CLAB ("we," "us," "the Service") is a governance, routing, and privacy layer between your organisation and third-party Large Language Model ("LLM") providers. We do not train models on your prompts. Our role is to enforce your organisation's policies — PII redaction, role-based access, audit, quotas — and to forward sanitised requests to the LLM provider you have selected or that we have auto-routed to on your behalf.
By accessing or using the Service you agree to these Terms. If you do not agree, do not use the Service.
You ("Customer") are responsible for:
We may suspend or terminate an account that we reasonably believe has been compromised or is being used to harm others.
You will not use the Service to:
Ownership. You retain ownership of the prompts you submit and the responses we return.
Processing. We process your data only to deliver the Service: route it to the LLM provider you have selected, log the necessary metadata for audit, enforce quotas, and detect safety issues. We do not sell your data. We do not use your prompts to train LLMs.
PII. Where our detection engine identifies personally identifiable information ("PII") inside a prompt, we replace it with a placeholder token before forwarding to the LLM. The original values are AES-256-GCM-encrypted at rest, scoped to the session and session owner, and never reach the LLM. See the Privacy Policy for details.
DSAR. You can export or delete your data at any time using GET /v1/me/dsar/export and POST /v1/me/dsar/delete respectively. Deletion honours a 30-day cooling-off window during which you may cancel.
Where a paid plan applies, billing is monthly in advance via Stripe. Usage in excess of plan caps is rejected at our pipeline (see "BlockedQuota" outcome in your audit log). You can change or cancel your plan at any time via the Stripe Customer Portal. Refunds for unused time are not given automatically; contact support and we will review on a case-by-case basis.
The Service is provided "as is" and "as available." We do our best to keep it secure, fast, and correct, but we are not liable for indirect, incidental, or consequential damages, including loss of data, revenue, or business opportunity, arising from your use of the Service. Our total aggregate liability in any 12-month period will not exceed the amount you paid us in the same period.
LLM-generated content is not factual or professional advice. Verify before relying on it for medical, legal, financial, or safety-critical decisions.
You can terminate at any time by deleting your account (POST /v1/me/dsar/delete). We can terminate or suspend your account if you materially breach these Terms, or if continued service would put us or other customers at risk. On termination we will, where lawfully permitted, return or delete your data within 30 days.
These Terms are governed by the laws of the United Arab Emirates. Any dispute will be resolved exclusively in the courts of the Emirate where our principal office is registered, unless a mandatory consumer-protection statute applicable to you provides otherwise.
Changes to these Terms will be published at this URL with a new version code and the date of effect. Continued use of the Service after a new version is published constitutes acceptance.