Terms of service

Effective Sep 1, 2026 · version 4.2 · previous versions · download PDF

1. Your content

You keep all rights to the content you upload and the outputs Cairn generates for you. You grant us only the rights needed to run the service for you.

2. Model training

We do not use your content to train or improve models unless a workspace admin opts in. You can withdraw that choice at any time; it applies to future data.

3. Acceptable use

You agree to follow the Acceptable Use Policy. We may suspend accounts that put others at risk, and we tell you why unless the law prevents it.

4. Fees and cancellation

Paid plans renew until cancelled. You can cancel in settings at any time. Annual plans are refunded pro rata. Usage caps are never exceeded without your approval.

5. Liability

Our total liability is limited to the fees you paid in the 12 months before the claim. Nothing limits liability that cannot be limited by law.

Questions? legal@cairn.example. A person replies within two business days.

Acceptable use policy

Effective Aug 20, 2026 · version 2.0 · previous versions · download PDF

Prohibited uses

Using Cairn as the sole basis for legal, medical, credit, housing or employment decisions about individuals; biometric identification; emotion recognition in workplaces or schools; generating deceptive content that impersonates real people.

Disclosure

If you deploy Cairn to people outside your organization, you must tell them they are interacting with an AI system, in line with EU AI Act Article 50 (placeholder).

Security

Don’t attempt to access other customers’ data, bypass rate limits or probe our systems outside our vulnerability disclosure program.

Enforcement

We review reports within 24 hours. Where possible we contact you first and give you time to fix the issue.

Questions? legal@cairn.example. A person replies within two business days.

Privacy notice

Effective Sep 1, 2026 · version 3.1 · previous versions · download PDF

Who we are

Cairn AB (fictional) is the controller for account and website data. For content you process in Cairn, you are the controller and we are your processor under the DPA.

What we collect

Account details, billing contacts, product usage metadata, and, only with consent, website analytics. We don’t sell personal data.

Where it’s stored

In the EU (Frankfurt, Stockholm). Subprocessors are listed in the Trust Center with their locations.

Your rights

Access, rectification, erasure, restriction, portability and objection. Email privacy@cairn.example or use the controls in settings. You can also complain to your supervisory authority.

Retention

Account data for the life of the account plus 30 days. Invoices for 7 years as required by law.

Questions? legal@cairn.example. A person replies within two business days.