Guardian Terms of Service

Last updated: November 7, 2026 Effective date: November 7, 2026

These Terms of Service ("Terms") are a contract between you and Odingard Security LLC ("Odingard", "we", "us" or "our"). They cover your use of Guardian, our online service for governing AI agents.

Please read them. By creating an account or using Guardian, you agree to these Terms. If you use Guardian for a company or other organization, you agree for that organization, and you confirm you have the authority to do so. In that case "you" means the organization.

If you and we have signed a separate written agreement (for example an Enterprise contract or a pilot agreement), that agreement wins where it conflicts with these Terms.

1. Who we are

Guardian is provided by Odingard Security LLC.

• Address: Liberty Hill, Texas
• Contact: [email protected]

2. The service

2.1 What Guardian does

Guardian sits between your AI agents and the actions they can take. An "agent" is software that acts for you, for example to send an email, change code, or call another company's service.

Before an action that goes through Guardian runs, Guardian gives one of three answers:

• Allow: the action runs at once.
• Ask: the action waits until a person you chose approves it, usually on a phone.
• Deny: the action does not run.

The answer follows the rules you set. No AI model makes the decision. If an approved action is changed afterwards (for example a different amount, target or command), the approval no longer counts and Guardian asks again.

Every action that goes through Guardian produces a signed receipt (see section 11).

When Guardian is unsure, or part of Guardian fails, the action does not run. This is on purpose ("fail closed"). It means an agent may sometimes be blocked from an action you wanted.

You can stop all of your agents at once with the emergency stop in the console.

2.2 You set the rules and you approve

You decide which actions are Allow, Ask or Off, and who can approve. Guardian applies your rules. It does not decide on its own what is safe, legal or wise for you. An approval by a person you chose is your decision.

2.3 Guardian only governs what goes through it

Guardian can only govern actions that are actually sent through it. There are two levels:

• Enforced: Guardian holds the credential (the key or token for the other service) and the agent never sees it. The action cannot happen through that connection without Guardian's answer. This applies to services you connect to Guardian.
• Gated: Guardian decides first, but the agent's own computer does the work. This applies to coding agents, your own agent code and tool servers you run. If an agent has other credentials or access of its own, it can act outside Guardian, and Guardian will not see or stop that action.

You are responsible for making sure your agents do not have other ways to act that bypass Guardian.

2.4 What Guardian does not cover today

Guardian does not currently cover:

• live payments or spending by agents;
• coding tools whose formats we have not yet verified;
• services we do not list as supported (other than web services you add with your own access token, where we say so);
• self-hosted or on-premise use.

We may add features over time. A feature is only part of the service once we make it available to you. We do not promise future features.

3. Accounts and eligibility

3.1 Who can use Guardian

You must be at least 18 years old and able to form a binding contract.

Guardian is built mainly for business use by developers and companies. We also offer plans for individuals and households.

3.2 Your account

Sign-in is handled by an outside identity service. We do not store your password. You must:

• give accurate information, including a working email address;
• keep your sign-in details secure and not share them;
• tell us promptly at [email protected] if you think someone has used your account without permission.

You are responsible for everything done through your account, including by your agents and the people you add.

3.3 Households and teams

Some plans let you add members to a household or team. The account holder is responsible for every member's use of Guardian.

Account holders must be 18 or older (section 3.1). A household member can be marked as a child. A child member may be added only by that child's parent or legal guardian, who is responsible for the child's use and for any data about the child that goes through Guardian. Household members marked as children must be at least 13. Do not add anyone under 13.

4. Your responsibilities

You agree to:

• Set and review your rules. Decide which actions are Allow, Ask and Deny, and keep those rules up to date.
• Choose approvers carefully. Only give approval rights to people you trust to make those decisions for you, and keep their devices secure.
• Use least-privilege credentials. When you connect a service, give Guardian only the permissions the agent actually needs. Where possible, use test accounts or limited credentials, especially while you are trying Guardian out.
• Use Guardian lawfully. Follow all laws that apply to you and to what your agents do, and follow the terms of the services you connect.
• Have the right to the data. Approvals and receipts can contain details about other people (for example an email recipient's address). You confirm you have the right, and any notice or consent the law requires, to send that data through Guardian and to share receipts that contain it.
• Keep data appropriate. Do not send data through Guardian that you are not allowed to share with a service like ours.

Your agents act for you. Your agents act on your behalf, not ours. You are responsible for every action that Guardian allowed under your rules or that a person you chose approved, and for any action your agents take outside Guardian.

Health information. Guardian is not a business associate under HIPAA (the US health privacy law) and we do not sign business associate agreements. You must not send protected health information through Guardian. Any health-related features in our demos use made-up (synthetic) data.

5. Acceptable use

You must not, and must not let anyone (including your agents):

• use Guardian to break the law, harm others, or send spam, malware or fraud;
• try to bypass, disable or trick Guardian's rules, approvals, limits or receipts, except through settings we provide;
• try to get into another customer's data or account;
• probe, scan or test Guardian's security without our written permission;
• interfere with or overload Guardian or the networks it runs on;
• copy, resell or rebuild Guardian, or reverse engineer it except where the law allows this;
• use Guardian to build a competing product;
• forge, alter or misrepresent a receipt.

Rate limiting of automated Deny traffic. We never charge for Deny answers. If an agent sends a sustained, high volume of automated requests that are denied, we may slow those requests down (rate-limit them) to protect the service. If we do, we will tell you.

We review abuse reports. You can report abuse to [email protected].

6. Plans, fees and metering

6.1 Plans

We offer free and paid plans. Current plans, prices and limits are shown on our pricing page and in the console. Some plans are sold by invoice under a separate contract (Business and Enterprise).

If an action would go over your plan's limits, Guardian refuses it with a clear message. It never skips an action silently.

We may change or end the Free plan and its limits with notice in the console.

6.2 What a billable action is

On plans that charge for usage (today, the Developer plan above its included amount), we charge for billable actions. One billable action is one unique, verified action that ran in production through Guardian.

We never charge for:

• Deny answers;
• Ask requests that nobody approved or refused;
• actions that failed;
• test ("sandbox") use;
• reading or checking receipts.

We count charges exactly and round to the cent once, on the invoice.

6.3 Overage cap

Plans with usage charges have a spending limit on extra usage (the "overage cap"). The default cap on the Developer plan is $500 of extra usage per billing period. When the cap is reached, further billable actions are refused with a clear message. We do not charge you past the cap. Test use keeps working.

The account owner can raise, lower or remove the cap in the console. If you raise or remove the cap, you agree to pay for usage up to the new level. The console shows how much you have used and when you are near or at a limit.

6.4 Payment and taxes

Payments are handled by Stripe. You enter your card details on Stripe's own pages. We do not see or store your full card details.

Payments are processed by our parent company, Six Sense Enterprise Services LLC, on behalf of Odingard Security LLC. Charges appear on your statement as ODINGARD GUARDIAN.

Subscriptions renew automatically at the end of each billing period (monthly or yearly, as you chose) until cancelled. You authorize us, through Stripe, to charge your payment method for each period and for any usage charges. For yearly plans, we will remind you before renewal as required by law.

Prices do not include taxes. We collect sales tax where required, through Stripe. You are responsible for any other taxes that apply to your purchase, other than taxes on our income.

6.5 Failed payments

If a payment fails, you keep your plan for 7 days. If payment is still not made after 7 days, your account moves to the Free plan and Free plan limits apply. Your agents and connections are not deleted because of the move, but you cannot add agents or connections beyond the Free limits (or any higher limit we have agreed with you), and protected actions over the Free monthly limit will be refused.

6.6 Price changes

We may change prices. If you have a subscription, we will give you at least 30 days' notice before a new price applies to you. The new price applies from your first renewal after the notice period. If you pay yearly, your price does not change during the year you have paid for. We never change past invoices. Your agents can never change your plan or prices.

6.7 Cancellation

You can manage your subscription in the billing portal (the Stripe Customer Portal). There you can cancel, switch plans, see and download invoices, and update your card, billing email and address.

You can cancel a paid subscription at any time. Cancellation takes effect at the end of your current billing period. You keep your plan until then. After that, your account moves to the Free plan unless you delete it.

Plan changes (upgrades and downgrades) take effect as shown in the Customer Portal when you make the change. For monthly plans, there are no partial refunds when you downgrade or cancel.

6.8 Refunds

Refunds are covered by our Refund Policy. Unless the Refund Policy or the law says otherwise, fees are not refundable.

7. The paid pilot

We offer a paid pilot for companies. In short:

• It costs $5,000 for 45 days, invoiced up front.
• The fee is credited in full toward an annual Business or Enterprise contract signed within 30 days of the pilot ending.
• You choose one workflow. We agree the success criteria with you in writing before the pilot starts.
• The pilot covers only what is proven in production on the day it starts. Features we release later may be offered as additions. They are not promised up front.
• There is no uptime commitment during a pilot.
• We ask you to use test or least-privilege credentials.
• Refunds for the pilot fee are covered in our Refund Policy.

A separate written pilot agreement governs each pilot. If it conflicts with these Terms, the pilot agreement wins.

8. Third-party services

8.1 Stripe

Payments run through Stripe and are also subject to Stripe's own terms. We are not responsible for Stripe's services.

8.2 Google

If you connect a Google account (for example Gmail), Guardian asks Google for permission to create and send email and to read message metadata such as headers and labels. We use this access only to carry out email actions a person approved through Guardian, and to check they happened. Guardian never lets an agent send an email on its own: every email an agent wants to send needs a person's approval first, and an email connection can be set only to Ask or Off.

Guardian's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, share it for advertising, or use it to train AI models.

Our Google app has not finished Google's review. Until it does, only users we add by hand can connect a Google account, and that access expires every 7 days. Google Calendar is not available. Other Google services are only offered once they are available in the console.

8.3 Services you connect

You may connect other services (for example GitHub, Slack, Okta, or other web services you add with your own access token). Those services are run by other companies under their own terms. When an action you allowed or approved runs, data goes to that service. We are not responsible for those services or what they do with your data.

Disconnecting. When you disconnect a service, Guardian deletes the connection and tries to destroy its stored credential. For Google, Guardian also tries to cancel the access at Google. If that fails, you can remove access in your Google Account settings. For other services, Guardian deletes its own copy but does not cancel the token at that service. You should revoke the token at that service yourself.

You can also send approval alerts to a web address you choose. You are responsible for that address and what receives the alerts.

9. Your data

You keep all rights in the data you and your agents send through Guardian ("your data"). You give us permission to store, process and send your data only as needed to run, secure, support and improve Guardian, to prevent abuse, and to follow the law.

Our Privacy Policy explains what we collect, how we use it, who we share it with, how long we keep it, and how to export or delete it. Please read it.

In short:

• You can download your data from the console ("download my data"). The file includes your agents, connections, permissions, approvals, decision records, billing status and the other records listed in the Privacy Policy, but never secrets such as passwords, tokens or keys.
• You can delete your account in the console. Deleting your account removes all of your data in one step. We keep only three things: the billing usage counts (kept 7 years for invoices and tax), a short record that the deletion happened, and any data under a legal hold. The billing settings change log keeps the change with your name replaced by "deleted-account", and copies in server logs and backups expire on their own schedules (see the Privacy Policy). While a legal hold applies, account deletion is refused and nothing is deleted.
• When you delete your account, we destroy the stored credentials for your connections and try to cancel Google access at Google. If that fails, you can remove access in your Google Account settings. For other services, the token stays valid at that service until you cancel it there.
• In a household or team, deleting your account removes only your own data and membership. The other members' data stays.
• If you have questions about export or deletion, contact us at [email protected].
• Each plan has a retention period for receipts and records. Automatic deletion on these schedules is not switched on today, so records are kept until you delete them or your account. We will update these Terms and the Privacy Policy before automatic deletion is switched on.

Keep your own copies of anything you need, including receipts.

Feedback. If you send us ideas or suggestions, we may use them without any duty to you.

10. Our rights

Guardian, its software and documentation belong to Odingard and its licensors. While you follow these Terms, we give you a limited, non-exclusive, non-transferable right to use Guardian for your own internal purposes under your plan. We keep all rights not given to you in these Terms.

11. Receipts and verification

Each action that goes through Guardian produces a receipt. A receipt is a digital document signed with Guardian's private key. Anyone can check a receipt with Guardian's published public key, without a Guardian account and offline. Any change to a receipt makes the check fail.

When we change our signing key, we keep the older public keys published so that older receipts can still be checked.

A receipt contains readable details of the action, for example the type of action, its target, an email's sender, recipients and subject line, the answer, and the approval. Some content, such as an email's body, appears only as a fingerprint (a "digest") that proves it has not changed but cannot be read back.

You decide who to share a receipt with. Sharing a receipt shares the details in it.

Checking receipts is free and unlimited on every plan.

A receipt shows what Guardian recorded about an action. It does not prove that the action was lawful, correct or a good idea, or anything about actions that did not go through Guardian.

12. Security

We use reasonable measures to protect Guardian and your data. These include keeping each customer's data separate in the database, holding connection credentials in a locked secrets store rather than in our database or logs, and failing closed when something goes wrong.

No service is perfectly secure. Guardian does not currently hold any security or compliance certification (such as SOC 2, ISO 27001, HIPAA or PCI), and we do not claim any.

13. Suspension and termination

13.1 By you

You can stop using Guardian at any time. You can cancel a subscription (section 6.7) or delete your account in the console.

13.2 By us

We may pause an agent, limit features, or suspend your account, with or without notice, if we reasonably believe:

• you or your agents are breaking these Terms, including the acceptable use rules;
• your use creates a security risk or could harm Guardian, other customers or anyone else;
• we must do so to follow the law or a valid order from an authority;
• you open a payment dispute or chargeback; in that case we may pause your paid plan while the dispute is open (see the Refund Policy).

Where it is reasonable and lawful, we will tell you why and give you a chance to fix the problem. We will restore access once the problem is fixed, unless we end your account.

We may end your account if you seriously or repeatedly break these Terms. We may also stop offering Guardian, or a plan, with at least 30 days' notice. If we do, we will refund prepaid fees for the unused time as described in our Refund Policy.

Failed payments are handled under section 6.5.

13.3 What happens when your account ends

Your right to use Guardian stops. Export any data you need before then. We handle your data as described in our Privacy Policy. Amounts you owe up to the end date remain due. Sections that by their nature should survive (including sections 4, 6, 9, 10, 14, 15, 16, 19 and 20) continue to apply.

14. Disclaimers

Guardian is a tool that applies your rules to actions that go through it. Please understand what it does not do:

• We do not guarantee against agent mistakes. Agents can make mistakes. Guardian does not check whether an allowed or approved action is correct, safe or lawful. Your rules and your approvers make those choices.
• We do not govern actions outside Guardian. Guardian cannot see or stop actions that do not go through it, including actions by an agent using its own credentials (section 2.3).
• We are not a payment processor. We do not take on liability for chargebacks, and we do not guarantee the outcome of any payment dispute.
• We do not check identities. Guardian does not verify anyone's identity beyond the person who approved an action. We make no "know your customer" (KYC) or anti-money-laundering (AML) claims.
• No certifications. See section 12.

To the fullest extent the law allows, Guardian is provided "as is" and "as available". We make no warranties of any kind, whether express or implied, including warranties of merchantability, fitness for a particular purpose, title and non-infringement. We do not promise that Guardian will be uninterrupted, error-free or always available.

Some places do not allow some of these disclaimers. In those places, they apply only as far as the law allows.

15. Limitation of liability

To the fullest extent the law allows:

• We are not liable for any indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, data or goodwill, even if we were told they were possible.
• We are not liable for actions your agents take, whether Guardian allowed them under your rules, a person you chose approved them, or they happened outside Guardian.
• Our total liability for all claims relating to Guardian or these Terms is limited to the amount you paid us for Guardian in the 12 months before the event that gave rise to the claim. If you paid us nothing, our total liability is limited to $100.

These limits apply whatever the legal theory, and even if a remedy fails of its essential purpose. They do not limit liability that the law does not allow to be limited.

16. Indemnity

You will defend and indemnify Odingard against claims, losses and costs (including reasonable legal fees) brought by a third party that arise from:

• your agents' use of Guardian and the actions they take;
• your data, including data about other people that you send through Guardian;
• your breach of these Terms or of the law.

We will tell you promptly about any such claim and let you control its defense. You may not settle a claim in a way that admits fault for us without our written consent.

17. Service availability and support

We work to keep Guardian available, but we make no uptime commitment unless you have a signed contract that includes one. Pilots have no uptime commitment.

We may need to take Guardian down for maintenance or to respond to a security issue.

Support levels depend on your plan:

Contact support at [email protected].

18. Changes to these Terms

We may update these Terms. If a change is material, we will give you at least 30 days' notice before it takes effect, in the console or by email to the address on your account. The "Last updated" date at the top shows when the Terms last changed.

If you keep using Guardian after a change takes effect, you accept the new Terms. If you do not agree, stop using Guardian and cancel before the change takes effect.

19. Governing law and disputes

These Terms are governed by the laws of the State of Texas, without regard to its conflict-of-law rules.

Any dispute relating to these Terms or Guardian will be decided only in the state or federal courts located in Williamson County, Texas, and you and we agree to the jurisdiction of those courts.

Before filing a claim, please contact us at [email protected] so we can try to resolve it informally.

20. General

• Entire agreement. These Terms, our Privacy Policy, our Refund Policy and any signed agreement with us are the whole agreement between you and us about Guardian.
• Assignment. You may not transfer these Terms without our written consent. We may transfer them as part of a merger, acquisition or sale of assets, or to an affiliate.
• Severability. If part of these Terms cannot be enforced, the rest still applies.
• No waiver. If we do not enforce a right, we do not give it up.
• Events beyond control. Neither of us is responsible for delays or failures caused by events beyond reasonable control, such as outages at our providers, natural disasters or acts of government. This does not excuse payment.
• Notices. We may send you notices in the console or by email to the address on your account. You can send notices to us at [email protected] or Liberty Hill, Texas.
• No third-party rights. These Terms do not give rights to anyone else.
• Export and sanctions. You may not use Guardian if you are in, or acting for someone in, a country or on a list that US law bars us from dealing with, and you must follow US export laws.

21. Contact

Odingard Security LLC Liberty Hill, Texas [email protected]