Tell us at security@oaura.ai as soon as you suspect unauthorized access.

You decide who joins your Workspace and what they can do. Administrators can see and change Workspace configuration, agent instructions and conversation history within your Plan’s retention window, and can remove members. Roles and permissions are available from the Business plan; SAML SSO and SCIM provisioning are available on Enterprise.

You are responsible for your End Users’ use of your Agents, for the terms and notices you give them, and for having a lawful basis to send us the data they provide. Where law requires you to tell a person they are interacting with an AI system, that is your obligation — see clause 7.8.

Using Oaura to build and operate Agents for your own clients is expressly permitted — Environments and per-client Agents exist for exactly that. You remain the Customer under these Terms, you are responsible for your clients’ use, and your agreements with them are yours alone. You must not resell access to the Oaura dashboard itself, or present the Service as your own platform, without a written reseller agreement from us.

The Service is sold as a subscription. The Plan you choose, its price, and its limits — agents, connectors, conversation history, storage — are those shown on the pricing page and at checkout when you subscribe, and they form part of these Terms. Enterprise pricing and limits are set in an order form.

There is no free plan. Instead, Starter runs free for the first seven days from account creation, with the same agents, connectors and widget as a paid Starter subscription. When the week is up you must choose a paid Plan to keep using the Service; accounts that do not are suspended, and their data is handled under clause 11.5. One free week per customer — creating further accounts to extend it is a breach of clause 5.

Fees are charged in EUR through our payment processor, Stripe, in advance of each billing period. Prices exclude VAT and other taxes, which we add where we are required to. If you are a VAT-registered business outside Lithuania in the EU and give us a valid VAT identification number, the reverse charge applies. You authorize us to charge your payment method for all fees as they fall due.

Subscriptions renew automatically for a further period of the same length — monthly or annual — until cancelled. Annual billing is discounted by 20% against the monthly price.

You can cancel at any time from the dashboard; it takes one click and needs no conversation with us. A monthly subscription keeps running until the end of the period you have paid for and then stops. An annual subscription keeps its remaining paid time and then stops. Cancelling stops future renewals; it is not a request for a refund of the current period.

Fees already paid are non-refundable, except where clause 1.6 or clause 11.4 says otherwise, or where refusing a refund would be contrary to law. Nothing here affects a consumer’s statutory withdrawal rights.

If a charge fails we will retry it and email you. If an amount stays unpaid 14 days after it fell due, we may suspend the Service under clause 11.7 until it is paid. We may charge statutory default interest on overdue amounts.

We may change our prices with at least 30 days’ notice by email. A change never affects a period you have already paid for; it applies from your next renewal. If you do not want to pay the new price, cancel before that renewal under clause 4.5.

If your usage exceeds your Plan’s limits, we will tell you and may rate-limit the Service or ask you to move to a Plan that fits. We do not bill surprise overage charges for exceeding a Plan limit. Charges you incur with your own LLM Provider are a separate matter — see clauses 7.4 and 13.4.

Verified educational institutions and registered non-profits get 50% off Starter and Business. Email hello@oaura.ai. We may ask for evidence of status and may withdraw a discount if it no longer applies.

Use the Service lawfully, and in compliance with the regulation that applies to you — including data protection law, consumer law, and rules governing AI systems in the markets you operate in.

Do not use the Service to:

• —generate, store or distribute material that sexually exploits or endangers children, incites violence, or facilitates terrorism;
• —harass, defame, stalk or threaten anyone, or produce content designed to deceive someone into handing over money, credentials or personal data;
• —infringe anyone's intellectual property, or ingest content you have no right to ingest;
• —build or distribute malware, or to probe, scan or break the security of any system — ours or anyone else's — without authorization;
• —process personal data you have no lawful basis to process, or scrape personal data at scale;
• —operate an Agent that impersonates a specific real person without their consent;
• —circumvent rate limits, budget caps, output filtering or prompt-injection guards, or access the Service through automation designed to evade Plan limits.

Do not deploy an Agent as the sole decision-maker where the outcome materially affects a person’s rights, safety, livelihood or access to essential services — credit, employment, housing, insurance, education, immigration, medical or legal outcomes. Keep a competent human in the loop. Do not send us special category personal data as defined by the GDPR, or data subject to HIPAA, unless we have agreed to it in writing: we do not yet offer a HIPAA business associate agreement, and our current compliance status is published honestly on the security page.

If we reasonably believe this section has been breached, we may investigate, rate-limit, suspend or terminate the Account, and remove the content concerned. We will give you notice and a chance to fix it where it is practical to do so, and act first where there is a risk of serious harm, a legal obligation, or an active threat to the Service. To contest an enforcement action, email legal@oaura.ai.

Customer Data is yours. We acquire no ownership of it, and no right to it beyond the limited license in clause 6.2.

You grant us a worldwide, non-exclusive, royalty-free license to host, store, copy, transmit, process and display Customer Data, and to create backups of it, solely in order to provide, secure and support the Service for you and to follow your instructions. The license lasts only as long as we hold the data, and ends when it is deleted under clause 11.5.

We do not use Customer Data to train, fine-tune or evaluate any machine learning model, ours or anyone else’s. We do not sell Customer Data, and we do not share it for advertising. Prompts an Agent sends to an LLM Provider are governed by that provider’s terms — see clause 7.5.

You warrant that you have the rights, consents and lawful basis needed for us to process the Customer Data you send us, and that it does not breach clause 5. You decide what goes into a Knowledge Base or an agent database; we do not review it.

We may compile de-identified, aggregated statistics about how the Service is used — request volumes, error rates, feature adoption — and use them to operate, secure and improve it. These statistics never identify you, your End Users or any individual, and we will not publish anything that could.

We maintain technical and organizational measures appropriate to the risk, including encryption at rest and in transit, row-level scoping between tenants, and a credential vault in which Your Keys are encrypted, scoped to a single Agent and kept out of logs. What is in place today, and which certifications we hold versus are still working toward, is published on the security page — we do not claim certifications we have not earned.

On Business and Enterprise you choose a hosting region for your Workspace (US or EU). On Enterprise, agent data can be isolated to a dedicated database in the region you pick, or to your own infrastructure under clause 8.4.

Where we process personal data on your behalf, we do so as your processor under a GDPR data processing addendum, which includes the current list of sub-processors and the relevant transfer mechanism. It is available on request from legal@oaura.ai, and takes precedence over these Terms for anything it covers.

You can export or delete Customer Data at any time from the dashboard. Privacy requests and questions go to privacy@oaura.ai; see the privacy policy.

An Agent sends your instructions, retrieved knowledge and the conversation so far to an LLM Provider, and acts on what comes back — including by calling Connectors. Model Output is generated probabilistically. It is not retrieved from a reviewed source of truth.

Model Output may be inaccurate, incomplete, outdated, biased or plainly invented, and the same prompt can produce different answers. It is not professional advice of any kind. You are responsible for reviewing Model Output before relying on it or putting it in front of an End User, and for keeping a human in the loop wherever the stakes warrant it — see clause 5.3.

We do not warrant the accuracy, completeness, fitness or non-infringement of Model Output. We also make no claim that Model Output is unique: a model may generate substantially the same output for another customer, and we cannot and do not promise you exclusivity in it.

On every Plan you can bring your own LLM Provider key. Calls made with Your Keys go to that provider under your agreement with them and are billed to you, not to us. We are not a party to that agreement and we are not responsible for that provider’s availability, pricing, content policies or model changes. Agents can loop, retry and fan out; set per-agent budget caps and rate limits before you put one in production.

You must comply with your LLM Provider’s terms and usage policies. Those terms, not ours, govern what that provider may do with the prompts and content an Agent sends it — including whether it retains them. Check this before routing sensitive content through a provider, and choose a provider and configuration that match your obligations.

As between you and us, Model Output generated for your Workspace is Customer Data and is yours, subject to your LLM Provider’s terms and to clause 7.3.

Connectors let an Agent do things with consequences — write to your systems, send messages, move money if you wire that up. You decide which Connectors an Agent has, which scopes and credentials it holds, and which actions need confirmation. You are responsible for those choices and for what your Agents do with them. Grant the narrowest scope that works, and test in a separate Environment first.

Where law requires an End User to be told they are interacting with an AI system rather than a human, making that disclosure is your responsibility. The Widget supports it.

We run the Service on a small set of third parties — payments, authentication, storage, and the LLM Provider you choose. The current list is published on the security page and in our data processing addendum. We remain responsible to you for their performance of the parts of the Service we delegate to them.

A Connector you enable, and any system you point an Agent at, is not ours. Your use of it is governed by your agreement with that provider. We do not warrant third-party services and we are not liable for their acts, outages or changes.

Third parties change and withdraw APIs. When that happens we may have to change, deprecate or remove a Connector. We will give you as much notice as the third party gives us, and more where we can.

On Enterprise you can run Agents against your own database project. If you do, you are responsible for that infrastructure — its availability, backups, configuration and security — and our obligations under clauses 6.6 and 10 are reduced accordingly for the parts you operate.

Confidential information is non-public information one side gives the other that is marked confidential or that a reasonable person would understand to be confidential — including Customer Data, our non-public pricing and roadmap, and either side’s security details. It does not include information that is public without breach, that the recipient already had, that it develops independently, or that it lawfully receives from someone else.

Each side will use the other’s confidential information only to perform this agreement, will protect it with at least reasonable care, and will share it only with people and sub-processors who need it and are under equivalent obligations.

Either side may disclose confidential information where legally required, and will give the other reasonable advance notice so it can object, unless notice is itself prohibited.

These obligations apply during the term and for three years afterwards, and for as long as the information remains a trade secret.

If you send us feedback or feature ideas, we may use them to improve the Service with no obligation to you. That does not give us any right to Customer Data, and we will not identify you as the source without your permission.

We will provide the Service with reasonable skill and care and work to keep it available. Current and historical availability is published at status.oaura.app.

Starter and Business carry no contractual uptime commitment. Enterprise subscriptions get a written service level agreement, with its remedies, in their order form. Those remedies are your exclusive remedy for failing to meet the committed level.

We announce planned maintenance on the status page in advance, and may carry out emergency maintenance without notice where security or stability requires it. We develop the Service continuously, so features change. We will not make a change that materially degrades a core function of your Plan without 30 days’ notice; if we do, you may terminate under clause 11.2 and clause 1.6’s pro-rata refund applies.

Support is by email on Starter, prioritized on Business, and includes a named customer success contact on Enterprise. Support covers the Service; it does not extend to debugging your own systems, your LLM Provider, or code you write against our API.

Features we label beta, preview or experimental are provided as-is, may change or be withdrawn at any time, are excluded from any service level agreement, and should not be relied on in production.

These Terms start when you first create an Account or use the Service and continue until terminated under this section.

You may cancel your subscription at any time under clause 4.5, and may terminate these Terms by closing your Account. You may also terminate immediately if we materially breach these Terms and do not fix it within 15 days of your written notice.

We may terminate or suspend if you materially breach these Terms and do not fix it within 15 days of our notice; immediately for a breach of clause 5, for non-payment that continues after suspension under clause 4.7, or where we are legally required to; and on 60 days’ notice if we discontinue the Service or your Plan entirely.

Access ends, the licenses in these Terms end, and fees accrued up to termination remain payable. If we terminate for your breach, prepaid fees are not refunded. If we terminate for convenience, or discontinue the Service or your Plan, we refund prepaid fees covering the period after termination on a pro-rata basis.

For 30 days after termination you can still sign in to export Customer Data. After that we delete it from live systems, and it ages out of encrypted backups on our normal backup cycle. We may keep what law requires us to keep — billing records in particular — and de-identified aggregated statistics under clause 6.5. You can ask us to delete sooner at privacy@oaura.ai.

We may suspend all or part of the Service where there is non-payment, a security risk, a legal obligation, or an active breach of clause 5. We will limit a suspension to what the cause requires, in scope and in duration, and lift it once the cause is resolved.

Clauses 1.5, 2, 4.6, 6.1, 6.5, 7.3, 9, 11.4, 11.5, 12, 13, 14, 15 and 16 survive termination, along with anything else that by its nature should.

Each side warrants that it has the authority to enter these Terms and that doing so does not breach another agreement it is bound by.

We warrant that we will provide the Service with reasonable skill and care and substantially as described in the documentation. If we do not, tell us and we will fix it; that is your primary remedy, alongside your rights in clause 11.2.

Beyond clause 12.2, and to the fullest extent the law allows, the Service is provided as-is and as-available, and we exclude all implied warranties and conditions, including merchantability, fitness for a particular purpose, non-infringement, and any promise that the Service will be uninterrupted, timely, secure against every threat, or error-free. Clause 7 applies to Model Output in particular.

You warrant that you will use the Service in line with clause 5, that you have the rights and lawful basis described in clause 6.4, and that you will keep whatever consents, notices and disclosures your own use requires.

If you use the Service as a consumer, nothing in these Terms limits the rights you have under mandatory consumer law, and the exclusions above apply only to the extent that law permits.

To the fullest extent the law allows, neither side is liable for indirect, incidental, special, punitive or consequential loss, or for lost profits, lost revenue, lost business or lost goodwill, even if it was warned they were possible. We are not liable for loss or corruption of Customer Data beyond restoring the most recent backup we hold.

Each side’s total aggregate liability arising out of or relating to these Terms is capped at the fees you paid us in the twelve months before the event giving rise to the claim. We are a young company and that cap is a deliberate allocation of risk reflected in the price you pay. Where a jurisdiction does not permit a cap this low, the lowest limit that jurisdiction does permit applies instead.

Nothing in these Terms limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, for willful misconduct, for your obligation to pay fees due, for either side’s indemnities under clause 14, or for anything else that cannot be limited under Lithuanian law.

We are not liable for charges you incur with an LLM Provider or any other third party, including charges caused by an Agent looping, retrying, mis-configured instructions, a prompt-injection attack, or a leaked key of yours. Budget caps and rate limits exist for this; configuring them is your responsibility.

You will defend us against third-party claims arising from Customer Data, from your End Users or clients, from your use of the Service in breach of clause 5, or from actions your Agents take through Connectors you configured, and will pay damages and costs finally awarded or agreed in settlement.

We will defend you against third-party claims that the Service, as we supply it, infringes that party’s intellectual property, and will pay damages and costs finally awarded or agreed in settlement. This does not cover claims arising from Customer Data, from Model Output, from an LLM Provider or other third-party service, from Your Keys, from modifications you make, or from combining the Service with something we did not supply. If such a claim is made we may modify the Service, procure a right to continue, or terminate the affected part and refund prepaid fees for it.

The indemnified side must notify the other promptly, let it control the defense and settlement, and cooperate reasonably. No settlement that admits fault or imposes an obligation on the indemnified side is binding without its consent.

These Terms and any dispute arising from them are governed by the laws of the Republic of Lithuania, excluding its conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods.

Before starting proceedings, email legal@oaura.ai describing the dispute. Both sides will try in good faith to resolve it within 30 days. This does not stop either side seeking urgent injunctive relief.

The courts of Kaunas, Lithuania have exclusive jurisdiction, subject to clause 15.4. Either side may seek injunctive relief to protect its intellectual property or confidential information in any court of competent jurisdiction.

You may bring proceedings in the courts of your country of residence, and you keep the mandatory protections of the law there. You may also use the European Commission’s online dispute resolution platform.

We give notice by email to your account administrators, or in the dashboard. You give notice to us at legal@oaura.ai. Notice is effective when sent, provided it does not bounce.

You may not assign these Terms without our written consent, except to a successor of your business by merger or sale of substantially all assets, with notice to us. We may assign to an affiliate or to a successor of our business, and remain responsible for performance until the assignment takes effect.

Neither side is liable for failing to perform because of an event outside its reasonable control, including infrastructure or carrier outages at a provider it does not operate. This does not excuse paying fees already due.

We will not use your name, logo or a description of your use of the Service as a customer reference without your written permission. You may say you use Oaura.

Each side will comply with applicable export control and sanctions law. You may not use the Service if you are subject to EU, UK or US sanctions, or located in a territory those regimes embargo.

If a provision is unenforceable, it is limited to the minimum extent needed and the rest stands. Not enforcing a right is not waiving it. There are no third-party beneficiaries. Nothing here creates a partnership, agency or employment relationship. These Terms, together with the documents in clause 1.5, are the entire agreement on this subject and replace anything said before.

These Terms are written in English. Any translation we provide is for convenience; the English version governs, except where mandatory local law requires otherwise.