Cirra AI

cirra_primary
Menu

Terms of Service

Last Updated: May 20, 2026

These Terms of Service (the "Terms") govern your access to and use of the software, websites, and services made available by Cirra AI, Inc., a Delaware corporation with offices at 2261 Market Street STE 10421, San Francisco, CA 94114 ("Cirra AI," "we," "us"). By accessing or using the Services, you ("Customer," "you") agree to these Terms. If you are entering into these Terms on behalf of an organization, you represent that you have authority to bind that organization, and "you" means that organization.

If you have a separately signed master agreement with Cirra AI covering the Services, that agreement controls and supersedes these Terms with respect to the Services covered by it.

1. The Services

"Services" means our cloud software, including the Cirra AI MCP Server for Salesforce administration, the skills library, related APIs, our websites (including cirra.ai), and documentation. We grant you a non-exclusive, non-transferable, non-sublicensable, revocable, limited license to access and use the Services during your Subscription Term for your internal business purposes, subject to these Terms and payment of fees.

You select a Subscription Plan (free, paid, or trial) through self-serve checkout or an Order; the features, usage limits, and fees of that Plan apply.

You are responsible for ensuring that only your employees, contractors, or agents authorized by you ("Authorized Users") access the Services, that each uses their own credentials, and that they comply with these Terms. Do not share credentials, allow third parties to use your account, or resell or lease access.

Free, trial, and beta features are provided "as is" and may be modified, suspended, or discontinued at any time. Sections 7 and 8 apply with full force.

2. Acceptable Use

You will comply with all applicable laws in your use of the Services, including data protection, export control, and anti-corruption laws. You will not:

3. Customer Data and Content

"Customer Data" means data you or your Authorized Users submit to or have processed through the Services. You retain all rights, title, and interest in Customer Data. You are responsible for its accuracy, quality, legality, and the lawful basis on which you provide it.

You may submit prompts, files, queries, and other inputs to the Services ("Inputs") and receive outputs ("Outputs"). To the extent permitted by applicable law, you retain ownership of Inputs and own Outputs generated for you; to the extent any rights in Outputs would otherwise vest in Cirra AI, we assign them to you. Outputs may be similar or identical to outputs generated for other customers, and we make no representation that Outputs are unique.

We will not use Customer Data, Inputs, or Outputs (together, "Customer Content") to train, fine-tune, or improve any foundation, general-purpose, or shared machine-learning model, and we contractually prohibit our subprocessors and AI Providers from doing so for Customer Content submitted via API. We may use technical information that does not include Customer Content — such as usage telemetry and aggregated, de-identified data — to operate, secure, and improve the Services.

AI Outputs are probabilistic and may be inaccurate, incomplete, biased, outdated, or otherwise inappropriate. Outputs are not legal, financial, security, or other professional advice. You are responsible for reviewing Outputs before relying on them, applying them to production systems, or using them to make decisions, and for configuring approval workflows where available.

AI Providers (Anthropic, OpenAI, and similar foundation-model and AI-client providers) are third parties whose models and clients interoperate with the Services. Their own terms govern your direct relationship with them. We are not responsible for AI Providers' services, availability, or actions.

4. Data Processing

This Section 4 applies where we process personal data on your behalf in connection with the Services and constitutes a written data-processing agreement under Article 28 of the GDPR and equivalent laws. "Data Protection Laws" means the data-protection and privacy laws applicable to our processing of personal data under these Terms, including the GDPR, the UK GDPR, and the CCPA/CPRA. Other capitalized terms not defined here have the meanings given in applicable Data Protection Laws.

Roles. You are the Controller (or Processor for your own clients' data) and we are the Processor. Under CCPA/CPRA, we act as a Service Provider and not as a "third party," and the parties intend that no "sale" or "sharing" of Personal Information occurs under these Terms.

Scope. Subject matter: provision of the Services. Duration: term of these Terms plus any retention period. Nature and purpose: processing necessary to deliver, support, and secure the Services. Data subjects: your employees, contractors, customers, prospects, and end users. Categories: business contact details, account and authentication identifiers, Salesforce metadata that may include personal data, support communications, and other data you submit.

Our obligations. We will: (a) process personal data only on your documented instructions, including as set out in these Terms, except as required by law; (b) ensure personnel are bound by confidentiality; (c) maintain technical and organizational measures consistent with our Privacy Policy; (d) provide reasonable assistance, taking into account the nature of processing, with data subject requests and your obligations under Articles 32–36 GDPR or analogous provisions; (e) notify you without undue delay after becoming aware of a Personal Data Breach affecting your personal data and provide information reasonably available to us to help you meet your notification obligations, as required by applicable law; (f) make available to you the information reasonably necessary to demonstrate compliance with this Section 4 and allow for and contribute to reasonable audits and inspections, primarily through then-current third-party audit reports, security questionnaires, or comparable documentation, and if that information is insufficient to demonstrate compliance, cooperate with one additional audit or inspection per 12-month period on reasonable prior written notice, during business hours, at your expense, and subject to appropriate confidentiality, security, and scope limitations; and (g) promptly inform you if, in our opinion, an instruction violates applicable Data Protection Laws.

Subprocessors. You provide general written authorization for us to engage subprocessors as listed at https://cirra.ai/legal/subprocessors. We will impose data-protection obligations on each subprocessor that are no less protective than the obligations applicable to us under this Section 4 to the extent applicable to the services the subprocessor performs. We will update that list at least 30 days before any new or replaced subprocessor begins processing your personal data. You are responsible for monitoring the list. You may object on reasonable data-protection grounds within that period; if we cannot resolve the objection, your sole remedy is to terminate the affected Subscription Plan before the new subprocessor begins processing, with a pro-rata refund of pre-paid fees for the unused term.

International transfers. Where we transfer personal data from the EEA, UK, or Switzerland to a country without an adequacy decision, the parties incorporate by reference the European Commission's Standard Contractual Clauses (Modules Two and Three, as applicable) and, for UK transfers, the UK International Data Transfer Addendum. For Swiss transfers, references in the SCCs to GDPR are deemed to include the FADP and references to Member States are deemed to include Switzerland. The competent supervisory authority is the Irish Data Protection Commission (or, for Swiss transfers, the FDPIC). Clause 9 option 2 (general written authorization) applies. Governing law for clause 17 is Ireland; forum for clause 18 is Ireland.

CCPA / CPRA. To the extent we process Personal Information of California residents on your behalf, we (a) will not sell or share it; (b) will not retain, use, or disclose it outside the direct business relationship with you or for any purpose other than the business purposes specified in these Terms; (c) will not combine it with information received from other sources except as permitted by CPRA; and (d) provide the same level of privacy protection as required of businesses under CCPA/CPRA.

Return and deletion. Upon termination, we will, at your written direction made within 30 days, return personal data stored by us in a commercially reasonable format or securely delete it. After that period, we may delete it in the ordinary course, subject to retention required by law or contained in routine backup media that is overwritten in the ordinary course.

In the event of conflict between this Section 4 and the rest of these Terms with respect to processing of personal data, this Section 4 prevails. In the event of conflict between this Section 4 and the SCCs, the SCCs prevail.

5. Fees, Term, and Termination

Fees. You agree to pay the fees associated with your Subscription Plan as described in the applicable Order or checkout. Fees are non-refundable except as expressly stated. Fees are exclusive of taxes; you are responsible for all applicable taxes other than taxes on our net income. Late payments may accrue interest at 1.5% per month or the highest rate permitted by law, whichever is lower.

Term. These Terms begin when you first access the Services or accept these Terms and continue until terminated. Your Subscription Term renews automatically unless cancelled in accordance with the Plan or Order.

Termination by you. You may terminate at any time by cancelling your subscription through the Services or by written notice. Termination takes effect at the end of the then-current billing period. Pre-paid fees are non-refundable except as required by law.

Termination by us. We may suspend or terminate your access: (a) for material breach with 10 days' notice and an opportunity to cure (or immediately for breaches of Section 2); (b) for non-payment of undisputed fees more than 30 days overdue with 10 days' notice; (c) if your use poses a security risk or threatens harm; or (d) for convenience on 30 days' notice, in which case we will refund the unused, pre-paid portion of your subscription on a pro-rata basis.

Effect of termination. Your right to access the Services ceases. For 30 days after termination, we will make Customer Data stored by us available for export through documented mechanisms or, on written request, return or delete it as described in Section 4. After that period, Customer Data may be deleted in the ordinary course.

6. Confidentiality

Each party will protect the other's non-public information that is marked confidential or that a reasonable person would understand to be confidential ("Confidential Information") with at least the same degree of care it uses to protect its own confidential information of similar nature, and in no event less than reasonable care. Customer Data is your Confidential Information; the Services and our non-public technical information are ours. Confidential Information may be used only to perform under these Terms and disclosed only to personnel and contractors with a need to know who are bound by confidentiality obligations no less protective than those here. Customary exceptions apply for information that is public through no fault of the recipient, known prior to disclosure, independently developed, or required by law to be disclosed (with prompt notice where legally permitted).

7. Warranty Disclaimer

We will use commercially reasonable efforts to make the Services available with minimal disruption, but we do not warrant that the Services will be uninterrupted or error-free. EXCEPT AS EXPRESSLY PROVIDED HERE, THE SERVICES AND OUTPUTS ARE PROVIDED "AS IS." TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT, AND ANY WARRANTY ARISING OUT OF COURSE OF DEALING OR USAGE OF TRADE. WE DO NOT WARRANT THAT OUTPUTS WILL BE ACCURATE, COMPLETE, OR APPROPRIATE FOR YOUR USE CASE.

8. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE TO THE OTHER FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, LOST REVENUE, LOST GOODWILL, OR LOSS OF DATA, REGARDLESS OF THE THEORY OF LIABILITY AND EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

EACH PARTY'S TOTAL CUMULATIVE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS WILL NOT EXCEED THE GREATER OF (A) ONE THOUSAND U.S. DOLLARS ($1,000) OR (B) THE FEES PAID BY CUSTOMER TO CIRRA AI IN THE TWELVE MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM.

These limitations do not apply to: (a) your payment obligations; (b) your indemnification obligations under Section 9; (c) either party's gross negligence, willful misconduct, or fraud; or (d) your violation of our intellectual property rights or Section 2.

9. Indemnification

You will defend, indemnify, and hold harmless Cirra AI and its officers, directors, employees, and agents from any third-party claim, and pay damages and costs (including reasonable attorneys' fees) finally awarded or agreed in settlement, arising from or relating to: (a) your or your Authorized Users' use of the Services in violation of these Terms or applicable law; (b) Customer Data, including any claim that it infringes a third party's rights or violates any law; or (c) your breach of Section 2. We will give you prompt notice, reasonable cooperation, and (at your request and expense) sole control of defense and settlement, provided you do not settle in a way that imposes a non-financial obligation on us without our consent.

10. Intellectual Property

We retain all right, title, and interest in and to the Services, including all underlying software, models, methodologies, and documentation, and all intellectual property rights therein. The Services are protected by copyright, trademark, trade secret, and other laws. No rights are granted to you except those expressly stated in these Terms. "Cirra AI" and the Cirra AI logo are our trademarks; "Salesforce" and related marks are trademarks of Salesforce, Inc. If you give us feedback or suggestions, you grant us a perpetual, irrevocable, royalty-free, worldwide license to use that feedback for any purpose without obligation to you.

11. Changes

We may update the Services from time to time, including by adding, modifying, or removing features. We will use commercially reasonable efforts not to materially diminish the overall functionality of the Services during a paid Subscription Term.

We may modify these Terms from time to time. We will provide notice of material changes by email to the address associated with your account or through the Services at least 30 days before they take effect. Non-material changes may take effect on posting. If you do not agree to the changes, you may terminate before the changes take effect; your continued use after the effective date constitutes acceptance.

12. General

Independent contractors. The parties are independent contractors. These Terms do not create an employment, partnership, joint venture, or agency relationship.

Governing law and venue. These Terms are governed by the laws of the State of California, without regard to conflict of laws principles. The U.N. Convention on Contracts for the International Sale of Goods does not apply. Disputes will be subject to the exclusive jurisdiction of the state and federal courts in San Francisco County, California, and the parties consent to personal jurisdiction there. Either party may seek injunctive relief in any court of competent jurisdiction to protect its intellectual property or Confidential Information. The prevailing party is entitled to its reasonable attorneys' fees and costs.

Export. You will comply with all applicable U.S. and other export control and sanctions laws. You will not access the Services from, or export, re-export, or transfer the Services to, any country or person subject to comprehensive U.S. sanctions or on the U.S. Entity List or OFAC SDN List.

Force majeure. Other than for payment obligations, neither party is liable for delay or non-performance caused by events beyond its reasonable control.

Assignment. You may not assign these Terms without our prior written consent. We may assign on notice to a successor in connection with a merger, acquisition, or sale of all or substantially all of our assets. Any purported assignment in violation of this provision is void.

Notices. Notices to Cirra AI: legal@cirra.ai or 2261 Market Street STE 10421, San Francisco, CA 94114. Notices to Customer: the email address on your account. Service emails about operational matters may be sent without an opt-out.

Severability and waiver. If any provision is unenforceable, the remaining provisions remain in effect, and the unenforceable provision will be reformed to the minimum extent necessary. Failure to enforce any right is not a waiver.

Entire agreement. These Terms, together with any Order and the Privacy Policy referenced here, constitute the entire agreement between the parties on this subject and supersede all prior or contemporaneous agreements. Sections that by their nature should survive termination (including Sections 2 (for accrued breaches), 3, 4, 5 (for amounts accrued), 6, 7, 8, 9, 10, and 12) will survive.

Questions? legal@cirra.ai