Terms of Service — Ignia Object Storage / Términos de Servicio

STATUS: DRAFT pending legal review (SUPUESTO A VALIDAR). Required before customer sign-up opens (remediation R5-1). Keep every statement here true to what the system does — the PM and legal auditors check this file against code and marketing claims.

Mirror: this file is served publicly at apps/portal/src/pages/legal/ — tests/portal-legal.test.ts fails if they drift. Regenerate the portal copy when you edit this.

EN

1. The service. Ignia Object Storage (IOS): S3-compatible object storage on Cloudflare R2 with an optional immutable backend (Backblaze B2 with Object Lock — planned; not yet offered to customers, see §6), per-customer region selection, cross-tenant deduplication (content-addressed, SHA-256), the my.ignia.cloud self-service portal, and the Larry AI assistant.

2. Accounts. One account per legal entity; you are responsible for your credentials (passkeys, TOTP, API keys) and for every action taken under them. Staff access to your account happens only under the impersonation policy (ticket, notice, recording) and is fully visible to you.

3. Acceptable use. No illegal content, no malware distribution, no phishing hosting, no abuse of shared resources. Static-site hosting content is screened (hash blocklist + extension heuristics); violations may be quarantined with notice. We may suspend service for non-payment after the grace periods in the pricing document, and for abuse after notice where legally feasible.

4. Pricing and billing. Pay-as-you-go (daily-average storage, operations, egress per the published price list) and prepaid Vault Credit packages (no rollover, overage optional at list PAYG rates). Prices in USD (LLC) and MXN (SA). Overage and anomaly rules per the pricing model: anomalous consumption may trigger off-cycle charging and, if unpaid, write suspension (never read/egress suspension). Included capacity and overage are computed from our metering; you can see the same numbers we bill from in your portal.

5. Service levels. Availability targets per the service catalog (compliance/iso-20000-1/service-catalog.md — currently SUPUESTO A VALIDAR; published SLA targets are confirmed before any credit-bearing commitment). No credits accrue under targets still marked provisional.

6. Immutability disclosure. [Planned — not yet purchasable] Data written under Object Lock / immutable retention cannot be deleted or modified by anyone — including Ignia and including you — until its retention date. Verify your retention settings before enabling them; erasure requests (§8 Privacy Notice) are honored only after retention expiry for locked data. This section takes effect when the immutable tier is offered; today no customer bucket can be created with Object Lock.

7. Deduplication disclosure. Identical file contents may be stored once across customers (content-addressed storage). This is invisible to you: listings, sizes and billing show your logical objects; a file you delete is unlinked from your namespace immediately (the shared physical copy is garbage-collected only when no customer references it). Encrypted files (which we cannot read) do not deduplicate.

8. Data and privacy. Per the Privacy Notice and DPA (documents of record). You warrant you have a lawful basis for the personal data you store.

9. Liability. The service is provided “as is” with the availability commitments of §5. To the maximum extent permitted by law, Ignia is not liable for indirect or consequential damages; aggregate liability is capped at the fees paid in the 12 months preceding the claim (SUPUESTO A VALIDAR — legal to confirm per entity).

10. Term and termination. Month-to-month (PAYG) or the prepaid term purchased. On termination: data available for export for 30 days, then deleted (subject to Object Lock). Prepaid packages are non-refundable except per the pricing document’s fault rules (prorated −15% only when the failure is attributable to Ignia).

11. Governing law. For LLC customers: Delaware, USA (SUPUESTO A VALIDAR). For SA customers: Mexico City, Mexico (SUPUESTO A VALIDAR). Legal to confirm both before publication.

ES (resumen — la versión EN rige salvo confirmación legal)

Servicio de almacenamiento de objetos compatible con S3 con nivel inmutable opcional. Eres responsable de tus credenciales y del contenido que almacenas. La impersonación del personal siempre es visible para ti. Precios según la lista publicada (PAYG y paquetes Vault Credit sin rollover); el consumo anómalo puede suspender la escritura (nunca la lectura). Los datos con Object Lock no se pueden borrar ni modificar por nadie hasta su fecha de retención — revísalo antes de activarlo. La deduplicación entre clientes es invisible y no afecta tu facturación lógica. Al terminar: 30 días para exportar, luego borrado (sujeto a retenciones inmutables). Ley aplicable por entidad: SUPUESTO A VALIDAR por legal antes de publicar.