Terms of Service

When you create an account with us, you must provide information that is accurate, complete, and current at all times. Failure to do so constitutes a breach of these Terms and may result in immediate termination of your account.

You are responsible for safeguarding your account credentials and for any activity that occurs under your account. You agree not to share your password with any third party. You must notify us immediately upon becoming aware of any breach of security or unauthorised use of your account.

Each account is provisioned as a single tenant. All data created within your account is logically isolated from other accounts.

The Service is billed on a subscription basis ("Subscription"). You will be billed in advance on a recurring monthly or annual basis depending on the plan you select ("Billing Cycle").

At the end of each Billing Cycle, your Subscription will automatically renew under the same conditions unless you cancel it. You may cancel your Subscription at any time through your account billing settings.

A valid payment method is required to process Subscription fees. By submitting payment information, you authorise us to charge all Subscription fees incurred through your account to that payment method.

We may offer a free trial for a limited period of time ("Free Trial"). You are not required to enter billing information to begin a Free Trial. If you do not cancel before the Free Trial period ends, you will be automatically charged the applicable Subscription fee for the plan you selected.

We reserve the right to modify or cancel the Free Trial offer at any time without notice.

We may, at our sole discretion, modify Subscription fees at any time. Any fee change will become effective at the end of your then-current Billing Cycle. We will provide reasonable prior notice of any change in fees so you have the opportunity to cancel before the change takes effect.

Your continued use of the Service after a fee change constitutes your agreement to pay the modified amount.

Except where required by applicable law, paid Subscription fees are non-refundable. If you believe you are entitled to a refund, please contact us and we will review your case.

You retain all rights to the data and content you input into the Service ("Your Data"), including risk records, registers, controls, and any other information you upload or create. We do not claim ownership over Your Data.

You are responsible for ensuring Your Data is lawful, accurate, and does not infringe the rights of any third party. You grant us a limited licence to store, process, and display Your Data solely to provide the Service to you.

You may export Your Data at any time. Upon account termination we will retain Your Data for 30 days to allow you to retrieve it, after which it will be permanently deleted.

You agree not to use the Service to:

• Violate any applicable law or regulation
• Upload or transmit malicious code, viruses, or other harmful content
• Attempt to gain unauthorised access to any other account, system, or network
• Interfere with or disrupt the integrity or performance of the Service
• Circumvent or reverse-engineer any security, authentication, or access-control mechanism
• Reproduce, resell, or sublicense access to the Service without our written consent

The Service provides API access via the Model Context Protocol ("MCP"). API keys issued to MCP clients are scoped to the permissions of the account they are generated under. You are responsible for keeping API keys secure and for all requests made using your keys.

We reserve the right to revoke API keys that are used in violation of these Terms or that pose a security risk.

The Service and its original content, features, and functionality — excluding Your Data — are and will remain the exclusive property of Risk3y Limited and its licensors. The Service is protected by copyright, trademark, and other applicable laws. Our trademarks and trade dress may not be used in connection with any product or service without our prior written consent.

The Service integrates with third-party providers including AWS Cognito (authentication) and Stripe (payments). Your use of those services is subject to their respective terms and privacy policies. We are not responsible for the acts or omissions of any third-party provider.

The Service may contain links to third-party websites. We have no control over, and assume no responsibility for, the content or practices of those sites.

We may terminate or suspend your account immediately, without prior notice or liability, for any reason, including if you breach these Terms. Upon termination, your right to use the Service will immediately cease.

You may cancel your account at any time through your account settings. Cancellation takes effect at the end of your current Billing Cycle.

To the maximum extent permitted by applicable law, Risk3y Limited, its directors, employees, partners, agents, and affiliates shall not be liable for any indirect, incidental, special, consequential, or punitive damages — including loss of profits, data, goodwill, or other intangible losses — resulting from:

• Your access to, use of, or inability to use the Service
• Any conduct or content of any third party on the Service
• Unauthorised access to or alteration of your data or transmissions

Our total aggregate liability to you for any claim arising out of or relating to these Terms or the Service is limited to the amount you paid us in the three months preceding the claim.

The Service is provided on an "AS IS" and "AS AVAILABLE" basis without warranties of any kind, whether express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, or non-infringement. We do not warrant that the Service will be uninterrupted, error-free, or free of harmful components.

Risk3y is a risk management tool. It does not constitute legal, financial, or compliance advice. You remain solely responsible for your organisation's risk management decisions.

These Terms shall be governed by and construed in accordance with the laws of New Zealand, without regard to its conflict of law provisions. Any disputes arising under these Terms shall be subject to the exclusive jurisdiction of the courts of New Zealand.

We reserve the right to modify these Terms at any time. If a revision is material, we will provide at least 30 days' notice before the new Terms take effect, by email or by a prominent notice on the Service.

Your continued use of the Service after changes take effect constitutes your agreement to the revised Terms. If you do not agree to the new Terms, please stop using the Service.

If you have any questions about these Terms, please contact us:

• Email: legal@risk3y.com