RIL Warden · Privacy · DPA

DRAFT FOR LEGAL REVIEW. This document was prepared by Rip It Labs to describe how the service actually works. It is not legal advice and has not yet been reviewed by counsel. [bracketed items] are decisions for Rip It Labs and its attorney before this is published as binding.

Terms of Service

Effective date: [effective date] · Last updated: [date]

These Terms of Service (the "Terms") are a contract between Rip It Labs, LLC, an Arizona limited liability company ("Rip It Labs", "we", "us"), and the person or organization that uses RIL Warden ("Customer", "you"). By creating a workspace, using an access key, or otherwise using the Service, you agree to these Terms. If you are agreeing on behalf of an organization, you represent that you are authorized to bind it.

1. The Service

"RIL Warden" or the "Service" is a gateway and audit system for AI agents. Agents route their outbound web requests through Warden; Warden allows only the destinations you approve, withholds API keys from the agent, records each decision to a tamper-evident log, and lets you stop an agent. The Service includes the hosted API at warden.ripitlabs.com, the console, the SDKs, the MCP server, and, where provided, the self-hosted bundle.

2. Early access

The Service is offered in early access. It is provided as is. We do not yet commit to a uptime service level, and features may change or be withdrawn. Do not rely on the Service as the sole control protecting a system where failure would cause serious harm without your own additional safeguards. See sections 9 and 10.

3. Accounts and access keys

You are responsible for your workspace keys, member keys, agent tokens, and any activity under them. Keep them secret. Warden shows most keys only once. Notify us promptly at [email protected] if you believe a key is compromised; you can also rotate keys yourself in the console. You are responsible for configuring your agents' allow-lists, modes (monitor or enforce), and secrets correctly.

4. Acceptable use

You agree not to, and not to let your agents or users:

use the Service to break the law, or to access, attack, or interfere with any system you are not authorized to reach;
route through the Service any traffic intended to harm others, distribute malware, or exfiltrate data you have no right to;
approve destinations, or use the Service, in a way that violates a third party's rights or terms;
probe, scan, or test the security of the Service except under our security policy at /security, or attempt to reach another customer's workspace or data;
exceed, evade, or interfere with plan limits, rate limits, or other customers' use of the Service;
resell or offer the Service to third parties except under a written agreement with us.

We may suspend or limit the Service to protect it, other customers, or third parties, and will tell you when we reasonably can.

5. Plans, fees, and billing

Current plans and prices are shown at /pricing. Paid plans are billed through our payment processor (Stripe); we do not store your full card number. Unless stated otherwise:

paid subscriptions renew automatically for the same term until cancelled; you can cancel in the console and your plan remains active through the end of the paid term;
fees are stated exclusive of taxes, which you are responsible for;
fees are non-refundable except where required by law or expressly stated;
we may change prices for future terms with at least [30] days' notice; the free plan may change or end with reasonable notice;
if payment fails or an account is past due, we may downgrade or suspend paid features after notice.

6. Your data and the log

To run the Service we process records of your agents' requests (such as agent identity, destination host, method, path, sizes, timestamps, and the allow/block decision) and we store the secrets you give an agent in an encrypted vault so they can be injected toward approved hosts without the agent seeing them. Warden writes each decision to a hash-chained, cryptographically signed log, and periodically anchors a checkpoint hash to public blockchains. Only hashes are anchored; your request contents and secrets are never placed on a blockchain. How we handle this data is described in our Privacy Policy and, for business customers, our Data Processing Addendum. We do not sell your data.

As between us, you own your data and your configuration. You grant us the limited right to process it to provide, secure, and improve the Service. We own the Service itself (section 8).

7. Confidentiality

Each party may learn non-public information of the other. Each will protect the other's confidential information with reasonable care and use it only to perform under these Terms, except where disclosure is required by law.

8. Intellectual property

Rip It Labs owns RIL Warden and all related software, designs, and documentation, including any feedback you choose to give us. These Terms grant you a non-exclusive, non-transferable right to use the Service during your subscription. Self-hosted or evaluation copies are licensed separately under the license included with the bundle. "RIL Warden" and "Rip It Labs" are marks of Rip It Labs, LLC.

9. Disclaimer of warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE FULLEST EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. We do not warrant that the Service will be uninterrupted, error-free, or that it will detect or prevent every threat. Security is a shared responsibility: Warden is one control among the controls you are expected to maintain.

10. Limitation of liability

TO THE FULLEST EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS OR DATA. OUR TOTAL LIABILITY ARISING OUT OF OR RELATING TO THE SERVICE WILL NOT EXCEED THE GREATER OF THE AMOUNTS YOU PAID US IN THE [12] MONTHS BEFORE THE CLAIM OR [US$100]. Some jurisdictions do not allow certain limits, so parts of this section may not apply to you.

11. Indemnification

You will defend and indemnify Rip It Labs against third-party claims arising from your data, your configuration, or your use of the Service in breach of these Terms, except to the extent caused by us. [Confirm with counsel whether a reciprocal IP indemnity from Rip It Labs should be offered.]

12. Term and termination

These Terms apply while you use the Service. You may stop using the Service and close your workspace at any time. We may suspend or terminate access for breach of these Terms, non-payment, or to comply with law, with notice where practical. On termination, your right to use the Service ends; we will handle your data as described in the Privacy Policy and DPA. Sections that by their nature should survive (6–11, 13–14) survive termination.

13. Changes to these Terms

We may update these Terms. If a change is material, we will give reasonable notice (for example by email or in the console) before it takes effect. Continued use after the effective date means you accept the change.

14. Governing law and disputes

These Terms are governed by the laws of the State of Arizona, without regard to its conflict-of-laws rules. The parties submit to the courts located in [county] County, Arizona, unless applicable law requires otherwise. [Counsel: decide on arbitration clause, class-action waiver, and any consumer-law carve-outs.]

15. Contact

Rip It Labs, LLC · [business address] · [email protected]