Terms of Service

1. Acceptance of Terms

By accessing or using oakallow (the "Service"), operated by Islemonics Studios LLC ("we", "us", "our"), you agree to be bound by these Terms of Service. If you do not agree, do not use the Service.

You must be at least 18 years old and have the legal authority to enter into these terms. If using the Service on behalf of an organization, you represent that you have authority to bind that organization.

2. Service Description

oakallow provides a hosted REST API for governing AI agent tool execution. The Service includes: permission resolution, approval workflows, HMAC-signed execution tokens, audit logging, and related developer tools (dashboard, API builder, documentation).

The Service is provided "as is" and "as available." We aim for high availability but do not guarantee uninterrupted access.

3. Account Terms

• You are responsible for maintaining the security of your account credentials and API keys.
• You must provide accurate and complete registration information.
• You are responsible for all activity that occurs under your account and API keys.
• You must notify us immediately of any unauthorized access.
• One person or entity per account. Shared accounts are not permitted.

4. Billing & Credits

oakallow operates on a prepaid credit model. You purchase credits which are consumed by billable API calls. Credits do not expire unless your account is terminated. Free credits included with new accounts expire after 30 days.

5. API Usage

You agree to use the API in accordance with our documentation and rate limits. Excessive API calls, abuse of the service, or attempts to circumvent rate limits may result in throttling or account suspension.

API keys must be kept confidential. Do not embed API keys in client-side code, public repositories, or logs. Compromised keys should be revoked immediately via the dashboard.

6. Intellectual Property

The oakallow service, including its API, documentation, dashboard, and underlying code, is owned by Islemonics Studios LLC. Your data (tool definitions, permission rules, execution logs) remains your property. We claim no ownership over the data you submit through the API.

7. Security & Compliance

We implement industry-standard security measures including encryption in transit and at rest, API key hashing, HMAC-signed tokens, and Row Level Security. You are responsible for securing your own systems that integrate with oakallow.

If you discover a security vulnerability, please report it to security@oakallow.io.

8. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, ISLEMONICS STUDIOS LLC SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUE, ARISING FROM YOUR USE OF THE SERVICE. Our total liability shall not exceed the amount you paid to us in the 12 months preceding the claim.

9. Termination

You may close your account at any time by contacting support. We may suspend or terminate your account for violations of these terms, non-payment, or abuse. Upon termination, your API keys will be revoked and your data will be retained for 30 days before deletion.

10. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the State of California, without regard to conflict of law principles. Any disputes shall be resolved in the courts of Alameda County, California.

11. Changes to Terms

We reserve the right to modify these Terms at any time. We will notify registered users of material changes via email at least 30 days before they take effect. Continued use of the Service after changes constitutes acceptance.

12. Contact Information