Terms & Conditions

Allgemeine Geschäftsbedingungen (AGB) — Last updated: 21 July 2026 · Deutsche Fassung

1. Scope & Parties

These Terms and Conditions ("Terms") govern the services provided by Aurora AI Solutions Studio UG (haftungsbeschränkt), Friedhofstr. 10, 70191 Stuttgart, Germany, registered at Amtsgericht Stuttgart under HRB 805284, USt-IdNr. DE463430205 ("Aurora," "we," "us").

Aurora's service is Aurora CapacityOS — a managed service in which Aurora builds and operates AI-agent workflows that perform defined routine operations for the customer (for example, processing incoming customer emails and documents, checking them against the customer's own records with cited sources, and preparing reply drafts), always subject to explicit human approval before anything leaves the system (together with any related setup, onboarding, and support work, the "Services").

By entering an engagement with Aurora (see Section 3) or using any surface Aurora provides to you, you ("Customer," "you") agree to these Terms. Aurora's Services are directed at businesses (Unternehmer within the meaning of § 14 BGB). Where a consumer (§ 13 BGB) exceptionally uses the Services, the mandatory consumer provisions referenced in Section 12 apply in addition.

2. The Service

Aurora CapacityOS is delivered as a combination of:

• Agent workflows, built and operated by Aurora for the Customer, that carry out an agreed routine operation end to end — reading incoming messages and documents, checking them against the Customer's own reference material with named, cited checks, requesting missing items, and preparing reply drafts.
• The approval surface (cockpit), where the Customer's designated reviewers see each prepared action, its step-by-step run log with sources, and approve, edit, or reject it. No client-facing message is sent without explicit human approval. Each approval names the recipient before sending.
• A learning loop: corrections and rejection reasons given by the Customer's reviewers are distilled into standing rules the workflow follows from then on. These rules are visible to and editable by the Customer.
• Run records: every workflow run is traced step by step (what was read, what was checked, what was drafted, who approved) and retained as part of the service record.

The specific workflows in scope, the mailboxes or channels they watch, the reference material they use, and the reviewers who approve are defined per engagement (Section 3). Aurora may improve the underlying engine, models, and infrastructure at any time, provided the contracted service scope is maintained.

3. Engagements, Offers & Conclusion of Contract

Aurora's Services are contracted through an individual written offer or engagement confirmation (including offers issued via our invoicing platform or by email — each an "Offer"). Content on helloaurora.ai is an invitation to enquire, not a binding offer. A contract is formed when the Customer accepts an Offer in text form or when both parties sign an engagement document.

Current engagement forms include:

• Pilot engagement: a fixed-scope, fixed-fee initial engagement on one agreed workflow with the Customer's real cases, as specified in the Offer (duration, scope, fee, and any crediting of the pilot fee against a subsequent subscription).
• Monthly subscription: ongoing operation of the agreed workflows for a monthly fee stated in the Offer, renewing monthly until terminated under Section 10.
• Project engagement: a fixed-scope build or delivery project, structured in milestones as specified in the Offer.

Where an Offer contains terms that deviate from these Terms, the Offer prevails for that engagement. Aurora does not publish list prices; fees are quoted individually.

4. Fees, Billing & Taxes

• Payment methods. Recurring subscription fees are collected via our payment provider Stripe. One-off fees (pilots, projects, milestones) are payable by invoice, by the due date stated on the invoice. Aurora does not store your credit-card or bank-account details; payment data is processed by Stripe (see the Privacy Policy).
• Taxes. All fees are net of statutory VAT (Umsatzsteuer), which is added at the applicable rate. Aurora's USt-IdNr. is DE463430205 and appears on every invoice.
• Late payment. Statutory default rules apply (§§ 286, 288 BGB). Aurora may suspend the Services for accounts with overdue undisputed invoices after reasonable notice.
• Fee changes. For subscriptions, Aurora may adjust the monthly fee with at least six weeks' notice to the end of a monthly period; the Customer may terminate as of the date the change takes effect.
• Refunds. See the Refund Policy, which forms part of these Terms.

5. Customer Obligations & Cooperation

• Access and materials. The Customer provides, in the agreed form, the mailbox or channel access, reference documents, and business rules the workflow needs (Section 6). The Customer is responsible for the accuracy of the material it provides; the workflows check incoming cases against this material.
• Reviewers. The Customer designates the persons authorised to approve, edit, or reject prepared actions and keeps their access credentials confidential. Actions of designated reviewers are attributed to the Customer.
• Timely review. Prepared actions wait at the approval gate until decided. Service outcomes that depend on the Customer's review (e.g. same-day replies) require the Customer to decide pending items in reasonable time.
• Lawful use. The Customer uses the Services only for lawful purposes and in compliance with obligations that apply to the Customer's own business (professional rules, sector regulation, marketing/consent law for any outbound content the Customer approves).

6. Mailboxes, Delegated Access & Authority

Depending on the engagement, workflows either (a) operate on Aurora-provided workflow mailboxes to which the Customer directs the relevant traffic, or (b) operate under access the Customer grants to its own systems (e.g. a mailbox, folder, or label). For any access the Customer grants:

• the Customer warrants that it is entitled to grant that access and to have the contracted operations performed on the data reachable through it;
• where data of the Customer's own clients ("end-clients") flows through a workflow, the Customer warrants that its relationship with those end-clients permits this processing, and remains the responsible party toward them;
• the Customer can revoke granted access at any time; revocation may suspend the affected workflow until access is restored.

Every approval given by a designated reviewer constitutes the Customer's binding instruction to Aurora to carry out the approved action (e.g. send the approved reply to the named recipient). Aurora is not responsible for the business content of an action the Customer approved, provided Aurora executed it as approved.

7. AI Transparency & Responsible Use (EU AI Act, GDPR Art. 22)

• Human in the loop. The Services prepare drafts and recommendations; they do not take client-facing actions autonomously. The human approval gate is the operative safeguard under Art. 22(3) GDPR: no solely automated decision with legal or similarly significant effect is made about any person.
• Machine-readable marking. Messages sent through the Services carry machine-readable markers identifying them as AI-assisted and human-reviewed, in line with Article 50 of the EU AI Act (Regulation (EU) 2024/1689).
• Risk classification. Aurora's good-faith assessment is that the Services as offered are limited-risk AI systems under the EU AI Act. Documentation supporting this assessment is available on request from info@helloaurora.ai.
• Prohibited uses. The Customer must not use the Services for purposes that would place them in a high-risk category under Annex III of the EU AI Act — in particular, the Customer must not use workflow outputs to make automated decisions on creditworthiness, insurance eligibility or pricing, employment, or access to essential services. The Services perform document intake and preparation, not scoring or automated approval/denial. If the Customer wishes to operate near such a boundary, it must agree the setup with Aurora in writing first.
• Onward disclosure. Where the Customer distributes AI-assisted output to its own audiences, any additional disclosure duties that apply to the Customer remain the Customer's responsibility.

8. Data Protection

Aurora processes personal data in accordance with its Privacy Policy. Where Aurora processes personal data on the Customer's behalf in operating the workflows, the parties conclude a data processing agreement (Auftragsverarbeitungsvertrag, AVV) pursuant to Art. 28 GDPR — either by signing Aurora's standard Data Processing Agreement or an individually agreed AVV referenced in the Offer. The current sub-processor list is published at helloaurora.ai/sub-processors.

9. Intellectual Property

• Aurora's technology. The engine, workflow designs, prompts, checks, evaluation methods, cockpit software, and all improvements to them remain Aurora's property. The Customer receives a non-exclusive, non-transferable right to use the provided surfaces for the duration of the engagement.
• Customer material. The Customer's data, documents, and reference material remain the Customer's. Aurora uses them only to deliver the contracted Services.
• Outputs. Approved outputs produced by the workflows for the Customer (e.g. sent replies, prepared records) may be used freely by the Customer in its business. Learned rules distilled from the Customer's corrections are part of the Customer's workflow configuration; Aurora does not use one customer's rules, documents, or data to serve another customer.
• Feedback. General suggestions about the Services may be used by Aurora to improve them, without obligation.

10. Term & Termination

• Pilot and project engagements end when their scope is delivered, or as stated in the Offer.
• Subscriptions renew monthly. Either party may terminate a subscription in text form with effect from the end of the current monthly period, unless the Offer specifies a different notice period or minimum term.
• Termination for cause (fristlose Kündigung aus wichtigem Grund) remains unaffected for both parties.
• Consequences. On termination, Aurora deactivates the workflows, and data handling follows Section 8 and the DPA (return or deletion of Customer personal data, subject to statutory retention duties). Fees for periods already started are handled per the Refund Policy.

11. Availability, Support & Changes

• Aurora operates the Services with continuous automated monitoring and alerting and restores service disruptions without undue delay. Unless a service level is expressly agreed in the Offer, Aurora does not guarantee a specific uptime percentage.
• Planned maintenance is announced in advance where it affects the Customer's workflows.
• Support is provided by email at info@helloaurora.ai on German business days.
• Aurora may modify these Terms for the future with at least six weeks' notice in text form; if the Customer does not object before the change takes effect, and Aurora pointed out this consequence in the notice, the change is deemed accepted for ongoing subscriptions. Material changes to an agreed engagement scope always require the Customer's consent.

12. Consumer Right of Withdrawal (Widerrufsrecht)

If, exceptionally, a Customer is a consumer in the EU/EEA (§ 13 BGB), the statutory 14-day right of withdrawal applies (§ 355 BGB). For services, the right of withdrawal expires when the service has been fully performed, or — for ongoing services — when performance has begun with the consumer's explicit prior consent and acknowledgement of the loss of the withdrawal right (§ 356(4), (5) BGB). Details and the withdrawal procedure are described in the Refund Policy.

13. Warranty & Liability

• Nature of AI output. The Services use large language models. Aurora engineers the workflows with named checks, cited sources, evaluation, and mandatory human review precisely because model output can contain errors. The Customer's review at the approval gate is part of the contracted operating model, not an optional extra.
• Unlimited liability applies for intent (Vorsatz) and gross negligence (grobe Fahrlässigkeit), for injury to life, body, or health, under the Produkthaftungsgesetz, and where a guarantee was expressly given.
• Simple negligence. For slight negligence, Aurora is liable only for breach of essential contractual obligations (Kardinalpflichten — obligations whose fulfilment makes the proper execution of the contract possible in the first place and on whose fulfilment the Customer regularly relies), and in that case limited to the foreseeable damage typical for this type of contract, capped at the total fees paid by the Customer for the Services in the twelve (12) months preceding the event giving rise to the claim.
• Exclusions. Subject to the above, liability for indirect damage, lost profits, and loss of data that would have been avoided by reasonable data backup on the Customer's side is excluded. Aurora is not liable for the business content of actions the Customer approved (Section 6), or for the consequences of inaccurate or incomplete material provided by the Customer.
• The above limitations also apply in favour of Aurora's legal representatives and vicarious agents (Erfüllungsgehilfen).

14. Indemnity

The Customer indemnifies Aurora against third-party claims, including reasonable legal defence costs, arising from (a) the Customer's breach of these Terms; (b) access grants the Customer (or an end-client authorised by the Customer) was not entitled to give; (c) claims by an end-client or other third party arising out of an action the Services performed pursuant to an approval given by the Customer or by a reviewer the Customer authorised (each such approval constituting the Customer's instruction); or (d) the Customer's use of outputs in violation of applicable law, including the prohibited uses in Section 7. The indemnity does not apply to the extent the claim is caused by Aurora's own breach of these Terms or of applicable data protection law.

15. Confidentiality & Force Majeure

Each party protects the other party's confidential information (including the Customer's business data and Aurora's technical and commercial information) at least with reasonable care, uses it only for the engagement, and discloses it only to persons who need it and are bound to confidentiality. Statutory disclosure duties remain unaffected. This obligation survives the end of the engagement.

Neither party is liable for failure or delay caused by circumstances beyond its reasonable control (force majeure), including natural disasters, war, government actions, pandemic, telecommunications or power failures, and outages of third-party AI or cloud infrastructure providers, provided the affected party informs the other and mitigates where reasonably possible.

16. Final Provisions

• Governing law: the law of the Federal Republic of Germany, excluding the UN Convention on Contracts for the International Sale of Goods (CISG). For consumers, mandatory protections of their state of habitual residence remain unaffected.
• Jurisdiction: where the Customer is a merchant (Kaufmann), a legal entity under public law, or has no general place of jurisdiction in Germany, the exclusive place of jurisdiction is Stuttgart, Germany.
• Text form (e.g. email) satisfies any writing requirement in these Terms unless statute requires stricter form.
• Severability: if a provision of these Terms is or becomes invalid, the remainder stays in force; the invalid provision is replaced by the statutory rules.
• Entire agreement: these Terms, the applicable Offer, the Refund Policy, the Privacy Policy, and — where concluded — the DPA/AVV constitute the entire agreement for the engagement.

17. Contact