TERMS OF SERVICE
The terms, with receipts.
These Terms of Service (the "Terms") are a contract between Sandbox Group LLC, an Oregon limited liability company ("Sandbox," "we," "us"), and the person or organization that accepts them ("you"). They govern access to and use of Myeline, the hosted memory service described below (the "Service"), available at myeline.si and its subdomains.
If you accept these Terms on behalf of an organization, you represent that you have authority to bind that organization. If you do not, do not accept and do not use the Service.
1. The Service
1.1 What Myeline is. Myeline is a memory layer for the AI applications you already use. You connect an AI client (such as Claude or ChatGPT) to your Myeline account through the Model Context Protocol or a similar connector. Your AI can then search your stored facts before it answers, and it can propose new facts worth keeping. A "fact" is a short unit of knowledge, usually one sentence, together with a record of where it came from.
1.2 What Myeline is not. Myeline is not an AI application itself, and it is not a substitute for your judgment. Answers your AI gives after reading Myeline are your AI's answers, not ours. We do not guarantee that any stored fact is accurate, complete, or current, and we do not guarantee that your AI will read its memory before answering. The Service does not connect to your email, files, or other accounts. If a fact reaches Myeline from a document, your own AI read the document and sent the fact; our systems never touch your documents or storage.
2. Accounts and teams
2.1 Sign-in. You sign in through Clerk. Clerk receives your name, email address, and account membership. Each account's facts are stored separately from every other account's, and every read and write is scoped to the caller's account by the Service.
2.2 Teams. If you create or join a team, members of that team share one memory under the rules you configure. The person who creates the team is responsible for who joins it and what role each member holds.
2.3 Your account. You are responsible for keeping your credentials safe, for what you or your AI submit to the Service, and for what you approve in your review queue.
3. Your content
3.1 Your Content. "Your Content" means the facts, source records, prompts, queries, and other material you or your AI submit to or generate in the Service.
3.2 You own it. As between you and us, you retain all right, title, and interest in Your Content. We do not claim ownership of your facts or their sources.
3.3 License to us. You grant us a non-exclusive license to host, process, transmit, and display Your Content solely to provide, secure, and support the Service, including sending fact text to the recipients listed in Section 6 to produce embeddings. The license ends when we delete the content, except for copies in backups and logs that we delete on our ordinary cycle. Do not read this license as a promise that we purge on a schedule. We do not.
3.4 Your responsibility. You represent that you have the rights needed to put into the Service everything you or your AI submit, including material belonging to your clients or your organization, and that you are not putting anything into the Service that the PII floor in Section 4.3 exists to refuse.
3.5 No training. We do not use Your Content to train a foundation model that we own. We do not control, and we do not promise, what a third party does with content after it reaches them under Section 6. That is governed by that party's own terms.
4. How memory works
4.1 Machines propose, people approve. An AI client can propose facts, and a proposed fact does nothing until a person approves it in the workspace. No permission the Service issues to any AI client, at any tier, can approve a fact. Approval happens only by a signed-in person in the workspace. This is enforced in the protocol, not merely in the interface.
4.2 Every fact keeps its source. Each fact carries a record of where it came from. A fact without a source is not presented as knowledge. When nothing you have approved answers a question, the Service says so rather than guessing.
4.3 The PII floor. The Service refuses to store US Social Security numbers, bank and card numbers, and credentials such as passwords and API keys, at every plan tier, before anything is saved. This floor is not a setting, and it cannot be turned down.
4.4 Retraction is final. A live fact leaves your memory only when you retire it, with a written reason that is kept in your history, or when a newer fact supersedes it. A retired fact never becomes live again on its own. If you want it back, it must be proposed and approved again like any new fact.
4.5 The review queue is your record. What was proposed, what you approved, what you rejected, and when, are recorded in an append-only history that application roles can add to but not edit or delete.
5. The AI clients you connect
5.1 Your client, your account. You connect AI clients under your own account with those providers. When your AI searches your memory, the fact text that answers the query is sent to that AI provider as part of the conversation, under your account and that provider's terms. This is the intended function of the Service, and it happens on every query your AI makes.
5.2 Your client's behavior. How diligently your AI reads memory before answering, and what it chooses to propose, are properties of the AI application you chose, not of the Service. The Service steers this behavior through tool descriptions and instructions, but it cannot force any AI to comply.
6. Recipients of Your Content
The companies that receive Your Content, and what they receive, are:
- OpenAI: the text of every stored fact, every retrieval query, and every correction, sent to produce embeddings (`text-embedding-3-small`) under our platform key. This happens regardless of which AI client you use for conversations.
- Your AI providers: the fact text that answers your queries, and the proposals your AI sends, under your own account (Section 5).
- Clerk: your name, email address, and account membership, for sign-in.
- Neon: the database holding your facts, sources, and history.
- DigitalOcean: hosting, including Coolify for deployment.
- Resend: the email address you sign up with, for transactional email such as your welcome letter and plan notices.
- PayPal: your payment details for paid plans. We never see your card number.
- AgentMail: message content if you email support at hello@myeline.si.
- Google Fonts: each visitor's IP address and browser user-agent when pages load.
We will update this list when it changes and post the update at myeline.si. A shorter marketing sentence would be false.
7. Plans and billing
7.1 Plans. The free plan stores up to 200 live facts. Paid plans (currently Personal and Team) raise or remove that cap for as long as the subscription is active. When a plan ends or is suspended, the cap returns, and proposing beyond the cap is refused until facts are retired or the plan resumes. Nothing you have already approved is deleted for exceeding a cap.
7.2 Billing. Paid plans are billed through PayPal subscriptions at the prices shown at signup. Subscriptions renew automatically until canceled. Canceling stops future charges; it does not refund the current period unless required by law. We may change prices for new subscriptions, and we will tell you before any change to the price of a subscription you already hold.
8. Retention, export, deletion
8.1 What stays. Facts, sources, proposals, approvals, rejections, and the history ledger are retained while your account exists. Retiring a fact removes it from your live memory but keeps the fact and its reason in your history. There is no automatic deletion and no retention dial.
8.2 Export. There is no self-serve export today. If you ask, we will tell you honestly what we can produce and do our best to give you your facts in a readable form.
8.3 Deletion. There is no in-product "delete my data" button. A deletion request to hello@myeline.si is handled manually. We will delete your facts and sources on request. We will not delete or rewrite the history ledger; it is append-only by design, and its entries record decisions, not fact text alone.
8.4 Shutdown. If the Service or your account is discontinued, we will tell you if we reasonably can, and we will say honestly what we can return first. Ask for an export before relying on one.
9. Security: what we will and will not say
9.1 We will: store connector and service credentials encrypted, scope every read and write to the caller's account, keep the review history append-only, refuse the PII floor classes before anything is stored, and run on infrastructure we operate.
9.2 We will not claim, and you will not expect: SOC 2, ISO 27001, or any certification; a hardware security module or per-account encryption key; application-level encryption of fact text (facts sit in database columns, plus whatever at-rest encryption the host provides); data residency; or zero retention at any third party listed in Section 6.
10. Your responsibilities and indemnity
10.1 You will not use the Service to violate law or another provider's terms; probe or attempt to read another account's data; submit content you have no right to process; or attempt to extract credentials or break the Service's controls.
10.2 You indemnify us against claims, damages, and reasonable attorneys' fees arising out of Your Content or your breach of these Terms. We will give you notice and reasonable cooperation.
10.3 We indemnify you against a third-party claim that the Service software, as we provide it, infringes a US copyright or trademark, excluding claims caused by Your Content or by a combination we did not supply. Our options are to procure the right, modify the Service, or terminate and refund prepaid unused fees, if any. This is our entire obligation for infringement claims.
11. Disclaimers
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY LAW WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT YOUR AI WILL READ ITS MEMORY, THAT ANY FACT IS ACCURATE, OR THAT THE SERVICE WILL BE UNINTERRUPTED OR ERROR-FREE.
Some jurisdictions do not allow disclaimers of implied warranties. In those jurisdictions the disclaimer applies to the fullest extent allowed.
12. Limitation of liability
12.1 TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, COVER, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, LOST REVENUE, OR LOST DATA, WHETHER IN CONTRACT, TORT, OR OTHERWISE, EVEN IF ADVISED OF THE POSSIBILITY.
12.2 EACH PARTY'S TOTAL LIABILITY ARISING OUT OF THESE TERMS WILL NOT EXCEED THE FEES YOU PAID US IN THE THREE MONTHS BEFORE THE CLAIM. IF YOU HAVE PAID NOTHING, THAT CAP IS ONE HUNDRED US DOLLARS (US$100).
12.3 Section 12.2 does not limit liability for fraud, willful misconduct, your indemnity under Section 10.2, or a liability that cannot be limited under applicable law.
13. Term and termination
These Terms start when you accept them and continue until either party terminates. You may stop using the Service at any time, and you may cancel a paid plan at any time. We may suspend or terminate an account that violates these Terms, and we may discontinue the Service, in which case Section 8.4 applies. Sections 3.2, 3.3 (as to copies we still hold), 8, 9, 10, 11, 12, and 14 survive.
14. General
14.1 Governing law. Oregon law, excluding its conflict-of-laws rules. The state and federal courts located in Multnomah County, Oregon, have exclusive jurisdiction, and both parties consent to it.
14.2 Entire agreement. These Terms are the entire agreement about the Service between you and us.
14.3 Changes. We may change these Terms by posting an updated version at myeline.si. If you continue to use the Service after the effective date of the change, you accept it. If a change is unacceptable, stop using the Service.
14.4 Assignment. You may not assign these Terms without our consent. We may assign them to a successor of the Service.
14.5 Notices. To us: hello@myeline.si, Sandbox Group LLC, Portland, Oregon. To you: the email address on your account.
14.6 Waiver and severability. A failure to enforce a provision is not a waiver. If a provision is unenforceable, the rest remains.
14.7 No third-party beneficiaries. These Terms do not create rights in any AI provider or other third party.
14.8 Export and sanctions. You will not use the Service in violation of US export or sanctions law.
14.9 Government use. The Service is commercial computer software. If you are a government agency, you acquire only the rights in these Terms.