Terms of Service

"CortexHub," "we," "us," or "our" refers to CortexHub Limited and its affiliates, operating globally.

"Customer," "you," or "your" refers to the individual or legal entity accessing or using our Services.

"Services" refers to CortexHub's runtime policy enforcement platform, including the SDK, dashboard, APIs, documentation, and related services.

"SDK" refers to the CortexHub Software Development Kit that connects AI agent frameworks to the Cortexhub MCP gateway for session attribution and telemetry.

"Customer Data" refers to data, content, and information that you provide to or generate using the Services, including telemetry data from your AI agents.

"Agreement" refers to these Terms together with any applicable Order Form, Data Processing Agreement, or Service Level Agreement.

By creating an account, downloading our SDK, or otherwise accessing our Services, you represent that:

• You are at least 18 years old and have the legal capacity to enter into contracts
• If accepting on behalf of an organization, you have the authority to bind that organization to these Terms
• You have read, understood, and agree to be bound by these Terms and our Privacy Policy
• Your use of the Services complies with all applicable laws and regulations

If you do not meet these requirements or do not agree to these Terms, you must immediately discontinue use of our Services.

CortexHub provides a runtime policy enforcement platform for AI agents, including:

• MCP Gateway: A hosted gateway endpoint that routes tool calls from any MCP-compatible agent (Claude Desktop, Cursor, ChatGPT, or programmatic clients) to connected toolkits, enforcing policies on every call before forwarding to the external API
• Python SDK: A client library for creating per-user gateway sessions, enabling multi-user applications to attribute tool calls to individual end-users
• Dashboard (Control Plane): Web interface for policy management, toolkit configuration, approval workflows, audit log review, and analytics
• Policy Engine: Server-side evaluation on the CortexHub gateway that applies your policies to every tool call - permitting, denying, modifying arguments, or routing to human approval before the external API is called
• Audit Log: A tamper-evident, hash-chained record of every tool call, policy decision, and approval event processed through the gateway
• AI Co-workers: AI agents you configure that use third-party AI models to chat, take actions through governed tools, and assist with your work
• Meetings: An optional meeting assistant that joins, records, and transcribes meetings you connect, and can participate by voice
• Memory (Brain) and Knowledge: Persistent, organization-scoped memory and file knowledge derived from content you provide, used to give your co-workers context

We reserve the right to modify, suspend, or discontinue any aspect of the Services at any time with reasonable notice. We are not liable for any modification, suspension, or discontinuation of the Services.

4.1 Account Creation

To access certain features of the Services, you must create an account. You agree to:

• Provide accurate, current, and complete information during registration
• Maintain and promptly update your account information
• Keep your password secure and confidential
• Notify us immediately of any unauthorized access to your account
• Accept responsibility for all activities that occur under your account

4.2 Account Security

You are responsible for maintaining the security of your account and API keys. We strongly recommend:

• Using strong, unique passwords
• Enabling multi-factor authentication (MFA) where available
• Rotating API keys regularly
• Restricting access to API keys and credentials
• Monitoring your account for suspicious activity

We are not liable for any loss or damage arising from your failure to comply with these security obligations.

You agree not to use the Services to:

• Violate any applicable laws, regulations, or third-party rights
• Transmit malware, viruses, or other harmful code
• Attempt to gain unauthorized access to our systems or other users' accounts
• Interfere with or disrupt the Services or servers connected to the Services
• Reverse engineer, decompile, or disassemble any portion of the Services
• Remove or modify any copyright, trademark, or other proprietary notices
• Use the Services to develop competing products or services
• Resell, sublicense, or otherwise commercialize the Services without our written consent
• Use automated means (bots, scrapers) to access the Services without authorization
• Engage in any activity that could harm CortexHub's reputation or business

We reserve the right to suspend or terminate your access to the Services if we determine, in our sole discretion, that you have violated this Acceptable Use Policy.

6.1 Pricing Plans

Pricing is customized for your organization. Contact us via the pricing page at cortexhub.ai/pricing or an Order Form for current fees, features, and limits. Commercial terms in an Order Form take precedence over marketing materials and are subject to change in accordance with Section 6.3.

6.2 Payment Terms

For paid plans:

• Flat monthly fees are due in advance; usage-based charges are billed in arrears at the end of each billing period
• All fees are in US Dollars (USD) unless otherwise stated in an Order Form
• Fees are non-refundable except as required by applicable law
• You authorise us to charge your payment method on file for all amounts due
• If payment fails, we may suspend your access until outstanding amounts are settled
• Disputed charges must be raised within 30 days of the invoice date

6.3 Right to Revise Pricing

We reserve the right to change our pricing at any time. For existing paid subscribers, we will provide at least 30 days' written notice before any price increase takes effect. Continued use of the Services after the notice period constitutes your acceptance of the revised pricing. We may change plan limits or features at any time without notice.

6.4 Taxes

All fees are exclusive of applicable taxes (VAT, sales tax, withholding tax, etc.). You are responsible for all taxes arising from your use of the Services. Where we are required by law to collect taxes, they will be itemised on your invoice.

7.1 Your Data

You retain all ownership rights to your Customer Data. By using the Services, you grant us a limited license to:

• Process Customer Data to provide and improve the Services
• Generate aggregated, anonymized analytics
• Use metadata for security, compliance, and operational purposes

This license terminates when you delete your data or close your account, except where retention is required by law.

7.2 Data Stored by the Gateway

CortexHub manages every tool call through the gateway and stores the following in the audit log:

• The full tool call request (arguments sent to the external API) and response (result returned), subject to guardrail-defined redactions
• The policy decision (permit, deny, require approval, modify, or step-up) and the policy that triggered it
• Agent identity, end-user identity, timestamps, and call duration
• Approval ID and outcome where an approval was required

You may configure guardrails in the dashboard to redact specific fields in tool call requests and responses before they are written to the audit log. Fields matching a guardrail rule are replaced with a redaction marker and the original value is never stored. OAuth credentials and API keys are stored in a secure vault and are never written to audit logs or any export.

7.3 AI Features, Model Providers, and Sub-processors

Where you use AI features (co-workers, chat, meetings, and voice), CortexHub processes your prompts, retrieved context, model responses, and, for meeting and voice features, meeting audio and transcripts, and sends the necessary content to third-party AI providers to generate results. We engage those providers, and other providers such as hosting, email, and payments, as sub-processors under contracts requiring appropriate security and confidentiality. Our current sub-processors, the data each processes, and how AI providers handle your content are described in our Privacy Policy. We do not use your Customer Data to train generalized or standalone AI models, and we do not sell it.

7.4 Our Data

We retain ownership of all intellectual property in the Services, including:

• SDK code, dashboard, and platform infrastructure
• Policy recommendation algorithms and detection models
• Documentation, tutorials, and training materials
• Aggregated, anonymized usage data and analytics

The Services, including all software, text, graphics, logos, and other content, are owned by CortexHub or our licensors and are protected by copyright, trademark, and other intellectual property laws.

Subject to your compliance with these Terms, we grant you a limited, non-exclusive, non-transferable, revocable license to:

• Use the SDK in your applications
• Access and use the dashboard
• Use our documentation for your internal purposes

You may not:

• Copy, modify, distribute, or create derivative works of the Services
• Use our trademarks or branding without written permission
• Remove or alter any proprietary notices

"Confidential Information" means any non-public information disclosed by one party to the other, including but not limited to:

• Business plans, strategies, and financial information
• Technical information, trade secrets, and know-how
• Customer lists and business relationships
• Source code, algorithms, and system designs

Both parties agree to:

• Maintain confidentiality of the other party's Confidential Information
• Use Confidential Information only for purposes of performing under this Agreement
• Limit access to employees and contractors with a legitimate need to know
• Return or destroy Confidential Information upon termination

This obligation does not apply to information that is: (a) publicly available, (b) independently developed, (c) rightfully received from a third party, or (d) required to be disclosed by law.

10.1 Mutual Warranties

Each party warrants that:

• It has the legal authority to enter into this Agreement
• Its performance will comply with applicable laws
• It will not violate any third-party intellectual property rights

10.2 Service Disclaimer

You acknowledge that AI agent governance is complex and no system can guarantee 100% prevention of all security incidents. CortexHub is a risk reduction tool, not a comprehensive security solution.

11.2 Liability Cap

CortexHub's total aggregate liability arising out of or related to this Agreement shall not exceed the greater of:

• The amounts paid by you to CortexHub in the twelve (12) months preceding the event giving rise to liability, or
• US $100 (one hundred US Dollars)

11.3 Exceptions

The limitations in this section do not apply to:

• Your breach of Section 8 (Intellectual Property Rights)
• Your violation of applicable law
• Your indemnification obligations under Section 12
• Liability that cannot be excluded or limited under applicable law

You agree to indemnify, defend, and hold harmless CortexHub and its affiliates, directors, officers, employees, and agents from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from or related to:

• Your use or misuse of the Services
• Your violation of these Terms
• Your violation of any applicable laws or regulations
• Your violation of any third-party rights, including intellectual property rights
• Your Customer Data or your AI agents' actions
• Any security incident or data breach in your environment

We reserve the right to assume the exclusive defense and control of any matter subject to indemnification, in which case you agree to cooperate with our defense.

13.1 Term

This Agreement begins on the date you first access the Services and continues until terminated as described below.

13.2 Termination by You

You may terminate this Agreement at any time by:

• Closing your account through the dashboard
• Emailing us at hello@cortexhub.ai
• Ceasing all use of the Services

13.3 Termination by Us

We may suspend or terminate your access to the Services:

• Immediately, if you violate these Terms
• With 30 days' notice, for convenience
• Immediately, if required by law or legal process
• Immediately, if your account poses a security risk

13.4 Effects of Termination

Upon termination:

• Your right to access and use the Services immediately ceases
• You must stop using the SDK and remove it from your applications
• We will delete your Customer Data within 30 days (unless retention is required by law)
• You remain liable for any fees incurred prior to termination
• Sections 7-19 of these Terms survive termination

13.5 Data Export

You may export your data from the dashboard at any time before termination. After termination, we are not obligated to provide access to your data.

The Services are subject to export control and sanctions laws. You represent and warrant that:

• You are not located in, or a national of, any country subject to applicable international sanctions
• You are not on any government list of prohibited or restricted parties
• You will not use the Services in violation of export control laws
• You will not provide access to the Services to any sanctioned person or entity

15.1 Governing Law

These Terms shall be governed by and construed in accordance with the laws of Ireland, excluding its conflict of law principles, except where mandatory consumer protection laws in your country of residence apply.

15.2 Dispute Resolution

Any dispute arising from or relating to these Terms or the Services shall be resolved as follows:

• Informal Resolution: The parties will first attempt to resolve the dispute through good-faith negotiation for at least 30 days.
• Jurisdiction: If negotiation fails, the parties submit to the exclusive jurisdiction of the courts of Ireland, except that either party may seek injunctive or equitable relief in any court of competent jurisdiction to protect its intellectual property or Confidential Information.

15.3 Class Action Waiver

To the extent permitted by law, you agree that disputes will be resolved on an individual basis. You waive any right to bring or participate in any class action, collective action, or representative proceeding.

Neither party shall be liable for any failure or delay in performance due to events beyond their reasonable control, including but not limited to:

• Acts of God, natural disasters, epidemics, or pandemics
• War, terrorism, civil unrest, or government actions
• Internet or telecommunications failures
• Power outages or infrastructure failures
• Cyberattacks or security incidents affecting third-party services

If a force majeure event continues for more than 30 days, either party may terminate this Agreement upon written notice.

We reserve the right to modify these Terms at any time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify you via email or through the dashboard
• Provide at least 30 days' notice before changes take effect (except for legal or security reasons)

Your continued use of the Services after the effective date constitutes acceptance of the modified Terms. If you do not agree to the changes, you must stop using the Services.

18.1 Entire Agreement

These Terms, together with our Privacy Policy and any applicable Order Form, Data Processing Agreement, or Service Level Agreement, constitute the entire agreement between you and CortexHub and supersede all prior agreements and understandings.

18.2 Assignment

You may not assign or transfer these Terms or any rights granted hereunder without our prior written consent. We may assign these Terms in connection with a merger, acquisition, or sale of assets.

18.3 Waiver

Our failure to enforce any provision of these Terms shall not be deemed a waiver of future enforcement of that or any other provision.

18.4 Severability

If any provision of these Terms is found to be invalid or unenforceable, the remaining provisions shall remain in full force and effect. The invalid provision shall be modified to the minimum extent necessary to make it enforceable.

18.5 No Third-Party Beneficiaries

These Terms are for the benefit of you and CortexHub only. No third party shall have any rights under these Terms.

18.6 Notice

Notices to CortexHub should be sent to hello@cortexhub.ai. Notices to you will be sent to the email address associated with your account.

18.7 Language

These Terms are drafted in English. Any translation is provided for convenience only. In case of conflict, the English version prevails.

If you have any questions, concerns, or complaints about these Terms, please contact us: