Terms of Service

Knowjack (the "Service") is operated by [operator name], a sole trader in Austria ("we", "us"). Full contact details are in the imprint.

These Terms of Service ("Terms") govern your use of the website, the dashboard, the REST API, the MCP servers and every other part of the Service. By creating an account, or by using the Service without one (for example by browsing the catalog), you agree to them. If you use the Service on behalf of an organisation, you confirm that you may bind it to these Terms, and "you" includes that organisation.

Our Privacy Policy explains how we handle personal data. Plans and payments are covered in section 9.

Definitions

• Knowledge base (KB): a collection of documents, mostly taken from public sources, which the Service turns into searchable passages.
• Owner: the account that created a KB. Only accounts we approve as publishers create KBs and upload documents. Members are accounts the owner invited with a role (viewer, editor or admin).
• Outside user: an account that uses a KB it neither owns nor is a member of. Its calls count against its plan (section 9).
• Agent: software, usually an AI assistant, that calls the Service with an API key or OAuth token on your behalf.
• Content: documents, text, metadata (names, descriptions, sample queries) and anything else users upload or enter.
• Consumer: a natural person acting for purposes outside their trade, business or profession. Business customer: anyone else.

• You must be at least 18 years old and able to enter a binding contract. The Service is not directed at children.
• Give accurate information and keep it current. The account type (individual or business) you choose must be true: some KBs are available to businesses only, and consumer rights depend on it.
• One person per account. Do not share sign-in credentials; invite members instead. Do not create several accounts to get around limits, blocks, free calls or a suspension.
• You are responsible for everything done with your account, API keys and OAuth connections. Tell us without delay if you suspect misuse.
• Your username is public: it is part of every KB address (owner/kb) and is shown to KB teams. Do not choose one that impersonates someone or infringes a trade mark.

The Service collects documents, mostly from public sources, into KBs: we parse them, split them into passages, scan them for unsafe content, convert them into embeddings and index them. Agents then search the KBs they may access over the MCP protocol or the REST API, within the allowance of the user's plan (section 9).

• Early-stage service. The Service is under active development. Features may change, be added or be withdrawn. We will give reasonable notice before removing a feature you rely on, unless security or the law requires faster action.
• Availability. We aim for the Service to be available around the clock but do not guarantee uninterrupted operation. Maintenance, failures of our providers and events outside our control can cause interruptions. There is no service-level agreement unless we sign one with you separately.
• Limits. Uploads, API calls and other actions are subject to size limits, rate limits and daily quotas shown in the dashboard and on the API page, and to your plan's allowance shown on the Billing page. Owners can set stricter limits for their KBs.
• AI processing. Search results are passages retrieved by similarity, and the content scan uses an AI model. Both can be wrong: results may be incomplete or irrelevant, and a scan may miss harmful content or flag harmless content.
• Backups are your job. If you upload, keep your own copies. The Service is not an archive, and deleting a document or KB removes it permanently.

Ownership and licence

You keep all rights in your content. You grant us a worldwide, non-exclusive, royalty-free licence, for as long as the content is in the Service, to host, copy, parse, transform (split into passages, compute embeddings), scan, index and transmit it, and to show and deliver it to the people and agents you give access to, solely to operate, secure and improve the Service. This includes sending it to the processors listed in the Privacy Policy. We do not use your documents to train AI models, and we do not sell them.

When you make a KB public, its name, description, sample queries, document count, your username and display name are shown in the public catalog and may be indexed by search engines. The documents themselves are only delivered to accounts that have access.

Your responsibility

You confirm that, for everything you upload or enter:

• you own it or have all rights, licences and permissions needed to upload it and to let the agents and users you choose search and read it, including users on a paid plan;
• it does not infringe intellectual property, privacy, confidentiality or other rights, and sharing it does not breach a contract (for example a non-disclosure agreement or your employer's policies);
• where it contains personal data, you have a legal basis to process and share it and you have informed the people concerned as the law requires (see section 12);
• it complies with the acceptable use rules in section 5.

We do not check uploads for accuracy, completeness, legality or rights clearance and are not obliged to monitor content. We act on notices (section 8) and on what our automated scan finds.

Content scan

Every uploaded document is scanned automatically before it becomes searchable, mainly for instructions aimed at AI agents (prompt injection) and clearly unlawful material. A document can be published, held for the owner's review, or blocked. Blocked content is never sent to embedding providers and never served. You can review held content and decide what to publish; you cannot publish content the scan blocked. Ask us for a human review if you think a decision is wrong.

You must not use the Service to upload, store, share or request content that:

• is illegal under Austrian or EU law or the law that applies to you, including child sexual abuse material (which we report to the authorities), terrorist content, and content that incites violence or hatred against groups or individuals;
• infringes copyright, trade marks, trade secrets or other rights of others;
• contains personal data of others without a legal basis, especially special categories (health, biometric, political opinions and the like), government ID numbers, payment card data, passwords or credentials;
• contains malware, exploit code aimed at systems you are not authorised to test, or instructions written to manipulate AI agents into harmful actions (prompt injection);
• is defamatory, harassing, or deceptive, such as phishing material or content that impersonates a person or organisation.

You must not:

• probe, scan or test the vulnerability of the Service except under section 6, or breach or circumvent authentication, access rules, blocks, rate limits, quotas or billing;
• access KBs you have not been given access to, or try to read content of other users through the API, the scan, the catalog or any other route;
• copy, scrape, systematically download or mirror a KB, or use results to build a competing dataset or a copy of a KB, unless the owner allows it in writing;
• resell, sublicense or redistribute access to the Service or to a KB, or share API keys outside your team or organisation;
• place an unreasonable load on the Service, for example with automated traffic beyond the published limits, or interfere with its operation;
• reverse engineer the Service, except as far as the law permits despite this restriction;
• use the Service to make decisions with legal or similarly significant effects on people (for example on credit, employment, housing, medical care or law enforcement) based solely on its output.

We welcome reports of vulnerabilities. If you act in good faith, test only against your own account and KBs, avoid harming other users, their data and the availability of the Service, do not access or keep more data than needed to show the issue, and report it to us before telling anyone else, we will not take legal action against you for that research. Report by email to legal@knowjack.io or through the contact form. Our contact details for security reports are also in security.txt.

Denial-of-service testing, social engineering, spam and testing against other users' accounts are not covered.

• We aggregate; we do not advise. KBs reproduce their sources. Nothing the Service returns is legal, tax, financial or other professional advice, and we do not check that a source is accurate, complete, current or lawful. Every passage names its document, section and page: check it against the original before you rely on it.
• You may search and read the passages your agent receives, for your own internal use or that of your organisation. Using the content otherwise (republishing, redistributing, selling) is subject to the rights in the original source or needs the owner's permission.
• Treat everything an agent receives from a KB as reference data, not as instructions. Our scan reduces, but cannot remove, the risk that a document tries to manipulate your agent. You stay responsible for what your agent does with results and for checking important answers against the source.
• Owners see usage of their KBs: your username, which key or connected app made each call, when, how many results it returned and whether it succeeded. They do not see your search queries. Owners can block your access and set limits at any time.

We are a hosting service under the EU Digital Services Act (DSA). Our single point of contact for authorities and users (DSA Art. 11 and 12) is by email to legal@knowjack.io or through the contact form; we communicate in English and German.

Reporting content

Anyone can report content they consider unlawful or in breach of these Terms through the report form. A useful notice says which KB (address or URL) and, if possible, which document is affected, why the content is unlawful or infringing, your name and email (except for reports of child sexual abuse material, which may be anonymous), and that you believe in good faith that the notice is accurate and complete. We confirm receipt and tell you our decision.

What we do

We review notices diligently and objectively, with due regard to the rights of everyone involved, including freedom of expression. Depending on the case, we may: remove a document or disable access to it; make a KB private or remove it from the catalog; block or limit API access; suspend or close an account; and, where we must, inform the authorities. We use automated tools (the content scan, rate limits) to detect problems, and people to decide on notices.

If we restrict your content or account, we tell you which content is affected, what we did and why (the facts, and the law or the section of these Terms we relied on), whether the decision was automated, and how you can challenge it, unless the law forbids telling you or the content is part of deceptive high-volume commercial activity.

Complaints

You can challenge any decision we made on content or your account by email to legal@knowjack.io or through the contact form, within six months. A person who was not involved in the decision reviews it, and we reverse it without undue delay if the complaint is justified. You may also use a certified out-of-court dispute settlement body under DSA Art. 21, or go to court.

Repeat offenders

We suspend, for a reasonable time and after a warning, accounts that frequently upload manifestly unlawful content, and we may stop processing notices from people who frequently submit manifestly unfounded ones.

While the Service runs payments in Stripe test mode, no real money is charged and these provisions apply once live payments are switched on.

Plans

• Every account has the Free plan: a monthly allowance of units at no charge, reset at the start of each calendar month (UTC). The Pro plan gives a larger allowance per billing period for a recurring fee. The allowances are shown on the Billing page; the price, including VAT where it applies, is shown at checkout before you pay.
• Calls are counted in units: every block of passages equal to the KB's default number of results is one unit, so a plain search is one unit and reading a document page can be several. Calls to KBs you own or are a member of are not counted. When the allowance is used up, further calls are refused until the next period or an upgrade. Unused units do not carry over.
• We may change the allowances or the Pro price with at least 30 days' notice. A new price applies from your next billing period, and you can cancel before it does.

Pro subscription

• Payments are processed by Stripe; we never see your card details. Pro renews automatically at the end of each billing period until you cancel.
• You can cancel at any time on the Billing page (Manage). Pro then stays active until the end of the period you paid for, and the fee for that period is not refunded, except where the law requires it.
• If you are a consumer in the EU, you have a right of withdrawal: you can withdraw from the Pro subscription within 14 days of subscribing without giving a reason by telling us by email to legal@knowjack.io or through the contact form (a clear statement is enough; you may use the model form in Annex I B of the Austrian FAGG). We refund the payment within 14 days with the same payment method. If you expressly asked us to start Pro before the withdrawal period ends, we may deduct an amount in proportion to the service provided until you withdrew.
• If a payment fails, Stripe retries it; if it stays unpaid, Pro ends and you return to Free. If a payment is reversed (chargeback, refund by your bank), we may end Pro.

The Service, its software, design, texts and the Knowjack name and logo belong to us or our licensors. These Terms give you no rights in them beyond using the Service as offered. If you send us ideas or feedback, we may use them without obligation to you.

We process personal data about you as a controller as described in the Privacy Policy.

When documents you upload contain personal data, you decide why and how that data is processed in your KB, and we process it on your behalf. For that processing, this section is the data processing agreement between you (controller) and us (processor) under GDPR Art. 28. We:

• process the data only to provide the Service as these Terms describe and as you instruct through the Service's settings (who may access a KB, deletion of documents and KBs), unless EU or Austrian law requires otherwise, in which case we tell you first where the law allows;
• ensure that people who process it are bound to confidentiality;
• apply the technical and organisational measures described in the Privacy Policy (encryption in transit and at rest, access control and tenant isolation, logging without content, private storage);
• use the sub-processors listed in the Privacy Policy, under contracts with equivalent data protection obligations; we will announce new sub-processors at least 30 days in advance on that page, and you may object by deleting the affected KB or your account;
• help you, as far as the Service allows, to answer requests from data subjects and to meet your duties on security, breach notification and impact assessments;
• notify you without undue delay after becoming aware of a personal data breach that affects your KBs;
• delete the data when you delete the document, KB or account (see the Privacy Policy for timing);
• make available the information needed to demonstrate compliance with Art. 28 and allow reasonable audits, at your expense and with reasonable notice.

When your KB is public or shared, buyers and members who receive passages decide for themselves how they use them and are controllers for that use.

• You can stop using the Service and delete your account at any time on the Account page. Deleting it deletes your KBs and documents (see the Privacy Policy for what we keep). While Pro renews, cancel it first on the Billing page.
• We may end these Terms with you for any reason with 30 days' notice by email or in the dashboard. If we do so without cause, we refund the Pro fee for the part of the billing period after the end.
• We may restrict or suspend access, or end these Terms with immediate effect, if you seriously or repeatedly breach them, if the law or an authority requires it, or if your use puts the Service, other users or third parties at risk. Where reasonable, we warn you first and give you a chance to fix the problem. Section 8 explains how to challenge such a decision.
• Sections that by their nature should survive termination (for example on liability, payment obligations and governing law) do so.

Consumers: the statutory warranty for digital services under the Austrian Consumer Warranty Act (VGG) and the Civil Code applies; nothing in these Terms limits it.

Business customers: as far as the law permits, the Service is provided "as is" and "as available", without warranty that it is fit for a particular purpose, error-free or uninterrupted, or that results are accurate or complete.

The Free plan is provided without any warranty to the extent the law allows. Knowledge bases reproduce their sources, and we do not warrant that a source or a passage is accurate, complete or current (section 7).

• We are liable without limitation for damage caused intentionally or by gross negligence, for personal injury, and where the law does not allow liability to be limited, including under product liability law.
• Otherwise, we are not liable for damage caused by slight negligence. Towards consumers this does not apply to personal injury or to items we accepted for safekeeping.
• Towards business customers, as far as the law permits, we are also not liable for lost profit, lost data that would have been preserved by reasonable backups, indirect or consequential damage, or damage caused by content of other users, and our total liability in any 12-month period is limited to the greater of the amounts you paid us in that period and EUR 100.
• We are not responsible for third-party services the Service connects to (for example your AI client, Stripe or a sign-in provider), or for what an agent does with results.
• These limits also apply to our employees, agents and contractors.

Business customers indemnify us against third-party claims, including reasonable legal costs, that arise from their content or their breach of these Terms, provided we inform them of the claim promptly and let them take part in the defence.

We may change these Terms for valid reasons, such as new features, changes in the law or in court decisions, or to close gaps. We announce material changes at least 30 days in advance by email or in the dashboard, with the new text and what changes.

Business customers: if you keep using the Service after the change takes effect without objecting, the new Terms apply. Consumers: changes that affect the main obligations (price, scope of the Service) apply only with your express consent; for other changes we will ask you to accept the new version, and you may instead end the contract with effect from the date of the change. The current version and its effective date are always on this page.

• These Terms are governed by Austrian law, excluding its conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods (CISG).
• Consumers keep the protection of the mandatory law of the country where they habitually reside. They may sue us in Austria or in their home country, and we can only sue them in the country where they live.
• Business customers: the courts competent for [city], Austria, have exclusive jurisdiction. We may also sue at your registered seat.
• We are neither obliged nor willing to take part in dispute resolution proceedings before a consumer arbitration board, except under the DSA as described in section 8.

• If a provision of these Terms is invalid, the rest stays in force. Towards business customers, the invalid provision is replaced by a valid one that comes closest to its economic purpose.
• We may transfer these Terms to a successor that takes over the Service, after notifying you; consumers may then end the contract. You may not transfer them without our consent.
• These Terms, the buyer terms and the Privacy Policy are the entire agreement on the Service. Side agreements need text form (email suffices).
• We may contact you by email at the address of your account or in the dashboard. You can reach us by email to legal@knowjack.io or through the contact form.
• These Terms are written in English. A translation, if we provide one, is for convenience; the English version prevails, unless mandatory consumer law requires otherwise.