Terms of Service

What these terms cover

These terms govern your use of this website and of any access to the AI Access Gateway (“AAG”) service that we grant you before a signed agreement is in place. By using either, you agree to them. If you do not agree, do not use them.

A signed agreement prevails

Who may use AAG

AAG is a business product. To use the service you must be at least 18, must be acting for an organization, and must have authority to bind that organization to these terms. If you are subject to sanctions or export restrictions that would prohibit it, you may not use AAG.

Access and accounts

There is no self-service registration. Access is provisioned during onboarding, and the people who hold it are named by your organization. You are responsible for who your organization grants access to and for telling us when someone should no longer have it.

You authenticate through your own identity provider. Keeping that account secure — including its second factor — is your responsibility, and we act on requests that come from a validly authenticated session.

Your responsibilities

• Authority to connect. You may connect an external account only if you are authorized to grant access to it. If you are managing systems for someone else, that authorization has to be real.
• Credentials you supply. Supply them only through the path AAG provides. Credential material is submitted through one dedicated path that accepts nothing else, and the service that receives it holds an identity which can add a version and cannot read one back — so it is not displayed again after it is entered, and the component that placed it cannot retrieve it. Where AAG needs a credential from a particular person, it records who is being asked, against the requirement being satisfied; AAG sends nothing — no mailer exists in the product — so a message that says it is an AAG invitation did not come from AAG. The material itself always returns through the same dedicated path, and never through an email thread, a chat, a ticket or a screenshot.
• Least privilege. Grant AAG the narrowest access at the provider that does the job. AAG operates within the credential you gave it, and no narrower.
• Lawful use. You are responsible for the lawfulness of what you connect AAG to and what you instruct it to do, including any privacy obligations you owe to the people whose data those systems hold.

Acceptable use

You agree not to:

• use AAG to reach a system you are not authorized to reach, or to help anyone else do so;
• attempt to obtain credential material held by AAG, or to reach another customer’s boundary;
• interfere with, overload or degrade the service, or probe it for vulnerabilities outside a good-faith security report;
• reverse engineer the service except to the extent the law permits regardless of contract;
• remove, alter or falsify audit records, or attempt to;
• use AAG to violate the terms of a system it connects to, or to break any applicable law.

Good-faith security research is welcome and is covered by the reporting route on the security page, not by this clause.

The systems AAG connects to

AAG reaches external systems on your instruction, using credentials you supply. Your relationship with those providers is yours: their terms apply to you, their fees are yours, and their decisions are theirs.

A provider’s own authority is a ceiling AAG works below. AAG has no way to grant access a provider has refused, no way to override a provider’s own controls, and no defence against a provider that is itself compromised — and it does not claim otherwise. The achievable goal is that a provider’s problem does not become an isolation or a custody problem.

If a provider changes, deprecates or withdraws an interface, the capability that depended on it changes with it.

Fees

Fees, capacity, term, invoicing and renewal are set in your written order and agreement. No price is stated on this website, and nothing here entitles you to a particular price. Use of this website is free.

Your data

Your organization owns its data. AAG handles it to provide the service and as described in the privacy policy. AAG’s request path is not a store of customer business data: a Gateway does not cache what a provider returns, transform it for later or replay it. An audit record describes that a request happened and how it was decided rather than what it returned — with one exception on the failure path, where the provider’s own error sentence is copied into the record verbatim so that a denial can be explained, and a provider that puts data into an error message therefore puts it into the record. One tool is a deliberate exception and it is not the Gateway. The discovery tool, run against an advertising account during onboarding, writes what it reads to files on the machine that runs it — account names, spend over the last 30 and 90 days, and the email addresses and roles of the people who hold access — so that a run stopped by a provider quota can resume instead of starting again. It leaves three files, and its redaction setting masks addresses in the one it renders for reading and in neither of the other two. Separately and durably, AAG stores the identifiers and display names a provider gives for the accounts a Gateway is configured against, because that is the configuration itself.

AAG does not use customer data, or data obtained through Google APIs, to develop, improve or train machine-learning models, and does not sell it. No code enforces this one. There is no such pipeline in the product and no machine-learning or analytics package anywhere in its dependencies, but that is an absence rather than a control: this promise stands on the contract, and nothing in the software would break if it stopped being kept.

Audit records are append-only. A correction is a new event; records are not edited or deleted to change what they say. The evidence store enforces that rather than promising it: a write refuses to overwrite an object that already exists, the identity that writes holds create-and-read and no delete, and the retention policy on this estate has been locked, which puts shortening it beyond an operator and beyond Google. That lock runs for 400 days rather than forever.

Confidentiality

Each side will protect the other’s non-public information with at least the care it uses for its own, and will use it only to perform under these terms. This does not cover information that is public through no fault of the receiver, was already known, is independently developed, or must be disclosed by law — and in that last case the receiver will give notice where it lawfully can.

Intellectual property

AAG and everything in it — the software, the interfaces, the documentation, the marks — remain ours. You get the right to use the service during your access, and nothing more. Your data remains yours, and we claim no ownership of it.

If you send us feedback, we may use it without obligation to you. We will not identify you as its source without your permission.

Availability

We may change, suspend or withdraw parts of the service. Where a change would materially reduce a capability an active customer depends on, we will give notice.

Disclaimer

Except where a signed agreement says otherwise, the website and any pre-agreement access to AAG are provided “as is”, without any warranty, express or implied, including implied warranties of merchantability, fitness for a particular purpose and non-infringement. We do not warrant that the service will be uninterrupted or error-free.

AAG holds no security certification, no independent audit report and no penetration-test result, and nothing on this site should be read as one. No code enforces that and none could — it is a fact about the world, and the way to test it is to ask for the report and be told there is none. Statements on this site about how AAG is built describe required product behaviour and are not warranties.

Limitation of liability

To the fullest extent the law allows, neither side is liable to the other for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue or data, arising out of these terms.

For use of this website and any access granted before a signed agreement, our total liability is limited to one hundred United States dollars. Where a signed agreement is in place, that agreement’s limitation applies instead. Nothing here limits liability that the law does not allow to be limited.

Indemnity

You will defend and indemnify us against claims arising from your use of AAG in breach of these terms, from data or credentials you supplied without authority, or from your violation of a third party’s rights or of the law.

Term and termination

These terms apply while you use the website or hold pre-agreement access. Either side may end that access at any time, for any reason. We may suspend access immediately where we reasonably believe it is being used to reach a system without authorization, to reach another customer’s boundary, or in a way that endangers the service — and we will tell you why.

On termination we do not promise to erase credential material, because today there is no mechanism to. Revocation makes a credential unusable rather than destroying it. It is something an AAG operator runs, not something you can trigger yourself: a command run from a checkout by a named person sets the Credential Binding to revoked and removes the Connector Executor’s read grant. That removal is checked rather than assumed — the secret’s access policy is read back afterwards, and if any reader remains, or the policy cannot be read at all, the command says so instead of reporting success. What it does not do is revoke anything at your provider: there is no implementation of that on this estate, in any form. The stored secret and its earlier versions are retained throughout, and destruction on offboarding is specified and is not built. Treat credential material you have given AAG as retained until you also revoke it at the provider, which is the only step that ends the provider’s trust in it.

The confidentiality, intellectual property, disclaimer, liability and governing-law clauses survive termination.

Changes to these terms

We may update these terms. The effective date at the top changes when we do, and continuing to use the website or the service after that date means you accept the update. Where a change is material and you hold active access, we will tell you directly.

Governing law

These terms are governed by the laws of the State of Colorado, United States, without regard to its conflict-of-laws rules. The state and federal courts serving Douglas County, Colorado have exclusive jurisdiction, and both sides consent to it. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

General

• Entire agreement. These terms, together with the privacy policy, are the whole agreement about the website and pre-agreement access, and replace anything said before about that subject.
• No waiver. Not enforcing something once does not give it up.
• Severability. If a clause is unenforceable, the rest stands.
• Assignment. You may not assign these terms without our written consent. We may assign them to a successor in a merger or sale of the business.
• Notices. Notices to us go to jose@aiaccessgateway.com. Notices to you go to the address on your account or the one you contacted us from.
• Force majeure. Neither side is liable for a delay caused by something genuinely outside its reasonable control.
• Independent parties. These terms create no partnership, agency or employment relationship.

Contact

Questions about these terms: jose@aiaccessgateway.com. We are in Parker, Colorado, United States.