Terms of Service · Tawa Guard

These Terms of Service ("Terms") govern access to and use of the Tawa Guard platform — our websites, dashboard, APIs, SDKs, and related services (together, the "Service"). By creating an account or using the Service you agree to these Terms on behalf of yourself and, where applicable, the organisation you represent ("you", the "Customer").

1. Who we are

The Service is provided by Tawa Guard Ltd, a company registered in England and Wales (company number 17425810) with its registered office at 66 Paul Street, London, England, EC2A 4NA ("Tawa Guard", "we", "us"). You can contact us at support@tawaguard.com.

2. The Service

Tawa Guard provides AI security tooling: the Service scans prompts, retrieved content, and agent tool traffic submitted to our APIs and returns a security verdict (allow or block, with a needs-review flag where the engine is uncertain) together with supporting signals.

The Service signals; it does not enforce. Verdicts are probabilistic classifications produced by statistical models. You remain solely responsible for how your application acts on a verdict, for the design and safety of your own systems, and for any decisions made or content generated by your applications.

3. Accounts and security

The Service is offered to businesses and professionals for business use only. By creating an account you confirm that you are acting in a business capacity and not as a consumer.
You must provide accurate account information and keep it up to date.
Sign-in is by email and password, or through a supported identity provider such as GitHub. You are responsible for the security of your password and of any identity provider account you sign in with.
Multi-factor authentication is mandatory for all accounts.
API keys are credentials. You must keep them confidential, scope them appropriately (development, staging, production), and rotate any key you believe has been exposed. You are responsible for all activity performed with your API keys.
You must be at least 18 years old and legally able to enter into this agreement.

4. Acceptable use

You must not, and must not permit others to:

use the Service to build, train, or benchmark a competing prompt-security product except as permitted by applicable law;
probe, scan, or test the vulnerability of the Service itself without our prior written consent (we welcome coordinated disclosure — contact security@tawaguard.com);
submit content you have no lawful right to process, or use the Service in violation of applicable law, including data-protection law;
circumvent usage limits, Tawa Unit metering, or environment caps;
resell or provide access to the Service to third parties except through your own applications as intended.

We may suspend access immediately where we reasonably believe an account is compromised or the Service is being abused, and will restore it once the issue is resolved.

5. Plans, Tawa Units, and billing

Usage is metered in Tawa Units. A Tawa Unit is one character scanned on the default detection engine; other engines weight each character by a published multiplier. Each request is billed at a minimum of 100 characters before engine weighting. Each workspace plan includes a monthly Tawa Unit allowance that resets on your billing anniversary. The Developer allowance is shared across all workspaces you own and resets monthly on your account's billing anniversary.
Paid plans are billed through our payment provider, Stripe. You authorise recurring charges for your selected plan and any usage-based charges you enable.
A usage budget is opt-in on paid plans: if enabled, usage beyond your allowance is billed at the published rate per Tawa Unit, up to any spend cap you configure. If no usage budget is enabled, or your plan has none, requests beyond your allowance may be rejected until the allowance resets.
Fees are exclusive of VAT and any other applicable taxes, which are added at checkout where we are required to charge them. Except where required by law or expressly stated in these Terms or a separate contract, fees are non-refundable.
Annual plans are paid upfront for a 12-month term. They renew automatically for a further 12 months unless cancelled before the renewal date. A cancellation takes effect at the end of the current term, and no refund is given for the remainder of the term.
Plan changes: upgrades apply immediately and are prorated. Downgrades and cancellations take effect at the end of the current billing period, after which the workspace moves to the Developer plan.
We may change prices with at least 60 days' notice; changes apply from your next billing period after the notice period.

6. Customer content and data protection

"Customer Content" means content you or your applications submit to the Service for scanning (prompts, retrieved chunks, tool inputs and outputs) and content you upload to optional features such as labeling datasets and knowledge buckets.
You retain all rights to Customer Content. You grant us the limited rights needed to operate the Service: to process Customer Content in order to return verdicts, to store it where a feature you use requires storage, and to generate aggregated, de-identified service metrics.
For Customer Content, we act as your data processor. Our Data Processing Agreement forms part of these Terms and describes exactly what is and is not stored. In particular, our primary /v1 scanning endpoints do not persist scanned content unless you turn on prompt retention for an app, in which case the text is kept for the period you choose, up to your plan's limit, and deleted when that period ends. Otherwise only classification metadata and outcomes are stored.
Our processing of personal data relating to your account is described in our Privacy Policy.
You are responsible for having a lawful basis for the Customer Content you submit, including any personal data it contains, and for your own obligations to your end users.

7. Intellectual property

The Service, including our models, software, documentation, and branding, is owned by Tawa Guard and its licensors. We grant you a non-exclusive, non-transferable right to use the Service in accordance with these Terms for the duration of your subscription. Feedback you provide may be used to improve the Service without obligation to you.

8. Availability and support

We aim for high availability but the Service is provided without a guaranteed uptime level unless a service level agreement is agreed in a separate contract. We may perform maintenance, and we may modify or discontinue features with reasonable notice where the change is material. Support is provided via support@tawaguard.com and the in-app help resources.

9. Disclaimers

The Service is a detection and signalling tool. No security product identifies every attack, and the Service is expressly not warranted to detect all prompt-injection, jailbreak, or other adversarial content, nor to be free of false positives. Except as expressly set out in these Terms, the Service is provided "as is" and all implied warranties are excluded to the maximum extent permitted by law. Nothing in these Terms excludes liability that cannot be excluded by law, including for death or personal injury caused by negligence, or for fraud.

10. Liability

To the maximum extent permitted by law:

neither party is liable for indirect or consequential loss, loss of profits, revenue, goodwill, or data (other than each party's data-protection obligations);
our total aggregate liability arising out of or in connection with the Service in any 12-month period is limited to the fees you paid to us in that period. Where you have paid no fees to us, our total liability is nil, except for liability that cannot be excluded by law;
these limits do not apply to your payment obligations, either party's confidentiality or data-protection obligations, or liability that cannot lawfully be limited.

11. Term, suspension, and termination

These Terms apply from your first use of the Service and continue until terminated.
You may stop using the Service at any time and may delete your workspace and account through the Service or by contacting support. Deletion is handled as described in the Privacy Policy and DPA.
We may suspend or terminate access: (a) for material breach of these Terms that is not cured within 14 days of notice (or immediately for serious abuse or unlawful use); (b) for non-payment; or (c) where we discontinue the Service, with at least 90 days' notice.
On termination your access ceases, outstanding fees become due, and stored data is deleted or returned as described in the DPA, subject to the retention carve-outs in the Privacy Policy (for example audit and financial records we are required or legitimately entitled to keep).

12. Changes to these Terms and to our policies

We update these Terms and our other policies (the Privacy Policy, Cookie Policy, and DPA) from time to time.

Notice. We will notify customers by email of any material change to these Terms or those policies, and update the "Last updated" date on the relevant page.
Acceptance. Continued use of the Service more than 30 days after notice of a change constitutes agreement to and acceptance of the updated terms or policies.
If you do not agree. If you do not accept an updated version, you must stop using the Service before the change takes effect and may close your account. Where your disagreement means we can no longer lawfully or practically continue to provide the Service to you, we may terminate the Service in line with these Terms and any contract in place between us. Depending on the terms of the applicable contract, termination on this basis may be without refund or rebate of fees already paid.

13. General

These Terms, together with the Privacy Policy, Cookie Policy, DPA, and any signed order form or contract, are the entire agreement between us. If a signed contract conflicts with these Terms, the signed contract prevails. To ask for a signed contract or bespoke terms, contact contact@tawaguard.com or your account contact.
You may not assign these Terms without our consent; we may assign them as part of a merger, acquisition, or sale of assets with notice to you.
Failure to enforce a provision is not a waiver. If a provision is found unenforceable, the remainder stays in effect.
These Terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction.

14. Contact

Questions about these Terms: contact@tawaguard.com.