Terms of Service

1. Acceptance of Terms

By accessing or using Rōmy ("Service", "Platform", "we", "us", or "our"), operated by GetRomy LLC ("Provider"), a Texas limited liability company, you ("Customer", "you", "your") agree to be bound by these Terms of Service ("Terms" or "Agreement"). If you do not agree to these Terms, do not use the Service.

You must be at least 18 years old (or the age of majority in your jurisdiction) and have the legal capacity to enter into binding contracts to use the Service.

2. Description of Service

Rōmy is an AI-powered research platform designed to help small nonprofits identify and research potential major donors. The Service provides:

• AI-Powered Research: Access to AI language models (xAI Grok, OpenAI, Anthropic Claude, Google Gemini, and others via OpenRouter) for intelligent prospect research and conversations
• Document Analysis: File upload and processing for PDFs, spreadsheets, and documents (max 10MB per file)
• Web Search Integration: Real-time web search via Perplexity, Linkup, and other providers for prospect research
• Google Workspace Integration: Gmail access for reading emails and creating AI-generated drafts (drafts only — we never auto-send); Google Drive for document import and RAG indexing
• CRM Integrations: Sync with Bloomerang, Virtuous, and Neon CRM to import constituent and donation data
• AI Memory: Optional memory system that learns your preferences and context over time
• Data Research Tools: Access to FEC contributions, SEC filings, ProPublica nonprofit data, USAspending government awards, and property records
• Cloud or Local Storage: Choice between cloud-based (Supabase) or browser-only (IndexedDB) data storage

3. User Accounts and Authentication

3.1 Account Creation

To access certain features, you must create an account using email/password or Google OAuth authentication. You are responsible for maintaining the confidentiality of your account credentials and for all activities under your account.

3.2 Guest Access

Limited guest access is available with restricted functionality (5 messages/day, basic model only). Guest sessions use local storage only.

3.3 Account Security

You must: (a) use a strong, unique password; (b) not share your credentials; (c) notify us immediately at security@getromy.app if you suspect unauthorized access; (d) not use the Service through automation, bots, or scripts without written permission.

4. Subscription Plans and Usage Limits

4.1 Plans

The Service offers the following subscription tiers:

• Starter (Free): 1,000 messages/day, basic models, 5 file uploads/day
• Pro: Increased limits, access to advanced models, Google Workspace integration
• Scale: Highest limits, priority support, all integrations, team features

4.2 Usage Limits

Current limits (subject to change with notice):

• Unauthenticated users: 5 messages per day (gpt-4.1-nano only)
• Authenticated users: 1,000 messages per day
• Pro models: 500 lifetime calls per user
• File uploads: 5 files per day, 10MB max per file
• Google Drive documents: Limited per user based on plan

We reserve the right to modify limits to ensure fair usage and service stability.

4.3 Billing

Paid subscriptions are billed monthly or annually via Stripe through Autumn. Prices are in USD. You authorize us to charge your payment method automatically. Refunds are at our discretion.

5. Google Workspace Integration

When you connect your Google account, you authorize Rōmy to:

5.1 Gmail Access

• Read emails: AI can read your inbox and sent mail to provide context for research
• Create drafts: AI can compose email drafts matching your writing style
• Never send: We cannot and will not automatically send emails. You must review and send all drafts manually from Gmail

5.2 Google Drive Access

• File picker: You select which files to import — we only access files you explicitly choose
• Document indexing: Selected files are processed and indexed for AI-powered search
• No bulk access: We use the drive.file scope, limiting access to files you select

5.3 Revocation

You can disconnect Google access anytime in Settings. This removes our access and deletes associated data (writing style profile, indexed documents).

6. CRM Integrations

The Service integrates with nonprofit CRMs:

• Bloomerang: Import constituents and transactions
• Virtuous: Import contacts and gifts
• Neon CRM: Import accounts and donations

Your credentials: API keys are encrypted using AES-256-GCM before storage. We never store plaintext credentials.

Your data: CRM data synced to Rōmy remains your property. We use it solely to provide the Service. We do not sell, share, or use your CRM data for any other purpose.

7. Data Processing Agreement (Enterprise Clients)

For enterprise clients processing donor personally identifiable information (PII) through Rōmy, the following data processing terms apply:

7.1 Processor Obligations

GetRomy LLC acts as a Data Processor when processing your donor data. We commit to:

• Process data only on your documented instructions
• Ensure all personnel with access are bound by confidentiality obligations
• Implement appropriate technical and organizational security measures (AES-256-GCM encryption, Row-Level Security, CSRF protection)
• Not engage additional subprocessors without your prior authorization
• Assist you in responding to data subject access, correction, and deletion requests
• Delete or return all data upon contract termination (see Section 16.4)
• Make available all information necessary to demonstrate compliance with these obligations

7.2 Authorized Subprocessors

The following subprocessors are currently authorized to process your data:

Notification of Changes: We will provide 30 days written notice before adding new subprocessors. You may object to new subprocessors within 14 days of notification.

7.3 Data Breach Notification

We will notify you within 72 hours of becoming aware of any personal data breach affecting your data, including details of the breach, affected data categories, and remediation steps taken.

7.4 Custom Data Processing Agreement

Enterprise clients requiring a signed Data Processing Agreement (DPA) tailored to their specific requirements should contact legal@getromy.app.

8. Acceptable Use

8.1 Prohibited Activities

You agree not to use the Service to:

• Violate any applicable laws, regulations, or third-party rights
• Transmit harmful, threatening, abusive, harassing, defamatory, or offensive content
• Attempt unauthorized access to the Service, other accounts, or related systems
• Interfere with or disrupt the Service, servers, or networks
• Use automated tools, bots, scrapers, or scripts without written permission
• Reverse engineer, decompile, or extract source code
• Generate spam, phishing, malware, or deceptive content
• Circumvent usage limits, rate limits, or access controls
• Impersonate others or misrepresent your affiliation
• Use the Service for any illegal purpose, including harassment or stalking

8.2 AI Model Terms

When using AI models through our Service, you must comply with each model provider's acceptable use policies (xAI, OpenAI, Anthropic, Google, etc.). Violations may result in immediate termination.

9. Data Ownership and Use Restrictions

9.1 Your Data Ownership

You retain all right, title, and interest in your Customer Data, including donor lists, CRM data, uploaded files, chat content, and any other information you provide. You grant us a limited, non-exclusive, non-transferable license to use Customer Data solely to provide the Service to you.

9.2 What We Will NOT Do

We will never:

• Sell, rent, lease, or disclose your data to third parties for their own purposes
• Use your data to train AI models (except AI memory features you explicitly enable)
• Include your data in shared datasets accessible to other customers
• Use your data for any purpose other than providing the Service
• Access your data except as necessary for support (with your consent) or legal compliance

9.3 AI-Generated Content

AI makes mistakes. Content generated by AI models is provided as-is. You are solely responsible for reviewing and verifying all AI-generated content before use. We make no warranties regarding accuracy, completeness, reliability, or suitability of AI outputs.

9.4 AI Memory

If you enable AI Memory, the system extracts and stores facts from your conversations to personalize future responses. You can view, edit, or delete memories at any time in Settings. Disabling memory deletes all stored memories.

10. FCRA Compliance — Critical Restriction

11. Privacy and Data Protection

Your use of the Service is subject to our Privacy Policy, incorporated by reference. Key points:

• We collect account info, chat content, usage data, and data you provide
• We share data only with essential service providers (AI models, hosting, analytics)
• You have rights under GDPR, CCPA, and other privacy laws
• We do not sell your personal information
• You can request data export or deletion at any time

12. Intellectual Property

12.1 Our IP

The Service, including its design, code, branding, documentation, and non-open-source components, is owned by GetRomy LLC and protected by copyright, trademark, and other intellectual property laws.

12.2 Open Source

Rōmy includes open-source components. The source code for the main application is available under the license specified in our GitHub repository. This does not grant rights to our trademarks (Rōmy, GetRomy) or proprietary features.

12.3 Your Content

You retain ownership of all content you upload or create. By using the Service, you grant us a license to process, store, and display your content solely to provide the Service.

13. Third-Party Services

The Service integrates with third parties. You are subject to their terms:

We are not responsible for third-party practices, content, or service availability.

14. Disclaimers and Limitation of Liability

14.1 "As Is" Service

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

14.2 No Guarantees

We do not warrant that:

• The Service will be uninterrupted, secure, or error-free
• AI outputs will be accurate, complete, or reliable
• Donor research will result in successful fundraising
• Data from third-party sources is accurate or current
• Integrations with third parties will always function correctly

14.3 Liability Cap

TO THE MAXIMUM EXTENT PERMITTED BY LAW: Neither party's aggregate liability arising from this Agreement shall exceed the total amount paid by Customer in the twelve (12) months preceding the claim.

Exceptions: This cap does not apply to:

• Indemnification obligations
• Gross negligence or willful misconduct
• Breaches of data security obligations involving personal data
• Your violation of Section 10 (FCRA restrictions)

14.4 Consequential Damages Waiver

NEITHER PARTY SHALL BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOSS OF PROFITS, DATA, GOODWILL, OR BUSINESS OPPORTUNITIES, REGARDLESS OF WHETHER ADVISED OF THE POSSIBILITY.

15. Indemnification

15.1 By Us

We will indemnify and defend you against third-party claims alleging that the Service infringes intellectual property rights, provided you notify us promptly and cooperate in the defense.

15.2 By You

You will indemnify and defend us against claims arising from:

• Your content and data
• Your violation of these Terms
• Your use of the Service in violation of law (especially FCRA)
• Your violation of third-party rights
• Your use of AI outputs without proper verification

16. Termination

16.1 By You

You may stop using the Service at any time. To delete your account and data, contact privacy@getromy.app or use the account deletion feature in Settings.

16.2 By Us

We may suspend or terminate your access immediately, with or without notice, for:

• Violation of these Terms
• Fraudulent, abusive, or illegal activity
• Non-payment (after notice and cure period)
• Extended inactivity (24+ months, with notice)
• Technical or security reasons
• Discontinuation of the Service

16.3 Data Export and Deletion Rights

You have full control over your data:

• Complete export: Download all your data (chats, files, CRM data, memories) in standard formats (CSV, JSON)
• Partial export: Export specific chats, date ranges, or data categories
• Complete deletion: Permanently delete all your data from our systems — instantly
• Selective deletion: Delete specific chats, files, memories, or integration data while keeping your account

Important: When you delete your account, your data is deleted immediately. Export your data first if you want to keep a copy.

To export or delete data, use Settings or email privacy@getromy.app.

16.4 Data Return and Disposal Upon Termination

Upon contract termination or at your written request, we provide the following commitments:

Data Return (Export)

• Timeline: Available within 5 business days of request
• Formats: JSON, CSV, or other standard machine-readable formats
• Scope: All constituent records, donations, chat history, uploaded files, memories, and integration data

Data Disposal

• Timeline: Completed within 30 days of termination
• Method: Cryptographic erasure and physical deletion from all systems
• Verification: Written confirmation provided upon request
• Exceptions:
  • Anonymized analytics data (cannot be linked to you)
  • Billing records retained for 7 years (legal requirement)
  • Data subject to legal holds or ongoing investigations

Subprocessor Disposal

• Supabase: Cascade deletion within 24 hours
• OAuth tokens: Revoked immediately upon disconnection
• Backups: Purged within 24 hours of primary deletion

16.5 Survival

Sections on data ownership, liability, indemnification, governing law, and dispute resolution survive termination.

17. Changes to Terms

We may modify these Terms at any time. We will notify you of material changes by:

• Posting updated Terms with a new effective date
• Email notification (for registered users)
• In-app notification

Material changes take effect 30 days after notice. Continued use after the effective date constitutes acceptance. If you disagree, you must stop using the Service before the changes take effect.

18. Governing Law and Dispute Resolution

18.1 Governing Law

These Terms are governed by the laws of the State of Texas, without regard to conflict of law principles. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

18.2 Informal Resolution

Before filing any claim, you agree to contact us at legal@getromy.app and attempt good-faith negotiation for at least 30 days.

18.3 Binding Arbitration

If informal resolution fails, disputes shall be resolved through binding arbitration administered by the American Arbitration Association (AAA) under their Commercial Arbitration Rules. The arbitration shall be held in Kerrville, Texas (or remotely by agreement). The arbitrator's decision is final and binding.

18.4 Class Action Waiver

YOU WAIVE ANY RIGHT TO PARTICIPATE IN CLASS ACTIONS. All disputes must be brought individually. You cannot bring claims as a plaintiff or class member in any class, consolidated, or representative proceeding.

18.5 Small Claims Exception

Either party may bring qualifying claims in small claims court in Kerr County, Texas.

19. General Provisions

19.1 Entire Agreement

These Terms and our Privacy Policy constitute the entire agreement between you and GetRomy LLC.

19.2 Severability

If any provision is unenforceable, the remaining provisions remain in effect.

19.3 No Waiver

Our failure to enforce any provision does not waive our right to enforce it later.

19.4 Assignment

You cannot assign these Terms without our consent. We may assign our rights and obligations without restriction.

19.5 Force Majeure

Neither party is liable for failures caused by circumstances beyond reasonable control (natural disasters, war, government actions, internet outages, etc.).

19.6 Export Compliance

You agree to comply with all applicable export and import laws and regulations.

20. Contact Us

For questions about these Terms:

Email: legal@getromy.app
Privacy inquiries: privacy@getromy.app
Security issues: security@getromy.app

Mailing Address:
GetRomy LLC
Kerrville, TX 78028
United States