Terms & Conditions

Allgemeine Geschäftsbedingungen (AGB) — Last updated: 11 June 2026

1. Scope & Parties

These Terms and Conditions ("Terms") govern your use of all products and services provided by Aurora AI Solutions Studio UG (haftungsbeschränkt), Friedhofstr. 10, 70191 Stuttgart, Germany ("Aurora," "we," "us"), currently Aurora CapacityOS — a managed service in which software agents perform defined operational work under human approval — together with any associated onboarding and pilot engagements (collectively, the "Services"). For continuity of existing accounts and historical records: the Campaign Desk and Retention Desk of Aurora CapacityOS (formerly offered as ContentPulse and ClientPulse) continue the service scope of those earlier products under these Terms. Legacy products (VeritasX, AgentForge) remain covered by these Terms for any historical charges or retained data, but are no longer offered.

By creating an account, requesting a pilot, joining the waitlist, or using any Aurora Service, you ("User," "you," the "Customer") agree to these Terms in their entirety. If you do not agree, do not use the Services.

2. Description of Services

Aurora CapacityOS is a managed service, not self-serve software. Software agents operated by Aurora perform defined operational work — preparing, executing, and reporting on marketing-campaign and client-retention tasks — under human supervision and approval. The service operates as follows:

• The Customer directs the work. The Customer (a service firm, such as an agency) selects the workflows to be run, the end-clients in scope, and the approval rules that apply.
• Delegated access. The Customer's clients grant access to their own systems (for example advertising accounts, analytics, CRM, email, or publishing platforms) through platform-native delegation methods: manager or partner account links, user roles, OAuth connections, or approval links. No passwords are shared. Each connection is attached to a specific client record and can be revoked by the granting party at any time.
• Approval gates on outward actions. Actions that take effect outside the workspace — publishing content, sending communications, changing budgets or settings in a client system — require prior approval by the designated human reviewer (the Customer or, where so configured, the Customer's client) before they are executed. Each approval — whether given by the Customer or by an end-client the Customer has authorised to approve — constitutes the Customer's binding instruction to Aurora to perform that action, and the evidence log is the authoritative record of those instructions. The Customer warrants that it is authorised to engage Aurora in respect of each end-client in scope, that it has obtained all permissions and notices its own client relationships require, and that it remains solely responsible for its contractual relationship with its end-clients.
• Evidence logging. Material agent actions, approval decisions, and outcomes are recorded in an evidence log and summarised in a capacity ledger available to the Customer.
• Work surfaces. The service is delivered through work surfaces including the Campaign Desk (campaign and marketing operations), the Retention Desk (renewal, client-health, and reporting operations), and the Flight Deck (the supervision and approval view).

Aurora reserves the right to modify, update, or discontinue features at any time. Material changes will be communicated to registered users via email with at least 14 days' notice.

3. Account Registration

You must provide a valid email address and create a password to use the Services. You are responsible for maintaining the confidentiality of your credentials and for all activity under your account.

You must be at least 16 years old to create an account. By registering, you represent that you meet this age requirement.

4. Engagement Model & Fees

Aurora CapacityOS is sold as a managed-service engagement, not as a per-seat or per-licence software subscription. Earlier subscription plans and bundles are retired; no new software subscriptions are offered. The current engagement model is:

• CapacityOS Pilot (entry engagement): a fixed 30-day pilot covering up to 3 of the Customer's real end-clients and 1 agreed workflow, including delegated client access setup, a weekly review, and a capacity ledger documenting the work performed. Pilot scope and the pilot fee are stated in the written engagement confirmation.
• Monthly capacity retainer: following a pilot, the service continues as a monthly retainer. The workflows in scope, the number of end-clients covered, and the monthly fee are stated in the engagement confirmation. The retainer renews monthly until ended under Section 11.
• Additional workflows or end-clients: priced separately and added only by written agreement.
• Legacy pay-as-you-go credits: Applicable only to historical VeritasX purchases, which are no longer offered to new customers. Existing credits remain redeemable.

Prices are stated in Euros (EUR) for Customers established in the EU/EEA and in US Dollars (USD) for Customers established elsewhere. The engagement confirmation states the applicable currency and amounts and is decisive. We reserve the right to adjust retainer pricing with 30 days' notice; an adjustment takes effect at the start of the next monthly retainer period.

No live billing yet: Aurora does not currently issue invoices or take payments (see the engagement-posture notice above). Fee terms in this Section apply from the first paid engagement once billing opens.

5. Payment & Billing

When billing is enabled, payments will be processed by Stripe, Inc. By entering a paid engagement, you authorize Stripe to charge your payment method for the agreed pilot fee or recurring monthly retainer. Aurora does not store your credit card or bank account details.

If a payment fails, we will attempt to charge your payment method up to 3 times over 7 days. If all attempts fail, the engagement will be suspended and the account moved to a read-only state. You may restore the engagement at any time by updating your payment method and settling the outstanding invoice; after 30 days of non-payment the account becomes eligible for deletion per Section 11.

All prices are exclusive of applicable taxes. VAT/sales tax will be added where required by law and calculated by Stripe Tax based on your location.

6. Right of Withdrawal (Widerrufsrecht) — EU/EEA Consumers

7. Service Availability (Uptime)

Aurora targets 99.5% monthly uptime for all Services, measured at the application level (excluding planned maintenance and third-party outages).

• Planned maintenance: We will notify users at least 24 hours in advance via in-app banner or email. Planned maintenance windows are excluded from uptime calculations.
• Unplanned outages: We will use commercially reasonable efforts to restore service as quickly as possible and will communicate status updates via our website.
• No SLA credits: At this stage, Aurora does not offer service level agreement credits for downtime. This may change as the product matures.

8. Data Backups

Aurora maintains automated daily backups of all user data via Supabase's built-in backup infrastructure. Backups are retained for 7 days. In the event of data loss, we will restore from the most recent backup.

Users are encouraged to export their own data regularly (e.g., CSV export of content pieces, voice profiles, client health records, evidence logs, or integration activity — availability varies by surface). Aurora is not liable for data loss beyond restoring from our most recent backup.

9. Intellectual Property

• Your content: You retain full ownership of all content you submit to the Services (tweets, posts, threads, text). By using the Services, you grant Aurora a limited, non-exclusive license to process your content solely to provide the requested analysis.
• AI-generated output: Analysis results, rewrites, scores, and recommendations generated by our AI ("AI Output") are provided to you for your personal or business use. You may use, modify, and publish AI Output, subject to the AI-content disclosure obligations in Section 10 (Acceptable Use) and Section 15 (Indemnification). Where Aurora applies watermarks, signatures, or machine-readable provenance metadata to AI Output for transparency, you shall not remove, alter, or obscure such identifiers.
• Aurora IP: The Services, including all software, design, algorithms, and branding, are the intellectual property of Aurora AI Solutions Studio UG. You may not reverse-engineer, decompile, or create derivative works from the Services.

10. Acceptable Use & AI-Content Compliance

You agree not to:

• Use the Services for any unlawful purpose or in violation of any applicable laws.
• Attempt to access other users' data or accounts.
• Use automated scripts, bots, or scrapers to access the Services (except via our official API, when available).
• Resell, sublicense, or redistribute access to the Services without written permission.
• Submit content that is illegal, harmful, threatening, abusive, defamatory, or infringing.
• Attempt to circumvent usage limits, authentication, or payment requirements.
• Connect, or cause Aurora to operate within, any third-party system or account that you (or the end-client granting the access) are not authorised to grant access to. Delegated access to an end-client's systems must be granted by the end-client through that platform's own delegation mechanism.

10.1 AI-Generated Content Disclosure

Where you publish, distribute, forward, share, or otherwise cause AI Output to be made available to any third party — including via social media platforms, email, websites, messaging platforms, or directly to your end-clients — you shall (a) disclose that the AI Output is AI-generated where required by applicable law, including without limitation Article 50 of the EU AI Act (Regulation (EU) 2024/1689), with the transparency obligations for in-market systems becoming enforceable 2 December 2026 (per the "Digital Omnibus" of 7 May 2026); the California AI Transparency Act (Cal. Bus. & Prof. Code § 22949.90 et seq.); Colorado SB 26-189 (effective 1 January 2027, replacing the repealed Colorado AI Act); and any equivalent disclosure obligation in a jurisdiction where the AI Output is made available; and (b) ensure that machine-readable provenance metadata generated by the Services (HTML <meta> tags, C2PA manifests on media outputs, or AI-disclosure footers on client reports) is preserved, not stripped, and not obscured.

Aurora applies Article 50 disclosure measures uniformly across all jurisdictions: AI involvement in the Services is disclosed, AI-generated artifacts carry a visible "AI-assisted / Generated by Aurora" indicator and machine-readable provenance metadata where the output format supports it, and outputs are reviewed and approved by a human before they take outward effect. Where disclosure presentation on a specific outward artifact is adjusted at the Customer's or the end-client's election, the party making that election remains responsible for any disclosure obligation applicable to that artifact under Article 50 or equivalent law.

10.2 Customer Responsibility for Applicable AI Regulations

You are solely responsible for compliance with all laws and regulations applicable to your use of the Services and to any AI Output you generate, receive, distribute, or act upon. This includes, without limitation: the EU AI Act where AI Output is used in the European Union (Article 2(1)(c)); the UK GDPR and UK Data Protection Act 2018; Canadian federal and provincial privacy law (PIPEDA and provincial equivalents); the Australian Privacy Act 1988 and any reforms thereto; the New Zealand Privacy Act 2020; US federal law and state AI transparency, automated-decision, and privacy laws (including the California AI Transparency Act, the Colorado AI Act, and applicable New York State law); and any sector-specific regulation (financial services, healthcare, employment) triggered by your use. You warrant that you will conduct any Data Protection Impact Assessment (DPIA) or AI Impact Assessment required for your specific deployment and retain records sufficient to demonstrate compliance.

10.3 Aurora's Global Launch Posture

Aurora's Services are offered globally, with EU AI Act Article 50 transparency disclosures applied uniformly across all jurisdictions. Documentation describing the AI systems used in Aurora CapacityOS and their risk classifications under each applicable framework is available on request from info@helloaurora.ai, including Aurora's current good-faith analysis that the Retention Desk's client-health profiling falls under limited-risk rather than Annex III high-risk classification (commercial firm-to-client relationships do not squarely fit any of the eight Annex III enumerated domains). Customers acknowledge that the EU AI Act Annex III high-risk obligations have been postponed to 2 December 2027 per the May 2026 Digital Omnibus.

10.4 Third-Party AI Model Providers

Aurora CapacityOS uses third-party large-language-model (LLM) providers to perform AI processing — currently Anthropic as the primary provider and OpenAI as a fallback, as listed on our Sub-processor list. You acknowledge and agree:

• Availability, rate limits, content-moderation decisions, model deprecations, and policy changes of upstream LLM providers are outside Aurora's control. Agent work may fail, be delayed, or be refused as a result; Aurora will use commercially reasonable efforts to re-route or retry affected work.
• Where a workspace is configured to run AI processing under the Customer's own provider API key (a legacy bring-your-own-key configuration carried over from the earlier product line), those calls are made directly under that key and are subject to the provider's own terms and data-handling rules in addition to these Terms; token consumption and billing for such calls are between the Customer and the provider. The credential is stored encrypted at rest, decrypted just-in-time per invocation, and never persisted in plaintext; it can be rotated or removed at any time.
• Aurora is not liable for outages, content-moderation refusals, account suspensions, rate limits, model deprecations, or billing disputes of an upstream LLM provider.

10.5 Profiling and Automated Decisions (Art. 22 GDPR Safeguard)

The Retention Desk of Aurora CapacityOS generates risk scores, predictions (such as renewal risk), and recommendations (such as save plays and renewal pitches) using AI-based profiling of the Customer's clients. These outputs are decision supports, not decisions themselves. Every client-facing outbound action — every email, every report send, every save-play kick-off, every renewal pitch — requires explicit human approval before transmission (the approval gate). The Customer retains full editorial and decisional control. This human approval gate is Aurora's primary safeguard under Article 22(3) GDPR.

10.6 Pilot & Onboarding Engagement Terms

The CapacityOS Pilot and any subsequent onboarding work are fixed-scope engagements. Unless explicitly stated otherwise in your engagement confirmation:

• Pilot scope: 30 days, up to 3 of the Customer's real end-clients, 1 agreed workflow, delegated-access setup for the in-scope client systems, a weekly review, and a capacity ledger documenting the work performed.
• Out of scope: custom feature development, custom integration builds for systems Aurora does not support, and workflows or end-clients beyond those named in the engagement confirmation.
• Out-of-scope changes mid-engagement: if you request work outside the agreed scope mid-engagement, Aurora will quote a separate change-order before performing the work. No out-of-scope work is performed without your written approval.
• Timeline: the pilot period starts on the agreed start date once the delegated-access checklist for the in-scope clients is complete. Delays caused by missing access grants, blocked credentials, or unavailable Customer or end-client stakeholders extend the timeline accordingly.
• Refunds: the pilot fee is non-refundable once pilot work has commenced. If you cancel before any work has started (i.e. before the kickoff), you may request a full refund within 14 days of payment (and a B2C consumer's right of withdrawal under §6 above also applies where relevant). If Aurora fails to perform the agreed in-scope work during the pilot period due to causes within Aurora's control, Aurora will refund the pro-rated portion of the fee corresponding to the unperformed work. See also the Refund Policy.
• Data treatment: engagement work is performed on your live workspace by Aurora staff or contractors under written confidentiality obligations. Aurora staff access to your data is logged and scoped to the duration of the engagement.

Violation of this Section 10 may result in immediate account suspension or termination.

11. Account Termination

• By you: You may end your engagement at any time via your account settings or by emailing info@helloaurora.ai. Termination takes effect at the end of the current monthly retainer period (or, for a pilot, at the end of the pilot period). You retain access until then.
• By us: We may suspend or terminate your account for violation of these Terms, with notice where practicable.
• Data after termination: Upon account deletion, your personal data will be deleted within 30 days, except where retention is required by law (see Privacy Policy, Section 8).

12. Limitation of Liability

13. Disclaimer of Warranties

14. Force Majeure

Aurora shall not be liable for any failure or delay in performing its obligations under these Terms due to circumstances beyond its reasonable control, including but not limited to: natural disasters, war, terrorism, government actions, pandemic, internet or telecommunications failures, power outages, failures of third-party AI providers (e.g. Anthropic, OpenAI), and failures of cloud infrastructure providers (Vercel, Supabase, AWS).

15. Indemnification

You agree to indemnify and hold harmless Aurora, its officers, directors, employees, and agents from any claims, damages, losses, liabilities, and expenses (including reasonable legal fees) arising out of or related to: (a) your use of the Services; (b) your violation of these Terms; (c) your violation of any third-party rights; (d) your failure to make required AI-generation or automated-decision disclosures under applicable law (per Section 10.1); (e) your use of AI Output in a manner prohibited by applicable law or this Agreement; (f) your failure to obtain any consent, notice, DPIA, AI impact assessment, or other compliance artifact required for your specific deployment; (g) your provision of delegated access, credentials, or a provider API key that you (or the granting end-client) were not authorised to provide, or your use of such access in violation of the relevant platform's or provider's terms (per Sections 2 and 10.4); (h) any claim by an end-client or other third party arising out of an action the Services performed pursuant to an approval given by you or by an end-client you authorised to approve (each such approval constituting your instruction); or (i) where the Services are or may become subject to EU AI Act Annex III high-risk obligations through your specific use (e.g. you use Retention Desk outputs to evaluate creditworthiness, employment decisions, access to essential services, or any other Annex III enumerated domain), your failure to operate the system within Aurora's documented limited-risk classification.

16. Governing Law & Jurisdiction

These Terms are governed by and construed in accordance with the laws of the Federal Republic of Germany, without regard to conflict of law principles.

The exclusive jurisdiction for all disputes arising out of or in connection with these Terms shall be the courts of Stuttgart, Germany, unless mandatory consumer protection laws of your country of residence provide otherwise.

For consumers within the EU, nothing in these Terms affects your rights under mandatory local consumer protection legislation.

17. Severability

If any provision of these Terms is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary, and the remaining provisions shall continue in full force and effect.

18. Entire Agreement

These Terms, together with our Privacy Policy and Refund Policy, constitute the entire agreement between you and Aurora regarding the Services. They supersede all prior agreements, communications, and proposals.

19. Contact

Change note (11 June 2026): Updated to reflect the consolidation of our offerings into Aurora CapacityOS.