Terms of service

1. Agreement

These terms govern use of the complens.ai platform: the website, the administrator console, the API, and the complens browser extension (together, the "Service"), provided by Ross IT Solutions, LLC ("complens", "we"). By using the Service, or by deploying it to your organization, you agree to these terms. If you are accepting on behalf of an organization, you represent that you have authority to bind it, and "you" means that organization. If your organization has a separate signed agreement with complens, that agreement controls where it conflicts with these terms.

2. The Service

complens is a data loss prevention platform. The browser extension classifies submissions to AI chat tools on the device and reports metadata-only security events to the organization's console, as described on our homepage and in our privacy policy. The Service is a detection and policy tool: it assists your organization's security program and does not replace it, and no detection technology catches everything.

3. Accounts and deployment

• Console accounts must be created with accurate information, and you are responsible for activity under your credentials. Keep them confidential and tell us promptly about any suspected compromise.
• Organizations deploying the extension are responsible for doing so lawfully — including providing any notice to, and obtaining any consent from, their users that applicable law or internal policy requires for workplace monitoring tools.
• Enrollment tokens and device credentials are for enrolling your own organization's devices only.

4. Acceptable use

You agree not to:

• use the Service to monitor individuals or devices you have no legal right to monitor;
• probe, disable, or circumvent the Service's security or tenant isolation, or access another organization's data;
• reverse engineer the Service except where law grants that right despite this term;
• resell or provide the Service to third parties as your own offering without our written agreement;
• use the Service in violation of applicable law.

5. Your data

Your organization owns the events, posture reports, and configuration it generates through the Service ("Customer Data"). You grant us the rights needed to host, process, and display Customer Data to operate the Service. Our handling of personal data is described in the privacy policy. We may use aggregated, de-identified operational data to improve the Service; consistent with our privacy policy, this never includes message content — which we never receive — and never includes Google user data.

6. Intellectual property

complens retains all rights in the Service, including the detection engine, models, and software. These terms grant you a limited, non-exclusive, non-transferable right to use the Service for your organization's internal security purposes during your subscription. No other rights are granted.

7. Availability and changes

We may improve or modify the Service, and will not materially reduce its core functionality during a paid term without notice. The Service may be temporarily unavailable for maintenance or reasons beyond our control.

8. Disclaimers

The Service is provided "as is" and "as available." To the fullest extent permitted by law, we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Service will detect every instance of sensitive data, be error-free, or be uninterrupted.

9. Limitation of liability

To the fullest extent permitted by law: (a) neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data; and (b) each party's total liability arising out of the Service is limited to the amounts paid or payable by the customer for the Service in the twelve months before the event giving rise to the claim. Nothing in these terms limits liability that cannot be limited by law.

10. Termination

You may stop using the Service at any time. We may suspend or terminate access for material breach of these terms that is not cured within a reasonable time after notice, or where required to protect the Service or comply with law. On termination, Customer Data is handled as described in the privacy policy's retention section. Sections 5, 6, 8, 9, and 11 survive termination.

11. General

These terms are governed by the laws of the State of Delaware, USA, excluding its conflict-of-laws rules. If any provision is unenforceable, the rest remain in effect. Our failure to enforce a provision is not a waiver. These terms, together with the privacy policy and any signed agreement, are the entire agreement about the Service.

12. Changes to these terms

If we change these terms, we will update the effective date above and, for material changes, notify active organizations before the change takes effect. Continued use after the effective date constitutes acceptance.

13. Contact

Ross IT Solutions, LLC — hello@itsross.com