Terms Of Service

Acceptance and Eligibility

The Alt+Shift+X platform is a business-to-business (B2B) service. To use the platform, you must be at least 18 years of age, acting on behalf of a registered organisation, and authorised to enter into binding agreements on that organisation's behalf.

Accounts are provisioned at the organisation level. Individual users operate under the access roles assigned by their Organisation Owner or Administrator. By accepting these terms, you bind both yourself and your organisation to all provisions herein.

Platform Roles and Responsibilities

The platform serves two primary participant types, each with distinct rights and obligations.

Role	Definition	Key Obligations
Buyer	An organisation that installs and uses components from the marketplace to process documents.	Comply with component licensing terms; do not reverse-engineer components; manage API keys securely.
Builder	An individual or organisation that develops and publishes components to the marketplace.	Adhere to the X-Protocol; obtain marketplace approval before publishing; not exfiltrate user documents.
Organisation Owner	The designated administrator with full control over an organisation's account.	Manage team access and roles; responsible for all activity under the organisation's account.
Administrator	A user granted elevated permissions within an organisation by the Owner.	Manage API keys, subscriptions, and team members within granted scope.

Builder Constraints and the X-Protocol

Marketplace Law 3 — Document Sovereignty: Builders are contractually and technically prohibited from creating, modifying, or distributing components that transmit, store, log, or otherwise process user documents outside the runtime Knowledge State. Violation of this law results in immediate component removal and permanent account suspension.

All components published to the Alt+Shift+X marketplace must conform to the X-Protocol, which enforces the following standards at the technical level.

X-Protocol Requirement	Description
No external transmission	Components may not make outbound network requests carrying document content.
No persistent writes	Components may not write document data to any storage medium, database, or file system.
Ephemeral Knowledge State only	Document content may only exist within the in-memory runtime context provided by the platform.
Schema-bound output	Components must return only the structured fields declared in their published output schema.
No secondary analytics	Components may not capture, sample, or analyse document content for training, profiling, or any secondary purpose.

Builders who submit components for review certify that their component fully complies with the X-Protocol. The platform reserves the right to conduct technical audits at any time. Failed audits result in immediate suspension pending resolution.

Privacy-Specific Clauses

The following protections apply specifically to the privacy of users and their data within the marketplace context.

Feature	Privacy Protection
Builder Constraints	Builders are contractually prohibited from creating components that transmit user data externally. All components must adhere to the X-Protocol.
Audit Transparency	Enterprise subscribers have access to detailed Audit Logs covering two-factor authentication changes, API key creation and revocation, data access events, and administrative actions.
Right to Deletion	Organisation Owners may delete their entire organisation. All personally identifiable information is purged within 30 days of a confirmed deletion request.
Trust Score Integrity	Trust Scores are computed solely from aggregated usage metrics. Document content is never used as an input to any scoring or ranking system.
API Key Security	API keys are hashed at rest and are never displayed in full after initial creation. Keys are subject to a 90-day rotation policy for Enterprise accounts.

Data Retention Schedule

The following retention periods govern how long different categories of data are held on the platform.

Data Category	Retention Period	Notes
Audit Logs	12 months (Starter), 24 months (Pro and Enterprise)	Accessible via the Audit Log dashboard for Enterprise accounts.
Support Tickets	24 months after ticket closure	Retained to support quality assurance and dispute resolution.
Transaction Records	7 years	Retained for tax and financial compliance under applicable law.
API Usage Metrics	12–24 months by subscription tier	Aggregated only; no document content is included.
Device Metadata	90 days rolling	Used solely for security monitoring; automatically purged.
Document Knowledge State	Session duration only	Destroyed immediately upon session termination. No recovery is possible.

Subscription, Payment, and Cancellation

Access to the platform's API endpoints is governed by a subscription plan. Plans are billed monthly in advance. You may upgrade, downgrade, or cancel your subscription at any time from the Subscription Dashboard.

—Cancellation takes effect at the end of the current billing period. No partial-period refunds are issued.
—All payment processing is handled by Stripe. Alt+Shift+X does not store card details.
—Builder revenue payouts are processed monthly, subject to a minimum payout threshold and verification of a connected Stripe account or PayPal payout email.
—Tax compliance: U.S. builders must complete an IRS Form W-9 before any payout is released. Payouts are withheld until a valid W-9 is on file. Builders paid $600 or more in a calendar year will have a 1099-NEC prepared and filed in accordance with applicable law.
—Enterprise pricing is negotiated directly and governed by a separate Order Form.

Limitation of Liability

The platform is provided on an "as is" and "as available" basis. To the maximum extent permitted by applicable law, Alt+Shift+X disclaims all warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, and non-infringement.

In no event shall Alt+Shift+X's aggregate liability to any party exceed the total fees paid by that party in the twelve months preceding the event giving rise to the claim. This limitation applies regardless of the form of action, whether in contract, tort, or otherwise.

Governing Law and Dispute Resolution

These Terms are governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict-of-law principles.

Any dispute arising out of or relating to these Terms or your use of the platform shall first be submitted to binding arbitration administered by the American Arbitration Association, except where prohibited by applicable law. Class action waiver: you agree to bring disputes only in your individual capacity and not as a plaintiff or class member in any purported class or representative proceeding.

Sanctions & Export Controls — ToS Section

Export Controls & Sanctions Compliance

Access to and purchase of any component, subscription, or service on the Alt+Shift+X platform is strictly prohibited for:

(a) Any individual, entity, or organization located in, ordinarily resident in, or organized under the laws of any country or territory subject to comprehensive sanctions maintained by the United States (OFAC), the European Union, the United Kingdom (OFSI), the United Nations Security Council, Canada, Australia, or any other NATO-member state sanctions authority — including but not limited to Russia, Belarus, North Korea, Iran, Syria, Cuba, and the Crimea, Donetsk, and Luhansk regions of Ukraine;

(b) Any individual or entity appearing on the U.S. Treasury Specially Designated Nationals (SDN) List, the EU Consolidated Sanctions List, the UK Financial Sanctions List, or any equivalent list maintained by a NATO-aligned sanctions authority;

(c) Any entity owned 50% or more, directly or indirectly, by a sanctioned party.

By creating an account, completing a purchase, or accessing any paid feature of this platform, you represent and warrant that neither you nor any organization you represent is a sanctioned party as defined above. False representation voids any associated transaction and may be reported to relevant authorities.

Alt+Shift+X reserves the right to refuse, suspend, or terminate access to any account for which there is reasonable suspicion of sanctions evasion. All payment transactions are processed through Stripe, a regulated financial institution that independently screens transactions against current OFAC and EU sanctions lists at the point of payment.