Terms of Service

1. Agreement to these terms

These Terms of Service ("Terms") are between PromptSec ("PromptSec", "we", "us") and the organization that signs up for the Service ("you", "Customer"). [Legal entity name and registered address to be inserted here before this page is published — e.g. "PromptSec Technologies Private Limited, registered at ___."] By creating or using a PromptSec account, or by having us provision one for you, you accept these Terms on behalf of your organization. If you don't have authority to bind your organization, don't accept these Terms — ask whoever does.

An individual employee whose company has deployed PromptSec is not a party to this agreement — their employer is. See our Privacy Policy for how we handle a monitored employee's data.

2. The Service

PromptSec is a browser extension, an optional local agent, and a hosted control plane (dashboard, policy engine, telemetry, and — where you opt into it — cloud escalation for ambiguous prompts) that helps you detect and govern sensitive data your employees send to AI tools. We may add, change, or remove features as the product develops; we'll try not to remove something you depend on without notice, but at this stage of the product we can't promise otherwise.

3. Accounts and onboarding

There is no self-serve signup today. We provision your organization's tenant after a sales conversation, and your designated admin(s) invite the rest of your team. You're responsible for:

• Keeping account credentials confidential and using multi-factor authentication where we offer it.
• Everything that happens under your account, including actions by anyone you've invited.
• Telling us promptly if you suspect unauthorized access.
• Giving us accurate information when we provision your account and keeping it current.

4. Your responsibilities as a customer

PromptSec monitors what your employees type into AI tools. That makes you, not us, the party responsible for having a lawful basis to do that under the laws that apply to you, and for telling your employees they're being monitored and why — we provide the tool and a notice template; we don't provide legal advice, and we're not a party to your relationship with your employees. You're also responsible for configuring your privacy level and policies appropriately for your organization, and for your own compliance obligations (DPDP Act, GDPR, HIPAA, or otherwise) — PromptSec is one control in your program, not a substitute for it.

5. Acceptable use

You agree not to:

• Reverse-engineer, decompile, or attempt to extract source code from the hosted Service, beyond what the Apache 2.0 license already permits for the components we publish under it (§9).
• Resell, sublicense, or provide the Service to a third party outside your own organization without our written agreement.
• Attempt to bypass authentication, rate limits, or tenant isolation, or probe, scan, or test the vulnerability of the Service without our prior written consent (report a real finding to info@promptsec.in instead — see §12).
• Use the Service to violate any law, or to monitor individuals in a jurisdiction or manner your own legal counsel hasn't cleared.
• Interfere with or disrupt the integrity or performance of the Service, or attempt to access another tenant's data.

6. Fees and billing

Paid plans are billed a flat monthly price per plan, communicated to you when we set up your account — not published as a fixed self-serve rate today. Payment is processed by Razorpay and/or Stripe; we never receive or store your full card number. Fees are billed in advance for each billing period and are non-refundable except where required by law or where we've separately agreed otherwise in writing. If a payment fails, we'll try to reach you before suspending access.

You may cancel at any time by contacting info@promptsec.in; cancellation takes effect at the end of your current billing period, and we don't prorate refunds for the remainder of a period you've already paid for.

7. Data ownership

You own the data your organization and your monitored employees generate through the Service. We process it only to provide the Service to you, as described in our Privacy Policy, and we don't use it to train shared models or improve our detectors without your explicit opt-in. Deleting your account starts a 7-day recovery window, after which your data is permanently deleted — see the Privacy Policy for the detail.

8. Our intellectual property

Aside from the components we publish under an open-source license (§9), PromptSec and its licensors own all right, title, and interest in the Service, including our trademarks, logos, and the parts of our codebase we don't publish. These Terms don't grant you any rights to our intellectual property beyond what's needed to use the Service as intended.

9. Open-source components

This project's browser extension, on-device detection engine, and policy language are published under the Apache License 2.0 — you can read, audit, and (subject to that license) redistribute that code yourself; it doesn't require accepting these Terms. These Terms govern the hosted Service: the control plane, dashboard, support, and everything that isn't just running in your own browser. Where the two overlap (for example, the extension talking to our hosted backend), the Apache 2.0 license governs the code and these Terms govern the service it talks to.

10. Service availability and disclaimers

PromptSec is pre-alpha software. We don't offer a formal uptime SLA today, and the Service is provided "as is" and "as available," without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, or non-infringement — to the maximum extent the law where you're located allows us to disclaim them. In particular, and matching what we say on our Security page: detection is not exhaustive, we hold no compliance certifications, and this is one control in your security program, not a guarantee that sensitive data will never reach an AI tool.

11. Limitation of liability

To the maximum extent permitted by law, PromptSec won't be liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits or data, arising from your use of the Service. Our total liability for any claim arising from these Terms or the Service is limited to the fees you paid us in the 12 months before the claim arose. Nothing in these Terms limits liability where the law doesn't allow it to be limited (for example, liability for our gross negligence or willful misconduct, where applicable).

12. Vulnerability reports

If you or a member of your security team finds a vulnerability in the Service, please report it to info@promptsec.in with reproduction steps before disclosing it publicly. We'll respond, and we won't pursue legal action against a good-faith report made this way.

13. Term and termination

These Terms apply for as long as you have an active account. Either of us may terminate for convenience with 30 days' written notice, or immediately if the other party materially breaches these Terms and doesn't cure it within 15 days of being told about it. We may also suspend or terminate your access immediately if we reasonably believe continued access poses a security risk to other customers, or if required by law. On termination, §7 (data ownership and deletion), §8 (our intellectual property), §11 (limitation of liability), and §15 (governing law) survive.

14. Changes to these Terms

We'll update the effective date above whenever these Terms change, and post the revised version here. For a material change, we'll notify customer admins directly rather than relying on them to notice, and give you a reasonable opportunity to review it before it takes effect for your account.

15. Governing law

These Terms are governed by the laws of India, without regard to conflict-of-law principles, and any dispute arising from them will be subject to the exclusive jurisdiction of the courts of [City to be inserted — e.g. "Bengaluru, Karnataka"]. If you're located outside India and local law requires a different governing law or venue for a term to be enforceable against you, that local requirement applies to that term only.

16. Contact

Questions about these Terms: info@promptsec.in. See our Contact page for other ways to reach us.