Terms of Service

This document is a private-beta draft while the draft notice appears above. It is available for review and will be finalized when Interesta publishes its complete business contact information and qualified Ontario counsel has reviewed it.

These Terms of Service govern access to Orchestrator, the hosted application, the Orchestrator runner and related software, websites, and services provided by Interesta Inc. (Interesta, we, us, or our). By accepting these Terms or using the service after they become final, you enter into an agreement with Interesta.

You must be at least 18 years old and legally capable of entering into this agreement. If you use Orchestrator for a company or another organization, you confirm that you have authority to bind it. Personal users may also use the service. Nothing in these Terms limits a consumer right that applicable law does not permit you to waive.

Orchestrator is currently offered as a free private beta. Features, agent behaviour, supported integrations, limits, and availability may change as the product develops. We do not promise a service level, support response time, uptime percentage, or continued availability during the beta.

If Interesta later offers a paid plan, we will present its price, billing period, taxes, renewal, cancellation, and refund terms before charging you. These Terms do not authorize a charge for the current free beta.

Orchestrator signs users in through GitHub and currently requests the GitHub OAuth repo, project, workflow, and read:org scopes. Those scopes provide broad read and write access to public and private repositories and GitHub Project data available to the authorizing account, permission to update GitHub Actions workflows, and read access to organization and team membership.

When you connect a repository, configure an agent, enable a work loop, approve an Issue Planner proposal, or otherwise direct Orchestrator, you authorize the service and your runner to perform the requested GitHub operations. Depending on the workflow, those operations may include reading code and repository history; creating or editing issues, parent and child relationships, labels, Project items and statuses; creating branches and commits; opening pull requests; posting comments or review findings; and reading validation results.

You remain responsible for the repositories, organizations, and Projects you connect. Do not connect work you are not authorized to access or change. Repository rules, branch protection, required reviews, and human approval should remain in place where appropriate.

You are responsible for:

• maintaining the accuracy and security of your GitHub account, workspace membership, runner token, local machine, and network;
• keeping independent backups and recovery procedures for source code, repositories, credentials, and other important data;
• reviewing agent plans, diffs, comments, findings, tests, and other evidence before you merge, release, deploy, or rely on them;
• testing generated or modified code for correctness, security, licensing, accessibility, privacy, and regulatory requirements;
• controlling GitHub permissions, branch protections, deployment credentials, and production access; and
• complying with the laws, contracts, licences, policies, and third-party terms that apply to your use.

Orchestrator is not a source-code backup, penetration test, security certification, legal review, or regulatory-compliance service.

The hosted application coordinates work through an outbound connection from a runner operated on your computer or infrastructure. You are responsible for installing, patching, monitoring, and securing Docker, kind, Kubernetes, local storage, the runner host, network access, and any registry authentication used by that environment.

Custom agent images are trusted code, not an untrusted sandbox. An ordinary repository-agent container can receive the GitHub OAuth token from the user connection used by that workspace and a short-lived inference-proxy token. Use only images you control and trust, keep their dependencies current, and prefer pinned image digests where practical.

You choose and authenticate AI services from OpenAI, Anthropic, or OpenRouter on your runner. The selected credential is used by the trusted local inference sidecar to contact that provider directly. Relevant prompts, repository context, code, diffs, tool output, and agent responses may be processed by the provider you select. Your provider account, charges, credit limits, retention or training settings, availability, and provider terms are your responsibility.

GitHub, Supabase, Vercel, AI providers, container registries, and other third-party services are operated independently. Interesta does not control and is not responsible for their terms, security, content, outages, or changes.

Interesta does not claim ownership of the source code, issue content, prompts, configuration, documentation, and other material you provide or make available through the service (Customer Content). You retain whatever rights you already hold in Customer Content and grant Interesta a limited, non-exclusive licence to host, copy, transmit, display, modify, and otherwise process it only as reasonably necessary to provide, secure, support, and maintain Orchestrator and comply with law.

As between you and Interesta, and to the extent the law permits, you retain any rights you may have in agent-generated output produced for you. AI output may not be unique, may resemble output produced for others, and may include errors or material subject to third-party rights. Interesta does not guarantee that output is copyrightable, non-infringing, accurate, complete, secure, or suitable for a particular use.

If you send feedback about Orchestrator, you allow Interesta to use it without restriction or payment, provided we do not identify you publicly without permission.

You may not use Orchestrator to:

• access, copy, or modify a repository, account, system, or data without authorization;
• create or distribute malware, destructive payloads, credential theft, secret-exfiltration tooling, or instructions intended to cause unauthorized harm;
• bypass safeguards, probe the service without permission, interfere with other users, overload infrastructure, or attempt to obtain another user's runner or OAuth credentials;
• infringe intellectual-property, privacy, publicity, contractual, or other rights, or violate applicable law; or
• process health information, payment-card data, government identifiers, export-controlled material, or similarly regulated or highly sensitive data unless Interesta has agreed in writing.

Do not place secrets in issue bodies, planner interviews, prompts, agent instructions, or other free-form content. Automated filtering cannot reliably detect every secret.

Agent work can block, fail, repeat, or stop because of GitHub, provider, model, network, runner-host, Kubernetes, storage, image, credential, rate-limit, or software conditions. Cleanup can also fail, leaving local workspaces or resources for you to inspect and remove. You should monitor important work and maintain safe recovery paths.

You may stop using Orchestrator at any time. Signing out ends the hosted Supabase session but does not itself revoke GitHub's OAuth authorization. You can revoke the OAuth app through GitHub's account settings and stop or uninstall the local runner.

Interesta may suspend or terminate access if reasonably necessary to protect the service or others, investigate misuse, comply with law, or address a material breach of these Terms. Where practical, we will provide notice and an opportunity to correct the issue.

To the maximum extent permitted by law, Orchestrator and all related software, output, and services are provided as is and as available. Interesta disclaims all express, implied, statutory, and collateral warranties, including merchantability, fitness for a particular purpose, title, non-infringement, accuracy, security, quiet enjoyment, and uninterrupted or error-free operation.

Interesta does not warrant that an agent will complete work, find every defect, produce merge-ready code, preserve all data, meet a token or cost target, or satisfy legal, security, accessibility, or compliance requirements. You must independently review and validate every material outcome.

To the maximum extent permitted by law, Interesta and its directors, officers, employees, contractors, and affiliates will not be liable for indirect, incidental, special, exemplary, punitive, or consequential damages, or for lost profits, revenue, goodwill, opportunities, data, source code, credentials, or business interruption, arising from or related to Orchestrator.

To the maximum extent permitted by law, the total aggregate liability of Interesta and those related parties for all claims arising from or related to the service will not exceed the fees you paid to Interesta for Orchestrator during the 12 months immediately before the event giving rise to the claim.

These exclusions and limits do not apply to fraud, wilful misconduct, gross negligence, or any liability or consumer remedy that applicable law does not permit Interesta to exclude or limit.

These Terms and the Privacy Policy are the entire agreement about the service unless you and Interesta sign a separate agreement. If a separate signed agreement conflicts with these Terms, the signed agreement controls for that conflict.

If part of these Terms is unenforceable, it will be limited to the minimum extent necessary and the rest will remain in effect. A delay in enforcing a term is not a waiver. You may not assign these Terms without Interesta's consent; Interesta may assign them as part of a merger, financing, reorganization, or sale of the relevant business.

We may update these Terms as Orchestrator changes. We will update the effective date and provide additional notice when required by law. If you do not agree to a material update, stop using the service and revoke its access.

Ontario law and the federal laws of Canada applicable in Ontario govern these Terms, without regard to conflict-of-law rules. Subject to any non-waivable consumer forum rights, the courts located in Toronto, Ontario have exclusive jurisdiction over disputes relating to these Terms or Orchestrator.

Legal notices and questions about these Terms can be directed to the following contact once the draft details are completed: