STATUS: DRAFT, PENDING ATTORNEY REVIEW. Not in effect. Governing law selected: New Mexico. Copied from security-agents/LICENSE_AGREEMENT_DRAFT.md on 2026-10-13.

FNAI Sentinel: End User License and Subscription Agreement

DRAFT: NOT LEGAL ADVICE. FOR ATTORNEY REVIEW BEFORE ANY USE. Prepared 2026-10-13 by Grok Bot as a starting point. Bracketed items [ ] are placeholders. Consumer-protection, auto-renewal (e.g., California ARL, EU), export-control, privacy (GDPR/CCPA), and wiretap/recording laws vary by jurisdiction and must be checked by counsel.

Licensor: [Company legal name], [address] ("we," "us"). Licensee: the person or entity accepting this Agreement ("you"). By installing, activating, or using FNAI Sentinel (the "Software"), you agree to this Agreement. If you do not agree, do not install or use the Software.

1. License grant

Subject to this Agreement and payment of applicable fees, we grant you a non-exclusive, non-transferable, non-sublicensable license during the Subscription Term to install and use the Software in object-code form on the number of devices permitted by your plan (the "Activation Limit"), for your personal or internal business purposes.

2. Subscription term, renewal, and cancellation

2.1 Your subscription runs for the period you purchased (monthly or annual) and renews automatically at the then-current price unless you cancel before the renewal date. We will send a reminder before annual renewals [N days, per applicable law]. 2.2 You may cancel anytime through the customer portal. Cancellation takes effect at the end of the current paid period. [Refund policy: e.g., 14-day/30-day money-back for first purchase; statutory withdrawal rights preserved.] 2.3 Price changes apply at the next renewal after [30] days' notice.

3. Serial numbers, license files, and activation

3.1 Each purchase receives a unique serial number and a digitally signed license file. You must keep them confidential; you are responsible for use under your serial. 3.2 Activation records a pseudonymous device identifier (a one-way hash) to enforce the Activation Limit. You may deactivate devices to free activations, subject to reasonable reset limits. 3.3 Offline activation via challenge/response is available for systems without internet access. 3.4 You may not share, resell, or publish serials or license files, or circumvent license verification.

4. Expiry behavior

When your Subscription Term (and any grace period of [14] days) ends without renewal: (a) the Software's existing firewall rules, local monitoring, Lockdown, and access to your locally stored data and evidence continue to function; (b) you will no longer receive software updates, security patches, detection-rule, signature, GeoIP, or model updates, or support; (c) premium features listed in your plan [may be disabled]. You acknowledge that security software without updates becomes less effective over time and that continued use after expiry is at your own risk.

5. Trial

Trial licenses are for evaluation, limited to one per device and [14] days, and are provided "AS IS" without support. At the end of the trial, Section 4 applies.

6. Restrictions

You may not: (a) reverse engineer, decompile, or disassemble the Software except as permitted by law that cannot be waived; (b) remove notices; (c) use the Software to offer a competing service or as a hosted service for third parties without a Business license; (d) use the Software to attack, intrude upon, scan, or interfere with any system you do not own or have authorization to test; (e) violate export-control or sanctions laws.

7. Third-party components and AI models

The Software includes open-source components and AI models (e.g., Apache-2.0 licensed models) governed by their own licenses, listed in THIRD_PARTY_LICENSES. AI output may be inaccurate, incomplete, or unsafe; you are responsible for reviewing any suggested code, configuration, or action before applying it.

8. Honeypot, monitoring, and data-collection features: lawful use

8.1 The decoy/honeypot, session recording, packet capture, and attacker-information features are defensive and observational only. The Software does not and you must not use it to "hack back," access, disrupt, or damage any third-party system. 8.2 You are solely responsible for ensuring your use complies with all laws applicable to you, including laws on interception and recording of communications, computer misuse, data protection, and notice/consent. You will operate these features only on systems and networks you own or are authorized to administer, and you will provide any notices (e.g., login banners) the law requires. 8.3 Data collected about third parties (e.g., IP addresses, hostnames, recordings, files) may be personal data. You act as the controller of such data, must have a lawful basis, must apply reasonable retention limits, and must handle data-subject requests as required. Abuse reports exported by the Software are sent by you, not by us. 8.4 Network lookups (reverse DNS, RDAP/WHOIS, traceroute) contact third-party services or hosts when you enable them. 8.5 Hosting features (HTTP server, SFTP/FTPS, ACME certificates) expose services to the internet. You are responsible for content you host, for compliance with the Let's Encrypt Subscriber Agreement, and for securing your configuration.

9. Privacy

The Software runs locally and does not send your files, logs, evidence, or AI prompts to us. We process limited data to provide the service: purchase and billing data (via Stripe), email, serial number, hashed device identifiers, license/activation timestamps, and, if enabled, update-check requests (IP address, version). See our Privacy Policy at [URL]. [Add GDPR/CCPA details, sub-processors, transfers, retention.]

10. Updates

We may provide updates during the Subscription Term. Updates are signed; some may be required to keep receiving further updates. We may change or discontinue features with reasonable notice; [material reductions → pro-rata refund].

11. No warranty

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SOFTWARE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SOFTWARE WILL DETECT OR PREVENT ALL THREATS, INTRUSIONS, OR DATA LOSS, THAT IT WILL BE ERROR-FREE, OR THAT AI OUTPUT WILL BE CORRECT. [Consumer statutory rights not excluded where prohibited.]

12. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW: (a) WE ARE NOT LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR LOSS OF DATA, PROFITS, OR BUSINESS, OR SECURITY BREACHES, HOWEVER CAUSED; (b) OUR TOTAL LIABILITY IS LIMITED TO THE FEES YOU PAID IN THE [12] MONTHS BEFORE THE CLAIM. Nothing limits liability for [death/personal injury caused by negligence, fraud, or other liability that cannot be limited by law].

13. Indemnity

You will indemnify us against third-party claims arising from your misuse of the Software, including use of honeypot, recording, hosting, or data-collection features in violation of law or Section 8.

14. Termination

We may suspend or terminate this license if you materially breach it (including Sections 6 and 8). On termination you must stop using paid features. Sections 4 (data access), 7, 8.2–8.3, 11–16 survive.

15. Export and government use

[Export control / sanctions clause; encryption classification (EAR 5D992 / license exception ENC). Counsel to confirm.] [U.S. Government "commercial computer software" clause.]

16. Governing law and disputes

This Agreement is governed by the laws of the State of New Mexico, USA, excluding conflict-of-law rules and the UN CISG. Disputes go to [courts of ___ / arbitration under ___ rules], [class-action waiver — check enforceability]. Consumers keep any mandatory local-law protections.

17. General

Entire agreement; severability; no waiver; assignment (we may assign in a merger/sale); notices to [email]; electronic acceptance is valid.

Version [0.1-draft], last updated [date].