Terms of Service — ShadowGuard

1. Agreement

These Terms of Service ("Terms") are a binding agreement between RLS VENTURES, LLC ("ShadowGuard," "we," "us") and the organization or individual using the service ("Customer," "you"). By creating an account, connecting a workspace, or using the service at shadowguard.us, you accept these Terms. If you accept on behalf of an organization, you represent that you have authority to bind that organization.

2. The Service

ShadowGuard is a software-as-a-service platform for AI governance and security. Depending on your plan, it includes: discovery of third-party and AI applications connected to your Google Workspace or Microsoft 365 tenant; an AI system registry; risk assessments and recommended controls; evidence records; governance reports and shareable report snapshots; AI usage policy generation; and activity monitoring features (AgentGuard and MCP governance).

3. Accounts and Responsibilities

You must provide accurate registration information and keep it current.
You are responsible for safeguarding your credentials and for all activity under your account. Notify us promptly of any suspected unauthorized access.
Only connect Google Workspace or Microsoft 365 tenants that you administer or are expressly authorized to scan. Connecting a workspace requires administrator consent within that workspace.
You are responsible for the accuracy of the information your team enters into the registry, assessments, and evidence records.

4. Subscriptions and Billing

Paid plans are billed through Stripe on a monthly or annual cycle and renew automatically until canceled.
You can cancel at any time; cancellation takes effect at the end of the current billing period. Except where required by law, we do not provide refunds or credits for partial billing periods.
We may change prices with at least 30 days' notice; changes apply from your next renewal.
Prices exclude taxes, which you are responsible for where applicable.
Free tier features may be changed, limited, or withdrawn at any time.

5. Acceptable Use

You agree not to:

use the service in violation of any law or regulation;
scan, monitor, or attempt to access any workspace or tenant you do not administer or have authorization to assess;
probe, disrupt, or circumvent the service's security or rate limits, or attempt to access other customers' data;
reverse engineer, copy, or create derivative works of the service except where permitted by law;
resell, sublicense, or provide the service to third parties as a bureau service without a separate written agreement with us;
upload malicious code or use the service to develop a competing product.

6. Customer Data

You own your data. Everything your organization connects to or creates in the service — workspace scan results, registry entries, assessments, evidence records, reports, and exports — is "Customer Data" and remains yours. You grant us a limited license to host and process Customer Data solely to provide and secure the service. We do not sell Customer Data and we do not use it to train AI models. Our handling of personal data is described in the Privacy Policy.

7. Third-Party Services

The service interoperates with third-party platforms, including Google Workspace, Microsoft 365, and Stripe. Your use of those platforms is governed by their own terms, and connecting them to ShadowGuard requires authorizations you grant within those platforms. Revoking those authorizations may disable parts of the service. We are not responsible for third-party services or for changes to their APIs that affect functionality.

8. No Guarantee of Detection, Compliance, or Coverage

ShadowGuard helps you identify, document, and manage AI-related risk. It does not and cannot guarantee that every AI tool, integration, or usage in your environment will be detected. Discovery depends on the data made available by connected platforms and on the accuracy of information your team enters.

Risk scores, assessments, recommended controls, generated policies, reports, and export packets are informational starting points that require review and adaptation by your organization. Use of the service does not by itself make you compliant with any law, regulation, or framework (including the GDPR, HIPAA, SOC 2, ISO 42001, or NIST AI RMF), does not constitute a certification or audit, and does not guarantee any insurance coverage, premium, or underwriting outcome. ShadowGuard does not provide legal advice; consult qualified counsel for legal and compliance decisions.

9. Beta and Preview Features

We may offer features identified as beta, preview, or early access. They are provided as-is, may change or be discontinued at any time, and are excluded from any service commitments.

10. Availability

We use commercially reasonable efforts to keep the service available, but we do not guarantee uninterrupted operation. We may perform maintenance, and we may suspend access where reasonably necessary to protect the service or comply with law.

11. Term and Termination

These Terms apply while you use the service. You may stop using the service and cancel at any time. We may suspend or terminate your access for material breach of these Terms (including non-payment or unauthorized scanning) after notice where practicable. Upon termination, your access ends; you may export your data beforehand, and we delete Customer Data within 30 days of termination except where law requires retention. Sections 6, 8, 12, 13, and 14 survive termination.

12. Disclaimers and Limitation of Liability

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, OR DATA. OUR TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THE SERVICE IS LIMITED TO THE FEES YOU PAID US IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM. THESE LIMITS DO NOT APPLY WHERE PROHIBITED BY LAW.

13. Indemnification

You will defend and indemnify us against third-party claims arising from your breach of Section 3 or 5, including any claim that you scanned or monitored an environment without authorization.

14. Governing Law

These Terms are governed by the laws of the State of Oklahoma, United States, without regard to conflict-of-laws rules. The state and federal courts located in Oklahoma have exclusive jurisdiction over disputes arising from these Terms, except that either party may seek injunctive relief in any court of competent jurisdiction.

15. Changes and Contact

We may update these Terms. For material changes we will notify account owners by email at least 30 days before they take effect; continued use after that date constitutes acceptance.

Questions about these Terms: legal@shadowguard.us
RLS VENTURES, LLC, Edmond, OK 73013-7517

This document is provided for transparency and does not constitute legal advice.