Beta Terms of Service

You are agreeing with Sorby, currently operated by Sorby's founder, a sole proprietor based in Tbilisi, Georgia (the "Operator"). Upon incorporation as Sorby, Inc.(a Delaware C-Corporation), the contracting entity will become Sorby, Inc., and we will give you 30 days' written notice before the change takes effect. You may terminate within those 30 days if you do not consent to the change.

In these Terms, "we", "us", and "Sorby" mean the Operator. "You" means the person or company using the Service. The "Service" is the Sorby Discovery product, including the website at sorby.io, the application at sorby.io/app and sorby.io/w/[slug]/app, and any associated APIs.

Sorby is early-stage. By using it during the beta phase you accept that:

• The Service may break, lose data, regress, or change without notice.
• We do not provide an uptime SLA. The Service is offered "as available."
• Features may be added, removed, or significantly changed.
• Performance, latency, and quality of AI-generated output will vary.
• The Service is not yet SOC 2 certified — see /security for our actual posture.

We will tell you, by the email associated with your account, before any change that would materially reduce the value of the Service to you.

You must be at least 16 years old (or the minimum age in your jurisdiction, if higher) and able to form a binding contract. If you are signing up on behalf of a company, you confirm you are authorised to bind it.

You agree to provide accurate information and to keep your sign-in credentials secure. You are responsible for all activity in your account. Use our contact form if you believe your account is compromised.

One human, one account. Do not share accounts. Do not use the Service to operate fictitious or impersonating accounts.

You own your workspace content. We do not claim ownership. You grant Sorby a limited, worldwide, non-exclusive, royalty-free licence to host, store, transmit, display, and back up your content only as needed to provide the Service to you. We do not use your content for any other purpose.

Specifically, we do not:

• train, fine-tune, or build any AI model on your content;
• sell or share your content with advertisers or data brokers;
• access your content except (a) with your permission, (b) to operate or maintain the Service, (c) to investigate a security or abuse incident, or (d) when legally compelled (and we will challenge requests that do not comply with applicable law).

If you enter personal data into your workspace, you are the data controller for that data and Sorby is the processor. Our Data Processing Agreement governs that relationship; request a signed DPA via our contact form.

You can export your workspace as CSV at any time. On termination, see Section 11 for our deletion timeline.

You agree not to:

• use the Service to violate any law or third-party right;
• enter content into a workspace that you do not have the right to process (e.g. personal data without a lawful basis, confidential information you are not authorised to disclose);
• enter special-category personal data (Article 9 GDPR — health, biometric, religious belief, etc.) or criminal-conviction data without written agreement from us;
• attempt to access, probe, or test the integrity of the Service or its underlying systems other than via our vulnerability disclosure process;
• circumvent rate limits, scraping protections, or access controls;
• reverse-engineer, decompile, or attempt to derive source code, except where permitted by law;
• use the Service to send spam, malware, or content that is unlawful, harassing, defamatory, or infringing;
• sub-license, resell, or commercially exploit the Service without our prior written consent.

We may suspend or terminate access for breach of this Section without prior notice if the breach poses an immediate risk to the Service, other users, or third parties.

Sorby uses Anthropic's API to power AI features (backlog parsing, assistive features inside workspaces). Output from AI features is statistical and may be wrong, misleading, or inappropriate. Do not rely on AI output for decisions where accuracy materially matters without verifying the result. You are responsible for reviewing AI output before acting on it.

By submitting content to an AI feature, you confirm you have the right to submit it and that doing so does not violate any third-party rights.

Anthropic does not train its models on data submitted via the API; this is contractual under their terms. We do not train any model on your content. See /security#ai-and-your-data for the details.

The Service is free during the beta phase. We will give you at least 30 days' notice before charging for paid features or transitioning out of beta. Until then, no fees apply.

When billing goes live, it will be handled by a PCI-compliant processor (Stripe). We will publish a public Pricing page and update these Terms before that happens. Continuing to use the Service after the change will constitute acceptance; you may also terminate without charge.

If you receive non-public information about Sorby (roadmaps, pricing, technical details, beta features) marked confidential or that a reasonable person would treat as confidential, you agree to use it only to evaluate and use the Service and not to disclose it to third parties without our prior written consent. This survives termination.

We treat your non-public business information the same way. Production-database access is limited to a named operations team and is audited.

We own the Service, the Sorby brand, the website, the source code, and all related intellectual property, except for your content (Section 4) and any open-source components, which are governed by their own licences.

We grant you a non-exclusive, non-transferable, revocable licence to access and use the Service in accordance with these Terms. Nothing in these Terms transfers ownership of any intellectual property to you, except: feedback you give us is non-confidential and we may use it without obligation to you (without naming or attributing you), to improve the Service.

If you believe content on the Service infringes your copyright, send a notice via our contact form with: identification of the work, identification of the allegedly infringing material, your contact details, a statement that you have a good-faith belief that use is unauthorised, and a statement under penalty of perjury that the information is accurate.

Our collection and use of personal data is governed by our Privacy Policy and, where you are a customer entering personal data into a workspace, our Data Processing Agreement. Our security model is documented at /security.

If we suffer a personal-data breach affecting your workspace, we will notify you without undue delay and in any event within 72 hours of becoming aware, as required by GDPR Article 33 where applicable.

These Terms apply from the first time you use the Service until terminated.

You can terminate at any time by deleting your account or asking us to delete it via our contact form.

We can terminate or suspendfor breach of these Terms (with notice and a chance to cure where reasonable; immediately for security or abuse risk), if continuing to provide the Service would expose us to material legal risk, or on at least 30 days' written notice for convenience.

After termination:

• You can export your workspace via CSV during a 30-day grace window.
• After 30 days, we delete your workspace from primary storage within 7 days.
• Encrypted backups age out and are overwritten within 30 further days.
• After 60 days from termination, no copy of your content exists in any system we control.

Sections 4 (your data — to the extent of any export rights), 8 (confidentiality), 9 (intellectual property), 12 (disclaimers), 13 (limitation of liability), 14 (indemnification), and 15 (governing law) survive termination.

The Service is provided "as is" and "as available." To the maximum extent permitted by applicable law, we disclaim all warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy, and uninterrupted operation.

We do not warrant that the Service will meet your specific requirements, will operate without error or interruption, will produce accurate AI output, or will be available at any particular time. You use the Service at your own risk.

Some jurisdictions do not permit certain warranty disclaimers; in those jurisdictions, the disclaimers above apply to the maximum extent permitted by law.

To the maximum extent permitted by applicable law:

• Neither Party is liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for loss of profits, revenue, data, goodwill, or business opportunity, arising out of or in connection with these Terms, even if advised of the possibility.
• Each Party's aggregate liability arising out of or in connection with these Terms is limited to the greater of (a) the fees you paid us in the 12 months immediately preceding the event giving rise to the claim and (b) one hundred US dollars (USD 100). During the beta phase, where you pay no fees, this cap is USD 100.

Nothing in these Terms limits or excludes liability that cannot be limited or excluded under applicable law (for example: liability for death or personal injury caused by negligence, fraud, or fraudulent misrepresentation).

You agree to defend, indemnify, and hold harmless Sorby and its personnel from and against any claim brought by a third party arising out of (a) your content, (b) your use of the Service in breach of these Terms, or (c) your violation of any applicable law or third-party right. We will notify you promptly of any such claim, give you reasonable cooperation, and let you control the defence (with our reasonable input).

These Terms are governed by the laws of England and Wales, excluding its conflict-of-laws rules and excluding the United Nations Convention on Contracts for the International Sale of Goods. Upon Sorby's incorporation as a Delaware C-Corporation, the governing law will become the laws of the State of Delaware, USA, on 30 days' notice; you may terminate within those 30 days if you do not consent.

The Parties will first attempt to resolve any dispute in good faith by negotiation. If a dispute cannot be resolved within 30 days, it will be subject to the exclusive jurisdiction of the courts of England and Wales (or, post-incorporation, the state and federal courts located in Delaware). Nothing in this Section prevents either Party from seeking injunctive relief in any competent court to protect its intellectual property or confidential information.

If you are a consumer (rather than a business customer) and the laws of the country where you live grant you mandatory rights that conflict with this Section, those mandatory rights apply to the extent of the conflict.

We will update these Terms when our practices, the Service, or our legal obligations change. Material changes are announced by:

• updating the Last updated date at the top of this page;
• emailing every account holder at least 30 days before the change takes effect.

Continuing to use the Service after the change takes effect means you accept the updated Terms. If you do not agree, terminate your account before the change takes effect.

Entire agreement. These Terms, together with the Privacy Policy and any executed Data Processing Agreement, constitute the entire agreement between you and Sorby concerning the Service and supersede prior agreements on the same subject.

No waiver. Failure to enforce any right or provision of these Terms is not a waiver of that right or provision.

Severability. If any provision is held invalid or unenforceable, the remaining provisions remain in full force.

Assignment. You may not assign these Terms without our prior written consent. We may assign these Terms to an affiliate, to a successor in connection with a merger or sale, or upon incorporation of Sorby, Inc.

Notices. We will give you notices by email to the address on your account. You will give us notices via our contact form.

Force majeure. Neither Party is liable for failure to perform caused by events outside its reasonable control (war, civil unrest, natural disaster, internet or power outage, government action, sub-processor outage), provided the affected Party promptly notifies the other and takes reasonable steps to mitigate.