Terms of Service

1. Agreement

These Terms govern your access to and use of Watchlight Cloud (the “Service”), provided by Watchlight AI LLC (“Watchlight”, “we”, “us”). By creating an account, accessing the Service, or sending data to it, you agree to these Terms. If you are agreeing on behalf of an organization, you represent that you are authorized to bind it, and “you” means that organization.

2. What the Service is, and what it is not

Watchlight Cloud is a control center for the Watchlight Developer Edition. It stores and presents the audit records your deployments send, distributes policy bundles you author, and manages your organization, environments and team.

Authorization decisions are made in your own process by the Watchlight Developer Edition engine, against policy on your systems. The Service does not evaluate policy for you, does not sit in the path of your agents’ actions, and cannot allow, deny, stop or contain anything your agents do. If the Service is unavailable, your agents continue to run and continue to be governed locally.

It follows that the Service is not a security control over your runtime, and must not be relied on as one. Real-time enforcement, containment and attested identity are capabilities of Watchlight Beacon, which is licensed separately and deployed in your own environment.

3. The Developer Edition is licensed separately

The Watchlight Developer Edition is governed by its own licence terms, not by these Terms. The integration layer you write against — the govern decorator, scope attenuation, the CLI and dashboard, the framework plugins and the examples — is open source under Apache-2.0.

The decision engine itself ships as a compiled component under the separate Watchlight Developer Edition licence, which permits free use — including in production and commercially — up to the number of governed agents that licence states. Those are two different licences with different terms, and the agent limit comes from the second, not from Apache-2.0.

A Cloud subscription neither grants, extends nor replaces either licence. Staying within your Cloud plan’s agent limit does not by itself mean you are within the Developer Edition licence, and the two limits may differ.

4. Beta access

The Service is currently offered in a private beta by invitation or voluntary sign-up. Beta access may be modified, suspended or withdrawn at any time; features may change or be removed; and no availability commitment applies. We will give reasonable notice before deleting data belonging to a beta account.

5. Accounts and credentials

You are responsible for activity under your account and for the security of your credentials — sign-in links, API keys and deployment tokens. Deployment tokens determine which environment records are attributed to; treat them as secrets. Tell us promptly at support@watchlight.ai if you believe a credential has been exposed, and rotate or revoke it in the control center.

Administrative access to the Service requires two-factor authentication. You are responsible for keeping your own second factor and backup codes.

6. Your data

You own your data. You grant us only the licence needed to host, process, transmit and display it in order to provide the Service, and to keep backups.

Audit records produced by the Developer Edition are value-free by design: they record the verdict, the acting principal, the intent and the resource, and not the argument values passed to your tools. We store what your deployments send us, unmodified. You remain responsible for what you choose to send, including for ensuring that any identifiers within it may lawfully be transferred to us.

We encrypt customer identifiers, policy code and audit records at rest, and we isolate each customer’s data. Our handling of personal data is described in our Privacy Policy. Where we process personal data on your behalf, a data processing addendum is available on request.

7. Retention

Each plan states how long audit records are retained. Records older than your plan’s window are deleted automatically. Aggregate usage statistics may be retained beyond that window.

If your plan changes to one with a shorter window — including a change you did not choose, such as a failed payment — we keep the previous window in force for a further 30 days before the shorter one takes effect, so that you have an opportunity to export. We do not guarantee recovery of records deleted under this section.

8. Fees, billing and taxes

Paid plans are billed in advance, monthly or annually, through our payment processor. Fees are non-refundable except where required by law. Upgrades take effect immediately; downgrades take effect at the end of the current period.

We may change prices with at least 30 days’ notice before your next renewal. Fees exclude taxes, which you are responsible for unless we are required to collect them. If payment fails, we may suspend paid features after reasonable notice; your data is subject to Section 7 and Section 13.

9. Plan limits and acceptable use

Plans include limits on projects, environments, team members, governed agents and the volume of audit records accepted. We may refuse records beyond your rate limit. We will not delete records you have already sent in order to enforce a limit.

You agree not to:

• use the Service to store data unrelated to agent governance;
• attempt to access another customer’s data, or probe our isolation;
• circumvent plan limits, rate limits or authentication;
• resell or offer the Service as your own hosted service;
• use the Service unlawfully, or to support unlawful activity.

10. Availability

We aim to keep the Service available, but provide it without an availability commitment unless a separate written agreement says otherwise. Free and beta plans carry no service level commitment. We may perform maintenance, and will try to give notice for planned work likely to be disruptive.

Because authorization happens in your process (Section 2), unavailability of the Service does not stop your agents from being governed.

11. Subprocessors and third parties

We use third parties to provide the Service, including infrastructure hosting, payment processing and email delivery. A current list of subprocessors is available on request. We remain responsible for their performance of the Service.

12. Intellectual property and feedback

We retain all rights in the Service. You retain all rights in your data and your policies. If you send us feedback or suggestions, you grant us a perpetual, royalty-free licence to use them without obligation to you.

13. Term, termination and export

You may stop using the Service and close your account at any time. We may suspend or terminate access for material breach of these Terms, or for non-payment, with notice where practicable.

On termination you may export your data for 30 days, after which we may delete it. We will delete it sooner on written request, subject to backups expiring on their ordinary schedule and to any retention required by law.

14. Disclaimers

Except as expressly stated, the Service is provided “as is” and “as available”, without warranties of any kind, whether express, implied or statutory, including merchantability, fitness for a particular purpose and non-infringement. We do not warrant that the Service will be uninterrupted or error-free, or that it will detect, prevent or record every event in your environment.

15. Limitation of liability

To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue or data. Our total liability arising out of or relating to these Terms will not exceed the fees you paid us in the three months before the event giving rise to the claim, or one hundred US dollars if you are on a free plan.

These limits do not apply to your payment obligations, to either party’s indemnity obligations, or to liability that cannot be limited by law.

16. Indemnity

You will defend and indemnify us against third-party claims arising from your data, your policies, or your use of the Service in breach of these Terms. We will defend and indemnify you against third-party claims that the Service infringes their intellectual property rights.

17. Changes

We may update these Terms. For material changes we will give at least 30 days’ notice by email or in the control center. Continued use after the effective date constitutes acceptance. If you do not agree, you may terminate and receive a pro-rata refund of prepaid fees for the unused period.

18. Governing law

These Terms are governed by the laws of the State of Texas, United States, excluding its conflict of law rules and the UN Convention on Contracts for the International Sale of Goods. The parties submit to the exclusive jurisdiction of the state and federal courts located in Texas, and each waives any objection to venue there.

19. Contact

Questions about these Terms: support@watchlight.ai. Sales and enterprise agreements: sales@watchlight.ai or the contact form.