Terms of Service

By accessing or using BLAZLE (the "Service"), operated by Kolerr Lab ("Company", "we", "us", or "our"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree to all of these Terms, you may not access or use the Service.

These Terms apply to all users, including those who access the Service without a registered account, as well as registered users with a Hacker, Pro, or Enterprise plan.

BLAZLE is a real-time API security gateway designed to intercept, evaluate, and block potentially harmful content generated by AI coding agents (including but not limited to Cursor, GitHub Copilot, and autonomous SWE agents). The Service provides:

• In-flight scanning of LLM prompts for secrets, PII, and policy violations • Real-time evaluation of shell commands for destructive or privilege-escalating operations • Scanning of AI-generated code diffs for hardcoded credentials before commit • A web dashboard for rule management, audit logs, API key administration, and billing • An AI Copilot assistant for security policy configuration (Pro and Enterprise plans)

The Service is provided "as is" and may be updated, modified, or discontinued at any time.

Registration To access protected features of the Service, you must create an account by providing a valid email address and password, or by authenticating via a supported OAuth provider (GitHub or Google). You are responsible for maintaining the confidentiality of your credentials.

Organizations Each registered account may be associated with one organization. Organization owners are responsible for all activity that occurs under their organization, including actions taken by team members they invite.

Account Accuracy You agree to provide accurate, current, and complete information during registration and to update such information to keep it accurate. We reserve the right to suspend or terminate accounts that we reasonably believe contain false information.

Minimum Age You must be at least 16 years of age to use the Service. By creating an account, you represent that you are at least 16 years old.

You agree to use the Service only for lawful purposes and in accordance with these Terms. You agree not to:

• Use the Service to scan, intercept, or proxy data you do not own or have explicit authorization to process • Attempt to bypass, reverse-engineer, or circumvent the gateway's security mechanisms • Use the Service to facilitate any illegal activity, including unauthorized computer access • Upload or transmit malware, ransomware, or any malicious code through the Service API • Share your API keys publicly or allow unauthorized parties to use your quota • Resell, sublicense, or white-label the Service without express written permission from Kolerr Lab • Conduct load testing or stress testing against the Service infrastructure without prior written consent • Use automated means to scrape or extract data from the dashboard UI

Violation of these terms may result in immediate suspension or termination of your account without refund.

Upon account creation, you may generate API keys (prefixed sk_live_) to authenticate programmatic requests to the BLAZLE gateway. You are solely responsible for:

• Keeping your API keys confidential and not exposing them in public repositories, client-side code, or logs • Revoking any key that you believe may have been compromised via the dashboard • All API calls made using your credentials, whether authorized by you or not

BLAZLE implements zero-log payload storage — we do not record the content of requests processed through your API key. However, metadata (timestamp, quota consumed, risk score, treatment action) is stored and attributed to your organization.

Plans The Service is offered on the following subscription tiers: Hacker (free), Pro Developer ($20/month), and Enterprise (custom pricing). Features and monthly request quotas are defined per plan and subject to change with 30 days' notice.

Stripe Processing All payments are processed by Stripe. By providing payment information, you authorize us to charge your payment method on a recurring monthly basis for the applicable subscription fee. Kolerr Lab never stores full card numbers or CVV codes.

Quotas Your monthly intercept quota resets on the first day of each calendar month. Unused quota does not roll over. When your quota is exhausted, requests pass through unscanned unless you have overage billing enabled or purchase PAYG credits.

Top-up Credits You may purchase additional request credits on a pay-as-you-go basis at a rate of $0.0001 per request (minimum $10 per purchase). Credits are non-refundable and expire 12 months from the date of purchase.

Refunds Subscription fees are non-refundable except as required by applicable law or at our sole discretion. If you believe you were charged in error, contact us within 30 days of the charge at lab.kolerr@kolerr.com.

Cancellation You may cancel your subscription at any time from the billing dashboard. Your plan will remain active until the end of the current billing period.

Our IP The Service, including all software (including the Rust engine), interfaces, documentation, and content, is owned by Kolerr Lab and protected by intellectual property laws. Nothing in these Terms grants you any right to use our trademarks, logos, or brand names without prior written consent.

Your Data You retain all ownership of any data, prompts, commands, or code you submit through the Service. By using the Service, you grant Kolerr Lab a limited, non-exclusive license to process your submitted data solely for the purpose of providing the security scanning service described herein.

Feedback Any feedback, suggestions, or ideas you provide to us about the Service may be used by us without restriction or compensation to you.

Your use of the Service is also governed by our Privacy Policy, which is incorporated into these Terms by reference. Our Privacy Policy describes how we collect, use, and share information about you when you use the Service. By agreeing to these Terms, you also agree to the Privacy Policy.

Key privacy points: • Payload content is never written to disk (zero-knowledge architecture) • Only SHA-256 hashes of blocked payloads are stored for deduplication • Your personal data is never sold to third parties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

Kolerr Lab does not warrant that: • The Service will be uninterrupted, error-free, or completely secure • Any particular request will be correctly identified as harmful or benign by the scanner • The Service will detect all security threats or prevent all data leaks

The security scanner is designed as a defensive layer, not a complete security solution. You remain responsible for your overall security posture.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL KOLERR LAB BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING WITHOUT LIMITATION LOSS OF PROFITS, DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES, RESULTING FROM:

• Your use of or inability to use the Service • Any security breach or unauthorized access to your account • Any content obtained through the Service • Any conduct or content of any third party on the Service

OUR TOTAL LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE WILL NOT EXCEED THE AMOUNT YOU PAID TO US IN THE 12 MONTHS PRECEDING THE CLAIM, OR $100, WHICHEVER IS GREATER.

You agree to defend, indemnify, and hold harmless Kolerr Lab and its officers, directors, employees, and agents from and against any claims, damages, obligations, losses, liabilities, costs, or debt arising from:

• Your use of and access to the Service • Your violation of any term of these Terms • Your violation of any third-party right, including any copyright, property, or privacy right • Any claim that your use of the Service caused damage to a third party

We may terminate or suspend your account and access to the Service at our sole discretion, without notice, for conduct that we believe violates these Terms or is harmful to other users, us, third parties, or for any other reason.

Upon termination, your right to use the Service immediately ceases. Your data will be deleted within 30 days of account termination, subject to our data retention obligations under applicable law. Provisions of these Terms that by their nature should survive termination shall survive, including but not limited to: ownership provisions, warranty disclaimers, indemnity, and limitations of liability.

These Terms shall be governed by and construed in accordance with the laws of the Singapore, without regard to its conflict of law provisions.

Any dispute arising out of or relating to these Terms or the Service shall first be attempted to be resolved through good-faith negotiation. If the dispute cannot be resolved through negotiation within 30 days, the parties agree to submit to binding arbitration in Singapore in accordance with the Singapore International Arbitration Centre (SIAC) rules.

Nothing in this section shall prevent either party from seeking injunctive relief in a court of competent jurisdiction to protect its intellectual property rights.

We reserve the right to modify these Terms at any time. Material changes will be communicated via email to registered users and by posting a notice on our website at least 14 days before the change takes effect. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the new Terms.

If you do not agree to the modified Terms, you must stop using the Service before the changes take effect.

For questions about these Terms, please contact:

Kolerr Lab Email: lab.kolerr@kolerr.com Website: https://blazle.io/contact