Terms of Service

Version: 0.1 (DRAFT — pending lawyer review) Effective from: TBD (post lawyer review) Last updated: 2026-05-02 Operator: Stefan Stešević, sole proprietor, trading as meandai, registered in Montenegro. Registered address: TBD (to be confirmed at company formation). Contact: legal@meandai.com

These Terms of Service (the "Terms") form a binding contract between you (the "Customer") and Stefan Stešević trading as meandai ("meandai", "we", "us"). By signing up for the meandai platform (the "Platform"), accessing the Platform, or paying any fee, the Customer accepts these Terms.

1. Definitions

• "Authorised User" means an individual to whom the Customer grants access to its tenant on the Platform.
• "Agent" means an AI agent configured within a tenant.
• "AUP" means the Acceptable Use Policy, incorporated by reference.
• "Brand Pack" means the per-tenant configuration of voice, vocabulary, forbidden phrases, and stakeholder taxonomy that customises Agent outputs.
• "Customer Data" means data submitted by the Customer or its Authorised Users to the Platform, and outputs generated by the Platform on the Customer's instructions.
• "DPA" means the Data Processing Agreement, incorporated by reference for any Customer Data containing personal data within the meaning of GDPR.
• "Fees" means the subscription fees and any usage-based fees set out in the Order Form.
• "Order Form" means the document, email, or signup-flow record that records the Customer's chosen plan, term, and Fees.
• "Personal Data" has the meaning given in Article 4(1) of the EU GDPR.
• "Privacy Policy" means the Privacy Policy.

2. The Platform

meandai provides a multi-tenant software-as-a-service platform that lets the Customer configure, run, and supervise AI agents that automate office work — including drafting communications, summarising documents, scheduling meetings, and operating connected third-party services on behalf of the Customer (the "Services").

The Platform is built on commercial AI models provided by Anthropic, OpenAI, and other Subprocessors listed in the Privacy Policy. We do not train any AI model on Customer Data.

3. Subscription, term, and renewal

3.1 The initial term, billing cadence, and Fees are set out in the Order Form. Unless the Order Form states otherwise, plans renew automatically for successive twelve (12) month terms.

3.2 Either party may decline renewal by giving written notice (email to legal@meandai.com or to the Customer's primary contact) at least 30 days before the end of the current term.

3.3 Fees are exclusive of any value-added tax, sales tax, or equivalent. The Customer is responsible for any such tax other than tax on meandai's net income.

3.4 Late payment accrues interest at the lower of 1% per month or the maximum rate permitted by law, plus reasonable collection costs.

4. Customer responsibilities

4.1 The Customer will use the Platform in accordance with the AUP.

4.2 The Customer is responsible for the acts and omissions of its Authorised Users and of every Agent configured within its tenant, including outputs generated and actions taken by Agents in Full Autonomy mode.

4.3 The Customer warrants that it has all rights, consents, and lawful bases necessary to submit the Customer Data to the Platform and to instruct the Platform to process it.

4.4 The Customer will keep its account credentials and OAuth tokens secure and will notify meandai immediately at security@meandai.com of any actual or suspected unauthorised access.

5. meandai responsibilities

5.1 meandai will provide the Platform with reasonable skill and care and in accordance with the Service Level Agreement set out in Schedule 1 (which targets 99.5% monthly uptime for the Standard plan).

5.2 meandai will maintain technical and organisational measures appropriate to the risk of the processing, as further described in the Privacy Policy and the DPA. Current measures include:

• AWS KMS envelope encryption with per-tenant data-encryption keys (DEKs);
• multi-tenant isolation enforced by Postgres row-level security (RLS) and per-tenant tool-call capability tokens;
• ingress prompt-injection filter on untrusted inputs;
• daily encrypted Postgres backups stored in Cloudflare R2 (EU region);
• continuous service-health probes and a kill switch operable from outside the platform.

5.3 meandai will use commercially reasonable efforts to detect, contain, and remediate Personal Data Breaches and will notify the Customer in accordance with the DPA.

6. Operating modes and AI risk allocation

6.1 The Platform supports three operating modes per tenant:

(a) Concierge — every outbound communication or external action requires Authorised User approval before execution.

(b) Standard — outbound actions within the fair-use limits in §3 of the AUP execute without per-action approval, but actions that exceed those limits or carry an "irreversible" classification require approval.

(c) Full Autonomy — all outbound actions execute without per-action approval. Customers selecting this mode confirm in writing that they assume responsibility for the outputs generated by Agents on their tenant.

6.2 Default mode for new tenants is Concierge. Switching to Standard or Full Autonomy is a Customer-side configuration change recorded in the audit log.

6.3 meandai does not warrant that AI-generated outputs are free of error, omission, or hallucination. The Customer is solely responsible for reviewing outputs before they are sent, published, or otherwise relied on, except where the Customer has explicitly elected Full Autonomy mode for the relevant Agent.

7. Confidentiality

7.1 Each party will protect the other party's Confidential Information with the same standard of care it applies to its own confidential information of like importance, and in any event no less than reasonable care.

7.2 Confidential Information does not include information that is or becomes publicly known without breach of this clause, was already known to the receiving party without obligation of confidence, is independently developed without use of the disclosing party's information, or is required to be disclosed by law (in which case the receiving party will give reasonable notice where lawful).

8. Intellectual property

8.1 As between the parties, the Customer owns the Customer Data, including outputs generated by Agents on the Customer's instructions, subject to any third-party rights in the underlying AI model output (which Anthropic, OpenAI and other model providers assign or license to meandai under their respective commercial terms).

8.2 As between the parties, meandai owns the Platform, including its source code, model weights it trains, prompts, agent rubrics, the Brand Synthesizer engine, and aggregated and de-identified usage statistics.

8.3 The Customer grants meandai a non-exclusive, royalty-free licence to use the Customer Data to provide the Services and to comply with its obligations under these Terms, the DPA, and applicable law.

8.4 Feedback. If the Customer provides feedback about the Platform, meandai may use it without restriction or obligation.

9. Warranties and disclaimer

9.1 Each party warrants that it has authority to enter into these Terms.

9.2 meandai warrants that it will provide the Platform substantially in accordance with the documentation. The Customer's exclusive remedy for breach of this warranty is set out in the SLA in Schedule 1.

9.3 Subject to §11, the Platform is provided "as is" and meandai disclaims all other warranties, express or implied, including merchantability, fitness for a particular purpose, non-infringement, and any warranty that AI-generated outputs are accurate, complete, current, or fit for any specific purpose.

10. Indemnities

10.1 By meandai. meandai will defend the Customer from any third-party claim that the Platform, as provided by meandai and used in accordance with these Terms, infringes any patent, copyright, or trademark right of that third party, and will pay damages and costs finally awarded by a court of competent jurisdiction or agreed in settlement, subject to the cap in §11 and to the Customer notifying meandai promptly, ceding control of the defence to meandai, and cooperating in the defence.

10.2 By the Customer. The Customer will defend meandai from any third-party claim arising from (a) the Customer's breach of the AUP, (b) the Customer Data, including any claim that the Customer Data infringes a third-party right or that the Customer lacked authority to submit it, or (c) any output generated by an Agent on the Customer's instructions in Standard or Full Autonomy mode and acted on without human review, and will pay damages and costs finally awarded by a court of competent jurisdiction or agreed in settlement.

11. Liability cap

11.1 Neither party's total aggregate liability under or in connection with these Terms — whether in contract, tort (including negligence), under any indemnity, or otherwise — will exceed the Fees actually paid or payable by the Customer to meandai in the twelve (12) months immediately preceding the event giving rise to the claim, with a floor of EUR 5,000 and a ceiling of EUR 250,000.

11.2 Neither party is liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, lost revenue, lost data, or loss of business opportunity, even if advised of the possibility.

11.3 Nothing in these Terms excludes or limits liability for fraud, fraudulent misrepresentation, gross negligence, wilful misconduct, death or personal injury caused by negligence, or any other liability that cannot be excluded or limited by applicable law.

12. Term and termination

12.1 Either party may terminate these Terms for material breach by the other party that is not cured within 30 days of written notice describing the breach in reasonable detail.

12.2 meandai may terminate or suspend the account immediately for breach of the AUP, for non-payment of Fees beyond 30 days past due, or where required by applicable law or the order of a competent court or supervisory authority.

12.3 On termination, the Customer will pay any outstanding Fees, and meandai will, on the Customer's written request received within 30 days of termination, return or delete the Customer Data in accordance with the DPA.

12.4 Sections 7 (Confidentiality), 8 (IP), 10 (Indemnities), 11 (Liability), 13 (Governing Law), 14 (Notices), and any other clause that by its nature should survive, survive termination.

13. Governing law and dispute resolution

13.1 These Terms are governed by the laws of Montenegro, excluding its conflict-of-laws rules. The UN Convention on Contracts for the International Sale of Goods does not apply.

13.2 The parties first attempt to resolve any dispute through good-faith negotiation between senior representatives.

13.3 If the dispute is not resolved within 30 days of written notice of the dispute, it is finally resolved by binding arbitration administered by the Permanent Court of Arbitration, seated in Belgrade, Serbia, in the English language, by a sole arbitrator appointed in accordance with the rules of the institution. Either party may seek interim or injunctive relief from a court of competent jurisdiction without waiving the agreement to arbitrate.

13.4 EU consumers — to the extent any Customer qualifies as a consumer under EU consumer-protection law (which is uncommon for B2B SaaS but possible for sole-trader signups) — retain the mandatory consumer-protection rights of their habitual residence and may bring proceedings in the courts of that habitual residence.

14. Notices

Notices to meandai: legal@meandai.com, with a copy to the registered address. Notices to the Customer: the email address on the Order Form, plus the contact email recorded in the Customer's tenant settings. A notice is deemed received on the next business day in the recipient's time zone.

15. Subprocessors

meandai uses the third-party subprocessors listed in the Privacy Policy. The Customer authorises these subprocessors. meandai will give the Customer at least 30 days prior notice of any new subprocessor (via email and via the in-app changelog), during which time the Customer may terminate without penalty if it has a reasonable, documented data-protection objection.

16. Changes to these Terms

We may update these Terms from time to time. Material changes will be communicated to the Customer's primary contact at least 30 days before they take effect. Continued use of the Platform after the effective date constitutes acceptance.

17. General

17.1 No assignment without the other party's prior written consent, except meandai may assign to an affiliate or to a successor in connection with a merger, acquisition, or sale of substantially all assets.

17.2 No agency, partnership, joint venture, or employment relationship is created.

17.3 Nothing in these Terms confers any benefit on a third party (Contracts (Rights of Third Parties) Acts and equivalents excluded).

17.4 If any provision is held unenforceable, the remainder remains in effect.

17.5 No waiver is effective unless in writing.

17.6 These Terms (with the AUP, Privacy Policy, DPA, Order Form, and the SLA in Schedule 1) form the entire agreement and supersede all prior discussions on the same subject matter.

Schedule 1 — Service Level Agreement

Uptime is measured as the percentage of one-minute intervals in a calendar month during which the Customer-facing API and the agent control plane respond within 5 seconds to a /health/deep probe with HTTP 200, excluding scheduled maintenance windows announced at least 48 hours in advance, force majeure, third-party AI model provider outages explicitly attributable to the model provider, and outages caused by the Customer's misuse or by Customer-side third-party integrations.

Service Credit is the Customer's exclusive remedy for SLA breach. To claim a credit, the Customer must email support@meandai.com within 30 days of the end of the affected month, with the date(s) and approximate times of the outage. Credits apply to the next renewal invoice and are non-refundable in cash.