Terms of Service

XPerimeter accounts are organization-scoped. Each user belongs to an organization, and billing, credits, quotas, and product entitlements are held at the organization level. Organization administrators manage members, roles, and access. You are responsible for maintaining the confidentiality of your credentials, for enabling appropriate authentication controls (such as MFA), and for all activity under your account. Notify us promptly of any suspected unauthorized access.

Access to certain tiers and products requires identity or business verification, which we perform through Stripe Identity. You agree to provide accurate information and acknowledge that we may suspend or decline access where verification cannot be completed or where we are required to do so under applicable law.

The Services operate on a prepaid credit model backed by Stripe as payment processor; NEXUS owns the billing record and credit ledger.

• Usage — including API calls, video minutes processed, and XINT queries — is metered and debited from your organization’s credit balance. Asynchronous workloads may debit an estimated cost and reconcile on completion.
• You may purchase credits manually or enable auto-reload, which tops up your balance by a configured amount when it falls below a threshold you set. You authorize us to charge your saved payment method for auto-reload and subscription charges.
• Plans and subscriptions determine base entitlements and limits. Invoices are generated through Stripe and available from the dashboard. Applicable taxes are calculated and added at checkout and invoicing.
• Except where required by law, credits and fees are non-refundable. Credits have no cash value and may expire in accordance with your plan.

Your organization’s access is defined by its entitlements and hard limits (such as seats, cameras, concurrent events, storage, and AI minutes). These limits are enforced by NEXUS before requests reach downstream products. We may enforce, and you agree not to circumvent, these limits, rate limits, and quotas.

Developers may generate, rotate, and revoke organization- and product-scoped API keys, and configure additional protections such as request signing and IP allowlisting. Service-account secrets and API keys are shown once at creation and must be stored securely; you are responsible for their use. NEXUS-issued access tokens (JWTs) are short-lived and scoped, and must be validated and used only as documented. You must not attempt to forge, extend, or broaden the scope of any token, or misrepresent your identity or entitlements.

You agree not to:

• use the Services unlawfully, or in violation of any applicable surveillance, privacy, data-protection, or export-control law;
• attempt to defeat the platform’s privacy guarantees — for example by attempting to build biometric identifiers, persistently profile monitored individuals, or extend retention of operational data beyond event end;
• probe, scan, or breach security; interfere with or disrupt the Services; or exceed or evade limits, quotas, or authentication controls;
• reverse engineer, resell, or provide the Services to third parties except as expressly permitted;
• rely on AI recommendations as autonomous decisions — AI output is advisory and every action requires human confirmation.

Our handling of personal and operational data is described in the Privacy Policy, which forms part of these Terms. Where XPerimeter processes operational data on your behalf, you are the controller and remain responsible for having a lawful basis to deploy the Services in your environment and for informing affected individuals as required. The platform enforces privacy by architecture: no biometrics, no persistent identity, and automatic deletion of operational data at event end.

We aim to keep the Services available and reliable but do not guarantee uninterrupted operation. We may perform maintenance, and we may modify, suspend, or discontinue features. Specific availability commitments, if any, are set out in a separate service-level agreement for your plan. Support is available at support@xperimeter.com.

XPerimeter and its licensors own all rights in the Services, including software, models, and documentation. We grant your organization a non-exclusive, non-transferable, revocable right to use the Services during your subscription, subject to these Terms. You retain your rights in the data you submit. Feedback you provide may be used to improve the Services without obligation to you.

You may stop using the Services and close your account at any time. We may suspend or terminate access for breach of these Terms, non-payment, security risk, or where required by law. On termination, unused credits are forfeited except where required by law, and we will delete or retain data as described in the Privacy Policy and as required for legal, tax, and audit purposes. Sections that by their nature should survive termination — including billing, intellectual property, disclaimers, limitation of liability, and governing law — survive.

The Services support safety-critical operations but are decision- support tools, not a substitute for professional judgment, emergency services, or the operator’s own duty of care. To the maximum extent permitted by law, the Services are provided “as is” and “as available” without warranties of any kind, whether express, implied, or statutory, including fitness for a particular purpose and non-infringement. You are responsible for how you act on information the Services provide.

To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data. XPerimeter’s total aggregate liability arising out of or relating to the Services will not exceed the amounts paid by your organization to XPerimeter for the Services in the twelve months preceding the event giving rise to the claim. Nothing in these Terms limits liability that cannot be limited under applicable law.

You will defend and indemnify XPerimeter against third-party claims arising from your unlawful use of the Services, your breach of these Terms, or your deployment of the Services in your environment (including any failure to obtain a lawful basis or provide required notices).

We may update these Terms from time to time. Material changes will be signalled by updating the “Last updated” date above and, where appropriate, by notifying account administrators. Continued use of the Services after an update constitutes acceptance of the revised Terms.

These Terms are governed by the laws of the State of Ohio, United States, without regard to conflict-of-laws principles. The state and federal courts located in Columbus, Franklin County, Ohio have exclusive jurisdiction over any dispute arising out of or relating to these Terms or the Services, except where mandatory local law provides otherwise. Questions about these Terms: legal@xperimeter.com.