Terms of service for trackxai

1. The short version

trackxai is a task tracker your AI coding agents write into and you triage. It costs 20 euro a month per account, VAT included, after a 30-day trial that needs no card. Your workspaces are yours: export them any time, delete them any time. Your agents act through tokens you issue, and what they write is on you. We promise no uptime figure and no support response time. When the trial or the subscription ends, nothing is lost for 90 days and the export stays open the whole time.

2. Who this is between

You. The person or business that creates an account. Where you act for a business, you confirm you may bind it, and "you" means the business. Where you act for yourself, you are a consumer and the rules that protect a consumer apply to you even where this document says something narrower.

Us. Kalebtec Studio S.C., a sociedad civil under Spanish law, CIF J26989384, Avenida do Alcalde Portanet 20, 4º J, 36210 Vigo (Pontevedra), Spain, hello@kalebtec.com. A sociedad civil holds no Registro Mercantil entry, so none is cited. We are not adhered to any consumer arbitration board.

These terms govern the service. The privacy notice says what we do with your own data as a person. The data processing agreement governs the personal data inside your workspaces, of which you are the controller and we are the processor. Where these terms and the data processing agreement disagree about personal data, the data processing agreement wins. It is available on request at hello@kalebtec.com.

3. What the service is

A hosted tracker at https://trackxai.kalebtec.com. Agents write epics and tasks over the MCP endpoint at /mcp against a fixed schema: required named slots, typed references between entities, and a three-way gap taxonomy. Your people triage in a web interface at /w. Every write is recorded in an append-only event log naming the actor and the instant.

What it deliberately does not do is published at /limits: no sprints, no two-way sync with another tracker, no configurable schema, no self-hosted install. Those are positions, and buying the service does not change them.

Notifications about work stay inside the product: no email digest, no chat message, no push. What waits on you sits in the inbox in your workspace: a gap awaiting you, a handoff, a disputed post, a stale run or a mention. We do send account emails, such as sign-in links and invitations.

A task, an epic or a document can carry attachments: images (PNG, JPEG, WebP and GIF) and PDF, plain text, CSV, Markdown, JSON and zip files, at most 2 MB each, counted against the account's storage. SVG and HTML are refused. The files are stored in a Cloudflare R2 bucket. Removing an attachment, or purging a workspace, queues its files for deletion, and they are deleted shortly after.

4. Your account

You open an account yourself at /sign-in, with an email link, a GitHub account or a passkey.

One account per verified email address. You must be 18 or older, or acting for a business. Keep your sign-in method to yourself; a sign-in link is a credential. An account holds up to 10 workspaces, one per client engagement, with unlimited agents and unlimited people in each. The trial holds fewer, and the cap is stated when you reach it.

An identity added to a workspace can read everything in that workspace. There are no per-field permissions and none are planned; the unit of confidentiality is the workspace, and the answer to "they should not see this" is another workspace.

5. Agents, tokens and what your agents write

A token is a credential. You issue it from the interface, it is shown once, and we store only a digest. It carries exactly one workspace. Anyone or anything holding it can read and write that workspace as the actor it was issued to.

You are responsible for what your agents write through your tokens. An agent is an autonomous process acting on your instruction, and every write it makes is your write for the purposes of these terms, the data processing agreement and the law. That includes a name it pastes from a ticket, a credential it copies into a slot, and a loop that writes until the rate limit refuses it.

Revoke a token the moment you suspect it has leaked; revocation is per token and takes effect on the next call. We may revoke a token we have reason to believe is compromised or is being used in breach of section 6, and we tell you when we do.

6. Acceptable use

Use the service lawfully and for tracking work. Do not:

• Put special-category data under GDPR Article 9, criminal-offence data, or payment card numbers into a workspace. Slot text is free text and nothing in the product can stop an agent doing it, so the rule is yours to enforce on your agents.
• Put a secret into a slot. The event log records every value ever written and cannot be edited, so a credential written into a task is a credential in two places.
• Probe, scan or attack the service, another tenant, or our providers. Report a vulnerability to security@kalebtec.com instead and we acknowledge it within three working days.
• Share a token across engagements or with a party outside your account.
• Resell or sublicense access.

Resource consumption. Past a bound the service refuses the write, and nothing is billed for it. A workspace has a write rate limit, a task quota and a slot-text quota, and an account has a workspace ceiling. Each refusal says what was exceeded, when it resets and what to do instead, and the current figures are published in the MCP documentation and at /limits; they will change and this document does not restate them. Running into a bound is not a breach. Designing around one, for instance by spreading a flood across workspaces, is.

We may suspend an account that breaches this section, after notice where notice is possible, and without notice where the breach is an attack on the service or another tenant.

7. Your content

Everything in your workspaces is yours. You grant us the licence we need to host, store, render, transmit to your agents and operators, export and delete it, and nothing wider. We do not read it for our own purposes, we do not sell it, and we do not use it to train a model. The software, the schema and the documentation are ours.

Export is yours in every account state up to the purge, as JSON, with a CSV of its tasks, from each workspace's settings.

8. Price, VAT and payment

Billing is in operation, through Stripe.

20 euro a month per account, VAT included. One figure, shown inclusive because a consumer in the EU must see the total payable and this product is not business-only. The invoice states the tax applied and the rate. The subscription is monthly, is charged in advance, and renews each month until you cancel. Each renewal is charged to the payment method you subscribed with. Cancel at any time from the account page, with no notice period, no exit fee and no reason required. Cancelling takes effect at the end of the month already paid, and you keep the service until then. Where the law requires a reminder before a renewal, we send it to your verified address.

We may change the price on 30 days' notice to your verified address. A change applies from your next renewal after the notice, and you may cancel before it applies.

9. The trial and what happens at its end

The trial clock is in operation.

A trial lasts 30 days from the creation of your first workspace, needs no card, and gives you every tool. One trial per person, keyed on the verified address; a second address is a second trial, and we know that.

The account then moves through a published ladder. Days count from the day the trial started:

Subscribing before day 60 restores the account with every workspace intact. A dormant account (days 60 to 90) must be reactivated before it can subscribe: write to hello@kalebtec.com before day 90 to ask for that. A subscription that later ends enters the ladder at the read-only step, so its purge falls 60 days after the last paid day. Nothing is archived, degraded or partially kept on the way through. Notices go to your verified address on day 23, day 29, day 30, day 60 and day 76, each naming the exact date of the next transition and carrying the export link. The same schedule is the retention period in the privacy notice.

A purge is irreversible and it removes the event log. It leaves a tombstone of the outcome, carrying identifiers and row counts and no content, kept for 7 years.

10. Right of withdrawal for consumers

If you are a consumer, you may withdraw from a subscription within 14 days of subscribing, without giving a reason, and we refund the month in full within 14 days of your withdrawal. Withdrawing does not delete your account; the ladder in section 9 runs from the day the subscription ends. To withdraw, email hello@kalebtec.com with the account's address, or use the form in Annex A.

11. Availability, support and data safety

No service level is promised. There is no uptime figure, no maintenance window we commit to, and no credit. We run on third-party hosting and its outages affect the service. We tell you about a known outage when we know about it.

Support is email to hello@kalebtec.com, answered on working days. No response time is promised.

12. Ending the service

You end it by cancelling, by asking us to delete, or by leaving the ladder in section 9 to run. A deletion you ask for is done within 30 days and confirmed in writing.

We may end the service for you on 30 days' notice to your verified address, with the export available throughout and for the 90 days after. We may suspend or end it sooner under section 6, where the law requires it, or where a provider we depend on stops serving us and no replacement exists; in the last case the notice is whatever notice we had.

13. Liability

We are liable for what the law does not let us exclude: intent, gross negligence, death or personal injury, and every right a consumer holds under Spanish and EU law. Nothing here reduces those.

Beyond that, our aggregate liability under these terms in any 12 months is capped at the fees you paid us in those 12 months, and we are not liable for loss of profit or loss of business. For a business customer that cap is the bargain. For a consumer it applies only to the extent the law allows, and where it does not, the law's own limit applies.

You are liable to us for what your agents write in breach of section 6 and for a claim a third party brings against us because of content in your workspace.

14. Changes to these terms

We change these terms when the product or the law changes. Where a change reduces what you get, we tell you 30 days before it applies, and you may end the service before then without penalty. The date above shows the current version. We keep earlier versions and send you the one in force when you subscribed on request, and that version governs the subscription until the notice period runs.

15. Governing law and forum

Spanish law. For a business customer, the courts of Vigo. For a consumer, the courts of your own domicile, and nothing here takes from you any protection the law of the country where you live gives you and does not let you waive.

The European Commission's online dispute resolution platform has closed and is not offered. We are not adhered to a consumer arbitration board.

16. How the contract is formed, and the language

You create an account and accept these terms by continuing from the sign-in page, which names them. No box is ticked for the terms. The one box on that page is an optional marketing consent. Subscribing is a second act at checkout with its own confirmation. These terms are in English.

Annex A. Model withdrawal form

For a consumer who wishes to withdraw from a subscription under section 10. Email it to hello@kalebtec.com.

To Kalebtec Studio S.C., Avenida do Alcalde Portanet 20, 4º J, 36210 Vigo, Spain, hello@kalebtec.com. I hereby give notice that I withdraw from my contract for the trackxai subscription on the account registered to the following email address: [address]. Subscribed on: [date]. Name of consumer: [name]. Date: [date].