✦ SovereignCommand

1. Agreement to Terms

By accessing or using SovereignCommand (the "Service"), you agree to be bound by these Terms of Service ("Terms"). If you disagree with any part, you may not use the Service.

These Terms apply to all tiers: Free (self-hosted), Pro (managed cloud), and Enterprise (on-premise). Additional terms may apply to Pro/Enterprise subscriptions.

2. Privacy Policy — Zero Cloud, Zero Telemetry

• Zero cloud egress: All message data, contacts, drafts, and encryption keys remain on your infrastructure. The only outbound network traffic is the WhatsApp WebSocket connection to Meta's servers (required for message delivery) and optional HTTPS to your own Cloudflare Worker (Pro/Enterprise).
• Zero telemetry: No analytics, crash reporting, usage tracking, or phone-home mechanisms exist in the codebase. We cannot see your data even if we wanted to.
• Local AI only: Reflection, translation, and draft generation run via Ollama (gemma2:2b) on your hardware. No external LLM APIs are called.
• Encrypted at rest: SQLCipher with AES-256. Database key derived from your passphrase via PBKDF2 (100,000 iterations).
• No account recovery: There is no "forgot password." Your encryption passphrase is the only key. Lose it, and your data is cryptographically unrecoverable.

3. Data Sovereignty Statement

• Portability: Your data is stored in an open SQLite/SQLCipher format. Export anytime via the Database view or /api/v1/messages endpoint.
• No vendor lock-in: The core is MIT-licensed. Self-host on any platform. Migrate between tiers freely.
• No training on your data: Local AI models are pre-trained. We do not fine-tune on your messages. We do not use your data to improve models.
• Legal requests: We cannot comply with data requests for your self-hosted data because we never have it. For Pro/Enterprise, we can only provide encrypted blobs without keys.

4. Open-Core License

MIT License (Core Components)

The following are open source under the MIT License:

• Go gRPC backend (orchestrator, WhatsApp bridge, database, reflection, queue, gRPC handlers)
• SQLCipher schema and SQLC-generated data access layer
• Protocol Buffer definitions (proto/sovereign/v1/)
• Web UI (HTML, CSS, JavaScript)
• Flutter app (when released)

You may use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the MIT-licensed software.

Proprietary (Managed Service Components)

The following are proprietary and require a valid Pro/Enterprise license:

• Cloudflare Worker proxy (authentication, rate limiting, multi-tenancy, request routing)
• Stripe billing integration (checkout, portal, webhooks, subscription management)
• Multi-user API key management dashboard
• Managed deployment automation (Terraform modules, CI/CD pipelines)
• SLA-backed support and on-premise deployment assistance

5. Acceptable Use Policy

You agree not to use SovereignCommand for:

• Illegal activities or content violating applicable laws
• Spam, unsolicited bulk messaging, or automation violating WhatsApp's Terms of Service
• Harassment, threats, hate speech, or illegal discrimination
• Malware distribution, phishing, or social engineering
• Circumventing rate limits or security controls
• Reselling the managed service without Enterprise authorization
• Attempting to extract, reverse engineer, or replicate proprietary managed components

Violation may result in immediate suspension (Pro/Enterprise) without refund. Self-hosted Free tier users are bound only by applicable law and WhatsApp's ToS.

6. Subscriptions & Billing (Pro/Enterprise)

Billing

• Pro: $49/month, billed monthly via Stripe. 14-day free trial.
• Enterprise: $499/month minimum, custom terms, billed monthly or annually.
• Prices exclude applicable taxes. You are responsible for all taxes.
• Payment failure: 7-day grace period, then service suspension.

Cancellation

• Cancel anytime via Stripe Billing Portal or email.
• Service continues until end of billing period. No prorated refunds (except 14-day Pro trial guarantee).
• On cancellation: managed infrastructure spun down; you receive encrypted database export.
• Enterprise: 30-day notice required for annual contracts.

Refunds

• Pro: 14-day money-back guarantee from first charge.
• Enterprise: SLA credits per contract; no cash refunds after onboarding.

7. Service Levels

SLA credits apply only to Pro/Enterprise managed infrastructure downtime. Self-hosted uptime is your responsibility.

8. Limitation of Liability

• SovereignCommand is provided "AS IS" without warranties of any kind.
• We are not liable for: data loss, message delivery failures, WhatsApp account bans, AI reflection inaccuracies, cool-down timer failures, or any indirect, incidental, special, or consequential damages.
• Maximum aggregate liability: Fees paid in the 12 months preceding the claim (Pro/Enterprise). $0 for Free tier.
• WhatsApp is a third-party service. We do not control Meta's policies, rate limits, or account standing. Use at your own risk.

9. Indemnification

You agree to indemnify and hold harmless ML-NIGHTWORX and its contributors from any claims, damages, or expenses arising from your use of the Service, your data, or your violation of these Terms.

10. Termination

• We may terminate Pro/Enterprise for material breach, non-payment, or AUP violation.
• Free tier: no termination (you host it). License terminates only if you violate MIT terms.
• On termination: export your data; managed services cease; no further obligations.

11. Governing Law & Disputes

• Governing law: State of Delaware, USA.
• Disputes: Binding arbitration (AAA rules) for Pro/Enterprise. Free tier: no formal dispute process.
• Class action waiver: You agree to resolve disputes individually.

12. Changes to Terms

We may update these Terms. Material changes: 30 days notice via email (Pro/Enterprise) or GitHub release notes (Free). Continued use constitutes acceptance.

13. Contact