Kilo Terms of Service
These Terms of Service (the "Terms") are a binding agreement between you and Kilo Routes ("Kilo", "we", "us", or "our"), the operator of the Kilo platform. Kilo Routes is operated by Raz Levi, based in Israel. They govern your access to and use of the Services (defined in Section 3).
Plain-English summary (non-binding). This is the master contract for everything Kilo offers - the qr2r.com / Kilo QR product, our dashboard, our API, our marketing sites, our trust and abuse pages, and any other Kilo "door" listed in Section 3. It folds in our Acceptable Use Policy and Privacy Policy. The grey quote boxes like this one throughout the document are friendly summaries to help you read faster - they are not part of the contract. If a summary and the numbered text ever conflict, the numbered text controls.
Throughout these Terms, each numbered section begins with a short plain-English summary in a quote box. Those summaries are explanatory only and are not binding. Only the numbered provisions themselves are binding.
By clicking "I agree" (or a similar control), creating an account, or accessing or using any of the Services, you agree to these Terms, the Acceptable Use Policy (the "AUP"), and the Privacy Policy. If you do not agree, do not use the Services.
1. Definitions
In short. These are the words we use in a specific way throughout the document. The most important ones: you/Customer means the account holder; an End User is anyone who scans a QR Code or clicks a Link; a Destination is wherever a Link points; and the Services are all of Kilo's products (our "Doors").
The following capitalized terms have the meanings below wherever they appear in these Terms, the AUP, and the Privacy Policy.
1.1 "Account" means the Kilo account and associated Organization through which you access the Services.
1.2 "Customer", "you", or "your" means the individual or legal entity that registers for or uses the Services. Where you use the Services on behalf of an organization, "you" includes that organization, and you represent that you are authorized to bind it.
1.3 "Customer Content" means all data, links, destinations, files (including PDFs), contact details, images, logos, text, QR code designs, and other content that you or your Authorized Users submit to, create within, or transmit through the Services.
1.4 "Destination" means the target URL, resource, application, phone number, address, or other endpoint to which a Link or QR Code resolves or redirects, including any content located at that target.
1.5 "Door" means a distinct product entry point offered by Kilo (for example, the Kilo QR product at qr2r.com). The current and planned Doors are enumerated in Section 3.2. All Doors are part of the Services and are governed by these Terms; where a Door diverges, that divergence is stated in these Terms or a brief published addendum - Kilo does not maintain separate legal agreements per Door.
1.6 "End User" means any person who scans a QR Code, clicks or visits a Link, views a landing page or hosted file served by the Services, or otherwise interacts with Customer Content through the Services, without necessarily holding an Account.
1.7 "Link" means a short link, redirect, dynamic link, typed link, campaign link, or other pointer created or managed through the Services, together with its associated slug and routing rules.
1.8 "QR Code" means a machine-readable code generated through the Services that encodes or resolves to a Link.
1.9 "Organization" means the workspace/tenant to which your Account belongs. Every Account belongs to at least one Organization, each with one or more seats and role-based access.
1.10 "Authorized User" means an individual you invite to, or grant a seat in, your Organization.
1.11 "Services" means, collectively, all Kilo websites, Doors, dashboards, application programming interfaces (the "API"), redirect and QR infrastructure, hosted landing pages and file hosting, trust and abuse surfaces, analytics and reporting features, and related software and services that link to or reference these Terms.
1.12 "Slug" means the path component that identifies a Link on a Kilo or Customer domain (for example, the abc in qr2r.com/abc).
1.13 "Free Services" means any portion of the Services provided at no charge, including the free tier and free file hosting.
1.14 "Beta Services" means any features or services identified as alpha, beta, preview, experimental, early access, or otherwise not generally available.
1.15 "Aggregate Data" means data that is aggregated and/or de-identified such that it does not identify you, any Authorized User, or any End User, including derived and statistical data generated from operation of the Services.
2. Acceptance, Eligibility, and Age Requirement
In short. You must be at least 18 and legally able to enter a contract. By using Kilo you accept these Terms on behalf of yourself and any organization you represent. Kilo is invite-only right now, and we can decline or revoke access.
2.1 Acceptance. By clicking to accept, creating an Account, or accessing or using the Services, you agree to be bound by these Terms, the AUP, and the Privacy Policy. If you are entering into these Terms on behalf of a company or other legal entity, you represent that you have authority to bind that entity.
2.2 Age requirement. You must be at least 18 years old to use the Services. The Services are not directed to, and may not be used by, anyone under 18. This minimum age is stated identically in the Privacy Policy.
2.3 Eligibility. You must be capable of forming a binding contract and not barred from using the Services under the laws of any applicable jurisdiction. You may not use the Services if you are the subject of sanctions or are located in an embargoed territory (see Section 22).
2.4 Invite-only access; right to refuse. During the current pre-launch period, access to the Services is invite-only and may be limited to allowlisted or invited users. We reserve the right, in our sole discretion, to accept, decline, limit, suspend, or revoke access to any Account or Organization, with or without cause, subject to the refund provisions in Section 11.
3. The Services and Doors
In short. Kilo is one platform delivered through several "Doors" (products). This section lists them. Some Doors and features are live; others are planned or reserved and don't work yet - we only owe you what is actually available to you.
3.1 One platform, multiple Doors. The Services are provided as a single platform accessed through one or more Doors. These Terms apply to all Doors and to all surfaces of the Services, including the dashboard, the API, our marketing sites, our public trust page (/verify), our abuse-reporting channel (/abuse), shared analytics reports, and our public file host (/p/).
3.2 Enumerated Services and Doors. The Services currently include, and these Terms govern, the following (availability of any specific Door, domain, or feature is as actually provided to you and may change under Sections 17 and 18):
- (a) Kilo QR - QR-code and short-link creation, management, and redirection, including the product served at
qr2r.comandapi.qr2r.com, the Kilo dashboard, and QR design tools; - (b) Hosted landing pages and typed links - including vCard, event, coupon, review, and similar link types that render Kilo-hosted pages;
- (c) Public file hosting - PDF/file hosting served at
/p/<id>(subject to Section 6.6); - (d) Custom domains (BYOD) - connecting your own domain to the Services (subject to Section 7);
- (e) Inner custom subdomains - Kilo-owned subdomains (for example
label.qr2r.com) provisioned to eligible plans; - (f) Premium/vanity link hosts - additional Kilo-operated link domains offered to eligible plans, some of which may be reserved or not yet resolvable;
- (g) Kilo Trace and other future Doors - additional products that Kilo may introduce as configuration-level entries, governed by these same Terms;
- (h) Marketing sites, trust and abuse surfaces, roadmap board, and shared reports - our public informational and trust-related pages.
3.3 Reserved and pre-release surfaces. Certain domains, Doors, or features may be listed, named, or shown in the product as "coming soon," reserved, earmarked, or upgrade prompts before they are available or functional. Reference to such a surface does not create any obligation to launch, maintain, or continue it, and it does not form part of the Services provided to you until we actually make it available to your Account.
3.4 License to use the Services. Subject to your compliance with these Terms, we grant you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to access and use the Services for your internal business or personal purposes during the term. All rights not expressly granted are reserved.
4. Accounts, Organizations, Seats, and Security
In short. You're responsible for your account, your team's seats, and keeping credentials safe. Admins in your Organization can see and manage its data and members. Turn on the security features we offer.
4.1 Registration. You must provide accurate information and keep it current. Accounts are created through supported sign-in methods (for example, Google OAuth). You are responsible for all activity under your Account.
4.2 Organizations and seats. The Services operate on an Organization (workspace) model: every Account belongs to at least one Organization, and paid capabilities (including seat counts and roles such as owner, admin, member, contributor, and viewer) are governed by your plan. Owners and administrators of an Organization can access, manage, and control that Organization's Customer Content, Authorized Users, billing, and settings. You are responsible for managing your Authorized Users and their permissions.
4.3 Credentials and security features. You are responsible for safeguarding your credentials, API keys, and any multi-factor authentication (including passkeys and recovery codes). We offer security features (including passkey/WebAuthn two-factor authentication and per-seat enforcement); you are responsible for enabling and configuring them appropriately. Notify us promptly at [email protected] of any suspected unauthorized access.
4.4 Our security measures. We maintain administrative, technical, and organizational measures designed to protect the Services, as further described in the Privacy Policy and Section 12. No system is perfectly secure, and we do not warrant that the Services will be uninterrupted, error-free, or immune from compromise.
4.5 Sharing features. If you share an analytics report or other content through a share link or invitation, the recipients you designate can view the shared data after authenticating, for as long as the share remains active. You are responsible for what you share and with whom, and for revoking shares you no longer intend.
5. Acceptable Use
In short. Our Acceptable Use Policy is part of this contract. Breaking it lets us disable Links, pause or suspend accounts, and act without notice. Read it.
5.1 AUP incorporated. Your use of the Services is subject to the AUP, which is incorporated into these Terms by reference. The AUP forms a material part of this agreement, and any breach of the AUP is a breach of these Terms.
5.2 Enforcement. We may enforce the AUP as described in the AUP and in Section 15, including by scanning Destinations, and by removing, disabling, blocking, pausing, or reclaiming any Link, QR Code, Slug, page, file, redirect, or domain, and by suspending or terminating Accounts, in our sole discretion and, where feasible, on a good-faith, contact-first basis, but without any obligation of prior notice.
5.3 Fair use of "unlimited" allowances. Where the Services or our marketing describe scans, clicks, or edits as "unlimited," that allowance is subject to fair use and to the AUP's prohibitions on automated, artificial, bot-generated, or abusive volume. We may apply reasonable technical limits to protect the Services and other customers.
6. Customer Content and License
In short. Your content stays yours. You give us only the narrow permission we need to host, cache, store, serve, redirect, and display it so the Services work. We do not claim a broad or perpetual grab, and we will not use your content to train AI models by default.
6.1 Ownership. As between you and Kilo, you retain all right, title, and interest in and to your Customer Content and Destinations. We claim no ownership of Customer Content.
6.2 License to operate the Services. You grant Kilo a worldwide, non-exclusive, royalty-free license to host, store, cache, back up, reproduce, transmit, redirect to, display, and serve your Customer Content, and to create the technical copies and pre-rendered pages, KV payloads, QR images, and analytics necessary, solely to the extent necessary to provide, secure, maintain, and improve the Services and to comply with law. This license is limited to operating the Services; it does not permit us to exploit your Customer Content for unrelated purposes. It ends when you delete the relevant Customer Content or terminate your Account, except for (a) copies retained in routine backups for a limited period, (b) Aggregate Data, and (c) copies we must retain to comply with law or enforce our rights.
6.3 No perpetual or derivative-works grab. For clarity, the license in Section 6.2 is not perpetual or irrevocable beyond the retention carve-outs above, and does not grant us the right to create derivative works of your Customer Content except technical adaptations required to operate the Services (such as format conversions, thumbnails, and cached renderings).
6.4 Your responsibility for Customer Content and Destinations. You are solely responsible for your Customer Content and Destinations, including their legality, accuracy, and your right to use and share them, and for obtaining all consents and providing all notices required for any personal data they contain (including data embedded in vCard, contact, or landing-page content).
6.5 Warranties re: content. You represent and warrant that your Customer Content and Destinations, and our provision of the Services in connection with them, do not and will not infringe or misappropriate any third-party right, violate any law, or breach the AUP.
6.6 Hosted files (PDF host). If you upload files to our file host, you are responsible for the content and legality of those files. Anonymous (not-signed-in) uploads are retained only for a limited period (currently seven (7) days) and are then deleted; uploads made from a signed-in Account are retained until you request their deletion or your Account is closed, subject to our retention practices in the Privacy Policy. File uploads may be limited by type and size and may be scanned or removed under the AUP and Section 15.
6.7 AI training. We will not use your Customer Content to train generative or machine-learning models for our own or third parties' general-purpose model development by default, and we contractually require our AI sub-processors (if any) not to train their models on your Customer Content. We may use Aggregate Data, and may use Customer Content as necessary to operate, secure, and support the Services (including safety scanning and abuse detection).
7. Custom Domains (BYOD) and Kilo-Provided Domains
In short. If you connect your own domain, you promise you're allowed to. If we give you a Kilo subdomain and you downgrade or lose eligibility, we may stop serving it. Misconfigured DNS or SSL on your side is your problem, not ours.
7.1 Ownership/authorization warranty. For any domain or subdomain you connect to the Services ("Custom Domain"), you represent and warrant that you own it or are authorized to use and connect it, and that its use with the Services does not infringe any third-party right or violate any law. You will indemnify us for claims arising from a Custom Domain you connect (see Section 14).
7.2 DNS/SSL configuration. You are responsible for your own DNS, domain registration, and any configuration required to verify and operate a Custom Domain. We are not liable for any interruption, misdirection, certificate/SSL failure, or downtime resulting from your domain configuration, your registrar, or your DNS provider.
7.3 Kilo-provided domains and downgrades. Where we provide a domain or subdomain (for example, an inner subdomain such as label.qr2r.com, or a premium/vanity host), your right to use it depends on your plan and eligibility. If you downgrade, lapse, or lose eligibility, we may cease serving Links on that Kilo-provided domain. Links on your own Custom Domain are treated as described in Section 9.
8. Third-Party Destinations; Conduit Disclaimer
In short. Kilo just points at Destinations - we don't run them and can't vouch for them. When you follow a Link you go to someone else's content at your own risk. We can disable a Link, but we can't control what lives at the other end.
8.1 We are a conduit. The Services transmit End Users to Destinations that we do not host, own, or control. We are a conduit for information controlled by others. We do not endorse, and are not responsible for, the content, legality, safety, accuracy, availability, or practices of any Destination.
8.2 Access at your own risk. End Users access Destinations at their own risk. Any dealings between an End User and a Destination or its operator are solely between them.
8.3 Limits of our control. We can address the Link, Slug, redirect, page, or pointer within the Services (including disabling or blocking it), but we cannot control, correct, or remove the underlying Destination content. Our ability to act on a Link does not make us responsible for the Destination.
8.4 No safety warranty. Any safety scanning, review, or verification we perform is described in Section 15 and is provided as a right we may exercise, not a duty or a warranty. It does not guarantee that any Link or Destination is safe, lawful, or free of harmful content.
9. Link and QR Lifecycle; Plan Changes, Pausing, and "Dead-QR" Handling
In short. This is the honest part about printed QR codes. If your subscription lapses, you get a grace period (currently 14 days) with full service; after that, Links above your new plan's cap are paused - they show a branded notice, keep their destination, and switch back on the moment you pay. Your oldest Links and any Links on your own domain keep working. We describe our current practice, but exact timings are best-effort and configurable, so treat the numbers as "at least / currently," not guarantees.
9.1 Link lifecycle. A Link may be active, archived, paused, deleted (in trash), or administratively locked. Paused and deleted Links do not count toward your plan's capacity limits; only active and archived Links do. When a Link cannot resolve to its Destination, the Services serve a branded interstitial page (for example, a "paused," "removed," "coming soon," "campaign ended," or "unavailable" page) rather than a raw error, except where technically not feasible.
9.2 Plan limits are operator-set and may change. Plan capabilities and limits (including numbers of active and archived Links, new Links per period, analytics visibility windows, seats, API access, and custom-domain eligibility) are configured by us and may be added, changed, or discontinued. Current limits are shown in the Services. Where these Terms or our materials state a specific limit, grace period, retention period, or timing, treat it as our current practice and as an "at least" or "currently" value that we may change under Sections 17 and 18; it is not a fixed guarantee.
9.3 Subscription lapse and grace period. If a payment fails or a subscription becomes past due, we currently provide a grace period (currently at least fourteen (14) days) during which your Organization keeps its full paid plan. This grace period is our current practice and may change.
9.4 Pausing over-cap Links after lapse or downgrade. After the grace period ends (on lapse) or upon a downgrade, your plan resolves to the applicable lower tier, and Links that exceed the limits of the resulting plan may be paused. When a Link is paused:
- (a) its Slug and Destination are preserved;
- (b) it serves a branded "paused" page inviting reactivation, and does not redirect to any Destination or owner fallback while paused;
- (c) we currently keep your oldest Links live and pause the newest first, so that Links within your resulting plan's capacity continue to resolve;
- (d) Links on your own Custom Domain are not paused for this reason; and
- (e) paused Links are reactivated (resume redirecting) promptly upon successful payment or re-upgrade, subject to processing and propagation time.
9.5 Best-effort enforcement. Enforcement of pausing, capacity limits, campaign caps, and similar controls is performed by periodic background processes that are best-effort and may be delayed, batched, or run on a recurring schedule. As a result, an over-cap Link may continue to resolve for some time after a grace period ends, and campaign or scan caps may overshoot by a short interval plus data-processing latency. We do not guarantee precise timing.
9.6 No guarantee of perpetual resolution. We do not guarantee that any Link, QR Code, or printed material will resolve to its Destination indefinitely. A Link may stop resolving to its Destination if you delete it, if it is paused (Section 9.4), if it is blocked or locked under Section 15, if your Account is suspended or terminated, if a Door or domain is discontinued, or as otherwise permitted by these Terms. You are responsible for the consequences of printing or distributing QR codes, and should account for these lifecycle behaviors when doing so.
9.7 Downgrade guard. Where a plan change would leave your Organization over the resulting plan's limits, the Services may refuse the change until you reduce usage or elect which Links to pause.
10. Slug Lifecycle, Cooldown, and Reuse
In short. Slugs aren't yours forever. Delete a Link and its Slug shows a branded "removed" page, then enters a cooldown (currently 90 days), and afterward may be issued to someone else. If your old printed code then points somewhere new, that's a known risk of reusing short Slugs - plan around it.
10.1 Slugs are licensed, not owned. You do not own any Slug on a Kilo-operated domain. We grant you the right to use a Slug for your Link while it is active, and we may reclaim, withhold, reserve, or reassign Slugs as described here or under Section 15.
10.2 Deletion, trash, and cooldown. When you delete a Link, its Slug stops resolving to your Destination and serves a branded "removed" page (an HTTP 410 "gone" response). The deleted Link is held in trash for a limited period (currently thirty (30) days), during which you may restore it together with its exact Slug; after that period, the Link's data is permanently deleted. The Slug itself enters a cooldown period (currently at least ninety (90) days) during which it is withheld from reuse; interaction with a cooling Slug may reset the cooldown. During cooldown, only you (the original owner) may reclaim the exact Slug. These periods are current practice and may change.
10.3 Reissue and reuse disclaimer. After cooldown, a released Slug returns to the available pool and may be registered by another customer, whose Link may resolve to an entirely different Destination. We are not responsible or liable for any consequence of a Slug being reused or resolving differently after deletion, cooldown, or reassignment, including for any QR code or printed material that continues to reference that Slug. You should not rely on a deleted Slug remaining associated with your content.
11. Fees, Billing, Refunds, and Cooling-Off
In short. Paid plans are billed by our payment processors (merchants of record), who handle your card - we never see it. Subscriptions auto-renew until you cancel. Generally no refunds, but consumers keep their statutory cooling-off rights (reduced pro-rata once service starts, and lost for premium exports you chose to receive immediately), and you get a pro-rata refund if we discontinue a paid service you've prepaid for.
11.1 Merchant of record. Paid subscriptions are sold and processed by our third-party payment providers acting as merchants of record (currently Polar and/or Creem). Your purchase is subject to the merchant of record's checkout terms in addition to these Terms. Card and payment-instrument data are handled by the merchant of record and their processors and never pass through or are stored by Kilo.
11.2 Fees and price. Fees are those presented at checkout by the merchant of record. Prices displayed within the Kilo dashboard are indicative catalog values; the amount actually charged is the price configured by the merchant of record at the time of purchase. In the event of a discrepancy, the merchant of record's checkout price governs the charge. You authorize the merchant of record to charge your payment method for all applicable fees.
11.3 Auto-renewal. Subscriptions renew automatically for successive periods at the then-current price until cancelled. You may cancel renewal at any time through the Services or the merchant of record; cancellation takes effect at the end of the current paid period.
11.4 Taxes. Fees are exclusive of taxes. You are responsible for all applicable taxes, except taxes on our net income. The merchant of record may collect and remit taxes as required.
11.5 No refunds (general rule). Except as expressly stated in this Section or required by non-waivable law, all fees are non-refundable, and there are no refunds or credits for partial periods, unused Links, downgrades, or unused features.
11.6 Statutory cooling-off; immediate performance; digital content. If you are a consumer with a non-waivable statutory right of withdrawal or cancellation (for example under Directive 2011/83/EU, the UK Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013, or the Israeli Consumer Protection Law 5741-1981), nothing in these Terms limits that right, and the following applies consistent with those laws: (a) where you expressly request at checkout that your subscription begin immediately, and you later withdraw within the statutory window, your refund will be reduced by an amount proportionate to the service already provided up to the time you notified us of withdrawal; (b) premium digital content generated, exported, or downloaded through the Services (including animated QR exports, vector (SVG) and PDF exports, and premium-template renders) is digital content supplied not on a tangible medium - where you gave prior express consent to its immediate supply and acknowledged that you thereby lose your withdrawal right for that content, that content is non-refundable once supplied; and (c) where your local law excludes cancellation for digital information (for example "information" as defined in the Israeli Computers Law 5755-1995), that exclusion applies. To exercise a withdrawal right, cancel through the Services or contact [email protected]. Refunds are processed by the merchant of record to your original payment method. These rights are in addition to, and do not limit, Sections 11.7 and 11.8.
11.7 Discontinuation refund. If we discontinue a paid Service or materially and permanently reduce a paid feature you have prepaid for (other than for your breach), we will provide a pro-rata refund of prepaid, unused fees for the discontinued portion. This is your sole remedy for discontinuation.
11.8 No refund upon termination for abuse or breach. If we suspend or terminate your Account for breach of these Terms or the AUP, no refund is due, and any outstanding fees become immediately payable.
11.9 Failed payments. If a payment fails, Section 9.3 (grace period) and Section 9.4 (pausing) apply. We may also suspend paid features until payment is resolved.
11.10 Gift and complimentary entitlements. Complimentary or gifted entitlements (for example, friends-and-family grants) confer no payment obligation and may revert to the free tier when the granted period ends. Partial-discount arrangements run through the merchant of record.
12. Warranties and Disclaimers
In short. We provide the Services "as is." We don't promise they'll always be up, error-free, or that scanning catches every bad link. Free and Beta features come with no promises at all.
12.1 AS IS / AS AVAILABLE. THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE," WITH ALL FAULTS. TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT, AND ANY WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE.
12.2 No guarantee of operation. We do not warrant that the Services will be uninterrupted, timely, secure, error-free, or free of harmful components, that Links or QR Codes will resolve at any given time, or that safety scanning will detect all harmful Destinations.
12.3 No uptime commitment / backups. Except under a separately signed service level agreement (SLA), we make no uptime or availability commitment. You are responsible for maintaining your own copies and backups of Customer Content. We are not liable for any loss, corruption, or failure to store Customer Content.
12.4 Free and Beta Services. Free Services and Beta Services are provided with no warranty and no SLA of any kind, and, as stated in Section 13.4, with no liability on our part.
13. Limitation of Liability
In short. If something goes wrong, our total liability is capped at the greater of USD $100 or what you paid us in the prior 12 months. We're never liable for indirect or knock-on losses like lost profits or lost data. And we carry zero liability for Free-tier and Beta features.
13.1 Exclusion of indirect damages. TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, GOODWILL, BUSINESS, OR DATA, OR COST OF SUBSTITUTE SERVICES, ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICES, WHETHER IN CONTRACT, TORT, OR OTHERWISE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
13.2 Liability cap. TO THE MAXIMUM EXTENT PERMITTED BY LAW, OUR TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICES WILL NOT EXCEED THE GREATER OF (a) ONE HUNDRED U.S. DOLLARS (USD $100) OR (b) THE TOTAL FEES YOU ACTUALLY PAID TO US FOR THE SERVICES IN THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE LIABILITY.
13.3 API terms cap. Liability arising from your use of the API is subject to the same cap in Section 13.2 and to Section 16.
13.4 Free and Beta Services zero-liability carve-out. NOTWITHSTANDING ANYTHING ELSE, WE HAVE NO LIABILITY WHATSOEVER, AND PROVIDE NO SLA OR INDEMNITY, WITH RESPECT TO FREE SERVICES OR BETA SERVICES. YOUR SOLE REMEDY FOR DISSATISFACTION WITH FREE OR BETA SERVICES IS TO STOP USING THEM.
13.5 Essential basis; exceptions. The disclaimers and limitations in Sections 12 and 13 are an essential basis of the bargain and apply even if a remedy fails of its essential purpose. Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable non-waivable law (for example, for death or personal injury caused by negligence, fraud, or willful misconduct).
14. Indemnification
In short. If your content, your destinations, your domains, or your misuse get us sued, you cover us. This is standard.
14.1 Your indemnity. You will defend, indemnify, and hold harmless Kilo and its affiliates, officers, employees, and agents from and against any third-party claims, damages, liabilities, losses, and expenses (including reasonable legal fees) arising out of or related to: (a) your Customer Content or Destinations; (b) your Custom Domains; (c) your use of the Services; (d) your violation of these Terms, the AUP, or any law; or (e) your infringement or misappropriation of any third-party right.
14.2 Procedure. We will notify you of the claim, allow you to control the defense, and reasonably cooperate at your expense; provided that any settlement must fully release us and must not admit fault or impose obligations on us without our prior consent (not to be unreasonably withheld). We may participate with our own counsel at our own expense.
14.3 Our indemnity (paid tiers). For Customers on a paid plan, and subject to the cap in Section 13.2, we will defend you against third-party claims alleging that the Kilo software itself (excluding Customer Content, Destinations, and third-party components) infringes such third party's intellectual property rights, and pay resulting damages finally awarded, provided you promptly notify us and cooperate. This Section 14.3 is our sole liability for infringement claims.
15. Content Moderation, Safety Scanning, Suspension, and Enforcement
In short. We may scan Destinations for safety and block, disable, pause, lock, or reclaim anything that looks abusive - often without notice, and we don't reveal why on the public page. Scanning is a right we exercise, not a promise we'll catch everything. We also run a public trust page (/verify) and abuse channel (/abuse).
15.1 Right, not duty, to scan and review. We may, but are not obligated to, scan, review, and classify Destinations and Customer Content for safety, security, and policy compliance, at creation, on edit, and on an ongoing basis, using our own and third-party tools. Editing a Link's Destination may trigger a fresh safety re-scan and reset the Link's trust status.
15.2 Enforcement actions. We may, in our sole discretion and where feasible on a good-faith, contact-first basis but without any obligation of prior notice: remove, disable, block, pause, or reject any Link, QR Code, Slug, hosted page, file, redirect, or domain; reclaim or reassign Slugs; apply an administrative lock that you cannot override; refuse to serve or re-scan content; and suspend, restrict, or terminate any Account or Organization. Blocked or locked Links may serve a generic "unavailable" page that does not disclose the reason for the action.
15.3 No safety warranty. Our scanning and review do not constitute a warranty, certification, or guarantee that any Link, Destination, or Customer Content is safe, lawful, or non-infringing, and create no duty of care to you or any End User. Section 8.4 applies.
15.4 Trust and abuse surfaces. We operate a public link-verification page (/verify, including the "+" suffix form) that shows only limited trust information, and a public abuse-reporting channel (/abuse). Information shown on these surfaces is provided as-is for transparency and does not constitute legal or safety advice.
15.5 Legal process and cooperation. We may access, preserve, and disclose Customer Content and Account information where we believe in good faith it is necessary to comply with law or legal process, enforce these Terms or the AUP, respond to abuse or security incidents, or protect the rights, property, or safety of Kilo, our users, or the public.
16. API and Developer Terms
In short. If you use our API, keep your keys secret, stay within scopes and rate limits, and don't abuse it. We can revoke keys or throttle you.
16.1 API access. API access is available on eligible plans. We issue API keys with defined scopes (for example, read or read/write). You are responsible for keeping API keys confidential and for all activity performed with your keys.
16.2 Scopes and limits. You must operate within the scopes granted to a key and within any rate, volume, or usage limits we apply. We may impose, change, or enforce rate limits and quotas to protect the Services.
16.3 Revocation and changes. We may revoke, rotate, or suspend API keys, and may change, deprecate, or remove API endpoints and features, at any time, with reasonable notice for material breaking changes where feasible. You must not attempt to circumvent access controls, scopes, or limits.
16.4 API liability. Your use of the API is part of the Services and is subject to all of these Terms, including the disclaimers in Section 12 and the limitation of liability in Section 13.
17. Modification of These Terms
In short. We can update these Terms. For material changes we'll give notice (e.g., by email), and they take effect at your next renewal; if you don't like a change, don't renew.
17.1 Right to modify. We may modify these Terms, the AUP, and the Privacy Policy from time to time. We will post the updated version with a new effective date.
17.2 Notice of material changes. For material changes, we will provide reasonable advance notice, for example by email to the Account's registered address or by an in-product notice. Material changes take effect upon the notice's stated effective date or, for subscription-affecting changes, at the start of your next renewal term, whichever is later, except where an earlier date is required by law or to address security, legal, or abuse concerns.
17.3 Acceptance / remedy. Your continued use of the Services after a change becomes effective constitutes acceptance. If you do not agree to a material change, your remedy is to stop using the Services and, for paid plans, to decline to renew.
18. Changes to and Discontinuation of the Services
In short. We can change, add, or retire features, Doors, and domains. If we permanently retire something you prepaid for, Section 11.7 gives you a pro-rata refund.
18.1 Right to change. We may add, modify, suspend, or discontinue any part of the Services, including Doors, domains, features, plan limits, and integrations, at any time.
18.2 Discontinuation refund. If we discontinue a paid Service you have prepaid for (other than for your breach), Section 11.7 (pro-rata refund) applies.
18.3 Effect on Links and QR Codes. Changes to or discontinuation of a Door, domain, or feature may affect the resolution of Links and QR Codes, including printed materials, as described in Sections 8, 9, and 10. We will use commercially reasonable efforts to provide branded interstitials rather than raw errors where feasible.
19. Beta and Pre-Release Services
In short. Beta features are experiments. They can break, change, or vanish, come with no promises and no liability, and anything we tell you about them is confidential.
19.1 Beta disclaimer. Beta Services are provided for evaluation, may be incomplete or unstable, and may be changed, suspended, or discontinued at any time. They are provided AS IS, with no warranty, no SLA, and, per Section 13.4, no liability.
19.2 Pre-launch status. The Services are currently offered on a pre-launch, invite-only basis, and some features are flagged as beta or experimental. Your use during this period is at your own risk.
19.3 Confidentiality of Beta. Non-public information about Beta Services is our confidential information; you will not disclose it without our consent.
20. Intellectual Property; Feedback; Aggregate Data; Publicity
In short. We own the Kilo platform and brand. You own your content. Ideas you send us, we can use freely. We own de-identified aggregate analytics. Don't use our trademarks without permission.
20.1 Kilo IP. We and our licensors own all right, title, and interest in and to the Services, including all software, designs, text, graphics, trademarks (including "Kilo" and "Kilo QR"), and other intellectual property. Except for the limited license in Section 3.4, no rights are granted to you in our IP.
20.2 Feedback. If you provide suggestions, ideas, or feedback about the Services, you grant us a perpetual, irrevocable, worldwide, royalty-free, sublicensable license (not an assignment) to use and exploit that feedback for any purpose, without obligation or compensation to you.
20.3 Aggregate Data. We may collect and use Aggregate Data to operate, secure, analyze, and improve the Services and for our other lawful business purposes. As between the parties, we own all Aggregate Data, provided it does not identify you, any Authorized User, or any End User.
20.4 Trademarks and publicity. You may not use our names, logos, or trademarks without our prior written consent, except as permitted by any published brand guidelines. We will reference that you are a customer, using your name or logo, only with your prior written consent, and we will stop if you withdraw it.
21. Copyright and Intellectual-Property Takedowns (DMCA)
In short. Think a Link or hosted content infringes your copyright or IP? Send a proper notice through /abuse or to our designated agent, and we'll act on it, including removing content and terminating repeat infringers.
21.1 Takedown notices. If you believe content made available through the Services (including a Destination, hosted page, or file) infringes your copyright or other intellectual-property rights, submit a notice through /abuse or to our designated copyright agent at [email protected]. Your notice should include: identification of the work and the allegedly infringing material (with a URL or Slug), your contact information, a statement of good-faith belief that the use is unauthorized, a statement (under penalty of perjury where applicable) that the information is accurate and you are authorized to act, and your physical or electronic signature.
21.2 Our response. We may remove, disable, or block access to allegedly infringing material and will, in appropriate circumstances, terminate the Accounts of repeat infringers. Where a counter-notice process applies, we will follow the applicable statutory procedure.
21.3 Misuse. Knowingly submitting a materially false takedown notice or counter-notice may subject you to liability.
22. Export Controls and Sanctions
In short. Don't use Kilo if sanctions or export laws say you can't, and don't route the Services to prohibited people, places, or uses.
22.1 You represent that you are not located in, and will not use the Services in or for the benefit of, any country or party subject to comprehensive sanctions or embargoes (including under U.S., EU, UK, UN, or Israeli law), and that you are not a denied or restricted party. You will comply with all applicable export-control and sanctions laws and will not use the Services for any prohibited end use.
23. Term, Suspension, and Termination
In short. These Terms apply as long as you use Kilo. You can stop anytime. We can suspend or terminate for breach. After termination, get your data out promptly - note there's no self-serve export today, so email us. And remember: closing an account does not automatically stop already-printed QR codes from resolving.
23.1 Term. These Terms apply from your first use of the Services and continue until your Account is terminated or these Terms are otherwise ended.
23.2 Your termination. You may stop using the Services and cancel your subscription at any time (Section 11.3). No account self-deletion tool exists today; to request account closure and data deletion, contact [email protected] (see the Privacy Policy).
23.3 Our suspension/termination. We may suspend or terminate your access, in whole or in part, immediately and without liability, if you breach these Terms or the AUP, if required by law, to protect the Services or third parties, or (for the convenience of either party) on reasonable notice.
23.4 Effect of termination. On termination: your license to use the Services terminates; we may delete or disable Customer Content and Links after a reasonable period; and Sections that by their nature should survive (including Sections 6.1, 8, 10.3, 11.5–11.8, 12, 13, 14, 20, 21, 22, 24, and 25) survive.
23.5 Data export window. Because no self-serve export exists today, if you wish to retrieve Customer Content before deletion, request it at [email protected] within thirty (30) days of termination. We will use commercially reasonable efforts to provide available data, subject to Section 12 and our technical capabilities.
23.6 Persistence of redirects; no automatic dead-QR. You acknowledge that suspension or termination of an Account does not by itself immediately stop all Links from resolving, and that a Link's Destination may continue to resolve until the Link or Slug is affirmatively removed, paused, or expires under Sections 9 and 10, or until we act under Section 15. Do not rely on account closure alone to disable a printed QR code; delete or pause the specific Links, or contact us.
24. Governing Law and Dispute Resolution
In short. Before anyone sues, we both try to work it out informally for 30 days. If that fails, disputes go to the courts named below. There is no arbitration clause.
24.1 Governing law. These Terms are governed by the laws of Israel, without regard to conflict-of-laws rules, and excluding the U.N. Convention on Contracts for the International Sale of Goods.
24.2 Informal resolution first. Before commencing any formal proceeding, the parties will attempt in good faith to resolve the dispute informally for a period of thirty (30) days after written notice of the dispute is sent to the other party (to Kilo at [email protected]). This informal-resolution period is a precondition to any court proceeding.
24.3 Exclusive venue. If the dispute is not resolved within the 30-day period, it will be brought exclusively in the competent courts of Tel Aviv, Israel, and the parties consent to the personal jurisdiction of those courts.
24.4 No arbitration; no class actions. These Terms do not provide for binding arbitration. To the extent permitted by law, each party waives any right to bring or participate in class or representative proceedings, and disputes will be resolved on an individual basis.
24.5 Injunctive relief. Either party may seek injunctive or equitable relief in a court of competent jurisdiction to protect its intellectual property or confidential information, notwithstanding Section 24.2.
24.6 Non-waivable consumer rights. Nothing in this Section deprives a consumer of the protection of mandatory provisions of the law of their country of residence.
25. General
In short. The usual closing clauses: these documents together are the whole deal, in a set order of priority; if one part is invalid the rest stands; you can't transfer the contract but we can; and here's how we give notice.
25.1 Entire agreement. These Terms, the AUP, the Privacy Policy, and any addenda or order forms referenced herein constitute the entire agreement between you and Kilo regarding the Services and supersede all prior agreements on the subject.
25.2 Precedence. In the event of a conflict, the following order of precedence applies (highest first): (a) a signed enterprise order form or master services agreement, if any; (b) a signed Data Processing Addendum, if any; (c) these Terms; (d) the AUP; (e) the Privacy Policy; and (f) other referenced documentation. A more specific, later-signed document controls over a general one for the subject it addresses.
25.3 Severability. If any provision is held unenforceable, it will be modified to the minimum extent necessary or severed, and the remaining provisions remain in effect.
25.4 No waiver. Failure to enforce a provision is not a waiver of the right to enforce it later.
25.5 Assignment. You may not assign these Terms without our prior written consent. We may assign them to an affiliate or in connection with a merger, acquisition, or sale of assets. These Terms bind permitted successors and assigns.
25.6 Force majeure. Neither party is liable for delays or failures caused by events beyond its reasonable control, including acts of God, war, terrorism, civil unrest, labor disputes, internet or utility failures, third-party provider failures, government action, or armed conflict.
25.7 Relationship. The parties are independent contractors. These Terms create no partnership, agency, joint venture, or employment relationship.
25.8 Notices. We may give notice to you by email to your Account address or by in-product notice. You may give us notice at [email protected] and, for formal notices, at our postal contact address: Kilo Routes, c/o Creem (Armitage Labs OÜ, our merchant of record), Telliskivi 57b/1, 10412 Tallinn, Estonia (a merchant-of-record care-of address, not Kilo Routes' registered office).
25.9 Third-party beneficiaries. There are no third-party beneficiaries of these Terms except our affiliates for purposes of Sections 12, 13, and 14.
25.10 Contact. Kilo Routes, c/o Creem (Armitage Labs OÜ, our merchant of record), Telliskivi 57b/1, 10412 Tallinn, Estonia. General: [email protected]. Legal: [email protected]. Privacy: [email protected]. Abuse/IP: [email protected] or /abuse.
These Terms incorporate the Acceptable Use Policy and Privacy Policy by reference.