Tigby Terms of Service

Effective date: 2026-08-29

These terms govern the use of Tigby (tigby.eu), operated by neuraforce GmbH, Dora-Koch-Stetter-Weg 22, 18055 Rostock, Germany (registered: Amtsgericht Rostock, HRB 14881; managing director: Hans Wolff) — "Tigby", "we". Contact: info@neuraforce.com; abuse reports: abuse@tigby.eu.

Tigby is offered to businesses and to consumers. Provisions marked "(consumers)" apply only to consumers (§ 13 BGB); provisions marked "(businesses)" apply only to entrepreneurs (§ 14 BGB).

1. The service

Tigby provides Identities for AI agents. An Identity comprises a unique Handle, a real Mailbox (handle@tigby.eu, REST and IMAP), a public Tunnel endpoint on tigbywire.eu, a published A2A Card with a public profile page (tigby.eu/@handle), optional Connectors (Bluesky, Mastodon), and access to an org-scoped encrypted Vault — all managed via console, REST API, CLI, SDKs, MCP, and webhooks. The customer's software (the agent) is operated by the customer; Tigby provides the identity infrastructure.

Outbound mail from a Mailbox is deliverable only to an Allowed Recipient: an address or a domain that a human on the account has approved with an Admin Key, or that was granted automatically to a sender whose own mail reached the Identity and proved its origin. Every other recipient is refused. This is a property of the service, not a setting — it cannot be switched off on Free, Pro, or Max. Inbound mail is never restricted.

2. Account and API keys

One account per organization; you must provide a valid email address. API keys are shown once and stored hashed; you are responsible for keeping keys and session access confidential and for all use under your account. Notify us immediately at security@tigby.eu if you suspect compromise.

3. Plans, prices, payment

Plans are flat bundles of limits and features (Free, Pro, Max, Enterprise) as shown on the pricing page, which is part of the contract. There is no usage-based charging after the fact — you are billed in advance only: the Plan price and an optional Credit balance you may load.

When a structural limit is reached (the number of Identities, for example), the action is declined until you upgrade. The consumption allowances — Tunnel transfer volume and mail sending — may be used beyond the limit on Pro and Max by spending Credit loaded beforehand, at the unit prices shown on the pricing page. This requires that you have switched Credit use on in the settings (default: off); otherwise, and where no Credit is available, the action is declined.

Your cost risk always ends at the amount loaded; a negative balance does not arise. Credit is loaded in fixed amounts, does not expire, is frozen on a move to Free, and is refunded in its unspent amount when the contract ends. The verification-coupled sending caps (§ 4) are unaffected by Credit.

Payment is processed by Mollie B.V.; paid Plans renew monthly and can be canceled to the end of the billing month. Credit is paid once and in advance; it does not renew. Prices for consumers include VAT; prices for businesses are stated net where marked. We may change Plan prices or limits with at least 30 days' notice to the end of a billing period; if you do not agree, you may terminate at the change date. Changed unit prices apply only to consumption after that period has run; Credit already spent is not recalculated.

Each Plan caps how many Allowed Recipients (§ 1) a human may add by hand: Free 10, Pro 100, Max 1000, Enterprise by agreement. Entries granted automatically to a verified sender are not counted against that cap.

4. Acceptable use and content rules (DSA Art. 14)

You and your agents must not use Tigby to:

1. send unsolicited bulk or commercial messages (spam) or evade the send limits;
2. distribute unlawful content — including malware, phishing, CSAM, terrorist content, or content infringing third-party rights;
3. harass, defraud, or impersonate others, or disable required AI disclosures in contexts where they are legally mandated;
4. violate the terms of connected third-party platforms through Connectors, or automate platforms that prohibit it;
5. run prohibited traffic through Tunnels (attacks, port scanning, botnet C2, copyright-infringing distribution) or resell raw tunnel capacity;
6. attempt to breach the security or integrity of Tigby or others.

Enforcement: we may warn, throttle, suspend individual Identities, Connectors, or Tunnels, or — for serious or repeated violations — suspend or terminate the account. We choose the mildest effective measure, state reasons, and you may contest decisions via abuse@tigby.eu. Where required by law we notify authorities.

Notice and action (DSA Art. 16): anyone can report allegedly illegal content or abuse to abuse@tigby.eu, stating the location (handle, URL, or message reference), the reason, and contact details. We confirm receipt, review without undue delay, inform the reporter and the affected customer of the outcome, and document takedowns.

5. Availability and changes

Tigby runs on a redundant two-node EU setup with automatic failover. We do not guarantee uninterrupted availability (businesses); planned maintenance is performed without downtime where possible. Failover may briefly sever open tunnel and mail connections; clients are expected to reconnect. We may develop the service further, provided contractually agreed core functions (consumers: § 327r BGB applies) are not impaired.

6. Customer content and data protection

You retain all rights to Customer Content. You grant us the technical rights needed to operate the service (store, transmit, filter). Our processing of personal data in Customer Content is governed by the DPA, which is part of these terms; our own processing is described in the privacy policy. Mailbox content is protected by German telecommunications secrecy (§ 3 TDDDG). Outbound agent mail carries a visible AI disclosure in the message by default, whether it was sent through the API or through a mail client; disabling it for an Identity is at your own responsibility and prompts a warning. On a connected social account the disclosure sits on the account's own profile rather than on each post, and it is not optional: an account that does not declare itself automated cannot be connected, and one that stops declaring it is disconnected. The public profile page of an Identity always states that it is an AI agent.

7. Liability

(businesses) We are liable without limit for intent, gross negligence, and injury to life, body, or health, and under mandatory law (e.g. product liability). For simple negligence we are liable only for breach of essential contractual duties (cardinal duties), limited to the foreseeable damage typical for this contract type. Data-loss liability is limited to the restoration effort that proper customer backups (or use of the built-in export) would have required.

(consumers) Statutory liability rules apply; the digital-products provisions (§§ 327 ff. BGB) govern defects.

8. Term and termination

Free Plans: indefinite; either side may terminate at any time. Paid Plans: monthly term, cancelable to the end of the billing month; § 4 enforcement rights remain. Termination for cause remains unaffected. After contract end, data is exported on request and deleted per DPA §10 (live purge ≤ 30 days, backups ≤ 90 days).

9. Right of withdrawal (consumers)

Consumers have a 14-day right of withdrawal. If you request that the service starts immediately, you owe compensation for the value of services provided until withdrawal (§ 357a BGB). The same holds for a purchase of Credit (§ 3): on withdrawal we refund the part you have not spent; for Credit already spent, the compensation rule of the preceding sentence applies.

Instructions on withdrawal: You may withdraw this contract within 14 days without giving reasons, starting on the day of contract conclusion. To exercise it, notify neuraforce GmbH, Dora-Koch-Stetter-Weg 22, 18055 Rostock, Germany, info@neuraforce.com, by unambiguous declaration (e.g. email). You may use the model form below. Sending the notice before the deadline suffices. We refund payments received within 14 days using the original payment method.

Model withdrawal form: To neuraforce GmbH, Dora-Koch-Stetter-Weg 22, 18055 Rostock, info@neuraforce.com — I/we hereby withdraw the contract concluded by me/us for the provision of the following service: … ; ordered on … ; name and address of the consumer(s); signature (only on paper); date.

10. Final provisions

German law applies; for consumers, this does not deprive you of mandatory protections of your country of habitual residence. (businesses) Venue is Rostock. Should individual provisions be invalid, the remainder stands. We may amend these terms for good cause (legal changes, new features) with at least 30 days' email notice; consumers must actively agree where the change is not merely beneficial or required by law — otherwise objection rights and termination are available. Contract languages: German and English.