Terms of Service

Last updated: May 19, 2026 — v2026-05-19

Short version. FusionLayer is a developer-facing engine — application programming interfaces, software development kits, a command-line interface, a Model Context Protocol server, an evaluation engine, a sub-processor registry, and a marketplace for Universal AI Context Protocol primitives. These terms govern your use of all of it. The engine is the back end behind Inkfold and other applications built on it; this contract is between you and FusionLayer when you build on the engine directly. The engine is currently in pre-beta — there is no general-availability service-level agreement at the free tier.

1. The agreement

This agreement is between you ("you", "developer", "operator") and FusionLayer ("we", "us", "our"), operated from Israel. By creating a FusionLayer account, issuing application programming interface keys, installing the fl command-line interface, embedding the software development kit, publishing to the marketplace, or otherwise using any part of the engine — collectively, the "service" — you accept these terms and the Privacy Policy, which is incorporated by reference.

If you do not agree, do not use FusionLayer.

2. Eligibility, accounts, and keys

• Developer audience. The FusionLayer engine is targeted at developers, operators, and businesses. You must be at least 18 years old and have legal capacity to enter into contracts in your jurisdiction. End-user (consumer) accounts for the chat experience are operated by Inkfold under Inkfold's Terms.
• Account hygiene. You are responsible for the security of your account credentials and application programming interface keys. Tell us promptly at [email protected] if you suspect a compromise. We may rotate or revoke keys we reasonably believe have been compromised or are being misused.
• Acting on behalf of an organization. If you create an account on behalf of a company or other legal entity, you represent that you have authority to bind that entity to these terms.
• Suspension and termination. We may suspend or terminate access for material violation, fraud, abuse, or non-payment. Where feasible we will notify you first and give you an opportunity to cure.

3. What the service is

FusionLayer is the engine layer behind multi-vendor AI applications. It provides:

• Orchestration. A routing application programming interface that selects an appropriate AI model across vendors and dispatches the call.
• Context layer. Per-user context storage and retrieval, with three storage modes (Smart, Private, Incognito) as defined in the Privacy Policy.
• Software development kits. Server, browser, and language-specific clients.
• Command-line interface. The fl binary for shell-level interaction.
• Model Context Protocol server. A standards-compliant Model Context Protocol endpoint.
• Evaluation engine. Stateless multi-model evaluation as a separate Apache-2.0 component.
• Registry. Signed model and vendor catalogs delivered as hosted registries.
• Marketplace. A directory of Universal AI Context Protocol primitives published by users.
• Open standards. The Universal AI Context Protocol, the AI Action Protocol, and the Capture Manifest specifications are maintained as separate open specifications.

We may add or retire components over time. Material removals will be announced in advance by email or in the dashboard.

4. Crowd-wisdom routing and how you control it

The routing engine is improved by anonymized, fixed-shape execution-path metadata produced when requests run through it. The exact schema is in the Privacy Policy — Crowd-wisdom routing. The schema is enforced by a server-side allowlist; any record carrying a field outside the allowlist is rejected at ingestion. It does not include the text of prompts or answers, your user identifier, your Internet Protocol address, or the content of any document.

Default and your control. Crowd-wisdom contribution is enabled by default. You can disable it at any time, at no cost, with no service penalty: in the dashboard, Settings → AI → "Help improve FusionLayer routing for everyone"; from the command line, fl telemetry opt-out. To delete previously contributed pre-aggregation records, run fl telemetry clear. For users entitled to a right to object under the General Data Protection Regulation or analogous law, this opt-out is the operational implementation of that right.

5. Your content and how it is encrypted

Content sent through the engine — conversations, attached files, retrieved context, profile data — belongs to you (or to your end users, if you operate on their behalf). We claim no ownership, no analytic rights beyond what is described in the Privacy Policy, and no rights to use your content to train machine-learning models.

How content is encrypted depends on the storage mode selected for the conversation:

• Smart mode (default). Server-side AES-256-GCM at rest under a server-managed key. The engine extracts entities and indexes content so that subsequent retrieval is fast and high-quality. Operator staff do not read individual conversations; access is role-gated and audited. Smart mode is not zero-knowledge — we hold the key.
• Private mode (free opt-out). Client-side AES-256-GCM with a key derived from the user's passphrase via Argon2id. The key never leaves the user's device; the server only sees ciphertext and topology. We have no technical ability to decrypt Private-mode content.
• Incognito mode (per-conversation). Nothing is written to any persistent store. The session ends, the data is gone.

You grant us a narrow, operational license to store, transmit, back up, and synchronize content for the sole purpose of providing the service. The license terminates when you delete the content or the account.

6. Bring-your-own-key vendor access

When you configure your own application programming interface keys for AI vendors (Anthropic, OpenAI, Google, Mistral, OpenRouter, and others), FusionLayer acts as a routing proxy. Your relationship with each vendor is governed by that vendor's own terms and privacy policy. We forward your request to the selected vendor under your key, redact secrets where the engine's data-loss-prevention layer detects them, and return the response. We do not store your raw vendor keys in plaintext on our servers; key material is held as key_blob ciphertext as described in Privacy §2.

You are responsible for ensuring your use of each vendor's application programming interface complies with that vendor's policies, including content restrictions, rate limits, geographic restrictions, and any restrictions on model fine-tuning or distillation.

7. Marketplace and Universal AI Context Protocol primitives

• What you publish becomes public when you publish a primitive without visibility: private. The YAML source of the primitive is served publicly. Do not include secrets, personal data, or proprietary information in published primitives.
• License grant. By publishing publicly, you grant FusionLayer and other users a worldwide, non-exclusive, royalty-free license to use, reproduce, distribute, install, and modify the published primitive for the purpose of using it through the engine and its compatible clients. You retain ownership of the primitive and may revoke future distribution by unpublishing it; copies already installed by other users are not retroactively removed.
• Moderation. Every submission is scanned for prompt-injection patterns before review. Staff review each item before publication. We may reject or remove items at any time for safety, legal, or quality reasons.
• Private primitives. fl publish --private stores the primitive in our object storage but does not list it publicly and prevents installation by other users.
• Open standards. The Universal AI Context Protocol specification itself, the AI Action Protocol, and the Capture Manifest are maintained as open standards. The engine that implements them is proprietary; the wire format is not.

8. Acceptable use

You agree not to:

• Use the service to violate any law or infringe any third-party right.
• Attempt to break, circumvent, or weaken the client-side encryption in Private mode, the server-side telemetry allowlist, the two-tier vendor routing, or the data-loss-prevention pipeline.
• Attempt to access other users' accounts, content, keys, or data.
• Resell raw FusionLayer engine access or expose it as an application programming interface to third parties under your own brand without a separate written agreement.
• Use outputs from the engine, the evaluation engine, the registry, or the marketplace to train, fine-tune, distill, or otherwise create a competing routing or evaluation engine.
• Use the service to generate or distribute material that is illegal in your jurisdiction or in ours — including child sexual abuse material, defamation, targeted harassment, weapons-of-mass-destruction instructions, and content the underlying AI vendors explicitly prohibit.
• Abuse the service in ways that materially degrade it for other users — excessive scraping, automated mass account creation, denial-of-service attempts, or evading plan limits via concealed accounts.
• Use the engine for fully automated decisions producing legal or similarly significant effects on individuals without independent human review.

9. Billing, plans, and refunds

• Plans. Free, Pro, Team, and Enterprise. Current pricing is shown on the pricing page. Enterprise is signed under a separate order form that supersedes these standard terms to the extent of any conflict.
• Renewals and cancellation. Paid plans renew automatically; you may cancel from the dashboard. Your plan stays active until the end of the current billing period.
• Refunds — general. Outside any non-waivable consumer cooling-off period, we offer a prorated refund within 14 days of an initial purchase or upgrade, on request. After 14 days, refunds are at our discretion.
• Refunds — European Union consumers. If you are a consumer in the European Union, you have a 14-day right of withdrawal under Directive 2011/83/EU. By starting to use a paid plan you expressly request that performance begin immediately, and you acknowledge that your right of withdrawal under Article 16(m) of the Consumer Rights Directive expires once performance has fully begun, to the extent of services consumed. You retain your right of withdrawal for any unconsumed portion of the period for 14 days from purchase.
• Price changes. 30 days' notice by email before the next renewal. You may cancel without penalty before the new price applies.
• Taxes. Prices exclude applicable taxes; we add and remit taxes where legally required.

10. Service availability and pre-beta status

The FusionLayer engine is currently in pre-beta. No general-availability service-level agreement applies at the free tier. We aim for high availability and publish a status page, but pre-beta access is provided without uptime, latency, or response-time commitments. Material changes that degrade a feature you rely on will be announced in advance, normally at least 14 days before they take effect.

Service-level agreements, if any, are stated only in a signed enterprise order form. Where a signed order form exists, that agreement governs and overrides this section to the extent of any conflict.

11. Disclaimers

The service is provided "as is" and "as available". To the maximum extent permitted by law, we disclaim all implied warranties — including merchantability, fitness for a particular purpose, satisfactory quality, and non-infringement.

AI models can produce inaccurate, outdated, biased, or harmful output. Routing improves expected outcomes but does not guarantee any particular result. You are responsible for reviewing AI output before acting on it, especially in high-stakes domains.

12. Limitation of liability

To the maximum extent permitted by law, our total aggregate liability arising from or related to these terms or your use of the service is limited to the greater of (a) the amount you paid us in the 12 months preceding the event giving rise to the claim, or (b) one hundred euros (€100).

To the maximum extent permitted by law, we are not liable for indirect, incidental, consequential, special, exemplary, or punitive damages — including lost profits, lost data, or business interruption — even if we have been advised of the possibility.

Mandatory-law carve-out. Nothing in this section limits or excludes our liability for (a) death or personal injury caused by our negligence, (b) fraud or fraudulent misrepresentation, (c) gross negligence or willful misconduct, or (d) any liability that cannot lawfully be limited or excluded under the law that applies to you — including non-waivable consumer rights under the laws of Israel, of European Union member states (in particular under Directive 93/13/EEC), of the United Kingdom (Consumer Rights Act 2015), and of the State of California (Consumers Legal Remedies Act).

13. Indemnification

You will defend, indemnify, and hold us harmless from third-party claims arising from (a) your violation of these terms, (b) your violation of applicable law, (c) your content or your use of AI-generated output, or (d) your operation of an application or service built on top of the engine that is the subject of an end-user claim. We will give you prompt notice, allow you to control the defense, and reasonably cooperate at your expense.

14. Termination

• By you. Terminate from the dashboard at any time. Termination begins deletion of all encrypted blobs and account-linked metadata within 30 days, as described in Privacy §7. Export your data first via Settings → Data → Export.
• By us. We may suspend or terminate for material or repeated violation, fraud, non-payment, or legal requirement.
• Survival. Disclaimers, limitation of liability, indemnification, governing law, and miscellaneous survive termination.

15. Changes to these terms

We may update these terms. Material changes will be announced by email and in a banner on this page at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision. If you do not agree to a material change you may terminate before it takes effect.

16. Governing law and disputes

These terms are governed by the laws of the State of Israel, without regard to its conflict-of-laws rules. Disputes will be resolved exclusively in the competent courts of Tel Aviv-Jaffa, Israel.

Consumer carve-out. If you use FusionLayer as a consumer (outside any trade, business, craft, or profession) and the mandatory law of your country of habitual residence gives you protections that cannot be derogated from by contract — including the right of European Union consumers to bring proceedings in their country of residence under Regulation (EU) No 1215/2012 and to benefit from the consumer-protection law of that country, equivalent rights for United Kingdom consumers, and the protections of the California Consumers Legal Remedies Act — those protections apply and the clauses above are limited accordingly.

17. Miscellaneous

• Entire agreement. These terms, the Privacy Policy, and any signed order form are the entire agreement between you and FusionLayer on this subject matter.
• Order of precedence. A signed enterprise order form overrides these standard terms to the extent of any conflict. These terms otherwise override marketing materials and informal communications.
• No waiver. A failure to enforce any right is not a waiver of that right.
• Severability. If any provision is held unenforceable, the rest of the agreement remains in force and the unenforceable provision is replaced by one closest to the original intent.
• Assignment. You may not assign without our consent. We may assign in connection with a reorganization, acquisition, or sale of substantially all our assets; your rights are preserved under the same terms or better.
• Force majeure. Neither party is liable for delay or failure caused by events beyond reasonable control.
• Notice. We notify you by email to the address on file. You notify us at the addresses below.

18. Contact

• Legal and terms: [email protected]
• Privacy and data-subject requests: [email protected]
• Data Protection Officer: [email protected]
• Security incidents: [email protected]
• General contact: [email protected]

Operator (entity in formation): FusionLayer, operated from Israel. Postal address available on request to [email protected] pending entity registration.