Terms of Service

By accessing or using DreamAPI ("the Service"), operated by ThyraAI ("we," "us," or "our"), you agree to be bound by these Terms of Service. If you do not agree, do not use the Service.

"You" refers to any individual or entity accessing the Service. If you are using the Service on behalf of a company or organization, you represent that you have the authority to bind that entity to these terms.

DreamAPI is a keyless OAuth relay and Dream Key identity platform. The Service allows you to:

• Connect providers via Secure Sign-In (OAuth) — no paste API keys or vault storage
• Generate unified "Dream Keys" that authenticate apps to the Dream relay
• Manage integrations, track costs, and receive webhooks through a single dashboard
• Download .env configuration files containing only your Dream Key
• Orchestrate multi-agent AI workflows through the Boardroom and Dream relay

You must create an account via our authentication provider (Clerk) to use the Service. You are responsible for:

• Providing accurate and complete registration information
• Maintaining the confidentiality of your account credentials
• All activities that occur under your account
• Notifying us immediately of any unauthorized access

We reserve the right to suspend or terminate accounts that violate these terms or are used for fraudulent purposes.

During the public launch promotional period, new Builder subscriptions may receive a 7-day free trial. After the trial ends, your subscription renews automatically at the then-current Builder rate of $9.99/month, unless you cancel before the trial concludes.

• Launch access may include expanded project, integration, and Dream Key capabilities for the duration of the trial
• Promotional terms are temporary and may be modified or ended with notice via the Service
• Cancelling during or after the trial stops future charges; no refunds apply to unused trial time
• Abuse of launch promotions (duplicate accounts, fraud) may result in immediate termination of promotional access

DreamAPI offers a Free tier and a paid Builder plan. All paid subscriptions are processed securely through Stripe. DreamAPI does not store full payment card numbers on its servers. Card data is collected and processed by Stripe under Stripe's terms and PCI-compliant infrastructure.

• Free tier: 1 project, 3 integrations, 1 Dream Key (outside of active launch trial entitlements)
• Builder plan: Unlimited projects, integrations, and Dream Keys at $9.99/month after any applicable trial
• Payment routing: Checkout sessions, invoices, and recurring billing are created via Stripe Checkout / Subscriptions APIs
• Gateway checkout: When you use DreamAPI to create checkout sessions for your own customers, payments are routed using your Stripe OAuth connection — DreamAPI acts as a secure keyless relay and does not become the merchant of record for those charges

You may cancel your subscription at any time. Cancellation takes effect at the end of the current billing cycle (or immediately ends trial access when cancelled during a trial). No refunds are provided for partial billing periods unless required by law.

We reserve the right to change pricing with 30 days' notice to active subscribers.

Your responsibility: DreamAPI does not store pasted provider API keys. Provider access uses OAuth (encrypted refresh tokens at rest in Phase 1). You must keep your Dream Keys secure — they are shown once on create/rotate and stored as hashes only.

No liability for third-party services: DreamAPI acts as a keyless OAuth relay. We are not responsible for the availability, pricing, terms of service, or behavior of any third-party platform (e.g., OpenAI, Stripe, Neon) you connect through our Service.

Key rotation: You can revoke and regenerate Dream Keys at any time. Revoked keys are permanently disabled and cannot be reactivated.

When you configure webhook receivers through DreamAPI (for example Stripe, Clerk, or GitHub events routed to /api/gateway/webhook/...), we may temporarily store inbound webhook payloads for debugging, delivery confirmation, and audit purposes.

• Temporary retention: Webhook event bodies and metadata are retained for a limited operational window (typically up to 30 days) unless a longer period is required for security investigation or legal compliance
• Purpose limitation: Stored payloads are used to operate the Service (logs, troubleshooting, signature verification status) and are not sold to third parties
• Your responsibility: Do not send sensitive personal data through webhooks unless necessary; you are responsible for configuring upstream providers appropriately
• Deletion: Upon account termination, webhook event records associated with your projects are deleted in accordance with our data retention practices

You agree NOT to use the Service to:

• Violate any applicable law or regulation
• Store credentials obtained without authorization
• Attempt to access other users' data, keys, or accounts
• Circumvent rate limits, security measures, or access controls
• Use the gateway to route illegal, abusive, or harmful content
• Resell or redistribute the Service without our written consent

Your use of the Service is also governed by our Privacy Policy, which describes how we collect, use, and protect your data, including OAuth connection metadata and temporary webhook payload storage.

We strive to maintain high availability but do not guarantee 100% uptime. The Service is provided "as is" and "as available." We are not liable for any downtime, data loss, or service interruptions.

Planned maintenance windows will be communicated in advance when possible.

To the maximum extent permitted by law, ThyraAI shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to:

• Loss of profits, revenue, or data
• Costs of service interruption or key exposure
• Actions taken by third-party services connected through the gateway

Our total liability for any claim arising from or related to the Service shall not exceed the amount you paid us in the 12 months preceding the claim.

We may update these Terms at any time. Material changes will be communicated via the Service or email. Continued use after changes constitutes acceptance.

Either party may terminate at any time. Upon termination:

• Your access to the Service will be revoked
• All Dream Keys will be deactivated
• OAuth connection data will be permanently deleted within 30 days
• Temporarily retained webhook payloads will be deleted per Section 7

These Terms are governed by the laws of the State of California, United States, without regard to conflict of law principles. Any disputes shall be resolved in the courts of California.

Questions about these Terms? Contact us at support@thyraai.com