Technical draft — qualified legal review required

Terms of service

This technical draft describes the product boundaries visible in the current implementation. It is not legal advice, does not create a contract by itself, and must be replaced or approved by qualified counsel before publication.

Parties and placeholders

Service provider: [INSERT LEGAL ENTITY NAME]
Provider contact: [INSERT LEGAL CONTACT]
Governing law, venue, and dispute process: [INSERT AFTER JURISDICTIONAL REVIEW]
Effective date: [INSERT DATE]

Service scope

GroupsTracker lets an authorized Client configure Tracked Groups, describe a Client Request, and route relevant classifications to configured Alert destinations. Access to a Group, Facebook account, browser session, AI gateway, Stripe, Redis, Postgres, Cloak Manager, and destination provider can fail or change. The service does not commit to a particular scan interval, processing result, delivery outcome, availability level, or business result.

Client responsibilities

• Provide accurate account, billing, Group, Client Request, and destination information and keep credentials protected.
• Use the service only where authorized, including authorization for Facebook/Meta accounts, Groups, content, and Alert destinations.
• Review classifications and Alerts before acting on them. A classification is an automated aid, not a factual, legal, financial, safety, or professional determination.
• Follow applicable law, third-party platform rules, destination-provider rules, and the operator’s acceptable-use/security instructions.
• Do not submit secrets or sensitive personal data to a Client Request or support form unless the provider has explicitly approved that use.

Billing and cancellation

Stripe is the configured billing system of record for payment and subscription events. Prices, taxes, introductory offers, renewal, cancellation, refunds, and disputes must be completed with operator-approved commercial and legal terms; placeholders: [INSERT CURRENCY, TAX, REFUND, AND CANCELLATION TERMS]. The application does not treat an unverified checkout or unsigned event as payment.

Third-party services and platform risk

The service may interact with Facebook/Meta, Stripe, AI/model providers, alert providers, hosting infrastructure, and Cloak Manager. Those services have separate terms, policies, availability, and data practices. The operator must confirm the current Meta automated-access and contractual requirements and must not represent GroupsTracker as affiliated with or endorsed by Meta. The final agreement must identify incorporated third-party terms, subprocessors, and any required notices.

Security, data, and termination

Reasonable technical controls and operational procedures are used, but no system can eliminate all risk. The data inventory and retention document describes current technical behavior; it is not a description of every backup or third-party system’s lifecycle. Account suspension, termination, Group removal, credential rotation, browser-profile cleanup, exports, and deletion must be specified by counsel and operator policy. Billing, dispute, security, and audit records may need to be retained.

Open legal-review checklist

• [ ] Confirm provider identity, contract formation, jurisdiction, governing law, and dispute terms.
• [ ] Add reviewed acceptable-use, prohibited conduct, account suspension, termination, and customer support language.
• [ ] Confirm pricing, taxes, renewals, refunds, cancellation, chargebacks, and Stripe terms.
• [ ] Confirm IP, user content, feedback, confidentiality, warranties, liability, indemnity, and required consumer terms.
• [ ] Reconcile this draft with the privacy notice, data inventory, Meta/platform review, subprocessors, and deployment controls.