Terms of Service

1. Welcome to KerrOS

Thanks for choosing KerrOS. We build tools that help you work smarter, and we want the relationship between us to be straightforward and fair.

These terms govern your use of KerrOS (the “Service”), operated by KerrOS Sweden AB. By accessing or using the Service, you agree to be bound by these terms. If you do not agree, please do not use the Service.

2. Your Account

One account per human, please.

• Valid email required: You must provide a valid email address to create an account.
• Credential responsibility: You are responsible for keeping your login credentials secure.
• Account activity: You are responsible for all activity that occurs under your account.
• Unauthorized access: Notify us immediately at security@kerros.com if you suspect unauthorized access to your account.

Do not share accounts with others, create accounts via automated means (bot accounts), or impersonate any person or entity.

3. Your Data is Yours

This is non-negotiable.

• Ownership: You own your data. Always have, always will.
• No AI training: We do not train AI models on your data. Ever. This commitment specifically includes data received from Google APIs — Gmail content, Drive files, Calendar events, Chat or Meet content, and Contacts data are never used to train, develop, or improve any generalised or user-specific AI/ML model.
• Export anytime: You can export your data at any time, in standard formats.
• Delete anytime: You can delete your data at any time. Deleted data is removed from our servers and backups within 30 days.

We only access your data when: you explicitly ask us to (e.g. for support), we are required to by law, or it is necessary to maintain service integrity.

4. How KerrOS Works

KerrOS-hosted (Cloud)

Our cloud offering runs on AWS infrastructure. Your data is encrypted with AES-256 at rest and protected by TLS 1.2+ in transit. We handle uptime, backups, and patches so you can focus on your work.

Self-hosted

With self-hosted deployments, you run KerrOS on your own infrastructure. You are responsible for security, backups, uptime, and compliance. We provide the software and updates.

5. API Keys and Connected Accounts

5.1 LLM provider keys

Your Own Keys. When you bring your own API keys, KerrOS acts as a passthrough to the providers you configure. Your keys are never stored beyond the active session. Billing for usage is between you and the provider.

KerrOS-provided Keys. Some plans include KerrOS-provided API keys, or you can purchase usage separately. Usage is metered, and fair use policies apply. Pricing may change with 30 days' notice.

5.2 Google OAuth credentials

When you connect a Google account to KerrOS, you grant us limited access to your Google account through OAuth, scoped to the specific Google APIs you select in the consent flow. You remain in control:

• Scope-limited. KerrOS acts on your behalf only within the scopes you grant. We do not request additional scopes without prompting you and obtaining a new authorisation.
• Revocable at any time. You can revoke KerrOS's access at any time through your Google Account permissions page or from the connector settings inside KerrOS. Revocation in either place propagates to the other within one hour.
• Google's own terms apply. Your relationship with Google is also governed by the Google Terms of Service and the Google API Services Terms of Service. KerrOS's role is limited to the OAuth-granted scopes you select; we do not modify the terms on which Google provides its own services to you.
• Limited Use. Our handling of data received from Google APIs is governed by the Limited Use commitments described in our Privacy Policy, and adheres to the Google API Services User Data Policy. This specifically includes — but is not limited to — our commitment not to train AI/ML models on Google user data, not to use it for advertising, and not to transfer it to third parties except as described in the Privacy Policy.

6. Content You Host

You are the publisher of the content you create, upload, or host through KerrOS. Your content must comply with our Acceptable Use Policy.

• Enforcement: We may remove content that violates our Acceptable Use Policy or applicable law.
• Takedown process: We respond to valid DMCA and equivalent takedown requests in accordance with applicable law.
• Illegal content: Content that is illegal — especially child sexual abuse material (CSAM) — will be immediately removed and reported to law enforcement.

Note on Google user data. Data ingested into KerrOS from your Google account via the OAuth scopes described in §5.2 (Gmail content, Drive files, Calendar events, Chat or Meet content, Contacts data) is not “content you host through KerrOS” in the sense of this section. You are not republishing this data through KerrOS, and we do not exercise editorial control or takedown rights over the source data in your Google account. The handling of this data is governed by §5.2 above and by the corresponding sections of our Privacy Policy.

7. Plans & Payments

• Free plans: Free plans remain free for as long as they are offered.
• Paid plans: Paid plans are billed monthly or yearly, depending on your selection.
• Price changes: We will give you at least 30 days' notice before changing prices on existing plans.
• Downgrade or cancel: You can downgrade or cancel your plan at any time.
• Refunds: Refunds are handled on a case-by-case basis.
• Taxes: Applicable taxes may apply depending on your jurisdiction.

8. What We Promise (and What We Don't)

We promise to:

• Make our best effort to keep the Service running, secure, and improving.
• Be transparent about how we operate.
• Respect your data and your privacy.

We do not promise:

• That the Service will be error-free or uninterrupted.
• The accuracy of any AI-generated content or outputs.

Our total liability is capped at the fees you have paid us in the 12 months preceding the claim, or SEK 1,000, whichever is greater. We are not liable for indirect, incidental, or consequential damages. Nothing in these terms affects your statutory rights as an EU consumer.

9. Service Evolution

KerrOS is a living product. Features may be added, changed, or retired over time. We will provide reasonable notice for significant changes. We will never remove core data access without at least 90 days' notice.

10. Termination

By you

You can cancel your account at any time. On cancellation, you can export your data from your KerrOS volume before deprovisioning. After the export window, your KerrOS volume is deprovisioned and the encryption keys destroyed; after 30 days the volume cannot be recovered. Data you have already exported to your own systems is yours to keep or destroy. Data on a self-hosted KerrOS deployment is on infrastructure you control — cancellation of your KerrOS-cloud subscription does not affect it.

By us

We may suspend or terminate accounts in the following circumstances:

• AUP violations: suspension or termination of accounts that violate our Acceptable Use Policy.
• Non-payment: accounts with outstanding payments may be suspended after 14 days' notice.
• Legal requirement: we may be required to terminate access by law.

We will provide notice and an opportunity to remedy the situation, except in cases requiring immediate action (e.g. illegal content, security threats). On termination, the export and 30-day deprovisioning window described under “By you” applies.

Google connectors at termination

If you have connected one or more Google accounts to KerrOS, terminating your KerrOS account does not revoke KerrOS's OAuth authorisation in your Google account automatically. We recommend that you revoke the authorisation through your Google Account permissions page at or before cancellation. KerrOS will stop syncing new data from Google at the point your KerrOS account is deprovisioned.

11. Disputes

These terms are governed by Swedish law. Disputes shall be resolved by the Stockholm District Court. EU consumers retain the right to bring claims in their local courts.

Before going to court, let's try to sort it out. Reach out to us and we'll do our best to resolve things amicably.

12. Changes to These Terms

We may update these terms from time to time. Material changes will be communicated at least 30 days before they take effect. Continued use of the Service after changes take effect constitutes acceptance of the updated terms.

13. Contact

• Terms: tos+v20260514@kerros.com
• Privacy: privacy+v20260514@kerros.com
• Security: security@kerros.com
• Abuse: abuse@kerros.com