Terms of Service

These terms govern use of Graphite, the managed OneCLI gateway service operated by Carbono Dev, and of this website. Where you have signed a separate engagement or service agreement with Carbono Dev, that agreement prevails over these terms to the extent they conflict.

1. The service

Graphite stores API credentials you provide, encrypts them at rest, and injects them into outbound HTTP requests made by agents you authorise, so those agents do not hold the credentials themselves. Graphite is a managed deployment of OneCLI, which is open-source software licensed under Apache-2.0.

2. Accounts

• You must provide accurate account information and keep it current.
• You are responsible for activity under your account and for the agents and access tokens you create.
• Tell us promptly at security@carbonodev.com if you suspect unauthorised access.

3. Your credentials and your responsibilities

You warrant that you are entitled to store and use the credentials you place in Graphite, and you agree not to:

• Use the service to access systems you are not authorised to access.
• Store credentials belonging to a third party without their permission.
• Breach the terms of the upstream services whose credentials you store.
• Attempt to extract another customer's data, or to disrupt, overload or reverse-engineer the service beyond what the open-source licence permits.
• Use the service unlawfully, or to facilitate unlawful activity.

4. Availability and support

We aim to keep the gateway available continuously and monitor it accordingly. Availability targets, maintenance windows, support hours and escalation paths are set out in your engagement agreement. Requests routed through an unavailable gateway fail closed: they are not retried with unprotected credentials.

5. Fees

Fees, billing period and payment terms are set out in your engagement agreement. Unless stated otherwise, fees are exclusive of applicable taxes.

6. Data protection

Our handling of personal data is described in our Privacy Policy. Where we process personal data on your behalf we do so as a processor, on your documented instructions, under the data processing terms in your engagement agreement.

7. Open source and portability

The gateway and dashboard are Apache-2.0 licensed. You may export your vault contents and audit log at any time and run the same container image yourself. Nothing in these terms restricts your rights under the Apache-2.0 licence.

8. Intellectual property

Carbono Dev retains ownership of the Graphite brand, this website and any proprietary tooling used to operate the service. You retain ownership of your data, your credentials and your configuration.

9. Warranties and disclaimer

We provide the service with reasonable skill and care. Beyond what your engagement agreement states and what applicable law requires, the service is provided "as is" and we disclaim implied warranties of merchantability, fitness for a particular purpose and non-infringement. Graphite reduces credential exposure; it does not make your agents or the services they call secure on its own.

10. Limitation of liability

To the maximum extent permitted by law, neither party is liable for indirect, incidental or consequential loss, or for loss of profit, revenue or data, and each party's aggregate liability is limited to the fees paid for the service in the twelve months before the event giving rise to the claim. Nothing limits liability for death or personal injury caused by negligence, fraud, or anything else that cannot lawfully be limited.

11. Suspension and termination

Either party may terminate as set out in the engagement agreement. We may suspend the service immediately where continued operation poses a security risk or where use breaches section 3, and will tell you why. On termination we will delete or return your vault contents and logs on request.

12. Changes

We may update these terms. Material changes will be notified to account holders by email at least 30 days before they take effect.

13. Governing law

These terms are governed by the law stated in your engagement agreement, and in its absence by the law of the jurisdiction in which Carbono Dev is established.

14. Contact