Terms of Service

Who we are, and what this covers

These Terms are a binding agreement between you and iTrix Co., Ltd (주식회사 아이트릭스), a company incorporated in the Republic of Korea. They apply to the itriX platform operated for professional and organisational use.

They govern the itriX website, the conversational assessment surface, any workspace we make available to you, and anything we prepare and deliver to you through those surfaces.

They do not govern a signed non-disclosure, evaluation, proof-of-concept or licence agreement between us. Those govern themselves, and where they conflict with these Terms, they prevail.

If you are using the platform for an organisation, you confirm you have authority to bind it, and "you" means both you and that organisation.

Eligibility and accounts

You must be at least 18 years old and legally able to enter a contract. The Platform is intended for use by organisations in a professional capacity; it is not a consumer service and is not directed at children.

You may begin a Conversation without an account, and you may open one at any time — including before you have said anything to us.

A Workspace is opened either by registering, which is open to anyone, or by invitation after we have reviewed what you described and there is something for us to work on together.

• You must provide accurate information and keep it current.
• You must accept these Terms and the Privacy Policy before the Workspace is created. We record the versions and time of that acceptance.
• You are responsible for activity under your credentials and must tell us promptly at itrix@gpslab.org if you believe they have been compromised.
• Invitations are personal, single-use and time-limited, and may not be shared or transferred.
• We may decline to create, suspend, or close a Workspace where we reasonably believe these Terms have been breached or an address is being used without authority.

Having a Workspace does not entitle you to any particular information. What we can discuss is governed by the Disclosure Policy, your contractual position, the work that has actually progressed, and any separate content authorization. Registering does not make you a customer and does not put us under an obligation to work with you.

We are not obliged to issue an invitation, and the absence of one is not a statement about you or your organisation.

Credentials and access

Choosing a password. We require at least 12 characters. We do not require particular symbols, digits or capitals, we do not force scheduled rotation, we do not use security questions, and we allow paste so you can use a password manager.

How we hold it. Your password is stored only as a salted cryptographic hash using Django's PBKDF2-SHA256 password hasher. We cannot read it, we will never ask you for it, and no member of our team can retrieve the original password.

Confirming your email address. When you register we email a single-use link that expires after 48 hours. Requesting a new link invalidates any earlier one.

You do not have to confirm your address to use your Workspace. Confirmation is required before we send non-authentication email, before an NDA is put in place, and before your address is named on a proposal, agreement or other commercial document. Confirmation proves control of an address; it is not content authorization and it does not raise disclosure.

Resetting your password. A reset link expires after 60 minutes, may be used once, and a new link invalidates older ones. We answer reset requests the same way whether or not an address has a Workspace.

When your password changes, every other signed-in session for the Workspace is signed out.

Two-factor authentication is not currently offered. Where it becomes available, we will tell you before it is required.

One account per address, and addresses that are not yours

One Workspace per email address. If an address is already in use, we do not create a second Workspace. We answer the registration request in the same outward way whether or not the address is already in use, and notify the holder rather than revealing account existence to the requester.

Do not register an address you do not control. If somebody registers your address, confirm nothing and tell us at itrix@gpslab.org; we will investigate and close or secure the Workspace where appropriate.

If a Workspace is opened and then never used — no Conversation, no confirmed address and no sign-in — we delete it and its data after 180 days. See Privacy §8.

Confidentiality before an NDA

The platform is a pre-contractual surface. Please do not send us confidential information before a non-disclosure agreement is in place. We say so wherever you can describe a problem, and we say it here as a term:

Please do not submit confidential technical information before an NDA. The initial assessment is based on non-confidential workload descriptions only.

Unless and until a signed NDA covers the disclosure, you should treat anything you send as disclosed without confidentiality obligations on our part, other than the handling, security and retention commitments we make in the Privacy Policy and the Security Statement.

If you send confidential material anyway, we apply restricted pre-NDA handling: shortened retention, access limited to the owning conversation and the internal roles that require it, and deletion on your request. That is our handling practice, not a substitute for an NDA and not a promise of confidentiality beyond the commitments expressly stated here.

You may delete any file, or an entire conversation, at any time. Deletion removes the stored file, anything we extracted from it, and any excerpt derived from it.

Your content

You own what you submit. Nothing here transfers ownership of it to us.

You grant us a non-exclusive, worldwide, royalty-free licence to host, store, copy, transmit, display, scan, extract text from and analyse it, solely in order to operate the platform, respond to you in the conversation you submitted it to, prepare your output, comply with law, and protect the platform. That licence ends when the content is deleted or its retention period expires.

Three limits on it, which we state as commitments rather than practice:

• We do not use your content to train, fine-tune or evaluate any model.
• We do not add it to the knowledge base the platform answers from, and we do not use it to answer any question other than yours.
• We do not sell it, and we do not disclose it other than as described in the Privacy Policy.

What we deliver, and what it is not

You may use, copy and share what we prepare for you within your organisation, for the purpose of evaluating whether to engage us further. Please do not publish it or disclose it outside your organisation without our written consent, because it may contain material disclosed to you under a controlled boundary.

We retain all intellectual property in it, in the platform, in our methods, and in the technologies behind them — including those we refer to as AXIOM, CRE and FQNM, and the products we refer to as ALPHA Compute and ALPHA Core. Nothing here grants you a licence to any of them. A licence is granted only by a separate signed agreement.

It is not a guarantee of performance. Before a proof of concept, our output contains no performance figures, and any statement about possible benefit is a hypothesis to be tested. Whether a transformation produces a measurable benefit in your environment depends on your workload, hardware, software stack, baseline and integration, and can only be established by measurement.

It is not professional advice, and it does not replace domain validation or safety certification for anything you deploy. You remain responsible for the decisions you take.

Personal data in what you send

The platform is built for workload descriptions, not personal data. Please do not attach files containing personal data, special-category data, health data, payment card data, government identifiers, or the personal data of anyone who has not been told you are sharing it, unless it is genuinely necessary and a data-processing agreement is in place.

Where you do submit personal data, you are its controller and we process it on your behalf. We may ask you to enter a data-processing agreement, and may decline to process material until you do.

Acceptable use

You must not, and must not permit anyone to:

• use the platform unlawfully, or in breach of an export control, sanctions or trade regime;
• attempt to obtain material you are not authorised to receive, including by manipulating a URL, a token, a file, a message, or an instruction embedded in a document;
• attempt to derive or reverse-engineer our methods, models, prompts or knowledge base from our output or from the platform’s behaviour;
• probe or test the platform’s security, except as permitted under the Security Statement;
• upload malware, or content designed to disrupt or degrade the platform;
• extract content at scale by automated means, or misrepresent who you act for;
• resell or provide the platform to a third party as a service.

We may rate-limit, suspend or terminate access where we reasonably believe any of the above is happening, and we may quarantine or refuse a file our scanning flags.

Automated and AI-assisted responses

Parts of the platform generate responses automatically. You should know the following, and we would rather you heard it from us.

Responses are prepared from approved material and are checked against our governance rules before they reach you. A response may be replaced by a notice while a specialist reviews it, or stopped part-way through. That is the system working as intended.

Responses may still be incomplete or wrong. Please do not rely on one for a decision of consequence without confirming it with a named person, whom you can reach at any time from the conversation header.

No automated response is an offer, a quotation, a commitment, a warranty or a legal interpretation, and none can vary these Terms, agree a price, grant a licence, waive a right, or create a confidentiality obligation. Only a signed writing from an authorised itriX signatory can do those things.

An automated response may quote and cite these instruments. It will not interpret them for you. If you need an interpretation, ask for a person.

Fees

Use of the public platform, including a Compute Bottleneck Review, is free. Paid engagements are governed by a separate written agreement or order form stating scope, fees, taxes, payment terms and deliverables. Fees exclude VAT and withholding taxes unless stated.

Disclaimers and liability

The platform and our output are provided "as is" and "as available". To the fullest extent permitted by law we exclude all implied warranties, including merchantability, fitness for a particular purpose and non-infringement.

We do not warrant that the platform will be uninterrupted or error-free, that a response will be accurate or complete, that a hypothesis will be borne out by measurement, or that any particular runtime, memory, energy, accuracy, conservation, reproducibility or cost result will be achieved.

Neither party is liable for indirect, special, incidental, consequential or punitive loss, or for loss of profit, revenue, anticipated saving, business, goodwill or data.

For use of the free public platform, our total aggregate liability arising out of or relating to these Terms is limited to KRW 1,000,000. For a paid engagement, liability for that engagement is governed by its separate signed agreement; if that agreement is silent, our aggregate liability is limited to the fees paid for that engagement in the twelve months before the event giving rise to the claim.

Nothing here excludes liability that cannot lawfully be excluded, including for death or personal injury caused by negligence, or for fraud.

Changes, law and disputes

We may change these Terms. Each version carries a version number and an effective date. For a change that materially affects your rights we will ordinarily give at least 30 days’ notice on the platform and, where you hold a workspace, by email, and we will ask you to accept the new version at your next sign-in. A shorter period may be used where a change is required by law or is reasonably necessary to address an urgent security or legal issue.

These Terms are governed by the laws of the Republic of Korea. Where you are established in Korea, the Korean courts have exclusive jurisdiction and the Seoul Central District Court is the court of first instance.

Where you are established outside Korea, the parties will first attempt to resolve the dispute in good faith for 30 days; failing that, it is finally settled under the KCAB International Arbitration Rules, administered by the Korean Commercial Arbitration Board, with the seat of arbitration in Seoul, Republic of Korea, before one arbitrator, in English. Either party may seek interim relief from a court to protect its intellectual property or confidential information.

Nothing in this section deprives you of a mandatory protection or forum available under the law of your place of establishment.

These Terms are prepared in English and Korean. The English version governs in the event of conflict. Notices to us: itrix@gpslab.org.