LEGAL
Terms of Service
Version 2.12 · Effective November 13, 2026
1. Scope
These Terms of Service ("Terms") govern the use of Korpus (the "Service"), provided by:
Tilman KraußTill IT works
Bismarckstraße 17a
42799 Leichlingen
Germany
Email: me@till-it-works.de · Phone: +49 1577 5976707
This email address is our single point of contact for users and for authorities under the Digital Services Act (Art. 11 and 12), in German or English.
In these Terms, the provider is "we" and the person who uses the Service is "you". The Privacy Policy explains how we process personal data and is part of these Terms. Differing terms of yours apply only if we agree to them in writing.
Running Korpus in a dedicated instance or in your own AWS account (Business) is governed by a separate written contract.
2. The Service
Korpus is shared memory for people and their AI agents. With Korpus you can:
- keep content in bundles: documents, the relations between them and files,
- work in them through the web app, the API and the MCP server,
- give AI apps, automations and programs access through agents, each limited to what you allow,
- work together in teams, share bundles with other users and teams, and publish bundles to the Korpus catalog, from which other users can copy them as templates.
The app and the documentation describe the features in detail. A bundle belongs to a team; the people who manage a bundle decide who reaches it and what each may do. The Service is hosted in the EU.
You need a current web browser and an internet connection. Connected AI apps need their own accounts with their providers.
3. Account
You need an account to use Korpus. You accept these Terms when you sign up, and the contract is concluded when you complete the sign-up. Later changes to these Terms follow section 13. While Korpus is in early access, we may limit who can sign up.
If you accept these Terms for a company or another organisation, you confirm that you may bind it; it is then bound by them, and "you" means it.
An account belongs to one person. Give a correct email address, and keep the ways you sign in secure, such as your passkey, your email inbox or the account of a sign-in provider. Keep the keys you create secret too (section 5.2).
You are responsible for everything done through your account. That includes what your agents and the apps you connect do (section 5).
4. Plans and prices
There are three plans: Free, Pro and Business. A plan belongs to a team. Free is for private, non-commercial use only; for a business, a freelance activity or another organisation, use Pro or Business. Pro is a subscription for one team, paid monthly or yearly, bought by the team's owner; only that team gets its limits. Business is agreed with us in writing and billed by us by invoice; its limits, its setup and the introduction it includes are as agreed. What each plan includes is shown on the pricing page and in the app; the price of Pro, including taxes, is shown at checkout before you order.
Pro is sold and billed by Sold through Link, LLC (link.com), 354 Oyster Point Blvd, South San Francisco, CA 94080, USA, a Stripe company, as merchant of record. You buy the subscription from it, under its own purchase terms, which you accept at checkout. It takes the payment, issues receipts and invoices, and handles taxes and payment support (Link support). We provide the Service; these Terms govern how you use it.
Pro renews at the end of each paid period, a month or a year, until it is cancelled. You can cancel at any time, effective at the end of the paid period: in the app under Settings, at link.com, or on the page Cancel or withdraw contracts here, which needs no sign-in. After the period ends, the team continues on Free. A free team never turns into a paid one on its own.
Every plan has usage limits, for example on storage space, bundles, people and requests. The app shows each team's limits and use. Above a limit nothing is taken away; what would grow past it is refused.
5. Agents, connections and keys
You can connect apps to your own access, me, and create agents: access for an AI app, an automation or a program acting for you. Every agent belongs to one person, and that person answers for it. For your agents, that person is you.
5.1 What an agent may do
You decide what each agent may do: which bundles it reaches and what it may do there. An agent never does more than you can: when what you may do shrinks, your agents follow at once.
Korpus enforces these limits and records which agent made a change. Keep each agent as narrow as its job allows.
Your own access, me, can do everything your account can. Connect it only for work in which a person is in the loop.
5.2 Connections and keys
Apps and agents connect in the ways the app offers, for example by signing in with your approval or with a key you create.
Keep keys and other credentials secret. Whoever holds a key acts as its agent until the key expires or you revoke it. Keep a key only where its job runs, never in source code, a chat or a shared document. If a key may have been exposed, revoke it at once. You can see and revoke every connection and key in the app at any time.
5.3 Your responsibility
Anything done through an agent within its limits, or through an app connected to me, counts as done by you. That includes creating, changing and deleting content. It also includes acting on a prompt that an agent picked up from content it read, and what is done with a key of yours before you revoke it.
You choose which apps you connect and which workloads you trust. You can revoke any connection at any time.
5.4 Third-party AI apps
AI apps such as Claude, ChatGPT or Cursor are services of third parties. Your agreements with their providers govern them. We do not control what these apps write, and output from AI models can be wrong. Check what your agents and programs produce before you rely on it.
6. Your content
You keep all rights to the content you store in Korpus. You give us the rights we need to run the Service for you:
- to store, copy and back up your content,
- to process it,
- to show it to the people, agents and apps that reach it: the members of its team it is open to, the people and teams it is shared with, and their agents.
We do not sell your content, and we do not use it to train AI models. We look at it only in these cases:
- you ask us to, for example for support,
- it is needed for the security of the Service or against abuse or unlawful content,
- the law requires it,
- you submit a version for publication in the catalog, to review it,
- automated checks, also with AI models, for the operation, security and quality of the Service, for example to detect abuse or harmful content, check catalog submissions or sort support tickets.
When we look ourselves, we only read, only as far as the purpose requires, and every opening of a bundle is logged. Automated checks run only at the sub-processors listed in the AVV (annex 3); no AI model trains on your content, a check's result is only a hint, and a person decides every step that affects you. Content of your bundles reaches an AI app or model on our side only through these checks or, for a version you submitted, in its review. The Privacy Policy (B.7) explains the details.
You make sure you have the right to store and share your content, and that it breaks no law.
Private use needs no data processing agreement. If you use Korpus for a business or another organisation and your content contains personal data of other people, keep that content in bundles of a team on a paid plan (Pro or Business). For that content we process the data on your behalf as your processor, under our data processing agreement under Art. 28 GDPR, the Auftragsverarbeitungsvertrag (AVV), which is part of these Terms and is concluded with them; the German text is binding, an English translation is for information. The free plan comes without an AVV: on it, do not store personal data of other people for such purposes.
Publishing. When you publish a bundle, you allow other Korpus users to copy it into bundles of their own within Korpus, as a template. You can withdraw a publication at any time; copies already made stay with the users who made them.
7. Backups and export
Korpus is not a backup service. What you change or delete may be recoverable only by us, and only for a limited time (Privacy Policy, B.12). Keep your own copies of content you cannot afford to lose.
You can read out all your content, files included, at any time, also as one export.
8. Acceptable use
You agree not to:
- store or share unlawful content, or content that infringes the rights of others,
- use Korpus to send spam or malware, or to attack other systems,
- get around rules, limits or security measures, or access bundles, accounts or agents that are not yours,
- put load on the Service beyond normal use, including through automated access outside the interfaces we offer,
- resell the Service without our written agreement,
- store special categories of personal data under Art. 9 GDPR, in particular health data, or protected health information (PHI) under the US HIPAA.
Korpus is not built for health data: it is not a HIPAA covered service, and we sign no business associate agreements. It runs in the EU.
Reporting illegal content. Anyone can report content in Korpus they consider illegal by email to me@till-it-works.de. Say where it is (a link, or the bundle and path), why it is illegal, your name and email address, and confirm that you report in good faith and that the report is accurate and complete. We handle reports promptly, carefully and objectively, tell you our decision and how to challenge it, and say whether automated means were used.
If you break these rules, or content is illegal, we may block the content or block the account concerned. We consider your legitimate interests and tell you beforehand, with the reasons, the rule or law concerned, whether automated means were used, and how you can challenge the decision. Where security or a serious breach requires it, we may block an account without prior notice; we then tell you by email afterwards, unless the law forbids it.
9. Availability and changes to the Service
We work for high availability but do not guarantee a particular uptime, and we offer no service level agreement. Maintenance, updates and faults can interrupt the Service for a time.
We develop Korpus further and may change the Service, its features and its limits for a valid reason: a change in the law or an order of a court or authority, security, technical development, a change at a sub-processor, new or improved features, or preventing abuse. A change costs you nothing extra, and we tell you clearly about every change that affects how you use Korpus.
If a change impairs your access to or use of the Service more than slightly, we tell you by email at least 30 days before it takes effect. You may then end the contract free of charge within 30 days of that email or of the change, whichever is later; Pro paid in advance for the time after is refunded pro rata. This does not apply where you can keep using the unchanged Service at no extra cost.
10. Liability
10.1 Limitation of liability
This section applies to every plan, unless a written Business contract agrees otherwise.
We are liable without limitation for intent (Vorsatz) and gross negligence (grobe Fahrlässigkeit), and for injury to life, body or health. Liability under the German Product Liability Act (Produkthaftungsgesetz) is not affected.
For slight negligence (leichte Fahrlässigkeit), we are liable only if we breach a material contractual obligation (Kardinalpflicht): an obligation that makes proper performance of the contract possible in the first place and on whose fulfilment you may regularly rely. In that case our liability is limited to the damage that is typical and foreseeable for this kind of contract.
10.2 Agents, keys and third-party services
We are not liable for damage caused by (a) actions taken through your agents within the limits you set, or with a key of yours that was exposed through no fault of ours, before you revoked it, (b) the content, output or data processing of connected AI apps and their providers, or (c) outages of third-party services we do not control and are not at fault for. This does not limit our liability under 10.1 for intent, gross negligence, injury to life, body or health, the Product Liability Act, or a breach of a material contractual obligation.
10.3 Users outside the EEA
If you live outside the European Economic Area, and where the law of your country allows us to exclude warranties, the Service is provided "as is" and "as available", without warranties of any kind. For users in the EEA, the statutory warranty rights apply without change.
10.4 Businesses
If you are a business (Unternehmer, § 14 BGB), a legal entity under public law or a special fund under public law, our liability for slight negligence under 10.1 is limited per damaging event to the higher of: the fees paid for Korpus to us or to the seller of Pro (section 4) in the 12 months before the event, or EUR 25,000; and for all damaging events in a contract year together to the higher of those fees or EUR 50,000. If you paid no fees for Korpus in that time (a free account), the limits are EUR 5,000 per event and EUR 10,000 per contract year. Several breaches with the same cause count as one event. A contract year is twelve months, the first starting when you first accept these Terms. This does not limit our liability for intent, gross negligence, injury to life, body or health, under a guarantee or the Product Liability Act. The limits for fees paid also apply under § 12 of the AVV.
11. Term and termination
The contract runs for an indefinite period. You can end it at any time by deleting your account in the app. The Privacy Policy says what happens to your data then. Pro is cancelled as described in section 4; deleting your account also ends the Pro of every team you own at once.
We can end a free account with 30 days' notice by email. Both parties may terminate for good cause without notice. We delete an account only for good cause, as under section 8. Before we do, we give you the chance to save your content, unless the law or the seriousness of the breach rules that out.
12. Right of withdrawal
If you order Pro as a consumer in the EU, you may withdraw from the contract within 14 days, without giving a reason. You can declare the withdrawal to Sold through Link, LLC, as its purchase terms describe, or on our page Cancel or withdraw contracts here. A withdrawal made there within 14 days of the order refunds the full price and ends Pro at once. A declaration on that page covers every Pro subscription you hold. We confirm receipt by email.
13. Changes to these Terms
These Terms may change, for example when the law or the Service changes. We tell you about every change in the app or by email.
A change to your rights or obligations, to prices, to liability or to the AVV itself takes effect for you only once you accept it in the app. A new or replaced sub-processor follows AVV § 6(2): we tell you at least 14 days ahead by email; you may object as that section says. Only these take effect without acceptance: a change of wording that changes no right or obligation, a change to the AVV's technical and organisational measures under its § 5(2), and a change to the Service under section 9, with the notice it requires. Silence never counts as acceptance. Until you accept, the web app asks you each time it opens; your settings, the API and MCP stay available, so you can read out your content and delete your account. If you do not accept, the previous Terms keep applying, and either party may end the contract: a free account with 30 days' notice, Pro at the end of its paid period.
13.1 Change log
Version 2.12, 2026-11-13
- Three plans: Free, for private, non-commercial use only; Pro, for work; Business, agreed in writing and billed by invoice (4).
- Plus is now Pro, paid monthly or yearly; its prices and limits are on the pricing page (4).
- The AVV covers teams on Pro or Business; a dedicated instance or your own AWS account has its own contract (1, 6).
Version 2.11, 2026-11-12
- Terms and AVV state limits, not settings; details live in the app, docs and Privacy Policy. The AVV has no hourly fee.
- Only changes to rights, prices, liability or the AVV ask you again; a new sub-processor: email 14 days ahead, you may object (13).
- A change that impairs your use comes 30 days ahead by email, and you may then end free of charge (9).
- The AVV applies only to business use in a team on a paid plan; on Free, store no personal data of others for business (6).
- For a business on a free account, liability for slight negligence is capped at EUR 5,000 per event, 10,000 a year (10.4).
- Report illegal content by email; our contact point for users and authorities is named (1, 8).
- We may check content, catalog submissions and tickets automatically, also by AI; a person decides every step (AVV § 3(6)).
14. Final provisions
German law applies, excluding the UN Convention on Contracts for the International Sale of Goods. If you are a consumer, the mandatory consumer protection rules of the country where you usually live still apply.
The exclusive place of jurisdiction is our place of business in Germany if you are a merchant, a legal entity under public law or a special fund under public law, or if you have no general place of jurisdiction in Germany.
The contract language is English, except the AVV, whose German text is binding. These Terms are always available at korpus.cloud/terms; we recommend saving a copy.
If a provision of these Terms is invalid, the rest remain valid, and the statutory rules take the invalid provision's place.
We are neither willing nor obliged to take part in dispute resolution proceedings before a consumer arbitration board (§ 36 VSBG).
Amazon Web Services and AWS are trademarks of Amazon.com, Inc. or its affiliates. Claude is a trademark of Anthropic PBC, ChatGPT of OpenAI, and Cursor of Anysphere, Inc. Korpus is not affiliated with, endorsed by or sponsored by any of them.