Anvil — End User Licence Agreement
In force and governs your use of Anvil. This is the agreement, not legal advice; a formal review is pending.
This Agreement is in force for, and governs, your use of the Software. We may update it from time to time (see §15).
Product: Anvil (the "Software") Licensor: XrossWarden ("we", "us", "our"), operated as a sole proprietorship. Effective date: on and from the date this version is published with the Software. Version: 1.0
By installing, activating, or using Anvil you ("you", "the customer") agree to this Agreement. If you do not agree, do not install or use the Software. If you are agreeing on behalf of an organisation, you represent that you may bind it.
1. What Anvil is (and is not)
1.1 Anvil is a local-first persistent memory and reasoning layer that runs on your own machine and works alongside an AI provider you choose and supply (for example Anthropic Claude or OpenAI, via your own account or keys). Anvil is provider-agnostic and is intended to remain so as far as is practicable.
1.2 Anvil is a memory for your AI assistant — it is not a document-management, backup, or document-search product. It does not replace your own file storage. You remain responsible for keeping your own notes, documents, and source data in a usable form outside Anvil; if you need to search or recover your own documents you must retain your own local copies and access to them. (See §7.)
1.3 The Software is licensed, not sold. §3 governs the licence grant.
2. Plans, licensing, activation, and offline use
2.1 Plans. Anvil is offered as Free, Pro, and Enterprise plans. The features each plan unlocks are described on our website and in-product; that description controls what a plan includes. Current plans and their prices are shown on our website and in-product at the time of purchase, and may change prospectively for new purchases.
2.2 Degrade, never brick. If a paid licence lapses, expires, is refunded, or cannot be verified, Anvil drops to the Free plan. It does not lock you out of, delete, or withhold your own memories or data. Your local brain remains yours on every plan.
2.3 Online check-in and the 72-hour rule. A paid plan verifies entitlement by periodically checking in with our licence server. A licence activates only when it first checks in successfully: until then the installation stays on Free. After that, if no successful check-in occurs within 72 hours, the plan falls back to Free until the next successful check-in. This exists to make refunds/chargebacks and revocations effective; it never affects your memories or data, only paid-tier features.
2.4 Airgapped / offline licences. Genuinely offline or airgapped deployments are served by a separate offline licence class that is exempt from the 72-hour check-in by design. An ordinary online purchase does not produce an offline licence; offline licences are issued deliberately and remain revocable. Offline licences are available only by purchase order or through a custom payment link issued by us.
2.5 Revocation. A licence reported revoked (e.g. fraud or chargeback) is downgraded to Free at the next check-in regardless of the grace window.
3. Licence grant and restrictions
3.1 Subject to this Agreement and your plan, we grant you a personal, non-exclusive, non-transferable, revocable licence to install and use the Software. A Pro licence is for a single user. Team, shared-brain, shared board, and role-based access features are Enterprise-only.
3.2 You may not: (a) resell, sublicense, rent, or share your licence except as your plan permits; (b) circumvent licensing, plan gating, or the check-in mechanism; (c) reverse-engineer, decompile, or disassemble the Software except to the extent this restriction is prohibited by applicable law; or (d) remove or alter proprietary notices.
4. Security — best effort against an evolving threat landscape
4.1 We build Anvil to be as secure as we reasonably can, including encryption of sensitive data at rest (the Secrets Vault and the memory store) and in transit where applicable. However, new attack techniques emerge continuously and it is not possible to guarantee protection against all of them. We do not warrant that the Software is, or will remain, free from vulnerabilities, and we accept no liability for compromise arising from techniques that could not reasonably have been guarded against at the time. (This section is subject to §11 and §12.)
4.2 You are responsible for the security of your own machine, operating system accounts, passphrases, and any AI-provider credentials you supply to Anvil.
4.3 Account recovery. If your account is protected by a password or passphrase that only you hold, we cannot recover it for you, and losing it may mean losing access to the protected data or account. Keep your recovery material safe. The password for your XrossWarden account (used for sign-in and licences) can be reset yourself from the sign-in page, by a link sent to your confirmed email address. That does not apply to your vault passphrase, which never leaves your machine and which we cannot reset.
5. AI providers — third-party dependencies and their limits
5.1 Anvil operates through the AI provider you choose (e.g. Anthropic, OpenAI). We work within the capabilities, limitations, and operating rules ("harness" rules) of those providers. We cannot override a provider's harness or safety rules, and we cannot fully compensate for a provider's deficiencies, changes, outages, or behaviours. For example, a provider's harness may override or suppress instructions or context at runtime in ways outside our control, which can affect features such as memory recall and adherence; we mitigate this where we can but cannot guarantee a provider will surface or act on a given memory.
5.2 We may add, change, or discontinue support for a provider or a provider feature if the provider changes or withdraws it.
5.3 Provider terms are yours to keep. Your use of any AI provider is governed by that provider's terms of service, and you are solely responsible for complying with them. All instructions Anvil acts on are derived from input you provide through your chosen primary interface. We take no responsibility for, and disclaim all liability arising from, any use of Anvil that circumvents or breaches an upstream provider's terms of service; determining whether your use is permitted by your provider is solely your responsibility.
5.4 You are responsible for any fees, usage costs, or quota charged by your AI provider. Anvil does not include, and is not, an AI-provider subscription.
6. Privacy, data handling, and telemetry
6.1 We do not store, forward, or process your content. Your memories, skills, prompts, reasoning traces, code, file paths, and project data stay on your machine. We do not claim ownership of it, or process it beyond what is described here. We do not, and will never, sell our customer base or any customer data as a data source, to anyone, for any purpose.
6.2 Minimal transactional data. To provide accounts, licensing, and payments we store only the minimum data needed to purchase and validate a licence (for example: name, email, country, and licence/purchase records). Payments are handled by our third-party merchant of record Lemon Squeezy; we do not receive or store full payment-card details. All of our network traffic is encrypted in transit, and the limited data we hold is fully encrypted at rest; credentials such as account passwords are salted and hashed, never stored in a recoverable form. No customer data is held in cleartext anywhere.
6.3 Limited, transparent telemetry. Any product telemetry is limited to identity (name, email, country), aggregate counts and averages (e.g. number of memories written, sessions per day, version/platform for compatibility), and never the content of any memory, skill, prompt, or code. Telemetry is consent-based and you can review, adjust, or export what we hold about you.
6.4 Right to be forgotten. If you cancel and delete your account, your purchase history and other account records are permanently and unrecoverably removed on the deletion timeline described in our Privacy Policy, subject only to records we are legally required to retain.
6.5 No access to your private data — and none by proxy. We have no access to your private on-device data, and we will not design or implement a means of gaining such access. Because we do not hold it, we cannot provide it to any third party — including upstream providers, other bodies, or government or law- enforcement requests. We can only ever produce the limited transactional data described in §6.2.
6.6 Breach handling. If a data breach affecting the limited data we do hold occurs, we will handle it in accordance with applicable law and notify affected users without undue delay.
6.7 The Privacy Policy, published at https://xrosswarden.com/privacy, is incorporated into this Agreement by reference.
7. Your data, backups, and upgrades — your responsibility
7.1 Back up your own data. Although Anvil is a memory layer for your own AI provider, you remain obligated to maintain your own backups, on a different computer, site, or cloud, sufficient to protect against catastrophic data loss. Because we do not store, forward, or process your data, we cannot be held liable for any loss of your data, however caused.
7.2 Upgrades. We test our update, migration, and rollback paths, and the update engine is designed to back up before migrating and to roll back on failure. Nevertheless, we accept no liability for data loss arising from a failed or corrupted upgrade. Where an upgrade fails, Anvil can generate an automated, content-safe bug report that you may submit to us from within the Software. Such reports are relayed privately to our engineering tracker; we do not operate a public issue tracker. We publish release notes and changelogs on our public releases page.
7.3 Keep copies outside Anvil. As stated in §1.2, Anvil is an AI memory, not a document store. Keep independent copies of any notes and data you cannot afford to lose in a format and location outside Anvil.
7.4 Uninstalling. Uninstalling removes Anvil completely: the app, its background service, its entries in your AI assistants, and its folder on your computer, including your memories, skills, settings and vault. Before anything is removed, the uninstaller offers to save a copy of your data: an encrypted backup protected by a passphrase you choose, or plain, unencrypted files you can open with any app. If you choose not to keep a copy, you are asked to confirm a second time, and your data is then permanently deleted; we do not hold a copy and cannot recover it. An uninstall that cannot ask you (for example, one run silently by an IT administrator) removes the app and its registrations but leaves your data folder in place.
8. Product integrity — no ads, no manufactured memories, no vendor steering
8.1 Anvil will never contain advertising, and will never deliberately inject false or manufactured memories for sales, engagement, or any other strategic purpose. All memories in your brain are your memories. The only limits on what appears are the ordinary functional limits of the platform's skills, tooling, and features.
8.2 Anvil will not push you toward any particular vendor, provider, or brand, including for sales or subscriptions. Anvil is provider-agnostic and is intended to remain so as far as is practicable.
9. Acceptable use
9.1 You agree to use Anvil lawfully and not to: infringe others' rights; upload or process content you have no right to; use Anvil to attack, harass, or harm others; introduce malware; or attempt to breach the security of any system. Security- tooling features must be used only against systems you are authorised to test.
9.2 It is solely your responsibility to determine whether your particular use of Anvil is lawful in your jurisdiction.
10. Criminal use and responsibility for your actions
10.1 No criminal use. We do not condone or approve of the use of Anvil for any criminal activity, and you may not use it for one. This applies in every jurisdiction: it does not depend on where you, your systems, or the target of your activity are located, or on whether a given act is prosecuted where you are.
10.2 Your actions are yours. Anvil remembers and reasons at your direction and at the direction of the AI assistants you connect to it. We take no responsibility for the actions you take while using Anvil, or that software you direct takes on your behalf. You accept full responsibility for those actions and their consequences.
10.3 Stay within the law. You must ensure that your use of Anvil, and everything you do with its help, stays within the law of every jurisdiction that applies to you and to your activity.
10.4 Indemnity for unlawful use. You will indemnify and hold us harmless against any claim, loss, liability, penalty, cost, or expense (including reasonable legal fees) arising from criminal or otherwise unlawful use of Anvil by you or by anyone using it through your installation or account. This is in addition to §13.2.
10.5 Termination. We may terminate your licence immediately for a breach of this section. Anvil runs on your machine and we have no access to your data (§6.5), so we do not and cannot monitor how you use it; this section places the responsibility where the control is.
11. Warranty disclaimer
11.1 The Software is provided "AS IS" and "AS AVAILABLE", without warranties of any kind, whether express, implied, or statutory, including any implied warranties of merchantability, fitness for a particular purpose, title, non- infringement, accuracy, or that operation will be uninterrupted or error-free.
11.2 Nothing in this Agreement excludes or limits any warranty or right that cannot be excluded or limited under applicable consumer-protection law; where such law applies, our liability is limited to the extent permitted by it.
12. Limitation of liability
12.1 To the maximum extent permitted by law, we are not liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of data, profits, revenue, goodwill, or business interruption, arising out of or relating to the Software, even if advised of the possibility.
12.2 We carry no liability on any plan — Free, Pro, or Enterprise, paid or unpaid. To the maximum extent permitted by law, our total aggregate liability arising out of or relating to the Software and this Agreement is zero. Where applicable law nonetheless requires a cap rather than a full exclusion, that cap will not exceed the amount you actually paid us for the Software for the single most recent billing period before the event giving rise to the claim — for example, one month on a monthly plan, or one year on an annual plan — which is zero for users who have not paid.
12.3 The exclusions and limits in §§11–12 do not apply to liability that cannot be excluded by law, such as liability for fraud or for death or personal injury caused by our negligence.
13. Indemnification
13.1 No indemnity from us. Consistent with §§11–12, we give no indemnity and assume no defence obligation. The Software is provided "as is"; your use of it is at your own risk and responsibility.
13.2 By you. You will indemnify us against claims and losses arising from your content or data, your breach of this Agreement (including §5.3, §9, and §10), your violation of any third-party provider's terms, or your unlawful use of the Software.
13.3 Process. The party seeking indemnity must give prompt notice; the indemnifying party controls the defence; no settlement that imposes obligations on the other party is made without that party's consent.
14. Term and termination
14.1 This Agreement applies while you use the Software. We may suspend or terminate the licence for material breach (including circumvention of licensing or unlawful use). On termination you must stop using the Software; your locally-held data remains yours and is not deleted by us (we do not hold it).
15. Changes to this Agreement
15.1 We may update this Agreement at any time we deem necessary, at our sole discretion and without any outside approval. When we do, the Software will notify you — typically through the update system — and ask you to relaunch. On relaunch you will see a notice that our terms have been updated, with the updated Agreement presented for you to review for your records. Continued use after an update takes effect constitutes acceptance of the updated Agreement for future use.
16. Governing law and disputes
16.1 This Agreement is not submitted to the law or courts of any particular jurisdiction. We take no responsibility for the actions, consequences, or legal or civil implications of your use of the Software, and you use it entirely at your own risk and responsibility (see §§9–13). You are solely responsible for ensuring that your use is lawful wherever it reaches you and your activity (§9.2, §10.3). Nothing in this Agreement removes a mandatory right that the consumer law of your place of residence does not allow to be waived.
17. Contact
Questions about this Agreement: [email protected]. Bug reports are submitted from within the Software and relayed to us privately (§7.2); release notes and changelogs are published on our public releases page.
Drafting notes (remove before publication)
- Source of clauses: §§4, 5, 5.3, 6, 7, 8, 6.5 derive from Louis's eight drafting points (2026-09-20), reworded for legal accuracy. §5.1's harness- override example reflects the recall/adherence issues seen in practice (provider harness suppressing surfaced context).
- Design decisions folded in from memory: degrade-never-brick + memory-never- gated (§2.2); 72-hour check-in + airgapped offline class (§2.3–2.4, ties tasks #1208/#1210/#1235 — the EULA disclosure those tasks require lives here); Lifetime 20-seat cap (§2.1); locked telemetry posture — identity + counts only, never content (§6.3); encrypted vault/at-rest (§4.1); provider-agnostic + no vendor steering (§1.1/§8.2); right-to-forget (§6.4); Merchant-of-Record = Lemon Squeezy (§6.2).
- Structure/indemnity adapted from mainstream local-first software terms (as-is + enumerated warranty exclusions; tiered liability with a 12-month-fees cap and consumer carve-outs; split IP-vs-conduct indemnity lanes). No third-party text was copied.
- Decisions resolved (Louis, 2026-10-07): licensor = XrossWarden, sole proprietorship, no entity/address or personal name in the text (revisit when an LLC is registered); NO governing-law/jurisdiction submission — full no-responsibility stance (§16); zero liability on every plan (§12.2); no IP indemnity from us (§13.1); Merchant of Record = Lemon Squeezy (§6.2); pricing removed from the EULA entirely (handled on the website/in-product); no sale of the customer base ever (§6.1); change-notice = in-product prompt via the update system, relaunch + review-for-records, updatable at our sole discretion (§15); issues stay private via an in-product relay, changelogs public (§7.2, §17).
- Still to build / draft: the Privacy Policy page at /privacy (§6.7, drafting not yet done); the private bug-report relay engine (log-only write access to the XrossWarden/anvil private repo, no other access) and the public changelog page.
- Deferred to formal legal review (when funds allow): entity registration, arbitration/class-waiver, and a professional pass over the whole document.