Terms of Service.

Operator: LifeSage LLC, a Washington limited liability company, operating the Karta service under the Karta brand ("Karta," "we," "us," or "our").

Last updated: 2026-06-25

These Terms of Service (the "Terms") govern access to and use of Karta's managed agent productization platform, including the dashboard, hosted runtime, data plane, APIs, CLI, embeddable widget, hosted chat, documentation, and related services (collectively, the "Services"). By creating an account, accepting an order, or using the Services, you agree to these Terms. If you use the Services for an entity, you represent that you can bind that entity; "Customer," "you," and "your" refer to that entity.

1. Service Scope

Karta lets Customers build, deploy, host, meter, and serve AI agent applications. A Customer may make its own agent available to its own end users through Karta-hosted URLs, APIs, or embeddable surfaces.

Karta is not a party to the relationship between Customer and Customer's end users. Customer is responsible for its own end-user terms, privacy notices, consents, disclosures, support, and compliance.

The Services are for business and developer use. They are not intended for personal, family, household, or child-directed use. Authorized Users must be at least 18 years old.

2. Definitions

"Agent" means the agent application, harness configuration, code, prompts, skills, sub-agents, tools, MCP configuration, assets, and related materials Customer provides or configures for deployment on Karta.

"Agent Action" means any action an Agent takes, including generating output, invoking tools, calling third-party systems, writing files, sending messages, or using connectors.

"Authorized User" means a person Customer authorizes to access Customer's Karta organization.

"BYOK" means bring-your-own-key model access, where Customer supplies a model-provider credential and pays that provider directly.

"Credits" means prepaid, dollar-denominated usage credits purchased or granted for Karta-managed usage. Credits are not cash, currency, stored value, deposits, or transferable property.

"Customer Content" means Agents, Inputs, Outputs, files, configuration, workspace data, and other content submitted to or generated through the Services by Customer or Customer's end users.

"End-User Data" means Customer Content relating to Customer's end users, including prompts, files, transcripts, model responses, tool inputs/outputs, and durable workspace state.

"Inputs" means prompts, messages, files, tool requests, or other content submitted to the Services.

"Model Provider" means an upstream model, inference, or AI service provider, such as Anthropic, OpenAI, AWS Bedrock, or another provider.

"Outputs" means model or Agent-generated responses to Inputs.

"Release" means an immutable deployment package Karta builds from Customer's Agent.

3. Access Rights and Restrictions

Subject to these Terms, Karta grants Customer a limited, non-exclusive, non-transferable right to access and use the Services during the term to deploy and operate Agents for Customer's business and to make those Agents available to Customer's end users.

Customer may sell access to Customer's own Agent and related product. Customer may not resell, lease, sublicense, time-share, or provide the Karta platform itself as a standalone service or competing agent-hosting platform.

Customer will not, and will not permit anyone else to:

• access or use the Services in violation of law, these Terms, the Acceptable Use Policy (the "AUP"), Model Provider policies, or documentation;
• reverse engineer, decompile, scrape, or attempt to discover non-public source code, models, systems, or security mechanisms except where law prohibits this restriction;
• bypass rate limits, quotas, spend caps, access controls, billing controls, or safety systems;
• use the Services or Outputs to build a competing Karta-like platform or to train, distill, or improve competing models except where expressly permitted by applicable Model Provider terms;
• submit regulated data such as protected health information, payment-card data, Social Security numbers, government identifiers, or GLBA-regulated data unless Karta has expressly agreed in writing to support that data type; or
• interfere with the security, integrity, isolation, or availability of the Services or another customer's agents, data, or users; or
• publish or disclose to any third party any benchmark, performance, or availability results or comparisons of the Services without Karta's prior written consent.

4. Customer Responsibility

Customer is responsible for:

• its Agents and Agent Actions;
• Customer Content and End-User Data;
• all activity under its account, keys, embeds, and Releases;
• providing notices and obtaining consents from end users;
• configuring tools, connectors, MCP servers, external systems, guardrails, human review, and spending controls;
• validating Outputs before relying on them or exposing them in high-impact contexts; and
• complying with all laws that apply to Customer's use case, industry, users, and jurisdictions.

Karta provides platform controls such as account roles, spend caps, scoped keys, logs, and isolation primitives. Those controls do not replace Customer's responsibility for its Agent and end-user product.

5. Customer Content and IP

As between the parties, Customer retains all rights in Customer Content and Agents. Karta retains all rights in the Services, platform, software, infrastructure, documentation, and Karta marks.

Customer grants Karta a limited license to host, copy, transmit, process, display, and use Customer Content solely to provide, secure, monitor, support, and improve the Services (subject to the no-training commitment in Section 6); prevent or address fraud, abuse, security, and technical issues; comply with law; and enforce these Terms.

To the extent Karta has any right in Outputs generated through Karta-managed model access, Karta assigns that right to Customer, subject to applicable law, Model Provider terms, and Karta's rights in aggregated, anonymized, and de-identified data under Section 6. Outputs may not be unique, may be inaccurate, and may be similar or identical to outputs generated for others.

Customer grants Karta a worldwide, perpetual, irrevocable, royalty-free, transferable, and sublicensable license to use feedback, suggestions, and recommendations about the Services without restriction or obligation. Feedback excludes Customer Confidential Information and Customer Content. To the extent permitted by law, Customer waives any moral rights in feedback.

6. AI and Model Provider Terms

Karta may provide model access in two ways:

• Karta-managed mode: Karta contracts with the Model Provider and meters usage against Customer's Credits.
• BYOK mode: Customer supplies its own provider key, Customer contracts with and pays the Model Provider directly, and Karta routes requests using Customer's key. For BYOK traffic, the Model Provider is not a Karta subprocessor, the Model Provider's terms and policies govern Customer's relationship with it directly, and Karta is not responsible for the Model Provider's availability, terms, security, or processing of data.

High-risk and safety-critical use is prohibited. Customer will not deploy or operate an Agent for use in, or integrate Outputs into, any context where failure or inaccuracy could lead to death, personal injury, or severe physical, environmental, or property harm, including operation of life-sustaining systems, medical devices, emergency services, critical infrastructure, or other safety-critical systems, and will not use the Services for fully automated decisions producing legal or similarly significant effects on individuals without meaningful human review.

Model Provider terms, usage policies, content policies, rate limits, and safety rules apply to Customer and its end users. Customer must flow down equivalent obligations to end users where required.

Karta does not use Customer Content or End-User Data to train or fine-tune Karta or third-party models unless Customer expressly opts in. This no-training commitment does not restrict Karta from using operational metadata to provide, secure, debug, meter, and improve the Services, provided Karta does not use Customer Content itself for model training.

Karta may generate and use aggregated, anonymized, and de-identified data and operational metadata derived from use of the Services to operate, secure, analyze, improve, develop, and support the Services and for Karta's other lawful business purposes, including reporting and benchmarking. Karta may retain and use such data during and after the term and may disclose it to third parties only where it does not identify Customer, any Authorized User, or any end user and does not reveal Customer Content or Confidential Information. This right is separate from, and does not override, the no-training commitment above: Karta will not use Customer Content or End-User Data themselves to train or fine-tune models except where Customer expressly opts in.

Outputs and Agent Actions are probabilistic and may be inaccurate, incomplete, unsafe, biased, offensive, or unsuitable. Karta does not provide legal, medical, financial, professional, or regulated advice.

7. Fees, Credits, and Billing

Fees are described on Karta's pricing page, in the Services, or in an Order Form.

Karta self-serve billing is prepaid for Karta-managed usage. Credits draw down based on the applicable rate card and plan terms. Credits are non-transferable, have no value outside the Services, do not bear interest, and are not redeemable for cash.

Karta's prepaid guarantee: Customer will not owe Karta metered usage charges beyond collected prepaid Credits. When a Credit balance reaches zero, Karta-managed usage may pause and return HTTP 402 until Customer tops up. If an in-flight request briefly exceeds the balance, Karta absorbs that commercially reasonable in-flight overshoot and does not invoice Customer for it. This guarantee does not apply where Customer circumvents, disables, or manipulates spend caps, billing controls, or balance enforcement.

Subscriptions, Credit purchases, auto-refill, expiry, refunds, chargebacks, taxes, and failed payments are governed by the Refund & Billing Policy.

BYOK model usage is billed directly by Customer's Model Provider and is not covered by Karta's prepaid guarantee.

8. Data Protection, Privacy, and Security

For End-User Data processed through a Customer Agent, Customer is the controller and Karta is the processor or service provider. Karta processes End-User Data on Customer's documented instructions under the Data Processing Addendum.

For Customer account, billing, dashboard, website, support, and platform-usage data, Karta is a controller and processes that data under the Privacy Policy.

Karta uses subprocessors listed in the Sub-processor List. Karta's current security measures are described in the DPA and Security & Trust Center draft. Karta is not currently SOC 2 certified and has not yet begun a SOC 2 examination; Karta intends to begin pursuing SOC 2 Type I in Q4 2026. Any Customer audit or assessment rights are governed solely by, and limited as set out in, the DPA.

Current data-location summary: Karta's control plane is hosted in the United States on Hetzner (Hillsboro, Oregon); Karta's data plane, agent sessions, durable workspaces, and hosted-chat transcripts are hosted on AWS in us-east-1.

International data transfers are governed by the DPA, which incorporates the EU Standard Contractual Clauses, the UK Addendum, and Swiss FADP adaptations as applicable.

9. Confidentiality

Each party may receive non-public information that is marked confidential or reasonably should be understood as confidential. The receiving party will use confidential information only to perform under these Terms, protect it using reasonable care, and disclose it only to personnel, advisors, contractors, and subprocessors who need it and are bound by confidentiality obligations.

Confidentiality does not apply to information that is public without breach, already known without restriction, independently developed, or rightfully received from another source. A party may disclose confidential information if required by law after giving notice where legally permitted.

10. Third-Party Services and Integrations

Customer may configure Agents to call third-party tools, MCP servers, APIs, connectors, websites, or services. Customer authorizes Karta to transmit data to those third parties as configured by Customer or its Agent. Karta is not responsible for third-party services, their availability, their terms, their security, or their processing of data.

11. DMCA and Intellectual Property Complaints

Karta responds to copyright notices under its DMCA / Copyright Policy. Notices must be sent to Karta's designated agent at dmca@karta.sh, as further described at /legal/dmca, and must include the elements required by 17 U.S.C. § 512(c)(3). The DMCA / Copyright Policy describes the counter-notification procedure and Karta's repeat-infringer policy.

Karta may remove or disable content, Agents, Releases, or accounts that infringe or repeatedly infringe intellectual property rights.

12. Suspension and Enforcement

Karta may suspend, restrict, disable, remove, or terminate access to the Services, an Agent, Release, session, key, end-user access path, or account if Karta reasonably believes:

• Customer or an end user violated these Terms, the AUP, the AI & Model Use Policy, Model Provider policies, or law;
• use creates security, abuse, fraud, safety, legal, availability, or upstream-provider risk;
• payment fails or Credits are exhausted;
• Customer's Agent is causing runaway spend, loops, resource exhaustion, or harm; or
• continued service is prohibited by law or by an upstream provider; or
• Customer or an end user is or becomes subject to applicable export-control or sanctions restrictions, or is located in an embargoed jurisdiction.

Where practicable, Karta will use the least disruptive effective measure and will restore access when the issue is resolved. Karta may act immediately without notice for emergencies, child-safety issues, security incidents, legal risk, active abuse, or imminent harm.

13. Term and Termination

These Terms begin when Customer first accepts them or uses the Services and continue until terminated.

Customer may stop using the Services or close its account at any time. Karta may terminate or suspend a self-serve account (one not under an Order Form with a committed subscription term) for convenience at any time on notice; for a Customer under an Order Form with a committed term, Karta may terminate for convenience on 30 days' notice. Either party may terminate for material breach if the breach is not cured within 30 days after notice, or immediately for incurable breach.

On termination, Customer's right to use the Services ends. Karta will make commercially reasonable export functionality available for 30 days where technically feasible and where the account is not terminated for severe abuse or legal risk. This self-serve export window does not limit Karta's return-or-deletion obligations for End-User Data under the DPA, which control. Karta may delete Customer Content and End-User Data after that period subject to the DPA, backups, legal holds, security, fraud, abuse, and statutory retention.

Provisions that by nature should survive will survive, including accrued payment obligations, credit terms, the license to feedback and to aggregated and de-identified data, confidentiality, IP, disclaimers, Beta Feature terms, indemnities, liability limits, dispute terms, and data-retention provisions.

14. Warranties and Disclaimers

Each party represents that it has authority to enter into these Terms.

Customer represents that it has all rights, permissions, lawful bases, notices, and consents necessary for Customer Content, End-User Data, Agents, and Customer's use of the Services.

Except as expressly stated, the Services, Outputs, beta features, previews, and documentation are provided "as is" and "as available." Karta disclaims all warranties, express, implied, statutory, or otherwise, including merchantability, fitness for a particular purpose, title, non-infringement, availability, security, accuracy, and uninterrupted or error-free operation.

No self-serve plan includes an uptime service level agreement. Any SLA applies only if expressly incorporated into an Order Form.

15. Beta, Preview, and Evaluation Features

Karta may make features, services, harnesses, model integrations, or functionality available on a free, trial, beta, preview, alpha, early-access, evaluation, or non-production basis, or otherwise label them as such ("Beta Features"). Customer's use of Beta Features is optional and at Customer's sole discretion and risk.

Beta Features are provided "as is" and "as available," without warranties, indemnities, support, service levels, availability commitments, or data-retention or data-export rights, and are excluded from any SLA. Beta Features may be incomplete, unstable, inadequately tested, or changed, and may behave differently from generally available Services. Karta may modify, suspend, limit, or discontinue any Beta Feature, and may begin charging for it, at any time without notice or liability. Confidentiality obligations apply to Beta Features and to any non-public information about them.

To the maximum extent permitted by law, Karta has no liability arising out of or relating to Beta Features. Where liability cannot be excluded, it remains subject to the limitations in Section 17 (Limitation of Liability).

16. Indemnification

Customer will defend and indemnify Karta from third-party claims arising from Customer Content, Agents, Agent Actions, Customer's or its end users' use of the Services, Customer's breach of these Terms or policies, Customer's failure to provide notices or obtain consents, or Customer's violation of law, except to the extent the claim is caused by Karta's gross negligence or willful misconduct.

For paid Services only, Karta will defend and indemnify Customer from third-party claims alleging that the Karta platform, as provided by Karta and used as authorized, directly infringes a U.S. patent, copyright, or trademark. This indemnity does not apply to Customer Content, Inputs, Outputs, Agents, Agent Actions, BYOK providers, Model Provider technology, third-party services, open-source obligations, use in violation of these Terms or policies, combinations of the Karta platform with technology, content, or services not provided by Karta where the claim arises from the combination, any modification of the Services not made by Karta, or claims based on Customer's industry, data, end-user product, or prompts where those (and not the unmodified Karta platform itself) are the alleged basis of infringement.

If the Services become or are likely to become subject to an infringement claim, Karta may procure continued use, modify the Services, replace the affected functionality, or terminate the affected Services and provide any refund required by the Refund & Billing Policy. This section states Karta's entire liability for third-party intellectual-property infringement claims.

The indemnified party must promptly notify the indemnifying party (provided that a delay in notice excuses the indemnifying party only to the extent it is materially prejudiced), provide reasonable cooperation at the indemnifying party's expense, and allow the indemnifying party to control the defense and settlement, provided that the indemnifying party may not enter into any settlement that imposes liability, a non-monetary obligation, or an admission of fault on the indemnified party without the indemnified party's prior written consent, not to be unreasonably withheld. The indemnified party may participate in the defense with its own counsel at its own expense. The remedies in this section are the indemnified party's sole and exclusive remedy, and the indemnifying party's entire liability, for the third-party claims they cover.

17. Limitation of Liability

To the maximum extent permitted by law, neither party will be liable for indirect, incidental, special, consequential, exemplary, punitive, or similar damages, or for lost profits, revenues, goodwill, business interruption, or loss of data.

To the maximum extent permitted by law, Karta will have no liability for any Agent Action, for any Output or Customer's or any end user's reliance on an Output, or for any harm to Customer's end users arising from Customer's Agent, its configuration, or its deployment.

To the maximum extent permitted by law, each party's total aggregate liability arising out of or relating to the Services or these Terms will not exceed the amounts paid by Customer to Karta in the 12 months before the event giving rise to liability.

For claims arising from a party's breach of confidentiality obligations, breach of the DPA, or security obligations, the aggregate liability cap is two times the amounts paid by Customer to Karta in the 12 months before the event giving rise to liability.

The liability caps do not apply to Customer's payment obligations, Customer's indemnification obligations, Customer's misuse or infringement of Karta intellectual property, Customer's violation of the use restrictions in Section 3 relating to reselling, sublicensing, or providing the Karta platform itself; building a competing platform or training competing models; circumventing security, isolation, billing, or access controls; submitting prohibited regulated data; or unlawful use, either party's fraud or willful misconduct, or liability that cannot be limited by law. Karta's indemnification obligations remain subject to the general liability cap unless an Order Form expressly states otherwise.

The exclusions and limitations in this section apply to the maximum extent permitted by applicable law; regardless of the form or theory of action, whether in contract, tort (including negligence), strict liability, statute, or otherwise; even if a party was advised of or could have foreseen the damages; and even if a remedy fails of its essential purpose. The parties acknowledge that the fees reflect this allocation of risk, that these limitations are an essential basis of the bargain between the parties, and that Karta would not provide the Services on these terms without them.

18. Changes

Karta may update these Terms and incorporated policies. Material changes will be posted or sent by email or in-product notice at least 30 days before taking effect, except changes required by law, security, upstream-provider requirements, or new features may take effect sooner. Continued use after the effective date constitutes acceptance.

19. Governing Law and Disputes

These Terms are governed by Washington law, without regard to conflict-of-laws rules. The parties will first attempt in good faith to resolve disputes informally. If not resolved within 45 days after written notice, either party may bring proceedings in the state or federal courts located in King County, Washington, and each party consents to those courts.

To the maximum extent permitted by law, disputes must be brought individually and not as a class, collective, consolidated, or representative action. Each party waives trial by jury. If the class, collective, consolidated, or representative action waiver is held unenforceable as to a particular claim, that claim will proceed in court on an individual basis, but the jury-trial waiver and the individual-action requirement for all other claims will survive.

Either party may seek injunctive or equitable relief for misuse of intellectual property, confidentiality, data security, or unauthorized access.

20. General

These Terms, the Order Form if any, and incorporated policies are the entire agreement for the Services.

Customer may not assign these Terms without Karta's consent except to a successor in a merger or sale of substantially all assets that is not a Karta competitor. Karta may assign these Terms to an affiliate or successor.

The parties are independent contractors. No agency, partnership, joint venture, franchise, or employment relationship is created.

Customer may permit its Affiliates to use the Services under Customer's account, but Customer remains fully responsible and liable for each Affiliate's and Authorized User's use of and compliance with these Terms as if it were Customer's own. "Affiliate" means an entity that controls, is controlled by, or is under common control with a party.

Karta may identify Customer as a customer and use Customer's name and logo in customer lists and marketing materials, consistent with any trademark usage guidelines Customer provides. Customer may withdraw this permission on written notice to legal@karta.sh, after which Karta will cease new uses within a commercially reasonable period.

Any insurance requirements are addressed only in an Order Form. These Terms do not impose insurance obligations on either party except as expressly stated in an Order Form.

Notices to Karta must be sent to legal@karta.sh and, where legally required, to LifeSage LLC, 600 1st Ave Ste 102, PMB 2132, Seattle, WA 98104. Karta may give Customer notices, including legal notices, by email to a contact associated with Customer's account, through the dashboard or Services, or by posting in-product or on Karta's website; such notices are deemed received on the day sent or posted if Karta does not receive a bounce or delivery-failure message, and otherwise on actual receipt. Customer is responsible for keeping its account contact information current.

Customer consents to transact electronically and to receive communications, agreements, disclosures, and notices from Karta in electronic form. Customer agrees that its electronic acceptance, account creation, or use of the Services constitutes a binding signature, and that electronic records satisfy any requirement that a communication or agreement be in writing. This consent does not waive any non-waivable right under applicable law.

Neither party is liable for any delay or failure to perform, other than payment obligations, caused by events beyond its reasonable control, including acts of God, natural disasters, fire, flood, epidemic or pandemic, war, terrorism, civil unrest, labor disputes, governmental action, network or utility failures, denial-of-service or other attacks, and acts or outages of upstream providers, Model Providers, hosting providers, or subprocessors (each, a "Force Majeure Event"). The affected party will use reasonable efforts to mitigate the effect and resume performance.

Customer must comply with U.S. and other applicable export-control and sanctions laws and may not provide access to the Services to sanctioned persons or embargoed jurisdictions. Customer represents that it is not, and is not owned or controlled by or acting on behalf of, any person subject to U.S. or other applicable sanctions, and that it is not located in an embargoed jurisdiction.

If any provision is unenforceable, it will be modified to the minimum extent necessary and the rest will remain effective. Failure to enforce a provision is not a waiver. There are no third-party beneficiaries to these Terms.

21. Incorporated Documents

These documents are incorporated by reference:

• Acceptable Use Policy
• AI & Model Use / Data Handling Policy
• Privacy Policy
• Data Processing Addendum
• Sub-processor List
• Refund & Billing Policy
• Cookie & Tracking Notice
• U.S. State Privacy Notice
• DMCA / Copyright Policy
• Trust & Safety Policy
• Support Policy
• any applicable Order Form, SLA, or service-specific terms

Order of precedence: Order Form, DPA for data-protection matters, SLA for covered availability matters, service-specific terms, these Terms, and other policies.