Terms of Service

These Terms are a production-grade draft for Ephemeral Workspace™, but they are not legal advice and must be reviewed by qualified counsel before public launch. Replace placeholder entity, jurisdiction, notice, dispute, and plan-specific language before accepting customers.

The contracting provider is [Your LLC Legal Name], organized in [State/Country of Formation]. If that entity name or jurisdiction is not exact, update the legal configuration before publishing.

By accessing or using Ephemeral Workspace™, creating an account, inviting users, purchasing a subscription, or clicking to accept these Terms, you agree to be bound by these Terms on behalf of yourself and, if applicable, the organization you represent.

You represent that you have authority to bind the organization, that account information is accurate, and that users you invite are authorized to access the relevant workspace.

Ephemeral Workspace™ is a privacy-oriented collaboration platform built on Ghost Core™. It provides controlled workspaces, lifecycle policies, secure messaging, temporary file rooms, document review, whiteboards, meeting rooms, semantic outputs, deletion orchestration, deletion receipts, policy enforcement, audit metadata, AI privacy controls, and billing entitlements.

The Service is not a law firm, compliance auditor, financial adviser, medical provider, e-discovery vendor, record-retention consultant, or emergency service. Customers remain responsible for determining whether the Service satisfies their legal, regulatory, contractual, evidentiary, and operational obligations.

Customers are responsible for account security, administrator actions, organization membership, workspace configuration, guest invitations, role assignment, capability grants, retention settings, legal holds, exports, and all activity under their accounts.

Administrators may be able to configure controls that affect content availability, deletion timing, exports, billing, and user access. Those controls must be used consistently with applicable law and the customer's internal policies.

As between the parties, customers retain ownership of workspace content they submit, upload, process, or approve for retention. Customers grant the provider a limited license to host, process, transmit, secure, classify, redact, display, delete, verify, and otherwise operate the Service according to customer instructions, product settings, these Terms, and applicable law.

Customers represent that they have all rights, consents, permissions, notices, and lawful bases required to submit content to the Service and to invite users or guests to process that content.

The Service is designed to reduce unnecessary persistence and to support policy-governed deletion, cryptographic destruction, independent verification, and metadata-only receipts where configured. These controls do not guarantee that every copy of information is physically unrecoverable in every environment, backup, endpoint, network, third-party system, legal-hold context, or user-controlled device.

Deletion receipts, verification records, audit entries, and evidence manifests are non-reconstructive records of system actions and provider checks. They are not legal opinions, forensic certifications, universal erasure guarantees, or proof that no third party ever retained or copied information.

AI-assisted features may summarize, classify, redact, transform, or analyze content. AI outputs can be incomplete, inaccurate, biased, unsafe, or unsuitable for a customer's purpose. Human review is required before relying on AI outputs for legal, compliance, financial, medical, employment, security, safety, or other consequential decisions.

Customers must not submit content to AI features unless they have authority to do so and have configured the applicable privacy, retention, and provider controls.

Paid plans, billing intervals, trials, taxes, renewals, cancellations, failed-payment handling, and refunds are governed by the applicable order, checkout, plan description, and Stripe billing flow. Payment processors may impose their own terms.

Subscription access may be suspended, downgraded, limited, or terminated for nonpayment, suspected fraud, chargebacks, sanctions concerns, abusive use, or material breach.

Users may not reverse engineer, attack, probe without authorization, bypass access controls, interfere with deletion or verification controls, upload malware, abuse rate limits, scrape the Service, use the Service for unlawful surveillance, violate third-party rights, or use the Service to process data they are not authorized to process.

Users may not use product names, marks, screenshots, output, or documentation in a way that implies endorsement, partnership, certification, or ownership without written permission.

Some features may be alpha, beta, preview, pilot, experimental, or not yet production verified. Such features may be changed, suspended, withdrawn, limited, or reset. Pre-release features should not be used for regulated production workloads unless expressly approved in a written agreement.

Market-readiness, launch-readiness, security, privacy, and deletion claims are limited to the controls that have actually passed the applicable automated checks, live provider evidence, external review, and written acceptance gates.

Except as expressly stated in a signed agreement, the Service is provided on an as-is and as-available basis. The provider disclaims warranties of merchantability, fitness for a particular purpose, title, non-infringement, uninterrupted availability, error-free operation, absolute security, universal deletion, and compliance with any customer's specific legal or regulatory obligations.

No public statement, roadmap, documentation, receipt, audit entry, security report, deletion verification, or AI output creates a warranty unless expressly incorporated into a signed agreement.

To the maximum extent permitted by law, the provider will not be liable for indirect, incidental, special, consequential, exemplary, punitive, or enhanced damages, including lost profits, lost revenue, lost data, business interruption, reputational harm, loss of goodwill, or cost of substitute services.

A counsel-approved version should insert the appropriate liability cap, exclusions from the cap, statutory carveouts, jurisdiction-specific consumer language, and enterprise-order terms.

These Terms should be governed by the laws of [State/Country of Formation], excluding conflict-of-law rules, unless a signed order or mandatory law requires otherwise.

Before launch, counsel should complete arbitration, class-action waiver, venue, injunctive relief, consumer, international, and public-sector provisions appropriate to the customer base.

Legal notices should be sent to legal@example.com. Customer account, security, privacy, DMCA, billing, and support notice workflows may require separate addresses or portals.

The provider may update these Terms by posting a revised version and changing the last-updated date, subject to any notice and consent obligations required by law or contract.