Version 2026-09-08. In force from 8 September 2026.

Legal

Terms of service

This is the agreement between your company and Carthagent for the use of Carth. It explains what the service does, what you are responsible for, what we are responsible for, and how either side can end the arrangement.

1. This agreement

Carth is operated by Carthagent, a company registered in Tunisia, based in Tunis, Tunisia, with a presence in San Francisco, California. Company registration details are available on request at apply@carthagent.com. In these terms, "we", "us" and "Carthagent" mean that company. "You" and "your customer account" mean the company that subscribes to Carth, and everyone who signs in under that company's account.

By applying for access, requesting a demo, or signing in to Carth, you accept these terms on behalf of your company. If you are not authorised to bind your company, do not accept them.

Two related documents form part of this agreement. Our privacy policy explains what personal data Carthagent handles as a controller. Our data processing agreement applies when you use Carth to process personal data about other people, and it governs what we do with that data as your processor.

2. What Carth is

Carth is a development cockpit. You brief a piece of work in plain language, and named AI agents run it as a supervised mission: they plan the work, build it in an isolated git worktree, review each other's output, and bring back the result with evidence attached. Missions can touch code, data, documents and content, depending on what you connect and what you ask for.

The service is built around approval gates. Work does not ship, deploy, publish or spend until a person holding the right role in your company approves it. The roles are Admin, CTO, CFO, Marketing and Viewer, and each one opens a different set of decisions. Approvals are recorded with the person, the moment and what they were shown.

Two consequences follow, and they matter more than anything else in this document. First, Carth executes work that you direct. We do not decide what your agents should build, publish or pay for. Second, you are responsible for what you approve. An approval given inside Carth is your company's decision, and the outcome of that decision is yours.

3. Who may use Carth

Carth is a business product, sold to companies for business use. It is not offered to consumers, and it is not intended for personal or household purposes.

To use Carth you must be a legally formed business or a sole trader acting in a business capacity, you must be able to enter into a binding contract, and every person you give a seat to must be at least 18 years old. You must not be located in, or acting on behalf of anyone located in, a country or entity subject to sanctions or export restrictions that would make it unlawful for us to supply you.

Access is by application. We accept a limited number of companies at a time, and we may decline an application or close an account we should not have accepted, in which case we refund any fees you paid for the period you did not receive.

4. Accounts, seats and roles

Seats are people

A seat is one named human being with their own login. Seats are not agents, and running more missions does not consume more seats. If somebody leaves your company or changes job, you may reassign their seat to another person. What you may not do is share one login between two or more people, or keep a seat assigned to a generic mailbox that several people open.

This is not an accounting rule for our benefit. Every approval in Carth is attributed to a named person, and a shared login destroys the one record that makes the product worth having.

Roles and gates

Your Admin assigns a role to each seat, and the role determines which gates that person holds. Rights are enforced by the service, not merely hidden in the interface. You are responsible for choosing roles that reflect who genuinely has authority in your company.

The Admin's responsibility

Your Admin invites users, removes them, sets budget caps and connects your systems. Anything done under your account by someone your Admin invited counts as done by you, unless you can show that it followed a security failure on our side. Keep credentials secret, use strong authentication, remove people promptly when they leave, and tell us at apply@carthagent.com as soon as you suspect an account has been compromised.

5. Plans and prices

Prices are per company, in United States dollars, billed monthly, and exclusive of any taxes or duties that apply where you are established. The published plans are:

Plan	Price	Seats	Notes
Team	$299 per month	4	Roles, per role gates, budget caps, audit trail.
Business	$799 per month	10	Custom roles and gate rules, higher concurrency.
Enterprise	Custom	Agreed	Self hosted in your own infrastructure, with your own AI provider keys.

A demo is free and takes no card. Nothing begins on its own after it: you pick a plan and start paying then, and we do not charge you for a plan you did not choose. The Trial plan was withdrawn and is no longer offered. If you hold a trial licence, it continues on its existing terms until the end of its current term, and these terms govern it in the meantime. The Solo plan was withdrawn on 31 August 2026 and is no longer offered; if you hold a Solo licence it continues on its existing terms, at the price you joined at, for as long as you keep the plan.

Model usage runs against the budget caps you set. On the Enterprise plan it runs against your own provider account, so those costs are billed to you by your provider and not by us. We may change published prices with notice as described in section 18.

6. Payment, renewal and suspension

A paid subscription runs for one month at a time and renews automatically until somebody cancels it. Fees are payable in advance. Payments are handled by our payment provider, and we do not store your full card number.

Your licence has a lifecycle, and the cockpit behaves differently at each stage. We describe it here so that nothing about it is a surprise.

Active. Everything works normally.
Grace period. When a licence expires or a payment fails, you get roughly five days of grace. The cockpit keeps working for everyone, and it shows a renewal banner so that the problem is visible to your team rather than hidden in an inbox.
Suspended. If the licence is still not renewed after the grace period, the account is suspended. Users who are not Admins can no longer sign in. Your Admin can still sign in and sees a stop screen explaining what has happened and how to restore service. Missions do not run while an account is suspended.
Retention, then deletion. Your data is kept during suspension for a defined retention window of thirty (30) days. If the account is not restored within that window, we delete your workspace and its content as described in section 17. Once deleted it cannot be recovered.

Fees already paid are not refundable except where the law requires it, or where we have agreed otherwise in writing. If you dispute an invoice in good faith, tell us within thirty days and we will work it out with you rather than suspending you over the disputed amount.

7. Acceptable use

You may not use Carth, or let anyone use it under your account, to do any of the following.

Anything unlawful, or anything that infringes somebody else's rights.
Attack, scan, probe or stress test systems you do not own or are not clearly authorised in writing to test. Point Carth at your own estate, not at other people's.
Process personal data about other people without a lawful basis for doing so, or in breach of our data processing agreement.
Defeat, bypass, disable or simulate an approval gate. That includes approving on behalf of another person, using someone else's login to record an approval, and any automation whose purpose is to make an approval happen without a human deciding it.
Generate material that is used to deceive people about who produced it or about the facts, including impersonation, fraudulent documents and disinformation.
Resell, sublicense, rent or run Carth as a service for third parties, unless we have agreed that in writing.
Reverse engineer the service, work around technical limits, or overload the infrastructure deliberately.

If you breach this section, we may suspend the account or specific users immediately, and we will tell you why. Where the breach is serious, ongoing, or exposes other customers to risk, we may terminate under section 17.

8. Your content and who owns it

Your content is everything you bring into Carth or produce with it: your code, your data, your documents, your prompts and briefs, and the output your agents generate for you.

You keep ownership of all of it. Carthagent claims no ownership of your content, and no ownership of the work your agents produce for you. As between you and us, it is yours.

To run the service we need a narrow permission, and only that. You grant us a non exclusive, worldwide, royalty free licence to host, copy, transmit, display and process your content strictly for the purposes of operating Carth for you, keeping it secure, backing it up, and providing support you have asked for. The licence lasts as long as we hold your content and ends when the content is deleted. It does not permit us to use your content to train models, to sell it, or to show it to anyone outside our own team acting under confidentiality.

You confirm that you have the rights to the content you put into Carth, and that our processing of it at your direction will not break the law or someone else's agreement with you.

Carthagent keeps ownership of Carth itself: the software, the interface, the agent designs, the documentation and our trade marks. Nothing in these terms transfers any of that to you. We may use aggregated, anonymised operational statistics that cannot identify you or any person, for example counts of missions run or median run duration, to improve the service.

9. Security

This section says what we do to keep your work apart from everyone else's and out of the reach of the agents themselves, and what we need from you for that to hold. The trust page describes the same measures in plain language; where the two differ, this section governs.

9.1 What we commit to

Your cockpit runs in a container of its own, on its own private network. No customer shares a process, a filesystem or a database with another. The separation is enforced by the operating system, not by a rule in our application.

Your container's storage and its backups are encrypted at rest. Traffic between your browser and the cockpit is encrypted in transit. Credentials you connect are stored write only, encrypted under a key that belongs to your container and is never written into the storage it protects, and no user of any role can read them back.

Agents run with a fixed list of tools chosen by the kind of work, set in the software rather than in a setting. An agent is not given your credentials store, another customer's material, or your live branch: building work happens in an isolated copy of the repository, and if that copy cannot be created the task fails rather than write elsewhere. Committing, pushing, deploying, publishing, paying and changing a production database are never on an agent's list; they belong to a person holding the right role.

Every approval, rejection, deploy, budget change, user change and key rotation is written to an audit record as it happens, with the person and the time. The record is not editable from the interface, by you or by us.

We do not train models on your content, and we do not read it except to provide support you asked for or where the law requires it. Our model providers are contracted not to train on what we send them.

9.2 What we need from you

Keep credentials secret, use strong authentication, give each person their own seat, assign roles that reflect real authority, and remove people promptly when they leave. Connect systems with the narrowest credential that does the job. Review what you approve with care proportionate to the risk. Report a suspected compromise to apply@carthagent.com as soon as you notice it.

9.3 If something goes wrong

If we become aware of a security incident that affects your content or your account, we will tell your Admin without undue delay and in any case within 72 hours of confirming it, say what we know, what we have done and what we recommend you do, and keep you informed until it is resolved. Where the incident involves personal data, the data processing agreement applies as well.

9.4 Testing and reports

We test our own service and we welcome responsible reports of vulnerabilities at apply@carthagent.com. You may test the security of your own cockpit; you may not test, probe or attempt to reach any other customer's, or our shared infrastructure, without our written agreement.

9.5 What this section does not promise

No system is perfectly secure, and agents can produce work that is wrong. This section describes measures, not a guarantee of outcome. Section 14 on warranties and section 15 on liability apply to it. The self hosted Enterprise arrangement is secured by you, on your infrastructure, and 9.1 describes the hosted service only.

10. AI output and the approval gate

Read this one twice. AI agents get things wrong. They can produce code that looks correct and is not, analysis built on a misread column, a confident summary of a document they misunderstood, and text that states something untrue in a reasonable tone. This is a property of the technology, not a defect we expect to fix. The approval gate exists precisely because output has to be judged before it is trusted.

You are responsible for what you approve. Carth gives you the evidence and records the decision, but the decision is a human one made by your people, and the consequences of it belong to your company.

Keep a level of human review proportionate to the risk. A draft blog post and a change to a payment flow deserve different scrutiny, and both deserve someone competent looking at them. Where output touches money, safety, legal obligations, personal data or anything you would have to explain to a regulator, review it accordingly and involve people qualified to judge it. Do not rely on Carth output as legal, financial, tax, medical or other professional advice.

We do not warrant that agent output will be accurate, complete, fit for a particular purpose, or free of material similar to output generated for another customer.

11. Third party AI providers

On the hosted plans, Carth sends the material a mission needs to third party AI model providers so that the work can be done. We choose providers that do not train their models on the content we send, and we contract with them as our subprocessors. The categories are listed in our privacy policy and the current named list is in the subprocessor table of the data processing agreement.

On the Enterprise plan you run Carth in your own infrastructure and you supply your own AI provider keys. In that arrangement your content goes from your deployment to your provider under your own agreement with them, and we are not in that path. You are responsible for the terms, the cost and the compliance posture of the provider account you use.

Providers change their models, their prices and their availability, and sometimes they change them abruptly. We may substitute or add providers to keep the service working, and we will tell you when we do.

12. Availability and support

We aim to keep Carth available and to fix problems quickly, and we do planned maintenance at quiet hours where we can. We are also an early stage company, and we would rather say that plainly than publish a number we cannot yet stand behind.

So, honestly: the published plans carry no uptime service level agreement. There is no availability percentage, no service credit scheme and no guaranteed response time attached to Team or Business. Support on those plans is by email at apply@carthagent.com, and we aim to reply within two business days, with faster handling for Business.

If your company needs a committed availability target, a defined response time or a named contact, that can be agreed in writing as part of a Enterprise engagement. A commitment only exists if it is written into a signed agreement.

13. Confidentiality

Each side may learn confidential information about the other: your content and business plans on one side, our non public technical and commercial information on the other. Each side agrees to protect the other's confidential information with at least reasonable care, to use it only to perform this agreement, and to disclose it only to staff and contractors who need it and are themselves under confidentiality obligations.

These duties do not apply to information that is public through no fault of the receiver, was already lawfully known, or is independently developed. If a court or regulator compels disclosure, the receiving side may comply, but will tell the other side first where it is lawful to do so.

These obligations continue for three years after this agreement ends, and for as long as the law protects it in the case of trade secrets.

14. Warranties and disclaimers

Each side warrants that it has the authority to enter into this agreement and will comply with the laws that apply to it.

Beyond that, and to the maximum extent the law allows, Carth is provided as is and as available. We disclaim all other warranties, whether express, implied or statutory, including any implied warranty of merchantability, fitness for a particular purpose, non infringement, accuracy, or uninterrupted or error free operation. We do not warrant that the service will meet your requirements, that defects will be corrected, or that any particular result will be achieved by a mission.

15. Limitation of liability

Neither side excludes liability for anything that cannot lawfully be excluded, including death or personal injury caused by negligence, and fraud or fraudulent misrepresentation.

Subject to that, and to the maximum extent permitted by law:

Neither side is liable for indirect, incidental, special, consequential or punitive damages, or for loss of profit, revenue, goodwill, anticipated savings, business opportunity or data, however caused, even if the possibility was known.
Our total aggregate liability arising out of or relating to this agreement is limited to the total fees you paid us for Carth in the twelve months immediately before the event giving rise to the claim. Where no fees have been paid, our total aggregate liability is limited to one hundred United States dollars.

These limits apply to all theories of liability, in contract, in tort, under statute or otherwise, and they survive termination.

Some jurisdictions do not allow the exclusion or limitation of certain warranties or damages. If you are in one of them, the exclusions and limits above apply only as far as that jurisdiction permits, and nothing here removes a right the law gives you that cannot be waived.

16. Your indemnity

You will defend and indemnify Carthagent against third party claims, and against the resulting damages, losses and reasonable legal costs, that arise from your unlawful use of Carth, from your breach of section 7, from content you put into Carth that you had no right to use, or from what your people approved and then acted on. This does not apply to the extent the claim is caused by our own breach of this agreement or our negligence. We will notify you of any such claim promptly, let you control the defence for claims that concern only money, and cooperate at your expense.

17. Term, termination and your data

This agreement starts when you first accept it and continues until it ends under this section.

You may cancel at any time from the cockpit or by writing to us. Cancellation takes effect at the end of the paid month you are in, so you keep what you have paid for.

We may terminate for convenience with thirty days written notice, refunding the unused part of any prepaid fees. Either side may terminate immediately for a material breach that is not fixed within fifteen days of written notice, or immediately if the other side becomes insolvent. We may terminate immediately, without that cure period, for a serious breach of section 7 that risks harm to other people or to our infrastructure.

When this agreement ends, access to the cockpit stops, and any fees due up to that date remain payable. For thirty (30) days after termination you may ask us to export your content, and we will provide it in a common machine readable format at no charge. After that window we delete your workspace, its encrypted volume and its content. Backups age out on their normal cycle, described in the data processing agreement. We may keep records we are legally required to keep, such as invoices, and a minimal record that your account existed.

Sections on your content, confidentiality, disclaimers, liability, indemnity and governing law survive termination.

18. Changes to the service and to these terms

Carth is actively developed, and it will change. We add capabilities, we improve agents, and occasionally we remove something that is not working. We will not remove a capability you depend on in a way that materially degrades the service for you without at least thirty days notice, except where a provider or a security problem forces our hand and we have to act faster.

We may update these terms. For minor changes, such as clarifying wording, we publish the new version and it applies from publication. For material changes, and for price increases on your plan, we will give at least thirty days notice by email to your Admin and on this page. If you do not accept a material change, you may cancel before it takes effect and we will refund the unused part of any prepaid fees. Continuing to use Carth after the notice period means you accept the new version.

19. Governing law and disputes

Carthagent is a company registered in Tunisia and sells Carth internationally.

These terms are governed by the laws of the Republic of Tunisia, without regard to its conflict of law rules. Any dispute arising out of or in connection with these terms will be submitted to the exclusive jurisdiction of the courts of Tunis, Tunisia, and the parties agree that proceedings before those courts will apply.

Before starting formal proceedings, each side agrees to raise the issue in writing with the other and to spend thirty days genuinely trying to resolve it. Nothing stops either side from seeking urgent injunctive relief to protect confidential information or intellectual property. The United Nations Convention on Contracts for the International Sale of Goods does not apply. If you are a business established in a jurisdiction whose mandatory local law gives you rights that cannot be contracted away, those rights are unaffected.

20. General

Entire agreement. These terms, the privacy policy, the data processing agreement and any order form or written agreement we sign with you are the whole agreement between us on this subject, and they replace earlier discussions.
Order of precedence. If there is a conflict, a signed order form or Enterprise agreement comes first, then the data processing agreement on matters of personal data, then these terms.
Assignment. You may not assign this agreement without our written consent, which we will not unreasonably withhold. Either side may assign it to a successor in a merger or a sale of substantially all its business.
Severability. If a provision is unenforceable, the rest stays in force and the unenforceable part is read down to the minimum extent necessary.
No waiver. Not enforcing a right on one occasion does not waive it.
Force majeure. Neither side is liable for a failure caused by events genuinely outside its reasonable control, provided it tells the other side and works to limit the impact.
No partnership. This agreement creates no partnership, agency or employment relationship.
Notices. Notices to us go to apply@carthagent.com. Notices to you go to your Admin's email address and, where relevant, appear in the cockpit.
Language. The English version of these terms governs. A translation is provided for convenience only.

21. How to reach us

Write to apply@carthagent.com for anything to do with this agreement: questions, notices, billing, security reports and termination. That address reaches a person, and we aim to reply within two business days.

Carthagent, registered in Tunisia. Tunis, Tunisia, and San Francisco, California. Registration details on request.