Plain-language summary. AiOS turns your organization's knowledge and tool data into scores, insights, and plans. The insights are decision support, not professional advice; AI-generated content can be wrong and needs human review before you act on it. Your connector credentials stay on the server, are never shown again, and you can delete them at any time. This page explains all of that formally.
01 · Agreement
Terms of Service
These Terms govern access to and use of the AiOS decision-intelligence platform ("the Service") operated by ReWiseEd ("we", "us"). By accessing the Service you agree to these Terms. If you use the Service on behalf of an organization, you represent that you are authorized to bind that organization.
1. The Service
AiOS ingests organizational knowledge (via connectors you configure, files, and manual input), structures it into skills, computes performance scores and outcomes, and generates insights and action plans. Portions of the Service are AI-assisted (see the AI & Responsible Use Policy).
2. Accounts & credentials
Access to the console may be protected by an operator password. You are responsible for keeping it confidential and for all activity under it.
Third-party connector credentials (API tokens, OAuth grants) that you supply must be ones you are authorized to use. You are responsible for complying with each provider's terms when connecting their API.
We recommend least-privilege, read-only credentials wherever the provider supports them.
3. Acceptable use
No use that violates law, third-party rights, or the terms of connected providers.
No attempts to probe, disrupt, or overload the Service or to access data of another organization.
No ingestion of content you lack the right to process — including personal data beyond what your own policies and applicable law permit.
4. Your data, our licence
You retain all rights to the knowledge, credentials, and data you supply. You grant us a limited licence to process it solely to operate the Service for you. We claim no ownership of your skills, insights, or exports.
5. Intellectual property
The Service's software, design, and branding are our property or that of our licensors. Scoring is performed with public-domain mathematical methods (weighted composite indices, benchmark normalization, exponential smoothing); the specific configuration of dimensions, weights, and benchmarks is ours. Third-party frameworks are used under their licences (see Attributions).
6. Warranty disclaimer
The Service is provided "as is" and "as available", without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. We do not warrant that scores, benchmarks, insights, narratives, or plans are correct, complete, or suitable for your circumstances.
7. Limitation of liability
To the maximum extent permitted by law, we are not liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, data, or goodwill, arising from or related to the Service — including decisions made in reliance on its outputs. Our aggregate liability for all claims shall not exceed the greater of the amounts you paid for the Service in the 12 months preceding the claim or USD 100.
8. Termination & changes
We may modify or discontinue the Service or these Terms; material changes will be reflected on this page with an updated date. You may stop using the Service at any time and request deletion of your data (see GDPR).
9. Governing law
These Terms are governed by the laws of India, and disputes are subject to the exclusive jurisdiction of the competent courts having jurisdiction over ReWiseEd’s registered office in India.
02 · Privacy
Privacy Policy
What we collect
Knowledge content you ingest — text fragments, documents, and items synced from connectors — plus the skills structured from them.
Connector credentials you supply (API tokens, OAuth tokens). Stored server-side only, never returned to the browser, and never included in exports.
Operational logs — an append-only audit trail of administrative actions (connect, sync, sign-in events) with timestamps.
Session cookie — a single strictly-necessary cookie (aios_session) to keep an operator signed in. No advertising, analytics, or cross-site tracking cookies are set, so no cookie-consent banner is required.
What we do NOT collect
No sale of data, no profiling for advertising, no third-party trackers.
Connector syncs pull only the fields needed for knowledge extraction, with item limits — not full-mailbox or full-database copies.
How data is used
Solely to operate the Service: structuring knowledge, computing scores and outcomes, generating insights, and maintaining security (audit log). When the optional AI features are enabled, relevant content is sent to our AI provider to be processed (see AI Policy).
Sub-processors
Hosting: Railway Corp. (United States) — application and data hosting.
AI processing: Anthropic PBC (US) — only when AI extraction/narratives are enabled; content submitted for processing is governed by Anthropic's commercial API terms, under which API inputs and outputs are not used to train models.
Connected providers: data is pulled from the tools you connect under your own agreements with those providers.
Retention & deletion
Knowledge, skills, and audit data persist until you delete them or request deletion. Disconnecting a connector deletes its stored credentials and unstructured raw items immediately. Contact privacy@rewiseed.com for full erasure.
Security
Credentials are held server-side only; the console can be password-gated; sessions use HMAC-signed cookies; administrative actions are recorded in an append-only audit log; transport is encrypted (TLS) on the hosted service.
03 · EU/UK Data Protection
GDPR Statement
Where the EU/UK General Data Protection Regulation applies, the organization deploying AiOS is the controller of personal data contained in ingested knowledge; we act as processor on the controller's documented instructions (this configuration and these Terms).
Legal bases
Processing rests on legitimate interest (organizational knowledge management and performance analysis) and/or contract performance. Controllers are responsible for ensuring an appropriate basis for personal data they choose to ingest.
Data-subject rights
Individuals may exercise the rights of access, rectification, erasure, restriction, portability, and objection. Requests should go to the deploying organization (controller); we support fulfilment — knowledge items and skills can be inspected, exported (JSON/YAML/Markdown), corrected, and deleted from the console, and erasure requests to privacy@rewiseed.com are honoured without undue delay and at most within 30 days.
Automated decision-making (Art. 22)
AiOS does not make legally significant automated decisions about individuals. Scores and insights describe the organization, not employees; agent-runnable skills execute operational workflows subject to guardrails and human approval gates. Controllers must not configure the Service to make consequential decisions about individuals without meaningful human review.
International transfers
Hosting and AI processing may occur in the United States. Where required, transfers rely on Standard Contractual Clauses or an applicable adequacy framework of the relevant sub-processor. A Data Processing Addendum is available on request: legal@rewiseed.com.
India — Digital Personal Data Protection Act (DPDP), 2023
Where Indian personal data is processed, the deploying organization is the Data Fiduciary and we support its DPDP obligations in-product: a consent register with withdrawal, a 90-day data-principal request register (access / correction / erasure / nomination), purpose-based retention with automated erasure of raw knowledge, encryption at rest, and a tamper-evident audit log retained for at least one year.
Grievance Officer
Complaints and data-principal requests go to the Grievance Officer, who acknowledges within 48 hours and resolves within the statutory window:
On becoming aware of a personal-data breach affecting the Service, we follow a standing playbook:
0–4 hours — contain & scope: isolate affected systems, preserve the tamper-evident audit log, identify data categories and an initial count of affected individuals.
Within 24 hours — processor clock: any processor of ours must notify us within 24 hours of its own discovery; we log receipt in the audit trail.
Within 72 hours — regulator: notify the controller (and, where we act as fiduciary, the Data Protection Board of India / relevant supervisory authority) with the nature of the breach, categories and approximate numbers, likely consequences, and remedial actions.
Without undue delay — individuals: notify affected data principals with plain-language guidance on protective steps.
Within 14 days — post-mortem: documented root cause, corrective actions, and playbook updates; summary retained in the audit log.
04 · Artificial Intelligence
AI & Responsible Use Policy
Where AI is used
Skill extraction — turning raw knowledge into structured skills (trigger, steps, guardrails). Heuristic by default; uses Anthropic's Claude models when an API key is configured.
Executive narratives & insights — natural-language summaries of your metrics. Clearly labelled when written by Claude.
Dimension narratives — explanatory text on the Overview.
Our commitments
Disclosure: AI-generated content is identified as such in the interface.
Human oversight: skills carry confidence scores and verification status; low-confidence and stale skills are flagged; agent execution honours guardrails and stops at human-approval gates. Insights are recommendations — a human decides.
Data handling: only the relevant content is sent to the AI provider, over an encrypted connection, under commercial API terms that exclude training on your data.
No high-risk autonomous use: the Service must not be configured to take employment, credit, legal, medical, or similarly consequential decisions about individuals without meaningful human review.
Known limitations
Large language models can produce plausible but incorrect output ("hallucinations"), can mis-read source fragments, and reflect limitations of their training data. Extracted skills should be verified by their owners before agents rely on them; narratives should be checked against the underlying numbers, which remain visible throughout the console.
05 · Disclaimers
Disclaimers
Not professional advice. Scores, benchmarks, insights, experiments, and 30/60/90 plans are decision-support information — not legal, financial, investment, accounting, HR, or other professional advice. Consult qualified advisors before consequential decisions.
Benchmarks are directional. Industry comparisons are derived from published research (DORA, Gallup, McKinsey OHI, Standish, and others) combined with our own normalization. Use them to find improvement opportunities, not as precise competitive rankings.
Demo data. Sample connectors and example knowledge exist for demonstration; outputs computed from sample data illustrate the product and describe no real organization.
Forward-looking estimates. Hours-saved, cost-saved, and EPI-lift figures are model-based estimates under stated assumptions (visible in the console), not guarantees of outcomes.
Third-party services. We are not responsible for the availability, accuracy, or terms of connected third-party tools.
06 · Attributions
Attributions & Methodology Sources
Evidence-Based Management: portions adapted from the Scrum.org Evidence-Based Management Guide (May 2024), used under Creative Commons CC BY-SA 4.0.
Composite-index methodology: standard practice per the OECD/JRC Handbook on Constructing Composite Indicators (2008). Trend smoothing uses the exponentially weighted moving average (exponential smoothing; Brown/Holt, 1950s). These are public-domain methods.
Research benchmarks: DORA State of DevOps reports, Gallup workplace research, McKinsey Organizational Health Index publications, Standish CHAOS reports, SAFe® framework materials (Scaled Agile, Inc.), NIST Cybersecurity Framework — cited as published sources; all trademarks belong to their owners. Full citations in the console's Research, Frameworks & Sources tab.
Questions about any of the above: legal@rewiseed.com.
