Terms of Service

Last updated: March 2026

1. Overview

Subaiya is an agent security service operated by Selim Hegler ("we", "us", "our"). By registering for and using Subaiya, you agree to these Terms of Service. If you do not agree, please do not use the service.

2. Eligibility

You must be at least 16 years old to use Subaiya. By registering, you confirm that you meet this age requirement. If you are under 18, you confirm that a parent or legal guardian has approved your use of the service.

3. Beta Program

Subaiya is currently in beta. This means:

• The service is provided free of charge during the beta period
• Features may change, be added, or be removed without notice
• The service may experience downtime or interruptions
• There is no guarantee of availability or uptime
• We may end the beta program at any time

4. What Subaiya Does

Subaiya is a security layer that helps you define and enforce rules for your AI agent's behavior. Subaiya does not:

• Store your API key (it passes through 1:1)
• Store your prompts or AI responses
• Modify the content of AI responses
• Access your local files or system

Subaiya uses the following technical cookies required for the service to function:

• subaiya_session — Authentication cookie for the Dashboard (24-hour TTL, HttpOnly, Secure)
• subaiya_oauth_state — CSRF protection during Google OAuth login (10-minute TTL, HttpOnly, Secure)

No tracking or analytics cookies are used.

5. Your Responsibilities

You are responsible for:

• Your own AI provider API key and any costs incurred through the API
• The actions of your AI agent, even when governed by Subaiya
• Keeping your login credentials and Subaiya key confidential
• Using the service in compliance with applicable laws

6. Account Security and Acceptable Use

• You must keep your login credentials (password, Subaiya key) confidential
• You may not share your account with others
• You may not attempt to circumvent rate limits, access controls, or security measures
• You may not reverse-engineer, probe, or test the vulnerability of the service
• We reserve the right to suspend or terminate accounts that violate these terms or engage in abusive behavior, with or without prior notice

7. Authentication

Subaiya supports two methods of authentication:

• Email and password — Your password is stored exclusively as an encrypted, irreversible hash. The plain-text password is never stored or transmitted.
• Google OAuth 2.0 — You may sign in using your Google account. We receive your name, email address, and Google ID from Google. We do not receive or store your Google password.

You are responsible for maintaining the security of your login credentials. If you believe your account has been compromised, contact us immediately at info@subaiya.com.

8. Supported Clients

Subaiya currently supports OpenClaw as the primary AI client. Support for additional clients may be added in the future. Compatibility with other clients is not guaranteed.

9. Limitation of Liability

To the maximum extent permitted by applicable law:

• Subaiya is provided "as is" without any warranties, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement.
• We do not warrant that Subaiya will prevent all unintended agent actions. Subaiya is a security tool that reduces risk — it does not eliminate it.
• We are not liable for any damages arising from the actions of your AI agent, including but not limited to data loss, deleted files, sent messages, or any other consequences of agent behavior.
• Our total liability is limited to the amount you paid for the service (which is zero during the free beta).

Note: Under German law, liability for intentional misconduct (Vorsatz) and gross negligence (grobe Fahrlässigkeit), as well as for injury to life, body, or health, cannot be excluded. The above limitations apply only to the extent permitted by law.

10. Intellectual Property

All rights to the Subaiya software, including its design, code, and documentation, are owned by Selim Hegler. You may not reverse-engineer, decompile, or attempt to derive the source code or underlying algorithms of Subaiya.

11. Data Protection

Your data is processed in accordance with our Privacy Policy and the EU General Data Protection Regulation (GDPR). By using Subaiya, you acknowledge that you have read and understood our Privacy Policy.

12. Termination and Account Deletion

You may stop using Subaiya at any time by disconnecting your AI client from the Subaiya proxy. You may delete your account through the self-service option in your Dashboard, or by contacting info@subaiya.com.

Upon account deletion, your account is deactivated immediately and your registration data is permanently and immediately deleted. There is no recovery period. Backups are purged simultaneously.

We may terminate your beta access at any time, with or without reason.

13. Changes to These Terms

We may update these Terms from time to time. If we make material changes, we will notify you by email. Continued use of Subaiya after changes constitutes acceptance of the updated Terms.

14. Governing Law

These Terms are governed by the laws of the Federal Republic of Germany. If you are a consumer in the EU, you retain any mandatory protections provided by the laws of your country of residence.

15. Contact

For questions about these Terms, please contact us at info@subaiya.com.