AGB / EULA
EULA
Last updated: September 9, 2026
END-USER LICENSE AGREEMENT AND TERMS OF SERVICE Patronus Protect
Effective Date: 9 September 2026
Version: 1.1
ZUSAMMENFASSUNG AUF DEUTSCH
Der vollständige Vertragstext folgt unten in englischer Sprache. Diese
Zusammenfassung erklärt die wichtigsten Punkte. Für Verbraucherinnen und
Verbraucher mit gewöhnlichem Aufenthalt in Deutschland gilt: Weicht der
englische Text von dieser Zusammenfassung oder von zwingendem deutschen
Recht ab, gehen die Zusammenfassung und das zwingende Recht vor.
Anbieter ist die Casdo Labs GmbH, Franz-Joseph-Straße 11, 80801 München,
Amtsgericht München, HRB 315964, E-Mail team@patronus.studio.
Geltungsbereich. Diese Bedingungen gelten für die Desktop-Anwendungen
Patronus Monitor (kostenlos) und Patronus Protect (kostenpflichtige
Vollversion) für macOS und Windows, für die zugehörigen Online-Dienste,
für den Online-Scanner und die Scan-Schnittstelle (API) unter
control.patronus.studio sowie ergänzend für die Open-Source-Library
Patronus Ark und die veröffentlichten Modelle. Für Patronus Ark und die
Modelle gehen die jeweiligen Open-Source-Lizenzen (insbesondere Apache
License 2.0) vor; eine kommerzielle Lizenz für Patronus Ark wird gesondert
schriftlich vereinbart.
Lizenz. Sie erhalten ein einfaches, nicht übertragbares Recht, die
Software auf Geräten zu installieren und zu nutzen, die Sie besitzen oder
rechtmäßig kontrollieren. Untersagt sind insbesondere die Umgehung von
Lizenzmechanismen, die Nutzung zu rechtswidrigen Zwecken und die
Installation auf Geräten Dritter ohne deren Zustimmung.
Sicherheitsfunktion. Die Software ist eine Schutzschicht unter mehreren.
Keine Sicherheitssoftware erkennt jeden Angriff und jede sensible
Information; Fehlalarme und übersehene Fälle sind möglich. Monitor greift
nicht in den Datenverkehr ein. Die Software, der Scanner, die Library und
die Modelle ersetzen weder eigene Sicherheitsmaßnahmen noch eine
rechtliche Beratung. Der AI-Act-Check auf der Website ist eine
Selbsteinschätzung, keine Rechtsberatung und keine Zertifizierung.
Scanner und API. Sie dürfen nur Inhalte prüfen lassen, die Sie selbst
verantworten, und nur MCP-Server, die Sie betreiben oder für deren
Prüfung Sie berechtigt sind. Geben Sie keine vertraulichen Daten ein.
Ergebnisse sind Hinweise, keine Garantie. Für den Online-Scanner gibt es
keine Verfügbarkeitszusage.
Gewährleistung und Haftung. Für die kostenlose Edition gelten die
gesetzlichen Regeln für unentgeltliche Leistungen; der Anbieter haftet
insoweit für Vorsatz, grobe Fahrlässigkeit und arglistig verschwiegene
Mängel. Für die kostenpflichtige Edition gelten für Verbraucher die
gesetzlichen Gewährleistungsrechte für digitale Produkte (§§ 327 ff.
BGB) einschließlich der Pflicht zu Sicherheitsupdates während des
vertraglich zu erwartenden Zeitraums. In jedem Fall haftet der Anbieter
unbeschränkt für Vorsatz, grobe Fahrlässigkeit, Verletzungen von Leben,
Körper und Gesundheit sowie nach dem Produkthaftungsgesetz. Bei leichter
Fahrlässigkeit haftet der Anbieter nur bei Verletzung wesentlicher
Vertragspflichten und begrenzt auf den vertragstypischen, vorhersehbaren
Schaden.
Widerrufsrecht. Verbraucher, die die kostenpflichtige Edition online
erwerben, erhalten im Bestellvorgang eine gesonderte Widerrufsbelehrung.
Änderungen. Änderungen dieser Bedingungen werden angekündigt. Verbraucher
in Deutschland können innerhalb von sechs Wochen widersprechen; dann
gelten die bisherigen Bedingungen weiter, bis der Vertrag von einer Seite
beendet wird.
Recht und Gerichtsstand. Es gilt deutsches Recht. Für Verbraucher bleiben
die zwingenden Verbraucherschutzvorschriften ihres Aufenthaltsstaats
unberührt. Ein Gerichtsstand in München gilt nur gegenüber Kaufleuten und
juristischen Personen des öffentlichen Rechts. Der Anbieter nimmt nicht
an Verfahren vor einer Verbraucherschlichtungsstelle teil (§ 36 VSBG).
Sicherheitslücken melden Sie bitte an team@patronus.studio mit dem
Betreff "Security" (siehe auch /.well-known/security.txt).
IMPORTANT NOTICE TO USER
PLEASE READ THIS END-USER LICENSE AGREEMENT AND TERMS OF SERVICE (TOGETHER, THE
"AGREEMENT") CAREFULLY BEFORE DOWNLOADING, INSTALLING, OR USING THE SOFTWARE.
BY (i) CLICKING "I AGREE" OR ANY SIMILAR BUTTON PRESENTED DURING INSTALLATION,
(ii) DOWNLOADING OR INSTALLING THE SOFTWARE, OR (iii) OTHERWISE ACCESSING OR
USING THE SOFTWARE OR THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ THIS
AGREEMENT, UNDERSTAND IT, AND AGREE TO BE LEGALLY BOUND BY ITS TERMS. IF YOU DO
NOT AGREE, YOU MUST NOT INSTALL OR USE THE SOFTWARE AND MUST IMMEDIATELY DELETE
ANY COPIES IN YOUR POSSESSION.
THIS AGREEMENT IS ENTERED INTO BETWEEN YOU (AS DEFINED BELOW) AND Casdo Labs
GmbH, a German limited liability company (Gesellschaft mit beschränkter
Haftung, Local Court of Munich, HRB 315964), represented by its managing directors Benedikt Veith, Dominik
Hommer and Moritz Trautmann, organized under the laws of the Federal
Republic of Germany (THE "PROVIDER").
THIS AGREEMENT IS COMPRISED OF THREE PARTS:
-
PART A: End-User License Agreement (Software License)
-
PART B: Terms of Service (Service Use Terms)
-
PART C: General Provisions Applying to Parts A and B
The Free Edition of the Software is provided to You at no charge. Section 17
contains important LIMITATIONS OF LIABILITY. Section 22 contains GOVERNING LAW
and JURISDICTION provisions. Please review these sections carefully.
DEFINITIONS
For the purposes of this Agreement, the following capitalized terms shall have
the meanings set forth below. Other capitalized terms are defined where they
first appear.
1.1 "Account" means an optional user account that You may create with the
Provider's identity provider (Clerk) in order to use features that
require authentication.
1.2 "Agreement" means this End-User License Agreement and Terms of Service,
including any annexes, schedules, and documents incorporated by
reference (including, without limitation, the Privacy Policy).
1.3 "Device" means a single physical computer running a supported version
of macOS or Microsoft Windows that is owned or lawfully controlled by
You.
1.4 "Documentation" means the user documentation, online help materials,
release notes, and any in-application descriptions that the Provider
makes available for the Software.
1.5 "Effective Date" means 9 September 2026, the date on which this
Version 1.1 of the Agreement takes effect. Version 1.0 applied from
13 May 2026.
1.6 "Free Edition" means the no-charge edition of the Software
("Patronus Monitor") made generally available to end users by the
Provider, as well as any free trial period of the Paid Edition.
1.7 "Open-Source Components" means third-party software components
incorporated into or distributed with the Software that are licensed
under open-source licenses, as further described in Section 6.
1.8 "Privacy Policy" means the Provider's privacy notice published
alongside the Software and incorporated into this Agreement by
reference under Section 14.
1.9 "Provider" has the meaning given in the Important Notice above.
1.10 "Root CA" means the root certification authority generated locally on
Your Device by the Software and installed by the Software into the
operating system's certificate store (on macOS the System Keychain, on
Windows the local machine certificate store) to enable the Software's
traffic-inspection function.
1.11 "Service" means the online components operated by or on behalf of the
Provider that the Software communicates with, including device
registration, software updates, telemetry endpoints, and any related
backend functionality.
1.12 "Software" means the desktop applications known as "Patronus
Monitor" and "Patronus Protect" for macOS and Microsoft Windows, in
the edition licensed to You, including the graphical user interface,
the bundled System Extension or system service, the bundled local
proxy, related libraries and binaries, Documentation, and any Updates
thereto, but excluding Open-Source Components, the Library and the
Models to the extent governed by their own licenses.
1.13 "System Extension" means the macOS Network Extension / App Proxy
Provider or the equivalent Windows system service distributed as part
of the Software.
1.14 "Telemetry" means non-content aggregate technical signals (such as
counters, latencies, and policy status) transmitted by the Software to
the Service, as further described in the Privacy Policy.
1.15 "Update" means any modification, patch, hotfix, upgrade, bug fix, or
new version of the Software that the Provider makes available to You.
1.16 "User" or "You" or "Your" means the natural person who installs or
uses the Software, the Scan Service or the API, and, where applicable,
the legal entity on whose behalf such natural person acts.
1.17 "Paid Edition" means the edition of the Software known as "Patronus
Protect" that is made available against payment, including the
enforcement, policy and audit functions not contained in the Free
Edition.
1.18 "Scan Service" means the online scanner offered on the Website and
the scanning interface (API) operated by the Provider at
control.patronus.studio, through which text, files, URLs or MCP server
metadata are analysed for prompt injection and related risks.
1.19 "Library" means the open-source security library "Patronus Ark" made
available by the Provider under the open-source license stated in its
repository; a commercial license for the Library is subject to a
separate written agreement.
1.20 "Models" means the machine-learning models published by the Provider,
in particular on Hugging Face, under the license stated in the
respective model card (currently the Apache License 2.0).
1.21 "Website" means https://patronus.studio including its subdomains.
1.22 "Consumer" means a natural person who enters into this Agreement for
purposes that are predominantly outside their trade, business or
profession (section 13 of the German Civil Code, BGB).
1A. SCOPE OF THE PARTS OF THIS AGREEMENT
Part A applies to the Software in both Editions. Part B applies to the
Service and, in Section 9A, to the Scan Service and the API. The Library
and the Models are governed by their open-source licenses; Section 6A
applies in addition. Part C applies to everything. Where You are a
Consumer, the provisions of this Agreement apply only to the extent that
they do not conflict with mandatory consumer-protection law, and the
German summary at the top of this document prevails in case of conflict.
PART A - END-USER LICENSE AGREEMENT (EULA)
2. GRANT OF LICENSE
2.1 License Grant. Subject to Your continuing compliance with the terms and
conditions of this Agreement, the Provider hereby grants You a
personal, limited, non-exclusive, non-transferable, non-sublicensable,
royalty-free, revocable, worldwide license to install and use the Free
Edition of the Software, in object-code form only, on Devices that You
own or lawfully control, solely for Your own internal personal or
business purposes (the "License").
2.2 No Implied Licenses. No license, right, or interest in any trademark,
trade name, service mark, or logo of the Provider or any third party is
granted under this Agreement. All rights not expressly granted to You
are reserved by the Provider and its licensors.
2.3 No Fee. The Free Edition is provided to You at no charge. The
Provider's gratuitous provision of the Free Edition does not give rise
to any claim by You for continued availability, feature parity, or any
particular level of functionality.
PERMITTED USES
3.1 Subject to the restrictions in Section 4, You may:
(a) install the Software on any number of Devices that You own or lawfully control; (b) make one (1) backup copy of the Software for archival purposes, provided that such copy bears all proprietary notices contained in the original; (c) use the Software in the ordinary course of Your personal or professional activities, including on Devices made available to You by Your employer, provided that You are authorized by Your employer to install and run the Software (including the System Extension and the Root CA) on such Devices; and (d) configure the Software in accordance with the Documentation.
4. RESTRICTIONS
4.1 General. Except as expressly permitted by this Agreement or by
applicable mandatory law, You must not, and must not authorize or
permit any third party to:
(a) sell, lease, rent, lend, distribute, sublicense, host as a service, time-share, or otherwise commercially exploit the Software or make it available to any third party; (b) modify, adapt, alter, translate, port, or create derivative works based on the Software, or merge the Software with any other software; (c) reverse engineer, decompile, disassemble, decrypt, or otherwise attempt to derive the source code, underlying ideas, algorithms, file formats, or non-public APIs of the Software (the "Reverse-Engineering Restriction"); (d) remove, obscure, or alter any copyright, trademark, patent, or other proprietary or restrictive notice or legend contained in or on the Software or the Documentation; (e) use the Software to develop, train, benchmark, or evaluate any product or service that competes with the Software; (f) use the Software in violation of any applicable law or regulation, including, without limitation, laws relating to data protection, telecommunications privacy, computer crime, intellectual property, and export control; (g) use the Software to intercept, monitor, or analyse network traffic on any Device that You do not own or lawfully control, or in any manner that constitutes unlawful surveillance of any third party, or to circumvent the security of any system You are not authorized to access; (h) use the Software in any application or environment in which the failure of the Software could reasonably be expected to result in death, personal injury, or severe physical or environmental damage, including life support, nuclear, aviation, or other high-risk uses; (i) bypass, disable, or otherwise circumvent any license-validation, rate-limiting, or update-distribution mechanism of the Software or the Service; or (j) authorize any of the foregoing.
4.2 Reverse-Engineering Carve-Out (EU / EEA Users). Nothing in the
Reverse-Engineering Restriction shall limit or restrict any rights You
may have under mandatory applicable law that cannot be excluded by
contract. In particular, You retain the rights granted to lawful users
of computer programs under Articles 5 and 6 of Directive 2009/24/EC of
the European Parliament and of the Council of 23 April 2009 on the
legal protection of computer programs (the "EU Software Directive"),
including the right to:
(a) observe, study, and test the functioning of the Software in accordance with Article 5(3) of the EU Software Directive while performing any act of loading, displaying, running, transmitting, or storing the Software that You are entitled to perform; and (b) decompile the Software to the extent indispensable to obtain the information necessary to achieve the interoperability of an independently created computer program with the Software, in accordance with the conditions of Article 6 of the EU Software Directive. Where You intend to exercise the right described in subsection (b), You shall first request the necessary interoperability information from the Provider in writing and allow the Provider a reasonable period to provide it. United States Users retain any corresponding rights granted by Section 1201(f) of Title 17 of the United States Code, where applicable.
4.3 Compliance Obligation. You are responsible for ensuring that Your use
of the Software complies with all laws and regulations applicable to
You, including in Your country of residence and in any country from
which You access the Software.
RESERVATION OF RIGHTS AND INTELLECTUAL PROPERTY
5.1 Ownership. The Software is licensed, not sold. The Provider and its
licensors retain all right, title, and interest in and to the
Software, the Documentation, the Service, and all related intellectual
property rights, including, without limitation, all copyrights,
patents, trademarks, trade secrets, and database rights. This
Agreement does not convey to You any rights of ownership in or related
to the Software.
5.2 Feedback. If You provide the Provider with any suggestions, comments,
improvement ideas, or other feedback relating to the Software or the
Service ("Feedback"), You grant the Provider a perpetual, irrevocable,
worldwide, royalty-free, non-exclusive, sublicensable license to use,
reproduce, modify, and exploit such Feedback for any purpose, without
obligation or compensation to You. You represent that You have the
right to grant such license and that the Feedback does not include
confidential information of any third party.
5.3 Marks. "Patronus Protect" and any related logos, slogans, and product
names are trademarks or service marks of the Provider. You shall not
use such marks except (i) as expressly authorized by this Agreement
or in writing by the Provider, or (ii) for nominative-fair-use
references to the Software that comply with applicable trademark law.
OPEN-SOURCE COMPONENTS
6.1 Inclusion. The Software incorporates certain Open-Source Components,
including, without limitation, components based on Tauri (MIT /
Apache-2.0), ONNX Runtime (MIT), HuggingFace Tokenizers (Apache-2.0),
mitmproxy (MIT), the Clerk React SDK (MIT), and various Rust crates
such as serde, reqwest, and sentry-rust (MIT / Apache-2.0).
6.2 Notice File. A complete list of the Open-Source Components included
in the version of the Software installed on Your Device, together
with the applicable license texts and required attribution notices,
is accessible from within the Software at the menu item
"About Patronus Protect -> Licenses" and as a NOTICE file installed
alongside the Software bundle.
6.3 Precedence. The terms of the applicable open-source licenses govern
Your use, modification, and redistribution of each Open-Source
Component to the extent required by such license. To the extent any
provision of this Agreement conflicts with the terms of an applicable
open-source license with respect to a particular Open-Source
Component, the terms of such open-source license shall prevail with
respect to that Open-Source Component, but only to the extent of the
conflict.
6.4 No Warranty for Open-Source Components. Open-Source Components are
provided under their respective licenses, which typically include "as
is" disclaimers. The Provider provides no additional warranty in
respect of Open-Source Components beyond what is required by their
respective licenses or by mandatory applicable law.
6A. PATRONUS ARK (LIBRARY) AND PUBLISHED MODELS
6A.1 Open-Source Licenses Prevail. Your use, modification and
redistribution of the Library and of the Models are governed exclusively
by the open-source license stated in the respective repository or model
card (currently the Apache License 2.0). Those licenses include a
disclaimer of warranties and a limitation of liability. Nothing in this
Agreement grants additional rights in, or imposes additional
restrictions on, the Library or the Models beyond those licenses.
6A.2 Commercial License. A commercial license for the Library, including
support, indemnities or service levels, is available only under a
separate written agreement with the Provider.
6A.3 Nature of the Models. The Models are classifiers that assign
probabilities to inputs. They are one layer of a defence-in-depth
architecture and are not designed or intended to be the sole basis for
decisions with legal or similarly significant effects on natural
persons. You are responsible for evaluating the Models for Your use
case, for setting thresholds, and for combining them with deterministic
controls and human review where the impact of a decision requires it.
6A.4 Your Role under AI Law. Where You integrate the Library or the Models
into Your own AI system, You act as provider or deployer of that system
within the meaning of Regulation (EU) 2024/1689 (the "AI Act") and are
responsible for compliance with the obligations that apply to it. You
must not use the Library or the Models for practices prohibited under
Article 5 of the AI Act or otherwise in violation of applicable law.
6A.5 Attribution and Trademarks. The open-source licenses require that
license and attribution notices are retained. The names "Patronus",
"Patronus Protect", "Patronus Ark", "Wolf Defender" and the associated
logos are trademarks of the Provider; the open-source licenses do not
grant trademark rights beyond what is needed to describe the origin of
the Library and the Models.
LICENSE TERM, TERMINATION, AND EFFECTS OF TERMINATION
7.1 Term. The License granted under Section 2 commences on the date You
first install or use the Software and continues until terminated as
provided in this Section 7.
7.2 Termination by You. You may terminate this Agreement at any time and
for any reason by ceasing all use of the Software and uninstalling it
from all Devices.
7.3 Termination by the Provider. The Provider may terminate this
Agreement and the License (i) immediately upon notice to You if You
materially breach this Agreement and fail to cure such breach within
thirty (30) days after receipt of written notice (or, where the
breach is incapable of cure or relates to a violation of
Section 4.1(f), 4.1(g), 19, or any applicable law, immediately
without prior notice), or (ii) for convenience upon thirty (30) days'
written notice to You.
7.4 Effects of Termination. Upon termination of this Agreement, for any
reason:
(a) all rights granted to You under this Agreement, including the License, will immediately terminate; (b) You must promptly cease all use of the Software; (c) You must uninstall the Software, including the System Extension, from all Devices on which it is installed; (d) YOU MUST REMOVE THE ROOT CA THAT THE SOFTWARE INSTALLED INTO THE macOS SYSTEM KEYCHAIN ON EACH AFFECTED DEVICE. Failure to remove the Root CA may leave Your Device in a state in which third parties holding the corresponding private key could theoretically present trusted certificates for arbitrary hosts. The Provider does not retain such private key material, which is generated locally on Your Device, but recommends that You delete the Root CA out of an abundance of caution; and (e) You should delete the local data directories created by the Software, including those located at ~/Library/Application Support/com.patronus.desktop/, ~/Library/Logs/com.patronus.desktop/, and ~/Library/Caches/com.patronus.desktop/.
7.5 Survival. The provisions of Sections 1, 4, 5, 6.3, 7.4, 7.5, 14, 16,
17, 18, 19, 22, 23, and 25 will survive any termination or
expiration of this Agreement.
PART B - TERMS OF SERVICE (SERVICE USE)
8. ACCOUNT REGISTRATION
8.1 Anonymous Device Registration. When the Software is first launched
on a Device, it will register the Device with the Service by
transmitting a locally generated device identifier and edition code
to the Provider's backend in order to receive a cryptographic
device token. No personal information is required for this
registration, and the registration is treated as pseudonymous. The
Privacy Policy describes this process in detail.
8.2 Optional Sign-In. Use of the Free Edition does not require You to
create an Account. You may optionally choose to sign in via the
Provider's identity provider (Clerk) to access features that require
authentication. If You create an Account, You must:
(a) provide accurate, current, and complete information when registering and keep it up to date; (b) maintain the confidentiality of Your credentials and any authentication factors associated with Your Account; and (c) promptly notify the Provider of any suspected unauthorized access to or use of Your Account.
8.3 Responsibility for Account. You are solely responsible for all
activity that occurs under Your Account, except to the extent caused
by the Provider's intentional misconduct or gross negligence.
ACCEPTABLE USE POLICY
9.1 You agree not to use the Software or the Service:
(a) in violation of any law, regulation, or third-party rights; (b) to upload, transmit, or store any content that is unlawful, defamatory, infringing, harassing, or otherwise objectionable; (c) to send any malware, viruses, worms, trojans, ransomware, or other malicious code, or to interfere with, disrupt, or impose an unreasonable load on the Service or any infrastructure used to provide it; (d) to attempt to gain unauthorized access to any account, system, or network of the Provider or any third party; (e) to engage in scraping, crawling, or automated collection of data from the Service that is not expressly permitted by the Provider; (f) to reverse engineer or probe the Service for vulnerabilities, except pursuant to a vulnerability disclosure program operated by the Provider; or (g) to facilitate any of the foregoing.
9.2 The Provider may, in its reasonable discretion and without
liability, investigate suspected violations of this Section 9 and
take appropriate action, including the suspension or termination of
access to the Service.
9A. SCAN SERVICE AND API
9A.1 Permitted Use. The Scan Service and the API may be used only to
analyse content that You own or are authorised to submit. Where You
submit the address of an MCP server or other system, You represent that
You operate that system or are expressly authorised by its operator to
have it examined. Unauthorised scanning of third-party systems is
prohibited and may be a criminal offence (in Germany in particular
sections 202a to 202d of the Criminal Code, StGB).
9A.2 No Confidential Data. Do not submit trade secrets, credentials,
personal data of third parties or other confidential content to the
online scanner. Where You use the API to process personal data, You are
the controller of that processing and a data processing agreement with
the Provider must be in place before such data is submitted.
9A.3 Nature of Results. Results of the Scan Service are automated
assessments provided for information. They may contain false positives
and false negatives, reflect the state of the Models at the time of the
request, and do not constitute a security audit, a certification or
legal advice. You remain responsible for decisions taken on the basis of
the results.
9A.4 Fair Use and Availability. The online scanner is provided free of
charge, on an "as available" basis, without any commitment as to
availability or response time. The Provider may impose rate limits,
input limits and technical restrictions, may suspend access in case of
abuse or excessive load, and may modify or discontinue the online
scanner at any time. Commercial use of the API, including service
levels, is subject to a separate written agreement.
9A.5 Use of Inputs. The Provider processes inputs to the Scan Service
solely to produce the result and to operate the service securely, as
described in the Privacy Policy. Inputs are not used to train Models.
9A.6 Prohibited Conduct. Section 9 applies to the Scan Service and the
API. In addition, You must not use the Scan Service to probe, circumvent
or reverse-engineer the Models, to build a competing detection service
from systematic queries, or to interfere with the service of other
users.
EXPRESS CONSENT TO SYSTEM MODIFICATIONS
10.1 Purpose. The Software performs its security function by deploying
a macOS System Extension and a locally installed Root CA. By
installing the Software, You expressly consent to the system-level
modifications described in this Section 10.
10.2 System Extension. You expressly consent to the installation,
activation, and operation on Your Device of a macOS Network
Extension / App Proxy Provider distributed as part of the
Software, which intercepts and routes outbound network traffic to
supported AI providers (currently approximately fifty-six (56)
providers) through a local proxy operated by the Software.
10.3 Root CA Installation. You expressly consent to the generation of a
Root CA on Your Device and to its installation, with Your
administrator credentials, into the macOS System Keychain as a
trusted root certificate. You acknowledge and accept that, for as
long as the Root CA is installed, the Software is technically
capable of decrypting outbound TLS traffic from Your Device to the
supported AI provider hostnames. You further acknowledge that:
(a) the Root CA's private key is generated and stored exclusively on Your Device and is not transmitted to the Provider; (b) only network traffic to the supported AI provider hostnames is routed through the local proxy by default; and (c) You are responsible for removing the Root CA upon uninstallation, in accordance with Section 7.4(d).
10.4 Automatic Updates. You expressly consent to the Software
periodically checking for, downloading, and installing Updates,
and to the Service distributing such Updates over secure channels
operated by or on behalf of the Provider. The Provider may, but
is not obligated to, provide release notes for Updates.
10.5 Telemetry. You expressly consent to the collection and
transmission of Telemetry as described in the Privacy Policy. The
Provider does not collect prompt content or response content via
Telemetry. Where the Privacy Policy permits You to disable
Telemetry, You may exercise that option at any time.
USER REPRESENTATIONS AND WARRANTIES
11.1 You represent and warrant that:
(a) You are at least sixteen (16) years of age or have obtained the consent of Your parent or legal guardian to enter into this Agreement and to install the Software; (b) You have full legal capacity and authority to enter into this Agreement and, where applicable, to bind any legal entity on whose behalf You act; (c) You are the sole user of the Device on which the Software is installed, or, if other persons use the Device, You have obtained their informed consent to the system modifications described in Section 10 and to the operation of the Software; (d) You are not located in, under the control of, or a resident of any country, region, or territory that is subject to a comprehensive embargo administered by the European Union, the United States Government, the United Kingdom, or the United Nations, and You are not on any list of restricted parties maintained by any of those authorities (including, without limitation, the U.S. Treasury Department's Office of Foreign Assets Control Specially Designated Nationals and Blocked Persons List and the EU consolidated financial sanctions list); and (e) You will not use the Software in violation of any export control or sanctions law described in Section 19.
12. UPDATES AND MODIFICATIONS TO THE SOFTWARE
12.1 Right to Modify. The Provider may, at its discretion and without
liability, modify, enhance, deprecate, or remove features of the
Software and the Service, including in response to legal,
regulatory, security, technical, or commercial considerations.
12.2 Automatic Distribution. Updates may be distributed and installed
automatically. Where an Update materially reduces the functionality
of the Software on which You reasonably rely, the Provider will
use reasonable efforts to provide advance notice within the
Software.
12.3 Critical Updates. The Provider reserves the right to deploy
Updates without prior notice where necessary to address serious
security vulnerabilities or material compliance issues, in which
case notice will be provided promptly after deployment.
12.4 No Obligation. Nothing in this Agreement obligates the Provider to
develop, release, or maintain any particular Update or feature.
THIRD-PARTY AI SERVICES
13.1 Independent Relationship. The Software interacts with third-party
AI services operated by entities other than the Provider
(including, but not limited to, OpenAI, Anthropic, Google, and
Microsoft) (each, a "Third-Party AI Service"). Your use of any
Third-Party AI Service is governed by Your separate contractual
relationship with the provider of that Third-Party AI Service,
including any terms of service, acceptable use policy, and
privacy notice that they publish.
13.2 No Agency. The Provider is not a party to, and assumes no
responsibility under, any contract between You and any Third-Party
AI Service. The Provider does not act as Your agent or
representative in respect of any Third-Party AI Service and is
not a processor of personal data on behalf of any Third-Party AI
Service.
13.3 No Endorsement. The inclusion of any Third-Party AI Service in
the list of supported providers does not constitute an
endorsement of that Third-Party AI Service by the Provider.
13.4 Compliance. You are solely responsible for ensuring that Your use
of the Software in connection with any Third-Party AI Service
complies with the terms imposed by that Third-Party AI Service,
including any restrictions on automated access, content
inspection, or processing of personal data.
PRIVACY
14.1 Privacy Policy. The processing of personal data in connection with
the Software and the Service is governed by the Privacy Policy,
which is incorporated into this Agreement by reference and forms
an integral part of it. By accepting this Agreement, You
acknowledge that You have read and understood the Privacy Policy.
14.2 Conflict. In case of a direct conflict between the Privacy Policy
and this Agreement on matters of data processing, the Privacy
Policy prevails.
SERVICE AVAILABILITY AND SUSPENSION RIGHTS
15.1 No Uptime Commitment. The Service is provided on an "as available"
basis. The Provider does not warrant that the Service will be
uninterrupted, error-free, timely, or available at any particular
time, and does not commit to any specific service level or
availability target for the Free Edition.
15.2 Maintenance. The Provider may, in its reasonable discretion,
schedule maintenance windows or perform emergency maintenance,
during which all or part of the Service may be unavailable.
15.3 Suspension. The Provider may suspend Your access to all or part
of the Service, without liability:
(a) if the Provider reasonably believes that You have violated Section 9 or any other material provision of this Agreement; (b) to investigate suspected unlawful or abusive activity; (c) to protect the security, integrity, or availability of the Service or any third party; or (d) if required by applicable law, court order, or other binding directive issued by a competent authority. The Provider will, where reasonably practicable and not prohibited by law, provide You with prior or contemporaneous notice of any suspension and an opportunity to remedy the underlying cause. PART C - GENERAL PROVISIONS APPLYING TO BOTH PARTS
16. DISCLAIMER OF WARRANTIES
16.1 As Is, As Available. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE
LAW, AND SUBJECT TO SECTION 16.4, THE SOFTWARE AND THE SERVICE
ARE PROVIDED "AS IS" AND "AS AVAILABLE", WITH ALL FAULTS, AND
WITHOUT WARRANTY OF ANY KIND. THE PROVIDER AND ITS LICENSORS,
SUPPLIERS, AND DISTRIBUTORS HEREBY DISCLAIM ALL WARRANTIES,
WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING,
WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT,
AND ANY WARRANTIES ARISING OUT OF COURSE OF DEALING, USAGE, OR
TRADE PRACTICE.
16.2 Security Function. The Software is designed to assist You in
detecting and mitigating certain risks associated with the use of
Third-Party AI Services (such as prompt injection, accidental
exposure of personal data, and policy violations). YOU
ACKNOWLEDGE AND AGREE THAT NO SOFTWARE-BASED SECURITY MEASURE IS
INFALLIBLE AND THAT THE PROVIDER DOES NOT WARRANT THAT THE
SOFTWARE WILL DETECT OR PREVENT ALL POTENTIAL RISKS OR ATTACKS.
The Software is not a substitute for comprehensive endpoint
security, identity and access management, data-loss prevention,
or the exercise of Your own judgment in handling sensitive
information. Detection results may contain false positives and
false negatives; attack techniques evolve, and detection reflects
the state of the Models and rules at the time of use. The Free
Edition monitors and reports but does not block or modify traffic.
16.3 Beta and Preview Features. Any pre-release, beta, alpha,
experimental, or preview features that the Provider may make
available are provided strictly on an "as is" basis, without any
warranty whatsoever, and may be modified, suspended, or
discontinued at any time. You use such features at Your own
risk.
16.4 Mandatory Statutory Rights. Nothing in this Section 16 limits or
excludes any warranty, condition, or representation that cannot
be limited or excluded under applicable mandatory law (including,
in the case of German law, liability for fraudulent concealment
of defects and the rules applicable to gifts under sections 516
et seq. of the German Civil Code).
16.5 Paid Edition and Consumers. Where You acquire the Paid Edition
against payment, the Provider warrants that the Software conforms to
the contract in accordance with the applicable statutory provisions.
For Consumers, the statutory rules on digital products (sections 327
et seq. BGB) apply, including the Provider's obligation to provide
updates, in particular security updates, for the period the Consumer
can reasonably expect (section 327f BGB). Sections 16.1 to 16.3 apply
to Consumers only to the extent permitted by those provisions.
16.6 No Legal or Compliance Advice. The Software, the Scan Service, the
Library, the Models, the Documentation, the Website and the AI Act
self-assessment offered on the Website provide technical information.
They do not constitute legal advice, a compliance certification or a
confirmation that Your use of AI systems complies with the AI Act, the
GDPR or any other law. Obtain independent legal advice where required.
LIMITATION OF LIABILITY
17.1 Exclusion of Certain Damages. TO THE MAXIMUM EXTENT PERMITTED BY
APPLICABLE LAW, AND SUBJECT TO SECTION 17.4, IN NO EVENT WILL THE
PROVIDER, ITS AFFILIATES, OFFICERS, EMPLOYEES, AGENTS, LICENSORS,
OR SUPPLIERS BE LIABLE TO YOU FOR ANY INDIRECT, INCIDENTAL,
SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR
ANY LOSS OF PROFITS, REVENUE, BUSINESS, GOODWILL, USE, OR DATA,
ARISING OUT OF OR RELATING TO THIS AGREEMENT, THE SOFTWARE, OR
THE SERVICE, EVEN IF THE PROVIDER HAS BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.
17.2 Aggregate Cap. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW,
AND SUBJECT TO SECTION 17.4, THE AGGREGATE LIABILITY OF THE
PROVIDER ARISING OUT OF OR RELATING TO THIS AGREEMENT, THE
SOFTWARE, AND THE SERVICE IS LIMITED TO THE GREATER OF (i) THE
TOTAL AMOUNT PAID BY YOU TO THE PROVIDER FOR THE SOFTWARE IN THE
TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO LIABILITY,
OR (ii) ONE HUNDRED EUROS (EUR 100). YOU ACKNOWLEDGE THAT,
BECAUSE THE FREE EDITION IS PROVIDED AT NO CHARGE, THE AMOUNT
UNDER CLAUSE (i) WILL TYPICALLY BE ZERO.
17.3 Free-Software Standard of Care (German Law Default). Where the
law of the Federal Republic of Germany applies under Section 22
and the Software is provided free of charge (Free Edition), it is
provided gratuitously (Schenkung) within the meaning of sections
516 et seq. of the German Civil Code (BGB), and the Provider's
liability is determined in accordance with those provisions. In particular, the Provider is liable only for
fraudulent concealment of defects (section 524 BGB) and for
intent and gross negligence. The Provider's liability for slight
negligence in the breach of essential contractual duties
(Kardinalpflichten) - that is, duties whose fulfillment is
essential for the proper performance of this Agreement and on
whose observance You may regularly rely - is limited to damages
that are foreseeable and typical for contracts of this kind.
17.4 Carve-Outs. NOTHING IN THIS AGREEMENT LIMITS OR EXCLUDES THE
PROVIDER'S LIABILITY FOR:
(a) death or personal injury caused by the Provider's negligence or that of its legal representatives or vicarious agents; (b) intentional misconduct or gross negligence, including by the Provider's legal representatives or vicarious agents; (c) fraud or fraudulent misrepresentation, including fraudulent concealment of defects; (d) any liability that cannot be excluded or limited under the German Product Liability Act (Produkthaftungsgesetz) or any analogous mandatory product-liability or consumer-protection law of any other applicable jurisdiction; or (e) any other liability that cannot be limited or excluded under applicable mandatory law.
17.5 Backup Responsibility. You are responsible for maintaining
regular and adequate backups of Your data and configurations.
The Provider's liability for loss of data is limited to the
typical effort required to restore such data if You had
maintained regular and reasonably current backups.
17.6 Allocation of Risk. The Parties acknowledge that the limitations
in this Section 17 form an essential basis of the bargain
between them and reflect the allocation of risk inherent in the
provision of the Software.
17.7 Paid Edition. Where You acquire the Paid Edition against payment,
Sections 17.1 to 17.3 are replaced by the following: The Provider is
liable without limitation for intent and gross negligence, for injury
to life, body or health, under the German Product Liability Act and
comparable mandatory product-liability law, and for guarantees
expressly assumed. For slight negligence the Provider is liable only
for the breach of essential contractual duties (Kardinalpflichten)
and, in that case, limited to the damage that is typical for
contracts of this kind and foreseeable at the time of conclusion of
the contract. Where You are not a Consumer, the Provider's aggregate
liability for slight negligence is further limited to the fees paid
by You for the Software in the twelve (12) months preceding the event
giving rise to the claim. Section 17.5 applies. For Consumers, this
Section applies only to the extent permitted by section 309 no. 7 BGB
and the statutory rules on digital products.
17.8 Product Liability for Software. Nothing in this Agreement limits
liability that cannot be limited under the German Product Liability
Act as amended to implement Directive (EU) 2024/2853, which treats
software as a product.
INDEMNIFICATION BY YOU
18.1 Indemnity. To the maximum extent permitted by applicable law, You
agree to defend, indemnify, and hold harmless the Provider and
its affiliates, officers, employees, agents, licensors, and
suppliers from and against any and all third-party claims,
demands, actions, proceedings, damages, losses, liabilities,
costs, and expenses (including reasonable attorneys' fees and
court costs) arising out of or relating to:
(a) Your breach of this Agreement; (b) Your violation of any law, regulation, or third-party right (including any intellectual-property, privacy, or publicity right); (c) Your installation or use of the Software on any Device that You do not own or lawfully control, or without the consent of all users of such Device as required by Section 11.1(c); (d) any content that You upload, submit, or transmit through the Software or the Service; or (e) Your gross negligence or intentional misconduct.
18.2 Conduct of Claims. The Provider will promptly notify You in
writing of any claim subject to indemnification, give You sole
control over the defense and settlement of such claim (provided
that any settlement requiring an admission of liability or
payment by the Provider requires the Provider's prior written
consent, not to be unreasonably withheld), and provide
reasonable cooperation at Your expense. The Provider may
participate in the defense at its own expense with counsel of
its choice.
18.3 No Reverse Indemnity. Because the Software is provided at no
charge under the Free Edition, no reciprocal indemnity is given
by the Provider under this Agreement.
EXPORT CONTROLS AND SANCTIONS
19.1 Compliance. The Software may be subject to export-control and
sanctions laws and regulations of the European Union, the
Federal Republic of Germany, the United States of America, and
other applicable jurisdictions, including, without limitation,
the EU Dual-Use Regulation (Regulation (EU) 2021/821), the U.S.
Export Administration Regulations (15 C.F.R. Parts 730-774), and
the sanctions programs administered by the U.S. Treasury
Department's Office of Foreign Assets Control (OFAC).
19.2 No Prohibited Destinations or Persons. You will not, and will
not permit any third party to, directly or indirectly export,
re-export, transfer, or release the Software (i) to any country,
region, or territory subject to a comprehensive embargo, (ii) to
any person or entity on any restricted-party list, or (iii) for
any end use prohibited under applicable export-control laws,
including any end use related to weapons of mass destruction or
to the design, development, production, or use of nuclear,
chemical, or biological weapons or missile technology.
19.3 Cooperation. You agree to cooperate with any reasonable request
by the Provider to demonstrate compliance with this Section 19,
including by providing any certifications or information that
may be required.
19A. SECURITY VULNERABILITIES AND SECURITY UPDATES
19A.1 Reporting. Security vulnerabilities in the Software, the Service,
the Scan Service, the Library or the Models can be reported at any time
to team@patronus.studio with the subject "Security". Machine-readable
contact details are published at
https://patronus.studio/.well-known/security.txt. The Provider
acknowledges reports promptly and keeps the reporter informed. Please
keep details confidential until a fix is available.
19A.2 Security Updates. The Provider provides security updates for the
supported versions of the Software during the support period stated in
the Documentation and, for Consumers, at least for the period required
by section 327f BGB. You are responsible for installing Updates without
undue delay; the Provider is not liable for damage that would have been
avoided by installing an available Update.
19A.3 Regulatory Compliance. The Provider designs its products to meet
the cybersecurity requirements of Regulation (EU) 2024/2847 (Cyber
Resilience Act) as they become applicable, including vulnerability
handling and reporting obligations.
TERMINATION BY THE PROVIDER
20.1 The grounds and procedure for termination of this Agreement by
the Provider are set out in Section 7.3. In addition to the
grounds set out there, the Provider may also terminate this
Agreement immediately if the Provider ceases to make the Free
Edition generally available, in which case the Provider will
use reasonable efforts to give at least sixty (60) days'
advance notice in the Software or by other reasonable means.
20.2 Termination does not affect any rights or remedies that have
accrued before the effective date of termination.
MODIFICATIONS TO THESE TERMS
21.1 Right to Modify. The Provider may modify this Agreement from
time to time, for example to reflect changes in the Software,
in applicable law, or in the Provider's business model.
21.2 Notice. The Provider will provide notice of any material
modification by reasonable means, including by displaying a
notice within the Software, sending an email to the address
associated with Your Account (if any), or posting a notice on
the Provider's website.
21.3 Acceptance.
(a) Where the law of the Federal Republic of Germany applies, the modified terms will be deemed accepted by You if You do not object in text form within six (6) weeks after receipt of the notice, and the Provider has expressly drawn Your attention to this consequence in the notice. If You object within that period, You may continue to use the Software under the prior terms until the Provider terminates this Agreement under Section 7.3(ii), or You may terminate this Agreement under Section 7.2. (b) Where the law of the Federal Republic of Germany does not apply, Your continued use of the Software after the effective date of the modification constitutes Your acceptance of the modified terms. If You do not agree to the modified terms, You must stop using the Software.
21.4 No Retroactive Effect. Modifications will not apply
retroactively and will not deprive You of any rights that have
already accrued.
GOVERNING LAW AND JURISDICTION
22.1 Governing Law. This Agreement, and any non-contractual
obligations arising out of or in connection with it, are
governed by and construed in accordance with the substantive
laws of the Federal Republic of Germany, excluding (i) its
conflict-of-laws rules to the extent that they would lead to
the application of foreign law, and (ii) the United Nations
Convention on Contracts for the International Sale of Goods
(CISG).
22.2 Consumer-Protection Carve-Out. If You are a consumer with
habitual residence in a Member State of the European Union or
the European Economic Area, You also enjoy the protection
afforded to You by mandatory provisions of the law of the
country in which You have Your habitual residence. Nothing in
Section 22.1 deprives You of that protection.
22.3 Jurisdiction.
(a) If You are a merchant (Kaufmann), a legal entity under public law, or a special public-law fund, the exclusive place of jurisdiction for all disputes arising out of or in connection with this Agreement is the seat of the Provider in the Federal Republic of Germany. (b) For all other Users, the statutory rules on jurisdiction apply. In particular, consumers may bring proceedings against the Provider in the courts of the place where the consumer is domiciled.
22.4 Consumer Dispute Resolution. The European Commission's online
dispute resolution platform was discontinued on 20 July 2025 under
Regulation (EU) 2024/3228; no link is therefore provided. The
Provider is neither obliged nor willing to participate in a
dispute-resolution procedure before a consumer arbitration board
within the meaning of the German Consumer Dispute Resolution Act
(Verbraucherstreitbeilegungsgesetz, VSBG). Consumers may contact the
Provider directly at team@patronus.studio to resolve any complaint.
22.5 Right of Withdrawal. Where You are a Consumer and acquire the Paid
Edition or another paid offering online, You have a statutory right
of withdrawal. The withdrawal instruction, the model withdrawal form
and the conditions under which the right expires for digital content
(section 356(6) BGB) are provided in the ordering process.
CLASS-ACTION AND COLLECTIVE-PROCEEDING CONSIDERATIONS
23.1 No Class or Collective Proceedings. To the maximum extent
permitted by applicable law, all disputes between You and the
Provider arising out of or relating to this Agreement, the
Software, or the Service shall be resolved on an individual
basis only. You agree that You will not bring or participate
in any class action, mass action, collective action, or
representative proceeding against the Provider, except where
such waiver is prohibited by applicable mandatory law.
23.2 No Jury Trial. To the maximum extent permitted by applicable
law, You and the Provider each waive any right to a trial by
jury in any proceeding arising out of or relating to this
Agreement.
23.3 Severability of Waivers. If the waivers in Sections 23.1 or
23.2 are held to be unenforceable in any particular dispute,
the remainder of this Agreement shall remain in effect with
respect to that dispute, and the unenforceable portion shall
be severed only to the minimum extent necessary.
FORCE MAJEURE
24.1 The Provider will not be liable for any failure or delay in
performance under this Agreement that is caused by events
beyond its reasonable control, including, without limitation,
acts of God, natural disasters, war, terrorism, civil unrest,
government action, sanctions, pandemics, public-health
emergencies, labor disputes, failures of telecommunications or
internet infrastructure, failures of cloud-service providers,
cyberattacks, or shortages of materials or energy. The
Provider will use commercially reasonable efforts to mitigate
the effects of any force-majeure event.
MISCELLANEOUS
25.1 Entire Agreement. This Agreement, together with the Privacy
Policy and any applicable open-source license notices,
constitutes the entire agreement between You and the Provider
with respect to the subject matter hereof and supersedes all
prior or contemporaneous oral or written agreements,
proposals, and understandings.
25.2 No Waiver. The failure of the Provider to enforce any right
or provision of this Agreement will not be deemed a waiver of
such right or provision. Any waiver of any provision of this
Agreement will be effective only if in writing and signed by
the Provider.
25.3 Severability. If any provision of this Agreement is held to
be invalid, illegal, or unenforceable by a court of competent
jurisdiction, that provision will be severed or modified to
the minimum extent necessary so that the remaining provisions
of this Agreement continue in full force and effect. The
severed provision will be replaced by a provision whose
economic and legal effect comes as close as legally possible
to that of the invalid provision.
25.4 Assignment. You may not assign, transfer, or sublicense this
Agreement or any of Your rights or obligations under it,
whether by operation of law or otherwise, without the
Provider's prior written consent. Any attempted assignment in
violation of the foregoing is null and void. The Provider may
assign or transfer this Agreement, in whole or in part,
without restriction, including (i) to an affiliate, (ii) in
connection with the novation, conversion, or restructuring of
the Provider entity (including a conversion into another corporate
form), or (iii) in connection with a
merger, acquisition, reorganization, or sale of all or
substantially all of its assets.
25.5 No Third-Party Beneficiaries. Except as expressly set out in
this Agreement, nothing in this Agreement is intended to or
will confer upon any third party any legal or equitable right,
benefit, or remedy of any nature.
25.6 Independent Contractors. The Parties are independent
contractors. Nothing in this Agreement creates a partnership,
joint venture, agency, fiduciary, or employment relationship
between the Parties.
25.7 Notices. Notices to the Provider must be sent in text form to
the address set out in Section 26. Notices to You may be sent
to the email address associated with Your Account (if any) or
displayed within the Software. A notice is deemed received
(i) on the day of delivery if delivered by hand, (ii) on the
second business day after dispatch if sent by recognized
overnight courier, or (iii) on the day of transmission if sent
by email, provided that no bounce or delivery failure is
received.
25.8 Headings. Section headings are for convenience only and do
not affect the interpretation of this Agreement.
25.9 Language. This Agreement is drawn up in the English language,
preceded by a German summary. For Consumers with habitual residence
in the Federal Republic of Germany, the German summary and mandatory
German consumer-protection law prevail over the English text in case
of conflict.
25.10 Interpretation. The words "include", "includes", and
"including" are to be read as if followed by "without
limitation". References to "Sections" are to sections of this
Agreement unless otherwise specified.
CONTACT INFORMATION
For questions regarding this Agreement, notices, or other legal communications,
please contact:
Casdo Labs GmbH
Managing directors / authorized representatives:
- Benedikt Veith
- Dominik Hommer
- Moritz Trautmann
Franz-Joseph-Straße 11
80801 München
Germany
Email: team@patronus.studio
Web: https://patronus.studio
For privacy-related inquiries, please also refer to the contact details set
out in the Privacy Policy.
Software versions as of the Effective Date:
-
Patronus Protect macOS application: 1.0.3
-
Patronus Protect Windows application: pre-release
-
Network Extension component: 1.0.25
-
Tauri layer: 0.1.2
Last updated: 9 September 2026 (Version 1.1).