Terms of Service

The service

Evelmo accepts audit events through a REST API, stores them in a cryptographically-chained append-only log, and makes them searchable through a dashboard and export endpoints. The technical model is documented on the security page and the docs.

We'll keep improving the service — adding endpoints, tuning limits, tightening the integrity model. Material customer-visible changes are recorded on the changelog. Breaking API changes are announced at least 30 days in advance, except for security fixes.

Your account

You're responsible for everything that happens under your organization — including API keys you issue, team members you invite, and events your application writes. Keep your API keys secret. If a key is exposed, revoke it in the dashboard; that rotation is always a single-click operation.

You must be at least 18 years old and legally able to enter a contract to use Evelmo. The service isn't intended for consumers or children; it's a B2B tool for developers and the companies they work for.

Acceptable use

Don't use Evelmo to:

• Break the law, violate someone's privacy, or facilitate abuse.
• Store secrets, credentials, payment details, or other data the event payload isn't designed to carry. Audit metadata only.
• Store content you don't have the right to store — including PII you haven't disclosed to your users, or data covered by laws that forbid third-party processing.
• Attempt to interfere with the service — probe, scrape, reverse engineer beyond what's needed for legitimate integration, bypass rate limits, or pollute other customers' chains.
• Resell or sublicense the service to third parties without a written agreement with us.

If we see usage that looks abusive, we'll reach out first. If the abuse is flagrant or ongoing, we reserve the right to suspend API access or terminate the account — see the termination section below.

Fees and billing

Pricing is listed on the pricing page. You pay the plan you pick; you can change or cancel at any time from the dashboard. Fees are billed monthly in advance and are non-refundable, except where required by law.

If your usage exceeds your plan's included events in a given month, we'll notify you before the next cycle so you can upgrade. We do not throttle mid-month for overage; audit events are the last thing you want dropped silently.

Taxes: prices are exclusive of VAT, GST, sales tax, and similar. If we're required to collect tax on your jurisdiction's behalf, it will be added to your invoice.

Your data

You own your audit-log data. We process it on your behalf to operate the service — nothing more. We don't train models on it, don't analyze it for business insights, and don't share it with anyone except the subprocessors listed on the subprocessors page, and only to the extent each of them needs to play their role.

You can export everything — CSV and JSON, with full event structure including sequence numbers and hash fields — from the dashboard at any time, without a support request. If the service is ever shut down, you'll get 90 days notice, a final export, and the format spec to migrate elsewhere.

Details on how we handle the data, including the integrity model and operational posture, are on the security page. Details on what we collect and why are in the privacy policy.

Uptime

We operate the service with the intent of being continuously available. We don't currently publish a formal uptime SLA; at our stage, it'd be theater. Business-plan customers can negotiate a signed SLA as part of their contract — see the pricing page.

The SDK is designed for resilience in this context: all writes retry with exponential backoff, and idempotency keys ensure safe retries on network errors. See the docs for integration patterns.

Warranty and liability

The service is provided on an "as is" and "as available" basis. To the maximum extent permitted by law, Evelmo disclaims all implied warranties — including merchantability, fitness for a particular purpose, and non-infringement.

To the maximum extent permitted by law, Evelmo's total liability for any claim arising out of or relating to these terms or the service is limited to the greater of (a) the amount you paid us in the twelve months preceding the claim, or (b) US$100. Neither party is liable for indirect, incidental, consequential, special, or punitive damages — including lost profits, lost revenue, or loss of data — even if advised of the possibility.

These limits are a material part of this agreement and apply regardless of the theory of liability.

Termination

You can terminate at any time from the dashboard. Termination stops future billing; it does not refund prepaid amounts for the current cycle. On termination, you have 30 days to export your data; after that, we delete it within 30 days of written request to privacy@evelmo.com, except where retention is required by law.

We can suspend or terminate your account immediately if you materially breach these terms, fail to pay fees after notice, or put the service, other customers, or us at material legal or security risk. Where practicable, we'll give notice and a chance to remedy first.

Changes to these terms

We may update these terms as the service evolves. Material changes will be announced by email to the admin contact on your account at least 30 days before they take effect. Continuing to use the service after the effective date constitutes acceptance. If you don't agree, you can terminate as described above.

Governing law

These terms are governed by the laws of the State of Delaware, USA, without regard to its conflict-of-laws rules. The exclusive venue for disputes is the state and federal courts located in Delaware. Each party consents to personal jurisdiction there.

For Business-plan customers, a negotiated master services agreement can modify governing-law and venue terms as part of the signed contract.

Contact

Questions about these terms: hello@evelmo.com. Security reports: security@evelmo.com.