Terms of Service

Effective date: 12 October 2026 - Last updated: 19 October 2026

These Terms of Service govern your use of the website at korely.ai and of Korely Agents Cloud: the API and the MCP server at api.korely.ai, the dashboard at agent.korely.ai, and the SDKs and the command-line tool when you use them with that service (together, the "Service"). The Service is provided by Massimiliano Martella, a sole trader established in Italy, Via della Bastia 15, 40033 Casalecchio di Reno (BO), Italy, under the name Korely ("Korely", "we", "us").

You accept these Terms when you sign in to the dashboard, when you create an account through the API (POST /v1/agents/init, directly or through korely init or an AI agent acting for you), or when you otherwise use the Service. When an account is created through the API, the party to these Terms is whoever operates the agent and holds the API key. If you use the Service for an organisation, you confirm that you can bind it, and "you" means that organisation. You must be at least 18 years old. The dashboard sign-in links these Terms and the Privacy Policy, and the API response that creates an account returns their addresses (terms_url, privacy_url). If you do not agree, do not use the Service.

Korely Agents Self-hosted is licensed separately (see "Korely Agents Self-hosted" below).

Changes to these Terms. We publish every change on this page with a new date. A change that reduces your rights or adds obligations takes effect for business customers no earlier than 30 days after we announce it on this website and by email to the accounts that have an email address. If you do not accept a change, you can close your account before it takes effect.

Korely-specific

Definitions

Account: an account of the Service, with or without a login.
API key: a secret credential that gives access to the Service on behalf of an Account, within one project and the scopes it carries.
Customer Content: the data your applications send to the Service (memories, facts, identifiers, metadata, import payloads, webhook settings) and what the Service derives from it (facts, vectors, aliases, the relation vocabulary, the audit trail).
End User: a person about whom your applications store or retrieve data through the Service.
Project and Region: each project of an Account has a region, Global or Europe, which decides which language-model provider reads its memories.
Plan: the free plan or a paid plan, as listed on the pricing page.

Limitations of Use

By using the website and the Service, you warrant on behalf of yourself, your users and other parties you represent that you will not:

modify, copy, prepare derivative works of, decompile, or reverse engineer any materials and software contained on the website or in the Service, except as the law expressly allows;
remove any copyright or other proprietary notations from any materials and software;
transfer the materials to another person or "mirror" them on any other server;
knowingly or negligently use the website or the Service in a way that abuses or disrupts our networks or any other service Korely provides, including by trying to get around rate limits, quotas or sign-up limits, for example by creating many Accounts;
use the Service to transmit or store any harassing, indecent, obscene, fraudulent or unlawful material;
use the Service in violation of any applicable law or regulation;
use the website or the Service in connection with unauthorised advertising or spam;
harvest, collect or gather data of other users without their consent; or
use the Service in a way that may infringe the privacy, intellectual property rights or other rights of third parties.

Our Acceptable Use Policy is part of these Terms.

Korely-specific

Your Account and Your API Keys

Signing in. You sign in to the dashboard with Google, Microsoft, GitHub, or an email address and a password. One email address holds one Account; signing in with another method and the same address is refused.
Accounts created without a login. POST /v1/agents/init creates an Account and an API key on the free plan, with no email address. The key does not expire. Plans, top-ups, webhooks and regions are managed from the dashboard: to use them, sign in and adopt the key, which brings that Account into the one you sign in to.
Keeping keys secret. You are responsible for keeping your API keys and your sign-in secure, and for everything done with them. The Service shows a key once, when it is created. If a key may have leaked, revoke it in the dashboard; a revoked key stops working at once.
Accuracy. Keep the email address of your Account current: it is where we send notices about these Terms and your Account.

Plans, Payment and Cancellation

What the plans cost

The free plan costs nothing and requires no card. The paid plans are billed monthly. The plans, what each includes, the monthly top-up and their prices are published on the pricing page and shown in the dashboard. The exact amount, in your currency, is shown before you pay and again on the payment page: that figure, including any VAT, is what is charged. We never move you to a bigger plan by ourselves, and we never bill usage beyond your plan.

Who charges you

Payments are handled by Polar, which acts as the reseller and merchant of record of the paid plans and top-ups. This means Polar, not Korely, is the seller for your purchase: Polar takes the payment, issues the receipt or invoice, and is responsible for applying the sales tax or VAT of your country. Polar's own terms apply to the payment itself, alongside these Terms, which govern your use of the Service. For the data it collects at checkout Polar is an independent controller under its own privacy policy; for the data Korely shares with it (your email address, your Account identifier, the plan), it processes on our behalf.

Your card details never reach Korely. We receive from Polar which plan you are on, the state of your subscription and, for a top-up, the order.

Renewal

Paid plans renew automatically at the end of each monthly period, at the price then published for your plan, until you cancel. If we change the price of a plan you are on, the new price applies from your next period, never retroactively, and we tell you before it takes effect.

Changing plan

From the Usage page of the dashboard you can move between paid plans. A move to a bigger plan applies at once and Polar charges the difference for the rest of the period. A move to a smaller plan applies from the next period.

Top-ups

On a paid plan you can buy, once a month, a top-up of additional writes for the current calendar month (UTC). Unused top-up writes end with that month. If a top-up is refunded, its writes are removed.

Cancelling

You can cancel at any time, yourself, from the Usage page of the dashboard ("Billing, invoices and cancelling", which opens Polar's customer portal). No email, no form, no phone call. Cancelling stops the next renewal and does not cut off the period you have already paid for: you keep the paid plan until that period ends, then the Account moves to the free plan. Your Customer Content stays; the limits of the free plan apply from then on.

Closing your Account is different: it ends the subscription at once, and the current period is not refunded, without prejudice to the statutory rights of consumers.

Refunds and the right of withdrawal

If you are a consumer in the European Union, you have fourteen days from the purchase to withdraw from it, under the Consumer Rights Directive. Because the paid plans are a digital service that starts immediately, you may be asked at the payment page to agree that performance begins straight away and to acknowledge that doing so ends your right of withdrawal once the service has been fully performed.

Requests for a refund or a withdrawal go to Polar, which took the payment and is the seller of record. Write to support@korely.ai if you would rather start with us: we will put you in touch and follow it through.

If a payment fails

If Polar ends your subscription because a payment did not go through, the Account moves to the free plan. Nothing is deleted and nothing is owed: you can subscribe again whenever you want.

Korely-specific

Limits and Protection of the Service

Rate limits. Each plan has ceilings on requests per minute, per hour and per day. Past a ceiling the API answers 429 rate_limit_exceeded with a Retry-After header.
Monthly quotas. Each plan includes a number of writes and queries per calendar month (UTC) and a number of named agents. The figures, how writes are counted, the grace margin above them and the warning before you reach them are published on the pricing page. Past the quota and its grace, the API answers 429 quota_exceeded until the month resets, you buy a top-up or you move to a bigger plan, and nothing is written in the meantime.
Protection from abnormal costs. Korely may pause model processing to protect the Service from abnormal costs (an emergency stop), for example those caused by a fault or an attack. In ordinary use each Account is bounded by its plan and top-ups, not by the use of other Accounts. During a pause memories are still stored and are processed afterwards; a request that needs a language model at once (for example writing or correcting a fact) may be refused and can be retried.
No service level. We do not offer a standing service level agreement. We work to keep the Service available, but it can be interrupted for maintenance, for updates, or by failures of our providers.

Korely-specific

Customer Content and Your Responsibilities as Controller

Ownership and licence

You retain all rights in your Customer Content. We claim no ownership of it. You grant us a non-exclusive, worldwide, royalty-free licence to host, copy, process, transmit and display your Customer Content only as needed to provide the Service to you, to keep it secure, and to comply with the law. This licence ends when your Customer Content is erased, except for copies in backups until they expire. This clause replaces any broader licence in the general terms of these Terms.

We do not publish your Customer Content, we do not share it with other customers, we do not use it for advertising or marketing, and we do not use it to train or improve any model.

You are the controller of End User data

When your applications store personal data of End Users or of other people in the Service, you are the controller of that data under the GDPR and Korely is your processor under Article 28 GDPR. We process it only on your documented instructions, which are these Terms, the configuration you choose (projects, regions, webhooks) and the API calls your applications make, and under our Data Processing Agreement, which is incorporated into these Terms by reference and is available at privacy@korely.ai.
You are responsible for having a lawful basis under Article 6 GDPR for every piece of personal data you send, and for informing your End Users, including that, in projects of the Global region, their data is read by Google's Gemini API, which may process it outside the EU.
Special categories of personal data (for example health data) are allowed. Before you send them, you must have a lawful basis under Article 9 GDPR and you must sign our Data Processing Agreement, by writing to privacy@korely.ai. We recommend the Europe region for such data.
You choose the region of each project. Data is stored in the EU in both regions; choose the Europe region to keep model processing in the EU too.
You answer your End Users' requests to exercise their rights. The Service gives you the means: reading what is stored about an End User, correcting it, and erasing it.
Do not send data you have no right to process, including content covered by professional secrecy (for example legal or medical confidentiality) unless you hold that privilege and your use complies with its rules.

Acceptable content

Your use of the Service must comply with the Acceptable Use Policy and with the Gemma Prohibited Use Policy (see "Third-Party Model: Gemma" below). In particular, you must not use the Service to build covert profiles of people, to monitor people without their knowledge where the law requires it, or to store content that is unlawful where you or your End Users are.

Korely-specific

AI Processing of Customer Content

Korely uses third-party language-model providers ("AI Providers") for one task: when a memory is written, an AI Provider reads it to extract facts. The AI Provider receives the text of the memory; the identifier the Customer's application gives the End User the memory is about (we recommend an opaque identifier rather than a name or an email address); up to the ten previous memories of the same End User in the same project, each cut to 300 characters, read so that a word like "she" or "that plan" can be resolved and never extracted themselves; the earlier facts a new fact is compared with, to decide whether one replaces another; and the phrase of a relation that End User has not used before, with a value, to place it in that End User's vocabulary. There is a vocabulary for each End User of a project, learned from that End User's facts alone; an End User's facts and values never reach another End User's prompts. The example value the model reads next to a relation (one line, at most 160 characters) and whether a relation holds one value at a time come from that End User's own facts. Erasing a memory removes the example values its facts alone gave; erasing an End User removes their whole vocabulary. Searches, context requests and other reads do not call an AI Provider. Search vectors are computed on our own server by EmbeddingGemma and are not sent to any AI Provider.
The region of the project decides the AI Provider, with no fallback from one region to the other:
1. Global (the default): Google's Gemini API (Google LLC and its affiliates), acting as our sub-processor. Google may process and cache the request in any country where it has facilities, including the United States, under the Standard Contractual Clauses and, where available, the EU-US Data Privacy Framework.
2. Europe: gpt-oss-120b, run by Scaleway SAS in Paris, France, acting as our sub-processor. The model step stays in the EU.
By using the Service you acknowledge that:
1. under Google's Gemini API terms, Google does not use prompts and responses to improve its products, and keeps them for 55 days to detect and prevent violations of its Prohibited Use Policy, during which flagged content may be reviewed by authorised Google staff;
2. under Scaleway's terms, Scaleway stores no prompts or responses, except the content of a request that causes an abnormal error or that Scaleway detects as malicious, kept temporarily to investigate it (up to two weeks for an error), and uses none of it to train models;
3. Korely keeps Customer Content and what the Service derives from it on its own infrastructure at Hetzner in Helsinki, Finland, until it is erased.
Accuracy. Facts extracted by a language model can be inaccurate, incomplete or out of date, and the comparison of facts can replace a fact that should have stayed current. You are responsible for checking the output before relying on it for any decision, including legal, medical, financial or other consequential decisions. Korely makes no warranty as to the accuracy, completeness or reliability of AI output.
Automated decisions (Article 22 GDPR). Korely takes no decision about you or your End Users that produces legal or similarly significant effects. If your application uses facts from the Service to take such decisions about people, you are responsible for complying with Article 22 GDPR and any similar law.
MCP clients and other applications. You can connect MCP clients (for example Claude Code, Cursor or Codex) and any other application to the Service with an API key. An application holding your key reads and writes what the key allows. Korely is not responsible for how such applications store, process or share data they obtain with your key; review their policies before you connect them. Revoking the key in the dashboard cuts their access at once.
Webhooks. Webhook events are sent to the addresses you register. They carry identifiers, not the text of memories.
The complete and current list of AI Providers and other sub-processors is published at korely.ai/subprocessors.html and is part of these Terms. We announce a new sub-processor there at least 30 days before it starts processing personal data.

Korely-specific

AI Transparency: EU AI Act

Korely Agents is a component that developers build into their own AI systems. It uses language models to extract facts from the memories it receives; it does not converse with your End Users and does not generate content for them.
If you build an AI system that interacts with people or generates content for them, you are responsible for the transparency obligations that apply to your system, including those of Article 50 of Regulation (EU) 2024/1689.
Korely does not operate, and you must not use the Service for, any practice prohibited by Article 5 of that Regulation, such as social scoring, emotion recognition in the workplace or in education, or biometric categorisation. If you intend to use the Service as part of a high-risk AI system under Annex III of that Regulation, tell us before you do.
To report an AI output that caused harm or that you believe is unlawful, write to privacy@korely.ai.

Korely-specific

Third-Party Model: Gemma

Korely uses EmbeddingGemma, a model made by Google LLC and provided under the Gemma Terms of Use, to compute search vectors on our servers. You shall not use the Service for any use restricted by the Gemma Prohibited Use Policy, which is incorporated into these Terms by reference. Korely grants no rights in the model beyond those you receive under the Gemma Terms of Use.

Korely-specific

Data Subject Requests

Any person, including an End User whose data is in a customer's Customer Content, may write to privacy@korely.ai to exercise their rights under Articles 15 to 22 GDPR or equivalent laws.
Where the request concerns your Account data, we answer directly within the legal deadline (one month under Article 12(3) GDPR).
Where it concerns Customer Content, we pass it to the customer concerned, who is the controller, and assist them in answering, as processor.
We may verify the identity of the requester before disclosing or changing any personal data.
Where we cannot fulfil a request without the customer's cooperation, we give the customer a reasonable deadline to respond. If the customer does not respond, we may take appropriate protective action, including restricting the processing of the disputed data, to comply with the law.
Everyone has the right to lodge a complaint with a supervisory authority. For Korely, whose operator is established in Italy, the lead authority is the Garante per la protezione dei dati personali (garanteprivacy.it).

Korely-specific

Account Closure and Deletion of Customer Content

Erasing. The Service erases data physically when you call DELETE /v1/users/{end_user_id}/memories (one End User in the key's project), DELETE /v1/agents/{agent_id} (one agent identifier), DELETE /v1/memories/{id}?erase=true (one memory), when you delete a project with erasure, or when you close the Account. Each erasure returns an audit identifier, whose record keeps counts, never the content; in that record and in the audit trail the End User's identifier is replaced by a keyed pseudonym, which is still personal data (see the Privacy Policy, section 9). Erasing a project returns one, for the project, and files a record under the pseudonym of each of its end users.
Forgetting. DELETE /v1/memories/{id} and forgetting or correcting a single fact take the memory or fact out of default reads but keep them in the database as history until an erasure, which for one memory is DELETE /v1/memories/{id}?erase=true, or the closure of the Account. Use an erasure when the law requires that data be deleted.
Closing your Account. You can close your Account at any time: from the Account page of the dashboard for an Account with a login, or with DELETE /v1/account?confirm=true for an Account created without a login. The closure is immediate and cannot be undone: every memory, fact, vector, API key, project, webhook and audit record of the Account is deleted from the live database, the sign-in user is deleted, and the customer record at Polar is deleted and anonymised, which also ends any subscription at once (unless Polar attached the checkout to a customer record it already had under another identifier: that record is not deleted, the Account's subscriptions end, and our operator reviews it by hand). The current period is not refunded, without prejudice to the statutory rights of consumers. Encrypted backups keep a copy for up to 35 days, after which it is gone. We keep for 10 years a record that the Account was erased, with no content and no readable email address (Privacy Policy, section 10), and the records that Polar and we must keep by law.
Export. Before closing, you can read your Customer Content through the API, page by page through its list routes.

Right to Suspend and Terminate

We may suspend or terminate your access to the Service, or close your Account, upon written notice to you, for a breach of these Terms or of the Acceptable Use Policy, for non-payment, or where the law requires it. Where the breach is serious (for example abuse that threatens the Service or other customers, or unlawful content), we may suspend access immediately and tell you afterwards. Unless the law prevents it, you have 30 days from our notice to export your Customer Content before we erase it.

Intellectual Property

The intellectual property in the website, the documentation and the software of the Service is owned by or licensed to Korely and is protected by copyright and trademark law. We grant you permission to download one copy of the materials on the website for personal, non-commercial transitory use, and to use the SDKs and the command-line tool under the licences they are published with. This is a licence, not a transfer of title, and it ends automatically if you breach these Terms. If you send us feedback or suggestions, we may use them without obligation to you.

Korely-specific

Korely Agents Self-hosted

Korely Agents Self-hosted is the same software, installed and run by the customer on its own infrastructure. It is provided under a separate written agreement between you and Korely (order form and Self-hosted terms), which governs access to the software and its updates, setup and support, and under the licence in the LICENSE file distributed with the software (the Business Source License 1.1, with the Additional Use Grant stated there). The terms of the third-party model it can download are in licenses/GEMMA-TERMS.md of the same distribution. These Terms apply to Self-hosted customers only for their use of the website and of the Service. A Self-hosted installation sends nothing to Korely (Privacy Policy, section 14).

Liability

The website, the Service and the materials on them are provided on an "as is" basis. To the extent permitted by law, Korely makes no warranties, expressed or implied, and disclaims all other warranties, including implied warranties or conditions of merchantability, fitness for a particular purpose, or non-infringement of intellectual property or other rights.

In no event shall Korely or its suppliers be liable for any consequential loss suffered or incurred by you or any third party arising from the use of, or the inability to use, the website, the Service or the materials, even if Korely or an authorised representative has been notified, orally or in writing, of the possibility of such damage. In these Terms, "consequential loss" includes any consequential loss, indirect loss, real or anticipated loss of profit, loss of benefit, loss of revenue, loss of business, loss of goodwill, loss of opportunity, loss of savings, loss of reputation, loss of use, and loss or corruption of data, whether under statute, contract, equity, tort (including negligence), indemnity or otherwise.

Cap for business customers. Korely's total liability to a business customer for all claims arising out of or relating to the Service is limited to the fees that customer paid for the Service in the one month before the event giving rise to the claim.

Free plan. The free plan is provided as is and free of charge, and Korely is not liable for damages arising from its use.

What these limits do not cover. None of these limitations applies to damage caused by wilful misconduct or gross negligence (article 1229 of the Italian Civil Code), or to any other liability that cannot be limited or excluded by law, and nothing in these Terms limits the mandatory rights of consumers. Because some jurisdictions do not allow limitations on implied warranties, or limitations of liability for consequential or incidental damages, some of these limitations may not apply to you.

Accuracy of Materials

The materials on the website are not comprehensive and are for general information only. Korely does not warrant or make any representation concerning the accuracy, likely results or reliability of the use of the materials on the website, or of any resources linked to it.

Links

Korely has not reviewed all the sites linked to its website and is not responsible for their content. A link does not imply endorsement, approval or control by Korely. Use of any linked site is at your own risk.

Severance

Any term of these Terms which is wholly or partially void or unenforceable is severed to the extent that it is void or unenforceable. The validity of the rest of these Terms is not affected.

Governing Law

These Terms are governed by the laws of Italy. Business customers irrevocably submit to the exclusive jurisdiction of the courts of Bologna, Italy. Consumers keep the rights described in the next section.

Korely-specific

Dispute Resolution: EU Consumers

If you reside in a European Union Member State and qualify as a consumer under EU law, please first contact us at support@korely.ai so we can try to resolve your complaint directly and in good faith.

The European Commission's Online Dispute Resolution (ODR) platform, established by Regulation (EU) 524/2013, ceased operations on 20 July 2025 and is no longer available. For cross-border consumer disputes within the EU you can seek free assistance from the European Consumer Centres Network (ECC-Net).
We are not currently bound to any specific alternative dispute resolution (ADR) body, but we will engage in good faith with any competent consumer ADR entity where required by mandatory local law.
Nothing in this clause limits your right to bring proceedings before any court of competent jurisdiction in your Member State of residence under Article 18 of Regulation (EU) 1215/2012.
This clause applies only to consumers. Business customers are bound by the Governing Law clause above.

For consumers outside the EU, the Governing Law clause applies, and any dispute may be brought before the competent court where you reside to the extent mandatory local consumer protection law allows.

Contact

For any questions regarding these Terms of Service, please contact us:

Korely Legal Team
Support: support@korely.ai
Privacy: privacy@korely.ai
Operator: Massimiliano Martella (sole trader)
Address: Via della Bastia 15, 40033 Casalecchio di Reno (BO), Italy

These Terms of Service were generated using GetTerms.io as a base template and customised with Korely-specific clauses (highlighted in indigo) for accurate disclosure of our memory service, AI processing and data handling.

← Back to Korely