Terms of Service

Framework Terms. This Order Form is governed by the Key Terms below and the Common Paper Cloud Service Agreement Standard Terms, version 2.1, incorporated by reference. The modifications expressly stated below control over conflicting Standard Terms. Capitalized terms not defined here have the meanings in the Standard Terms.

Cloud Service. Hue is a hosted platform for collecting, preserving, inspecting, and debugging application and agent traces, spans, logs, snapshots, prompts, outputs, and tool records. It supports customer-directed analysis, conversion of evidence into evaluation cases, replay runs, scoring, verifiers, and model-based judges. Available features, usage limits, storage settings, and models depend on Customer's selected plan and configuration.

Order Date. The Effective Date, unless a later start date is specified in an accepted order or checkout.

Subscription Period. For self-serve paid subscriptions, one month unless the accepted checkout specifies a different period. Subscriptions renew for the same period unless either party gives notice before the current period ends. Customer can cancel renewal through the available account interface or by emailing hello@hue.ac. Cancellation takes effect at the end of the paid period, subject to other termination rights in the Agreement.

For a free plan, access continues until Customer closes its account or either party terminates on notice. No paid conversion or paid renewal occurs without Customer's affirmative purchase authorization. A trial's duration and any authorized paid conversion must be expressly shown and accepted at signup or checkout.

Cloud Service Fees. The fees, usage rates, allowances, currency, and billing cadence expressly shown and accepted in the applicable checkout or order apply. If no paid plan or order is accepted, Fees are zero. A pricing page change alone does not change an already accepted order. Proposed price increases for renewal require at least 30 days' notice and a chance to cancel before they take effect.

Payment Process. Customer authorizes automatic charges only when it expressly selects that payment method in checkout, for the accepted charges and cadence. Where the parties agree to invoicing, fixed subscription fees are invoiced in advance and usage fees in arrears, with payment due 30 days after receipt unless the accepted order specifies otherwise. Customer owes applicable itemized taxes under the Standard Terms. No minimum spend or additional service charge applies unless accepted in checkout or an order.

Use Limitations. Customer must observe the selected plan's accepted limits, avoid unauthorized access, and submit only data it has the right to provide. The sensitive-data restrictions below apply. Customer must not put passwords, API secrets, or other live authentication credentials into trace content unless a specifically approved feature and written arrangement authorize that handling. Customer-directed model inference and replay are subject to the capabilities and restrictions of the approved providers and configuration.

Technical Support. Customer may contact hello@hue.ac for service questions and security@hue.run for security or privacy questions. No guaranteed response time or additional service level applies unless separately agreed in writing.

Provider. Hue Intelligence Inc., 530 East 20th Street, #0M-B, New York, NY 10009, United States.

Customer. The business or person affirmatively accepting these Terms as described above.

Effective Date. The recorded date Customer first affirmatively accepts this version of the Agreement.

Governing Law. New York, United States, excluding conflict-of-law rules.

Chosen Courts. State and federal courts located in New York County, New York, United States.

General Cap Amount. One times the Fees paid or payable by Customer to Provider in the twelve-month period immediately before the claim. For a free plan or any account with no Fees paid or payable, the Service is provided free of charge and as is, and the General Cap Amount is zero. The Standard Terms' legally required exceptions apply. No Increased Claims, Unlimited Claims, or separate DPA liability cap are added by this Cover Page.

Provider Covered Claims. Third-party claims that the Product, when used in accordance with the Agreement, infringes or misappropriates third-party intellectual property or proprietary rights, subject to the Standard Terms' procedure and exclusions.

Customer Covered Claims. Third-party claims that Customer Content, when used in accordance with the Agreement, infringes or misappropriates third-party intellectual property or proprietary rights, or arising from Customer's breach of Section 2.1 of the Standard Terms, subject to the Standard Terms' procedure and exclusions.

Notice Address. For Provider: hello@hue.ac. For Customer: the primary administrative email address supplied for the account, or another notice address expressly agreed in writing. Security incident and data-protection communications may also be sent to security@hue.run.

1. Personal data and DPA

For on-behalf-of-Customer personal-data processing, the parties must execute Hue's DPA before submission of such data. Their executed DPA supplements this Agreement and controls personal-data processing and related conflicts. The general contract confidentiality obligations also protect nonpublic Customer Content that does not contain personal data.

The publicly posted privacy policy describes Provider's own privacy practices and is not a substitute for the customer-processing DPA. Signing a DPA alone does not show that Customer accepted these Terms. For a DPA referencing these Terms, identify the version and Customer's actual acceptance date.

2. Sensitive data scope

In addition to Section 3.2 of the Standard Terms, Customer must not submit GDPR Article 9 special-category data, identifiable health information including HIPAA-regulated PHI, full payment-card numbers, sensitive financial-account information, or government-issued identifiers unless separately authorized in a written agreement identifying the data categories, permitted processing, additional safeguards, eligible vendors, and approved Service configuration. Such authorization must comply with vendor restrictions. An applicable BAA must be executed before HIPAA-regulated PHI is accepted. Customer is responsible for appropriate collection settings, minimization, masking, and redaction. Provider's applicable protection obligations continue for data received.

3. Customer-directed AI processing; replacement of Section 1.6

Section 1.6 (Machine Learning) is replaced with the following:

Provider may process Customer Content using artificial-intelligence and machine-learning services only to provide and maintain Customer's requested Product features in accordance with this Agreement, the applicable DPA, and Customer's documented instructions. This includes inference, analysis, generation of customer-specific evaluation cases, and model-based judging. It does not authorize use of Customer Content to develop, train, or improve general-purpose or cross-customer models.

Provider will not use or authorize its service providers to use Customer Content for such model training or improvement without a separate express written agreement with Customer identifying the permitted use and safeguards. This restriction is an obligation of Provider, not a representation that a particular third-party retention setting has been enabled. The DPA's subprocessor, transfer, and other protection requirements remain applicable. No zero-retention guarantee is created by this paragraph.

AI outputs and scores can be inaccurate. Customer must evaluate them with appropriate human oversight and must not rely on the Product for High Risk Activities.

4. Usage data

For purposes of Section 1.4, Usage Data does not include the substantive contents of customer traces, prompts, messages, outputs, snapshots, or tool inputs/outputs merely because Provider can observe them. Usage Data remains subject to applicable law and the DPA. External disclosure must be aggregated and must not identify Customer or Users, as required by the Standard Terms. The model-training authorization in the original Section 1.6 is not retained.

5. Security and compliance program

Provider will use commercially reasonable efforts to protect the Service against unauthorized access, alteration, use, and unlawful tampering. Provider maintains an information-security and compliance program with controls designed to address ISO/IEC 27001, the AICPA Trust Services Criteria used in SOC 2 examinations, and HIPAA requirements applicable to its approved operations. Provider is undergoing independent SOC 2 Type II and ISO/IEC 27001 audits. Audit completion and issuance of reports or certifications remain subject to the independent auditors' findings. Provider will make available then-current reports or certifications it maintains, if any, confidentially on reasonable written request, consistent with the DPA.

This clause does not expand permitted data categories, represent completed certifications, authorize PHI, or establish an uptime or recovery service level.

6. Logo rights

Section 12.8 is modified so that Provider may use Customer's name or logo in public marketing only with Customer's prior written consent.

7. Changes to these Terms

Section 12.2's mutual written or electronic acceptance requirement remains in effect. Posting a new version alone does not amend an existing accepted Agreement. Provider will retain prior versions and present material changes for affirmative acceptance before they apply, except as separately permitted by an agreed order or applicable law.