Terms of Service

What Datafense does

Datafense is middleware between AI agents and your personal data. You connect your accounts (like Gmail), register AI agents, and set permission rules. When an agent requests your data, Datafense checks your rules, retrieves only what's allowed, filters it, and returns it. The agent never gets your passwords or credentials.

Your account

• You sign up through Clerk using your email address.
• You must be at least 13 years old.
• You're responsible for keeping your account secure.
• You can delete your account and all data at any time.

Connected accounts

When you connect Gmail, you authorize Datafense to access it on your behalf via Google OAuth. We store an encrypted token, not your password. You can disconnect at any time from your dashboard, which immediately revokes access and deletes the stored token.

AI agents

• You choose which agents to register and what permissions to give them.
• Datafense enforces your permission rules, but we don't control what third-party agents do with the data they receive.
• Only grant agents the minimum access they need.

API keys

Each agent gets an API key. Keep it secret. You're responsible for anything done with your key. If you think a key is compromised, rotate it immediately from your dashboard.

Don't do these things

• Don't try to circumvent permission rules or content filters.
• Don't use the service for anything illegal.
• Don't try to access other users' data.
• Don't abuse the API (we have rate limits).

We can suspend or terminate your account if you violate these terms.

The service is provided "as is"

We do our best to keep Datafense reliable and secure, but we can't guarantee it will be perfect or uninterrupted. The service is provided "as is" and "as available" without warranties of any kind, whether express or implied, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement.

Security & compliance status

Datafense is an early-stage product. We take security seriously and have designed the architecture around least-privilege access, default-deny permissions, and a separation between credentials (held in an encrypted vault) and our application logic. We use AES encryption at rest and TLS in transit. So you can make an informed decision, here is what we currently do not have:

• Google OAuth verification (in progress). We are working through Google's OAuth verification process for the scopes we use (Gmail and Calendar). Until that completes, you may see Google's "unverified app" warning when first connecting your account. This warning is part of Google's standard process and does not by itself indicate a security issue.
• Third-party penetration test (not yet completed). We plan to commission one before exiting beta.
• SOC 2 Type II (not yet certified). We have not begun formal SOC 2 compliance work. Datafense should not currently be used by organizations that require SOC 2-compliant vendors.
• Cyber liability insurance (not yet carried). We plan to obtain it before exiting beta.

No system is breach-proof. We follow the practices described on our public security page and continuously improve our posture, but we make no warranty that the service or its underlying infrastructure will not be compromised. Your use of Datafense involves accepting this risk in addition to the limitations described in the "limitation of liability" section below. If you require a fully audited, certified vendor for sensitive workloads (legal, medical, financial-services regulated data, etc.), Datafense is not currently the right fit.

Reporting a security issue: if you find a vulnerability, please email vaultagent.dev@gmail.com with details. We respond within 72 hours and will not pursue legal action against good-faith security researchers who follow responsible-disclosure practices.

Limitation of liability

To the maximum extent permitted by law, Datafense and its operators shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of data, profits, or revenue, arising out of or related to your use of the service — even if we've been advised of the possibility. Our total liability for any claim related to the service is limited to the amount you paid us in the 12 months before the claim, or $50, whichever is greater.

Indemnification

You agree to indemnify and hold Datafense harmless from any claims, damages, or expenses (including reasonable attorney's fees) arising from your use of the service, your violation of these terms, or your violation of any third party's rights.

Governing law

These terms are governed by the laws of the State of California, United States, without regard to conflict of law principles. Any disputes will be resolved in the courts located in California.

Ending your account

You can delete your account anytime. When you do, we delete your data — credentials, agents, permissions, everything. Email vaultagent.dev@gmail.com to request account deletion.

We can also terminate your account if you violate these terms.

Changes

We may update these terms. If we make significant changes, we'll notify you by email. The date at the top tells you when they were last updated.

Contact

Questions? Email vaultagent.dev@gmail.com