Coresource — Terms and Conditions

Effective Date: May 2, 2026
Company: coresourceai, Inc.
Service: Coresource
Contact: legal@coresource.ai

These Terms and Conditions govern access to and use of Coresource, including any related software, APIs, websites, hosted services, managed environments, agents, documentation, user interfaces, and related services provided by coresourceai, Inc., a Delaware corporation ("Coresource," "we," "us," or "our").

By accessing or using Coresource, you agree to these Terms. If you use Coresource on behalf of an organization, you represent that you have authority to bind that organization, and "you" includes that organization.

1. Eligibility and Authority

You must be at least eighteen (18) years old, or the age of majority in your jurisdiction, and capable of forming a binding contract to use Coresource. If you access or use Coresource on behalf of an organization, you represent and warrant that you are authorized to bind that organization to these Terms.

You may not access or use Coresource if you are barred from using the Service under applicable law, if we have previously suspended or terminated your access, or if you are located in a jurisdiction where we do not offer the Service.

2. The Service

Coresource provides AI-powered agents, software, and cloud services. It may help users plan, execute, and monitor software development tasks, including investigations, refactors, migrations, bug fixes, implementation work, test execution, and other repository-related tasks.

A "saga" means a long-running Coresource agent task, workflow, or execution session.

Coresource may operate through hosted services, managed sandbox environments, APIs, agents, user interfaces, or other current or future interfaces. The specific form factor does not limit these Terms. References to the "Service" include all current and future ways of accessing Coresource.

Depending on your configuration, Coresource may:

inspect repositories, files, branches, commits, diffs, manifests, logs, and test output;
create plans, checkpoints, transcripts, summaries, and execution state;
run commands, tests, build steps, package managers, development tools, and other processes;
edit files, generate code, propose patches, or produce other outputs;
spawn subagents or parallel tasks;
access cloud sandboxes or other hosted compute environments;
make network requests or use web search, web fetch, AI inference providers, development tools, and third-party services;
pause, retry, replan, request approval, or stop based on budget limits, safety controls, errors, or user intervention.

Depending on configuration, Coresource may install dependencies, run package managers, execute build and test commands, make outbound network requests, query AI inference providers, perform web searches, fetch URLs, and call third-party APIs as needed to perform the task you have given it. You are responsible for: (a) selecting the appropriate execution mode, permissions, approvals, and configuration; (b) ensuring your environment, secrets, and credentials are appropriately scoped; (c) all costs incurred with third-party services, including compute, AI inference, package registries, APIs, and network services; and (d) the consequences of any command, change, integration, request, or action permitted by your configuration or instructions, except to the extent such responsibility cannot be allocated to you under applicable law.

You are responsible for configuring Coresource appropriately for your repositories, permissions, risk tolerance, and development workflow.

3. Accounts, Organizations, and Credentials

You may need an account, API key, OAuth login, organization membership, or other credential to use some parts of the Service. You are responsible for maintaining the confidentiality of your credentials and for all activity under your account, organization, API keys, sessions, and authorized users.

If you administer an organization, you are responsible for managing users, roles, permissions, repositories, billing, and access to Coresource. We may rely on instructions from organization owners, administrators, and authorized users.

You must promptly notify us of unauthorized access or suspected compromise of your account or credentials.

4. Customer Content

"Customer Content" means content, code, repositories, files, prompts, task descriptions, plans, logs, command output, transcripts, diffs, test results, configuration, credentials, secrets, or other sensitive information provided, uploaded, submitted, exposed, or otherwise made available through the Service, whether intentionally or inadvertently, and other materials submitted to, uploaded to, or otherwise made available to Coresource by you or in connection with your use of Coresource. Customer Content does not include Coresource technology, Feedback, Outputs, Aggregated De-Identified Data, or general usage data that does not identify you, your organization, or any individual.

As between you and Coresource, you retain ownership of your Customer Content. You grant Coresource a worldwide, non-exclusive, royalty-free license to host, copy, transmit, process, display, modify, create derivative works from, and otherwise use Customer Content as necessary or useful to provide, secure, operate, maintain, support, troubleshoot, analyze, test, develop, and improve the Service; generate Aggregated De-Identified Data; comply with law; and enforce these Terms.

You represent and warrant that you have all rights, permissions, consents, and authority necessary to provide Customer Content to Coresource and to permit Coresource to process it as described in these Terms and the Privacy Policy.

5. Code, Repositories, and Sensitive Information

Coresource is designed to process software repositories and development context. Repositories may contain sensitive information, including secrets, credentials, private keys, tokens, environment files, certificates, proprietary code, personal information, security vulnerabilities, and confidential business information.

You are responsible for deciding what Customer Content to provide to Coresource. You may not submit protected health information, payment card data, government identifiers, children's data, personal information about individuals located in the European Union or European Economic Area, or other regulated personal information unless Coresource has expressly agreed in writing to support that data type. You should not provide secrets, production credentials, private keys, or other sensitive information unless you are authorized to do so and have configured the Service appropriately.

Coresource may implement controls intended to reduce risk, such as workspace confinement, path restrictions, protected-file rules, sandboxing, credential scoping, key revocation, redaction, command approvals, and network restrictions. These controls do not eliminate all risk, and you remain responsible for reviewing your repositories, permissions, configurations, and outputs.

6. Agent Actions and User Responsibility

Coresource may act autonomously or semi-autonomously based on your instructions, configuration, permissions, and selected execution mode. This may include reading files, writing files, running commands, installing dependencies, making network requests, calling external tools, using AI models, generating code, and creating or modifying artifacts.

You are responsible for:

reviewing plans, commands, code changes, diffs, and outputs before relying on them;
testing, validating, and approving generated code or changes;
ensuring that Coresource has only the permissions and access appropriate for the task;
maintaining backups and version control;
complying with applicable laws, third-party terms, open-source licenses, employment obligations, and security requirements;
ensuring that Coresource is not used in unsafe, unlawful, or unauthorized ways.

Coresource-generated outputs may be incomplete, incorrect, insecure, noncompliant, or unsuitable for your intended purpose. You should not deploy, merge, release, or rely on outputs without appropriate human review.

7. AI Providers, Aggregated Data, and Outputs

Coresource may use AI models, inference gateways, cloud infrastructure, and other vendors to process prompts, code, logs, task descriptions, command output, agent state, and other Customer Content as needed to provide the Service.

Customer Content and foundation model training. As between you and Coresource, you retain ownership of your Customer Content. Coresource will not use raw Customer Content to train Coresource or third-party foundation models, except with your explicit opt-in or as separately agreed in writing.

Aggregated De-Identified Data. Coresource may internally use and modify Customer Content for the purposes of providing the Service and generating Aggregated De-Identified Data. "Aggregated De-Identified Data" means data submitted to, collected by, or generated by the Service in connection with use of the Service, but only in aggregate, de-identified form that cannot reasonably be linked specifically to you or your organization. Coresource may freely use, retain, and make available Aggregated De-Identified Data for Coresource's business purposes, including without limitation, for purposes of improving, testing, operating, promoting, and marketing the Service and other Coresource products and services.

Coresource will maintain Aggregated De-Identified Data in de-identified or aggregate form and will not attempt to reidentify it except to test whether its deidentification processes satisfy applicable requirements. Coresource will require recipients of Aggregated De-Identified Data to maintain it in de-identified or aggregate form and not attempt to reidentify it.

Outputs. "Output" or "Outputs" means code, text, patches, diffs, plans, summaries, recommendations, or other materials generated by the Service for you, excluding Coresource technology, Feedback, Aggregated De-Identified Data, and third-party materials. Subject to these Terms, you may use Outputs for any lawful purpose, including internal, commercial, and production purposes. To the extent Coresource has any right, title, or interest in Output generated specifically for you by the Service, Coresource assigns that right, title, and interest to you.

AI outputs may not be unique. Other users may receive similar or identical outputs from AI systems. Coresource does not warrant that any Output is original, protectable, defensible, non-infringing, secure, accurate, complete, or free from third-party rights. Your rights in Outputs do not include rights in Coresource technology, third-party materials, open-source components, or Customer Content owned by others.

8. Acceptable Use

You may not use Coresource, and may not allow any third party to use Coresource, in any way that:

violates any applicable law, regulation, court order, sanctions requirement, export control, or third-party right;
accesses, tests, scans, attacks, or attempts to compromise any system, network, repository, account, credential, or data without authorization;
creates, deploys, assists, or facilitates malware, ransomware, destructive code, credential theft, phishing, spam, botnets, exploit kits, evasion tools, or other harmful or abusive code or activity;
exfiltrates, exposes, sells, or misuses secrets, credentials, tokens, keys, personal information, confidential information, or proprietary code without authorization;
interferes with, disrupts, overloads, or abuses the Service, Coresource infrastructure, or third-party systems;
bypasses or attempts to bypass access controls, rate limits, credit limits, usage limits, monitoring, security controls, or billing mechanisms;
violates the terms or policies of AI providers, cloud providers, payment providers, code hosting services, package registries, search providers, or other third-party services used with Coresource;
infringes, misappropriates, or violates intellectual property, privacy, publicity, contractual, employment, or confidentiality rights;
uses Coresource for unlawful surveillance, unlawful profiling, unlawful discrimination, harassment, deception, fraud, or manipulation;
uses Coresource in safety-critical, life-critical, high-risk, regulated, or legally significant decision-making contexts without appropriate human oversight, testing, professional review, and legal authorization;
uses Coresource to develop or operate weapons, systems intended to cause physical harm, or systems that materially increase the risk of physical harm;
submits Customer Content or uses Outputs in a way that would require Coresource to comply with laws, regulations, or compliance programs that Coresource has not expressly agreed to support in writing.

Authorized defensive security work, internal testing, and legitimate software development activity are permitted when you have all necessary rights and authorization and your use complies with these Terms and applicable law.

We may suspend or terminate your access if we reasonably believe your use violates these Terms, creates security risk, may harm the Service or other users, violates third-party requirements, or may expose Coresource or others to legal liability.

9. Third-Party Services

The Service may interoperate with third-party services, including cloud infrastructure, payment processing providers, OAuth providers, AI inference providers, code hosting services, package repositories, search providers, development tools, and user-authorized integrations.

Your use of third-party services may be subject to separate terms and privacy policies. Coresource is not responsible for third-party services, third-party content, third-party APIs, package registries, model providers, repositories, dependencies, or tools that you choose to use with Coresource.

You are responsible for fees, usage charges, API costs, compute costs, storage costs, network costs, and other third-party charges incurred through your configuration or use of the Service unless otherwise stated in a written agreement.

10. Credits, Fees, and Usage

Coresource is generally purchased through prepaid usage credits. Credits are consumed as you use Coresource, including when you run sagas, agent tasks, sandbox execution, model calls, tool calls, storage, or other usage-based features. Different models, tools, runtimes, or features may consume credits at different rates.

You agree to pay all fees described in the applicable checkout flow, pricing page, order form, invoice, or usage schedule. We may use a third-party payment processing provider to process payments. You authorize us and our payment processing provider to charge your payment method for applicable fees, taxes, credit purchases, usage charges, and other amounts you authorize.

Credits are not money, currency, stored value, or a deposit account. Credits have no cash value, are not redeemable for cash, and may not be sold, transferred, assigned, or exchanged except as expressly permitted by Coresource. Credits do not entitle you to any fixed quantity of model calls, sandbox minutes, sagas, tokens, tool calls, storage, or other usage. All credit purchases and other fees are non-refundable except as required by applicable law or expressly stated in writing.

Purchased credits do not expire during the life of your active account. Purchasing credits does not create recurring billing. We will not charge your payment method for additional credits unless you separately authorize a specific charge at the time of purchase. When your credit balance is insufficient, we may pause, stop, reject, or limit sagas or other usage until additional credits are purchased. If you voluntarily close or delete your account, unused credits may be forfeited unless otherwise required by applicable law or expressly stated in writing.

If Coresource terminates your account without cause or permanently discontinues the paid Service, Coresource may, in its discretion or as required by law, refund unused credits or provide a reasonable alternative credit, migration, or wind-down option. No refund is owed for termination due to breach, misuse, nonpayment, violation of these Terms, or violation of third-party requirements.

We may change pricing, credit consumption rates, included features, usage limits, or credit packages from time to time. Changes will not reduce credits already purchased, but future use may consume credits at then-current rates unless otherwise stated in writing.

Past-due amounts, if any, accrue interest at 1.5% per month or the maximum permitted by applicable law, plus reasonable collection costs.

11. Usage Limits and Availability

Coresource may be subject to limits on credits, tokens, agents, sagas, execution time, sandbox minutes, storage, repository size, concurrency, rate limits, model access, cost budgets, and other resources.

We may throttle, pause, queue, stop, or reject tasks to protect the Service, manage capacity, enforce budgets, control costs, prevent abuse, comply with law, or address security concerns.

We do not guarantee that the Service will be uninterrupted, error-free, secure, or available at all times. Long-running sagas may fail, pause, time out, lose context, require user intervention, or produce incomplete results.

12. Beta and Experimental Features

Some features may be labeled or understood as alpha, beta, preview, experimental, evaluation, or pre-release. These features may be unstable, incomplete, unsupported, or changed or discontinued at any time.

Beta features are provided "as is" and may be subject to additional restrictions, lower reliability, reduced support, or different data handling terms disclosed at the time of use.

13. Confidentiality

"Confidential Information" means non-public information disclosed by one party to the other that is marked confidential or should reasonably be understood as confidential given its nature and circumstances. Customer Content is your Confidential Information. Non-public information about Coresource, including unreleased features, security controls, pricing, architecture, benchmarks, and technical documentation, is Coresource Confidential Information.

Each party will use the other party's Confidential Information only to perform under these Terms and will protect it using reasonable safeguards. Confidential Information does not include information that is publicly available without breach, already known without confidentiality obligations, independently developed, lawfully obtained from a third party, or Aggregated De-Identified Data.

Notwithstanding anything to the contrary, Coresource may use, retain, and make available Aggregated De-Identified Data as described in these Terms and the Privacy Policy.

A party may disclose Confidential Information when required by law, provided it gives reasonable notice where legally permitted.

14. Security

Coresource uses reasonable technical and organizational safeguards designed to protect Customer Content. However, no system is completely secure, and Coresource does not guarantee that Customer Content will be free from unauthorized access, loss, misuse, alteration, corruption, or exposure.

You are responsible for your own security practices, including repository hygiene, secret management, account security, endpoint security, access controls, backups, review workflows, and use of least privilege.

15. Data Protection and Geographic Restrictions

Our Privacy Policy explains how we collect, use, disclose, and retain personal information. If you provide personal information through Customer Content, you are responsible for ensuring that you have all rights, permissions, notices, consents, and legal authority necessary to provide that information to Coresource and permit Coresource to process it as described in these Terms and the Privacy Policy.

Unless Coresource expressly agrees in a separate signed written agreement, Coresource does not undertake special regulated-data, industry-specific compliance, or customer-specific data-handling obligations beyond those stated in these Terms and the Privacy Policy.

Coresource is not currently offered for use in the European Union or European Economic Area. Coresource does not currently provide EU AI Act compliance, EU/EEA data protection compliance, EU representative services, EU-specific transfer mechanisms, or EU-specific compliance terms. You may not access or use Coresource if you are located in, ordinarily resident in, or organized under the laws of the European Union or European Economic Area, and you may not use Coresource in a way that would require Coresource to comply with EU or EEA legal requirements unless Coresource expressly agrees in writing. You may not submit Customer Content containing personal information of individuals located in the European Union or European Economic Area unless Coresource expressly agrees in writing.

16. Intellectual Property

Coresource and its licensors own all rights in the Service, including software, systems, agents, workflows, prompts, interfaces, models, documentation, designs, trademarks, and technology, except for Customer Content and assigned Outputs.

Subject to your compliance with these Terms, Coresource grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable right to access and use the Service during the period in which you have an active account and available access to the Service.

You may not copy, modify, distribute, sell, lease, reverse engineer, decompile, or attempt to extract source code from the Service except as permitted by law or open-source licenses applicable to specific components.

17. Feedback

If you provide feedback, suggestions, ideas, bug reports, or feature requests, you grant Coresource a perpetual, irrevocable, worldwide, royalty-free, fully paid-up, sublicensable, transferable license to use them without restriction or compensation, provided we do not disclose your Confidential Information except as permitted by these Terms.

18. Open Source and Third-Party Code

Coresource may interact with open-source software, package managers, dependencies, and third-party code. You are responsible for reviewing and complying with applicable open-source licenses and third-party terms.

Coresource does not guarantee that generated code or recommendations comply with open-source license obligations, contributor license agreements, export controls, security policies, or your internal development rules.

19. Termination

You may stop using the Service at any time. We may suspend or terminate your access if you breach these Terms, fail to pay fees, create security or legal risk, violate third-party requirements, or use the Service in a way that may harm Coresource, the Service, other users, or third parties.

Upon termination, your right to access the Service ends. Termination does not require Coresource to refund unused credits except as required by applicable law or expressly stated in writing. Certain provisions will survive termination, including provisions relating to fees, credits, Customer Content processing necessary for wind-down, Aggregated De-Identified Data, confidentiality, intellectual property, disclaimers, limitations of liability, indemnity, dispute resolution, and legal compliance.

20. Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY LAW, Coresource DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, SECURITY, RELIABILITY, AND AVAILABILITY.

Coresource DOES NOT WARRANT THAT THE SERVICE WILL PRODUCE CORRECT, SECURE, COMPLETE, NON-INFRINGING, DEFENSIBLE, OR USEFUL OUTPUTS; THAT GENERATED CODE WILL WORK AS INTENDED; THAT SAGAS WILL COMPLETE; THAT ERRORS WILL BE DETECTED; THAT VULNERABILITIES WILL BE FOUND OR REMEDIATED; OR THAT CUSTOMER CONTENT WILL NOT BE LOST, CORRUPTED, OR EXPOSED.

You are responsible for independent review, testing, validation, backups, approvals, and deployment decisions.

21. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, Coresource WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, LOST REVENUE, LOST BUSINESS, LOST GOODWILL, LOST DATA, SECURITY INCIDENTS, BUSINESS INTERRUPTION, FAILED DEPLOYMENTS, THIRD-PARTY API COSTS, COSTS OF SUBSTITUTE SERVICES, OR COSTS ARISING FROM COMMANDS, ACTIONS, OUTPUTS, INTEGRATIONS, OR ENVIRONMENTS CONFIGURED OR PERMITTED BY YOU.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, Coresource's TOTAL LIABILITY ARISING OUT OF OR RELATING TO THE SERVICE OR THESE TERMS WILL NOT EXCEED THE GREATER OF:

A. THE AMOUNTS YOU PAID TO Coresource FOR THE SERVICE IN THE TWELVE (12) MONTHS BEFORE THE EVENT GIVING RISE TO LIABILITY; OR

B. USD $100.

These limitations apply regardless of legal theory, whether based in contract, tort, negligence, strict liability, warranty, or otherwise, and even if a remedy fails of its essential purpose. No statement in these Terms expands Coresource's liability beyond this Section, including any reference to gross negligence, willful misconduct, or other fault standard, except to the extent liability cannot be limited under applicable law.

22. Indemnity

You will defend, indemnify, and hold harmless Coresource, its affiliates, officers, directors, employees, contractors, and agents from and against claims, damages, liabilities, losses, costs, and expenses, including reasonable attorneys' fees, arising from or relating to:

your Customer Content;
your use of the Service;
your breach of these Terms;
your violation of law or third-party rights;
your repositories, code, deployments, or Outputs;
your configuration of Coresource, including permissions, tools, integrations, commands, or third-party services.

Coresource will provide reasonably prompt notice of any indemnifiable claim, provided that failure to provide prompt notice will not relieve your indemnity obligations except to the extent you are materially prejudiced. You may control the defense and settlement of the claim, but you may not settle any claim in a way that imposes liability, admission, restriction, or obligation on Coresource without Coresource's prior written consent. Coresource may participate in the defense with counsel of its choice at its own expense.

23. Export and Sanctions

You may not use, export, re-export, or transfer the Service except as authorized by applicable export control and sanctions laws. You represent that you are not located in, organized under the laws of, or ordinarily resident in a restricted jurisdiction and are not a prohibited party under applicable sanctions or export laws.

24. Changes to the Service or Terms

We may modify the Service and these Terms from time to time. If changes are material, we will provide notice as required by law or the applicable agreement. Continued use of the Service after changes become effective means you accept the updated Terms.

25. Governing Law and Dispute Resolution

These Terms are governed by the laws of the State of California, without regard to its conflict-of-law rules, and by the Federal Arbitration Act to the extent applicable.

Before initiating arbitration or litigation, the parties will attempt in good faith to resolve any dispute, claim, or controversy arising out of or relating to these Terms or the Service (a "Claim") through informal negotiation for thirty (30) days after written notice of the Claim.

Any unresolved Claim will be resolved by binding individual arbitration in San Francisco, California under the JAMS Streamlined Arbitration Rules and Procedures then in effect, by one arbitrator with substantial experience in commercial software disputes. The arbitration will be conducted in English. Judgment on the arbitration award may be entered in any court of competent jurisdiction.

The parties waive any right to bring or participate in a class, collective, representative, or mass action. Claims will be arbitrated only on an individual basis. The arbitrator has no authority to hear or determine any class, collective, representative, or mass proceeding.

Either party may bring an individual claim in small claims court if the claim qualifies. Either party may seek temporary, preliminary, or permanent injunctive or equitable relief in a court of competent jurisdiction for claims involving intellectual property, unauthorized access, security abuse, or misuse of the Service.

Subject to the arbitration requirement above, the state and federal courts located in San Francisco County, California have exclusive jurisdiction over any Claim that is not subject to arbitration, and each party consents to personal jurisdiction and venue in those courts.

If any part of this dispute-resolution section is found unenforceable, the unenforceable part will be severed to the extent permitted by law, and the remainder will continue to apply.

26. Order of Precedence

If you have a signed agreement with Coresource that expressly governs your use of Coresource, that agreement controls to the extent of conflict with these Terms. Otherwise, these Terms apply.

27. Assignment

You may not assign or transfer these Terms or your rights or obligations under these Terms without Coresource's prior written consent. Coresource may assign or transfer these Terms, in whole or in part, in connection with a merger, acquisition, reorganization, financing, sale of assets, corporate transaction, or by operation of law.

28. Entire Agreement

These Terms, together with any applicable checkout terms, order form, pricing terms, product-specific terms, and policies incorporated by reference, constitute the entire agreement between you and Coresource regarding Coresource and supersede all prior or contemporaneous agreements, communications, and understandings regarding Coresource, unless a separate signed written agreement expressly states otherwise.

29. Severability and No Waiver

If any provision of these Terms is found unenforceable or invalid, that provision will be limited or eliminated to the minimum extent necessary so that the remaining provisions remain in full force and effect. Coresource's failure to enforce any provision of these Terms is not a waiver of that provision or any other provision.

30. Force Majeure

Coresource will not be liable for any delay, failure, loss, or damage caused by events beyond its reasonable control, including infrastructure failures, provider outages, internet or network failures, labor disruptions, cyberattacks, denial-of-service attacks, war, terrorism, natural disasters, changes in law, governmental actions, or failures of third-party services.

31. Notices

We may provide notices to you by email, through your account, through the Coresource UI, by posting to our website, or by other reasonable means. Legal notices to Coresource must be sent to legal@coresource.ai and, if a mailing address is provided in these Terms or on our website, to that mailing address. Notices are deemed given when sent or posted, unless applicable law requires a different method or timing.

32. Contact

Questions about these Terms may be sent to:

coresourceai, Inc.
2261 Market Street STE 68771
San Francisco, CA 94114
Email: legal@coresource.ai