Terms of Service

1. Acceptance

These Terms of Service ("Terms") govern your access to and use of the UAPK Gateway hosted API at api.uapk.info, the UAPK Gateway website at uapk.info, and the official integration connectors we publish for Zapier, Make.com, n8n, and Langflow (collectively, the "Service"). By creating an account, calling the API, or installing a connector, you agree to these Terms. If you are acting on behalf of an organization, you confirm you are authorized to bind that organization.

2. The Service

UAPK Gateway is a policy enforcement and audit platform for AI agents. The Service evaluates agent action requests against a manifest-defined policy, optionally executes approved actions through pluggable connectors, and records every decision in a cryptographically signed, hash-chained audit log. Certain features (for example, S3 Object Lock evidence bundles) require configuration you provide.

The Service is offered as-is; no uptime, latency, or correctness SLA is provided unless a separate written agreement says otherwise. We may update the API surface, rate limits, and connector modules; material changes are announced at least 30 days in advance when practicable.

3. Accounts and credentials

You are responsible for the secrecy of your API keys, organization UUID, and any capability or override tokens issued to you. Treat them as passwords. Notify us at [email protected] immediately if you believe a credential has been compromised; we can rotate or revoke keys on request.

You are responsible for every request made with your credentials, including those made by AI agents, third-party integration platforms, and automations you configure.

4. Acceptable use

You must not use the Service to:

• violate applicable law, or facilitate conduct that would;
• infringe intellectual property, privacy, or other rights of third parties;
• circumvent the policy enforcement layer itself — for example, by attempting to tamper with the audit chain, forge Ed25519 signatures, or bypass SSRF protections;
• use the Service to target individuals with automated decisions that would require human review under applicable law (e.g. GDPR Art. 22) without implementing the approval workflow we provide;
• run load tests that exceed published rate limits without prior written agreement;
• reverse-engineer, decompile, or extract source code from the hosted service.

You will operate your AI agents in compliance with all laws and regulations applicable to their outputs (professional-licensing rules, financial regulation, medical device rules, data protection, etc.). UAPK Gateway is a governance layer, not a substitute for your own legal and regulatory responsibility.

5. Data

Our handling of your data is governed by the Privacy Policy, which forms part of these Terms. You grant us the rights necessary to operate the Service, including storing interaction records in the append-only audit chain, signing records with our Ed25519 gateway key, and exporting records to S3 Object Lock when you request an evidence bundle.

Audit records are immutable by design. You cannot delete interaction records, and neither can we: the hash chain is the product. Account data and approval records are retained as described in the Privacy Policy.

6. Third-party integration platforms

The Zapier, Make.com, n8n, and Langflow connectors are made available subject to those platforms' own terms. When data flows through a third-party platform, that platform's handling of your credentials and payloads is governed by its own agreements. We are not responsible for outages, data loss, or credential compromise that originates inside a third-party platform.

7. Fees

Free, self-service access is available for evaluation and small workloads. Paid tiers and custom contracts are available; where applicable, fees and billing cycles are set out in a separate order form or in your dashboard. Stripe is our payment processor; card numbers are never stored by us.

8. Warranties and disclaimers

To the maximum extent permitted by law, the Service is provided "as is" and "as available". We disclaim all implied warranties, including merchantability, fitness for a particular purpose, non-infringement, and any warranty arising from course of dealing or usage of trade. We do not warrant that the Service will be uninterrupted, timely, secure, or error-free, nor that any specific AI agent or policy configuration will produce legally compliant outputs in your jurisdiction.

9. Limitation of liability

To the maximum extent permitted by law, our aggregate liability for any claim arising out of or relating to the Service is limited to the greater of (a) the fees you paid to us in the twelve months preceding the event giving rise to the claim, or (b) one hundred euros (EUR 100). We are not liable for indirect, incidental, consequential, special, or punitive damages, including lost profits, lost data, or business interruption, even if advised of the possibility.

Nothing in these Terms limits liability that cannot be limited under German law, including liability for intent and gross negligence, for personal injury, or under the German Product Liability Act.

10. Suspension and termination

You may terminate your account at any time by contacting [email protected]. We may suspend or terminate access if you materially breach these Terms, if your use poses a security or legal risk, or if a credential has been compromised and you have not cooperated with rotation. Audit records retained under the immutability guarantee survive termination.

11. Changes to these Terms

We may update these Terms. Material changes are announced via email to registered users and noted on this page with a revised effective date. Continued use of the Service after the effective date constitutes acceptance.

12. Governing law and venue

These Terms are governed by the laws of the Federal Republic of Germany, excluding its conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods. Exclusive venue for disputes is Cologne (Köln), Germany, to the extent permitted by law. Consumer rights to bring proceedings in the consumer's country of residence are not affected.

13. Contact

UAPK Project
c/o Hucke & Sanker
Goethestr. 35b
50858 Köln, Germany
Email: [email protected]
Security: [email protected]