1. Agreement
These Terms of Service ("Terms") are a binding contract between you ("Customer") and ReverseMask ("Operator", "we", "us"). By using the reversemask sandbox, calling the API endpoints (/mask, /unmask, /guard, /v1/chat/completions), or purchasing a pass through Polar.sh, you agree to these Terms, the Privacy Policy, the Acceptable Use Policy, the Security Disclaimer, and the Data Processing Addendum.
ReverseMask is a business-to-business developer tool. You must be at least 18 years old and using it for commercial or professional purposes. If you are entering into these Terms on behalf of a company, you represent that you have authority to bind that company.
2. The Service
ReverseMask masks personally identifiable information (PII) into short reversible tokens before it reaches a language model, and unmasks only the tool-call output on the way back. It also runs a heuristic prompt-injection firewall. The Service is stateless: the encrypted vault bundle is returned to you and never stored on our side.
3. API Keys and Your Responsibility
Purchased access is delivered as an API key. You are responsible for keeping that key secure and for all activity that occurs under it. Treat it like a password. We store only a hash of the key, so we cannot recover a lost key for you.
4. Acceptable Use
You agree to the Acceptable Use Policy. Sending prohibited data or using the Service to attack, overload, or probe other systems is a material breach that terminates your access immediately.
5. No Warranty
The Service is provided "as is" and "as available". To the maximum extent permitted by law, we disclaim all warranties, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Service will be uninterrupted, error-free, or that it will detect every instance of PII or prompt injection.
6. Limitation of Liability
To the maximum extent permitted by law, our total aggregate liability for all claims arising out of or related to the Service, whether in contract, tort, or otherwise, is limited to the lesser of (a) the fees you actually paid us in the three (3) months before the claim, or (b) fifty US dollars ($50.00). For free sandbox users, our liability is zero dollars ($0.00).
We are not liable for any indirect, incidental, special, consequential, or exemplary damages, including lost profits, lost data, workflow downtime, or data leaks, even if we were advised of the possibility of such damages.
7. Stateless Nature and Vault Bundle Loss
ReverseMask does not store your vault bundle or the original PII. If a vault bundle is lost, corrupted, or expires (default five minutes), the masked data cannot be recovered. You are responsible for the security of the vault bundles you handle. We have no liability for data that cannot be unmasked as a result.
8. Indemnification
You agree to defend, indemnify, and hold harmless ReverseMask and its operator from any claims, damages, regulatory fines, or lawsuits brought by your clients, end users, or other third parties arising out of your use of the Service, including claims about data you chose to send through the Service.
9. Dispute Resolution
Any dispute arising out of these Terms will be resolved by individual binding arbitration in Maricopa County, Arizona, under the rules of the American Arbitration Association. You and we each waive the right to a jury trial and to participate in a class action. You may not bring a claim as a class or representative action.
10. Termination
We may suspend or terminate access for a breach of these Terms or the Acceptable Use Policy. The sections on warranty, liability, indemnification, and dispute resolution survive termination.
11. Changes
We may update these Terms from time to time. The version posted here is the current version. Continued use after a change means you accept the change.
12. Contact
Questions about these Terms: [email protected].