Terms of Service

1. Acceptance of terms

By purchasing a commercial license, cloning or downloading the Claspine starter repository, integrating the @grahmur-org/claspine-client package, accessing the Claspine Atlas console (console.claspine.com), or executing builds containing Claspine platform artifacts, you ("Licensee", "Customer", or "You") agree to be legally bound by these Terms of Service and the Commercial End User License Agreement (EULA) issued by GRAHMUR OÜ ("Company", "Licensor", "We", or "Us").

If you are entering into this agreement on behalf of a corporation, limited liability company, or other legal entity, you represent and warrant that you possess the full legal authority to bind that entity to these terms.

2. License tiers and grant of rights

Claspine is commercial, source-available software. It is licensed, not sold. Subject to payment of the applicable one-time fee and continued adherence to these Terms, GRAHMUR OÜ grants you a worldwide, perpetual, non-exclusive, non-transferable commercial license to use, modify, and embed Claspine in accordance with your purchased tier:

Perpetual execution rights: Your license to operate software versions downloaded during your active 12-month maintenance window is perpetual. You are never forced to renew maintenance to keep running existing production systems. Optional annual maintenance renewals ($199/year for Founder, $799/year for Agency) grant access to the platform releases published during the renewed year. Renewals are bought in your Claspine account when you choose; they are never charged automatically.

3. Permitted use and AI-assisted development

You and your authorized engineers, contractors, and autonomous AI coding agents (including but not limited to Cursor, Claude Code, Codex, Antigravity, and similar IDE assistants) are explicitly permitted to:

• Inspect and debug: Read, audit, and debug the platform bytecode and un-obfuscated Java/TypeScript source code within your development workspaces.
• Extend and adapt: Build proprietary product modules, custom persistence stores, and domain adapters that interface with the platform through the public api packages.
• Deploy and monetize: Host applications embedding Claspine across public cloud infrastructure (AWS, Azure, GCP, Cloudflare, on-premises) and charge end-users subscription, transactional, or licensing fees.
• Private mirroring: Keep copies of the Claspine packages and versions you are entitled to in your own private, access-controlled artifact repositories or version control systems (e.g., Nexus, Artifactory, or a private GitHub or GitLab organization), so your builds do not depend on our registry.

4. Strict prohibitions and anti-redistribution

To protect the core intellectual property of GRAHMUR OÜ, you explicitly agree NOT to commit or permit any of the following actions:

• No standalone redistribution: You may not repackage, resell, sublicense, or distribute Claspine, its core platform JARs (com.grahmur:grahmur-platform-*), or the starter repository as a standalone boilerplate, scaffolding tool, competing developer framework, or software starter kit.
• No public repository publication: You may not publish the platform source code, starter repositories, or non-public build artifacts to any public registry, public Git repository, open-source repository, or public package feed.
• No standalone capability extraction: You may not extract Claspine's multi-cloud storage abstractions, cryptographic vault implementations, hash-chained audit engine, or agent guardrails to create or distribute a standalone open-source or commercial competing toolkit.
• No sharing of download tokens: Download tokens may be used only by your organization and the contractors and agents working for it (for the Agency tier, also for your clients' projects that you build). You may not publish a token or give it to a third party to obtain Claspine for its own use.
• No circumvention of build guardrails: You may not distribute derivative frameworks designed specifically to strip, bypass, or defeat the architectural isolation checks enforced by grahmur-platform-guardrails.

Any breach of this Section constitutes a material breach of contract and willful copyright infringement, terminating all license grants immediately without refund and subjecting the offending party to statutory damages and injunctive relief.

5. Claspine Atlas console and API services

If you use the managed Claspine Atlas console (console.claspine.com) or cloud management APIs:

• Account security: You are responsible for safeguarding console credentials, developer session tokens, and access rights granted to your workspace members.
• Agent keys and token budgets: Claspine Atlas enables you to issue scoped, expiring API keys for autonomous agents with token and spend caps. You are solely responsible for setting appropriate budget ceilings and revoking compromised keys.
• Bring-Your-Own-Key (BYOK): When using multi-provider AI routing, your requests authenticate against model providers using credentials supplied by you (e.g., Anthropic, OpenAI, AWS Bedrock, Google Vertex AI). You remain responsible for all third-party provider fees and compliance with provider terms.
• Agent Shield scanner: Agent Shield provides automated heuristic scanning for architectural violations and security anti-patterns. While Agent Shield identifies common vulnerabilities, a clean scan report does not constitute a legal guarantee or warranty that code is completely free of defects or security hazards.

Messaging (email and WhatsApp)

1. Claspine Atlas lets you send email and WhatsApp messages through your own provider accounts (for example Amazon SES, an SMTP service, or AWS End User Messaging for WhatsApp). You are the sender of those messages. Your provider’s terms, and for WhatsApp Meta’s WhatsApp Business Terms and Business Messaging Policy, apply to you directly.
2. You may send only: transactional messages a person can expect from their relationship with you (for example order updates, receipts, appointment reminders, security notices); or marketing messages to people who gave you the consent the law of their country requires, with a working way to unsubscribe or opt out.
3. You must not use Claspine messaging to send unsolicited bulk messages (spam), phishing, malware, messages that impersonate another person or business, or content that is unlawful where it is sent or received.
4. You are responsible for: the consent of the people you message; honouring opt-outs and unsubscribes; any registrations your messages need (for example sender registration in India (DLT), the United States (10DLC or toll-free verification) or other countries); the content of your messages and templates; and your provider bills.
5. We may suspend messaging for a project, without notice where needed to stop harm, when we receive an abuse report, a provider or Meta reports a problem, or we reasonably believe these rules are broken. We tell the project owner and restore messaging when the problem is resolved.
6. Test API keys reach only the test recipients you confirm; use them while building, so unfinished software never messages your customers.

6. Fees, payment processing, and electronic delivery

• Digital delivery method: Claspine licenses are delivered 100% electronically as soon as payment is confirmed. Your license key appears in the self-hosted area of your Claspine account (console.claspine.com/self-hosted), where you create download tokens. Your build tools use a token to download the Claspine packages (Maven and npm) from our private package registry, Claspine Packages. Download tokens are shown once and are never sent by email; payment receipts and account notices are sent by email. No physical goods are shipped.
• Your Claspine account: You are responsible for the security of your account, the download tokens you create, and the team members you invite to manage your licenses. You may revoke any token at any time. We may revoke tokens that are shared in breach of Section 4 or that are used abusively. Closing your Claspine account stops its download tokens; it does not end your right to keep running the versions you already have.
• Running versus building: Software you have deployed never needs a download token or a connection to our services to keep running. Tokens are only needed to download packages when building. Versions released during your maintenance window remain available to download with a valid token after the window ends.
• Payment handling: All credit card, debit card, and digital payments are securely processed through our authorized payment partner, Stripe Inc. GRAHMUR OÜ does not store full credit card numbers or security CVVs on our servers.
• Currencies & taxes: Prices are quoted and billed in United States Dollars (USD). Prices are exclusive of applicable value-added tax (VAT), sales tax, or goods and services taxes (GST). For corporate buyers within the European Union, reverse-charge VAT rules apply upon provision of a verified EU VAT identification number.

7. Refund, cancellation, and dispute policy

• Refund policy: Because Claspine delivers immediate, un-obfuscated digital source code, starter repositories, and software components, purchases are non-refundable once a download token has been created for the license or Claspine packages have been downloaded, except where mandatory consumer protection regulations prescribe a non-waivable statutory right. If you encounter any technical difficulty downloading the packages, contact support@claspine.com and our engineering team will assist you within one business day.
• Maintenance renewals: Self-hosted maintenance renewals are one-time purchases made in your Claspine account and are never charged automatically, so there is nothing to cancel. If you do not renew, you keep perpetual usage rights to all platform versions released through the end of your last maintenance window.
• Cancellation policy: For Claspine Atlas subscription tiers, you may cancel your subscription at any time prior to the renewal date directly through the billing portal or by emailing support@claspine.com; no future recurring charges will occur.
• Dispute resolution & inquiries: Prior to filing a formal payment dispute or chargeback with your card issuer, you agree to contact GRAHMUR OÜ at support@claspine.com or licensing@claspine.com to attempt good-faith resolution of any billing or technical discrepancy.

8. Intellectual property and data ownership

Our intellectual property: GRAHMUR OÜ retains all right, title, and interest in and to Claspine, including all patents, copyrights, trade secrets, trademarks, architecture specifications, and brand assets. Nothing in these Terms transfers ownership of the underlying platform to you.

Your intellectual property: You retain 100% ownership of your proprietary application code, business domain logic, custom database tables, product designs, customer data, and all software products created using Claspine. We claim zero ownership or royalty rights over your business applications.

9. Warranty disclaimer and limitation of liability

DISCLAIMER OF WARRANTIES: CLASPINE, THE STARTER REPOSITORIES, CLOUD SERVICES, AND ALL ASSOCIATED ARTIFACTS ARE PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE. GRAHMUR OÜ SPECIFICALLY DISCLAIMS ALL IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.

You acknowledge that Claspine is compliance-ready (providing controls designed to support SOC 2, HIPAA, and GDPR posture) but not self-certifying. You are solely responsible for auditing, securing, and certifying your own infrastructure, configurations, and customer-facing software.

LIMITATION OF LIABILITY: TO THE MAXIMUM EXTENT PERMITTED UNDER APPLICABLE LAW, IN NO EVENT SHALL GRAHMUR OÜ, ITS DIRECTORS, EMPLOYEES, OR AFFILIATES BE LIABLE FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, PUNITIVE, OR EXEMPLARY DAMAGES (INCLUDING LOSS OF PROFITS, DATA LOSS, SYSTEM OUTAGES, BUSINESS INTERRUPTION, OR THIRD-PARTY AI PROVIDER CHARGES), EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. OUR AGGREGATE LIABILITY ARISING FROM OR RELATED TO THESE TERMS SHALL NOT EXCEED THE TOTAL FEES ACTUALLY PAID BY YOU TO US IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

10. Export control and trade sanctions compliance

The Software, documentation, and cloud services are subject to European Union, United States, and international export control laws and economic trade sanctions. By purchasing, downloading, or accessing Claspine, you represent and warrant that:

• You are not located in, organized under the laws of, or resident in any country or territory subject to comprehensive EU, US, or UN trade sanctions or embargoes (including Cuba, Iran, North Korea, Syria, and the Crimea, Donetsk, and Luhansk regions of Ukraine).
• You are not identified on any denied-parties or sanctions list maintained by the European Union, the United States Government (including the OFAC Specially Designated Nationals List and Entity List), or the United Nations.
• You will not export, re-export, transfer, or use the Software for any purpose prohibited by international trade controls, including the development of chemical, biological, or nuclear weapons.

11. Governing law and dispute resolution

These Terms, and any disputes arising out of or related to them, shall be governed exclusively by the laws of the Republic of Estonia, European Union, without regard to conflict of law principles or the United Nations Convention on Contracts for the International Sale of Goods (CISG).

Any dispute, controversy, or claim arising out of or in connection with these Terms shall be subject to the exclusive jurisdiction of the Harju County Court (Harju Maakohus) in Tallinn, Estonia. If any provision of these Terms is determined by a court of competent jurisdiction to be invalid or unenforceable, that provision shall be severed and the remaining provisions shall continue in full force and effect.