Terms of Service

1. Key Terms

These Key Terms plus the Common Paper Cloud Service Agreement Standard Terms Version 2.1 (the "Standard Terms") constitute the Cloud Service Agreement between you ("Customer") and Port Zero ("Provider", "we", "us", or "our"). The Standard Terms are hosted at the URL below and incorporated by reference. Capitalized terms used but not defined here have the meanings given in the Standard Terms.

Provider

Port Zero
Notice Address: legal@portzero.net

Cloud Service

The Port Zero platform that provides secure Cloud Tunnels (exposing local services to the public internet via HTTPS), including the CLI, web dashboard, APIs, documentation, and edge infrastructure (the "Product").

Subscription Period

The billing interval you select (monthly or yearly). Automatically renews for successive Subscription Periods of the same length unless you cancel prior to the end of the current period.

Non-Renewal Notice Date

You may prevent renewal by cancelling via the dashboard at any time before the end of the current Subscription Period.

Fees

As displayed for your selected plan in the dashboard and on the pricing page. The free tier has zero Fees. Fees are non-refundable except as expressly provided in the Agreement.

Payment Process

Automatic payment: you authorize recurring charges to the payment method on file (processed via Stripe) according to the selected cadence.

Technical Support

Email support@portzero.net. We aim to respond within 2 business days. Technical Support does not include custom development, on-site support, or a guaranteed response time for free-tier accounts.

Use Limitations

Use of the Cloud Service is also subject to our Acceptable Use Policy, which is incorporated by reference and sets out prohibited uses specific to tunnels and edge network access.

Governing Law

The laws of the State of Tennessee, United States (without regard to its conflict of laws rules).

Chosen Courts

The state and federal courts located in the State of Tennessee.

General Cap Amount

The total Fees paid or payable by you to Provider in the twelve (12) months immediately preceding the claim. If no Fees were paid in that period, USD $100.

Increased Cap Amount

Two (2) times the General Cap Amount.

Increased Claims

Claims arising from: (a) a party's gross negligence or willful misconduct; or (b) a party's breach of Section 10 (Confidentiality) of the Standard Terms.

Unlimited Claims

(a) a party's indemnification obligations under Section 9 of the Standard Terms; (b) a party's breach of Section 10 (Confidentiality) of the Standard Terms; (c) Customer's payment obligations under Section 4 of the Standard Terms; and (d) a party's gross negligence, willful misconduct, or fraud.

Provider Covered Claim

A third-party claim against Customer alleging that Customer's authorized use of the Product, as permitted under the Agreement, infringes or misappropriates that third party's U.S. intellectual property rights.

Customer Covered Claim

A third-party claim against Provider arising from: (a) Customer Content, or any traffic, data, or material transmitted through Customer's tunnels; (b) Customer's or a User's use of the Product in violation of the Agreement, including the Restrictions in Section 2.1 of the Standard Terms or the Acceptable Use Policy; or (c) Customer's breach of its representations and warranties under the Agreement.

Order Form

Your account registration, plan selection, or use of the Cloud Service.

2. Standard Terms

The balance of the agreement is the Common Paper Cloud Service Agreement Standard Terms (Version 2.1):

https://commonpaper.com/standards/cloud-service-agreement/2.1

Read the Standard Terms carefully. They address access & use, restrictions on Customer, suspension, privacy & security (including Personal Data requirements), payment & taxes, term & termination, representations & warranties, disclaimers, limitation of liability (including the caps above), indemnification, confidentiality, IP reservation of rights, and general provisions (entire agreement, assignment, export controls, etc.).

In the event of a conflict between these Key Terms and the Standard Terms, these Key Terms control for this Agreement.

3. Data and Privacy

Our collection and use of information is described in the Privacy Policy, which is incorporated by reference. Where the Standard Terms require a data processing agreement for Personal Data subject to GDPR, our Data Processing Addendum applies automatically and is incorporated by reference; it covers controller/processor roles, our subprocessors, the international transfer mechanism (Standard Contractual Clauses), security measures, breach notification, and assistance with data subject requests. See our Subprocessors page for the current list of third parties who process personal data on our behalf.

4. Review Records

If you use review records, you upload code diffs, commit metadata, and related feedback comments and screenshots ("Review Record Content"). You grant Provider a license to store, process, transmit, and display Review Record Content as needed to provide the Cloud Service, including hosting it, showing it to your invited reviewers and guests, and running the feedback and fix-tracking workflow.

Guests who submit a comment on a tunnel you share are shown a notice before submitting. Their comment text and screenshot become Review Record Content on your account and are subject to this section.

5. Model Training

Training consent is a licence you grant, granted per repository. It is off by default. Certain Port Zero features are offered on a data-for-access basis — they are paid for with that licence rather than with money — and granting consent for a repository is what turns them on there. The licence described in this Section stands on its own: it is defined by what you license, not by which feature happens to rely on it, and it continues to mean the same thing if any of those features change or are discontinued. You control it per repository and can withdraw it at any time.

What you grant

When you grant training consent for a repository, you grant Provider a worldwide, royalty-free, transferable and sublicensable license to use that repository's Review Record Content (code diffs, commit metadata, feedback comments, screenshots, and fix/verdict signals) together with agent cost and usage metadata (model names, token counts, computed costs, timestamps, commit SHAs, and file paths) to develop, train, evaluate, and improve machine-learning models and the Service. This license is granted to Provider and its successors and assigns and survives a change of control (merger, acquisition, or sale of assets).

What consent unlocks

On plans where these features are paid for with data, granting consent for a repository enables, for that repository:

• Agent cost measurement — what an AI coding agent's work costs, per comment, commit, pull request, and line, joined to review verdicts.
• The review link — replies posted on a pull request flowing back into the corresponding comment thread, and the commits referencing a comment shown with the files and lines they changed.

This list may change as the Service evolves; it describes what the licence currently unlocks and does not limit or extend the licence granted above. Some plans include these features without a training licence — where that is the case, the plan's description says so, and no grant under this Section is required or requested.

What is never used

We upload and use usage metadata only from your agent sessions. We do not collect or train on your AI session contents — the prompts, the model's responses, or your source code as seen inside an agent session — regardless of this consent. On the free local review loop, comment text and screenshots stay on your machine; only metrics are synced.

Withdrawing consent

You may withdraw consent for a repository at any time from its settings in app.portzero.net. Withdrawal is honest about what it can and cannot do: it stops all future use of that repository's data for training and removes the covered data from our training corpus going forward, and you may separately request deletion of the harvested artifacts. Withdrawal cannot un-train models that were already trained on data while consent was active — that is a technical impossibility, and we will not imply otherwise.

Withdrawing also turns off, for that repository, the features listed under What consent unlocks that were being paid for with the licence. That is the trade ending, not a penalty: you keep your data, and we stop providing what the data was paying for.

Versioning

Each consent records the version of these Terms in effect when you granted it, and that version is shown to you at the moment you grant it — your acknowledgement of that specific version is what we record, rather than a version we assume on your behalf. If we materially change this Section after you consented, we will surface the change and ask you to re-consent under the updated Terms before continuing to rely on your grant.

6. Fair Use — Cloud Bandwidth

Cloud Tunnels are priced flat: no metered billing, no per-request pricing, and no overage charges. That pricing assumes the kind of development, testing, demo, and production traffic ordinary individual and team use of the Service generates.

Each plan's cloud egress — data transferred through your Cloud Tunnels, in aggregate and in both directions, measured per calendar month — is subject to a fair-use ceiling for that plan. We size the ceiling well above ordinary usage so it is not something typical accounts approach, and we publish the current figures separately from these Terms (so they can be tuned to real usage without a Terms amendment). Until a specific figure is published for your plan, "fair use" means usage consistent with the individual or team development, testing, demo, and production workloads these plans are priced for — not reselling bandwidth, operating a CDN or media-hosting service through a Cloud Tunnel, or other disproportionate use.

If your account's monthly cloud egress substantially and sustainedly exceeds the applicable ceiling, we may, in this order where practical:

• Notify you so you can review your usage;
• Throttle the affected Cloud Tunnel's throughput; or
• Suspend the affected Cloud Tunnel(s).

We do not bill for excess usage. Exceeding the ceiling never results in an additional charge — at most it results in the throttling or suspension described above. We will not suspend a Cloud Tunnel solely for exceeding the fair-use ceiling without first attempting to notify the account owner, except where Section 8 (Prohibited Actions) or the Acceptable Use Policy independently applies.

This section governs bandwidth fair use specifically. It supplements, and does not limit, the Acceptable Use Policy's own provisions on shared infrastructure.

7. Prohibited Content

You may not use the Cloud Service to host, transmit, distribute, or make available content that:

• Is pornographic or sexually explicit
• Depicts, promotes, or facilitates the manufacture, sale, or use of illegal drugs or controlled substances
• Is illegal software, including pirated software, cracks, keygens, or tools designed to circumvent licensing or copy protection
• Infringes or misappropriates any third party's intellectual property or other proprietary rights
• Violates the legal rights of others, including rights of privacy or publicity
• Constitutes phishing, or otherwise impersonates a person or organization to deceive others
• Is malicious content, including malware, spyware, ransomware, or exploit code
• Contains excessive profanity
• Is violent or gratuitously graphic in nature
• Promotes or facilitates gambling, betting, or wagering
• Encourages or facilitates the violation of any applicable criminal law
• Promotes racial or other hatred, or incites discrimination or violence against individuals or groups on the basis of a protected characteristic
• Provides hacking tools, instructions, or services intended for unauthorized access to systems or data
• May be harmful to minors

This section supplements, and does not limit, the restrictions in the Acceptable Use Policy and Section 2.1 of the Standard Terms.

8. Prohibited Actions

In addition to the content restrictions above, you may not take any of the following actions against Port Zero, our customers, or the end users of our customers:

• Use any robot, spider, scraper, or other automated means to access, data mine, or collect information from portzero.net or app.portzero.net, including account, contact, or usage information, for the purpose of soliciting or otherwise competing with the party the information concerns

We may investigate suspected violations of this section or Section 7 (Prohibited Content) and, consistent with Section 2.2 of the Standard Terms, suspend or terminate access to accounts that violate either section, with or without prior notice where we reasonably believe the risk warrants it.

9. Contact

• General support: support@portzero.net
• Legal inquiries: legal@portzero.net

We aim to respond to inquiries within 2 business days.