Terms of Service
Last updated: February 16, 2026 · Effective: February 16, 2026
Please read these Terms of Service (“Terms”) carefully before using the OpenAgent Core platform operated by ThinkFoundry.ai Pty Ltd (“we”, “us”, or “our”). By creating an account, accessing, or using our Services in any way, you (“you” or “Customer”) agree to be bound by these Terms. If you are using the Services on behalf of a company or other legal entity, you represent that you have the authority to bind that entity to these Terms. If you do not agree, do not use the Services.
1Definitions
In these Terms, the following definitions apply:
- “Services” means the OpenAgent Core platform, including the web dashboard, APIs, MCP server infrastructure, documentation, and any related services provided by us.
- “Account” means the tenant account created when you register for the Services.
- “API Key” means the authentication credential issued to your Account for programmatic access to the Services.
- “Basiq API Key” means your own Basiq.io API credential that you provide to the platform for accessing Open Banking data on behalf of your end-users.
- “End Users” means individuals or entities who use your application or product that is built using the Services.
- “Financial Data” means banking account information, transaction records, balance data, and related financial information retrieved via the Basiq.io integration.
- “MCP Tools” means the pre-built Model Context Protocol tool definitions provided via the Services.
- “CDR” means the Consumer Data Right framework established under the Consumer Data Right Act 2019 (Cth).
- “Subscription Plan” means the tier of service (Free, Pro, or Enterprise) selected by you.
2Acceptance and Eligibility
By using the Services you confirm that:
- You are at least 18 years of age.
- You have the legal capacity to enter into a binding agreement.
- If registering on behalf of a company, you have authority to bind that company.
- Your use of the Services does not violate any applicable law or regulation.
- You are not located in a jurisdiction subject to Australian sanctions laws or on any restricted persons list.
We reserve the right to refuse service to anyone at our sole discretion.
3Account Registration and Security
3.1 Account Creation
You must register for an Account to use the Services. You agree to provide accurate, current, and complete information during registration and to keep your Account details up to date. You may not use a false identity or impersonate another person or entity.
3.2 Account Security
You are solely responsible for:
- Maintaining the confidentiality of your login credentials and API Keys.
- All activity that occurs under your Account, whether or not authorised by you.
- Notifying us immediately at support@thinkfoundry.ai of any unauthorised access or suspected compromise of your Account or API Keys.
We will never ask for your password. API Keys are shown once at generation — store them securely. We cannot recover a lost API Key; you will need to revoke and regenerate it.
3.3 One Account Per Entity
Each legal entity may maintain one active Account. Creating multiple Accounts to circumvent rate limits, billing, or access restrictions is prohibited and may result in immediate termination of all associated Accounts.
4Description of Services
OpenAgent Core is a Financial Data Infrastructure-as-a-Service (IaaS) platform that provides:
- A hosted Model Context Protocol (MCP) server with 34+ pre-built financial data tools.
- Secure, encrypted storage and management of Basiq.io API credentials.
- Multi-tenant data isolation via Row Level Security (RLS) in a managed PostgreSQL database.
- Usage tracking, rate limiting, and billing metrics across MCP requests, Basiq API calls, and AI token consumption.
- End-to-end OAuth, consent, and authentication flows for your End Users.
- A web dashboard for managing your Account, API Keys, usage analytics, and subscription.
The Services are provided on a software-as-a-service basis. We reserve the right to modify, update, or discontinue features with reasonable notice.
5Subscription Plans, Billing and Payment
5.1 Plans
We offer Free, Pro, and Enterprise Subscription Plans. Each plan includes specified limits on daily Basiq API calls, monthly AI token consumption, and per-minute MCP request rates. Details are published on our pricing page and may be updated from time to time.
5.2 Payment
Paid plans are billed monthly or annually in advance. All fees are in Australian dollars (AUD) unless otherwise stated. Payments are processed securely by Stripe Inc. By providing payment details, you authorise us to charge your nominated payment method on each renewal date.
5.3 Free Trial
We may offer a free trial period for paid plans. At the end of the trial, your plan will automatically convert to a paid subscription unless you cancel before the trial expires. No credit card is required for the Free tier.
5.4 Upgrades and Downgrades
You may upgrade your plan at any time; the new rate applies immediately on a prorated basis. Downgrades take effect at the next billing cycle. We do not issue partial refunds for unused capacity when downgrading.
5.5 Late Payment and Suspension
If a payment fails, we will notify you and retry the charge. If payment is not received within 14 days of the due date, we may suspend your Account until the outstanding balance is settled. Accounts suspended for more than 30 days may be terminated.
5.6 Refunds
All fees are non-refundable except where required by Australian Consumer Law. If you believe you have been charged in error, contact us within 30 days of the charge and we will investigate.
5.7 Taxes
All fees are exclusive of GST and applicable taxes. Where applicable, GST will be added to your invoice at the prevailing rate.
6Acceptable Use Policy
You agree to use the Services only for lawful purposes and in accordance with these Terms. You must not:
6.1 Prohibited Conduct
- Use the Services to process, store, or transmit data in violation of any applicable law, including the Privacy Act 1988 (Cth), the CDR rules, anti-money laundering laws, or data protection regulations.
- Attempt to gain unauthorised access to any part of the Services, our infrastructure, or other customers' data.
- Reverse engineer, decompile, disassemble, or attempt to derive the source code of the Services.
- Resell, sublicense, or otherwise make the Services available to third parties as a standalone product without our prior written consent.
- Transmit malware, viruses, or any code designed to disrupt, damage, or gain unauthorised access to systems.
- Use the Services to conduct fraudulent transactions, identity theft, or phishing.
- Circumvent, disable, or interfere with security features, rate limits, or access controls.
- Use automated scripts to create multiple Accounts or artificially inflate usage metrics.
- Use the Services in any way that could damage, disable, overburden, or impair our infrastructure.
- Scrape, harvest, or otherwise extract data from the Services beyond your authorised access.
6.2 Responsibility for End Users
You are fully responsible for your End Users' use of Financial Data accessed through your application. You must ensure your application has appropriate privacy policies, consent mechanisms, and terms of service for your End Users, and that their use of Financial Data complies with all applicable laws.
6.3 Enforcement
We may investigate any suspected violation of this Acceptable Use Policy. We reserve the right to suspend or terminate access to the Services, with or without notice, for any violation.
7API Usage, Rate Limits and Quotas
7.1 Rate Limits
Your use of the Services is subject to rate limits based on your Subscription Plan. Limits apply to: MCP requests per minute, Basiq API calls per day, and AI token consumption per month. Current limits are published on our pricing page.
7.2 Exceeding Limits
When you exceed a rate limit, requests will return a 429 Too Many Requests response containing the limit type, remaining quota, and the reset timestamp. You may upgrade your plan or purchase additional capacity.
7.3 Fair Use
Even where explicit rate limits are not exceeded, we reserve the right to throttle or suspend access where usage is, in our reasonable opinion, abusive, adversely affecting other customers, or inconsistent with normal use patterns for your plan.
7.4 API Key Management
You are responsible for managing, rotating, and revoking your API Keys. We recommend rotating API Keys periodically and immediately upon any suspected compromise. We accept no liability for unauthorised use of API Keys that have not been revoked.
8Consumer Data Right (CDR) Obligations
The Services facilitate access to Financial Data via Basiq.io, which is an accredited CDR Data Recipient under the Consumer Data Right Act 2019 (Cth). As a developer building applications on our platform:
- You acknowledge that Financial Data accessed through the Services is subject to CDR rules, and that you must handle such data only as permitted by the relevant consent given by the End User.
- You must not use CDR data for any purpose beyond the primary purpose for which it was collected and as disclosed to the End User at the time of consent.
- You must provide your End Users with a clear and accessible privacy policy explaining how their financial data will be used.
- You must implement appropriate security measures to protect any CDR data you store or process in your own systems.
- You must not on-sell, disclose, or otherwise misuse CDR data obtained via the Services.
- You agree to cooperate with any audit or investigation conducted by the Australian Competition and Consumer Commission (ACCC) or other regulatory body in relation to CDR data accessed via the Services.
9Intellectual Property
9.1 Our IP
All intellectual property rights in the Services, including the MCP server software, tool definitions, dashboard, documentation, trademarks, and all related materials, are owned by or licensed to ThinkFoundry.ai Pty Ltd. These Terms do not grant you any ownership rights in the Services.
9.2 Licence to Use
Subject to your compliance with these Terms and payment of applicable fees, we grant you a limited, non-exclusive, non-transferable, revocable licence to access and use the Services solely for your internal business purposes and to build applications for your End Users.
9.3 Your Data and Content
You retain all rights to data and content you upload or generate through your use of the Services (“Customer Data”). By using the Services, you grant us a limited licence to process Customer Data solely for the purpose of providing the Services to you.
9.4 Feedback
If you provide us with feedback, suggestions, or ideas about the Services, you grant us a perpetual, irrevocable, royalty-free licence to use that feedback for any purpose without compensation or attribution to you.
10Third-Party Services
The Services integrate with and depend upon third-party providers. Your use of the Services is also subject to those providers' terms:
- Basiq.io (Illion Australia Pty Ltd) — Open Banking data provider. Your use of Financial Data is subject to the Basiq.io Terms of Service and CDR Consumer Policy.
- Stripe Inc. — Payment processing. Subject to the Stripe Services Agreement.
- Supabase Inc. — Database infrastructure. Subject to the Supabase Terms of Service.
We are not responsible for the availability, accuracy, or conduct of third-party services. Outages or changes to third-party services (including Basiq.io) may affect the availability of certain features without constituting a breach of these Terms by us.
11Service Availability and SLA
11.1 Uptime Target
We target 99.9% monthly uptime for the Services, excluding scheduled maintenance windows and events outside our reasonable control. This target is not a contractual guarantee unless expressly provided in a separate Enterprise SLA agreement.
11.2 Scheduled Maintenance
We will provide at least 24 hours' advance notice of scheduled maintenance that may result in downtime. Emergency maintenance may be performed without notice where necessary to protect security or service integrity.
11.3 No Guarantee of Availability
The Services are provided “as available”. We do not guarantee uninterrupted, error-free access. We will use commercially reasonable efforts to restore service following any outage.
12Confidentiality
Each party agrees to keep confidential any non-public information disclosed by the other party that is designated as confidential or that a reasonable person would understand to be confidential given the nature of the information and the circumstances of disclosure (“Confidential Information”).
This obligation does not apply to information that: (a) is or becomes publicly available without breach; (b) was already known to the receiving party; (c) is independently developed without use of Confidential Information; or (d) is required to be disclosed by law.
Our handling of your personal and financial data is governed by our Privacy Policy, which forms part of these Terms.
13Warranties and Disclaimers
13.1 Our Warranties
We warrant that:
- We have the legal right to provide the Services.
- We will implement reasonable security measures as described in our Security Policy.
- The Services will materially conform to the documentation during the subscription term.
13.2 Disclaimer
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, EXCEPT AS EXPRESSLY SET OUT IN THESE TERMS, THE SERVICES ARE PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT ANY WARRANTY OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE. WE EXPRESSLY DISCLAIM ALL IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.
WE DO NOT WARRANT THAT: (A) THE SERVICES WILL BE UNINTERRUPTED OR ERROR-FREE; (B) FINANCIAL DATA RETRIEVED VIA BASIQ.IO WILL BE ACCURATE, COMPLETE, OR CURRENT; (C) THE SERVICES WILL MEET YOUR SPECIFIC REQUIREMENTS.
13.3 Australian Consumer Law
Nothing in these Terms excludes, restricts, or modifies any consumer guarantee, right, or remedy conferred by the Competition and Consumer Act 2010 (Cth) or any other applicable Australian consumer protection legislation that cannot be excluded by agreement.
14Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW:
- NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, INCLUDING LOSS OF PROFITS, LOSS OF DATA, LOSS OF GOODWILL, BUSINESS INTERRUPTION, OR THE COST OF SUBSTITUTE SERVICES.
- OUR TOTAL AGGREGATE LIABILITY TO YOU ARISING OUT OF OR IN CONNECTION WITH THESE TERMS OR THE SERVICES, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STATUTE, OR OTHERWISE, WILL NOT EXCEED THE GREATER OF: (A) THE TOTAL FEES PAID BY YOU IN THE 12 MONTHS IMMEDIATELY PRECEDING THE CLAIM; OR (B) AUD $100.
These limitations apply even if we have been advised of the possibility of such damages and even if a remedy fails of its essential purpose. Some jurisdictions do not allow the exclusion or limitation of incidental or consequential damages, so the above limitation may not apply to you to the extent prohibited by applicable law.
15Indemnification
You agree to defend, indemnify, and hold harmless ThinkFoundry.ai Pty Ltd and its officers, directors, employees, and agents from and against any claims, liabilities, damages, judgments, awards, losses, costs, or expenses (including reasonable legal fees) arising out of or relating to:
- Your violation of these Terms.
- Your use or misuse of the Services, including any applications you build using the Services.
- Your violation of any applicable law or regulation, including CDR rules or privacy laws.
- Any claim by your End Users arising from your application.
- Any infringement by you of any third-party intellectual property right.
16Term and Termination
16.1 Term
These Terms commence on the date you create your Account and continue until terminated as set out below.
16.2 Termination by You
You may terminate your Account at any time via the Account settings in the dashboard. Termination takes effect at the end of your current billing period. You will retain access to the Services until that date.
16.3 Termination by Us
We may suspend or terminate your Account immediately, with or without notice, if:
- You breach any material provision of these Terms and fail to remedy the breach within 7 days of notice (where the breach is capable of remedy).
- You engage in fraudulent, illegal, or abusive conduct.
- Payment of fees remains outstanding for more than 30 days after the due date.
- We are required to do so by law or regulatory order.
- Providing the Services to you creates a legal, security, or reputational risk.
16.4 Effect of Termination
Upon termination:
- Your licence to use the Services is immediately revoked.
- Your API Keys will be invalidated.
- We will delete your Account data within 30 days, except where retention is required by law.
- You remain liable for any fees accrued up to the termination date.
- Sections 9 (IP), 13 (Warranties), 14 (Liability), 15 (Indemnification), 17 (Governing Law), and any other provisions that by their nature should survive, will survive termination.
17Governing Law and Dispute Resolution
17.1 Governing Law
These Terms are governed by the laws of New South Wales, Australia. You irrevocably submit to the non-exclusive jurisdiction of the courts of New South Wales and the Federal Court of Australia.
17.2 Dispute Resolution
Before commencing any formal legal proceeding, both parties agree to attempt in good faith to resolve any dispute through the following process:
- Step 1 — Informal notice: The party raising the dispute provides written notice to the other describing the issue and desired resolution.
- Step 2 — Negotiation: Both parties engage in good-faith negotiation for 30 days following receipt of the notice.
- Step 3 — Mediation: If unresolved, either party may refer the matter to mediation under the Australian Disputes Centre (ADC) rules.
- Step 4 — Litigation: If mediation is unsuccessful, either party may commence formal proceedings.
Nothing in this clause prevents a party from seeking urgent injunctive or interlocutory relief.
18Changes to These Terms
We may update these Terms from time to time to reflect changes in our Services, applicable laws, or business practices. When we make material changes, we will:
- Update the “Last updated” date at the top of this page.
- Send a notification to your registered email address at least 14 days before the changes take effect (30 days for material changes that adversely affect you).
- Display a prominent notice on the dashboard.
Your continued use of the Services after the effective date of any change constitutes acceptance. If you do not agree to the updated Terms, you must stop using the Services and terminate your Account before the effective date.
19General Provisions
19.1 Entire Agreement
These Terms, together with our Privacy Policy, Security Policy, and any applicable Order Form or Enterprise Agreement, constitute the entire agreement between you and ThinkFoundry.ai Pty Ltd with respect to the Services and supersede all prior agreements and understandings.
19.2 Severability
If any provision of these Terms is found to be unenforceable or invalid by a court of competent jurisdiction, that provision will be limited or eliminated to the minimum extent necessary, and the remaining provisions will continue in full force and effect.
19.3 No Waiver
Our failure to enforce any right or provision of these Terms will not constitute a waiver of that right or provision. A waiver of any breach will not be deemed a waiver of any subsequent breach.
19.4 Assignment
You may not assign or transfer these Terms or any rights hereunder without our prior written consent. We may assign these Terms or our rights and obligations hereunder to any affiliate or in connection with a merger, acquisition, or sale of all or substantially all of our assets, with notice to you.
19.5 Force Majeure
Neither party will be liable for delay or failure to perform obligations (other than payment obligations) due to causes beyond their reasonable control, including natural disasters, acts of government, network outages, or failures of third-party infrastructure providers (including Basiq.io or Stripe).
19.6 Notices
Legal notices to us must be sent to legal@thinkfoundry.ai. Notices to you will be sent to your registered email address or posted in the dashboard.
19.7 Relationship of the Parties
The parties are independent contractors. Nothing in these Terms creates a partnership, joint venture, employment, franchise, or agency relationship between the parties.
20Contact Us
If you have any questions about these Terms, please contact us:
Company: ThinkFoundry.ai Pty Ltd
Product: OpenAgent Core
Legal enquiries: legal@thinkfoundry.ai
General support: support@thinkfoundry.ai