Terms of Service

These Terms of Service ("Terms" or "Agreement") constitute a legally binding agreement between you, whether personally or on behalf of an entity ("you" or "User"), and Sonomos, Inc., a Delaware corporation with its principal place of business at 9924 Kika Court #2416, San Diego, CA 92129 ("Company," "we," "us," or "our"), concerning your access to and use of the Sonomos websites, products, and services described in Section 1 (collectively, the "Services").

These Terms are our single, shared terms of service. They are intended to apply uniformly across everything we operate, so that you do not need to read or accept a different agreement each time you move between one of our websites and another, or between a website and one of our products.

We will give you prior notice of any change to these Terms that materially reduces your rights or increases your obligations, in the manner described in Section 22.2. Those changes become effective thirty (30) days after notice is given, and apply only going forward. Changes that apply to security updates, bug fixes, new functionality that does not reduce your existing rights, or compliance with a court order or legal requirement may be effective immediately.

The Services are intended for users who are at least 18 years old and who have reached the age of majority where they live. Persons who do not meet both of those conditions are not permitted to use or register for the Services.

You can contact us by phone at 1-858-610-4514, by email at info@sonomos.ai, or by mail to the address above.

1.1 Sonomos Websites (the "Sites"). The "Sites" means the website located at sonomos.ai and every subdomain of sonomos.ai that we operate, whether it exists as of the Last Updated date above or is launched at any time afterward. As of the Last Updated date, the Sites include, without limitation:

• sonomos.ai and www.sonomos.ai — our main website.
• support.sonomos.ai — our Support Center.
• trust.sonomos.ai — our Trust Center.

1.2 Future Subdomains Are Automatically Covered. Any additional website that we make available at a subdomain of sonomos.ai — for example, and without limitation, an address such as dashboard.sonomos.ai, app.sonomos.ai, status.sonomos.ai, docs.sonomos.ai, or api.sonomos.ai — is part of the Sites and is governed by these Terms from the moment it becomes available. No separate agreement, republication, or additional notice is required for these Terms to apply to a new subdomain. Where a specific Site requires additional or different terms because of what it does, we will publish those supplemental terms on that Site, and they will apply in addition to (and, only to the extent of a direct conflict, in place of) these Terms for that Site.

1.3 Sonomos Products (the "Products"). The "Products" means the software we distribute, including:

• Sonomos Locke — our desktop application, including its local daemon, graphical application, command-line tools, installers, updates, and documentation.
• The Locke browser extension — including its detection and masking features, together with related local software components.
• Any other product or related local software component we make available that refers or links to these Terms.

1.4 The "Services". "Services" means the Sites and the Products together, plus the account, licensing, billing, support, and related services we provide in connection with them. Except where a provision expressly says otherwise, everything in these Terms applies to all of the Services.

1.5 Other Agreements That Apply. These Terms operate alongside a small number of other documents:

• Acceptable Use Policy (sonomos.ai/acceptable-use) — applies across all of the Services and is incorporated into these Terms by reference.
• Website Privacy Policy (sonomos.ai/privacy) — applies to the Sites, across all sonomos.ai subdomains.
• Locke Privacy Policy (sonomos.ai/locke/privacy) — applies to the Locke desktop application and browser extension.
• End-User License Agreement (sonomos.ai/eula) — governs your licence to install and run the Locke software. Where the EULA and these Terms conflict with respect to your licence to the Locke software, the EULA controls — except that Section 17 (Governing Law) and Section 18 (Dispute Resolution) of these Terms govern every dispute arising under either document.

The information provided when using the Services is not intended for distribution to or use by any person or entity in any jurisdiction where such distribution or use would be contrary to law or regulation.

2.1 What the Products Do. The Products provide a user-side privacy tool designed to help protect personal and sensitive information when interacting with artificial intelligence tools and online services. They identify and assist in safeguarding sensitive data contained in user inputs before such information is transmitted to a third-party AI system, enabling you to use AI services while maintaining greater control over your data.

2.2 Local-First Architecture. Locke, in both its desktop and browser-extension form, is built on a local-first architecture. All sensitive-data detection and masking is performed entirely on your device. Locke does not transmit the content it inspects to our servers or to any third party. The message you then choose to send — after Locke has masked it — travels directly from your device to the AI provider you selected, at your direction. It is not routed through us, and we never receive it. Section 2.3 describes the separate, limited connections the Products make to us and to our service providers.

2.3 What the Products Communicate. The Products communicate with our servers and our service providers in order to: authenticate your account through our authentication provider; validate your license and confirm your subscription status, which the desktop application checks periodically while it is running; synchronise the settings you configure — including which AI services you have asked Locke to monitor and which categories of sensitive data you have enabled — so that they are available to you across devices and, on team plans, to your administrator; check for and deliver updates; and deliver support messages and crash reports, which are sent only when you choose to send them. These connections necessarily disclose your IP address and your subscription status to us or to the relevant provider. They do not carry the content Locke inspects.

2.4 What the Products Do Not Do. The Products do not: transmit, log, or store the content you type, paste, or scan; use cloud-based AI or machine-learning services to analyse that content; record the pages you visit or your browsing history; use cookies, web beacons, pixels, or advertising trackers; or collect behavioural usage analytics. The settings synchronised under Section 2.3 reflect the configuration choices you have made, not the sites you actually visit.

2.5 No Guarantee of Complete Protection. The Products operate as privacy assistance tools. We do not guarantee that they will detect all sensitive data, prevent all disclosures, or operate without interruption or error. You remain solely responsible for any content you choose to submit, share, or process using third-party services.

2.6 Use in Regulated Industries. The Services are designed to assist users in protecting sensitive information and may be used as one component of a broader privacy and compliance program in regulated industries, including legal, financial services, and healthcare. However, use of the Services alone does not constitute compliance with any specific regulation, including but not limited to HIPAA, GLBA, FISMA, SOX, FERPA, or similar frameworks.

Our Intellectual Property. We are the owner or licensee of all intellectual property rights in our Services, including all source code, algorithms, databases, functionality, software, website designs, text, photographs, and graphics, as well as the trademarks, service marks, and logos.

Your Use of Our Services. Subject to your compliance with these Terms, we grant you a non-exclusive, non-transferable, revocable license to access the Services and download or print a copy of any Content to which you have properly gained access, solely for your personal, non-commercial use or internal business purpose.

Your Submissions and Feedback. If you choose to send us a suggestion or idea for improving the Services ("Feedback"), you grant us a perpetual, irrevocable, worldwide, royalty-free, fully paid-up, non-exclusive license to use, reproduce, modify, create derivative works from, distribute, and otherwise exploit that Feedback. This license covers the suggestion or idea itself and nothing more. It does not apply to support requests, bug reports, or any personal information contained in a message you send us — those we handle only as described in the applicable privacy policy — and it gives us no rights in your confidential information or in the personal information of any third party.

By using the Services, you represent and warrant that: (1) all registration information you submit will be true, accurate, current, and complete; (2) you will maintain the accuracy of such information; (3) you have the legal capacity and agree to comply with these Terms; (4) you are at least 18 years old and have reached the age of majority where you live; (5) you will not access the Services through automated means except as expressly authorized; (6) you will not use the Services for any illegal or unauthorized purpose; and (7) your use will not violate any applicable law or regulation.

You may be required to register to use the Services. You agree to keep your login credentials confidential and will be responsible for all use of your account. Each authorized user must have a unique account. You may not share login credentials. We reserve the right to suspend or terminate any account we determine is being used inappropriately.

Plans and Pricing. We offer two plans. The Free plan is provided at no charge and includes one basic Privacy summary report each calendar month. The Teams plan adds team administration and full reporting features and is offered as a paid subscription. The price, billing period, and included features of the Teams plan are shown at sonomos.ai/pricing and on the checkout screen before you are asked to pay.

Billing and Renewal. Paid subscriptions renew automatically. Before you provide payment information, we will show you — next to the button you use to subscribe — the subscription being purchased, the initial and recurring price, the billing interval, the length of any free trial, and how to cancel. We will ask for your affirmative consent to those automatic-renewal terms separately from your acceptance of these Terms, and we will not pre-check that consent for you. After you subscribe, we will send you an email you can keep that repeats those terms and tells you how to cancel. You consent to our charging your payment method at the start of each renewal period until you cancel.

Reminders and Changes. If you start a free trial, we will remind you before it converts to a paid subscription. For any subscription with a term of a year or longer, and for any continuous subscription that has run for a year, we will send you a renewal reminder before we charge you again. If we increase the price of an existing subscription, we will give you notice before the increase takes effect, and you may cancel rather than accept it; if you cancel for that reason after being charged, we will refund the unused portion on a pro-rata basis.

Payment Processing. All payments are processed by Stripe, Inc. All payments shall be in U.S. dollars. We do not receive or store your full payment card number, CVV, or bank account details on our servers.

Fee Changes. We may modify subscription fees upon thirty (30) days' prior written notice. Modified fees take effect at the start of your next billing cycle.

Cancellation. You can cancel at any time in your account settings, online, in no more steps than it took you to subscribe, and without having to call us, speak to anyone, or decline a retention offer first. If you subscribed through a channel other than our website, you may also cancel through that channel. Your cancellation takes effect immediately on our side; your access continues until the end of the term you have already paid for.

Refunds. Except as stated in this Section or required by applicable law, subscription fees are non-refundable. We will provide a pro-rata refund where we terminate your access for our convenience, and where you cancel following a price increase as described above.

EEA and UK Consumers — Right to Withdraw. If you are a consumer resident in the European Economic Area or the United Kingdom, you may withdraw from your purchase within fourteen (14) days, without giving a reason, and receive a full refund. To withdraw, email info@sonomos.ai or send us any other clear statement of your decision. If you ask us to give you access to a paid tier immediately, you are consenting to us beginning performance during the withdrawal period, and you acknowledge that you lose the right to withdraw once we have fully performed.

You may not access or use the Services for any purpose other than that for which we make the Services available. As a user, you agree not to:

1. Systematically retrieve data or content from the Services to create or compile a collection, compilation, database, or directory without our written permission.
2. Trick, defraud, or mislead us or other users, especially in any attempt to learn sensitive account information.
3. Circumvent, disable, or interfere with security-related features of the Services.
4. Use the Services to engage in any activity that violates applicable law, including using the Services to facilitate concealment of information in violation of legal discovery, regulatory, or reporting obligations.
5. Use any information obtained from the Services to harass, abuse, or harm another person.
6. Make improper use of our support services or submit false reports of abuse or misconduct.
7. Engage in unauthorized framing of or linking to the Services.
8. Upload or transmit viruses, Trojan horses, or other material that interferes with the Services' operation.
9. Engage in any automated use of the system, except as expressly authorized.
10. Delete or alter any copyright or other proprietary rights notice from any Content.
11. Attempt to impersonate another user or person.
12. Interfere with, disrupt, or create an undue burden on the Services or connected networks.
13. Attempt to bypass any measures designed to prevent or restrict access to the Services.
14. Copy or adapt the Services' software, except as permitted by applicable law.
15. Except as permitted by applicable law, decipher, decompile, disassemble, or reverse engineer any software comprising any part of the Services.
16. Use the Services for competitive analysis, benchmarking, or developing a competing product or service.
17. Collect usernames or email addresses for sending unsolicited communications.
18. Use the Services to advertise or sell goods and services not authorized by us.
19. Sell, share, or otherwise transfer your account or profile.
20. Use the Services in a manner that is abusive, fraudulent, deceptive, or intended to harm the platform, other users, or third parties.
21. Share, distribute, or sublicense access to the Products or any local processing components to unauthorized users.

The Services do not provide functionality for users to submit, post, or publish user-generated content. To the extent you send us Feedback (as defined in Section 3), such Feedback is governed by the terms set forth in Section 3 under "Your Submissions and Feedback."

The Services may contain links to third-party websites or display third-party content. Such third-party websites and content are not investigated, monitored, or checked for accuracy by us, and we are not responsible for them.

The Products are designed to work with third-party AI platforms (such as ChatGPT, Claude, Gemini, and similar services). Your use of those platforms is governed by their respective terms and privacy policies, not by these Terms.

We reserve the right, but not the obligation, to: (1) monitor the Services for violations of these Terms; (2) take appropriate legal action against anyone who violates the law or these Terms; (3) refuse, restrict access to, or limit the availability of the Services to any user; (4) remove files or content that are excessive in size or burdensome to our systems; and (5) otherwise manage the Services to protect our rights and property.

We care about data privacy and security. Unlike these Terms, which are shared across everything we operate, privacy is addressed by two separate policies, because our websites and our software handle data in materially different ways:

• Website Privacy Policy (sonomos.ai/privacy) — governs personal information processed through the Sites, meaning sonomos.ai and every sonomos.ai subdomain we operate, including support.sonomos.ai and trust.sonomos.ai and any subdomain launched in the future.
• Locke Privacy Policy (sonomos.ai/locke/privacy) — governs personal information in connection with the Locke desktop application and browser extension, which perform their sensitive-data processing locally on your device.

Both policies are incorporated into these Terms by reference. By using a given part of the Services, you agree to be bound by whichever of those policies applies to it. Where you use both our websites and our Products, both policies apply to their respective parts.

The Services are hosted in the United States. If you access the Services from outside the United States, you acknowledge that your personal data will be transferred to and processed in the United States.

Term. These Terms remain in full force and effect while you use the Services.

Termination by You. You may terminate at any time by canceling your subscription, uninstalling the Products, and ceasing to use the Sites. Cancellation takes effect at the end of the current billing period.

Termination by Us. We may suspend or terminate your access for breach of these Terms or of the Acceptable Use Policy. We will give you notice where it is practicable to do so, and may act immediately where the breach is causing harm to us, to another user, or to a third party. We may also terminate for our convenience on thirty (30) days' written notice, in which case we will refund the pro-rata portion of any prepaid fees. This Section does not limit any remedy you have under applicable consumer law.

Effects of Termination. If we terminate or suspend your account for cause, you are prohibited from registering a new account. Upon termination, you must cease all use of the Services and uninstall the Products.

Survival. Sections 3, 7, 11, 14, 15, 16, 17, 18, 20, and 22 survive termination.

We reserve the right to change, modify, or remove the contents of the Services at any time without notice. This Section concerns the content and features of the Services; it does not permit us to change these Terms, which we may amend only as described in Sections 1 and 22.2. We cannot guarantee continuous availability, and we have no liability for loss or inconvenience caused by downtime or discontinuance, except where Section 15 provides otherwise or applicable law does not permit that exclusion.

Nothing in this Section excludes or limits any warranty, guarantee, or right that applicable law does not permit us to exclude or limit. If you are a consumer resident in the European Economic Area, the United Kingdom, or Australia, you retain the statutory conformity rights and remedies your local law gives you in respect of digital content and services, and this Section does not restrict them.

Exceptions to the limitation. Nothing in these Terms excludes or limits our liability for fraud or fraudulent misrepresentation, for gross negligence or willful misconduct, for death or personal injury caused by our negligence, or for any other liability that cannot lawfully be excluded or limited. California Civil Code section 1668 applies to this Section.

Certain U.S. state laws and international laws do not allow limitations on implied warranties or the exclusion or limitation of certain damages. If those laws apply to you, some of the above disclaimers and limitations may not apply, and you may have additional rights. If you are a consumer resident in the European Economic Area, the United Kingdom, or Australia, you keep every right and remedy your local law gives you that cannot be waived by contract, and nothing in these Terms restricts them.

You agree to defend, indemnify, and hold us harmless from and against third-party claims, and from the losses, damages, liabilities, costs, and reasonable attorneys' fees resulting from them, arising out of: (1) your use of the Services in violation of these Terms or of applicable law; (2) your breach of these Terms; (3) your breach of your representations and warranties; (4) your violation of a third party's rights; (5) content you process, submit, or share using the Services in violation of these Terms or of applicable law; or (6) your negligent or willful acts.

We will notify you promptly of any claim for which we seek indemnity, give you sole control of its defense and settlement — except that you may not settle in a way that admits fault on our part or imposes any obligation on us without our prior written consent — and cooperate with you at your reasonable expense. This Section does not apply to the extent a claim arises from our own breach, negligence, or misconduct, and it does not apply where applicable consumer law does not permit it.

These Terms are governed by and construed in accordance with the laws of the State of California, without regard to its conflict of law principles. You expressly disclaim the applicability of UCITA and CISG.

If you are a consumer, this choice of law does not deprive you of the protection of the mandatory provisions of the law of the country where you habitually reside, and you may bring proceedings in the courts of that country where your local law gives you that right.

Your Right to Opt Out. You may reject this arbitration agreement by emailing info@sonomos.ai with your name and the email address on your account, and a statement that you are opting out of arbitration, within thirty (30) days of the date you first accept these Terms. Opting out affects nothing else in these Terms, and we will not retaliate against you for doing so.

Informal Negotiations. The parties agree to first attempt to negotiate any dispute informally for at least thirty (30) days before initiating arbitration or litigation.

Binding Arbitration. If the parties cannot resolve a dispute informally, the dispute will be resolved by binding arbitration administered by the American Arbitration Association. Where you are a consumer, the AAA Consumer Arbitration Rules apply; in all other cases the AAA Commercial Arbitration Rules apply. The arbitration will take place in San Diego County, California, or — at your election if you are a consumer — in the county where you live, or by telephone or video conference.

Small Claims. Either party may instead bring an individual claim in small-claims court, if the claim qualifies, rather than proceed in arbitration.

Arbitration Costs. For consumer disputes, we will pay all AAA filing, administration, and arbitrator fees for claims of less than ten thousand dollars ($10,000), unless the arbitrator determines the claim is frivolous. For all other claims, fees are allocated under the applicable AAA rules.

Class Action Waiver. Any arbitration or litigation shall be limited to the dispute between the parties individually. No arbitration shall be joined with any other proceeding, and no dispute may be arbitrated on a class-action, collective, or representative basis.

Non-Severability of the Class Action Waiver. If the class action waiver in this Section is found unenforceable as to a particular claim, then this entire Section 18 is void as to that claim, and that claim proceeds in court. The remainder of these Terms is unaffected.

Mass Arbitration. If twenty-five (25) or more similar demands for arbitration are filed against us by or with the assistance of the same law firm or coordinated group, the AAA Mass Arbitration Supplementary Rules apply, and the parties will cooperate in good faith with the process arbitrator appointed under them.

Exceptions. Disputes concerning intellectual property rights, disputes related to theft, piracy, invasion of privacy, or unauthorized use, and claims for injunctive relief are not subject to the informal negotiation and arbitration provisions. These exceptions apply equally to both parties.

Claims That Cannot Be Arbitrated. Nothing in this Section requires arbitration of a claim of sexual assault or sexual harassment where you elect not to arbitrate it, as provided by the Ending Forced Arbitration of Sexual Assault and Sexual Harassment Act, or of any other claim that applicable law does not permit to be resolved by pre-dispute arbitration.

Other Agreements. This Section governs disputes arising under these Terms, the End-User License Agreement, the Acceptable Use Policy, and any other agreement you enter into with us in connection with the Services, unless that agreement expressly says otherwise.

Statute of Limitations. Any claim must be filed within one (1) year after such claim arose or be forever barred, except where applicable law provides a longer period that cannot be shortened by agreement.

Consumers Outside the United States. If you are a consumer resident in the European Economic Area or the United Kingdom, this Section does not deprive you of the right to bring proceedings in your local courts, and the class action waiver does not affect the right of a qualified entity to bring a representative action on your behalf under applicable law.

If you believe material on the Services infringes your copyright, you may submit a notification pursuant to the DMCA by providing our Copyright Agent with the required information in writing.

Copyright Agent: Sonomos, Inc., 9924 Kika Court #2416, San Diego, CA 92129. Email: info@sonomos.ai

Visiting the Services, sending us emails, and completing online forms constitute electronic communications. You consent to receive electronic communications, and you agree that all agreements, notices, disclosures, and other communications provided electronically satisfy any legal requirement that such communication be in writing.

If any complaint is not satisfactorily resolved, you can contact the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs at 1625 North Market Blvd., Suite N 112, Sacramento, California 95834 or by telephone at (800) 952-5210 or (916) 445-1254.

22.1 Entire Agreement. These Terms, together with our Acceptable Use Policy, our Website Privacy Policy, our Locke Privacy Policy, the End-User License Agreement, and any applicable Order Form, constitute the entire agreement between you and us regarding the Services.

22.2 Amendments. We may update these Terms from time to time. For any change that materially reduces your rights or increases your obligations — including any change to Section 17 or Section 18 — we will give you at least thirty (30) days' notice before it takes effect, by email to the address on your account and by a notice on the Sites, and we will keep the previous version available at sonomos.ai/terms/archive. Material changes apply only going forward, never to a dispute that arose before they took effect. If you do not accept a material change, you may terminate before it takes effect and we will refund the pro-rata portion of any prepaid fees. Other changes take effect when posted. We will not treat your continued use as acceptance of a material change to Section 18; that requires your affirmative agreement.

22.3 Severability. If any provision is determined to be unlawful, void, or unenforceable, that provision shall be modified to the minimum extent necessary or severed without affecting the remaining provisions.

22.4 No Waiver. Our failure to exercise or enforce any right shall not operate as a waiver.

22.5 Assignment. We may assign our rights and obligations without restriction. You may not assign without our prior written consent.

22.6 Force Majeure. We shall not be liable for any failure or delay in performance due to causes beyond our reasonable control.

22.7 Independent Contractors. Nothing in these Terms creates a partnership, joint venture, employment, or agency relationship.

22.8 Headings. Section headings are for convenience only.

22.9 No Third-Party Beneficiaries. These Terms are for the benefit of the parties only.

Sonomos, Inc.
9924 Kika Court #2416
San Diego, CA 92129
United States

General: info@sonomos.ai