Terms of Service
By using Kaali (the website at kaali.io, the dashboard at app.kaali.io, the API at api.kaali.io, the CLI @kaali/cli, the runtime library @kaali/guard, or any other Kaali-branded service — collectively the "Service") you agree to these terms. If you don't agree, don't use the Service.
1. What Kaali is
Kaali is an open-source security scanner and runtime guard for AI applications, plus an optional hosted dashboard ("Kaali Cloud") that stores your scan results and guard events and generates DPDP / ISO-42001 / OWASP-LLM evidence reports. The scanner and guard are released under the MIT License; the Cloud is a hosted service.
2. Your account
- You must be at least 18, or the age of digital consent in your jurisdiction, and provide accurate signup information.
- Keep your password and API keys confidential. You are responsible for all activity under your account and keys.
- One person or organisation per account. Sharing credentials is prohibited.
3. Acceptable use
You agree not to:
- Scan or probe systems you do not own or have explicit written authorisation to test — Kaali's active probes (
--ai,--ai-indirect,--mcp) are defensive tools; using them against third-party systems without permission may violate India's IT Act, 2000 §§43/66 and equivalent laws elsewhere. - Reverse-engineer, disassemble, or attempt to derive the source of any non-open-source part of the Service (the Cloud backend).
- Use the Service to build, train, or improve a competing security-scanning or LLM-guardrail product.
- Send us unlawful, harmful, or infringing content, or content that violates a third party's rights.
- Circumvent rate limits, quotas, or authentication.
- Use the Service in an application where its failure could reasonably be expected to result in death, personal injury, or severe physical or environmental damage.
4. The MIT-licensed parts
Kaali's CLI (@kaali/cli) and runtime guard (@kaali/guard) are open source under the MIT License. Nothing in these Terms restricts the rights the MIT License grants you for those specific packages. These Terms govern the Cloud service, this website, the API, and any Kaali-branded services beyond the MIT-licensed source.
5. Fees & plans
The core Cloud tier is currently free while Kaali is in public beta. Paid tiers, if any, will be introduced with advance notice and only apply after you actively upgrade. Fees, when charged, are in Indian Rupees, inclusive of GST where applicable, and non-refundable except where required by law.
6. Your data & privacy
How we handle personal data is governed by our Privacy Policy, which forms part of these Terms. In brief: we don't receive raw prompts or LLM inputs/outputs — only the scan findings and guard events you choose to stream, plus your account data.
7. Content you send us
You keep ownership of the scan findings, event payloads, and any content you send to Kaali. You grant Starvox Labs a worldwide, royalty-free, non-exclusive licence to store, process, and display that content solely to operate the Service for you. We may compute aggregate, de-identified statistics from all users' data (e.g., "X% of Indian SaaS sites leak PAN in JS") — no individual account or target is identifiable in any such statistic.
8. Service availability
We aim for high availability but do not guarantee uninterrupted access. Beta features may be added, changed, or removed without notice. The MIT-licensed CLI and guard run on your infrastructure and are unaffected by Cloud downtime.
9. Suspension & termination
We may suspend or terminate your account if you violate these Terms, if we're required to by law, or if your account is inactive for more than 24 months. You can terminate at any time by using "Delete my account" in the dashboard — data is erased per DPDP §12 within 30 days.
10. Disclaimers
The Service is provided "AS IS" without warranties of any kind. Security is a moving target: Kaali detects a defined set of known and heuristically-identifiable threats — it does not guarantee that your application is secure, DPDP-compliant, or free of vulnerabilities. Kaali is a layer in a defence-in-depth strategy, not a substitute for one. Findings may include false positives and may miss real issues. You are responsible for reviewing findings and taking appropriate action.
11. Limitation of liability
To the maximum extent permitted by law, Starvox Labs Pvt Ltd will not be liable for indirect, incidental, special, consequential, or punitive damages, or any loss of profits, revenue, data, or goodwill, arising out of or relating to the Service. Our total liability for any claim relating to the Service is capped at the greater of (a) the fees you paid us in the 12 months before the claim, or (b) INR 10,000. Nothing here limits liability that cannot be limited by law.
12. Indemnity
You agree to indemnify Starvox Labs Pvt Ltd against third-party claims arising from your use of the Service in violation of these Terms — in particular claims arising from scanning systems you were not authorised to test.
13. Changes to these Terms
We may update these Terms. Material changes will be notified by email to registered users at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.
14. Governing law & disputes
These Terms are governed by the laws of India. Disputes are subject to the exclusive jurisdiction of the courts at Mumbai, Maharashtra. Nothing here prevents you from bringing a complaint under the Digital Personal Data Protection Act, 2023 to the Data Protection Board of India.
15. Contact
Questions or notices under these Terms: hello@kaali.io. Legal or privacy: privacy@kaali.io. Postal: Starvox Labs Pvt Ltd, Mumbai, India.