Legal
Customer Agreement
Version 2026-09-18 · Last updated: September 18, 2026
1. What we provide
The "Services" are the Cruq platform: the web console at app.cruq.ai, the API at api.cruq.ai, the MCP server, the SDKs, hosted agent apps served on cruq.app subdomains or your own domain, bot channels, and the documentation. An "Order" is a plan you buy through the console, or a signed order form or statement of work that references this agreement. If an Order and this text conflict, the Order wins for that Order.
2. Your right to use the Services
For the term of your Order and while you comply with this agreement, we grant you a non-exclusive, non-transferable right to use the Services within your plan limits, and to integrate the API and hosted apps into applications you run for your own customers ("End Users"). You are responsible for those applications, for what your End Users do in them, and for making sure they comply with the law.
You will not, and will not let anyone else:
- resell or offer the Services as a standalone product;
- use the Services or their output to build a model that imitates them or a competing product;
- reverse engineer or try to extract the source code or models behind the Services;
- bypass plan limits, rate limits, access controls or key scopes;
- send malware, attack the Services, or run security tests without agreeing them with us first in writing;
- use the Services to break the law, infringe anyone's rights, or generate content that is illegal or harms others.
3. Accounts, users and keys
You access the console with a login and the API with workspace API keys. Runtime keys can run agents and read; management keys can also change configuration. Keys can be given an expiry and a spend limit. You are responsible for keeping logins and keys confidential, for everything done with them, and for telling us promptly at hello@cruq.ai if one is compromised. Only your employees and contractors may use the console; your End Users use your applications and hosted apps, not the console. You are responsible for your users' and End Users' actions as if they were your own.
4. Plans, fees and billing
- Plans. Free and paid plans are described at cruq.ai/pricing, with limits such as members and agent runs per month. We may stop serving requests that exceed a limit.
- Subscriptions. Paid plans bought in the console are billed monthly in advance through Stripe and renew automatically until cancelled. You can cancel any time; the cancellation takes effect at the end of the current billing period and you keep access until then.
- Refunds. Fees are non-refundable except where this agreement or the law says otherwise.
- Enterprise and services. Enterprise plans, self-hosted or VPC deployments, and professional services (diagnostics, builds, managed operation) are sold by Order. Unless the Order says otherwise, invoices are due within 30 days, and overdue amounts may carry interest at 1.5% per month or the highest rate the law allows, whichever is lower.
- Price changes.We may change plan prices with at least 30 days' notice; a change applies from your next renewal.
- Taxes. Fees exclude UAE VAT and any other VAT, GST, sales or similar taxes, which you pay unless you give us a valid exemption. Our income tax is ours.
- Partners. If you buy through a Cruq partner or reseller, their invoice and payment terms apply to payment, and this agreement applies to your use of the Services.
5. Model providers and third-party services
Cruq runs your agents on model providers you connect with your own account and API key (for example OpenRouter, OpenAI, Anthropic, Google). Those providers are not part of the Services: their terms apply, you pay them directly, and we are not responsible for their availability, output, pricing or data handling. We store your provider keys encrypted and use them only to run your agents. The same applies to other services you connect, such as Slack, Telegram, Google Workspace or your own tools: by connecting one you allow us to exchange your data with it on your behalf. Spend figures we show are what providers report to us and may be incomplete.
6. Your data
- Ownership.Everything you and your End Users put into the Services (prompts, files, knowledge, provider keys, agent definitions) is your "Input". What the Services generate for you is "Output". As between us, you own both. We claim no rights in Output and assign to you whatever rights we might have in it.
- Our licence. You allow us to store, process and transmit Input and Output only to provide and secure the Services, to comply with the law, and to produce Telemetry. You confirm you have the rights and consents needed for us to do that.
- No training. We do not use your Input or Output to train or fine-tune AI models, and we do not let anyone else do so, without your written consent.
- Telemetry. We keep technical logs, usage metrics and aggregate statistics about how the Services are used. They contain no content from your Input or Output beyond what is needed to operate the Services, and we may use them to run and improve our products.
- End Users of hosted apps.For hosted apps and bots you publish, you decide what data is collected and why; we process it for you. You are responsible for the notices and consents your End Users need, including for "Login with Cruq" and for any block or export you request.
- Data processing. Where personal data is involved, our data processing terms at cruq.ai/privacy form part of this agreement.
- Deletion. You can delete agents, knowledge, runs and workspaces in the console. After termination we delete your Customer Data within 30 days, except copies in routine backups, which expire on their own schedule and stay confidential meanwhile. Free workspaces inactive for 12 months may be deleted after notice.
7. Security and confidentiality
We use reasonable technical and organisational measures to protect the Services and your data, including encryption in transit and at rest for secrets, tenant isolation in the database, and scoped keys. No system is perfectly secure; you are responsible for the security of your own applications, devices and credentials. Each side keeps the other's non-public information confidential, uses it only for this agreement, and shares it only with people who need it and are bound to keep it confidential, unless the law requires disclosure. Our pricing offered to you in an Order, and your Input and Output, are confidential.
8. Availability, support and changes
We aim to keep the Services available around the clock but do not promise uninterrupted service unless an Order includes a service level agreement. We may change the Services and the API over time. Where a change would materially break an integration built to our documentation, we will try to give you advance notice. Features marked beta or preview may change or be withdrawn without notice. Support is by email at hello@cruq.ai; response targets depend on your plan or Order.
9. AI output
Agents produce output with large language models. Output can be inaccurate, incomplete, biased or out of date, may not be unique, and may be similar to output other customers receive. You are responsible for reviewing Output before relying on it, especially for legal, medical, financial, safety or employment decisions, and for how your applications present it to End Users.
10. Warranties and disclaimers
We warrant that the Services will perform materially as described in the documentation. If they do not, tell us in writing within 30 days of noticing and we will try to fix the problem; if we cannot within 30 days, either side may end the affected Order and we will refund any prepaid fees for the unused part of its term. That is your only remedy for that warranty. Otherwise the Services are provided as is, and we disclaim all other warranties, express or implied, including merchantability, fitness for a particular purpose and non-infringement, to the extent the law allows. We are not responsible for problems caused by your misuse, by model providers or other third parties, or by use outside the documentation.
11. Liability
Neither side is liable for indirect, consequential, special or incidental loss, lost profits, lost data or business interruption, even if warned they were possible. Each side's total liability under this agreement is limited to the fees you paid us in the 12 months before the claim arose. These limits do not apply to your payment obligations, your breach of sections 2 or 3, either side's indemnity obligations, or anything the law does not allow to be limited.
12. Indemnities
We will defend you against third-party claims that the Services, as we provide them, infringe a patent, copyright, trademark or trade secret, and pay damages and costs awarded or agreed in settlement. This does not cover Output, your Input, model providers, combinations with things we did not supply, or use outside this agreement. If a claim comes, we may fix or replace the affected part, get you a licence, or end the affected Order with a refund of unused prepaid fees. You will defend us against third-party claims arising from your Input, your applications, your End Users, or your breach of this agreement, and pay damages and costs awarded or agreed. The side being defended must notify the other promptly, let it control the defence, and cooperate at the defending side's cost.
13. Suspension and termination
We may suspend access, with notice where practical, if you break sections 2, 3 or 5, if payment is 30 days overdue, if the law requires it, or if your use threatens the security or availability of the Services for others. Either side may end this agreement if the other materially breaches it and does not fix the breach within 30 days of notice, or becomes insolvent. You may end it at any time by cancelling your plan and deleting your workspace. On termination your right to use the Services ends, you stop using them, prepaid fees are not refunded except as this agreement says, and section 6 governs your data. Sections 2, 4, 6, 7, 9 to 12 and 14 survive.
14. General
- Governing law. This agreement is governed by the laws of the Emirate of Dubai and the applicable federal laws of the United Arab Emirates. Disputes go to the courts of Dubai, unless an Order says otherwise.
- Notices. To us: hello@cruq.ai, or by post to HD20C, Ground Floor, in5 Design, Dubai, United Arab Emirates. To you: the email on your account or Order. We may also post operational notices in the console.
- Changes.We may update this agreement. For changes that reduce your rights we give at least 30 days' notice by email or in the console, and you will be asked to accept the new version; continuing to use the Services after it takes effect is acceptance. Other changes take effect when posted.
- Assignment.Neither side may transfer this agreement without the other's consent, except to a successor in a merger or sale of substantially all assets.
- Publicity. We may name you as a customer, with your logo, on our website and materials; you can withdraw that permission by email at any time.
- Feedback. If you send us suggestions, we may use them without obligation.
- Export and sanctions. You will comply with applicable export control and sanctions laws and confirm you are not on a restricted party list.
- Whole agreement. This agreement, the Orders and the documents it refers to are the whole agreement between us on this subject. Terms on your purchase orders do not apply. If a clause is unenforceable the rest still stands. Waivers must be in writing. We are independent contractors. We are not liable for delays caused by events outside our reasonable control.
15. Contact
Questions about this agreement: hello@cruq.ai.
