End User Terms of Use

Effective Date

October 13, 2026

Version

1.0

Applies to

Every individual who signs in to SaltboxOne (“S1”)

Related documents

Master Service Agreement (between Saltbox and your Customer); Privacy Policy (www.saltboxmgmt.com/privacy); Data Processing Agreement (www.saltboxmgmt.com/dpa)

Contact

privacy@saltboxmgmt.com

Acceptance. By clicking “I Agree” or by signing in to or using the Service, you agree to these Terms of Use (“Terms”). If you do not agree, do not use the Service. You are accepting these Terms in your individual capacity as a person authorized by a Saltbox Customer to use the Service; they do not replace the agreement between Saltbox and that Customer.

1. Who These Terms Apply To

1.1 Parties. These Terms are between Saltbox MGMT, Inc. (“Saltbox,” “we,” or “us”) and you, an individual who accesses SaltboxOne (the “Service”) as an employee, contractor, or other authorized representative of an organization that has entered into a Master Service Agreement or other written agreement with Saltbox (the “Customer” and the “MSA”).

1.2 Relationship to the MSA. The MSA governs the Customer’s use of the Service, including ownership of Customer Data and outputs, service levels, fees, and liability between Saltbox and the Customer. These Terms govern your individual conduct when using the Service. Nothing in these Terms gives you rights under the MSA, and if these Terms conflict with the MSA, the MSA controls as between Saltbox and the Customer.

1.3 Eligibility. You represent that you are at least 18 years old, that the Customer has authorized you to use the Service on its behalf, and that you will use the Service only for the Customer’s business purposes.

2. Your Account

2.1 Credentials. Your account is personal to you. Keep your password and any authentication factors confidential, do not share your credentials or let anyone else use your account, and notify your Customer administrator and Saltbox at privacy@saltboxmgmt.com promptly if you believe your account has been compromised.

2.2 Customer administration. Your Customer’s administrators control your access to the Service and can provision, suspend, or remove your account, set retention periods for conversation history and outputs, and view content within the Customer’s organization, including your conversations, generated outputs, and project content. Treat your use of the Service as work activity visible to your employer or engaging organization.

2.3 Accurate information. You will keep your account information (name, business email, job title) accurate and current.

3. Acceptable Use

You agree that you will not, and will not attempt to:

• Use the Service in violation of applicable law, the MSA, or your Customer’s internal policies.
• Submit to the Service any data your Customer is not permitted to process, including sensitive personal information, such as Social Security numbers, financial account numbers, health or medical information, biometric data, precise geolocation, or data subject to HIPAA, GLBA, FERPA, or similar sectoral laws, unless the Customer has a written agreement with Saltbox covering that data.
• Upload or generate content that is unlawful, infringing, defamatory, or that contains malware or code designed to disrupt any system.
• Extract, reproduce, or reverse engineer Saltbox’s proprietary prompts, playbooks, methodologies, or system instructions, including through repeated querying or prompt-injection techniques.
• Use automated means to scrape, harvest, or bulk-export content from the Service other than through export features Saltbox provides.
• Interfere with the security or integrity of the Service, probe or test its vulnerabilities without written authorization, or circumvent usage limits, access controls, or current functionality (jail breaking).
• Use the Service or its outputs to develop a competing product or to train, fine-tune, or benchmark a machine-learning model.
• Connect an integration, or import content from a third-party system, that you are not authorized by the Customer and by that system’s owner to connect or import.

Saltbox may suspend or terminate your access for a violation of this Section without prior notice and will inform your Customer administrator when it does so.

4. Connected Integrations

4.1 Your authorization. The Service can connect to third-party systems, such as: Salesforce, Asana, Azure DevOps, Confluence, GitHub, Google Drive, Google Meet, Jira, Linear, Lucid, Microsoft Teams, Slack, Smartsheet, Zephyr Scale, and meeting-transcript services. When you connect one of these or another approved system, you are doing so on behalf of the Customer, and you represent that you have the Customer’s authority and the necessary rights under that system’s terms to grant the Service the access you configure.

4.2 Scope. Each integration is authorized in advance and scoped to the files, projects, or channels you configure. For Google services, Saltbox’s use of Google data is described in the Privacy Policy and adheres to the Google API Services User Data Policy, including its Limited Use requirements.

4.3 Other people’s information. Content you import, such as meeting transcripts, chat messages, and shared documents, may contain personal information about colleagues, customers, and other people who are not Service users. You are responsible for importing only content you and the Customer are permitted to process, and for following the Customer’s policies on recording and transcribing meetings.

4.4 Revocation. You may disconnect an integration at any time from the Service settings or from the third-party system’s own permissions page. Disconnecting stops further imports; content already imported remains in the Service until it is deleted under the Customer’s retention settings or by you.

4.5 Third-party terms. Integrations, and any optional destinations to which you choose to send outputs (such as v0 by Vercel), are provided by third parties under their own terms and privacy policies. Saltbox is not responsible for those services.

5. Content, Outputs, and AI

5.1 Ownership. As between Saltbox and the Customer, the Customer owns the content it and its users submit to the Service (“Customer Data”) and the outputs the Service generates from it, as provided in the MSA. You do not acquire any personal ownership interest in Customer Data or outputs by using the Service, or in any subsequent Service AI improvement resulting from Customer use.

5.2 AI-generated content. The Service uses large language models to generate summaries, user stories, test cases, configuration recommendations, code, and other outputs. Outputs are generated automatically and may be incomplete, inaccurate, or unsuitable for your purpose. You are responsible for reviewing every output before relying on it.

5.3 Deploying changes to Salesforce. Where the Service writes or deploys code or configuration into a Salesforce environment, including through a sandbox or development environment, you are responsible for reviewing the proposed change, testing it in accordance with the Customer’s change-management practices, and approving it before it is applied. Saltbox does not control the Customer’s Salesforce environment and is not responsible for the effect of changes you approve.

5.4 Retention and memory. Your conversations with the Service, the content you import, and generated outputs are retained for the period set by your Customer administrator. The Service also keeps derived memory, meaning long-horizon context extracted from your conversations, scoped to you or to a project. You can delete conversations, imported content, and derived memory from within the Service, subject to the Customer’s settings.

5.5 Feedback. If you give Saltbox suggestions or feedback about the Service, Saltbox may use them without restriction or obligation to you, provided it does not identify you or the Customer or disclose Customer Data.

6. Privacy

When your organization (the Customer) makes Saltbox products available to you, you must register to use that product. On behalf of your organization, Saltbox collects your account information (name, business email, job title, organization and role) and handles it as described in the Privacy Policy at www.saltboxmgmt.com/privacy. Customer Data, including content you submit or import and outputs generated for the Customer, is processed on the Customer’s behalf under the Data Processing Agreement at www.saltboxmgmt.com/dpa; the Customer, not Saltbox, decides how that data is used and retained. To exercise privacy rights over your account information, contact privacy@saltboxmgmt.com. Requests about Customer Data should be directed to your Customer.

7. Saltbox’s Property

The Service, including its software, models, prompts, playbooks, methodologies, documentation, and trademarks (Saltbox Mgmt and S1™), is owned by Saltbox and its licensors and protected by intellectual property law. You receive only the limited right to use the Service under the MSA and these Terms. No other rights are granted.

8. Suspension and Termination

8.1 By the Customer. Your access ends when the Customer removes it or when the MSA terminates.

8.2 By Saltbox. Saltbox may suspend or terminate your access if you breach these Terms, if your use presents a security risk, or if required by law.

8.3 Effect. On termination, your right to use the Service ends. Your content is handled under the Customer’s retention settings and the MSA; it is not returned to you individually. Sections 3, 5.1, 5.5, 7, 9, 10, and 11 survive termination.

9. Disclaimers

To the fullest extent permitted by law, the Service is provided to you “as is” and “as available.” Any warranties Saltbox makes about the Service are made to the Customer in the MSA and not to you individually. Saltbox does not warrant that outputs will be accurate, complete, or fit for a particular purpose, or that the Service will be uninterrupted or error-free.

10. Limitation of Liability

Saltbox’s liability for the Service is set out in the MSA and runs to the Customer. To the fullest extent permitted by law, Saltbox will not be liable to you individually for any indirect, incidental, consequential, special, or punitive damages, or for loss of data, profits, or business, arising from your use of the Service, and Saltbox’s total liability to you individually under these Terms will not exceed one hundred U.S. dollars ($100). Nothing in these Terms limits liability that cannot be limited under applicable law.

11. General

11.1 Governing law and venue. These Terms are governed by the laws of the State of Delaware, without regard to its conflict-of-laws rules. Any dispute under these Terms will be brought exclusively in the state or federal courts located in Delaware, and you consent to their jurisdiction.

11.2 Changes. Saltbox may update these Terms. Material changes will be posted with a new Effective Date and notified to you in the Service or by email. Continued use after the Effective Date constitutes acceptance.

11.3 Entire terms. These Terms, together with the Privacy Policy and the applicable MSA and DPA, are the entire terms governing your individual use of the Service. If any provision is unenforceable, the rest remains in effect. Saltbox’s failure to enforce a provision is not a waiver.

11.4 Assignment. You may not assign these Terms. Saltbox may assign them in connection with a merger, acquisition, or sale of assets.

11.5 Electronic acceptance. Your click-through acceptance has the same effect as a handwritten signature. Saltbox records the date and version of the Terms you accept.

11.6 Contact. Questions about these Terms: privacy@saltboxmgmt.com, or Saltbox MGMT, Inc., Attn: Privacy, 305 N 5th Ave, Suite #590, Minneapolis, MN 55401.