Terms of service and sale

These terms govern the subscription to the managed “Kastel Cloud” mode (Solo, Team, SME, managed Enterprise Plans). They do not apply to self-hosting, including the free Kastel Core: that is governed solely by the software license (see “Software license” in the legal notice).

The Kastel software itself remains licensed under a separate proprietary license. These terms cover only the provision of the managed service: hosting, operation, billing, termination.

The contract is entered into with:

Pharos EURL is today the only existing entity entitled to contract; it also publishes the Kastel software. Should Pharos incorporate a company dedicated to the Kastel business, the contract would transfer to it automatically, with at least 30 days' notice and, during that notice period, a right for the customer to terminate without penalty if it objects. No other terms, pricing or service change would result from this transfer.

For a Solo or Team subscription taken out online, acceptance occurs by checking the box provided at sign-up, before entering payment details.

For an SME or managed Enterprise Plan taken out on quote, acceptance occurs upon signature of the order form, which refers to these terms and constitutes acceptance of the Data Processing Agreement (DPA).

Each managed Plan (Solo, Team, SME, managed Enterprise) carries a seat cap, published on the pricing page or set in the order form. This cap is a service limit: beyond it, adding a new seat is refused until the customer upgrades to a higher Plan. There is no billed overage mechanism.

Self-hosting remains unlimited in seats, outside the scope of these terms.

The service requires the customer to connect its own credentials with the AI provider(s) of its choice (BYOK). Kastel never provides, resells or bills inference itself.

The applicable price is the one published on the pricing page at the date of subscription for an online subscription, or the one set in the order form for a negotiated subscription.

A payment default, after a formal notice that remains unanswered, may lead to suspension of access until payment is regularised. Suspension never leads to deletion of data before the retention periods described in the DPA have expired.

For a subscription taken out online, the service starts immediately and the payment method is charged upon subscription. There is no free trial on the managed Plans: a customer who wants to evaluate Kastel without commitment can use Kastel Core, free and complete, hosted by themselves.

The subscription carries no fixed term: the customer may cancel at any time from their console, effective at the end of the current billing period, under the conditions of article 07.

Unless a fixed term is set in the order form, the subscription runs for an indefinite period and automatically renews at each billing period. The customer may terminate at any time, effective at the end of the current period.

Pharos may terminate in the event of a customer breach left unanswered after formal notice, notably a prohibited use of the software or a persistent payment default.

The fate of data at the end of the contract is described in the DPA: verified export before any deletion, same-day return to self-hosting possible, 30-day residual retention then deletion.

• You are solely responsible for the lawfulness of the data you ingest into your Kastel, including where it contains personal data or special categories of data.
• You comply with the software's usage restrictions defined by its license (no resale, no multi-tenant service, no reverse engineering).
• You choose and manage your AI provider(s) (BYOK): you contract directly with them and remain solely responsible for that relationship. The provider posture registry we make available to you is a declarative aid, not an audit or a guarantee on our part.

The Kastel software remains the exclusive property of Pharos EURL. The interface (MCP protocol, context schema, export format, SDK) is published under the Apache License 2.0: nothing in these terms restricts your rights over this open interface.

You retain full ownership of your data, your context and, when self-hosting, your infrastructure. We acquire no ownership right over your data merely by hosting it. You may export all of your data at any time, in open formats (markdown, git, Postgres), including during the term of the contract.

The processing of personal data under the managed service is governed by our Data Processing Agreement (DPA), which forms an integral part of this contract.

The DPA applies only to the managed mode. When self-hosting, we are never a processor of your data: you host and operate your own instance.

Each party keeps confidential the non-public information of the other party that it becomes aware of in connection with the contract, and uses it only to perform it.

Except in case of gross negligence, wilful misconduct, or bodily injury, our liability under this contract is limited, for all damages combined, to the amount paid by you for the service over the twelve months preceding the triggering event, excluding any indirect damage, including without limitation loss of revenue, loss of profits, loss of customers, harm to image or reputation, business interruption, loss of data resulting from your own failure to meet your backup or export obligations, and loss of a chance.

We may amend these terms, notably to reflect a change in the service, in regulation, or in the contracting entity (see §2). Any substantial change is notified to you with reasonable notice before it takes effect; you may terminate without penalty if you object, before it takes effect.

These terms are governed by French law. Any dispute relating to their formation, performance or interpretation falls under the jurisdiction of the French courts, subject to applicable mandatory rules.

The French version of these terms prevails. This English version is provided for convenience only and has no contractual value.