Legal

Terms of Service

These terms govern the use of AuthoPilot and of nuzum.ai. They are written in plain words on purpose. Where a signed agreement between your organisation and Nuzum says something different, that agreement wins.

Effective 14 September 2026

1. Who these terms are between

Nuzum AI FCZ (“Nuzum”, “we”, “us”), a company registered in the United Arab Emirates at Sharjah Research, Technology & Innovation Park, United Arab Emirates, and you. If you use AuthoPilot on behalf of an organisation, you accept these terms for it, you confirm that you may, and “you” means that organisation. By creating an account, accepting an invitation, or using the service, you agree to these terms and to our Privacy Policy.

2. What AuthoPilot is

AuthoPilot is a control plane for AI agents. It lets an organisation say what each agent may do, decides each action against that authority, routes what falls outside it to a person, runs governed automations, and keeps a record of all of it. It is offered as a hosted service that we operate, and as a private deployment that your organisation runs in its own cloud. Parts of the product marked Alpha or Beta are offered so you can try them early; they may change or be withdrawn, and we will say so before withdrawing one your organisation relies on.

3. Accounts and organisations

You sign in with a Google account. An organisation has owners, administrators and members, and its owners decide who is invited and with which role. Your organisation is responsible for the people it invites, for keeping its API keys and Runner credentials secret, and for every action taken under its keys and under the authority it grants its agents. Tell us at once at hello@nuzum.ai if you believe a key or an account has been compromised; the console lets you revoke a key and sign a person out everywhere at any moment.

4. Your data and your responsibilities

Everything you put into AuthoPilot is yours: your policies, your workflow definitions, your tool library, your records. You give us only the permission needed to run the service for you, and nothing else. In return, you are responsible for what you do with it:

  • The authority you grant. You decide what each agent may do. An action taken inside the authority you granted is your action.
  • Lawful use of your own systems. The tools and systems your agents act on are yours or licensed to you, and what your agents do with them complies with the laws that apply to you.
  • Keeping the substance of your work where it belongs. The product is built so that the console holds fingerprints and references, and the part that handles your data runs in your own environment. You agree to use it that way and not to send the console the contents of messages, documents, records or the personal data of your own customers, patients or users.
  • Regulated work. If your organisation handles health, financial or other regulated data, you are responsible for meeting the rules that apply to it. AuthoPilot is not a medical device and makes no clinical or financial decisions; it records and governs the decisions your agents and your people make.

5. Acceptable use

You will not, and will not let anyone using your account:

  • use the service to break the law or to harm anyone;
  • probe, scan or attack the service, our providers, or anybody else through it, or try to get around a limit, a policy or an approval;
  • copy, reverse engineer or otherwise try to extract the source of the service, except where the law expressly allows it;
  • resell, sublicense or offer the service to others, except under a written agreement with us;
  • use the service to build a product that copies it.

The service has rate limits. They exist to keep it fair and up for everyone, and we may throttle use that exceeds them.

6. What is ours

The service, its software, its documentation, its design and its names belong to Nuzum or to our licensors. These terms give you the right to use the service; they transfer nothing else. If you send us feedback, we may use it without owing you anything, and without naming you. We do not name your organisation as a customer without your permission.

7. Fees

Fees are set out in your order form or subscription agreement, together with the billing period and what happens when payment is late. Fees exclude taxes, which are yours to pay where they apply. Where no fee has been agreed, the service is provided for evaluation, and we may end an evaluation with notice.

8. Confidentiality

Each side will keep the other’s non-public information confidential, use it only for the purpose of the relationship, and protect it with reasonable care. This does not cover information that is public through no fault of the receiving side, that it already had, or that it must disclose by law, in which case it tells the other side first where it lawfully can.

9. Third-party services

Google provides the identity you sign in with, under Google’s own terms. The tools, models and systems your agents call are yours to choose and are governed by their providers’ terms; we are not responsible for what they do or fail to do.

10. Availability, support and changes

We work to keep the hosted service available and secure, tell organisation owners about planned maintenance, and support you as your agreement sets out. We may improve or change the service; during a paid term we will not materially reduce what it does without notice. A private deployment is operated by your organisation, and its availability is yours.

11. Warranties and disclaimers

We warrant that we provide the service with reasonable skill and care. Beyond that, and to the extent the law allows, the service is provided as it is and as available, without other warranties, express or implied, including of merchantability, fitness for a purpose and non-infringement. We do not warrant that the service will be uninterrupted or error-free, or that an agent governed by it will never make a mistake. The authority you grant, and the actions taken inside it, remain your decisions.

12. Limitation of liability

To the extent the law allows, neither side is liable to the other for indirect, incidental, special or consequential loss, or for lost profits, revenue or data, even if told it could happen. Our total liability for everything arising out of the service in any twelve-month period will not exceed the fees you paid us for the service in that period, or one hundred US dollars if you paid none. These limits do not apply to what the law does not allow to be limited, to a breach of section 8, to the indemnities in section 13, or to gross negligence or wilful misconduct.

13. Indemnities

You will defend and indemnify us against claims arising from your data, from what your agents do with your systems, or from your breach of these terms. We will defend and indemnify you against claims that the service, used as these terms allow, infringes a third party’s intellectual property; if such a claim arises we may fix the service, replace the part in question, or end your use of it and refund any prepaid fees for the remaining term. Each indemnity requires prompt notice of the claim, control of the defence by the indemnifying side, and reasonable cooperation from the other.

14. Suspension and ending

You may stop using the service at any time, and an owner may ask us to delete the organisation from the console. We may suspend an account or an organisation where we reasonably believe it threatens the security of the service or of others, where fees are overdue, or where these terms are being broken, and we will give notice where it is practicable to. Either side may end the agreement for a breach the other does not cure within thirty days of notice. When the agreement ends, you may export your data for thirty days; after that we delete it as the Privacy Policy describes. Sections 6, 8, 11, 12, 13 and 15 survive.

15. Governing law and disagreements

These terms are governed by the laws of the United Arab Emirates. If a disagreement arises, we both agree to try to resolve it in good faith within thirty days of one side raising it in writing. What cannot be resolved that way is decided by the courts of the Emirate of Sharjah, United Arab Emirates, and each side submits to their jurisdiction.

16. Changes to these terms

We may update these terms. When we do, we post the new version here with its effective date, and if the change is material we tell organisation owners by email at least thirty days before it takes effect. Using the service after that date means you accept the new terms; if you do not, stop using the service before then and tell us, and we will refund any prepaid fees for the remaining term.

17. General

These terms, your order form or subscription agreement, and the Privacy Policy are the whole agreement between us about the service. Neither side may assign the agreement without the other’s consent, except to a successor of its business. Neither side is liable for a failure caused by events outside its reasonable control. Notices are given by email: to us at hello@nuzum.ai, to you at the address of your organisation’s owner. If a part of these terms is found unenforceable, the rest stands. A right not exercised is not waived.

18. Contact

Nuzum AI FCZ, Sharjah Research, Technology & Innovation Park, United Arab Emirates. hello@nuzum.ai.