End User License Agreement (EULA)
This End User License Agreement ("EULA") is a legally binding contract between you (the "Licensee", whether an individual or enterprise entity) and PrivacyScrubber ("Licensor", operated under BrandMeWeb) governing your installation, deployment, and use of the PrivacyScrubber software ecosystem.
Web, Ext, MCP Server & SDK
Zero phone-home telemetry
You retain 100% data ownership
PRO, TEAMS & Custom Tiers
1. Scope of Agreement & Covered Software
This license applies to all four execution environments distributed by PrivacyScrubber.
The "Software" licensed hereunder includes all executable binaries, scripts, libraries, extensions, and documentation comprising:
The client-side single page web application hosted at privacyscrubber.com.
The browser extension package distributed via the Chrome Web Store.
The Model Context Protocol package (@privacyscrubber/mcp-server) for local AI IDEs.
The isomorphic programmatic client package (@privacyscrubber/sdk) for CI/CD and apps.
2. License Grants & Permitted Use
Tier-specific operational parameters and seat allowances.
Free Community Tier
Personal / EvaluationGrants a non-exclusive, revocable license to access the Web Workspace for personal data masking and non-commercial evaluation. Core General Profile rules (15k chars) and 5k free quota across 30 specialized profiles per session. Developer SDK and MCP server included free with quota.
PRO Tier ($15/mo or $110 Lifetime)
Single Named UserGrants a commercial, single-user license to deploy the Chrome Extension across personal workstations, unlock all 30 specialized industry detection profiles with unlimited characters, batch document OCR, and custom regex creation.
TEAMS Tier ($99/mo Flat)
Multi-Seat / Organizational Grants an organization-wide license covering unlimited internal staff seats. Unlocks peer-to-peer cryptographic session handoffs (.pssession), centralized rules governance, and tamper-evident SHA-256 CISO audit receipts.
Developer SDK ($299/mo or $2,990/yr)
Internal Programmatic / RAG Grants an internal programmatic license for headless Node.js and WASM execution (@privacyscrubber/sdk) across unlimited internal backend nodes, microservices, ETL pipelines, and internal RAG vector databases. Commercial SaaS embedding requires an OEM agreement.
ENTERPRISE (Custom SLA)
Air-Gapped & Source Code EscrowGrants on-premise source code escrow, 100% air-gapped sovereign deployment, custom SIEM integration, bilateral DPA, and dedicated GRC compliance support for large multi-seat organizations.
3. Zero-Trust Technical Warranties & Data Ownership
Guarantees regarding data custody and endpoint confidentiality.
A. 100% Data Sovereignty: Licensor expressly warrants that the Software performs all data parsing, regex matching, and token substitution in local client memory. The Software contains zero server telemetry pipelines, zero remote logging modules, and zero backdoors capable of exfiltrating Licensee text or credentials.
B. Ownership of Input & Sanitized Output: Licensee retains exclusive, unconditional intellectual property ownership of all raw data, processed tokens, and rehydrated text. Licensor claims zero rights, title, or interest in any data processed through the Software.
C. Offline & Air-Gapped Operation: Licensee is explicitly permitted to operate the Software in fully disconnected, air-gapped network environments without invalidating license validity.
4. Restrictions & Disclaimers
Statutory warranty boundaries and automated detection limits.
A. Prohibited Activities: Licensee shall not reverse engineer, decompile, or extract the proprietary rule patterns for the purpose of constructing a competing commercial sanitization service, or resell individual license tokens outside the authorized organization.
B. Verification Obligation: Automated ZTDS™ detection profiles and local sanitization engines are algorithmic tools. While PrivacyScrubber provides 30 specialized profiles, Licensee remains responsible for auditing critical documents before external dispatch. The software is provided "AS IS" without warranty against unforeseen typographical edge cases.
C. Limitation of Liability: In no event shall Licensor's aggregate liability exceed the total amount actually paid by Licensee for the Software in the twelve (12) months preceding the incident.
D. No Bailment or Regulatory Escrow: Licensee acknowledges that Licensor does not act as a bailee, custodian, data processor, or escrow agent. Licensor maintains zero access to Licensee cryptographic keys, token mapping tables, or session states.
E. Sectoral Compliance Affirmation: The Software is a computational productivity tool and does not provide statutory compliance certification under HIPAA, FRE 502, GLBA, FinCEN SAR rules, EEOC/NYC LL 144, ITAR, FERPA, or the EU AI Act. Licensee affirms that it assumes full legal liability for its compliance determinations and prompt submissions to third-party LLMs.
F. Sole and Exclusive Remedy: Licensee's sole and exclusive remedy for any breach of this EULA or software defect shall be the termination of the license and, where applicable, a refund not to exceed the fees paid by Licensee during the preceding 12 months.
