Terms of service
These Terms govern access to Mandrel’s SaaS platform by [Company legal name — legal review] (“Mandrel”, “we”). They apply to each organization subscribing to the Services (“Customer”) and individuals granted access (“Authorized Users”). They work together with the Privacy policy.
Last updated:
Requires legal review: indemnities, governing law, jurisdictional venue, liability caps, warranty carve-outs, HIPAA/Export/AI addenda, and SLA credits must be finalized with counsel before reliance.
Agreement & eligibility
By registering, accepting an invitation, or using the Services after notice, Customer and each Authorized User bind to these Terms. You represent authority to enter agreements for your organization. Authorized Users must meet age thresholds (generally 18+ or higher if local law demands) and lawful eligibility for processing categories your organization introduces.
Access & admin-provisioned accounts
Customer administrators control invitations, role assignments, SSO enablement (when purchased), session policies, and revocation. Mandrel may augment self-registration invitations when Customer enables it. Administrators must maintain accurate rosters and deactivate former employees promptly.
Customer obligations for data & AI
- Customer warrants lawful collection, sufficiently clear notices, honoring data subject rights routed through Customer.
- Lawful use includes refraining from exporting restricted data into AI features without appropriate controls and contracts.
- Mandrel inferencing (e.g., Gemini) is not legal advice, medical advice, or authoritative compliance sign-off—humans review outputs.
- Customer acknowledges automated workflows can alter data; test in non-production partitions where available before broad activation.
Acceptable use
- No infringing, abusive, deceptive, discriminatory payloads or attempts to degrade Services.
- No interference with telemetry, metering, cryptography, quotas, impersonation safeguards, penetration without written consent.
- No mining Mandrel-hosted assets for unsolicited marketing or phishing.
- Optional API tokens obey published rate envelopes; abusive automation may incur suspension.
Credential & account security
Authorized Users safeguard passwords, SSO sessions, workstation posture, phishing awareness, segregation of privileged roles, and secrecy of bearer tokens/export links. Credential sharing violates these Terms absent explicit written carve-outs Mandrel publishes.
Intellectual property & license
Mandrel retains rights to software, schemas, tooling, aggregated de-identified metrics, goodwill, logos. Customer retains Customer Data stored in Collections. Subject to timely payment/compliance Mandrel grants a non-transferable (except negotiated affiliates), revocable licence to web interfaces/SDKs described in Orders. Feedback may seed improvements royalty-free absent separate written exclusions.
Confidentiality
Each party protects non-public information learned through the engagement using commercially reasonable measures no less stringent than protections for similarly sensitive proprietary data—with carve-outs mirroring statutes for compelled disclosure.
Warranties & disclaimers (**requires legal review**)
Except as expressly warranted in negotiated Order Forms, Mandrel delivers Services **“AS-IS”**, disclaiming statutory or implied warranties (merchantability/fitness/non-infringement) to the fullest extent permitted in [Customer jurisdiction — finalize with counsel]. Mandrel depends on subprocessors enumerated in disclosures; disruptions beyond reasonable control constitute force-majeure style releases only if contractually permissible.
Limitation of liability (**requires legal review**)
To the fullest extent permitted, aggregated liability excludes indirect/consequential damages and caps direct damages at the greater of fees paid trailing twelve months or [currency placeholder]. carve-outs apply only if mandatory law forbids disclaimers—for example death/personal injury from gross negligence—to be tuned by jurisdiction counsel.
Termination & suspension
Customer may cancel Orders per contract. Mandrel suspends materially breaching workloads (illegal content, existential security risk, overdue balances per agreement) giving notice when safe. Survival sections (confidentiality, liability limits where allowed, disclaimers, dispute choices) endure where applicable alongside data-return/destruction obligations per DPA/order.
Governing law & venue (**requires legal review**)
Mandatory exclusive venue and governing statutes should cite [Company jurisdiction / preferred arbitration body]; align with SCCs/regulatory overlays for international Customers.
Changes to terms
Mandrel publishes refreshed Terms referencing “Last updated” dates. Material adverse changes garner additional notice modalities (banner, email administrators) proportional to contractual definitions. Continued login after communicated effective dates manifests assent absent contrary statutory dictates.
Contact
support@mandrel.cloud — contractual routing. support@mandrel.cloud — commercials. Security coordination: security@mandrel.cloud.
Privacy cross-reference
Personal Data practices—including subprocessors Google Gemini/infrastructure carriers, retention, subprocessors-change methodology, international safeguard discussions—sit in our Privacy policy.