Terms of Service

Last updated: February 2026

1. Acceptance of Terms

By accessing or using Kurral ("the Service"), you agree to be bound by these Terms of Service. If you do not agree, do not use the Service. The Service is operated by Kurral ("we", "us", "our").

2. Description of Service

Kurral provides an AI proxy and security testing platform. The Service includes:

  • An LLM proxy that routes requests to AI providers (OpenAI, Anthropic, Google)
  • Observability dashboards for tracking token usage, cost, and latency
  • Automated security scanning for AI agents via CLI and web interface
  • API key management and rate limiting

3. Accounts

You must create an account to use the Service. You are responsible for maintaining the confidentiality of your account credentials and for all activity under your account. You must provide accurate and complete information when creating your account.

Authentication is provided by Clerk. By creating an account, you also agree to Clerk's terms of service and privacy policy.

4. Acceptable Use

You agree not to:

  • Use the Service for any unlawful purpose
  • Attempt to gain unauthorized access to the Service or its systems
  • Use the security scanning features against systems you do not own or have permission to test
  • Resell, redistribute, or sublicense access to the Service without our written consent
  • Interfere with or disrupt the Service or its infrastructure

5. API Usage & Proxy Behavior

When you use the Kurral proxy, your requests are forwarded to third-party AI providers using your own provider API keys. Kurral never stores your provider API keys on our servers — they are used only for the duration of each request.

You are responsible for complying with the terms of service of any AI provider you access through the proxy. Kurral is not liable for any charges incurred with your AI provider accounts.

6. Data Ownership & Retention

You retain ownership of all data you submit through the Service. Kurral logs request metadata (tokens, cost, latency, model, timestamps) for observability purposes. Full request/response content logging is configurable per your retention settings.

Security scan results are stored in your account and can be deleted at any time. We will not share your data with third parties except as required by law.

7. Third-Party Services

The Service relies on the following third-party providers:

  • Clerk — Authentication and user management
  • Neon — Database hosting (PostgreSQL)
  • Render — Backend API hosting
  • Vercel — Frontend hosting and deployment

We are not responsible for the availability or performance of these third-party services.

8. Limitation of Liability

The Service is provided "as is" without warranties of any kind. Kurral shall not be liable for any indirect, incidental, special, or consequential damages arising from your use of the Service. Our total liability shall not exceed the amount you paid us in the 12 months preceding the claim.

9. Termination

We may suspend or terminate your access to the Service at any time for violation of these terms. You may delete your account at any time. Upon termination, your data will be deleted within 30 days.

10. Changes to Terms

We may update these terms from time to time. We will notify you of material changes via email or through the Service. Continued use after changes constitutes acceptance of the updated terms.

11. Contact

For questions about these terms, contact us at support@kurral.com.