Terms of service

Effective 2026-05-11 · Last updated 2026-05-11 · v0.1

These Terms govern your use of yatabase.gftd.ai (the "Service"), operated by etz hayim ("Operator"). By signing up — including the anonymous mint at POST /auth/v1/signup — you accept these Terms.

This is a v0.1 plain-language draft suitable for self-service use. If your team requires a negotiated agreement (DPA, MSA, security questionnaire), email legal@gftd.ai before deploying to production.

1. The Service

Yatabase is a real-time graph database (Cypher / SPARQL) plus S3-compatible object storage plus an MCP tool surface, published at yatabase.gftd.ai. Surfaces and rate limits are documented at /docs; pricing tiers at /#pricing.

2. Your account

You may sign up anonymously. The mint endpoint returns a sk_live_yata_* bearer token that represents your tenant. Treat it as a credential — anyone with the token can act as you.
You are responsible for the security of your token. Revoke compromised tokens via POST /auth/v1/revoke.
You may invite teammates by minting additional tokens with POST /auth/v1/invite. All keys minted under one org_did share the same plan, billing, and audit log.
You may use the Service through automated agents, including LLMs and other AI systems, provided those agents respect the rate limits and acceptable-use rules below.

3. Acceptable use

You may not use the Service to:

Violate any applicable law, including export-control, sanctions, telecommunications, copyright, or privacy law.
Store, generate, or transmit material that depicts CSAM, non-consensual intimate imagery, or active threats of violence.
Send unsolicited bulk email, SMS, or other "spam" using the email outbox surface or via Resend on your behalf.
Mine cryptocurrency, run distributed compute attacks, or otherwise consume resources disproportionate to your plan.
Reverse-engineer, attack, or attempt to bypass quota / authentication on Yatabase or the underlying infrastructure (RisingWave, Cloudflare, Backblaze, Vultr).
Train a competitive graph-database / object-storage product against Yatabase's API responses with the intent of reproducing the Service.
Exfiltrate other tenants' data. Per-tenant isolation is enforced by actor_did + org_did RLS. Discovering and reporting an isolation breach in good faith is welcomed and rewarded.

4. Plans, billing, taxes

The current plan tiers and quotas are at /#pricing and in src/plan-quota.ts PLAN_RULES. Tiers may change with 30 days' notice; existing customers will be grandfathered to the lower of (old, new) for the remainder of their billing month.
Paid plans are charged via Stripe. Payment is in USD; JPY and other currency conversions are handled by Stripe at the time of charge.
Japan customers receive a 適格請求書 (qualified invoice, T9007028460042 — etz hayim) for each paid month. Pull the HTML at GET /api/invoice?month=YYYY-MM.
Sales tax / VAT / GST is handled by Stripe Tax where the Operator is registered for collection. Where it is not, you are responsible for self-assessment.
Hitting your daily quota returns HTTP 429 with a Retry-After header. Your data is not deleted; the meter simply resets at 00:00 UTC.
Subscriptions auto-renew until you cancel via Stripe. Cancellation downgrades you to Free at the next billing cycle; data is not deleted by cancellation alone — use /api/account/delete for that.

5. Service availability

Free tier: best-effort, no SLA, scheduled maintenance windows may interrupt service without notice.
Starter, Developer, Business: target 99.5 % monthly uptime measured against /status. No financial credits are offered; service credits may be issued at the Operator's discretion.
Enterprise: SLA, support hours, and credit schedule are negotiated in a separate written agreement.
The Operator may add, change, or remove individual surfaces (e.g. roadmap items at /docs) without notice, but will preserve documented behavior of paid-tier surfaces for at least 90 days.

6. Your data

You retain ownership of all data you store in Yatabase. Operator's role is purely as data processor / custodian.
You grant Operator a non-exclusive, royalty-free license to host, copy, transmit, and display your data strictly to the extent necessary to provide the Service to you and your authorized users.
Aggregate, anonymized, statistics derived from Service-wide usage (e.g. "how many tenants use Cypher this week") may be shared without restriction. No tenant-identifiable data is included.
The data-processing terms in /privacy are incorporated into this Agreement by reference.

7. Operator's data

The Service software, schema, the AI-actor system (chikada / tanaka / nishino / sakamoto path-based DIDs), the Studio UI, and the documentation surface are owned by the Operator and licensed to you only for the purpose of using the Service. You may not redistribute or sublicense them.

8. Termination

You may terminate at any time via POST /api/account/delete with the body {"confirm":"DELETE"}. The action is irreversible; the Operator preserves only the legally-required billing-event retention window.
The Operator may suspend or terminate your account on written notice (or, for material acceptable-use violations, immediately) if you breach §3.
Sections 3, 6, 9, 10, 11, 12 survive termination.

9. Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. THE OPERATOR DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR FREE OF MALICIOUS COMPONENTS.

10. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT WILL THE OPERATOR'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THIS AGREEMENT EXCEED THE GREATER OF (i) USD 100 OR (ii) THE FEES YOU ACTUALLY PAID FOR THE SERVICE IN THE 12 MONTHS PRECEDING THE CLAIM.

IN NO EVENT WILL THE OPERATOR BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, INCLUDING LOST PROFITS, LOST DATA, OR BUSINESS INTERRUPTION, EVEN IF ADVISED OF THE POSSIBILITY.

Some jurisdictions do not allow the exclusion or limitation of certain damages. In those jurisdictions, the Operator's liability is limited to the smallest amount permitted by applicable law.

11. Indemnity

You will indemnify and hold the Operator harmless from any third-party claim arising from (a) your data, (b) your use of the Service in breach of §3, or (c) your violation of any law or third-party right.

12. Governing law & dispute resolution

This Agreement is governed by the laws of Japan, exclusive of conflict-of-law rules.
Any dispute will be resolved in the Tokyo District Court, except either party may seek injunctive relief in any court of competent jurisdiction to protect intellectual property or confidential information.
If you are a US-domiciled consumer, you may alternatively pursue claims under the law of your state of residence in your local small-claims court.

13. Changes to these Terms

Material changes will be posted at this URL with a new effective date and a one-line note in the changelog. For paid plans, material changes that increase your obligations (price, scope, liability) take effect at the start of your next billing month and you may cancel before then without penalty.

14. Miscellaneous

Entire agreement. These Terms plus /privacy are the entire agreement.
No waiver. Failure to enforce a provision does not waive it.
Severability. If any provision is held unenforceable, the rest remain in effect.
Assignment. You may not assign without the Operator's consent (not unreasonably withheld); the Operator may assign to a successor entity in a corporate restructuring.
Notice. Notices to the Operator: legal@gftd.ai. Notices to you: the email associated with your org_did, falling back to a banner on the Studio Console.
AI Agent disclaimer. Yatabase is operated end-to-end by an AI-actor system (chikada / tanaka / nishino / sakamoto, see /team). Their drafts and replies are provided for operational transparency and do not constitute legal, tax, or professional advice.