Terms of service

These terms govern use of the OpenStudio product — the application, its APIs, its CLI, and its connectors. Use of this website is governed separately by the website terms of use.

The plain version

• OpenStudio is in development. Access is by invitation, and an order form or invitation email sets your subscription period and any fees.
• You own what you make. Your content and your connected-service data are yours; we take only the license we need to run the service for you.
• We do not train on your data unless you tell us to. Training is off by default on every plan, including free and invitation access. You or your organization can opt in, and can withdraw it later. Section 1.6 below is the binding version.
• Our privacy policy says how data is handled, our security page says how to report a vulnerability, and trust.costa.app holds the compliance documentation.
• The lawyers’ version below controls if the two ever disagree.

The agreement

Use of OpenStudio is governed by the Common Paper Cloud Service Agreement Standard Terms, Version 2.1 and AI Addendum Standard Terms, Version 1.0, which are incorporated into these terms by reference and apply unmodified except as stated below.

Our data processing agreement is incorporated into these terms and applies when we process personal data on your behalf. By accepting these terms, you also accept the DPA.

Key terms

• Provider: Costa Security Inc. d/b/a Open Studio, 3790 El Camino Real #1090, Palo Alto, CA 94306. Notices to hello@openstudio.tech.
• Cloud Service: OpenStudio — a platform for building, deploying, and running software shaped around how you work, including its application, APIs, CLI, connectors, documentation, and updates.
• Effective date: the earlier of your acceptance of these terms or your first access to OpenStudio.
• Subscription period: as set by your order form or invitation. Fees, if any, are stated there and are non-refundable except where the law requires otherwise.
• Governing law and courts: for customers in the EEA, Switzerland, or the United Kingdom, the law of Ireland and the courts of Dublin. For everyone else, the law of the State of California and the state and federal courts of Santa Clara County, California.
• General cap amount: the fees you paid or owe in the twelve months before the event giving rise to the claim, or one hundred U.S. dollars if you have paid none.
• Increased claims and cap: two times the general cap, for breach of the confidentiality obligations in section 10 of the Standard Terms and for your breach of the use limitations.
• Uncapped claims: either party’s indemnification obligations, fraud or willful misconduct, and your payment obligations.
• Security policy: the practices described on our security page and at trust.costa.app.

Changes to the standard terms

• Section 1.6 (machine learning) is replaced in full with the following: Provider will not use Customer Content or Usage Data to train any artificial intelligence, machine learning, large language model, or similar system, except where Customer has opted in under the conditions below. Absent that opt-in, Training Data is none and Training Purposes are not applicable under the AI Addendum. This default applies to every plan, including free and invitation access.

  Opt-in. Customer may permit training on its Customer Content through an explicit setting or an order form term. Opting in requires affirmative action by an authorized administrator, is never a condition of using OpenStudio, and is never inferred from continued use or from dismissing a notice. Customer may withdraw it at any time; withdrawal stops further training use, and Provider will state what it cannot undo in a model already trained.

  What opt-in never covers. Data received from a service Customer connected is excluded from training regardless of any opt-in. Some connected services prohibit it outright — Google Workspace data, for example, may not be used to train non-personalized models under the Google API Services User Data Policy, and no permission Customer gives Provider changes that.

  Product improvement, separately from training, uses aggregated, de-identified usage data only — counts, latency, error rates, feature usage — never the content Customer creates or the data received from a connected service.

An order form or invitation may add to or modify these key terms, and controls where it does.

The Common Paper Cloud Service Agreement (Version 2.1) and AI Addendum (Version 1.0) are free to use under CC BY 4.0.

Contact

hello@openstudio.tech