Terms of use for COMPASS

1. Provider and scope

COMPASS is a service of Digitalgurus (Carsten Urbanski), Kettelerstr. 42, 76863 Herxheim, Germany, email office@athron.io (the “provider”). These terms apply to every use of COMPASS through the web interface, the programming interface (REST) and the tool server for agents (MCP).

COMPASS is intended exclusively for businesses within the meaning of § 14 of the German Civil Code (BGB). No contract is concluded with consumers; on registration the customer confirms that they are acting as a business. There is therefore no right-of-withdrawal notice, because the right of withdrawal under §§ 312g, 355 BGB is available to consumers only.

Terms of the customer that differ from these do not apply, even if the provider does not expressly object to them.

2. What COMPASS is

COMPASS stores a customer’s working knowledge for their AI agents and their people: rules, decisions, facts, lessons, processes, check paths, personas, messages and documents. Every statement carries since when it applies, where it came from, and whether it has been superseded. Superseded statements are kept as history and are not overwritten.

Each customer receives their own area, separated from other customers (a “tenant”).

3. Conclusion of contract and account

The contract is concluded when the customer registers and confirms their email address using the link sent to them. Registration with a Google account is also possible.

The customer keeps passwords and access keys secret. Whoever gives a key to an agent is responsible for what that agent does with it, as for their own action. A key that has become known must be withdrawn immediately; COMPASS provides a dedicated way to do so.

4. Tiers, prices and payment

COMPASS comes in these tiers:

• Free · 0 €
• Starter · 19 € per month
• Pro · 239 € per month
• Enterprise · by separate agreement

What each tier contains is stated on the pricing page, in the version in force when the contract is concluded.

All prices are net prices and are subject to value added tax at the applicable rate. For customers in other EU countries holding a valid VAT identification number, the tax liability shifts to the customer (reverse charge, § 13b of the German VAT Act).

Payment is made in advance for each month through the payment service provider Stripe. Credit card and SEPA direct debit are available as payment methods. The customer enters card details and bank details directly with Stripe; the provider does not see or store them.

As of 08.10.2026 the integration runs in test mode: the flows are built, but the service is not switched live in operation yet. Until then, only Free and Enterprise can be concluded.

The customer can change tier at any time. A change to a higher tier takes effect immediately. A change to a lower tier takes effect from the next billing period; for the current period, which has already been paid for, there is no pro-rata refund. The previous tier remains usable until the end of that period.

5. Term and termination

Paid tiers run monthly and renew by one month at a time unless they are terminated. When a paid tier expires, the account falls back to Free; the data is retained.

Either party may terminate at any time with effect from the end of the current billing period; there is no notice period beyond that. Termination of a paid tier takes effect at the end of the period, after which Free continues to apply. Whoever terminates the entire contract thereby also terminates the Free account; section 10 then applies to the data.

Termination is made in text form, for example by email to the provider or through the interface. The right of either party to terminate for cause remains unaffected.

6. Availability

The provider operates COMPASS with the care of a prudent business. Maintenance work is announced where possible.

No particular availability is promised. The provider owes no minimum availability as a percentage and grants no credits for downtime. This applies to all tiers. Maintenance, faults and outages are possible; the provider remedies them so far as is reasonable and announces plannable work where that is possible.

7. Obligations of the customer

• The customer stores in COMPASS only content that they are lawfully permitted to process.
• The customer may store special categories of personal data under Art. 9 GDPR in COMPASS — including health data. They must have their own legal basis for doing so (for example the consent of the data subject, or Art. 9(2)(h) GDPR) and must inform the provider beforehand, so that the provider can set the level of protection accordingly. The processing of such data is governed by the data processing agreement.
• They do not use COMPASS to infringe the rights of third parties, nor in a way that impairs operation for other customers.

8. The customer’s data

All content that the customer or their agents store in COMPASS belongs to the customer. The provider receives only the right to store, process and display it, so far as that is necessary to provide COMPASS.

Customer data does not train AI models. The provider does not use customer data to train AI models and does not pass it to third parties for that purpose. The provider receives no licence to train with it. Nor is there any licence that would continue after the end of the contract.

Exception, expressly named and limited: the provider operates its own tenants in COMPASS. It may work with the data from exactly two of them, including for training: compass (the development of COMPASS itself) and demo (for demonstrating the empty state). This concerns no data of any customer.

The tenant athron is expressly excluded — the provider’s own operation. Details about third parties may be held there, for example about the customers and clients of that operation; that data is not used for training, and it is not passed to third parties for that purpose. The exception therefore applies to two of three of the provider’s own tenants, and to no customer’s tenant. Measured on 08.10.2026, the operation runs six tenants, of which the three named are the provider’s own.

Optional features involving third parties. Some features work with external services, for example a writing assistant with a language model, or suggestions for persona portraits with an image service. Which services these are, and which data they receive, is stated in the privacy policy and in the list of sub-processors.

These features are switched on or off by the provider, not by the individual customer: the switch is a setting of the operation and applies to all tenants together (measured on 08.10.2026 — there is no field for it on the customer itself). As of 08.10.2026 the writing assistant is switched off (no language model configured, no call takes place) and portrait generation is switched on. None of these features runs unprompted: each is triggered by an action in the interface.

9. History instead of deletion

COMPASS is built so that statements are not deleted but superseded or ended. That keeps it traceable what applied when. It is the core of the service.

Where the customer is legally obliged to delete, for example upon a deletion request from a data subject, the provider supports them under the data processing agreement. For personal data there is a way to do this: on request the provider makes the entry unrecognisable, within 30 days of the request being received by email. The procedure and its limits are set out in the data processing agreement, section 8.

10. End of the contract and export

The customer can export their data at any time, as NDJSON or as Markdown. The export covers the rulebook with its history, lessons, memory, processes, check paths, questions, personas, company memory, originators and structure. Keys, sessions, the inbox, billing, documents and portraits are not included today.

After the end of the contract the export remains available for a further 30 days. 90 days after the end of the contract the provider deletes the data; on request it confirms the deletion in writing. Backups keep it longer: on the server in the 14 most recent daily copies, in the encrypted off-site copy, depending on age, in up to 14 daily, 8 weekly and 12 monthly states. At the latest 13 months after the deletion it is removed there as well.

11. Data processing

Insofar as the provider processes personal data for the customer, the data processing agreement applies. It forms part of these terms.

12. Liability

The provider is liable without limitation for intent and gross negligence, for damage arising from injury to life, body or health, under the German Product Liability Act, and insofar as it has given a guarantee.

In the case of a slightly negligent breach of an obligation whose fulfilment is essential to achieving the purpose of the contract (a cardinal obligation), the provider is liable, limited to the foreseeable damage typical for this type of contract. Otherwise liability for slight negligence is excluded.

Liability for damage caused by slight negligence is limited, per incident, to twelve times the monthly fee of the tier last paid for, and for all incidents of a contract year taken together to the same amount.

Loss of data: the provider is liable for the loss of data under the rules above, but limited to the effort that would have been necessary to restore it from a properly maintained backup of the customer. The customer is expected to export their data regularly themselves (section 10).

Free tier: insofar as COMPASS is provided free of charge, the provider is liable only for intent and gross negligence, and in the cases of the first paragraph.

Liability under Art. 82 GDPR remains unaffected.

13. Changes to these terms

The provider announces changes by email at least six weeks before they take effect. If the customer does not object within that period, the changes are deemed accepted; the announcement points out this consequence. A change that restricts the promise in section 8 (“Customer data does not train AI models.”) applies only with the express consent of the customer.

14. Final provisions

German law applies, excluding the UN Convention on Contracts for the International Sale of Goods. The exclusive place of jurisdiction is the provider’s seat (Landau in der Pfalz, as the court having jurisdiction for Herxheim); this applies because the customer is a business (§ 38(1) of the German Code of Civil Procedure). The provider’s right to bring proceedings at the customer’s general place of jurisdiction remains unaffected.

If a provision is invalid, the remaining provisions remain valid.

Status

In force since 15.10.2026. The German version is authoritative.