Terms for using the DataTether platform.

Agreement to These Terms

By accessing or using the Platform, creating an account, starting a trial, or authorizing an MCP client, you agree to be bound by these Terms. If you do not agree to these Terms, do not access or use the Platform.

If you accept these Terms on behalf of an organization, you represent that you have authority to bind that organization, and "you" refers to that organization.

The following documents are incorporated into these Terms by reference and form part of your agreement with DataTether:

• the DataTether Privacy Policy, available at /privacy-policy
• any data processing addendum (DPA) executed between you and DataTether
• any order form, quote, or written agreement covering your subscription

Where an executed order form or written agreement conflicts with these Terms, that agreement controls for the parties to it.

Platform Purpose

DataTether provides a governed enterprise integration and orchestration platform that enables AI systems, users, and applications to interact with connected enterprise services through MCP-compatible interfaces, workflows, dashboards, tools, resources, confirmations, and controlled automation capabilities.

The Platform may connect to third-party systems including:

• ERP systems
• CRM systems
• OData services
• identity providers
• databases
• APIs
• AI providers
• external applications

Eligibility and Account Access

The Platform is intended for business and enterprise use. You must be at least 16 years old to use the Platform, or at least 18 years old where required to form a binding contract in your jurisdiction. By using the Platform, you confirm that you meet this age requirement.

You must:

• be legally authorized to use connected systems and enterprise data
• comply with your organization's internal policies
• maintain the confidentiality of your credentials and tokens
• use the Platform only for lawful business purposes

Access to organizations, workspaces, MCP services, tools, resources, dashboards, or workflows may require:

• active organization membership
• administrator approval
• role-based authorization
• valid authentication credentials

DataTether may deny, suspend, restrict, or revoke access at any time for security, compliance, operational, abuse-prevention, or legal reasons.

Authentication, Sessions, and OAuth Tokens

DataTether uses Supabase Auth and related OAuth capabilities to authenticate users, maintain sessions, and support MCP client authorization flows.

When you sign in or approve an OAuth request, session records, access tokens, refresh tokens, authorization codes, scopes, redirect URLs, and client identifiers may be created, stored, validated, refreshed, revoked, or expired as part of the authorization process.

You are responsible for reviewing OAuth clients, redirect URLs, scopes, and requested capabilities before approving access.

OAuth approval does not give a client unrestricted system access. It gives the client access only within the permissions, scopes, workspace rules, and upstream authorization boundaries configured for the relevant service.

Authorized Use

You may use the Platform only within the permissions granted to your account and workspace.

You may not:

• attempt unauthorized access
• bypass security or authorization controls
• interfere with Platform operation
• scrape or abuse the Platform
• reverse engineer protected systems
• distribute malware or harmful code
• use the Platform for unlawful activity
• use automated systems in ways that exceed permitted operational limits

You may not submit, process, or generate content through the Platform that:

• is illegal under applicable law
• infringes intellectual property, privacy, or publicity rights
• exploits or endangers minors
• promotes violence, harassment, or hate
• you do not have the legal right to access, reproduce, or transmit

DataTether may investigate suspected violations, block sessions, clients, tokens, or IP addresses, suspend affected accounts or organizations, and pursue available legal remedies.

Trial, Plans, and Fees

DataTether offers a 15-day free trial. The trial begins when your account or organization is created, or when a trial of a paid plan is started, and runs for 15 calendar days.

At the end of the trial period, unless you have converted to a paid plan, your access to the Platform ends and the associated workspace data is deleted.

• trial access ends automatically after 15 days — no notice is required
• workspace data is deleted after the trial period ends, as described in Data Retention and Deletion
• converting to a paid plan before the trial ends preserves your configuration
• trials are provided on a best-effort basis with no uptime or support commitment

For paid plans:

• fees, billing frequency, and plan limits are those shown at purchase or in your order form
• subscriptions renew automatically for successive terms unless cancelled before the renewal date
• you may cancel at any time, effective at the end of the current billing period
• fees are non-refundable except where required by law or expressly stated in your order form
• fees are exclusive of taxes, which are your responsibility
• DataTether may suspend access for non-payment after reasonable notice
• plan pricing may change on notice, effective at your next renewal

AI-Assisted Actions and Automation

The Platform may enable AI systems or MCP-compatible clients to:

• discover tools and resources
• execute workflows
• retrieve enterprise data
• generate summaries or recommendations
• initiate automations
• request operational actions
• trigger create, update, delete, or workflow execution requests

AI-generated outputs may be inaccurate, incomplete, misleading, or operationally unsafe.

You are responsible for reviewing outputs, validating actions, reviewing confirmations, and verifying operational correctness before approving sensitive actions.

Human review should be used for operationally significant actions.

DataTether does not guarantee the correctness, legality, or appropriateness of AI-generated outputs, prompts, summaries, workflows, or operational recommendations.

The Platform is an AI-enabled system. Where output, summaries, recommendations, or automated actions are produced by AI models rather than by a person, they are the product of probabilistic systems and should be treated as such. Interfaces that surface AI-generated content are intended to identify it as AI-generated.

If you deploy the Platform in a context governed by AI-specific regulation — including the EU AI Act — you remain responsible for determining your role under that regulation, for any conformity, disclosure, human-oversight, or record-keeping obligations that apply to your deployment, and for configuring the Platform's governance controls accordingly.

Governance and Safety Controls

The Platform may enforce governance controls including:

• read-only restrictions
• operation filtering
• role-based access control
• workflow approval requirements
• confirmation requirements for sensitive actions
• audit logging
• session enforcement
• field-level visibility restrictions
• upstream authorization enforcement

These controls may vary by workspace, organization, service, workflow, or connected system.

DataTether does not guarantee that all unsafe, unauthorized, or unintended actions will always be prevented.

Customer Responsibility for Connected Systems

You are responsible for:

• ensuring you are authorized to connect enterprise systems
• configuring appropriate permissions and scopes
• limiting high-risk credentials where appropriate
• reviewing workflows, automations, and tools before production use
• maintaining appropriate governance over users and integrations

DataTether is not responsible for:

• excessive permissions granted by customers
• unsafe workflow configurations
• actions permitted by customer-supplied credentials
• customer-created automations
• operational decisions made using Platform outputs

Credentials and Integration Secrets

When configuring connected systems, you may choose authentication methods such as no-auth demo access, username and password credentials, OAuth client credentials, OAuth access or refresh tokens, API keys, static tokens, or service-account credentials.

If you choose username and password authentication, you authorize DataTether to store and use those credentials for permitted requests to the connected system.

If you choose OAuth or client-based authentication, you authorize DataTether to store and use the related client IDs, client secrets, authorization metadata, access tokens, refresh tokens, scopes, and token endpoint details needed to operate the integration.

• provide only credentials you are authorized to use
• avoid excessive upstream permissions
• rotate or revoke credentials when required
• remove credentials that are no longer needed
• review any client, scope, or redirect URL before approving OAuth access

DataTether may resolve stored credentials server-side to perform permitted operations. MCP clients should not receive your platform password, Supabase session secrets, or stored upstream-system credentials through normal authorization flows.

Third-Party Systems and Integrations

The Platform interacts with third-party systems and services.

You acknowledge that:

• third-party systems may fail, reject requests, throttle access, or behave unexpectedly
• upstream systems may independently authorize or deny requests
• external AI systems may produce inaccurate or unsafe outputs
• DataTether is not responsible for third-party outages, data quality, availability, or operational decisions

The Platform relies on the following categories of provider, and their terms and privacy policies apply to data processed through them in addition to these Terms:

• AI and model providers, including Anthropic (anthropic.com/legal), OpenAI (openai.com/policies), and Google (policies.google.com/terms) where those models are used or selected
• MCP clients and AI applications you authorize, such as Claude, ChatGPT, or Copilot, which operate under their own terms once authorized
• infrastructure and platform providers, including Supabase for authentication, OAuth, and database services
• analytics and monitoring providers, including PostHog and Google Analytics

Where you submit content for AI-assisted processing, that content is transmitted to the relevant model provider and handled under that provider's terms. You are responsible for confirming that the provider you select is appropriate for the sensitivity of the data involved.

A current list of subprocessors and a data processing addendum are available on request for organizations with a compliance requirement. Contact details are listed in the Contact section.

Your use of connected systems remains subject to the terms and policies of those systems.

OAuth and External Clients

You may authorize third-party MCP clients, AI applications, or external integrations to access the Platform.

You are responsible for reviewing:

• requested scopes
• redirect URLs
• application identity
• requested capabilities

DataTether is not responsible for the behavior, prompts, outputs, storage practices, or downstream actions of third-party applications after authorization is granted.

Authorizations may be revoked, expire, or become invalid based on security, policy, configuration, or upstream-system changes.

Data and Content

You retain ownership of your enterprise data and content.

You grant DataTether a limited right to process, transmit, store, transform, and display data solely for:

• operating the Platform
• providing requested services
• authentication and authorization
• workflow execution
• security and audit purposes
• reliability and debugging

This license is limited to what is necessary to operate the Platform for you. It is non-exclusive, revocable, and ends when your account or organization is closed, subject to the retention periods described below.

DataTether does not use your enterprise data, prompts, tool definitions, workflow configurations, or MCP request content to train, fine-tune, or improve AI or machine-learning models, and does not sell or license that content to third parties for their own purposes.

Enterprise records retrieved through connected systems are processed in transit to fulfil a request and are not retained as a persistent copy beyond what is needed to complete that request, cache results where you have configured caching, and maintain the audit and security records described in Audit Logging and Monitoring.

Where a request is fulfilled using a third-party AI provider, the content of that request is transmitted to that provider and is subject to the provider terms described in Third-Party Systems and Integrations.

You represent that you have the necessary rights and permissions to use and process connected enterprise data through the Platform.

Data Retention and Deletion

If your access is provided under the 15-day free trial and you do not convert to a paid plan, the workspace data associated with that trial is deleted after the trial period ends.

Deletion covers the data you configured or generated in the workspace, including:

• connection configurations and integration settings
• stored integration credentials, client secrets, and OAuth tokens
• generated tools, prompts, resources, dashboards, and generated UI definitions
• workflow definitions and execution history
• cached results and workspace configuration metadata

Deletion is not instantaneous. Data is removed from active systems within a reasonable period after the trial ends and may persist in encrypted backups for a limited additional period before those backups expire on their ordinary cycle.

A limited set of records is retained after deletion where required for security, abuse prevention, audit, billing, or legal compliance — including authentication events, security events, audit log entries, and billing records. These records do not include your stored integration credentials, which are deleted with the workspace.

For paid plans, retention follows your plan configuration, organization policy, and any executed order form or DPA. On termination of a paid subscription, you are responsible for exporting any configuration or data you wish to keep before access ends.

Because trial data is deleted, you should not rely on the Platform as a system of record. Your connected enterprise systems remain the source of truth for your business data.

Generated Output and Configurations

The Platform generates artifacts from your configuration and your connected systems, including tool definitions, prompts, resources, dashboards, generated user interfaces, workflow definitions, summaries, and recommendations.

As between you and DataTether, you own the configurations and generated artifacts you create in your workspace, together with any output produced from your enterprise data, and may use them for any lawful business purpose.

• you own your workspace configurations, tool and workflow definitions, and their output
• DataTether owns the generation systems, templates, engines, and underlying software that produce them
• you are responsible for verifying generated output before relying on or publishing it
• you are responsible for ensuring generated output does not infringe third-party rights

Output produced by AI systems may not qualify for copyright protection in all jurisdictions. DataTether makes no representation about the copyrightability or ownership status of AI-generated material under any particular law.

Generated artifacts in a trial workspace are subject to deletion under Data Retention and Deletion.

Intellectual Property

The Platform, including software, interfaces, the systems that generate workflows and user interfaces, branding, visual assets, APIs, documentation, and related technology, is owned by DataTether and protected by applicable intellectual property laws.

This ownership does not extend to your enterprise data, your workspace configurations, or the generated artifacts and output described in Generated Output and Configurations.

Except for rights expressly granted under these Terms, no rights are transferred to you. You may not copy, modify, or redistribute DataTether intellectual property without written permission.

Confidentiality

Each party may receive non-public information from the other in connection with the Platform, including technical, security, architectural, pricing, and business information.

Each party will protect the other's confidential information with at least reasonable care, use it only to perform under these Terms, and not disclose it except to personnel and providers bound by comparable obligations, or where disclosure is required by law.

These obligations do not apply to information that is or becomes public without breach, was already known without a duty of confidence, or is independently developed.

Neither party will use the other's name or logo publicly without prior written consent, except that DataTether may identify you as a customer where you have separately agreed in writing.

Feedback

If you provide feedback, suggestions, ideas, or improvement requests regarding the Platform, DataTether may use them without restriction or compensation to you.

Beta and Preview Features

Some features may be identified as:

• beta
• preview
• experimental
• early access

These features may be incomplete, unstable, changed without notice, or subject to additional limitations.

Security

DataTether implements reasonable technical and organizational safeguards intended to protect the Platform and associated credentials.

However:

• no platform is completely secure
• internet transmissions are not guaranteed secure
• AI-assisted systems carry elevated operational risks
• customers remain responsible for reviewing permissions, workflows, and configurations

You are responsible for maintaining the security of:

• accounts
• tokens
• API credentials
• connected systems
• OAuth clients
• enterprise integrations

Audit Logging and Monitoring

The Platform may log:

• authentication activity
• workflow execution
• MCP requests
• tool usage
• resource access
• client metadata
• confirmation actions
• operational events
• session identifiers
• security events

These logs may be used for:

• security
• operational monitoring
• abuse prevention
• debugging
• compliance support
• service improvement

High-Risk Use Restrictions

The Platform is not designed or intended for:

• life-critical systems
• medical decision-making
• autonomous weapons systems
• emergency response automation
• nuclear or industrial safety systems
• unlawful surveillance
• fully autonomous high-risk financial approval systems without human oversight

You agree not to use the Platform in ways that could reasonably result in death, personal injury, catastrophic property damage, or unlawful harm without appropriate human review and safeguards.

Availability and Service Changes

The Platform may change over time.

DataTether may:

• modify features
• change APIs
• impose usage limits
• suspend services
• discontinue functionality
• change supported integrations

No uptime guarantee is provided unless separately agreed in writing.

Disclaimer of Warranties

THE PLATFORM IS PROVIDED "AS IS" AND "AS AVAILABLE."

DATATETHER DISCLAIMS ALL WARRANTIES, INCLUDING:

• MERCHANTABILITY
• FITNESS FOR A PARTICULAR PURPOSE
• NON-INFRINGEMENT
• ACCURACY
• RELIABILITY
• AVAILABILITY
• SECURITY
• ERROR-FREE OPERATION

DATA GENERATED THROUGH AI SYSTEMS, WORKFLOWS, OR CONNECTED ENTERPRISE SERVICES MAY CONTAIN ERRORS OR INACCURACIES.

Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, DATATETHER SHALL NOT BE LIABLE FOR:

• INDIRECT DAMAGES
• LOST PROFITS
• BUSINESS INTERRUPTION
• DATA LOSS
• SECURITY INCIDENTS CAUSED BY THIRD PARTIES
• AI-GENERATED ERRORS
• WORKFLOW MISCONFIGURATION
• UNAUTHORIZED THIRD-PARTY CLIENT ACTIONS
• ENTERPRISE SYSTEM FAILURES
• OPERATIONAL DECISIONS MADE USING PLATFORM OUTPUTS

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE TOTAL AGGREGATE LIABILITY OF DATATETHER ARISING OUT OF OR RELATING TO THESE TERMS OR THE PLATFORM WILL NOT EXCEED THE GREATER OF (A) THE FEES YOU PAID TO DATATETHER FOR THE PLATFORM IN THE TWELVE MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM, OR (B) USD $100. WHERE THE PLATFORM IS PROVIDED UNDER A FREE TRIAL OR OTHERWISE WITHOUT CHARGE, THE CAP IS USD $100.

These limitations apply regardless of the theory of liability and even if a limited remedy fails of its essential purpose. They do not apply to a party's indemnification obligations, to your obligation to pay fees due, or to liability that cannot be excluded by law.

Some jurisdictions do not allow the exclusion or limitation of certain warranties or liabilities, including for death, personal injury, fraud, or gross negligence. In those jurisdictions, DataTether's liability is limited to the maximum extent permitted by applicable law, and the exclusions and limitations above may not apply to you. Nothing in these Terms limits any non-waivable statutory or consumer right you may have.

Indemnification

You agree to indemnify and hold harmless DataTether and its affiliates from claims arising from:

• your misuse of the Platform
• your connected systems
• your workflows or automations
• your data
• unauthorized actions initiated through your account
• violations of law or third-party rights

Termination

DataTether may suspend or terminate access at any time.

Upon termination:

• access rights end
• tokens may be revoked
• workflows and integrations may stop functioning

Certain provisions of these Terms survive termination, including liability, indemnification, audit, and security-related provisions.

Changes to These Terms

We may update these Terms from time to time. Updated Terms become effective when published, and the "Last updated" date at the top of this page is revised.

Continued use of the Platform after updated Terms become effective constitutes acceptance of the revised Terms. If you do not agree to a revision, stop using the Platform and cancel any active subscription.

For changes that materially affect your rights or obligations, we will provide reasonable advance notice by email to account or organization administrators, by in-product notice, or both, before the change takes effect.

Governing Law and Venue

These Terms are governed by the laws of the State of Delaware, United States, excluding its conflict-of-law principles and the United Nations Convention on Contracts for the International Sale of Goods.

Disputes arising out of or relating to these Terms or the Platform will be brought exclusively in the state or federal courts located in Delaware, and each party consents to the personal jurisdiction of those courts.

Where you have executed an order form or other written agreement with DataTether that specifies a different governing law or venue, that agreement controls for the parties to it and supersedes this section.

Nothing in this section deprives you of the protection of mandatory consumer-protection provisions of the law of the country in which you reside, where those provisions apply to you and cannot be varied by agreement.

General Provisions

The following provisions apply to these Terms as a whole:

• Entire agreement: these Terms, together with the documents incorporated by reference, are the entire agreement between you and DataTether regarding the Platform and supersede prior discussions.
• Severability: if any provision is found unenforceable, it is modified to the minimum extent necessary or severed, and the remaining provisions stay in effect.
• No waiver: a failure to enforce any provision is not a waiver of the right to enforce it later.
• Assignment: you may not assign these Terms without our prior written consent, except to a successor in a merger or sale of substantially all assets. DataTether may assign these Terms to an affiliate or successor.
• Force majeure: neither party is liable for delay or failure caused by events beyond its reasonable control, including outages of third-party or connected systems, network failures, or acts of government.
• No third-party beneficiaries: these Terms do not create rights for anyone other than you and DataTether.
• Independent contractors: nothing in these Terms creates a partnership, agency, or employment relationship.
• Notices: legal notices to DataTether must be sent to the email address in the Contact section. Notices to you may be sent to your account email or provided in-product.

Export Control and Sanctions

The Platform may be subject to export control and economic sanctions laws, including those of the United States and the European Union.

You represent that you are not located in, ordinarily resident in, or organized under the laws of a country or region subject to comprehensive sanctions, and that you are not a party identified on any applicable restricted-party or denied-party list.

You agree not to access or use the Platform, or to permit access to it, in violation of applicable export control or sanctions laws, and not to use the Platform to connect systems or transfer data where doing so would breach those laws.

Contact

For legal, compliance, or Terms-related inquiries, including requests for a data processing addendum or the current subprocessor list, contact DataTether Inc. at [email protected]. You may also use the guided access form and include "Legal request" in your note so the request can be routed appropriately.

Copyright and DMCA notices: if you believe material accessible through the Platform infringes your copyright, send a notice to [email protected] with the subject line "DMCA notice". Include identification of the copyrighted work, identification of the material and its location, your contact details, a statement of good-faith belief that the use is unauthorized, a statement that the information is accurate, and your physical or electronic signature. We will respond to properly submitted notices and may remove or disable access to the material identified.

We aim to acknowledge legal and compliance inquiries within five business days. Security issues should be reported through the security contact channel rather than this address, so they can be triaged more quickly.