Terms of service.

The following policies are incorporated by reference into these Terms and form part of the agreement between you and Alovia. By agreeing to these Terms (for example, by checking the agreement box at signup, or by continuing to use the service after an update), you also agree to each of them:

• —Privacy Policy: what we collect, how we use it, and your rights.
• —Cookie Policy: how cookies and similar technologies are used on the service.
• —Data Processing Addendum: if you use Shield to protect your own website or Watchdog to inspect your agents' traffic, how we handle your visitors' and users' data on your behalf.

If there is any conflict between these Terms and an incorporated policy, the incorporated policy controls for the subject matter it covers.

1.1 Eligibility

You must be at least 18 years old to use Alovia.

1.2 Account security

You are responsible for:

• —Maintaining the confidentiality of your password and API keys.
• —All activities that occur under your account, including traffic sent with your fleet API keys.
• —Notifying us immediately of any unauthorized access.
• —Providing accurate and complete information.

1.3 Account sharing

Each account is for individual use only. Sharing accounts or credentials is prohibited and may result in account termination.

You agree not to use the service to:

• —Connect a website to Shield that you do not own or are not authorized to protect.
• —Connect agents or systems to Watchdog whose traffic you have no right to process.
• —Use Watchdog to surveil, profile, or monitor individual people rather than your own software.
• —Spread malware, viruses, or malicious code.
• —Harass, abuse, or harm others.
• —Attempt to hack, compromise, or bypass our security measures, or probe protections on sites you do not own.
• —Scrape, crawl, or abuse our API beyond rate limits.
• —Use automated systems or bots to create accounts or access the service.
• —Resell or redistribute our services without authorization.
• —Interfere with other users' use of the service.
• —Use the service for any illegal purpose.

Violations may result in immediate account suspension or termination.

3.1 Your data

Your sites, your agents, and your data remain yours. When you connect a website or an agent to Alovia:

• —You retain all rights to your websites, applications, agents, and the data that flows through them.
• —You grant us a limited license to process that traffic and those messages solely to provide the protection you asked for.
• —You represent that you own or are authorized to protect everything you connect.
• —You are responsible for giving your own visitors and users any notice your local law requires about traffic inspection.

3.2 Our platform

Alovia and all its features, code, design, and technology are our intellectual property. You may not:

• —Copy, modify, or reverse engineer our platform.
• —Use our trademarks, logos, or branding without permission.
• —Create derivative works based on our service.

3.3 Copyright

Alovia does not host or publish user content. If you believe material on aloviaai.com infringes your copyright, contact copyright@aloviaai.com with enough detail for us to locate and evaluate the material.

Alovia provides the following services:

• —Shield (website protection): protection that sits in front of a website you own and inspects incoming visitor traffic to detect and block scrapers, unwanted bots, and attacks. See Section 4.3.
• —Security scan: checks that examine your connected site from the outside and, if you install the Alovia GitHub App, your selected repositories, to find exposed keys, open databases, and weak settings.
• —Watchdog (agent protection): a check that runs on the messages your AI agents receive before the agent acts, returning a verdict such as allowed, flagged, or blocked. See Section 4.4.

4.1 Beta service and availability

Alovia is provided during the beta without any uptime guarantee or service-level commitment. We do not promise uninterrupted or error-free service. We may:

• —Perform maintenance (we'll notify you in advance when possible).
• —Add, change, or withdraw features.
• —Experience downtime due to factors beyond our control.
• —Pause or end the beta, or an individual invitation, at any time.

4.2 Detection limitations

No security product catches everything. Shield may not block every bot, and sophisticated actors may evade detection. Watchdog's verdicts are automated judgments and can be wrong in both directions: it may block a legitimate message or allow a harmful one. You remain responsible for your own systems, and you should not treat Alovia as your only line of defense. We'll surface what we find, but we cannot be held responsible for attacks or losses that occur.

4.3 Shield (website protection)

If you connect a website you own to Shield, incoming visitor requests to that site pass through our protection so we can detect and block scrapers, unwanted bots, and attacks. To do this, we process traffic metadata from your visitors, such as IP addresses, request headers, paths, and timestamps. We act as your service provider for that data: we do not sell it, and we do not use it to train generative AI. We also use this traffic to make Shield's protection smarter over time across the sites we protect, so it gets better at telling automated traffic from real visitors, and never to identify individual people. How we handle it is described in our Privacy Policy and our Data Processing Addendum.

You are responsible for the website you connect. You represent that you own it or are authorized to protect it, and that you will give your own visitors any notice or disclosure your local law requires about traffic inspection. You may remove a site at any time, which stops the protection and erases the visitor history we collected for that site.

4.5 When paid plans arrive

Alovia is free during the beta, and paid plans will arrive after it. When they do, we commit to the following, in line with California's Automatic Renewal Law (Bus. & Prof. Code § 17600 et seq., as amended effective July 1, 2025):

• —You will never be converted from the free beta to a paid plan automatically or silently. Conversion happens only with your express, affirmative consent to the paid terms.
• —Before we collect any billing information, you will see the price, what it covers, and how often you will be charged, clearly and conspicuously.
• —If a plan renews automatically, you will receive the reminders the law requires, and any material change to pricing or terms will be notified to you in advance.
• —Cancelling will be as easy as signing up: a self-serve cancellation in your account settings, no phone call, no chat with a retention team.
• —If you do nothing when the beta ends, you stay on a free tier or your service winds down gracefully; nothing you protected gets held hostage.

4.4 Watchdog (agent protection)

If you connect an agent to Watchdog through our SDK or API, the messages that agent receives are sent to us for evaluation before your agent acts on them. Evaluation combines fast local checks with, for a small share of borderline messages, analysis by a large language model operated by a third-party AI provider named in our Subprocessors list. We record the verdict, the reason, and short excerpts needed to show you why a message was flagged or blocked. Those messages may contain personal data of your own users; we act as your service provider for that data, we do not sell it, and we do not use it to train generative AI. Retention and deletion are described in our Privacy Policy.

You choose the enforcement mode. In enforce mode, Watchdog's verdict can stop a message from reaching your agent, and repeat offenders can be quarantined automatically; in observe mode it only records findings. You are responsible for the agents you connect and for any consequences of the enforcement settings you choose.

Each fleet also has a setting, off by default, to help improve detection. With your opt-in, the redacted excerpts behind flagged verdicts are used to train our own security detection models, shared across the customers who opted in. We never train generative AI on your data. Turning the setting off stops future contribution and erases that fleet's stored examples.

5.1 Account deletion

You can delete your account at any time from your account settings. When you request deletion:

• —A 30-day grace period begins during which you can cancel the deletion by logging back in.
• —After 30 days, your account will be locked and you will no longer be able to log in.
• —Personal account data (name, email, profile) is deleted within 30 days of the grace period.
• —Security findings, verdicts, and traffic history tied to your account are deleted with it, except records we must keep to meet a legal obligation or an active legal hold, which we delete once they are no longer needed.

5.2 Our right to terminate

We may suspend or terminate your account if:

• —You violate these Terms.
• —You use the service to process traffic or content you have no right to process.
• —You abuse the service or other users.
• —We're required to do so by law.

We'll notify you before termination when possible, but we reserve the right to terminate immediately for serious violations.

6.1 “As is” service

Alovia is provided “as is” and “as available” without warranties of any kind, either express or implied, including but not limited to:

• —Warranties of merchantability or fitness for a particular purpose.
• —Warranties that the service will be uninterrupted or error-free.
• —Warranties that defects will be corrected.
• —Warranties regarding accuracy, reliability, or completeness.

6.2 No guarantee of protection

Important: while we use advanced technology to protect your sites and agents, we cannot guarantee:

• —That every bot, scraper, or attack will be detected or blocked.
• —That Watchdog's verdicts will always be correct.
• —That protections cannot be evaded or circumvented.
• —That your systems will suffer no breach, loss, or downtime.

6.3 Limitation of liability

To the maximum extent permitted by law, Alovia shall not be liable for:

• —Indirect, incidental, special, consequential, or punitive damages.
• —Loss of profits, revenue, data, or use.
• —Attacks, breaches, or unauthorized access carried out by third parties.
• —Damages resulting from service interruptions or errors, including messages blocked or allowed by Watchdog.
• —Third-party actions or content.

Because Alovia is currently free, our total liability to you for any claim shall not exceed one hundred dollars ($100).

6.4 Third-party services

We rely on a small set of third-party providers to run specific parts of the service, in categories such as hosting and storage, email delivery, AI model evaluation, and analytics. What each category receives is described in our Privacy Policy, and the specific providers are named in our Subprocessors list.

If you choose to sign in with Google or GitHub, your use of those accounts is also subject to Google's and GitHub's own terms and privacy policies. We do not control those providers and are not responsible for their availability, performance, or policy decisions.

If you install the Alovia GitHub App on repositories you own or manage, you grant Alovia the scoped access GitHub's installation UI enumerates at install time. The App receives repository contents, commit history, and push and metadata webhooks for the repositories you select, and nothing outside them, solely to run the security scans you request. Uninstall at any time from your GitHub settings to revoke access. What we do with the data we receive is governed by our Privacy Policy.

You agree to indemnify and hold Alovia harmless from any claims, damages, losses, or expenses (including legal fees) arising from:

• —Your violation of these Terms.
• —The sites, agents, and traffic you connect to the service.
• —Your infringement of others' intellectual property rights.
• —Your violation of any law or regulation, including notice obligations to your own visitors and users.

8.1 Informal resolution

If you have a dispute, please contact us first at support@aloviaai.com. We'll work with you to resolve it.

8.2 Courts and small claims

If we can't resolve a dispute informally, it will be handled by the state or federal courts located in California, as set out in Section 9.2. Either of us may also bring a qualifying claim in small claims court in California. We do not require you to give up your right to go to court.

9.1 Changes to Terms

We may update these Terms from time to time. We'll notify you of significant changes. Continued use after changes constitutes acceptance.

9.2 Governing law

These Terms are governed by the laws of the State of California, United States, without regard to conflict of law principles. Any legal action arising from these Terms shall be brought exclusively in the state or federal courts located in California.

9.3 Severability

If any provision is found unenforceable, the rest of the Terms remain in effect.

9.4 Entire agreement

These Terms, along with the policies incorporated by reference above, constitute the entire agreement between you and Alovia.

9.5 Assignment

You may not transfer your rights under these Terms. We may transfer our rights to any affiliate or successor.

Alovia is a service operated by its founder, Chanpreet Singh, based in San Francisco, California, United States. A postal address is available on request. Questions about these Terms can go to support@aloviaai.com.