Terms of Service

1. Provider and business scope

These Terms govern access to the dossaro website, account area, MCP endpoint, connectors, documentation, billing flows and related register-research services. The service is provided by Hagen Hoferichter, Reuterstr. 1, 12053 Berlin, Germany, acting as an individual provider under the trade name dossaro ("dossaro", "we", "us").

dossaro is offered for business, professional and institutional use only. By creating an account, connecting the MCP server or using the service on behalf of an organization, you confirm that you are not acting as a consumer and that you have authority to bind that organization.

2. Service scope

dossaro provides read-only, evidence-oriented research infrastructure for public company records, public filings, source references, document parsing and public-register workflows. The service can help locate, retrieve, structure, summarize and present public-register material. It does not provide legal, financial, investment, tax, compliance, regulatory, sanctions, KYC or AML advice or clearance. It does not certify register content, create official extracts, produce certified beneficial-ownership determinations, replace official registers or remove the need for professional review.

Register data, parsed documents, OCR output, model-assisted extraction, source trails and research tables are provided as working research output for business review. You are responsible for checking source documents, filing dates, register status, source limitations, official registers, professional requirements and any applicable legal or commercial requirements before relying on the output.

3. Accounts, connectors and customer responsibility

You are responsible for your account, authorized users, credentials, prompts, connector configuration, tool calls, exports, downstream systems and downstream use of results. If you connect dossaro through ChatGPT, Claude or another MCP client, that third-party environment is selected and controlled by you and governed by the terms, privacy policy and data-use settings of that provider.

You must ensure that you have a lawful basis for using the service, including where prompts, source requests, exports or results contain personal data. You are responsible for any notices, data-protection assessments, DPIAs or similar assessments, source-register permissions, connector terms, retention decisions, export decisions and human or professional review required for your use case.

You must not use dossaro as the sole basis for decisions that produce legal or similarly significant effects for an individual, or for regulated legal, financial, investment, employment, credit, insurance, sanctions, KYC, AML or compliance decisions, without your own lawful basis, appropriate human review, professional review where needed and safeguards.

4. Acceptable use

You must comply with applicable law, data-protection obligations, source-register terms, rate limits, access restrictions and third-party connector terms. You must not use the service for unauthorized access, credential sharing, destructive activity, harassment, unlawful surveillance, unlawful discrimination, malware, spam, evasion of anti-abuse controls, resale of raw access, or automated abuse of public-register portals.

You must not submit secrets, passwords, credentials, private keys, special-category personal data, criminal-offense data, private investigative data or highly sensitive personal data unless your organization has decided that this is lawful, necessary and covered by suitable safeguards. dossaro may throttle, limit, block, suspend or terminate access where use creates legal, privacy, security, operational, payment, source-register, third-party or abuse risk.

dossaro may refuse, limit or stop instructions, prompts, source requests, exports or workflows that it reasonably believes are unlawful, harmful, technically infeasible, outside the service scope, inconsistent with these Terms, harmful to source systems or likely to expose dossaro, other customers or third parties to unacceptable risk.

5. Subscriptions, billing and credits

Subscription billing, invoices, payment methods, plan changes and top-ups may be processed through Stripe Checkout and the Stripe Customer Portal. Prices, included credits, top-up packages and billing intervals are shown on the website or in the checkout flow at the time of purchase.

Credits are a contractual usage allowance for the dossaro service. They are not money, stored value, gift cards or a right to any fixed amount of source-register material. Tool calls may reserve estimated credits and then settle the actual cost after processing. If a balance is exhausted, the service may reject or stop requests with a quota or payment error.

Monthly subscription credits expire at the end of the relevant billing period and do not roll over unless dossaro expressly states otherwise in writing. Top-up credits are consumed before or alongside included credits according to dossaro's billing logic and expire 12 months after purchase or on account termination, whichever occurs first. Unused credits have no cash value and are non-refundable except where mandatory law requires otherwise.

6. Source registers and third-party services

Public-register sources, official portals, public APIs, filings and documents may be unavailable, incomplete, delayed, rate limited, token gated, changed, blocked by anti-automation controls, subject to third-party terms, or restricted to paid official extracts. dossaro may return typed limitations where possible, but we do not promise that every limitation will be detected.

Source registers and connector providers are independent third parties. dossaro is not responsible for their availability, content, policies, prices, legal terms, rate limits, outages, access decisions or changes. You must obtain any official extract, certified document or legal opinion separately where needed.

OpenAI/ChatGPT, Anthropic/Claude and similar MCP clients are customer-selected environments when you connect dossaro through those services. You control what is sent to those environments and must review their terms, privacy policies, retention settings, data-use settings and enterprise controls before using them with dossaro output.

7. No SLA and no warranty

The service is provided on an "as is" and "as available" basis. dossaro does not provide any service-level agreement, uptime commitment, recovery-time commitment, support-response commitment or availability guarantee unless a separate signed agreement expressly says so.

To the maximum extent permitted by law, dossaro disclaims warranties and representations regarding accuracy, completeness, freshness, continuity, merchantability, fitness for a particular purpose, legal sufficiency, non-infringement, source availability, OCR accuracy, parser accuracy, model output, or whether a result is suitable for your specific use case.

8. Data protection

The Privacy Policy explains how dossaro processes personal data. For account, billing, security, product and website operations, dossaro generally acts as controller. Where dossaro processes personal data on your documented instructions for your own purposes, dossaro may act as processor and the Data Processing Agreement applies where applicable.

You remain responsible for your own legal basis, notices, data-protection assessments, DPIAs or similar assessments where required, instructions, source-register terms, connector terms, retention decisions, export decisions, downstream systems and use of results in your organization or third-party AI client.

9. Intellectual property and customer references

dossaro and its licensors retain all rights in the service, software, interfaces, documentation, design, workflows and non-public know-how. Subject to these Terms and third-party source rights, you may use the research output generated for your account for your internal business purposes.

If you create or use a company account, you grant dossaro permission to identify your organization as a customer or user of dossaro, including by using your company name and logo on the website, sales materials and investor or customer communications. This permission applies to business-entity references and does not create an individual endorsement by any employee, representative or user. You may opt out at any time by emailing privacy@dossaro.com.

After receiving an opt-out, dossaro will stop future public use of the relevant company name or logo within a reasonable period. Materials already published, sent, cached, archived or distributed may remain until they are reasonably replaceable or expire in the ordinary course.

If you provide feedback, feature requests, examples or suggestions, dossaro may use them without restriction or compensation.

10. Suspension and termination

You may stop using the service at any time. dossaro may suspend, limit or terminate access immediately if we reasonably believe that your use breaches these Terms, creates legal, privacy, security, operational, payment, source-register, third-party or abuse risk, causes operational harm, violates source-register requirements, interferes with third-party systems, remains unpaid, or exposes dossaro, another customer or a third party to unacceptable risk.

On termination, your right to use the service ends immediately. Unused credits expire and are not refundable unless mandatory law requires otherwise. Sections that by their nature should survive termination, including payment obligations, restrictions, data protection, intellectual property, disclaimers, liability limits and governing law, continue to apply.

11. Liability

Nothing in these Terms limits liability for intent, gross negligence, injury to life, body or health, fraudulently concealed defects, mandatory product liability, or any liability that cannot be limited under applicable law.

For ordinary negligence, dossaro is liable only for breach of material contractual obligations whose fulfilment makes proper performance of the contract possible and on whose observance you may regularly rely. In that case, liability is limited to typical and foreseeable damages and, to the extent permitted by law, capped at the fees paid by you to dossaro in the 12 months before the event giving rise to liability.

To the extent permitted by law, dossaro is not liable for indirect damages, consequential damages, lost profits, lost revenue, loss of goodwill, business interruption, procurement of substitute services, loss of data, register outages, connector-provider actions, source inaccuracies, or decisions made without appropriate human and professional review.

12. Indemnity

You will indemnify and hold dossaro harmless from claims, losses, fines, costs and expenses arising from your unlawful use of the service, your prompts or downstream use of results, your breach of these Terms, your breach of source-register or connector-provider terms, or your failure to comply with data-protection or other legal obligations.

13. Changes, law and contact

dossaro may update these Terms from time to time. Updated Terms apply when posted or when otherwise notified, and continued use after the effective date means acceptance of the updated Terms. If you do not agree, you must stop using the service.

These Terms are governed by the laws of Germany, excluding conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods. Where legally permissible, the courts at dossaro's residence or business address have exclusive jurisdiction. For questions, contact privacy@dossaro.com.