Terms of Service

Last updated: 2026-05-11.

These Terms govern your use of the services operated by theAIstep under the Kumbukumbu brand. By creating an account or using the Kumbukumbu managed memory service, you agree to these Terms.

1. Services covered

These Terms apply to kumbukumbu.dev, the Kumbukumbu documentation, and the Kumbukumbu managed memory service. They do not apply to self-hosted installations of the Kumbukumbu Apache-2.0 engines (ASMIS, RAG, Viz, Sidekick), which are governed by the Apache-2.0 license shipped with each project.

2. Open source vs commercial

The Kumbukumbu engines (kumbukumbu-asmis, kumbukumbu-rag, kumbukumbu-viz, kumbukumbu-sidekick) and their SDKs are open source under Apache-2.0. You may use, fork, and self-host them subject to that license, with no obligation to us.

The managed SaaS layer (kumbukumbu-saas, the admin console) is closed source. Use requires a valid subscription and is subject to these Terms plus any order form you accept at sign-up.

3. Accounts

To use the managed service, you create an account with a valid email. You are responsible for keeping your credentials secret and for all activity under your account. We may suspend accounts in case of suspected compromise or breach of these Terms.

4. Subscriptions and payment

4.1 Plans

Plans and prices are described on kumbukumbu.dev/#pricing. The free tier exists for evaluation; paid tiers carry the features and quotas listed there at the time of subscription.

4.2 Billing cycle

Monthly plans are billed in advance for the upcoming month. Sovereignty contracts are billed per the executed order form.

4.3 Renewal and cancellation

Subscriptions renew automatically. You can cancel at any time from your account dashboard; cancellation takes effect at the end of the current billing period. We do not pro-rate refunds for partial periods, except where required by law.

4.4 Price changes

We may change prices for renewal periods with at least 30 days' notice. You can cancel before the change takes effect.

4.5 Taxes

Prices are exclusive of applicable taxes (VAT, sales tax). We add them at invoicing based on your billing address.

5. Acceptable use

You agree not to use the services to:

6. Intellectual property

6.1 Our IP

The closed-source managed service, the marketing content, the trademark (“Kumbukumbu”, “ASMIS”), and the visual identity remain the property of theAIstep. We grant you a non-exclusive, non-transferable right to use them as part of an active paid subscription.

6.2 Your data, your memories

You own the memory records, embeddings, knowledge-graph data, and audit records you submit to the service. We make no claim to them. You grant us a limited right to process them strictly for delivering the service you subscribed to. You can export your data at any time.

6.3 Open source contributions

Contributions to the Kumbukumbu open-source repositories are governed by each project's CONTRIBUTING file and the Developer Certificate of Origin (DCO).

7. Audit-shaped memory types

The HARMONY tier and above unlock premium memory types (regulatory_evidence, audit_trail, signed_intent) with stronger guarantees: append-only writes, tamper-evident chaining, cryptographic co-signature. These guarantees are a property of the storage layer; they are not a substitute for your auditor's determination that your overall system meets a given regulation.

8. Confidentiality

Each party will protect the other's non-public information with at least the same care it uses for its own confidential information, and no less than a reasonable standard. Customer memory data is treated as confidential by default.

9. Service availability

We target high availability for the managed service but do not guarantee uninterrupted service except where a written SLA is in place (Sovereignty tier). Scheduled maintenance is announced in advance.

10. Warranties and disclaimers

We provide the services “as is” and disclaim, to the maximum extent permitted by law, all implied warranties (merchantability, fitness for a particular purpose, non-infringement). Compliance-shaped memory types and audit features assist you in meeting regulatory requirements but do not, by themselves, constitute or guarantee compliance — that determination remains the responsibility of your auditor and your organization.

11. Limitation of liability

To the maximum extent permitted by law, our aggregate liability for any claim arising out of these Terms is capped at the fees you paid us for the affected service in the 12 months preceding the claim. We are not liable for indirect, incidental, consequential, or punitive damages, or for loss of revenue, profits, or data. Nothing in these Terms limits liability that cannot be excluded by law.

12. Indemnification

You agree to indemnify and hold us harmless from claims arising out of (i) your breach of these Terms, (ii) your use of the services in violation of law or third-party rights, or (iii) content you submit to the service.

13. Termination

Either party may terminate at the end of the current billing period. We may terminate or suspend immediately for material breach of these Terms or non-payment. On termination, we provide an export window of 30 days for your memory data, after which it is deleted.

14. Changes to the Terms

We may update these Terms. Material changes are announced by email at least 30 days before they take effect.

15. Governing law and disputes

These Terms are governed by French law. Disputes that cannot be resolved through good-faith negotiation will be brought before the competent French courts, except where mandatory consumer-protection rules apply in your jurisdiction.

16. Contact

Questions about these Terms or any service: hello@kumbukumbu.dev.