Terms of service

Last updated: 2026-05-19
Effective date: 2026-05-19
Operator: MythologIQ Labs LLC ("MythologIQ", "we", "us", "our")
Service: Qortara (the "Service")
Customer-facing URL: https://qortara.com/legal/terms

These Terms of Service ("Terms") govern your access to and use of the Qortara service operated by MythologIQ Labs LLC. By creating an account, subscribing through the Azure Marketplace, or otherwise using the Service, you agree to these Terms. If you do not agree, do not use the Service.

These Terms incorporate by reference the following companion documents, each available at the URLs noted:

Acceptable use policy — https://qortara.com/legal/acceptable-use
Privacy policy — https://qortara.com/legal/privacy
Data processing agreement (for controller customers) — https://qortara.com/legal/dpa
Subprocessor list — https://qortara.com/legal/subprocessors
Security disclosure policy — https://qortara.com/legal/security

1. Service description

The Service is a governance platform for AI agents, built on top of the Microsoft Agent Governance Toolkit ("AGT") as an upstream dependency. The Service provides policy evaluation, trust scoring, audit-log generation, and metered billing across the subscription tiers listed at https://qortara.com/pricing.

The Service is delivered as a hosted offering on Microsoft Azure. Where upstream behavior is relevant (for example, AGT policy-evaluation semantics), we pin specific upstream versions and document the pin in release notes.

The Service is currently in active pre-launch development and is provided on an as-is and as-available basis. Availability, performance, support response time, and feature scope are best-effort. We do not commit to any service-level agreement under these Terms; any service-level commitment that applies to your subscription must be set out in a separate written agreement signed by both parties.

To the maximum extent permitted by law, we are not liable for defects, outages, breaking changes, deprecation, license actions, or other events caused by upstream dependencies we do not control, including Microsoft Azure, Stripe, SendGrid, GitHub, and the Microsoft Agent Governance Toolkit. Where such an upstream event affects the Service, we will use reasonable efforts to mitigate the impact.

API and feature deprecation follow the policy at docs/operations/api-deprecation-policy.md; deprecations covered by that policy are not breaches of these Terms.

2. Eligibility

To use the Service you must be at least 18 years of age and have the legal capacity to enter into these Terms on your own behalf or on behalf of the entity you represent. The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If you accept these Terms on behalf of an entity, you represent that you have authority to bind that entity to these Terms; references to "you" then mean that entity and its authorized users.

3. Account obligations

You agree to:

provide accurate and current information at signup and keep it up to date;
maintain the confidentiality of your session tokens, API keys, and account credentials;
use the Service only for lawful purposes and within the capabilities and quotas of your subscription tier;
promptly notify us at security@qortara.com of any unauthorized access, suspected compromise, or misuse of your account; and
accept responsibility for all activity conducted under your account, whether by you, your users, your agents, or anyone using your credentials.

You may not share account credentials across organizational boundaries except where Trust Federation features have been configured to do so on your behalf.

4. Acceptable use

Your use of the Service is subject to the Acceptable use policy at https://qortara.com/legal/acceptable-use, which is incorporated into these Terms. Without limiting that policy:

You will not use the Service to evaluate, govern, audit, or facilitate illegal activity.
You will not circumvent rate limits, metering, tier quotas, or access controls.
You will not attempt to reverse-engineer the Service beyond what applicable law permits.
You will not intentionally overwhelm shared infrastructure beyond paid quota.
You will not resell, sublicense, or white-label the Service without a separate written agreement.

The Service is not designed for, and you will not use the Service in connection with, nuclear facilities, aviation life-safety systems, medical life-support systems, or autonomous weapons systems ("high-risk uses"). Use of the Service for high-risk uses is at your own risk and is excluded from our indemnification obligations and from any express or implied warranty.

5. Subscription, billing, and cancellation

5.1 Tiers and pricing

The current subscription tiers and prices are published at https://qortara.com/pricing and exposed programmatically at GET /v1/public/pricing. The published tier table is the source of truth.

5.2 Billing cycle

Monthly subscriptions renew automatically each calendar month until cancelled. Annual commitment tiers (Business, Enterprise) renew annually until cancelled. Invoices are issued via Stripe (for direct signups) or via Microsoft Azure Marketplace (for Marketplace-fulfilled subscriptions).

5.3 Metering and overage

Each tier includes a monthly allotment of metered events (policy evaluations, audit events, compliance scans, sessions, trust lookups). Overage usage is billed at the rates published at https://qortara.com/pricing and exposed at GET /v1/public/pricing.

5.4 Price changes

We may change prices on at least 30 days' advance notice by email. Changes take effect at your next renewal. Continued use after the effective date constitutes acceptance of the new price; if you reject the change, you may cancel under §5.5 without penalty before the new price applies.

5.5 Cancellation

You may cancel your subscription at any time through the dashboard or by contacting support@qortara.com. Access continues to the end of the paid period. No prorated refund is owed for partial periods unless required by law.

For Azure Marketplace subscriptions, cancellation flows through Microsoft per the Microsoft AI Cloud Partner Program rules. Following Marketplace cancellation, your data is retained for 30 days then deleted in accordance with Microsoft AI Cloud Partner Program terms; see the Privacy policy for details.

5.6 Suspension for non-payment

If a charge fails, we will retry per Stripe's standard cadence and notify you by email. If payment is not resolved after two retry cycles, we may suspend the account. Suspended accounts may be restored on payment of overdue amounts within 30 days; thereafter we may terminate the account under §13.

5.7 Taxes

Prices are exclusive of sales, use, value-added, withholding, or similar taxes. You are responsible for all such taxes other than taxes on our net income.

6. Intellectual property

6.1 Our intellectual property

The Service, including all software, configurations, documentation, branding, and trademarks, is owned by MythologIQ Labs LLC and its licensors and is protected by intellectual-property laws. We grant you a non-exclusive, non-transferable, revocable right to use the Service during your subscription term, solely for your internal business purposes and subject to these Terms.

Open-source components used by the Service remain subject to their respective licenses; nothing in these Terms restricts your rights under those licenses.

6.2 Your content and configurations

You retain all rights in the policies, configurations, agent definitions, and other content you submit to the Service ("Customer Content"). You grant us a worldwide, royalty-free, non-exclusive license to host, store, process, transmit, display, and otherwise use Customer Content solely as necessary to provide and operate the Service for you, to generate audit evidence, and to enforce these Terms.

6.3 Feedback

If you provide suggestions, ideas, or feedback about the Service, you grant us a perpetual, irrevocable, royalty-free license to use that feedback without restriction. We are not obligated to act on it.

7. Customer data

We process personal data and Customer Content in accordance with the Privacy policy at https://qortara.com/legal/privacy. Where you are the controller of personal data and we are the processor, the Data processing agreement at https://qortara.com/legal/dpa applies and is incorporated into these Terms.

Audit-log retention by tier:

Developer: 30 days
Pro: 90 days
Team: 365 days
Business: multi-year retention (defined in the applicable order form)
Enterprise: 7 years

Retention starts at the time the audit event is generated. Marketplace-fulfilled subscriptions are additionally subject to the 30-day post-cancellation data-retention TTL required by the Microsoft AI Cloud Partner Program.

Disaster-recovery posture, recovery objectives, and tenant-CA private-key recovery limits are described in our internal disaster-recovery procedures and are best-effort. We do not commit to specific RTO or RPO targets under these Terms.

8. Disclaimers

8.1 Nature of Qortara verdicts

The Service evaluates agent behavior and produces verdicts, trust scores, and policy-evaluation results. These outputs are advisory and probabilistic, not determinative. You are solely responsible for decisions you make using Service outputs, including whether to deploy, suspend, or restrict any agent. You will not rely on Service outputs as the sole basis for decisions with legal, safety, financial, medical, or human-rights consequences.

8.2 As-is, as-available

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, MYTHOLOGIQ AND ITS LICENSORS DISCLAIM ALL WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, RELIABILITY, AND UNINTERRUPTED OR ERROR-FREE OPERATION.

We do not warrant agent behavior, policy outcomes, third-party system integrations, the behavior of upstream dependencies, or that the Service will meet your requirements. We do not warrant that Service outputs are correct, complete, or sufficient for any particular regulatory, contractual, or operational purpose.

8.3 High-risk-use exclusion

You acknowledge that the Service is not designed for and is not warranted for high-risk uses described in §4. You assume all risk arising from any use of the Service in those contexts, and you will not assert any claim against us arising from such use.

9. Indemnification

9.1 Your indemnity

You will defend, indemnify, and hold harmless MythologIQ Labs LLC, its affiliates, and their respective directors, officers, employees, contractors, and agents from any third-party claim, demand, loss, liability, damage, cost, or expense (including reasonable attorneys' fees) arising from or related to:

(a) your use of the Service in violation of these Terms or applicable law;
(b) Customer Content, agents, policies, or configurations you submit to or operate through the Service;
(c) your products or services that incorporate Service outputs;
(d) your breach of the Acceptable use policy; or
(e) any high-risk use of the Service.

9.2 Our indemnity

We will defend you against any third-party claim that the Service, when used as permitted by these Terms, infringes a United States patent, copyright, or trademark, and we will pay damages and costs finally awarded against you (or settlement amounts we approve), subject to the liability cap in §10. We have no obligation under this §9.2 for claims arising from:

(i) your modifications to the Service or its outputs;
(ii) combination of the Service with items not provided by us;
(iii) your continued use of an allegedly infringing version after we provide a non-infringing alternative, update, or workaround;
(iv) open-source components governed by their own license;
(v) Customer Content, your configurations, or third-party content; or
(vi) use of the Service in violation of these Terms.

If a claim under this §9.2 is asserted or appears likely, we may, at our option: (1) procure for you the right to continue using the Service; (2) modify the Service to be non-infringing; or (3) terminate the affected portion of the Service and refund a pro-rata portion of prepaid unused fees. This §9.2 states our entire liability and your exclusive remedy for any claim of infringement.

9.3 Process

The indemnified party must promptly notify the indemnifying party of the claim in writing, tender sole control of defense and settlement to the indemnifying party, and reasonably cooperate at the indemnifying party's expense. The indemnifying party will not agree to any settlement that imposes liability or an admission of liability on the indemnified party without the indemnified party's written consent.

10. Limitation of liability

10.1 Cap

EXCEPT AS STATED IN §10.2, OUR AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THE SERVICE OR THESE TERMS WILL NOT EXCEED THE GREATER OF:

(a) THE AMOUNT YOU PAID FOR THE SERVICE IN THE 12 MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM, OR
(b) ONE HUNDRED UNITED STATES DOLLARS (US $100).

IN NO EVENT WILL EITHER PARTY BE LIABLE FOR INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, LOST REVENUE, LOST DATA, OR COST OF PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

10.2 Exclusions from cap

The cap and consequential-damages waiver in §10.1 do not apply to:

(i) your payment obligations;
(ii) your breach of the Acceptable use policy;
(iii) either party's indemnification obligations under §9;
(iv) either party's breach of confidentiality obligations; or
(v) liability that cannot be limited under applicable law, including liability for fraud, willful misconduct, and gross negligence.

10.3 Statutory rights

Nothing in these Terms limits any non-waivable statutory rights you have under applicable local law, including consumer-protection and data-protection rights under the laws of the United Kingdom, the European Economic Area, and the State of California.

10.4 Allocation of risk

The limitations in this §10 reflect an agreed allocation of risk and form an essential basis of the bargain between the parties. The pricing of the Service is set in reliance on these limitations.

11. Modification of terms

We may update these Terms from time to time. For material changes, we will provide at least 30 days' advance notice by email to the address on file; the updated Terms will take effect at your next subscription renewal. Continued use of the Service after the effective date constitutes acceptance of the updated Terms. If you reject a material change, you may terminate under §13 without penalty and receive a pro-rata refund of prepaid unused fees.

Non-material changes (typographical fixes, clarifications, broken-link updates) take effect on posting at https://qortara.com/legal/terms. The "Last updated" date at the top of this page reflects the most recent revision.

12. Assignment

You may not assign or transfer these Terms, by operation of law or otherwise, without our prior written consent. Any unauthorized assignment is void. We may assign these Terms to an affiliate or in connection with a merger, acquisition, reorganization, financing event, or sale of substantially all of our assets, on notice to you.

13. Termination

13.1 Customer termination for convenience

You may cancel your subscription at any time as described in §5.5. Access continues to the end of the paid period; no prorated refund is owed unless required by law.

13.2 Customer termination for breach

You may terminate these Terms for our uncured material breach by giving us 30 days' written notice (sent to legal@qortara.com) during which we fail to cure. If we fail to cure within that period, you may terminate by sending a second written notice and you will receive a pro-rata refund of prepaid unused fees.

13.3 Our termination

We may terminate these Terms or any subscription for your material breach on 30 days' written notice, or immediately on written notice for (a) illegal use of the Service, (b) actual or imminent security compromise originating from your account, (c) repeated payment failure, or (d) violation of the high-risk-use exclusion in §4. We may terminate any tier on 90 days' notice for convenience; if we do so for convenience, you will receive a pro-rata refund of prepaid unused fees.

13.4 Effect of termination

On termination, your access to the Service ends. Data retention and deletion follow the Privacy policy. You remain responsible for fees accrued before termination. Sections that by their nature should survive termination — including §6 (Intellectual property), §7 (Customer data), §8 (Disclaimers), §9 (Indemnification), §10 (Limitation of liability), §14 (Force majeure), §15 (Governing law), §16 (Dispute resolution), and §17 (General) — survive.

14. Force majeure

Neither party is liable for any delay or failure to perform caused by circumstances beyond reasonable control, including acts of God, war, terrorism, civil unrest, pandemic, labor disputes, government action, internet or telecommunications outages, denial-of-service attacks, or failure of upstream providers (including but not limited to Microsoft Azure, Stripe, SendGrid, GitHub, and the Microsoft Agent Governance Toolkit). The affected party will use reasonable efforts to resume performance. If a force majeure event materially impairs the Service for more than 60 consecutive days, either party may terminate the affected subscription on notice and you will receive a pro-rata refund of prepaid unused fees.

15. Governing law

These Terms are governed by the laws of the State of Maryland, United States, without regard to its conflicts-of-law principles. The United Nations Convention on Contracts for the International Sale of Goods does not apply. Subject to §16, exclusive jurisdiction and venue for any action not subject to arbitration lies in the state and federal courts located in the State of Maryland, and each party consents to personal jurisdiction in those courts.

16. Dispute resolution

16.1 Informal resolution

Before initiating arbitration or litigation, the parties will attempt to resolve any dispute informally by giving written notice describing the dispute to legal@qortara.com (for claims against us) or to the email address on file (for claims against you), and negotiating in good faith for at least 30 days.

16.2 Binding arbitration

Except for the carve-outs in §16.3, any dispute arising out of or relating to these Terms or the Service will be resolved by binding arbitration administered by the American Arbitration Association ("AAA") under its Commercial Arbitration Rules then in effect. The arbitration will be seated in the State of Maryland, conducted in English, and decided by a single arbitrator. Judgment on the award may be entered in any court of competent jurisdiction. Each party will bear its own attorneys' fees and costs, except as required by the AAA rules or applicable law.

16.3 Carve-outs

Either party may bring an individual action in small-claims court in Maryland for any claim that qualifies. Either party may seek injunctive or equitable relief in any court of competent jurisdiction to protect intellectual property, confidential information, or to enforce the Acceptable use policy.

16.4 Class-action waiver

TO THE MAXIMUM EXTENT PERMITTED BY LAW, ANY ARBITRATION OR COURT PROCEEDING UNDER THESE TERMS WILL BE CONDUCTED ONLY ON AN INDIVIDUAL BASIS AND NOT AS A CLASS ACTION, COLLECTIVE ACTION, CONSOLIDATED ACTION, OR REPRESENTATIVE ACTION. If a court finds this waiver unenforceable in a particular case, the affected claims will sever and proceed in court; the remainder of the arbitration agreement remains in force.

16.5 UK/EU statutory rights

Nothing in this §16 limits any non-waivable statutory rights you have under applicable local law, including the right of consumers in the United Kingdom or European Economic Area to bring proceedings in the courts of their place of residence.

17. General

17.1 Entire agreement

These Terms, together with the documents incorporated by reference, constitute the entire agreement between the parties regarding the Service and supersede all prior and contemporaneous agreements on the subject. In the event of conflict between these Terms and a separately signed order form or master agreement, the signed agreement controls for the conflicting term.

17.2 Severability

If any provision of these Terms is held unenforceable, that provision will be modified to the minimum extent necessary to make it enforceable, and the remaining provisions remain in full force.

17.3 No waiver

Failure to enforce any right under these Terms is not a waiver of that right.

17.4 Notices

Notices to you may be sent to the email address on file. Notices to us must be sent to legal@qortara.com and, if a physical address is required, to MythologIQ Labs LLC at the address listed in the Imprint at https://qortara.com/legal/imprint.

17.5 Independent contractors

The parties are independent contractors. Nothing in these Terms creates a partnership, joint venture, employment, or agency relationship.

17.6 Government use

The Service is "commercial computer software" and "commercial computer software documentation" within the meaning of applicable US federal acquisition regulations. Use by US government end users is subject to the rights granted in these Terms.

17.7 Export controls

You will comply with all applicable export-control and economic-sanctions laws of the United States and any other applicable jurisdictions. You represent that you are not located in, and will not access the Service from, a jurisdiction subject to comprehensive US sanctions, and that you are not on any restricted-party list.

17.8 Headings

Headings are for convenience only and do not affect interpretation.

18. Contact

Legal notices: legal@qortara.com
Privacy inquiries: privacy@qortara.com
Security: security@qortara.com
General support: support@qortara.com

Mailing address: MythologIQ Labs LLC — see the Imprint at https://qortara.com/legal/imprint.