Terms of Service — CoiOS

Service: CoiOS hosted memory service (API at api.coios.amarbaro.tech, the CoiOS cockpit, and the @coios/mcp client) Provider: AMARBARO — identity and postal address in the Impressum Effective date: 2026-09-08 Terms URL: https://amarbaro.com/terms/coios

These terms govern your use of the hosted CoiOS service. Using the service, or signing in to it, means you accept them. The open-source CoiOS software you run yourself is licensed separately, under the licence that ships with it, and is not covered here.

1. What the service is

CoiOS stores notes in vaults and lets tools you operate (for example an AI assistant speaking the Model Context Protocol) write to and recall from them through our API. The service is in early release: features, limits and prices may change, and we do not promise a service level. We will announce material changes in the cockpit or by e-mail to the address linked to your account, with at least 14 days' notice where the change is to your disadvantage.

2. Your account

Access is by API key and, optionally, by signing in through an identity provider linked to your account. Keep keys secret. Everything done with a key counts as done by you until you revoke it. Revoke a key immediately if you suspect it has leaked.
You must be at least 16 years old and legally able to enter into this contract. If you use the service for an organisation, you confirm you may bind it.
One person may hold several vaults and share them with other principals through grants. Whoever holds the owner grant controls the vault.

3. Your content

You keep every right in what you store. We claim no ownership.
You grant us only what we need to run the service: to store, index, encrypt, back up within the region, and return your content to you or to those you have granted access. We do not read, analyse, sell or train models on your content.
You are responsible for what you store and for having the right to store it. Do not store content that is unlawful, that infringes others' rights, or that you are contractually bound not to hand to a third-party service.
Do not store secrets (passwords, private keys, access tokens) in a vault. The service is designed for notes, not credentials.

4. Acceptable use

You may not: attempt to access vaults or accounts that are not yours or not granted to you; probe, scan or overload the service; circumvent quotas, rate limits or billing; resell access without our written agreement; or use the service to build a product that merely relays it. We may throttle, suspend or terminate accounts that do, with notice where the situation allows it.

5. Fees

The Free tier is free and stops serving calls when its cap is reached.
Paid tiers (Pro, Team) are billed through Stripe per billing period, partly as a fixed fee and partly metered by API calls. Prices and caps are shown in the cockpit before you subscribe. Prices include VAT where it applies.
Metered usage is counted from our usage record (see the privacy policy). You can see the running count in the cockpit at any time.
We may change prices with at least 30 days' notice; the change applies from your next billing period. You may cancel before it takes effect.

6. Cancelling and leaving

You may stop using the service at any time. Paid tiers can be cancelled to the end of the current billing period.
You can export every note and vault through the API and cockpit at any time.
Deleting a vault starts a 30-day recovery window during which you can undelete it; afterwards it and its backup copy are purged and cannot be recovered.
If we discontinue the service we will give at least 60 days' notice and keep export available until the end.

7. Availability and liability

The service is provided as it is, in early release, without a guaranteed uptime. Maintenance may interrupt it. Keep your own copy of anything you cannot afford to lose — the open-source CoiOS runs entirely on your own machine and can hold the same vault.
We are liable without limit for damage caused intentionally or by gross negligence, for injury to life, body or health, and under the German Product Liability Act. For slight negligence we are liable only for breach of an obligation whose fulfilment the contract depends on (a cardinal obligation), and then only for the damage typical of this kind of contract and foreseeable when it was concluded. Any further liability is excluded. This does not shift the burden of proof to your disadvantage.

8. Privacy

How we handle personal data is set out in the CoiOS privacy policy, which forms part of these terms.

9. Law and disputes

German law applies, excluding the UN Convention on Contracts for the International Sale of Goods. If you are a consumer, the mandatory consumer-protection rules of the country where you habitually reside remain unaffected. For merchants, the place of jurisdiction is the provider's seat named in the Impressum. The European Commission's online dispute resolution platform is at https://ec.europa.eu/consumers/odr/; we are neither obliged nor willing to take part in proceedings before a consumer arbitration board.

10. Contact

support@amarbaro.com — questions, notices and cancellations all go here.