Terms of Service

Last updated: 2026-05-10

These Terms of Service ("Terms") govern your access to and use of the SoloRiff platform, websites, APIs, embedded widgets, agents and related services (together, the "Service") provided by SoloRiff ("SoloRiff", "we", "our"). By creating an account, embedding our snippet, or otherwise using the Service, you ("Customer", "you") agree to these Terms. If you are entering into these Terms on behalf of a company or other legal entity, you represent that you have the authority to bind that entity, and "you" refers to that entity.

1. Definitions

• Affiliate means any entity that controls, is controlled by, or is under common control with a party.
• Customer Data means any data, content, knowledge sources, conversations, contact lists, audio recordings, transcripts, lead records and analytics inputs that you, your end users or your integrations submit to the Service.
• End User means any natural person who interacts with a SoloRiff widget or agent that you have embedded on a website you operate or control.
• Personal Data has the meaning given in the EU/UK GDPR and the equivalent meaning in US state privacy laws (e.g. the CCPA's "personal information").
• Documentation means the help center, public API reference and in-product guides we publish at our official URLs.

2. Account & access

You must register with accurate information and keep your credentials secure. You are responsible for activity carried out under your account, including by team members, contractors and integrations you authorise. Free trials and free plans are offered as-is, may be limited in capacity, and may be modified or discontinued with reasonable notice. You must be at least 18 years old (or the age of majority in your jurisdiction) to enter into these Terms.

3. Subscription, fees & taxes

Paid plans are billed in advance on a monthly or annual basis through our billing provider. Usage-based fees (credits, message volume, voice minutes, enrichment lookups, image generation, AI inference) are billed in arrears or against pre-purchased packs. Unless otherwise stated, all fees are exclusive of applicable taxes (VAT, GST, US sales/use taxes), which you are responsible for. One-time credit packs are non-refundable. We may suspend the Service for unpaid balances after a 7-day grace period following a failed charge. Annual plans renew automatically at the then-current rate; you may opt out of renewal in Settings → Billing.

4. Acceptable use

You agree not to:

• use the Service to send unsolicited commercial communications in violation of CAN-SPAM (US), CASL (Canada), the e-Privacy Directive (EU), the UK PECR, or any other anti-spam law applicable to you or your end users;
• impersonate any person or entity, harass end users, or run agents that fail to disclose their AI nature where disclosure is required by law (including but not limited to California's BOT Disclosure law, Cal. Bus. & Prof. Code §17940 et seq.);
• process special-category personal data under GDPR Art. 9 (health, biometric, racial/ethnic origin, political opinions, religious belief, sexual orientation, etc.) or sensitive personal information under the CCPA/CPRA without a written addendum;
• process personal information of children under 13 (US, COPPA) or under 16 (EU, where applicable under national law) without verifiable parental consent and a written addendum;
• process protected health information (PHI) subject to HIPAA without a Business Associate Addendum executed in advance;
• process cardholder data subject to PCI DSS through the Service (we are not a PCI DSS environment for cardholder data);
• use the Service to make automated decisions producing legal or similarly significant effects on a natural person without independent human review (GDPR Art. 22 / national equivalents);
• attempt to interfere with infrastructure, exceed rate limits intentionally, scrape the Service, probe for vulnerabilities outside our published security policy, or access other tenants' data;
• use the Service in violation of US export controls (EAR, OFAC sanctions), EU dual-use regulations, or any embargoed-jurisdiction restrictions; or
• reverse-engineer the Service except to the limited extent permitted by mandatory law.

5. Customer Data & content

You retain all rights to Customer Data. You grant SoloRiff a non-exclusive, worldwide, royalty-free licence to host, process, transmit and display Customer Data solely to provide, secure and improve the Service for you. You can export or delete Customer Data from the Studio at any time. Subject to legal-hold obligations, we delete Customer Data within 30 days of account closure, with the exception of billing records (retained as required by tax law) and security logs (retained up to 12 months for incident investigation).

6. AI output

The Service uses third-party large language models, speech and image generation models. AI output may contain inaccuracies, omissions or biased patterns. You are responsible for reviewing AI output before using it in contracts, regulated communications, financial advice, medical advice, legal advice, or claims to end users. You grant us a non-exclusive licence to use your inputs and outputs solely to provide the Service to you. We do not use Customer Data to train shared base models without your explicit written consent. Where the underlying model provider may use prompts or outputs for service improvement, we use the providers' enterprise / no-training endpoints by default.

7. Privacy & data protection

Our processing of Personal Data is governed by:

• the Privacy Policy;
• the Data Processing Addendum (DPA), which is incorporated by reference and forms part of these Terms where you act as data controller and SoloRiff as processor (GDPR Art. 28, UK GDPR Art. 28); and
• the CCPA/CPRA "service provider" terms set out in the DPA, where you are a "business" under California law and SoloRiff is your "service provider".

The DPA includes the European Commission's Standard Contractual Clauses (SCCs) for international transfers, the UK Information Commissioner's International Data Transfer Addendum, and Switzerland-specific terms where applicable.

8. Subprocessors & third-party services

We engage subprocessors to deliver the Service (cloud hosting, model providers, email infrastructure, analytics, payments). The current list is published in the DPA and updated as it changes. You consent to our use of subprocessors that provide at least the same level of data protection as required by these Terms and the DPA. We will give reasonable advance notice of new subprocessors via email or in-product banner; you may object on legitimate grounds within 30 days.

9. Security

We maintain administrative, technical and physical safeguards designed to protect Customer Data, including encryption in transit (TLS 1.2+ enforced) and at rest (AES-256 at the database and object-storage layers), scoped tenant isolation, role-based access control, audit logging on privileged actions, regular backups, and vendor risk reviews. We will notify affected customers without undue delay (and within 72 hours where required by GDPR Art. 33) after becoming aware of a personal-data breach materially affecting them.

10. Service levels & availability

We target high availability for the production Service but do not commit to a contractual uptime SLA on free or starter plans. Customers on paid annual plans may request a written SLA addendum with response-time commitments and credit remedies. Scheduled maintenance is announced in advance where reasonably practicable.

11. Confidentiality

Each party will protect the other's Confidential Information with the same care it uses for its own (and at least reasonable care), and will use it only to perform under these Terms. Customer Data is your Confidential Information. Confidential Information does not include information that is or becomes publicly available through no fault of the receiving party, was rightfully known before disclosure, or is independently developed without use of the disclosing party's information.

12. Intellectual property

SoloRiff and its licensors own the Service, the Documentation, all underlying software and any improvements. Subject to your compliance with these Terms, we grant you a limited, non-exclusive, non-transferable licence during the term to access and use the Service for your internal business purposes. You may provide feedback; we may use feedback without obligation, but we will not identify you as its source without your consent.

13. Term, suspension & termination

These Terms remain in force while you have an active account. You may cancel any time from Settings → Billing. We may suspend or terminate the Service for material breach (including non-payment, abuse, or security risk) with notice when feasible. Upon termination, sections that by their nature should survive (data ownership, confidentiality, limitation of liability, indemnity, governing law) will survive.

14. Warranties & disclaimers

Each party warrants that it has the right to enter into these Terms. Except as expressly stated, the Service is provided "AS IS" and "AS AVAILABLE". To the maximum extent permitted by law, SoloRiff disclaims all implied warranties, including merchantability, fitness for a particular purpose, non-infringement and any warranty arising out of course of dealing or usage of trade. Some US state laws and EU consumer laws do not allow the exclusion of implied warranties; in those jurisdictions the foregoing exclusions apply only to the extent permitted.

15. Limitation of liability

To the maximum extent permitted by law, neither party will be liable for any indirect, incidental, special, consequential, exemplary or punitive damages, or for any loss of profits, revenues, goodwill, anticipated savings or data, arising out of or related to the Service, regardless of the theory of liability and whether or not advised of the possibility of such damages. Each party's aggregate liability under these Terms is capped at the fees you paid (or were obliged to pay) for the Service in the 12 months preceding the event giving rise to liability. Nothing in these Terms limits liability that cannot be limited by law (including for fraud, gross negligence, willful misconduct or death/personal injury caused by negligence).

16. Indemnification

You will defend and indemnify SoloRiff against third-party claims arising from your Customer Data, your end users, or your breach of Sections 4 (Acceptable Use) or 11 (Confidentiality). We will defend you against third-party claims that the Service, when used as permitted, infringes a valid third-party intellectual property right enforceable in your jurisdiction, subject to customary exclusions (claims arising from your modifications, combinations with non-SoloRiff materials, use after notice to stop, etc.). Indemnification is conditioned on prompt notice, sole control of defence, and reasonable cooperation.

17. US-specific terms

If you are a US-based customer, the following additional terms apply:

• CCPA/CPRA: SoloRiff acts as your "service provider" with respect to the Personal Information of California residents; the contractual restrictions required by Cal. Civ. Code §1798.140(ag) are set out in the DPA.
• State-level privacy laws: Where applicable to you (Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, Texas TDPSA, Oregon OCPA, Montana MCDPA and others), the corresponding "processor" terms apply through the DPA.
• Telephone/SMS communications: If you use the Service to deliver telephone or SMS messages, you are solely responsible for compliance with the TCPA, FCC rules, and any state equivalents.
• Class action waiver and arbitration: Customer-class disputes shall be resolved on an individual basis. The parties waive any right to participate in a class action or representative proceeding to the extent permitted by law. Disputes (other than IP/injunctive matters) will be resolved by binding arbitration administered by the American Arbitration Association (AAA) under its Commercial Arbitration Rules, in San Francisco, California, unless the parties otherwise agree in writing.

18. EU/UK-specific terms

If you are an EU/UK-based customer, the following additional terms apply:

• GDPR / UK GDPR: the DPA forms an Article 28 processing agreement between you (controller) and SoloRiff (processor).
• International transfers: we rely on the EU Standard Contractual Clauses and the UK International Data Transfer Addendum for transfers outside the EEA/UK; supplementary measures are documented in the DPA.
• Consumer protection: nothing in these Terms restricts your statutory rights as a consumer where you qualify as one; in B2B contexts these Terms apply in full.
• Digital Services Act (EU): SoloRiff does not operate a "very large online platform"; the Service is a B2B SaaS tool.

19. Governing law & disputes

If you are based in the EU, EEA, UK, or Switzerland, these Terms are governed by the laws of Ireland and the courts of Dublin, Ireland have exclusive jurisdiction (subject to mandatory consumer-jurisdiction rules). If you are based in the United States, Canada, Latin America or Asia-Pacific, these Terms are governed by the laws of the State of California, USA, without regard to conflict-of-laws principles, and disputes are resolved per Section 17. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

20. Modifications

We may update these Terms to reflect changes in the Service, the law, or our operations. We will give reasonable advance notice of material changes via email or in-product notice. Continued use after the effective date constitutes acceptance. If you do not agree to a material change, your sole remedy is to stop using the Service and request termination before the effective date.

21. Miscellaneous

These Terms (together with the Privacy Policy, DPA and any order forms) form the entire agreement between the parties. If any provision is held unenforceable, the remainder will continue in full force. Failure to enforce a right is not a waiver. You may not assign these Terms without our written consent (except to an Affiliate or in connection with a merger, acquisition or sale of substantially all assets, with notice to us). Notices to SoloRiff must be sent to [email protected] with the subject prefix [legal].

22. Contact

Questions about these Terms? Email [email protected]. For legal notices, please use [email protected] with the subject prefix [legal].