1. Agreement to Terms

These Terms of Service ("Terms") constitute a legally binding agreement between you ("Customer", "you", or "your") and Perfect Design Enterprise (trading as Cyrus), a company incorporated in Malaysia ("Cyrus", "we", "us", or "our"), governing your access to and use of the Cyrus platform, including the web dashboard, APIs, embeddable widget, messaging channel integrations, and all related services (collectively, the "Service").

By creating an account, accessing the dashboard, embedding the widget, or using any part of the Service, you acknowledge that you have read, understood, and agree to be bound by these Terms, our Privacy Policy, our Acceptable Use Policy, and our Data Processing Agreement, each of which is incorporated by reference.

If you are accepting these Terms on behalf of a company or other legal entity, you represent and warrant that you have the authority to bind that entity. If you do not agree to these Terms, you must not use the Service.

2. Description of Service

Cyrus is an AI-powered conversational agent platform that enables businesses to deploy intelligent chat agents across multiple channels. The Service includes, but is not limited to:

Dashboard: A web-based management interface for creating and configuring AI agents, managing knowledge bases, viewing conversations, tracking analytics, managing leads, and administering bookings.
Embeddable Web Widget: A chat widget that can be embedded on Customer websites via a script tag, rendered in an isolated Shadow DOM to prevent CSS conflicts.
Channel Integrations: Connections to third-party messaging platforms including WhatsApp (via Meta Cloud API), Telegram (via Bot API), and web-based chat (via REST API and Server-Sent Events). Additional channels such as Facebook Messenger and Instagram Direct may be added in the future.
Knowledge Base Management: Tools for uploading, ingesting, and organizing documents (PDF, HTML, Markdown, plain text, URLs, sitemaps) that form the basis of agent responses, including automated knowledge base auditing and generation.
Conversational Booking System: An in-chat appointment scheduling system with business hours configuration, blackout dates, buffer times, and double-booking prevention.
Lead Capture: Automated collection of visitor contact information (name, phone, email, company) during conversations when buying intent is detected.
Structured Catalog Queries: The ability to upload product or service catalogs and enable agents to perform structured queries against that data using safe, parameterized query building.
Analytics Dashboard: Conversation analytics, knowledge gap identification, message feedback tracking, and usage reporting.
API Access: RESTful APIs for programmatic interaction with the Service, including chat endpoints, admin management, and webhook integrations.

We reserve the right to modify, update, or discontinue features of the Service at any time. We will provide reasonable notice for material changes that reduce functionality available under your current plan.

3. Account Registration

To use the Service, you must create an account. When registering, you agree to:

Provide accurate, current, and complete information during the registration process.
Maintain and promptly update your account information to keep it accurate, current, and complete.
Maintain the security and confidentiality of your login credentials, API keys, and any authentication tokens associated with your account.
Accept responsibility for all activities that occur under your account, whether or not authorized by you.
Immediately notify us at [email protected] if you become aware of any unauthorized use of your account or any other breach of security.

Each account corresponds to one business entity (tenant). Creating multiple accounts to circumvent plan limits, quotas, or rate limits is prohibited and may result in immediate suspension of all associated accounts.

You must be at least 18 years of age to create an account and use the Service. By creating an account, you represent and warrant that you are at least 18 years old and have the legal capacity to enter into a binding agreement.

4. Service Dependencies and Third-Party Providers

The Service relies on third-party infrastructure and AI providers to deliver its core functionality. You acknowledge and agree that:

LLM Providers: The Service uses large language models from providers including OpenAI, Anthropic, Google (Gemini), and xAI (Grok) to generate conversational responses, embeddings, summaries, and other AI-powered features. The specific model used may vary by configuration, availability, and fallback routing.
Messaging Platforms: Channel integrations depend on third-party platforms: Meta (for WhatsApp Business API), Telegram (for Bot API). These platforms have their own terms of service, privacy policies, and usage policies that apply independently.
Infrastructure Providers: The Service is hosted on third-party cloud infrastructure and uses third-party services for databases, caching, email delivery, payment processing, and TLS certificates.

Cyrus is not responsible or liable for:

Outages, downtime, or service degradation of any third-party provider.
Changes to third-party provider terms, policies, pricing, or API availability.
Data processing performed by third-party providers in accordance with their own privacy policies.
Rate limits, quotas, or usage restrictions imposed by third-party providers on their services.
Content moderation decisions made by third-party LLM providers that may affect agent responses.

Customer is responsible for reviewing and complying with the terms of service and acceptable use policies of each third-party provider whose services are accessed through the Cyrus platform, including but not limited to the WhatsApp Business Terms of Service and the Telegram Bot API Terms of Service.

5. Quotas, Rate Limits, and Plans

The Service is offered under tiered subscription plans, each with defined limits. These limits may include, depending on the plan:

Monthly Message Quota: The maximum number of messages your agents may process per calendar month.
Monthly Token Quota: The maximum number of LLM tokens consumed per calendar month.
Rate Limits: Requests per minute (RPM) and requests per second (RPS) caps on API endpoints.
Bot Limit: The maximum number of agents you may create under your account.
Document Limit: The maximum number of knowledge base documents per agent.
Per-IP Rate Limits: Rate limits applied per IP address on widget chat endpoints to prevent abuse.

When your account exceeds its monthly message or token quota, your agents will respond to end users with a configurable over-quota message instead of generating an AI response. No LLM calls will be made on your behalf until the quota resets. Quotas reset on the 1st of each calendar month at 00:00 UTC.

Attempting to bypass or circumvent rate limits or quotas through any means — including but not limited to creating multiple accounts, cycling API keys, IP rotation, or exploiting timing windows — is strictly prohibited and constitutes a material breach of these Terms. Such activity may result in immediate suspension of your account without prior notice.

Plan details, including specific quota amounts and pricing, are as described on our pricing page. We may update plan features and limits from time to time. Existing customers will receive at least 30 days notice before any reduction in limits that affects their current plan.

6. Payment Terms

Paid plans are billed on either a monthly or annual basis, as selected by you at the time of subscription. All prices are as listed on our pricing page and are exclusive of applicable taxes unless otherwise stated.

Billing Cycle: Monthly subscriptions are billed on the same date each month. Annual subscriptions are billed on the anniversary of your subscription start date.
Annual Discount: Annual billing includes a discount of approximately 17% compared to the equivalent monthly rate, as displayed on the pricing page.
Regional Pricing: Prices may vary by region. Your region is automatically detected based on your IP address at the time of subscription and cannot be manually selected or changed.
Payment Methods: We accept payment methods as supported by our payment processor. You are responsible for keeping your payment method current and valid.
Failed Payments: If a payment fails, we will attempt to charge your payment method again. If payment remains unsuccessful after reasonable retry attempts, we may downgrade your account to a free plan or suspend your account until payment is resolved.
Refunds: Monthly subscriptions are non-refundable. Annual subscriptions may be refunded on a pro-rata basis within the first 14 days of the subscription period. After 14 days, annual subscriptions are non-refundable.
Price Changes: We may change our prices at any time. We will provide at least 30 days advance notice by email before any price change takes effect. The new price will apply at the start of your next billing cycle following the notice period. If you do not agree with a price change, you may cancel your subscription before the new price takes effect.

7. LLM Output Disclaimer

This section contains critical limitations that affect your use of the Service. Please read it carefully.

The conversational responses generated by agents on the Cyrus platform are produced by external large language model (LLM) providers. Despite the guardrails and quality controls that Cyrus implements — including hallucination prevention prompts, off-topic handling rules, abuse detection, confidence-based response toning, and source citation requirements — the nature of LLM technology means that generated outputs may be:

Inaccurate: Responses may contain factual errors, fabricated information, or statements not supported by the Customer's knowledge base, even when guardrails are in place.
Incomplete: Responses may omit relevant information available in the knowledge base or fail to fully address an end user's question.
Inappropriate: Despite content filtering and behavioral rules, responses may occasionally contain content that is offensive, misleading, or unsuitable for specific audiences or use cases.
Legally Non-compliant: Responses may not comply with specific laws, regulations, or industry requirements applicable to the Customer's jurisdiction or sector.

Cyrus does not guarantee that agent responses will be accurate, complete, appropriate, or compliant with any particular law or regulation. The Customer acknowledges and agrees that:

Customer is solely responsible for monitoring the outputs of their agents, including reviewing conversation transcripts and end-user feedback available through the dashboard.
Customer is liable for all responses sent by their agents to end users, regardless of whether those responses were generated by an LLM provider or derived from the Customer's knowledge base.
Customer should not deploy agents in contexts where inaccurate responses could cause physical harm, financial loss, legal liability, or violation of regulated professional standards (e.g., medical advice, legal counsel, financial advisory) without implementing appropriate human oversight and review processes.
Customer is responsible for configuring their agent's persona, knowledge base, and behavioral settings in a manner that minimizes the risk of harmful or misleading responses.

8. Data Handling

We take data handling seriously. The following principles govern how we process your data:

Ownership: Customer retains full ownership of all content uploaded to or created within the Service, including knowledge base documents, catalog data, conversation transcripts, lead information, and booking records.
No Sale of Data: We do not sell, rent, or trade Customer data or end-user data to any third party, under any circumstances.
No AI Training: We do not use Customer content, conversation data, or end-user data to train, fine-tune, or improve AI models — whether our own or those of third-party providers. Your data is used solely to deliver the Service to you.
Processing: We process Customer data as described in our Privacy Policy and, where applicable, under the terms of our Data Processing Agreement.
Controller/Processor Relationship: With respect to personal data of end users who interact with Customer's agents, Customer acts as the data controller and Cyrus acts as the data processor. Customer is responsible for establishing a lawful basis for processing end-user personal data, providing appropriate privacy notices to end users, and responding to data subject access requests.
Data Residency: The Service is hosted on infrastructure located in Germany (Hetzner, Falkenstein data center). Customer data is stored and processed in this region. LLM API calls may be routed to provider infrastructure in other jurisdictions as determined by the LLM provider.
Encryption: Sensitive credentials (channel tokens, API secrets) are encrypted at rest using Fernet symmetric encryption. Data in transit is encrypted using TLS.

9. Intellectual Property

Our Property: Cyrus and its licensors retain all right, title, and interest in and to the Service, including the platform software, APIs, algorithms, retrieval systems, prompt architectures, user interfaces, documentation, trademarks, trade dress, and all related intellectual property rights. Nothing in these Terms grants you any right to use our trademarks, logos, or brand elements except as expressly permitted.

Your Content: You retain all intellectual property rights in the content you upload to or create within the Service, including knowledge base documents, catalog data, persona configurations, and any other materials you provide ("Customer Content"). We claim no ownership over Customer Content.

License to Us: You grant Cyrus a limited, non-exclusive, worldwide, royalty-free license to host, store, process, retrieve, embed, and display Customer Content solely for the purpose of providing the Service to you. This license terminates when you delete the relevant content or close your account, subject to the data retention period described in Section 12.

Widget Branding: Agents deployed using the free plan must display the "Powered by Cyrus" branding in the widget. Paid plans may remove this branding. Tampering with, hiding, or obscuring the branding on the free plan via CSS injection, DOM manipulation, or any other means is a violation of these Terms.

Feedback: If you provide us with suggestions, ideas, or feedback about the Service, you grant us an unrestricted, perpetual, irrevocable, royalty-free license to use, implement, modify, and incorporate such feedback into the Service without obligation to you.

10. Acceptable Use

Your use of the Service is subject to our Acceptable Use Policy, which is incorporated into these Terms by reference. In addition to the restrictions set out in that policy, you agree that:

If you integrate with WhatsApp, you must comply with the WhatsApp Business Terms of Service and the WhatsApp Business Policy.
If you integrate with Telegram, you must comply with the Telegram Bot API Terms of Service.
You must comply with the acceptable use policies of whichever LLM provider powers your agent (OpenAI, Anthropic, Google, or xAI, as applicable).
You must not use the Service to send spam, unsolicited bulk messages, or automated messages that violate applicable anti-spam laws.
You must not upload or cause agents to transmit content that is illegal, defamatory, fraudulent, harassing, threatening, or that infringes the intellectual property rights of others.
You must not impersonate a real person, government entity, or organization in a manner that is deceptive or misleading to end users.
You must not process sensitive categories of personal data (health, financial, biometric, children's data, racial or ethnic origin, political opinions, religious beliefs, sexual orientation) through the Service without obtaining appropriate explicit consent from the data subjects and implementing necessary safeguards.
You must not attempt to bypass, circumvent, or exploit quotas, rate limits, or usage restrictions through any technical or non-technical means.
You must not reverse-engineer, decompile, disassemble, or attempt to derive the source code of any part of the Service.
You must not access or attempt to access other customers' data, accounts, or resources.

11. Indemnification

You agree to indemnify, defend, and hold harmless Perfect Design Enterprise (trading as Cyrus), its officers, directors, employees, agents, and affiliates from and against any and all claims, liabilities, damages, losses, costs, and expenses (including reasonable legal fees) arising out of or related to:

Agent Responses: Any claims by end users or third parties arising from responses generated by your agents, including claims of misinformation, defamation, professional negligence, or emotional distress.
Customer Content: Any claims arising from content you upload to the knowledge base, including claims of intellectual property infringement, privacy violations, or publication of confidential information.
Channel Violations: Any claims, fines, or penalties arising from your violation of WhatsApp Business Terms, Telegram Bot API Terms, or any other messaging platform's terms of service or policies.
Privacy Law Violations: Any claims, regulatory actions, or fines arising from your failure to comply with applicable data protection and privacy laws in your capacity as data controller of end-user personal data, including but not limited to the General Data Protection Regulation (GDPR), Malaysia's Personal Data Protection Act 2010 (PDPA), and any other applicable data protection legislation.
End-User Complaints: Any claims or complaints from end users regarding the behavior, accuracy, or appropriateness of your agents, or regarding the collection and processing of their personal data.
Acceptable Use Violations: Any claims arising from your violation of our Acceptable Use Policy or these Terms.

This indemnification obligation survives termination or expiration of these Terms.

12. Account Suspension and Termination

Termination by Customer: You may terminate your account at any time by contacting us at [email protected] or through the dashboard settings. Upon termination, your current billing period will not be refunded (except as described in Section 6), and your agents will immediately cease responding to end users.

Termination by Cyrus: We may terminate or suspend your account under the following circumstances:

Immediate Suspension (No Cure Period): We may immediately suspend your account without prior notice for egregious violations, including: sending spam or unsolicited bulk messages through any channel; processing sensitive personal data without consent in a manner that poses imminent risk; attempting to bypass rate limits or quotas; accessing or attempting to access other customers' data; or any activity that poses an immediate security risk to the Service or its users.
Suspension with Cure Period: For non-critical violations, we will provide written notice describing the violation and give you 7 calendar days to remedy the issue. If the violation is not cured within the cure period, we may suspend or terminate your account. Non-critical violations include: failure to update inaccurate account information; moderate acceptable use policy violations; channel provider policy violations that do not involve spam or data breaches.
Payment Failure: If payment for a paid plan fails and remains unresolved after reasonable retry attempts and notice, we may downgrade your account to a free plan or suspend access until payment is resolved.
Channel Provider Action: If a messaging platform (WhatsApp, Telegram, or other) bans, restricts, or takes action against your account on their platform due to policy violations, we may suspend the corresponding channel integration on the Cyrus platform.

Effect of Termination: Upon termination of your account:

All agents will immediately stop processing new messages.
Your access to the dashboard will be revoked.
API keys associated with your account will be deactivated.
Your data (knowledge base documents, conversations, leads, bookings, analytics) will be retained for 90 calendar days following termination. During this period, you may request a data export by contacting us. After 90 days, all data will be permanently deleted.

13. Limitation of Liability

Service "As Is": The Service is provided on an "as is" and "as available" basis, without warranties of any kind, whether express, implied, statutory, or otherwise. Cyrus specifically disclaims all implied warranties of merchantability, fitness for a particular purpose, non-infringement, and any warranties arising from course of dealing or usage of trade. We do not warrant that the Service will be uninterrupted, error-free, secure, or free of harmful components.

Liability Cap: To the maximum extent permitted by applicable law, Cyrus's total aggregate liability to you for all claims arising out of or relating to these Terms or the Service — whether in contract, tort (including negligence), strict liability, or any other legal theory — shall not exceed the total amounts actually paid by you to Cyrus during the twelve (12) months immediately preceding the event giving rise to the claim.

Exclusion of Damages: To the maximum extent permitted by applicable law, Cyrus shall not be liable for any indirect, incidental, special, consequential, punitive, or exemplary damages, including but not limited to: loss of profits, revenue, business opportunities, goodwill, or data; cost of procurement of substitute services; or any other intangible losses, even if Cyrus has been advised of the possibility of such damages.

Exceptions to Liability Cap: The limitations set out above shall not apply to:

Liability arising from Cyrus's willful misconduct or gross negligence.
Liability arising from a data breach caused by Cyrus's failure to implement reasonable security measures.
Liability for infringement of the Customer's intellectual property rights by Cyrus.
Any liability that cannot be limited or excluded under applicable law.

14. Governing Law and Disputes

These Terms shall be governed by and construed in accordance with the laws of Malaysia, without regard to its conflict of law provisions.

Any dispute, controversy, or claim arising out of or relating to these Terms, or the breach, termination, or invalidity thereof, shall be submitted to the exclusive jurisdiction of the courts of Kuala Lumpur, Malaysia. Both parties consent to the personal jurisdiction of such courts and waive any objection to venue.

Before initiating formal legal proceedings, both parties agree to attempt in good faith to resolve any dispute through informal negotiation for a period of at least 30 days following written notice of the dispute.

15. Changes to Terms

We may modify these Terms from time to time. When we make material changes, we will:

Provide at least 30 days advance notice by sending an email to the address associated with your account.
Update the "Last updated" date at the top of this page.
Where feasible, provide a summary of the key changes.

Your continued use of the Service after the effective date of any modified Terms constitutes your acceptance of the changes. If you do not agree with the modified Terms, you must stop using the Service and may terminate your account as described in Section 12.

Non-material changes (such as typographical corrections, formatting updates, or clarifications that do not alter your rights or obligations) may be made without advance notice.

16. General Provisions

Entire Agreement: These Terms, together with the Privacy Policy, Acceptable Use Policy, Data Processing Agreement, and any applicable order forms, constitute the entire agreement between you and Cyrus with respect to the Service and supersede all prior agreements, representations, and understandings.
Severability: If any provision of these Terms is found to be unenforceable or invalid by a court of competent jurisdiction, that provision shall be limited or eliminated to the minimum extent necessary, and the remaining provisions shall remain in full force and effect.
Waiver: Our failure to enforce any right or provision of these Terms shall not constitute a waiver of that right or provision.
Assignment: You may not assign or transfer your rights or obligations under these Terms without our prior written consent. We may assign our rights and obligations without restriction, including in connection with a merger, acquisition, or sale of assets.
Force Majeure: Neither party shall be liable for any delay or failure to perform resulting from causes beyond its reasonable control, including but not limited to acts of God, natural disasters, war, terrorism, pandemic, government actions, power failures, internet disruptions, or third-party service outages.
No Third-Party Beneficiaries: These Terms do not create any third-party beneficiary rights. End users who interact with Customer's agents are not parties to these Terms and do not acquire any rights under them.

17. Contact

If you have questions about these Terms, please contact us:

Email: [email protected]
Entity: Perfect Design Enterprise (trading as Cyrus)
Website: meetcyrus.ai