Terms of Service

These Terms of Service (“Terms”) govern access to and use of Corsair's integration infrastructure, hosted platform at hub.corsair.dev, open-source SDK, hosted runtime (“Corsair Cloud”), and related services (collectively, the “Service”), provided by Corsair (“Corsair,” “we,” “us”). By creating an account, integrating the Corsair SDK, using Corsair Cloud, or otherwise using the Service, you (“Customer,” “you”) agree to these Terms.

If you do not agree, do not use the Service.

1. The Service

Corsair provides infrastructure that allows Customers to build applications (“Customer Applications”) which connect to third-party APIs and services on behalf of Customer's own end users (“End Users”). The Service includes:

• Corsair Hub (hub.corsair.dev): account management, OAuth connect and refresh, webhooks, permissions, and related control-plane features;
• The SDK: developer libraries (including corsair and plugin packages) that Customer integrates to store encrypted credentials and call third-party APIs; and
• Corsair Cloud: an optional hosted SDK runtime that executes integrations on Corsair-operated infrastructure.

2. Eligibility and Accounts

You must be at least 18 years old and capable of forming a binding contract to use the Service. You are responsible for maintaining the confidentiality of your API keys, signing secrets, and Cloud runtime keys, and for all activity that occurs under your Customer account.

3. Customer Data and Third-Party Integration Data

Excluding account registration information, Customer owns the data and information its Customer Application integrates or stores through the Service (“Customer Data”), including third-party integration data and any personal information contained therein. Customer grants Corsair a non-exclusive, worldwide, royalty-free license during the term of these Terms to use, store, and process Customer Data solely as necessary to provide and secure the Service in accordance with these Terms and our Privacy Policy.

To the extent Customer Data includes personal information relating to End Users, Customer is the controller (or equivalent) and Corsair acts as a processor or service provider when processing that data through Corsair Cloud or related hosted features, processing only on Customer's instructions as reflected in Customer's use of the Service and these Terms.

Customer is solely responsible for obtaining all rights, consents, and permissions necessary for Corsair to process Customer Data to provide the Service, and for providing End Users with privacy disclosures that accurately describe how the Customer Application accesses, uses, stores, and shares third-party integration data — in addition to Corsair's Privacy Policy.

4. Customer Obligations

Customer agrees that it is responsible for:

1. Compliance with third-party provider policies. Complying with the terms, API policies, and data-use restrictions of each third-party service Customer connects through the Service (including, where applicable, the Google API Services User Data Policy and Limited Use requirements), with respect to any data obtained through the Customer Application;
2. Appropriate use. Using third-party integration data obtained via the Service only for purposes disclosed to End Users, and not for advertising, sale to third parties, or training machine learning or AI models, except to the extent expressly permitted by the applicable provider's policies;
3. Scope minimization. Requesting only the permissions and OAuth scopes reasonably necessary for the Customer Application's implemented features;
4. Security of Customer systems. Maintaining reasonable safeguards for Customer Application infrastructure, API keys, and — when using SDK with Hub — the encryption key and database that store integration credentials; and
5. Own OAuth verification, where applicable. If Customer uses its own OAuth client credentials rather than Corsair's managed applications, Customer is solely responsible for any required provider verification or security assessments for those credentials.

Corsair may suspend or terminate access if we reasonably believe Customer's use violates these Terms, applicable third-party policies, or creates security or compliance risk to Corsair or other Customers.

5. Corsair's Obligations

Corsair will:

1. Provide the Service in accordance with these Terms and our Privacy Policy;
2. Not use Customer Data for advertising, model training, or analytics unrelated to operating and securing the Service;
3. Encrypt stored credentials and keys at rest and maintain reasonable security measures for data in transit and at rest within the Service, including isolation between Customers' hosted environments; and
4. Provide reasonable notice of material changes to the Service that could affect Customer's compliance obligations.

6. Restrictions

You will not, and will not permit any Customer Application or End User to, use the Service to:

1. Violate applicable law or any third-party provider's API or data policies;
2. Use multiple accounts or credentials to circumvent provider usage limits, abuse restrictions, or anti-spam protections;
3. Distribute spam or unsolicited commercial messages through integrated services;
4. Use the Service to exfiltrate, back up, or replicate third-party data at scale outside the context of a legitimate, disclosed user-facing feature;
5. Reverse engineer, decompile, or attempt to derive source code from the Service, except as permitted by applicable law;
6. Attempt to access another Customer's data or bypass tenant or project isolation; or
7. Use the Service in any manner that could disable, overburden, or impair Corsair's standing with third-party providers or OAuth programs.

7. Intellectual Property

Corsair retains all right, title, and interest in the Service, including Hub, Corsair Cloud, the SDK, and associated software, excluding Customer Data and Customer Application code. Customer retains all rights to its Customer Applications and Customer Data.

8. Fees

Use of the Service may be subject to fees as described on our pricing page, in your applicable order form, or subscription agreement. Current plans include:

• Hobby — $0/month for small projects, including unlimited tool calls, up to 50 connections, up to 100k webhook events, unlimited managed permissions and auth pages, up to 3 team members, Corsair-branded consent screen, Discord community support, and community custom integrations.
• Pro — $200/month for teams in production, including unlimited tool calls, unlimited connections, unlimited webhooks, unlimited managed permissions and auth pages, unlimited team members, custom consent screen branding, Slack support, and custom integrations built by the Corsair team.
• Enterprise — custom pricing for organizations with custom needs, including custom limits and support arrangements as agreed in an order form.

We may change pricing with reasonable notice. Continued use of paid features after a price change takes effect constitutes acceptance of the updated fees, unless otherwise required by your order form or applicable law.

9. Termination

Either party may terminate these Terms at any time with notice as described in your order form or account settings. Corsair may suspend or terminate access immediately if Customer's use violates these Terms or creates security or compliance risk.

Upon termination, Customer's access to Hub and Corsair Cloud will cease. Customer Data stored in a Corsair-managed database for Cloud may be deleted in accordance with our Privacy Policy. Customer remains responsible for Customer Data in databases Customer operates or provides (including when Cloud is configured to use a customer-provided database), and for winding down use of third-party APIs in compliance with applicable provider policies.

10. Disclaimers

The service is provided “as is” without warranties of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, or non-infringement. Corsair does not warrant that the service will be uninterrupted, error-free, or that third-party providers will continue to make their APIs available on current terms.

11. Limitation of Liability

To the maximum extent permitted by law, Corsair will not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of data, revenue, or profits, arising from Customer's use of the Service, including any consequences of Customer's failure to comply with third-party provider policies. Corsair's total liability arising out of these Terms will not exceed the amounts paid by Customer to Corsair in the 12 months preceding the claim.

12. Indemnification

Customer will indemnify and hold Corsair harmless from any claims, damages, or expenses (including reasonable attorneys' fees) arising from: (a) Customer Application's use of third-party integration data in violation of applicable provider policies or law; (b) Customer's breach of Section 4 of these Terms; or (c) any dispute between Customer and its End Users.

13. Changes to the Service or Terms

We may modify the Service or these Terms from time to time. We will provide reasonable notice of material changes. Continued use of the Service after changes take effect constitutes acceptance of the revised Terms.

14. Contact

Corsair

team@corsair.dev