Terms of Service
1. Agreement and incorporated policies
These Terms govern access to the PersonaStack public site, application, APIs, hosted execution, and related services. By creating an account or using a paid Service after these Terms become effective, you agree to them and the Acceptable Use Policy. The Privacy Policy, Cookie Notice, and Consumer Health Data Privacy Policy explain data practices. An executed order form, enterprise agreement, or DPA controls over these Terms for its specific subject. These Terms control over the AUP when they conflict.
2. Definitions
Account is the credentialed access assigned to a user. Agent is a configured AI persona or external agent that can reason and take actions. AI Provider supplies a model selected by the user. Input is content submitted to an Agent. Output is content returned by an Agent or provider. User Content includes Inputs, files, prompts, configurations, memories, and other user-provided material. Integration connects a third-party service. Public Content is content a user explicitly publishes. Subscription is a paid monthly plan. Organization is a customer account administered for multiple authorized users.
3. Eligibility and accounts
PersonaStack is not limited to adults. You must comply with requirements that apply to your use, including any required parent, guardian, or other authorization. Organization users represent that they have authority to bind the organization. Administrators may manage authorized organization access. Keep registration information accurate, protect credentials, use least-privilege integration scopes, revoke compromised access promptly, and report suspected account compromise. Do not share, sell, transfer, or impersonate accounts or bypass ownership boundaries.
4. Autonomous agents and tool actions
Agents can send messages, change external systems, run code, access files, use cloud or Kubernetes tools, schedule work, and communicate with other agents. You choose tools, credentials, recipients, providers, and execution targets. Apply least privilege and supervise material actions. Inputs, Outputs, plans, and tool choices can be inaccurate, unsafe, incomplete, biased, or inconsistent.
Review before publishing, purchasing, deleting, deploying, changing access, communicating externally, or making decisions that affect a person. PersonaStack may require confirmations, impose limits, pause runs, or suspend access. It does not promise to prevent every harmful action. The Service is not an emergency service and must not be used where delay or failure can cause death, injury, or major property or environmental harm.
5. Professional and regulated use
Output is not medical, legal, financial, tax, employment, insurance, or other professional advice. Do not rely on Output alone for a consequential decision. Obtain licensed-professional and meaningful human review where required. PersonaStack is not offered as a HIPAA-compliant service and does not enter a BAA unless a separately signed enterprise agreement expressly says so. Do not submit PHI, payment-card data, education records, criminal-justice data, export-controlled data, or other specially regulated data unless expressly enabled under a signed agreement.
6. User Content, data commitment, and license
You retain your rights in Inputs and User Content. You grant PersonaStack a limited, worldwide license to host, reproduce, transmit, process, secure, and display that content only as needed to provide, support, protect, and comply with law for the Service. The license permits bounded operational copies, backups, abuse review, and legally required preservation under the Privacy Policy. It does not permit sale, rental, licensing, trading, monetization, or voluntary transfer of ownership or control of User Content. You must have all rights, notices, consents, and lawful bases needed for User Content and third-party personal data.
PersonaStack does not use User Content to train PersonaStack models without a separate revocable opt-in. Optional feedback may be used to improve PersonaStack, but feedback must not include confidential content.
7. Input, Output, and AI providers
As between you and PersonaStack, and to the extent law permits, PersonaStack assigns to you any rights it may have in Output. Output may not be protectable, unique, accurate, or non-infringing. Similar Output may be generated for others. Selected AI providers have separate terms, acceptable-use rules, data practices, quotas, availability, and output restrictions. At your direction, PersonaStack transmits selected context to that provider. PersonaStack is not responsible for provider-side changes outside its control.
8. Integrations and execution locations
You authorize PersonaStack and your Agents to access connected services within granted scopes. You must have authority over connected accounts, bots, repositories, clouds, clusters, devices, recipients, and data. Third-party terms and fees apply. PersonaStack does not control third-party availability, policy changes, revocation, API pricing, or provider-side data loss. Disconnecting stops future authorized access after revocation takes effect but cannot recall completed actions or delivered messages. Customer-controlled clusters and local Connectors remain your operational and security responsibility. PersonaStack remains responsible for its own hosted services and instructions.
8.1 Cluster Agent and Connector policy
Cluster Agent is a user-installed in-cluster component. Within the permissions selected at installation, it can perform authorized operations on selected cluster resources and handle data available through those resources. It uses an authenticated outbound session and does not create a public cluster access path. Resource cleanup and persistent-storage deletion are separate from account deletion. You must review and authorize the generated installation, permissions, network controls, logging, storage, and workload access.
Connector is a user-installed local component for a selected Hermes or OpenClaw runtime. It uses an authenticated outbound session, dispatches API-rendered prompts to the selected local runtime, returns run results and bounded status information, and updates recognized local runtime configuration. It stores required credentials locally through operating-system credential storage and an owner-only encrypted fallback when needed. The fallback key is local and protected by the operating-system account. It is not PersonaStack's KEK/DEK system. Unpairing or authenticated revocation removes Connector-managed binding credentials, but does not yet remove prior runtime configuration or backups. OS-service uninstall does not remove local state, runtime configuration backups, native runtime data, or logs. Account deletion does not yet propagate to every local Connector artifact.
9. Public catalog
Content is private unless you explicitly publish it. Publishing grants PersonaStack a license to host, display, reproduce, distribute, moderate, and make the template installable. Publishing a stack or template makes the publisher's username public with that content. An install creates an independent copy and must not transfer secrets, credentials, private memory, private run history, hidden files, webhooks, or owner identifiers. Publishers warrant they have rights and will not include secrets, unauthorized personal data, malware, unlawful content, or misleading claims. PersonaStack may label, rank, reject, unpublish, restrict, or remove content. Reports and appeals use the content reporting process.
10. Intellectual property
PersonaStack and its licensors own the Service, software, branding, and documentation except User Content. Your Subscription gives a limited, non-exclusive, non-transferable right to use the Service during its term. Do not misuse PersonaStack marks. Copyright, illegal-content, and intimate-image reports use the reporting process. Statutory security research, interoperability, and other non-waivable rights remain unaffected.
11. Subscriptions and payment
Paid plans renew monthly at the price, currency, tier, quota, and tax terms shown at checkout. Stripe processes payment details. Plan changes, credits, proration, and effective dates are shown before confirmation. You authorize recurring charges until cancellation. Cancel through billing settings before renewal to stop the next charge. Access continues through the paid period unless law, fraud, chargeback, security, or policy enforcement requires a different result. Fees are non-refundable except where checkout terms or law require a refund. Failed payment may restrict paid features after notices and any stated grace period.
12. Suspension, termination, and data access
PersonaStack may limit, suspend, or terminate access for material breach, abuse, legal risk, security risk, nonpayment, or threats to others or the Service. Where safe and lawful, PersonaStack will give notice and a chance to cure or appeal. Immediate action may be necessary for urgent harm. Account deletion is irreversible. Access ends immediately. PersonaStack starts persistent-disk cleanup immediately and completes the product-system purge after the 24-hour cleanup period and confirmed persistent-disk cleanup. Any retained record must be narrow, documented, purpose-limited, access-limited, and kept out of normal product use. Retention may occur only for legal, billing, fraud, security, or litigation needs that PersonaStack documents and time-bounds. PersonaStack does not promise a fixed export window. Terms that by nature should survive remain in effect, including payment, ownership, disclaimers, liability limits, and dispute terms.
13. Changes and service evolution
PersonaStack may change features, providers, quotas, and the Service. PersonaStack will give reasonable notice before removing a material paid feature when practical, except for security or legal emergencies. Material Terms changes receive a new version, effective date, and direct notice. If law requires renewed acceptance, continued use alone will not replace it.
14. Disclaimers
To the maximum extent law permits, the Service is provided “as is” and “as available.” PersonaStack disclaims implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement. PersonaStack does not warrant uninterrupted operation, error-free Output, prevention of all harmful actions, or compatibility with every provider. Consumer rights that cannot be waived remain in effect.
15. Liability and indemnity
Liability, excluded damages, indemnity, claim periods, dispute resolution, and statutory rights are governed by applicable law. PersonaStack does not apply a contractual limitation beyond rights and remedies available under applicable law.
16. Contact
Use the contact page for legal or support questions. Do not send secrets or full credentials. Security findings use the security reporting process.
Document record
This version is preserved at /legal/terms/2026-07-18-r7/. See the change history. Content hash: sha256:bb855925708e4881b9df5f7124f6241e3e92410d5faa801db5ef8e25752f1080.