Backstop
TermsPrivacyRefundDPA
DRAFT — not yet in force. These documents are templates grounded in how Backstop actually handles data. They must be reviewed and finalized by qualified legal counsel, and the placeholders (in [brackets]) filled in, before Backstop takes its first payment.

Terms of Service

Effective date: [DATE] · Last updated: [DATE]

These Terms of Service (“Terms”) are a binding agreement between [LEGAL ENTITY NAME] (“Backstop,” “we,” “us”) and the person or entity that creates an account or connects a system (“Customer,” “you”). By connecting a platform or using the service you agree to these Terms.

1. The service

Backstop is a superset Model Context Protocol (MCP) server that sits between an AI agent and your connected business systems (currently HubSpot and Shopify). It records the prior state of each write before it executes so that writes can later be reversed (“undo”), previewed, diffed, and audited. Backstop mediates writes you direct through it; it does not control your agent, your prompts, or the platforms themselves.

2. What Backstop is not

Backstop is a safety tool, not a guarantee. Certain operations are irreversible by nature (for example, a permanent product deletion) or produce side effects that cannot be recalled (for example, an email a workflow already sent, or an order a customer already placed). Backstop discloses reversibility in backstop_preview and refuses rather than guesses. You are responsible for the writes you direct through it. Backstop is not a backup product and is not a substitute for your own backups.

3. Accounts and connections

You must provide accurate information and are responsible for activity under your account and for safeguarding your access credentials and API tokens. You represent that you are authorized to connect the systems you connect and to direct writes to them. You may connect systems only within the limits of your plan.

4. Acceptable use

You will not: (a) use Backstop to access data you are not authorized to access; (b) attempt to circumvent security, rate limits, or tenant isolation; (c) reverse-engineer the service except as permitted by law; (d) use the service to violate the terms of a connected platform; or (e) use the service for unlawful purposes.

5. Fees, plans, and billing

Paid plans are billed in advance through our payment processor (Stripe) on the interval shown at checkout. A permanent free tier is available; its constraint is journal-history depth, never the ability to restore. Plan capabilities and limits are described on the Billing page. We may change prices with reasonable notice; changes apply to the next billing period. First paid months are covered by the Refund Policy.

6. Data, retention, and deletion

Your use of Backstop is also governed by our Privacy Policy and, where applicable, our Data Processing Addendum. Journal data is retained according to your plan's retention window. On downgrade, data is preserved for a 14-day grace window before shorter retention applies. You may exclude specific fields from journaling, and you may request immediate hard deletion of your recorded history at any time. A failed payment never stops journaling or silently disables protection.

7. Availability and changes

We aim for high availability but do not guarantee uninterrupted service. We may modify or discontinue features with reasonable notice where practicable. We will not delete journal data without at least 14 days' notice and a means to export it.

8. Warranties and disclaimers

The service is provided “as is” and “as available.” To the maximum extent permitted by law, we disclaim all implied warranties, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that every write can be reversed or that any particular incident can be recovered.

9. Limitation of liability

To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, consequential, or punitive damages, or lost profits or data, arising from the service. Our aggregate liability for any claim is limited to the amount you paid us in the twelve months before the event giving rise to the claim. [Confirm cap and any carve-outs with counsel.]

10. Indemnification

You will indemnify us against third-party claims arising from your data, your connected systems, or your breach of these Terms, except to the extent caused by our breach.

11. Termination

You may stop using the service and disconnect at any time. We may suspend or terminate for material breach. On cancellation, your recorded data is retained for 30 days (export available throughout) and then deleted, unless you request immediate deletion.

12. Governing law and disputes

These Terms are governed by the laws of [JURISDICTION], without regard to conflict-of-laws rules. [Specify venue and any arbitration terms with counsel.]

13. Changes to these Terms

We may update these Terms; material changes will be communicated with reasonable notice. Continued use after changes take effect constitutes acceptance.

14. Contact

[LEGAL ENTITY NAME], [ADDRESS] · legal@[DOMAIN]