Violet terms of service

Effective date: not yet in effect (pre-launch draft)

1. Who we are and what this covers

These terms govern your use of Violet: the Violet applications and the optional Violet cloud service (accounts, encrypted sync, managed AI inference, billing). The service is operated by [OWNER: legal entity name, jurisdiction]. By creating an account or using the service you agree to these terms.

2. The service, honestly described

• Violet is a personal AI partner. The applications run local-first on your devices.
• The cloud service provides account identity, end-to-end encrypted cross-device sync, and managed AI inference under a subscription or a free allowance.
• Violet includes safety rails that are not user-disableable: she will not fabricate data, will not act without confirmation on consequential actions, and applies a crisis protocol. These are product features and boundaries of the service, not options.

3. Your account

• You must provide a valid email address and keep your password secure. Sessions are bound to your account; you are responsible for activity under your credentials.
• Your passphrase is your key. Synced content is encrypted with a key derived from your passphrase on your device. We never receive that key. If you lose the passphrase, we cannot recover your synced content, and you accept that this is a designed property of the service, not a defect.
• One person per account. [OWNER: family/team tiers are planned; add multi-seat terms when those exist. Do not publish multi-seat terms before the tiers are real.]

4. Acceptable use

You agree not to:

• use the service to violate law or the rights of others;
• probe, breach, or overload the service's security or rate limits, or access another account's data (the service enforces tenant isolation; attempting to defeat it is a breach of these terms);
• resell, sublicense, or white-label the service without a written agreement;
• use managed inference to generate content that violates our model provider's acceptable-use requirements [OWNER: reference the contracted provider's AUP];
• reverse the end-to-end encryption of other users or attempt key extraction from the service.

We may suspend or terminate accounts that breach this section. Because your content is encrypted, enforcement is based on conduct and metadata, not on reading your content.

5. Your content

• Your content is yours. We claim no ownership of anything you or Violet create in your workspace.
• You grant us only the narrow license required to operate the service: storing and transmitting your encrypted envelopes, and forwarding the messages you send to managed inference to the model provider to produce your reply.
• We cannot moderate encrypted content and do not pretend to. You are responsible for what you store and generate.

6. AI outputs

• Violet is built to be honest: real data or an honest empty state, and honest errors when a capability is unavailable. Even so, AI-generated responses can be wrong.
• Outputs are provided for your personal use and are not professional advice (medical, legal, financial, or otherwise). You are responsible for decisions you make based on them.
• Do not rely on the service as a crisis service. Violet's crisis protocol points to human help; it is not a substitute for emergency services.

7. Plans, billing, and the free tier

• Free tier: a genuinely useful free allowance, including a capped daily managed inference allowance metered per account per day. When the allowance is exhausted the service says so honestly; it does not degrade into fabricated replies.
• Paid plans: subscriptions billed through Stripe. [OWNER DECISION: plan names, prices, billing periods, and trial policy are unset. Do not publish this section until they are set.]
• Entitlements activate on Stripe's confirmation of payment and deactivate when a subscription ends or payment fails after Stripe's retry process.
• [OWNER with counsel: refund policy, including EU/UK statutory withdrawal rights for digital services.]
• We will give at least [OWNER: 30] days' notice of price changes, effective at your next renewal. No silent changes.

8. Cancellation and deletion

• You may cancel a subscription at any time, effective at the end of the paid period. Canceling does not delete your account or your encrypted data.
• You may request account deletion per the Privacy Policy. Deletion of ciphertext is final by design.
• We may terminate accounts for breach with notice where practicable. If we discontinue the service, we will give reasonable notice so you can export/sync your data locally; the local-first design means your content remains on your devices regardless.

9. Service changes and availability

• The product is under active development; features may change. We do not promise uninterrupted availability and there is no SLA on personal plans. [OWNER: revisit if a team/business tier with an SLA is introduced.]
• We may rely on third-party providers (Cloudflare for infrastructure, Stripe for payments, a model provider for inference); their outages can affect the service.

10. Disclaimers and liability

[OWNER with counsel: warranty disclaimer, limitation of liability, and consumer-law carve-outs per launch jurisdictions. Keep the plain-language summary that follows.]

Plain-language summary we intend to keep: the service is provided as-is; to the extent the law allows, our liability is capped at what you paid us in the last twelve months; nothing in these terms removes rights consumer law gives you that cannot be waived.

11. Disputes

[OWNER with counsel: governing law, venue, and whether arbitration applies. No decision has been made; do not default to arbitration without an explicit owner decision.]

12. Changes to these terms

We will post updated terms with a new effective date and notify account holders by email of material changes before they take effect. Continued use after the effective date is acceptance.

13. Contact

[OWNER: support email and legal entity address before publication.]