Terms of Service - InvestigAItor

1. Acceptance

By creating an account or using InvestigAItor (the “Service”), you agree to these Terms of Service on behalf of yourself and the organization you represent. If you do not agree, do not use the Service.

2. Description of Service

InvestigAItor provides a browser extension, admin dashboard, and employee training portal that enable organizations to monitor, govern, and enforce policies around employee use of AI platforms. Features include:

AI activity monitoring across supported and organization-defined platforms
Platform policy enforcement (monitor, warn, require approval, or block)
Shadow AI discovery for unrecognized AI services
Sensitive data (PII) detection with on-device redaction and screenshot capture
File upload and speech input detection
Automated response rules (automations) for alerts, blocking, and training assignment
Approval workflows for restricted platform access
Security awareness training courses with quizzes and progress tracking
Scheduled reports and real-time email/webhook alerts
Device and user group management with per-group policy overrides
Audit logging, data retention controls, and compliance reporting

3. Permitted Use

You may use the Service only for lawful purposes and in accordance with these Terms. You agree not to:

Use the Service to monitor individuals outside your organization without authorization
Circumvent or disable any security or access control features
Attempt to reverse-engineer or extract source code from the Service
Resell or sublicense the Service without written permission
Use the Service in violation of applicable employment or privacy law
Tamper with or attempt to bypass the browser extension's monitoring or policy enforcement

4. Accounts and Organizations

Each account is associated with one or more organizations. You are responsible for maintaining the security of your account credentials and for all activity that occurs under your account. Notify us immediately of any unauthorized access.

Organization administrators may invite additional members with configurable roles and permissions, enforce multi-factor authentication (MFA) requirements, restrict invitations to specific email domains, and set session inactivity timeouts.

5. Subscription and Billing

Access to the Service requires an active subscription at $1.50 per user per month. Billing is per distinct user (identified by username), not per device. A single user on multiple devices counts as one seat. Shared devices support up to 6 users each by default; we reserve the right to adjust the maximum number of users per shared device at any time. Subscriptions renew automatically unless cancelled before the renewal date.

Non-profit organizations may qualify for discounted pricing. Tax exemptions are available upon verification.

We reserve the right to suspend access to accounts with overdue balances after reasonable notice.

6. Training Platform

The Service includes a built-in security awareness training platform accessible at training.investigaitor.org. Organizations may assign training courses to employees, track completion progress, and configure training as a prerequisite for AI platform access.

Training content provided by InvestigAItor is for educational purposes. It does not constitute legal advice. Organizations are responsible for supplementing it with guidance specific to their regulatory environment.

7. Employer Responsibility

You are solely responsible for ensuring your use of the Service complies with all applicable laws governing employee monitoring in your jurisdiction, including but not limited to GDPR, CCPA, and applicable state electronic monitoring statutes. This includes providing appropriate notice to monitored employees. We are not responsible for your compliance with those laws.

8. Automations and Automated Actions

The Service allows administrators to configure automated response rules (“automations”) that trigger actions such as sending alerts, blocking devices, requiring approval, or assigning training based on governance events. You are responsible for reviewing and configuring these automations appropriately. We are not liable for consequences of automation rules you create or enable.

9. Data

You retain ownership of activity data collected through your deployment. We process that data solely to provide and improve the Service. See our Privacy Policy for full details.

10. BAA and Healthcare

For organizations subject to HIPAA, we offer a Business Associate Agreement (BAA). The BAA must be executed via our document signing portal (sign.investigaitor.org) before you use the Service to process Protected Health Information.

11. Availability and Warranties

We aim for 99.9% uptime but do not guarantee uninterrupted availability. The Service is provided “as is” without warranty of any kind, express or implied, including warranties of merchantability or fitness for a particular purpose.

12. Limitation of Liability

To the maximum extent permitted by law, our total liability for any claim arising from or relating to the Service is limited to the amount you paid us in the 3 months preceding the claim.

13. Termination

Either party may terminate the subscription at any time. Upon termination, your access to the Service will cease and we will delete your data within 30 days, unless retention is required by law or a longer period is configured in your data retention settings at the time of cancellation.

14. Changes to Terms

We may update these Terms with 14 days notice via email to account administrators. Continued use of the Service after changes take effect constitutes acceptance.

15. Contact

Questions about these Terms? Email [email protected].