O Intramedial está em beta restrito. Ao se cadastrar ou entrar, você precisa informar a senha de beta tester que recebeu ou solicitar uma em preview@intramedial.com. Obrigado.
The agreement between you and Avonao, Inc. for Intramedial, the Agent Coordination Plane, covering the website, API, MCP server and dashboard, accounts, fees, refunds, acceptable use, agents and authority, data, liability and governing law.
These terms govern your use of Intramedial, the Agent Coordination Plane, at intramedial.com, its REST API at api.intramedial.com, its MCP server at mcp.intramedial.com and its dashboard at app.intramedial.com, together with the documentation, the assistant, the offline verifier, the adapters and any software development kits we publish for them (together, the "Service").
Intralock · Leases · Parley · Fleet Map
Um produto da Trustvice
Os agentes agem quando o plano diz sim, e o registo diz porquê.
Passe ações de agentes, hashes de conteúdo, checagens de API, DNS, webhooks, chamadas de LLM e commits git pela Intramedial. Receba um recibo assinado que todos verificam – sem confiar em nós.
The Service is provided by Avonao, Inc., a corporation formed in the State of Delaware, USA (Delaware entity file number 10121895), 254 Chapman Rd, Ste 208 #21918, Newark, Delaware 19702, USA ("we", "us", "our"). Intramedial is offered under the Trustvice brand. See Imprint.
By creating an account, creating an API key, connecting an agent or an AI tool to the Service, or otherwise using it, you accept these terms for yourself and, if you act for a company or other organization, for that organization. If you do not agree, do not use the Service.
In plain language: these terms are the contract. If you use Intramedial, you agree to them.
How your Avonao ID account, through which you sign up and sign in, is run and how it handles your sign-up and sign-in data. They are published at id.avonao.com; the privacy policy is at https://id.avonao.com/legal/privacy.
If a document conflicts with these terms, these terms prevail, except that the Data Processing Addendum prevails on the processing of personal data it covers. A written agreement signed by both parties (for example an Enterprise order) prevails over these terms to the extent it says so.
The registration through which you access the Service, including its workspaces.
Admission
The decision, taken by the admission engine (Intralock) against your policy, to let an agent, a lease, a mandate or an action in, or to refuse it, together with the reason.
Agent
Software, whether or not it uses an AI model, that acts on its own or on someone's behalf and that you enrol, connect or let act through the Service.
Allowance
The number of calls per module per period included in a plan or bought as a top-up pack.
API key
A secret credential that authenticates calls to the Service on behalf of a workspace.
Assistant
The AI assistant in the Service ("Number One"), which answers questions about the Service and, where available, helps you work in the dashboard.
Audit chain
The per-workspace, append-only, hash-linked log in which the Service records events.
Enforcement point
A place where the Service's decisions are applied to an agent's action, such as a gateway, a connector, an adapter or a write gate.
Lease
A time-bounded grant of authority to an agent over named resources and actions.
Ledger
The witnessed event ledger, whose entries are committed under Merkle roots.
Ledger bundle
A signed export of a range of your audit chain and ledger that an auditor can check offline with the offline verifier and our published public keys.
Mandate
A statement, compiled into policy, of what an agent or a pack may do and for whom.
Module
A capability of the Service, offered as API calls under /api/v1/acp/, dashboard screens and MCP tools. The modules are grouped as listed in The modules.
Pack
A bundle of mandates, policies and related configuration that can be applied to a workspace.
Record
An entry that the Service writes for a decision, an event or an export, such as an admission record, an audit-chain entry, a ledger entry or a ledger bundle.
Seat
A named user position in a workspace.
Workspace
The container in which your agents, keys, seats, records and configuration live.
You
The person or organization that accepts these terms.
The Service is an Agent Coordination Plane. It lets an organization admit, lease, mandate, enforce, record and recover the work done by AI agents. Its 55 modules fall into eight groups: fleet and world model; intents and leases; mandates and packs; enforcement points; detection and rehearsal; negotiation and courts; arenas and yards; and record and recovery. You use them through the dashboard, the REST API, the MCP server and the adapters and connectors we publish. They are described in The modules.
Among other things, the Service lets you keep a map of your agents, including agents found acting without having been enrolled; issue leases and mandates to them; have each request admitted or refused against your policy, with the reason; apply your decisions at enforcement points; require two different administrators for sensitive changes; halt or quarantine an agent; record what happened in the audit chain and ledger; seal ranges of them into ledger bundles for auditors; and restore from the records you keep.
The following are not offered at launch and these terms do not provide for them: settlement (the movement of money in escrow), remediation (restoring systems from checkpoints) and pack payouts. They are "coming soon". Where a screen or a document mentions them, they have no effect and no funds move.
A record proves that the Service took a decision, observed an event or received a statement, stated it in the form shown and entered it into the chain at the time stated in it, and, through the hash links, that the entries before it have not been changed since. A ledger bundle adds our signature over the range it covers. Which facts in a record the Service decides or observes itself, and which you, an agent or a system you connected report to us and we only record, is set out in the Record Practice Statement and on each module's documentation page.
A record of something you or your agent reported proves that it was reported, at that time and in that order within the chain. It does not prove that the statement is true, that a person consented or approved anything, or that an agent did or did not do something that never passed through an enforcement point. An admission shows what the Service decided under the policy it held at that moment; it does not show that the policy was right.
A record does not prove that the content it refers to is lawful or authorised, who authored it, that a third-party system behaved correctly, or that nothing happened where there is no record. The time in a record is our clock at the time of writing. Unless a module's documentation says otherwise, a record is not entered in any public log. Anchoring of ledger roots with an external witness is described in the Record Practice Statement and applies only where it says so. A record is not legal, financial, audit or compliance advice. Whether a record is admissible or sufficient evidence in a court, regulatory or contractual setting depends on the jurisdiction and the case, and you remain responsible for deciding whether it is sufficient for your purpose. See Security model.
Your agents are yours. An agent that you enrol, connect or allow to act is your agent, whoever built or hosts it and whichever model it uses. You are responsible for what it does under your account, your keys, your leases and your mandates, and for outputs and actions it produces, as if you had done them yourself.
You set the policy. The Service applies the leases, mandates, packs and policies that you or your administrators configure. We do not decide what your agents should be allowed to do, and we do not review your policies for lawfulness or fitness for your purpose. A lease or mandate gives an agent only the authority you wrote into it, and only for the time it states; the Service does not infer wider authority.
Authority of your people. You confirm that each person who issues, approves or changes a lease, mandate, pack or policy is authorised to do so for you. Where the Service requires two different administrators to approve a change, each approval is treated as given by you.
Enforcement depends on placement. The Service can refuse, halt or quarantine only actions that pass through an enforcement point you have installed and kept working, and can detect only what your connected systems show it. Detection of unenrolled agents is best-effort. We do not warrant that every action by every agent is seen, admitted or stopped.
Third parties. An agent you let act can affect other people and other systems. You are responsible for having the rights, consents and notices needed for your agents to contact, read or change them, and for informing people who deal with your agents where the law requires.
No agency. We are not your agent's principal, employer or insurer, and we do not act on your behalf. Admitting, recording or enforcing is a service we provide to you, not a decision we take for you.
The assistant is an AI system. It runs on models supplied by Anthropic (see Sub-processors). It may be wrong, and what it says is not legal, financial, security or compliance advice. Check its answers before you rely on them. Do not put secrets or unnecessary personal data in questions. In the dashboard it can read your workspace records, but only with your permissions and only where it is available for your workspace's region; elsewhere it answers from documentation only. The Privacy Policy states which. It is rate-limited, and we may change or withdraw it at any time. We do not use your content to train models.
We may improve, change or retire features. If a change removes a paid feature that you use, we will tell account owners by email at least 30 days before it takes effect. If we remove a paid feature you rely on and you no longer wish to continue, you may cancel under section 7, and we will refund the unused part of any prepaid annual fee for the period after the removal. Security fixes, changes required by law and changes that do not reduce what you have paid for may take effect immediately.
The Service has no sign-in methods of its own. You sign up and sign in to it only with an Avonao ID, a separate account service at id.avonao.com with its own terms and privacy policy. Avonao ID collects your email address, name, sign-in methods, security log, country and age confirmation, and decides how you sign in. It is not for anyone under 16. Avonao ID is the controller of the data it holds for your sign-in. The Service receives only the claims it sends us (identifier, confirmed email, name and language), and tells it your subscription state. Avonao ID's rules about its own account apply to it.
On top of Avonao ID's minimum age of 16, you must be at least 18 years old and able to form a binding contract, or be authorised to bind the organization you register. The Service is not directed to children.
You may not use the Service if you are barred from receiving it under applicable law or if we have previously terminated your account for breach of these terms, unless we agree in writing.
You must provide accurate account information and keep it current.
You are responsible for everything that happens under your account, your keys and your agents' credentials, including the acts of your seats.
Keep API keys, service keys and your Avonao ID credentials secret, and rotate a key if it leaks. Do not put keys in front-end code, public repositories or URLs. Do not give an agent a standing credential that outlasts its lease where the Service can issue a short-lived one.
Tell us at security@intramedial.com as soon as you suspect misuse of your account or keys. We are not liable for use of a key before you tell us it was compromised.
A plan includes a number of seats. Further seats can be added for a monthly fee shown on the pricing page. You must not share one seat between several people.
If you accept these terms for an organization, you confirm that you have authority to bind it. See also Teams, seats and roles.
You must follow the Acceptable Use Policy, which forms part of these terms. We may suspend or end access as described in section 12 if you do not. Section 3 of that policy describes how we enforce these restrictions, the tools we use, and how you can appeal. Our points of contact under the EU Digital Services Act are on the Digital Services Act page.
Allowances reset on the first day of each calendar month (UTC), whether you pay monthly or annually. Unused allowance does not carry over.
When an allowance is used up, calls to that module are refused until the next period, unless you bought a top-up pack. We do not bill for use beyond an allowance.
Top-up packs are one-time purchases. They do not expire with the month and roll over until used.
We may change plans, allowances and prices for future periods with 30 days' notice by email to the account owner. A change does not affect a period you have already paid for.
Paid plans, extra seats and top-up packs are paid for only through Avonao Billing, part of Avonao Wallet (wallet.avonao.com/billing), which the dashboard links to. Stripe is the merchant of record behind Avonao Billing: it takes the payment, applies its own terms to it, and calculates, collects and remits sales tax, VAT and similar taxes where required, and shows them on the invoice. We do not receive or store your card number. Invoices are available in Avonao Billing. Fees are priced in US dollars. If you are shown or charged an amount in your local currency, the payment provider converts it at its own rate, and the amount can differ from the US-dollar price and from any estimate on our pricing page. Fees are shown without tax, plus VAT where it applies, and are exclusive of any tax added at checkout.
Paid plans are billed in advance, monthly or annually, as you choose at checkout. Your subscription renews automatically at the end of each billing period for a period of the same length, at the then-current price, until you cancel. Extra seats renew with the plan. We tell you by email at least 30 days before a price change takes effect on your renewal, as stated in section 6.
A plan may be offered with a trial. The offer states its length and whether a payment method is required. Each workspace gets one trial. Unless you cancel before a trial ends, a subscription that required a payment method converts to paid and is charged.
You can cancel at any time in Avonao Billing, which the dashboard links to. Cancelling ends the subscription at the end of the billing period you have already paid for, whether that period is a month or a year. Nothing further is charged, you keep your plan until that date, and you can undo the cancellation before it. To avoid a renewal charge, cancel before the renewal date.
When the period ends, the workspace moves to the Free plan and keeps working, with the Free plan's allowances, seats, limits and retention window. Cancelling does not delete your account or your data. Records older than the Free window are removed by normal retention once the 30 days described in section 12.4 have passed (section 8). Your account and its data are deleted only if you delete the account (section 12.2). See Cancelling.
Cancel any time. Cancellation is described in section 7.4. Cancelling stops future charges; it does not by itself refund a payment already made.
The first payment of a plan can be refunded within 14 days of that payment. The refund is prorated based on how much of the plan's allowance you have already used. This applies to the first payment of a plan, monthly or annual, and to the first payment after you move to a different plan.
Later payments (renewals) are not refundable, except where the law requires it, as stated in section 3.4, or in this case: if you were charged a renewal and contact us within 7 days of the charge without having used the Service since it, we will refund it.
Top-up packs that have been used, in whole or in part, are not refundable. An unused pack is refundable within 14 days of purchase.
Extra seats follow the plan they are added to.
Mistaken or duplicate charges are corrected and refunded in full. Write to intramedial-billing@avonao.com with the invoice number.
Statutory rights. Where you are a consumer and the law of your country gives you a right of withdrawal or refund that cannot be waived, that right applies and nothing in this section reduces it. See Right of withdrawal.
Approved refunds are paid back to the original payment method. Refunds do not delete records that were already written.
If a payment fails, Avonao Billing may retry it and the subscription is marked past due. While it is past due, paid plan features are suspended until the payment is settled; you can update your payment method and settle the open invoice in Avonao Billing, after which paid features return. If the subscription ends because of non-payment, the workspace moves to the Free plan and keeps working, as described in section 7.4. A downgrade or lapse changes allowances, seats, limits and the retention window of your plan. Records older than the new, shorter window are deleted after a grace period following the change: 7 days after a downgrade to another paid plan, and 30 days when the paid plan ends, as described in section 8.
If you believe a charge is wrong, write to intramedial-billing@avonao.com before you start a payment dispute, so that we can correct it quickly. We may suspend an account while a chargeback on it is open.
You keep all rights in what you send to the Service and in the policies, leases and mandates you write.
What we store. We store the configuration, agent identities, leases, mandates, packs and policies you create, and the records the Service writes about them: admission decisions with their reasons, audit-chain and ledger entries, ledger bundles, detections and negotiation and court decisions. We also store what your agents and connectors send to modules, as far as the module's documentation says it keeps it. Secrets you store with the Service, such as connector credentials, are kept encrypted and are never returned. Records may contain readable metadata such as agent names, resource names, URLs and identifiers of people you send, as described in Retention and erasure. Details are in the Privacy Policy and Data and privacy.
Licence to us. You grant us a worldwide, non-exclusive licence to process what you send, as needed to provide, secure and support the Service for you. We do not use it for any other purpose, and we do not train models on it.
Record retention by plan. The records the Service keeps for you are append-only while we keep them, and we do not offer a way to edit one. We keep them for the retention window of your plan and then delete them: Free 7 days, Starter 30 days, Pro 90 days, Pro+ 180 days, Team 365 days, Scale 730 days. Enterprise is custom: no automatic deletion unless your account settings or your order say so. You can choose a shorter window in your settings, never a longer one. If you downgrade, records older than the new window are deleted after a 7-day grace period. If your paid plan ends, the window of the plan that ended keeps applying for the 30-day grace period in section 12.4. A deleted record cannot be fetched from the Service again. A ledger bundle you exported, or one you handed to an auditor or another third party, can still be verified offline with the offline verifier and our published public keys, including after your account closes. Export what you need before it expires.
Your responsibility. You are responsible for having the right to send the content and data you submit, for the accuracy of what your agents and systems report, and for not putting secrets or unnecessary personal data in readable fields such as names, labels and URLs.
Personal data. Where you send personal data to the Service, you are the controller (or processor for your own customer) and we act as your processor under the Data Processing Addendum.
Regions. You choose the data region of a workspace when you create it, from the locations offered at the time. Where your data is processed and stored is described in the Privacy Policy, on the regions page and in Data regions; we do not promise more than they say.
We run the Service with care and publish its status at /status on a best-effort basis. The self-serve plans (Free, Starter, Pro, Pro+, Team and Scale) carry no availability commitment, service credits or support response time. We schedule maintenance when we can to limit disruption, but we do not promise uninterrupted or error-free operation. You should design your enforcement points so that they behave in the way you want when the Service cannot be reached, and choose fail-closed or fail-open as your risk requires. Verification of a ledger bundle does not depend on the Service being available, because it needs only the bundle and a public key. Customers on an Enterprise plan with a signed order form are covered by the Enterprise Service Level Agreement, which sets out an availability commitment, service credits and incident response targets. Any other availability, support or response commitment exists only if it is set out in a written agreement signed by us.
We and our licensors own the Service, including its software, documentation, designs and trademarks. These terms give you a limited, non-exclusive, non-transferable, revocable right to use the Service during the term in line with your plan. You may not copy, resell, reverse engineer or build a competing service from the Service, except to the extent the law allows regardless of this clause. Open-source components, including the offline verifier, remain under their own licences. Our published verification examples and documentation code samples may be used to verify and integrate records.
If you give us feedback or suggestions, you grant us a perpetual, worldwide, royalty-free right to use them without obligation to you. We will not name you as the source without your permission.
To the extent the law allows, the Service is provided "as is" and "as available". We disclaim all warranties not expressly stated in these terms, including implied warranties of merchantability, fitness for a particular purpose, non-infringement and accuracy. We do not warrant that the Service will be uninterrupted, error-free or free of harmful components, that it will detect or stop every action of every agent, that the assistant's answers are correct, or that a record or ledger bundle will be accepted as evidence by any court, authority, counterparty or auditor. We do not warrant that your use of the Service makes you or your agents compliant with any law. Some jurisdictions do not allow certain disclaimers, so some of the above may not apply to you.
You may stop using the Service at any time, cancel a paid plan as described in section 7.4, and delete your account from the dashboard (Account, then Data rights).
We may suspend or end your access: (a) immediately if you materially breach these terms or the Acceptable Use Policy, if your use or your agents' use endangers the Service, other customers or third parties, if a payment is overdue or charged back, or if the law requires it; and (b) for any other reason with 30 days' notice, in which case we refund the unused part of any prepaid fee. Where we suspend, we tell you why and what would restore access, unless the law forbids it or notice would put others at risk. You can appeal a suspension through /support, and a person reviews it.
When a paid plan ends. A paid plan that ends, by cancellation or non-payment, does not end the agreement: the account and its workspaces keep working on the Free plan (section 7.4). For 30 days, records keep the retention window of the plan that ended, so you can export them. After that, records older than the Free window are removed by normal retention (section 8). Nothing else is deleted because a plan ended.
Account deletion. Your account is deleted only when you delete it (section 12.2). Deletion starts a 30-day grace period in which the account keeps working, and you can export your records and cancel the deletion.
Deleting your Avonao ID. Your Avonao ID is deleted under Avonao ID's rules. When Avonao ID tells the Service that your ID is being deleted, the Service treats it as a request to delete your account and applies the same 30-day grace period, and when it tells us that the ID has been deleted, we bring the erasure forward. You cannot request deletion of an Avonao ID while you have a paid subscription; cancel it first.
Erasure. When the deletion grace period ends, the erasable workspace data is removed: agent and policy configuration, connector data and credentials, support tickets and other workspace content.
What is retained. Append-only ledgers are kept only where a recorded reason requires it, such as a legal obligation, security or the integrity of the chain, and are stated in the Privacy Policy. Also retained are subscription and billing records (for as long as tax and accounting law requires), abuse flags and appeals, and the audit log of our own operations. See Retention and erasure and the retention table in the Privacy Policy. Personal data in retained records is handled under the Privacy Policy, and a request about personal data in a record is answered by a person.
Export. Before you leave, you can export your records, including ledger bundles, with the public key set. A bundle remains verifiable offline for as long as you keep it, even after we have deleted our stored copy.
You may switch to another provider or to your own systems, or have your data erased, as Articles 23 to 31 of Regulation (EU) 2023/2854 provide. The switching terms on our EU Data Act page form part of these terms: they set the notice, the transition period of up to 30 days, the retrieval period of at least 30 days, the data you can export and its formats, and the erasure that follows. Where they differ from section 12.4, they prevail for a switch you ask for. We charge nothing for switching or for exports.
By you. You will defend and indemnify us and our officers, employees and contractors against third-party claims, and resulting losses, damages and reasonable costs, arising from content or data you send to the Service without the right to do so, from actions your agents take that you authorised or allowed, from your use of the Service in breach of the Acceptable Use Policy or the law, or from your misrepresentation of a record or ledger bundle. We will tell you promptly of the claim, let you control its defence (we may take part at our own cost), and you will not settle it in a way that admits fault for us without our consent.
By us. We will defend you against a third-party claim that the Service, as we provide it and used under these terms, infringes that party's intellectual property rights, and pay the damages finally awarded or the settlement we agree to. We may modify the Service, obtain a right to continue, or end the affected feature and refund the prepaid fee for it. This is our whole liability for infringement claims. The same conditions as above apply to your notice and our control of the defence.
we are not liable for indirect, incidental, special, consequential or punitive loss, or for lost profit, revenue, goodwill or data, even if told it was possible, nor for loss caused by the acts of an agent that you operate or authorise; and
our total liability for all claims relating to the Service is limited to the fees you paid to us in the 12 months before the event that gave rise to the claim. For the Free plan, our total liability is limited to 100 US dollars.
These limits do not apply to liability that cannot be limited by law, including liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, and wilful misconduct, and do not limit your obligation to pay fees due or your indemnity for infringement of our intellectual property. They apply to the maximum extent the law allows. They reflect an allocation of risk that is reflected in our prices.
These terms, and any dispute relating to them or the Service, are governed by the laws of the State of Delaware, USA, without regard to its conflict-of-law rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply.
Before bringing a claim, each party will first write to the other and try in good faith to settle the dispute for 30 days. After that, the state and federal courts located in New Castle County, Delaware have exclusive jurisdiction, and each party submits to them and waives objections to that venue. Either party may seek urgent injunctive relief from any competent court to protect its intellectual property or confidential information.
If you are a consumer, this section does not remove mandatory protections of the law where you live, including your right to bring a claim in the courts of your country of residence where that law gives it to you.
You will not use, export or re-export the Service in breach of United States or other applicable export control or sanctions law. You confirm that you are not on a United States or other applicable government restricted-party list, and are not located in, or controlled by a person in, a country or region subject to comprehensive United States sanctions. We may block access where we reasonably believe this section is breached.
Changes to these terms. We may change these terms. For material changes we tell account owners by email at least 30 days before they take effect. If you do not agree, you may cancel before the change takes effect, and we will refund the unused part of any prepaid annual fee for the period after it. Continued use after the change takes effect means you accept the new terms. Changes required by law, and changes that do not reduce your rights, may take effect immediately and are shown by the "updated" date above.
Entire agreement. These terms and the documents in section 1.1 are the whole agreement about the Service and replace earlier understandings.
Notices. We give notice by email to the account owner, in the dashboard, or on this site. You give notice to support@intramedial.com, or by post to the legal address in section 1 (the Delaware address; see section 18).
Assignment. You may not assign these terms without our consent. We may assign them to an affiliate or a successor to the business, with notice to you.
Severability and waiver. If a provision is unenforceable, the rest continues. A delay in enforcing a right is not a waiver.
Force majeure. Neither party is liable for delay or failure caused by events beyond its reasonable control, including failure of internet, power or third-party infrastructure providers, but payment obligations remain.
Relationship. The parties are independent contractors. There are no third-party beneficiaries, other than our officers and contractors named in section 13.
Language. If these terms are translated, the English text prevails.
Parental controls. As 47 U.S.C. § 230(d) requires, we tell you that parental control protections, such as computer hardware, software and filtering services, are commercially available and may help you limit access to material that is harmful to minors. The US Federal Trade Commission describes them and names current providers in How to use parental controls.
Legal address and mailing address. The Delaware address above is our legal address. Our mailing address, for general correspondence only, is Avonao, Inc. • 2261 Market Street PMB 10671, San Francisco, CA, 94114, United States. The mailing address is not our legal address. All legal correspondence, including notices under these terms, formal legal process, legal claims and requests from courts, regulators and authorities, must be sent to the legal address in Delaware. Legal correspondence sent only to the mailing address is not treated as received by us.
Um produto da Trustvice
