Terms of service for the InOrbit platform

The platform is provided by InOrbit d.o.o., seat at Benčani 15A, Saršoni, 51216 Viškovo, Croatia, OIB 38846238650, entered in the court register of the Commercial Court in Rijeka under MBS 081116183, represented by Nevio Vesić. E-mail: reach@inorbit.hr. In these terms we means InOrbit d.o.o., and you means the person or the organisation that uses the platform.

The platform is everything behind api.inorbit.hr and the consoles at inorbit.hr: the API, the console and its products, the documentation, the iohr command line, the SDKs, the agent you run in your own network, the MCP server and the Trails browser extension, with the plans that pay for them. By creating an account or using the API you accept these terms.

A written agreement we sign with you, such as an Enterprise agreement, a pilot contract or a data processing agreement, once we have one, takes precedence over these terms where the two differ.

The platform is in early access. There is no service level agreement and no promised availability. Products change, gain and lose features, and some are open only to some accounts. We record what is built, and what is not yet, in the status logs of the published RFCs.

A value the platform shows that is a placeholder is labelled a stub (for example stub: true, or a model version starting with stub-). A stub is never a measurement; do not treat it as one.

Keep your own copy of anything you cannot afford to lose. The export in the console gives you your data at any time. Until a paid plan starts, do not put anything confidential, or personal data of other people, into the platform.

You sign in with a Google or GitHub account. You must be at least 16 to have an account, and of full legal age to buy a paid plan. If you accept these terms for an organisation, you confirm that you may bind it, and the organisation is bound.

Keep your sign-in and your API keys secret. What is done with your keys is your responsibility until you revoke them, which the console does at once. If you think a key has leaked, revoke it and tell us at reach@inorbit.hr.

In a team, the owner decides who is a member and what each member may do. The owner is responsible for the members' use of the team's plan.

You are a consumer if you are a natural person using the platform for purposes outside your trade, business or profession. The Personal plan is made for one person and can be bought by a consumer. Team and Enterprise are for organisations and are bought as a business.

The sections on withdrawal and on conformity apply only to consumers. Where these terms say that a rule is for business customers, it does not apply to consumers. Nothing in these terms takes away a right a consumer has under the law.

Free costs nothing and includes 20,000 units a month. Personal is 5 euro a month or 50 euro a year, with 200,000 units a month. Team is 8 euro a seat a month or 80 euro a seat a year, from two seats, with 100,000 units a month and 100,000 more for each seat. Enterprise is agreed in writing. The same figures are offered in US dollars.

Units measure use: calls weighed by their category, and generated text by the tokens it took. When a month's units run out, calls that cost units are refused until the next month starts. Nothing is charged for use past the allowance. There are also daily limits per person, which the documentation states.

Paid plans are not on sale yet. Until they are, checkout runs in Stripe's test mode: no money moves and no plan is granted. This page will say when that changes. The price that applies to you is the one the checkout page shows before you pay.

Paid plans will be sold through Link, the merchant-of-record service of Stripe (Stripe Managed Payments). For the payment, Link is the seller of record: it takes the payment, charges VAT where it is due, issues the receipts and invoices, and its own terms apply to the payment. We provide the service.

The checkout page shows the final price, with any VAT, before you pay. If you buy as a business and give a valid VAT number, VAT is handled as the rules for business buyers require (within the EU, usually by reverse charge), and the invoice shows it.

You enter your card or other payment details only on Stripe's pages. They never reach us: we keep Stripe's customer and subscription identifiers, the plan, the seats, the status and the end of the paid period.

A paid plan renews automatically at the end of each month or year, at the price then in force, until you cancel it. You can cancel at any time in the console, through Stripe's billing page, or in your Link account. The cancellation takes effect at the end of the period already paid: the plan stays until then, and the account returns to Free after it.

On Team, more seats are charged at once for the rest of the current period, in proportion to the time left, and count as soon as they are paid. Fewer seats take effect at the end of the period. A seat that a member or an open invitation uses cannot be removed until it is freed.

If a payment fails, Stripe tries again, and the plan stays while it does. If the payment is not made, the account returns to Free. Your data stays.

We tell you about a price change at least 30 days before the renewal it applies to, so you can cancel before it does.

A period that has started is not refunded when you cancel, except under the right of withdrawal below, when the service did not conform, when we end the service, or where the law requires it. Link support can also decide a refund in its own process. A payment taken twice by mistake is refunded in full.

As a consumer you may withdraw from a contract for a paid plan within 14 days of the day it was concluded, without giving a reason. This right comes from Directive 2011/83/EU and the Croatian Consumer Protection Act.

To withdraw, tell us clearly before the 14 days are over: write to reach@inorbit.hr, or by post to InOrbit d.o.o., Benčani 15A, Saršoni, 51216 Viškovo, Croatia. You may use the model form: To InOrbit d.o.o., Benčani 15A, Saršoni, 51216 Viškovo, Croatia, reach@inorbit.hr: I hereby give notice that I withdraw from my contract for the following service (plan), ordered on (date), name of consumer, address of consumer, date. Sending your notice before the period ends is enough.

If you withdraw, we refund, through Link where Link took the payment, everything you paid for that plan, without delay and at the latest within 14 days of receiving your notice, to the payment method you used, at no cost to you. We do not charge for the days you used. The plan ends when the refund is made, and the account returns to Free.

A paid plan has to work as these terms and the plan's description say for the whole time you pay for it. If it does not, you are entitled to have it brought into conformity, and if we cannot do that within a reasonable time, to a proportionate price reduction or to end the contract, under Directive (EU) 2019/770 and the Croatian Act on certain aspects of contracts for the supply of digital content and digital services. Write to reach@inorbit.hr and say what is wrong.

We may change the service during a paid period for a valid reason, such as security, a change in law, or improving or replacing a product, at no extra cost to you. If a change makes your access to or use of the service worse by more than a minor degree, we tell you at least 30 days before, and you may end the contract free of charge within 30 days of the change; we then refund the part of the period you paid for and did not get.

Use the platform lawfully and within your plan. Do not attack it or other users, probe it for weaknesses outside a coordinated report, get around its limits or its access controls, share an account's keys outside the account, resell the platform without a written agreement, or use it to send malware, spam or content that is unlawful.

Faults, load and tests that the platform can run against a system (chaos experiments, load runs, probes, the agent) may be pointed only at systems you own or are authorised in writing to test. You are responsible for the effect they have on those systems.

If you find a security problem, write to reach@inorbit.hr and do not publish it until it is fixed. The address is also in /.well-known/security.txt.

The platform is not built or assessed for the following uses, and you may not use it for them: evaluating anyone's creditworthiness or setting a credit score; medical purposes, including diagnosis, treatment, patient monitoring or as part of a medical device; any use the EU AI Act lists as high-risk in its Annex III, such as biometric identification, a safety component of critical infrastructure, decisions about education, employment or access to essential public and private services, law enforcement, migration, or the administration of justice and elections; and any practice the AI Act prohibits in its Article 5.

Do not send the platform health data about identifiable people (including protected health information under US HIPAA), payment card numbers, or other special categories of personal data under GDPR Article 9. The platform is not built to hold them, and we may delete such data when we find it.

Your content is what you and your users put into the platform or get out of it: requests, configuration, code, documents, recordings, prompts and the answers models give you. It remains yours. You give us the right to store, process and transmit it only as far as needed to provide the platform to you and to keep it secure.

We never use your content to train or fine-tune any model. The models the platform runs answer on machines we operate, and your content is not sent to a third-party model provider. If a product ever needs one, we will name it here and in the data processing agreement first, and only after we have a data processing agreement with that provider.

If you connect an assistant from another company to the platform's MCP server, you do it with your own account and plan with that company. What the assistant sends and receives passes through that company under your agreement with it. We do not resell its usage, and we never see your credentials for it.

The platform's assistants and agents are AI and say so. Their answers can be wrong. Check an answer before you act on it, and above all before you change a production system on its strength.

Our logs and audit records hold who did what and how it ended: the account, the action, the outcome, the time and sizes. They never hold the content of a request, a prompt or an answer.

For your account, billing and audit records, we are the controller, and the privacy notice on the legal page applies. For personal data inside your content, you are the controller and we process it on your behalf. We are preparing our data processing agreement under GDPR Article 28; write to reach@inorbit.hr to ask for it.

The platform runs on machines we operate in Croatia. The providers that take part in running it today are Cloudflare, Inc. (DNS and the network in front of the platform, through which requests pass), Google (Google Workspace, for e-mail the platform sends) and Apple (push notifications for the InOrbit phone app). Google and GitHub, which you may sign in with, act under their own terms. For payments, Stripe and its Link service act under their own terms as the merchant of record. We will keep this list current and tell business customers under a data processing agreement before we add a provider.

You can export your data and delete your account from the console. A deleted account is erased from every service after a grace period of 7 days, during which you can restore it. Erasing an account also cancels its subscription and deletes its customer record at Stripe.

We build the platform so that every request is authenticated at the edge before it reaches a service, access starts from nothing and is granted per role and scope, secrets are kept in a secret store, and every call is audited without its content. We have not been audited against any standard, such as SOC 2 or ISO 27001, and the platform is not certified or compliant under any standard.

If a security incident affects your data, we tell you without undue delay, and business customers after we become aware of it, to help them meet their own obligations under GDPR Article 33.

The platform, its software, documentation and the InOrbit name and logo belong to us or our licensors. These terms give you the right to use the platform for as long as your account is in good standing; they transfer no other rights.

The SDKs, the agent and the other components we publish as open source are under the licence in their repository (the SDKs and the agent under the Apache License 2.0). That licence governs that code, also where it differs from these terms.

If you send us feedback or a suggestion, we may use it without obligation to you.

You may stop using the platform and delete your account at any time.

We may suspend access at once, in whole or in part, when that is needed to stop a breach of the acceptable-use or excluded-use sections, a risk to the security of the platform or of others, or use that the law forbids. We tell you why, and we lift the suspension once the cause is gone. For any other breach we first write to you and give you reasonable time to fix it.

We may end the Free plan or a product, or the platform as a whole, with at least 30 days' notice. If we end a service you have paid for, we refund the part of the period you paid for and did not get. Before an account is erased you can export your data.

Apart from what these terms promise and what the law requires, the platform is provided as it is during early access. For consumers, the conformity rights above apply in full.

Nothing in these terms excludes or limits liability for damage caused intentionally or by gross negligence, for harm to life, body or health, or any liability that cannot be excluded or limited under Croatian law (including Article 345 of the Civil Obligations Act). Towards consumers we are liable as the law provides.

For business customers, and subject to the paragraph above: we are not liable for lost profit, lost revenue, or indirect or consequential loss, or for loss of data that a reasonable backup on your side would have prevented; and our total liability for all claims in any twelve months is limited to the amounts you paid us for the platform in the twelve months before the event that caused the claim, or 100 euro if you paid nothing.

Business customers hold us harmless against third-party claims caused by their content or by their use of the platform in breach of these terms or of the law.

The version and date at the top say which text you are reading. We tell account holders about a change that matters by e-mail at least 30 days before it takes effect. A change needed by law or for security can take effect sooner, and we say why.

If you do not accept a change, you may cancel before it takes effect, and we refund the part of a prepaid period that falls after it. Using the platform after the change takes effect means you accept it.

Croatian law applies. For business customers, the competent court in Zagreb has exclusive jurisdiction.

If you are a consumer, you keep the protection of the mandatory law of the country where you live, you may bring a claim in the courts of that country or of Croatia, and we can bring a claim against you only in the courts of the country where you live.

A complaint can be sent in writing by e-mail to reach@inorbit.hr or by post to InOrbit d.o.o., Benčani 15A, Saršoni, 51216 Viškovo, Croatia. We confirm receipt and answer in writing within 15 days, as the Croatian Consumer Protection Act requires.

Questions about these terms, notices and requests go to reach@inorbit.hr. We write to you at the e-mail address of your account.