Terms of Service

1. Agreement to Terms

These Terms of Service (“Terms”) constitute a legally binding agreement between you (whether individually or on behalf of an entity you represent, “Customer” or “You”) and XRAY Labs, Inc. (“XRAY”, “we”, “us”, or “our”), governing your access to and use of the XRAY Bridge software platform, web application, APIs, and related services (collectively, the “Service”).

By creating an account, connecting external tools, or accessing the Service, you represent that you have the authority to bind the Customer to these Terms. If you do not agree to these Terms, you may not access or use the Service.

2. Customer Accounts & Multi-Tenant Workspace Roles

Access to the Service requires creation of an organization workspace. The individual who creates the workspace is designated as the initial Owner. The Owner may designate Administrators and Members.

Customer is solely responsible for maintaining the confidentiality of session credentials, API keys (xrkey_v1), and OAuth connection secrets. Customer must promptly notify XRAY at security@xray.tech upon learning of any unauthorized access or compromise of workspace credentials.

3. Customer Data & Derive-and-Discard Custody

Ownership: Customer retains all right, title, and interest in and to all data, text, commitments, action items, task records, and other content submitted to or ingested by the Service (“Customer Data”). XRAY claims no ownership rights in Customer Data.

Derive-and-Discard Processing: As detailed in our Data Lifecycle Policy, XRAY Bridge operates under a strict Derive-and-Discard model (rawBufferTtlDays = 0 by default). Raw audio recordings, video streams, and complete conversational transcripts ingested from meeting bots are parsed in volatile memory into structured commitments and short supporting quotes, after which raw buffers are discarded and never retained on persistent disk.

License to Operate: Customer grants XRAY a worldwide, non-exclusive, royalty-free license to host, copy, process, and display Customer Data solely to the extent necessary to provide, maintain, and support the Service for Customer.

Zero AI Model Training: XRAY contractually warrants that Customer Data is never used to train, retrain, or improve artificial intelligence foundation models.

4. Acceptable Use Policy

Customer agrees not to misuse the Service. Specifically, Customer will not:

• Probe, scan, or test the vulnerability of the Service without prior written authorization under our Security Disclosure policy;
• Attempt to bypass or circumvent PostgreSQL Row-Level Security (RLS) tenant isolation boundaries;
• Transmit viruses, worms, Trojan horses, or malicious payloads through API endpoints or webhook channels;
• Reverse engineer, decompile, or disassemble the Service, except as permitted by applicable law;
• Resell, sublicense, or distribute the Service to third parties outside Customer’s authorized workspace members.

5. Subscription Plans, Billing & Payment

Fees: Paid plans (e.g., Pro Team, Business) are billed in advance on a monthly or annual recurring cycle via Stripe. All payment card transactions are processed directly by Stripe in compliance with PCI-DSS Level 1.

Modifications & Cancellations: Workspace Owners can manage their subscription or cancel renewals at any time via the billing portal. Cancellations take effect at the conclusion of the then-current prepaid billing period. We do not provide refunds for partial months or unused seats.

6. Data Export & Workspace Termination

Self-Serve Data Export: Workspace Owners may export their complete structured Customer Data at any time in standard JSON format via GET /api/v1/organizations/export.

Self-Serve Deletion: Workspace Owners can permanently delete their workspace and all associated Customer Data via DELETE /api/v1/organizations. Upon invocation, all memberships, tasks, decisions, brief history, and encrypted OAuth connection tokens are immediately purged from active PostgreSQL databases.

7. Limitation of Liability & Disclaimers

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE SERVICE IS PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS. XRAY DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

IN NO EVENT SHALL EITHER PARTY BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOSS OF PROFITS, DATA, OR BUSINESS INTERRUPTION, ARISING OUT OF OR IN CONNECTION WITH THESE TERMS, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

XRAY’S AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS SHALL NOT EXCEED THE TOTAL AMOUNT ACTUALLY PAID BY CUSTOMER TO XRAY UNDER THESE TERMS IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO LIABILITY.

8. Governing Law & Dispute Resolution

These Terms shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of law principles. Any legal action or proceeding arising under these Terms will be brought exclusively in the federal or state courts located in Delaware.

9. Contact & Legal Notices

All formal legal notices under these Terms should be sent to: