Terms of Service

1. Acceptance

By running a scan, creating an account, or purchasing a plan, you agree to these Terms. If you are using silobase on behalf of an organization, you represent that you are authorized to bind that organization, and “you” refers to both you and that organization. If you do not agree, do not use the service.

2. Description of the service

silobase is an upload-only, static metadata analyzer. You upload a Salesforce metadata export (a ZIP or SFDX source tree). silobase parses that export and detects every email-sending path it can find — Flows, workflow rules, email alerts, Apex senders, approval emails, and org-wide sender plus deliverability settings — then produces a blast-radius manifest, a safe-test plan, a deliverability checklist, and an exportable evidence ledger.

What the service does not do, plainly:

• It reads metadata only. It does not read email content, CRM records, or contact data.
• It never writes back to your org.
• It never sends email. It maps the paths that would send; it does not trigger one.
• Recipient resolution is heuristic. v1 is upload-only and does not connect to your live org over OAuth.
• It is not a Salesforce product, not Mailtrap, and not a live-org connection.

3. Accounts

A free scan requires no signup and returns a limited preview (one to two risky paths). Purchasing a Report or a Release Ledger, and viewing the full results, requires an account. You are responsible for the accuracy of the account details you provide, for keeping your credentials secure, and for activity under your account. Authentication is provided through Supabase, and optional two-factor authentication (2FA) using an authenticator app is available. You must be able to form a binding contract to use the service.

4. Acceptable use

Your use of silobase is subject to our Acceptable Use Policy. In summary, you agree to upload only metadata exports you are authorized to analyze, and not to misuse, overload, reverse-engineer, or attempt to gain unauthorized access to the service or the accounts or data of others. Violation of the Acceptable Use Policy is a breach of these Terms.

5. Plans, billing, and prices

Payments and subscriptions are processed by Stripe. silobase offers:

• Free scan. No signup. Shows one to two risky paths from your upload as a preview.
• Report — $99, one-time. Covers one org for one release cycle. Includes the full blast-radius manifest, the safe-test plan, the deliverability checklist, a PDF and CSV evidence export that is yours to keep, and free rescans for 14 days.
• Release Ledger — $39/mo, subscription. Covers unlimited orgs with release-over-release tracking. You can cancel at any time; on cancellation, billing stops at the end of the current billing cycle and there is no cancellation fee.

The Release Ledger renews automatically each cycle until you cancel. You authorize us, through Stripe, to charge your payment method for the plan you select. Prices are stated on the pricing page and may change; changes do not affect a one-time Report you have already purchased, and any change to subscription pricing applies from a future billing cycle.

6. Refunds and cancellation

• Report. The $99 Report carries a 14-day full refund. If the manifest surfaces nothing beyond what the free scan already showed you, email support@silobase.io within 14 days and we refund the $99.
• Release Ledger. Cancel at any time, with no cancellation fee. Billing stops at the end of the current cycle.

7. Intellectual property

silobase, including its software, the deterministic detector, the user interface, and all related content, is owned by {{TODO: confirm legal operating entity — likely Peakure LLC}} and its licensors and is protected by intellectual property law. These Terms grant you a limited, non-exclusive, non-transferable right to use the service for its intended purpose.

You retain all rights to the metadata you upload and to the evidence ledger you export (the PDF and CSV) — those exports are yours to keep. You grant us the limited license needed to store and process your uploads solely to produce and deliver the analysis you requested.

8. Third-party services

silobase relies on the following third-party subprocessors to operate. Their handling of data is described in our Privacy Policy.

• Supabase — Postgres database, authentication, and file storage for uploaded metadata (bucket metadata-uploads).
• Stripe — payment and subscription processing.
• Vercel — application hosting and Vercel Analytics, which is cookieless.
• Resend — transactional email delivery.
• Anthropic Claude API — generates plain-language explanations of detected risk and drafts the safe-test plan from the deterministic detector output. It is given the detector findings, not your raw org data.

Salesforce and any Salesforce marks are trademarks of their respective owners. silobase is an independent tool and is not affiliated with, endorsed by, sponsored by, or a product of Salesforce, and it is not Mailtrap.

9. Disclaimers

The service is provided “as is” and “as available,” without warranties of any kind, whether express or implied, to the extent permitted by law.

• Detection is best-effort static analysis of the metadata you upload, and recipient resolution is heuristic. silobase does not read your live org.
• silobase reduces the risk of unintended sandbox email; it does not guarantee that no email will send. It maps the paths that could send — it does not control your org.
• A completed scan is not a certification, a compliance attestation, or professional advice. You remain responsible for what you do in your Salesforce org.
• silobase is not a Salesforce product.

10. Limitation of liability

To the maximum extent permitted by law, {{TODO: confirm legal operating entity — likely Peakure LLC}} will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of data, revenue, or profits, arising out of or relating to your use of the service. Our total aggregate liability for any claim relating to the service will not exceed the amount you paid to us for the service in the twelve months preceding the event giving rise to the claim.

11. Termination

You may stop using silobase at any time, and you may cancel a Release Ledger subscription at any time as described above. We may suspend or terminate your access if you breach these Terms or the Acceptable Use Policy, or to protect the service or other users. On termination, uploaded metadata can be deleted; handling of your data is described in the Privacy Policy. Sections that by their nature should survive termination — including intellectual property, disclaimers, and limitation of liability — survive.

12. Changes to these Terms

We may update these Terms from time to time. When we do, we revise the “Last updated” date above. Material changes take effect when posted, and your continued use of the service after that constitutes acceptance of the revised Terms.

13. Governing law

These Terms are governed by the laws of {{TODO: confirm governing-law jurisdiction and venue}}, without regard to conflict-of-law rules. The operating entity and its registered address are {{TODO: confirm registered business address}}.

14. Contact

Questions about these Terms or a refund request: support@silobase.io. Security or vulnerability reports: security@silobase.io. Data requests: privacy@silobase.io.