Terms of Service

1. Scope and Acceptance. These User Terms of Service ("User Terms"), together with any documents expressly incorporated by reference, govern your access to and use of the online collaboration platform and related services provided by A Dream (the "Services"). By accessing or using the Services, or by continuing to use the Services after notice of changes, you acknowledge that you have read, understand, and agree to be bound by these User Terms. If you do not agree, you must not use the Services.

2. Binding Agreement. These User Terms constitute a legally binding agreement between you and the Company. They incorporate by reference the Acceptable Use Policy, which may be updated from time to time. Your right to access and use the Services is conditioned on your continued compliance with these User Terms and the Acceptable Use Policy.

3. Definitions. References to "we," "us," or "our" mean A Dream. References to "you" mean the individual accessing or using the Services. Capitalized terms not otherwise defined have the meanings assigned to them in the applicable Enterprise Services Agreement ("Enterprise Services Agreement" is a defined term – see paragraph 5), Acceptable Use Policy, or Privacy Policy.

4. Workspace Structure and Customer Control. The Services are provided primarily to organizations or individuals that create and control workspaces (each, a "Customer"). If you access the Services through a workspace, that workspace is controlled by a Customer, who may be your employer, organization, or another individual. You are an authorized user only for so long as the Customer permits your access.

5. Enterprise Services Agreement. The Customer has entered into a separate agreement with A Dream governing the provision of the Services (the "Enterprise Services Agreement"). Under that agreement, the Customer controls the workspace, including user access, permissions, integrations, retention settings, exports, and administrative actions. Content, messages, files, decisions, actions, and other information submitted to or generated within a workspace are Customer Data ("Customer Data") and are controlled by the Customer.

6. Customer Data and Instructions. You acknowledge and agree that the Customer controls all user-created data submitted to, generated within, or processed through the Services at any level of the platform, including within workspaces, channels (public or private), threads, direct messages, and related features. This includes, without limitation, messages, files, prompts, content, communications, contextual information, and other data you provide or generate through the Services ("User Data").

You further acknowledge and agree that the Customer may access, use, disclose, modify, export, transfer, or delete such User Data, including data associated with your account, at any time in accordance with the Enterprise Services Agreement, the Customer's policies, and applicable law. Customer actions, configurations, or system-defined retention limits may result in the access, use, disclosure, modification, or deletion of such data without further notice to you.

For avoidance of doubt, we do not own or control Customer Data but process such data only as directed by the Customer and as described in the Enterprise Services Agreement and Privacy Policy.

7. Message Retention and Deletion. The Services apply default retention limits to messages and related content. Private messages, including direct messages and private or shared channels, are retained for a limited period of time (approximately twenty-four (24) hours) and are automatically deleted thereafter. This retention period is fixed and cannot be modified by Customers or users.

Messages and content posted in channels may be retained for longer periods, subject to Customer-configured retention settings, including optional deletion schedules. Customers are responsible for configuring any available retention controls, notifying users of modified retention timelines, and for determining whether use of the Services is appropriate for their recordkeeping, compliance, or preservation obligations.

You acknowledge and agree that the Services are not designed to function as a system of record for private communications and that content may be deleted automatically and irreversibly without further notice.

8. Allocation of Responsibilities. As between A Dream and the Customer, the Customer is solely responsible for establishing, communicating, and enforcing workplace policies and practices governing use of the Services, including any policies relating to monitoring, access, data retention, use of artificial intelligence features, and Third-Party Integrations.

The Customer is solely responsible for obtaining any rights, permissions, notices, or consents required for the lawful collection, use, disclosure, transfer, and processing of User Data and other information submitted to the Services, including as between the Customer and its users, employees, contractors, or collaborators.

The Customer is also solely responsible for ensuring that its use of the Services, including configuration of features, integrations, retention settings, and AI functionality, complies with applicable law and its own legal or regulatory obligations.

Any disputes arising between you and the Customer relating to User Data, workplace policies, use of the Services, or the Customer's failure to meet its obligations must be resolved between you and the Customer. We do not assume responsibility for such disputes and make no representations or warranties to you regarding the Customer's policies, practices, or compliance obligations.

9. Service Disclaimer. The Services are provided to you on an "as is" and "as available" basis. Except as expressly stated in these User Terms, we disclaim all warranties to the maximum extent permitted by law.

10. Eligibility. The Services are not intended for use by individuals under sixteen years of age or under the applicable age of majority or legal working age under local law. By using the Services, you represent that you meet these requirements and are using the Services for lawful purposes only.

11. Compliance with Rules. While using the Services, you must comply with these User Terms, the Acceptable Use Policy, applicable law, and any policies established by the Customer controlling your workspace.

12. Termination of Access. Your access to the Services continues until terminated by the Customer or by us. Without limiting any of our other rights, we may suspend or terminate access if we reasonably believe you have violated these User Terms, the Acceptable Use Policy, applicable law, or if your use presents a risk of harm. Where practicable, we will seek to work through the Customer before taking direct action.

13. AI Features and Outputs. The Services include artificial intelligence ("AI") features that generate outputs based on user inputs and connected data.

14. Integrations and Authorized Credentials. You and the applicable Customer are solely responsible for configuring and managing integrations with Third-Party Tools and services, including but not limited to the creation, use, scope, and security of API keys, access tokens, webhooks, and other credentials. Any actions taken by the Services using authorized credentials are deemed authorized by you or the Customer. You are responsible for promptly revoking or rotating credentials if they are compromised or no longer authorized. We are not responsible for any loss, damage, or unauthorized activity resulting from the use of valid credentials.

Certain features of the Services allow authorized users to configure channels, integrations, and AI-enabled agents that interact with Third-Party Tools and services. Actions performed by AI agents are limited to the credentials, permissions, and scopes that have been explicitly configured and authorized by the applicable Customer or Channel Manager. Unless otherwise directed, the AI agent will use the Channel Manager's credentials when users of the chat invoke the agent. If a user requests an action that exceeds the available authorization or credential scope, the Services may fail to execute the request, prompt for additional authorization, or decline to perform the action.

You acknowledge and agree that the Services are designed to enforce authorization boundaries, and that unsuccessful execution of a requested action due to insufficient credentials, permissions, or scope does not constitute a service error or malfunction.

15. Feedback. If you choose to provide feedback, suggestions, ideas, or recommendations regarding the Services ("Feedback"), you acknowledge and agree that such Feedback is provided voluntarily and without restriction. We may use, implement, modify, incorporate, or otherwise act upon such Feedback for any purpose, without obligation, compensation, or attribution to you.

16. Intellectual Property Rights. Although we give you permission to use our Services, we retain any intellectual property rights we have in the Services.

17. Limitation of Liability. To the maximum extent permitted by law, neither party will be liable for indirect, incidental, special, consequential, or punitive damages whether in contract, tort, or any other theory of liability and whether or not the party has been advised of the possibility of such damages. Unless you are also a Customer, you will have no financial liability to us for breach of these User Terms. Our aggregate liability to you for breach of these terms will not exceed one hundred dollars. The foregoing does not limit either party's right to seek and obtain equitable relief nor apply to the extent prohibited by applicable law.

18. Consumer Law. The Services are intended for business and organizational use, not consumer purposes. You hereby acknowledge that consumer laws do not apply, to the maximum extent permitted by law. If however any consumer laws apply and cannot be excluded, our liability is limited to the maximum extent permitted by law.

19. Notices. Notices to you may be provided by emailing the email address associated with your account or directly messaging you through the Services. Legal notices to A Dream must be sent to the address designated by us, which is: 2261 Market Street, STE 60578, San Francisco, CA, 94114.

20. Modifications. We may modify these User Terms from time to time. Material changes will be communicated using reasonable means, including emailing the email address associated with your account or directly messaging you through the Services. Continued use after the effective date constitutes acceptance.

21. Assignment. You may not assign these User Terms, including the Acceptable Use Policy, without our prior written consent. We may assign them in connection with a merger, acquisition, reorganization, or sale of assets.

22. Severability. If any provision is held unenforceable, including a provision in the Acceptable Use Policy, it will be (1) modified to the minimum extent necessary and (2) interpreted by the court in furtherance of the objectives of the original provision to the fullest extent permitted by law, and the remaining provisions will remain in effect.

23. Governing Law, Arbitration, and Class Action Waiver. These User Terms are governed by the law specified in the applicable Enterprise Services Agreement, without regard to conflict-of-laws principles.

Except as expressly provided in the applicable Enterprise Services Agreement, any dispute, claim, or controversy arising out of or relating to these User Terms, the Services, or your use of the Services shall be resolved by binding arbitration, rather than in court, in accordance with the arbitration provisions set forth in the Enterprise Services Agreement. The arbitration shall be conducted by the arbitral forum and under the rules specified in the Enterprise Services Agreement, and judgment on the arbitration award may be entered in any court of competent jurisdiction.

To the fullest extent permitted by applicable law, you agree that any arbitration or proceeding must be brought in your individual capacity and not as a plaintiff or class member in any purported class, collective, representative, private attorney general, or consolidated proceeding. Arbitrators may not consolidate claims or preside over any form of representative or class proceeding.

Nothing in this section limits either party's right to seek injunctive or equitable relief in a court of competent jurisdiction to prevent unauthorized use, misuse, or infringement of intellectual property or confidential information, or where such relief is expressly permitted under the Enterprise Services Agreement.

24. Headings. Section and paragraph headings in these User Terms are for convenience only and have no legal or contractual effect.

25. Survival. Sections relating to allocation of responsibility, disclaimers, limitation of liability, governing law, venue, and any provisions which by their nature should survive termination or expiration of these User Terms will survive any termination or expiration.

26. Privacy Policy. Please review our Privacy Policy for information on how we collect and use data in connection with the Services.

27. Website Cookies. Our public websites may use cookies and similar technologies as described in our Cookie Policy, which governs cookies used on our websites only and does not apply to cookies or similar technologies used within the Services.

28. Entire Agreement. These User Terms constitute the entire agreement between you and A Dream regarding use of the Services and supersede all prior agreements on that subject.

1. Applicability and Incorporation. This Acceptable Use Policy ("AUP") governs all access to and use of the Services and applies to every user, including authorized users invited to a Customer workspace. Compliance with this AUP is a condition of using the Services and is incorporated by reference into the User Terms of Service ("User Terms").

2. Lawful Use and Compliance Framework. You may use the Services only for lawful purposes and in compliance with applicable law, the User Terms, this AUP, and any policies established by the Customer controlling the workspace you use. You must also comply with the terms, policies, and acceptable use requirements of any applicable Third-Party AI Providers whose models or services are used by us in providing AI-enabled features, and any Third-Party Tools to which you or we connect on your behalf, and those requirements may be updated from time to time.

3. Account, Access, and Credential Responsibility. You are responsible for all activity conducted through your account and for maintaining the confidentiality and security of credentials used to access the Services or connect integrations, including passwords, API keys, access tokens, OAuth grants, webhooks, and similar mechanisms. You must promptly revoke, rotate, or disable any credentials you suspect are compromised or no longer authorized and promptly notify us using the reporting channel in this AUP.

4. Prohibited Materials and Content. You may not submit, upload, transmit, store, or otherwise make available through the Services any content that is unlawful, infringing, or harmful, or that violates the rights of others. This includes content that infringes intellectual property rights (including copyright, patent, trademark, trade secret, and rights of publicity), content that you do not have the right to disclose (including confidential, proprietary, or regulated information), content that is deceptive or fraudulent, content that is harassing, threatening, hateful, or discriminatory, content that exploits or endangers minors, content that facilitates illegal activity, and content that contains malicious code or harmful technical payloads. You are responsible for ensuring you have all necessary rights, permissions, and lawful bases to submit or process any content through the Services, including content that contains personal data, sensitive personal data, or information subject to contractual confidentiality or professional obligations.

5. Prohibited Actions and Misuse. You may not use the Services in a manner that is illegal, harmful, deceptive, abusive, or that interferes with the integrity, security, or availability of the Services or any systems or networks. Prohibited conduct includes attempting to gain unauthorized access to accounts, workspaces, data, systems, or networks; probing, scanning, or testing vulnerabilities; bypassing or circumventing safeguards or access controls; introducing malware or harmful code; conducting phishing, credential harvesting, or impersonation; interfering with or disrupting the Services (including through denial-of-service activity, automated flooding, or abusive request volume); scraping, harvesting, extracting, or copying content or outputs at scale in a way that is not authorized by us; using the Services to send unauthorized promotions, spam, or other unsolicited communications; misrepresenting affiliation, identity, or the source of content; and using the Services to violate privacy rights, including through unauthorized surveillance, unauthorized collection of personal data, or attempting to re-identify de-identified information.

6. AI-Specific Restrictions and High-Risk Uses. You may not use AI-enabled features of the Services in ways that are unlawful, unsafe, or that create undue risk to individuals. You may not use AI features, including but not limited to AI Memory features, to make fully automated decisions about individuals that have legal, medical, financial, employment, housing, insurance, educational admissions, credit, or similarly material effects without meaningful human review and responsibility. You may not use AI features to generate or facilitate instructions for wrongdoing, evade safety controls, produce malicious code, conduct social engineering, or create or distribute content that is unlawful, exploitative, or harmful. You may not attempt to reverse engineer, extract, decompile, or discover underlying AI systems, prompts, safety mechanisms, or model behavior in order to bypass restrictions, or to build or train competing models using outputs or the Services in a manner not authorized by us.

You may not use the Talk-Through Feature to capture voice, screen, or cursor data for purposes that are unlawful, that violate the privacy rights of third parties, or that involve the recording of individuals who have not consented to being recorded to the extent required by applicable law. You may not use the Talk-Through Feature to narrate or capture content that is subject to professional secrecy, attorney-client privilege, or other confidentiality obligations, unless you have evaluated the applicable risks and determined such use is appropriate. You may not use In-Channel Apps or agent-enabled features to create applications that are designed to circumvent authorization controls, harvest credentials, conduct surveillance, or perform actions outside the scope authorized by the applicable Customer.

7. Circumvention of Authorization Controls. You may not attempt to bypass, override, escalate, or otherwise circumvent authorization controls, credential requirements, permission boundaries, or integration scopes associated with the Services, including through the use of AI features, prompts, automation, or Third-Party Tools.

This includes attempting to cause an AI agent to perform actions for which it lacks valid credentials, permissions, or authorization, or attempting to induce the Services to access third-party systems beyond the scope configured by the applicable Customer or Channel Manager.

8. Accuracy, Attribution, and Non-Reliance. You are responsible for verifying the accuracy, legality, and appropriateness of content and AI-generated outputs before using or sharing them. You may not represent AI-generated output as human-generated when doing so would be misleading in context, including where attribution is required by law, regulation, professional duty, or Customer policy. You acknowledge that AI outputs can be incorrect, incomplete, or misleading and must not be used as a substitute for professional judgment. You may not rely on AI-generated summaries or Memory features as complete or authoritative records of communications or decisions.

9. No Reliance on Message Persistence. You may not rely on the Services as a system of record for private communications. Private messages may be automatically deleted within a short period as described in the User Terms. You are responsible for retaining any information you require prior to deletion, subject to Customer policies and applicable law.

10. Third-Party Integrations and External Services. If you enable or use third-party services, integrations, or connected applications with the Services, you acknowledge that data may be transmitted to and from those third parties as required for functionality, and that third-party terms and privacy policies apply. You are responsible for configuring integrations appropriately, limiting scopes and permissions, and ensuring you have authority to connect and use any external accounts, data sources, or services.

11. Copyright Policy and DMCA Notice-and-Takedown. We respect the intellectual property rights of others and respond to notices of alleged copyright infringement in accordance with the U.S. Digital Millennium Copyright Act ("DMCA") and similar applicable laws.

12. Monitoring, Investigation, and Enforcement. We may investigate suspected violations of this AUP and may take any action we deem appropriate, including warning, removing or restricting content, disabling features, limiting functionality, suspending access, terminating accounts, or working through the Customer to remediate misuse. Where feasible and appropriate, we will coordinate with the Customer controlling the relevant workspace, but we may act directly where there is a credible risk of harm, legal exposure, security risk, or ongoing abuse.

13. Prohibited Content - Abuse, Harm, and Interference. You must not abuse, harm, interfere with, or disrupt the Services or related systems or networks. Prohibited conduct includes, without limitation, attempts to circumvent safeguards or access controls; deploying malware or malicious code; engaging in denial-of-service or traffic flooding; interfering with integrations, APIs, or third-party services connected to the Services; probing or testing system vulnerabilities without authorization; or otherwise using the Services in a manner that materially degrades performance, security, or availability for us, Customers, or other users.

14. Sensitive Information. You should not submit highly sensitive, privileged, or confidential information to the Services except in private or restricted contexts intended for such use. You are responsible for determining whether use of the Services is appropriate for any particular information, taking into account workspace configuration, sharing settings, and AI-enabled features. Channel managers and administrators should exercise care when adding members to channels that contain sensitive information. In addition, depending on workspace configuration and authorization settings, existing channel members may be able to invite or add additional participants using credentials or permissions associated with the channel, channel manager, or its integrations, which may expand access to information without further approval, including approval by the channel manager.

In-Channel Apps created within a channel are visible to all channel members and operate within the channel's configured permissions and credentials. You should not use In-Channel Apps to process or display sensitive, privileged, or confidential information unless all channel members are authorized to access such information. The underlying AI agent VM environment may have cross-channel access within the same workspace, subject to workspace-level permissions and Customer-configured access controls. You should exercise care when submitting sensitive information to any channel, taking into account the cross-channel access boundary described in the User Terms.

15. Reporting. Suspected violations of this AUP, security incidents, compromised credentials, suspected phishing or impersonation, and intellectual property complaints must be reported to us at contact@popcorn.ai.

16. Updates. We may update this AUP from time to time. Notices about changes may be communicated to you by emailing the email address associated with your account or direct messages to you through the Services. Continued use of the Services after changes take effect constitutes acceptance of the updated AUP.

17. Relationship to User Terms. This AUP is incorporated by reference into the User Terms. If there is a conflict between this AUP and the User Terms, the User Terms control.