1. Agreement

These Terms of Service ("Terms") are an agreement between Promptic GmbH ("Promptic", "we", "us", or "our") and the person or organization that accesses or uses Promptic ("Customer", "you", or "your"). If you use Promptic on behalf of an organization, you represent that you have authority to bind that organization and that the organization is responsible for your use.

Promptic is intended only for business, professional, freelance, research, educational, or organizational use. By signing up for, accessing, or using Promptic, you confirm that you use the service in that capacity and agree to these Terms. If you do not agree, do not use the service.

You may use Promptic only if you are legally capable of entering into these Terms. If you use Promptic for an organization, you must be authorized to act for that organization. If a signed order form, master services agreement, data processing agreement, or other written agreement between Promptic and Customer expressly conflicts with these Terms, the written agreement controls for that Customer to the extent of the conflict.

2. Service

Promptic provides software for prompt optimization, AI evaluation, experiment management, tracing, observability, collaboration, and related workflows. We may add, change, suspend, or discontinue features as the service evolves, provided that we do not materially reduce core paid functionality during an active paid subscription without a reasonable transition path.

3. Accounts and organizations

• You must provide accurate account, organization, billing, and contact information.
• You are responsible for maintaining the confidentiality of credentials and API keys.
• You are responsible for all activity under your account, organization, workspaces, API keys, and integrations.
• Organization admins are responsible for assigning roles, removing former users, and managing workspace access.
• You must notify Promptic promptly if you suspect unauthorized access or compromise.
• You may not sell, rent, share, transfer, or sublicense account access, API keys, or workspace access except to authorized users within your organization.

4. Customer content

"Customer Content" means prompts, chat messages, input variables, datasets, observations, expected outputs, schemas, traces, spans, events, metadata, files, feedback, evaluations, model inputs and outputs, and other content submitted to or generated through Promptic.

You retain ownership of Customer Content. You grant Promptic a limited, worldwide, non-exclusive right to host, process, transmit, display, copy, analyze, and use Customer Content only as needed to provide, secure, support, and improve Promptic, comply with law, and enforce these Terms.

• You must have all rights, permissions, notices, and legal bases needed to submit and process Customer Content through Promptic.
• You must not submit special category data, criminal-offence data, protected health information, payment card numbers, government identifiers, secrets, or other highly sensitive data unless Promptic has expressly agreed to that use in writing.
• You are responsible for reviewing model outputs and deciding whether they are suitable for your use case.

5. AI processing and model providers

Promptic may send Customer Content to AI model providers selected or configured for a workspace, experiment, evaluation, trace analysis, or other AI feature. Platform OpenAI processing uses Promptic's OpenAI project configured for Europe and OpenAI API data controls, including no default training on API inputs and outputs and Modified Abuse Monitoring for eligible API processing.

If you enable optional OpenRouter routing, configure your own API key, Google, Azure OpenAI, custom OpenAI-compatible endpoint, or another provider, you instruct Promptic to send Customer Content to that provider for the selected model operation. You are responsible for reviewing provider-specific terms, privacy commitments, retention, training settings, data residency, and transfer safeguards before enabling or configuring the provider.

6. Acceptable use

You must not use Promptic to:

• Violate law, third-party rights, privacy rights, intellectual property rights, or contractual obligations.
• Attempt unauthorized access, probing, scanning, scraping, credential abuse, or security testing without written permission.
• Upload malware, exploit code, malicious payloads, or content designed to disrupt systems.
• Overload, interfere with, reverse engineer, or bypass limits of the service.
• Resell, white-label, benchmark for competitive purposes, or use Promptic to build a competing product without written permission.
• Remove attribution, obscure source identifiers, or misrepresent Promptic-generated outputs as independently verified, legally approved, or production-safe without your own review.
• Use Promptic for unlawful surveillance, biometric identification, social scoring, or other prohibited AI uses.
• Submit data you are not permitted to process or transmit to selected AI providers.
• Use outputs as the sole basis for legal, medical, financial, employment, housing, credit, insurance, or similarly significant decisions about individuals.

7. APIs, rate limits, and integrations

Promptic may provide APIs, tracing endpoints, API keys, webhooks, SDKs, command-line tools, or integration features. You must use them only as documented and only for your authorized account, organization, or workspace.

• Promptic may apply rate limits, quota limits, spending limits, abuse controls, and technical restrictions to protect reliability, security, and cost controls.
• You may not share API keys with unauthorized parties, embed secret keys in client-side code, or use API credentials to access data outside your authorization.
• You are responsible for third-party integrations, customer-configured model providers, API keys, service accounts, webhooks, and automation that you configure or instruct Promptic to use.
• Promptic may suspend or throttle integrations, API calls, jobs, or traces that create security, legal, abuse, availability, or excessive-cost risk.

8. Billing and payments

Paid plans, usage-based charges, credits, spending limits, taxes, payment methods, subscriptions, invoices, and customer portal operations are handled through Stripe and Promptic's billing systems. You authorize Promptic and Stripe to charge the applicable payment method for fees, taxes, usage, and renewals associated with your account or organization.

9. Privacy, DPA, and security

Promptic processes personal data as described in the Privacy Policy, Cookie Notice, Subprocessors, and Security and TOMs pages. If Promptic processes Customer Personal Data as a processor or sub-processor, the Data Processing Addendum applies to that processing.

10. Intellectual property

Promptic and its licensors own the service, software, documentation, website, designs, trademarks, and all related intellectual property. Except for the rights expressly granted in these Terms, no rights are transferred to you.

You may provide feedback or suggestions. Promptic may use feedback without restriction or obligation, provided that we do not disclose your confidential information or Customer Content contrary to these Terms.

11. Confidentiality

Each party may receive non-public information from the other party. The receiving party will use confidential information only to perform under these Terms, protect it using reasonable care, and disclose it only to personnel, advisors, contractors, and service providers who need to know and are bound by confidentiality obligations. Confidentiality obligations do not apply to information that is public, independently developed, already known without restriction, or lawfully received from a third party.

12. Third-party services

Promptic integrates with third-party services, including AI model providers, OAuth providers, email services, monitoring providers, hosting providers, databases, storage, and Stripe. Third-party services are governed by their own terms. Promptic is not responsible for Customer-configured third-party services or for the acts or omissions of providers you choose, configure, or instruct us to use.

13. Availability, maintenance, and force majeure

Promptic aims to provide a reliable service, but we do not offer a service-level agreement unless it is included in a signed order form or written agreement. The service may be unavailable, delayed, degraded, or interrupted because of maintenance, deployments, security work, abuse prevention, capacity limits, customer configuration, third-party provider outages, model-provider errors, network failures, force majeure events, legal requirements, or circumstances outside Promptic's reasonable control.

Promptic is not responsible for failures or delays caused by Customer Content, customer-selected providers, customer infrastructure, customer API keys, third-party model providers, payment processors, hosting providers, email providers, monitoring providers, internet providers, or other services outside Promptic's reasonable control.

14. Disclaimers

Promptic is provided on an "as is" and "as available" basis except as expressly stated in a written agreement. We do not warrant that the service or AI outputs will be uninterrupted, error-free, secure against all threats, or suitable for every use case. AI outputs may be inaccurate, incomplete, biased, unsafe, or unsuitable. You are responsible for human review and for decisions made using the service.

15. Liability

Nothing in these Terms limits liability where limitation is not permitted by law, including liability for intent, gross negligence, injury to life, body, or health, mandatory product liability, guarantees expressly assumed, or fraudulent concealment of a defect. For slight negligence, Promptic is liable only for breaches of material contractual obligations whose fulfilment is essential for the proper performance of the contract and on whose compliance Customer may regularly rely; in that case, liability is limited to typical, foreseeable damages. Subject to the preceding sentences and to the extent permitted by law, Promptic is not liable for indirect damages, lost profits, lost revenue, lost data, business interruption, or damages caused by Customer Content, Customer-selected providers, or unauthorized use of credentials.

Subject to the preceding paragraph and to the extent permitted by law, Promptic's total aggregate liability arising out of or relating to the service and these Terms is limited to the amounts Customer paid to Promptic for the affected service during the 12 months before the event giving rise to liability. If Customer used only free services, Promptic's total aggregate liability is limited to EUR 100. Multiple claims do not expand these limits.

16. Customer indemnity

To the extent permitted by law, Customer will defend, indemnify, and hold harmless Promptic, its affiliates, officers, employees, contractors, and service providers from third-party claims, damages, fines, penalties, costs, and reasonable legal fees arising from Customer Content, Customer's use of the service, customer-selected providers, unauthorized use of credentials, violation of these Terms, violation of law, or alleged infringement or misappropriation of third-party rights by Customer Content or Customer's instructions. Promptic will promptly notify Customer of the claim and reasonably cooperate, and Customer may not settle a claim in a way that imposes obligations on Promptic without Promptic's prior written consent.

17. Suspension and termination

You may stop using Promptic at any time. Promptic may suspend or terminate access if you materially breach these Terms, create security or legal risk, fail to pay fees, use the service unlawfully, or if suspension is needed to protect Promptic, users, customers, or third parties. After termination, Promptic will delete or retain data as described in the Privacy Policy and DPA.

Where practical and lawful, Promptic will provide reasonable notice before suspending or terminating paid services for non-payment or ordinary breach. Promptic may suspend immediately where needed to address security risk, unlawful use, service abuse, third-party provider requirements, or material risk to Promptic, customers, users, or others.

After termination, Customer should export Customer Content promptly using available product functionality or by contacting Promptic. Unless a different period is stated in a written agreement, Promptic may disable access at termination and target active-system deletion or anonymization of Customer Content within 90 days after verified deletion, termination, or loss of need, subject to legal, tax, accounting, security, backup, dispute, and DPA retention requirements.

18. Changes

We may update these Terms from time to time. If changes are material, we will provide at least 30 days' notice through the product, by email, or by another reasonable method unless changes are legally required, security-related, limited to new features, or non-material. Continued use after the effective date of updated Terms means you accept the changes. If you do not agree, you must stop using the service before the updated Terms take effect.

19. Governing law and venue

These Terms are governed by the laws of Germany, excluding conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods. To the extent permitted by law, the courts of Frankfurt am Main, Germany have jurisdiction.

20. Miscellaneous

These Terms, together with the Privacy Policy, DPA where applicable, order forms, and any written agreement that expressly applies, are the entire agreement for the service. If any provision is unenforceable, the remaining provisions remain in effect. A party's failure to enforce a provision is not a waiver. Customer may not assign these Terms without Promptic's prior written consent, except in connection with a merger, reorganization, or sale of substantially all assets if the assignee agrees to these Terms and is not a competitor of Promptic. Promptic may assign these Terms in connection with a merger, reorganization, sale of assets, financing, or change of control.

21. Contact

Questions about these Terms can be sent to hello@promptic.eu.