These terms are between Oshyn Inc (“Oshyn”), the operator of ContextCloud, and the individual joining an organization as a Member (“you”). They apply when presented to you and expressly accepted together with the applicable personal-space addendum. Guest access requires appropriately scoped guest terms presented for separate acceptance; these Member terms and personal-space addenda do not apply merely because someone accesses a shared link. Merely receiving or opening a shared link does not establish your acceptance or authorize you to bind an organization.
Your organization's agreement with Oshyn governs its subscription. Your organization's workplace and access policies also apply to your use to the extent lawful. Neither agreement nor policy, by itself, waives your individual rights. A separately agreed variation affecting these terms must be identified to you and is subject to the acceptance requirements in section 7.
1. An organizational service
ContextCloud is an organizational working system. Your organization controls membership, roles, permitted sharing, and whether personal spaces are available. Content within its organization, including content in a personal space, is administered under those controls and the applicable personal-space addendum. Access remains subject to the permissions granted for the relevant content.
Storage in ContextCloud does not by itself transfer intellectual-property rights, ownership of an outside account, or rights belonging to you or another person. Organizational custody and access rights are distinct from legal ownership. You must have authority to submit material and authorize the processing and actions you request.
2. Privacy and individual rights
A personal space is part of your organization's system; its name alone does not establish a separate personal account or a promise of confidentiality from your organization. The applicable addendum explains its inspection rules. Those rules do not authorize unlawful monitoring or waive rights under privacy, employment, data-protection, or other applicable law.
Your organization is responsible for the purposes and lawfulness of its use of personal data, its inspection decisions, and required notices to its users. Oshyn remains responsible for its own processing and contractual obligations. Your organization's control of the system does not give either party unrestricted permission to collect, use, disclose, or retain personal information.
You may direct a request concerning access, correction, deletion, or other individual rights to your organization's administrators or to privacy@contextcloud.works. Oshyn will handle or assist with the request according to its role and applicable obligations. The availability and scope of a right, including any lawful exception, are determined by applicable law; accepting these terms does not waive it. The privacy notice describes Oshyn's handling of website and account information.
3. Credentials and connected accounts
You may connect an outside account or supply a sign-in, API key, or other credential only if you have authority to do so and to authorize the intended operations. The credential vault is administered within your organization. Supplying a credential does not transfer the outside account or expand the permissions granted by its owner or provider.
Oshyn encrypts stored credential secret values and restricts their processing to authorized service functions, support and security needs, and legal obligations. Ordinary credential views mask secret values; identifiers such as usernames may remain visible. ContextCloud may decrypt credentials for authorized operations and include encrypted credential records in backups and authorized organization exports. These protections do not mean the system is technically incapable of accessing a secret. Personnel access remains subject to applicable confidentiality, access, and personal-space restrictions.
Personal credentials remain subject to your authorization and the service's access controls. ContextCloud suspends further use of your personal saved sign-ins when your account is deactivated and ends or blocks reuse of browser sessions it manages and associates with those sign-ins. Deactivation is not a promise that an action already initiated will be stopped or reversed. It does not itself revoke the credential at the outside provider or terminate sessions outside ContextCloud's control. Use the outside provider's controls when those additional steps are needed.
A credential validly transferred to organizational control may be used for authorized organizational purposes independently of your continued membership, subject to the outside account holder's and provider's permissions. That transfer concerns custody and authorized use; it does not transfer rights you lack or make a personal outside account the organization's property.
4. Automated actions and your instructions
An agent or automated workflow using your credentials can act through your connected account. Those actions may send information or messages, incur charges, or create, modify, or delete records outside ContextCloud. The outside service may attribute them to your account. Actions may be irreversible, and stopping a run does not necessarily stop or reverse an action already initiated.
AI agents may misunderstand or fail to follow instructions, select an unintended tool or recipient, or repeat an action even when your instructions are clear. An instruction in a prompt, including a spending amount, is not by itself an enforced limit. Controls reduce risk within their documented scope; a budget for AI usage does not limit purchases or other charges in an outside account unless the applicable control expressly covers them.
You are responsible for the instructions and permissions you authorize and for using the available scope, review, and approval settings appropriately. Do not assume that every external action will require a separate confirmation. Assess the consequences before enabling a workflow, especially one that can spend money, disclose information, or change another system. The acceptable use policy applies to your use.
You accept the ordinary risks of the workflows you choose to enable, including unintended results, the effects of instructions you approve, and third-party behavior outside Oshyn's control. That allocation does not make an unauthorized action authorized, excuse Oshyn's own breach, or waive a right that law does not permit you to waive. In particular, it does not release Oshyn from an express obligation to honor an agreed access or approval control. These terms do not make you personally responsible for your organization's subscription charges merely because you use the service.
5. AI output
AI-generated output may be inaccurate, incomplete, non-unique, or unsuitable for your intended use. Oshyn does not undertake human review of each output. Review it before relying on it, publishing it, or allowing it to trigger an external action, with oversight appropriate to the consequences. Output is not a substitute for qualified professional judgment where that is needed. These cautions do not displace Oshyn's express obligations.
6. Account security and departure
Keep your sign-in secure, enable multi-factor authentication where your organization allows or requires it, and promptly report suspected unauthorized access. Your organization's administrators may suspend or remove your access within their authority, subject to applicable law and agreements.
Removal does not itself delete the organization's content or give you access beyond your permissions. Retention, export, and deletion follow the organization's agreement with Oshyn and applicable law. Any applicable personal-space inspection restrictions continue after your departure as stated in the addendum. Your individual statutory rights remain available even when you can no longer sign in.
7. Acceptance and changes to these terms
Before first using the Service as a Member, you must expressly accept these terms and the personal-space addendum identified for you. Oshyn records the accepted documents, their versions and text hashes, and the time of acceptance. The organization's acceptance of its subscription agreement does not replace your acceptance.
A material change to these terms, or a change to your selected personal-space addendum, is presented for express acceptance at sign-in. For a change that does not reduce your personal-space protections, you may keep working for up to 7 days after acceptance of the change first becomes pending. The prompt identifies the deadline and appears on each sign-in until you accept. Signing in again does not restart the period. Continued product use after that deadline requires acceptance; continued use during the period is not itself acceptance.
A change reducing your personal-space protections blocks further product use immediately until you expressly accept the change. Blocking use does not put the reduced protections into effect. Existing content keeps its previously applicable protections unless you expressly accept the change as applying to that content, after being told what will change. An administrator's selection, your silence, expiration of a deadline, or deactivation or removal of your account is not acceptance.
Your organization may restrict future use or discontinue personal spaces, but may not use those steps, or moving retained content elsewhere, to bypass the protections still applicable to existing content. Those protections continue for as long as the content is retained; they do not extend its retention period or prevent a deletion required by law or the applicable agreement. Blocking product use does not prevent you from reviewing the proposed terms, requesting inspection records under your addendum, or exercising individual rights through the contact in section 2. No update removes a protection that applicable law makes mandatory.
8. Personal-space addenda
Your organization selects one of the three addenda below. Its selection must be identified to you when you accept these terms and the applicable addendum. The account portal identifies the selected addendum. The organization must honor the applicable restrictions, and Oshyn must honor the controls it expressly undertakes to provide. The addenda do not enlarge anyone's authority over credentials beyond section 3.
9. Responsibility and limits on liability
9.1 Express obligations remain. Oshyn remains responsible for the obligations it expressly undertakes in these terms. Except for those obligations and rights that cannot lawfully be excluded, the Service and AI output are provided on an “as is” and “as available” basis. Oshyn does not promise error-free output or actions, uninterrupted availability, or suitability for a purpose it has not expressly agreed to support.
9.2 Excluded losses. Subject to section 9.4, Oshyn is not liable to you under or in connection with these terms for indirect, consequential, special, or punitive damages, or lost profits or revenue, even if informed that such losses are possible.
9.3 Individual financial limit. Subject to section 9.4, Oshyn's total monetary liability to you under or in connection with these terms is limited to US $1,000 in the aggregate. This is one limit for all your claims, regardless of the number of events, organizations through which you use the Service, versions of these terms, or legal theories, including contract and negligence. It is not calculated from fees paid by you or your organization. This limit survives termination of your access.
9.4 Exceptions. Sections 9.2 and 9.3 do not limit Oshyn's liability for fraud or willful misconduct; breach of its express confidentiality obligations; breach of its security or personal-space access obligations resulting in unauthorized access to, use, disclosure, alteration, destruction, or loss of protected information; or any liability or remedy that applicable law does not permit the parties to exclude or limit. They do not restrict a right to request access, correction or deletion, complain to a regulator, or seek available injunctive or other nonmonetary relief.
9.5 Agent and control failures. Subject to section 9.4, sections 9.2 and 9.3 apply to ordinary agent errors and failures of guardrails, approvals, budgets, or spending controls, including a failure to exercise reasonable care. A control failure is not, by itself, a security or confidentiality breach merely because the control was intended to prevent an unintended action. An actual breach within section 9.4 remains within that exception even if an agent or automation contributed to it. Nothing here promises reimbursement of every external charge or converts an unauthorized action into one you authorized.
9.6 Your position as a Member. Merely being a Member does not make you a guarantor of your organization's obligations. If you are not also the Customer under a separate subscription agreement, you owe Oshyn no contractual damages or indemnity for an ordinary breach of these terms. This does not excuse your own fraud or willful misconduct, prevent lawful access restrictions or nonmonetary relief, or remove liability that applicable law does not permit you to exclude. Any obligations you separately undertake as a Customer are governed by that agreement.
9.7 Separate agreements and losses. This section governs claims between you and Oshyn under these terms. It does not change the organization's separate agreement, import that agreement's financial limit, or let the organization recover its own losses as your personal claim. No person may recover twice for the same loss, but compensation for a distinct loss or a remedy required by law is not excluded merely because the organization also has a claim.
10. Governing law and contact
These terms are governed by the laws of the State of Delaware, subject to rights and protections that applicable law does not permit the parties to exclude or waive. Questions and rights requests may be sent to Oshyn Inc at privacy@contextcloud.works.