Storm OS Terms of Service

Effective date: August 12, 2026
Last updated: August 12, 2026
Version: 1.0

1. Agreement to these Terms

These Terms of Service ("Terms") are a binding agreement between On-Call CMO LLC, a Pennsylvania limited liability company doing business as Storm OS ("Storm OS," "we," "us"), and the person or organization that creates a Workspace or uses the Service ("you," "Customer").

The "Service" means the Storm OS marketing site at storm-os.com, the Storm OS application at storm-os.app (including its installable Progressive Web App), our APIs, and any related support and documentation.

By creating an account, accepting an invitation to a Workspace, installing the app, or otherwise using the Service, you agree to these Terms. If you do not agree, do not use the Service.

If you accept these Terms on behalf of a company or other legal entity, you represent that you have authority to bind that entity, and "you" means that entity.

2. What Storm OS is (and is not)

Storm OS is relationship and pipeline management software for founders and small startup teams. It helps you track customers, investors, and partners in one place: records, pipelines, tasks, notes, and reporting.

Storm OS is a software tool. It is not a broker-dealer, investment adviser, placement agent, law firm, accounting firm, or fundraising intermediary, and nothing in the Service is legal, tax, accounting, investment, or fundraising advice. Nothing in the Service constitutes an offer or solicitation to buy or sell securities. You are solely responsible for your fundraising, sales, and partnership activities and for complying with the laws that govern them.

3. Definitions

4. Accounts, eligibility, and sign-in

4.1 Eligibility. You must be at least 18 years old (or the age of majority where you live, if higher) to create an account. The Service is intended for business use and is not directed to children.

4.2 Account security. You are responsible for safeguarding credentials and for all activity under your account. Enable multi-factor authentication where offered. Notify us promptly at security@storm-os.com if you suspect unauthorized access.

4.3 Sign-in with Google. You may sign in using a Google Account. If you do:

• Your use of those identity providers remains governed by their own terms and privacy policies. We are not responsible for their services.
• We request only the minimum identity information needed to authenticate you and create your profile: your unique identifier, email address, basic profile name, and where available your profile picture. We do not request access to your Gmail, calendar, files, or contacts as part of sign-in.
• If we later offer features that require additional permissions, we will ask you to authorize those permissions separately, describe what they do at the point of consent, and let you decline without losing access to sign-in.
• You may disconnect Storm OS at any time from your Google Account permissions page. Disconnecting removes our ability to authenticate you via Google; it does not by itself delete your Workspace or Customer Data (see §14).
• If we add further sign-in providers, we will update these Terms and the Privacy Policy before that option becomes available to you.

4.4 Invitations and membership. Workspace Admins may invite, deactivate, and change the roles of Authorized Users. If you join a Workspace created by someone else, you understand that the Workspace's owner controls that Workspace, including its data, permissions, and continued existence, and may remove your access at any time.

5. Your data, your ownership

5.1 Ownership. As between you and Storm OS, you own all Customer Data. We claim no ownership rights in it.

5.2 Limited license to us. You grant us a worldwide, non-exclusive, royalty-free license to host, store, transmit, copy, index, display, back up, and otherwise process Customer Data solely to: (a) provide, secure, and maintain the Service for you; (b) prevent or address technical problems, abuse, or security incidents; and (c) comply with law. This license ends when the Customer Data is deleted, except for backups pending expiry.

5.3 What we will not do. We will not sell, rent, or license Customer Data. We will not use Customer Data to serve advertising. We will not use Customer Data to train machine-learning or generative AI models, whether our own or a third party's.

5.4 Who can access Customer Data. Access is limited to: (a) Authorized Users of the Workspace, as governed by that Workspace's permission and sharing settings; (b) Integrations that you or a Workspace Admin explicitly connect; (c) our infrastructure subprocessors, which process data on our instructions and have no independent right to use it; and (d) a small number of Storm OS personnel under the narrow, audited circumstances described in our Privacy Policy (support you request, and investigation of security or availability incidents). We do not browse Workspaces.

5.5 Your responsibility for the data you upload. Storm OS is a relationship tool, which means you will store information about third parties such as prospects, investors, partners, and their staff. You represent that you have a lawful basis to collect and process that information, that you will honor applicable notice and rights obligations toward those individuals, and that you will not upload information you are not permitted to hold. For personal data subject to the GDPR, UK GDPR, or similar laws, you are the controller and we act as your processor (see §6).

5.6 Sensitive data. Do not upload government identification numbers, payment card numbers, health records, precise biometric data, or information subject to sector-specific regimes such as HIPAA, PCI-DSS, GLBA, FERPA, or ITAR/EAR-controlled technical data. The Service is not designed for those categories and we disclaim liability arising from them.

6. Data protection roles

For Customer Data, you are the controller (or business) and we are the processor (or service provider). Our DATA PROCESSING ADDENDUM ("DPA") governs that processing, including subprocessors, security measures, international transfer mechanisms, breach notification, and assistance with data-subject requests. The DPA is incorporated into these Terms by reference and applies automatically where required by law. For Account Data and for our own operational and security telemetry, we act as a controller; see the Privacy Policy.

7. Acceptable use

You will not, and will not permit anyone to:

1. Use the Service in violation of any law, including data protection, anti-spam (CAN-SPAM, CASL, PECR, GDPR Art. 6/21), securities, sanctions, or export control laws.
2. Upload or transmit malware, or attempt to gain unauthorized access to the Service, other Workspaces, or any system or data you are not permitted to access.
3. Probe, scan, or load-test the Service, or conduct penetration testing, without our prior written permission (request at security@storm-os.com).
4. Reverse engineer, decompile, or attempt to derive source code, except to the extent that restriction is unenforceable by law.
5. Resell, sublicense, or provide the Service as a service bureau to third parties, or build a competing product using our confidential information.
6. Scrape or use automated means to extract data from the Service other than through our documented API and within published rate limits.
7. Circumvent usage limits, rate limits, or access controls.
8. Upload content that is unlawful, infringing, defamatory, harassing, or that you lack the right to store.
9. Use the Service to send unsolicited bulk communications, or to build or enrich contact lists in ways that violate applicable law.
10. Misrepresent your identity or affiliation, including in Workspace invitations.

We may suspend access without notice if we reasonably believe conduct threatens the security, integrity, or availability of the Service or another customer's data. We will restore access promptly once the risk is resolved.

8. Progressive Web App and offline use

Storm OS is installable as a Progressive Web App and caches a working subset of your Workspace on your device so it works offline.

• Cached data is scoped to the signed-in user and Workspace and is cleared when you sign out.
• Your operating system or browser may evict cached data without warning. Cached data is not a backup.
• Changes made offline are queued locally and applied when connectivity returns. Where two people edited the same record, the app will surface a conflict for you to resolve. You are responsible for reviewing and resolving conflicts.
• Device-level security is your responsibility: use a device passcode, and use the in-app lock and remote sign-out features if a device is lost.

9. Integrations and third-party services

You may connect Integrations to a Workspace. When you do, you authorize us to exchange the data necessary for that Integration to function. Integrations are provided by third parties under their own terms; we do not control them, do not warrant them, and are not liable for their acts or omissions, including their handling of data you direct us to send them. Disconnecting an Integration stops future exchange but does not retrieve data already shared.

10. Beta and early-access features

We may label features "beta," "preview," or "early access." Those features are provided as-is, may change or be withdrawn without notice, may be less reliable, and are excluded from any service commitments. Do not rely on them for business-critical processes.

11. Fees, plans, and trials

Current plans and prices are published at https://storm-os.app/pricing. In summary:

• Storm Eye, the core relationship and pipeline module, is licensed per Workspace in a bundle that includes 5 users, at US$19 per month billed annually or US$24 per month billed monthly.
• Additional users beyond the included 5 are US$4 per user per month billed annually or US$5 per user per month billed monthly.
• Storm Project, Storm Marketing, and Storm Finance are optional modules licensed in blocks of 5 users at US$9 per block per month billed annually or US$12 per block per month billed monthly. Module blocks are allocated at the Workspace level and must cover every licensed Storm Eye user. A Workspace with 6 Storm Eye users therefore requires 2 blocks of any module it enables. Per-user module allocation is not offered.
• Early access accounts receive Storm Project, Storm Marketing, and Storm Finance at no charge for 12 months from the date the Workspace is created. At the end of that period those modules will be disabled unless you choose to license them. We will notify Workspace Admins by email at least 30 days before the promotional period ends, stating what will change and what it will cost. We will not begin charging you for a module you have not affirmatively chosen to license.
• AI allocations. Some plans include an allowance of AI-assisted features. These allowances are still being finalized and are subject to change.

All prices are in US dollars, which is currently the only supported billing currency.

AI-assisted features. While the Service is in early access we may introduce, adjust, meter, or withdraw AI allowances, and may change how AI usage is measured. Where a change would reduce an allowance included in a plan you are already paying for, we will give at least 30 days' notice by email to Workspace Admins, and you may terminate and export your data under §14.4 if you object. Some AI-assisted features may be offered as beta features under §10.

AI output can be inaccurate, incomplete, or unsuitable for your situation. You are responsible for reviewing it before acting on it, and §2 applies to anything it produces. Our commitment in §5.3 applies in full to these features: we will not use Customer Data to train machine-learning or generative AI models, and any third-party model provider we use to deliver them is contractually prohibited from training on, retaining, or otherwise using data we send on your behalf.

Where fees apply: fees are stated in the applicable plan or order, are payable in advance, are billed to the payment method on file through our payment processor, are non-refundable except where required by law, and exclude taxes, which you are responsible for. We may change pricing on 30 days' notice effective at your next renewal. Non-payment may result in suspension after notice and a reasonable cure period. If we offer a free tier or trial, we may change or discontinue it at any time on reasonable notice.

12. Intellectual property; feedback

We and our licensors own the Service and all software, design, documentation, trademarks, and content within it, excluding Customer Data. We grant you a limited, non-exclusive, non-transferable, revocable right to access and use the Service during your subscription, for your internal business purposes, subject to these Terms.

If you send us feedback, ideas, or suggestions, you grant us a perpetual, irrevocable, royalty-free license to use them without obligation to you. We will not identify you as the source without your permission.

13. Confidentiality

Each party may receive the other's non-public information. The receiving party will protect it with at least reasonable care, use it only to perform under these Terms, and disclose it only to personnel and advisors who need it and are bound by confidentiality. This does not apply to information that is public through no fault of the receiver, independently developed, or lawfully received from a third party. Compelled disclosure is permitted with prompt notice where legally allowed. Customer Data is your Confidential Information.

14. Term, termination, export, and deletion

14.1 Term. These Terms apply from your first use until terminated.

14.2 Termination by you. You may stop using the Service and delete your Workspace at any time from the Workspace Admin console.

14.3 Termination by us. We may terminate or suspend for material breach that remains uncured 10 days after notice, for non-payment, for conduct posing legal or security risk, or if we discontinue the Service (with at least 60 days' notice, and a pro-rata refund of prepaid unused fees).

14.4 Export window. For 30 days after termination, you may export your Customer Data in full, as a documented CSV/JSON bundle covering all objects, custom fields, and relationships. Data portability is included in every plan.

14.5 Deletion. After the export window, we will delete Customer Data from active systems within 30 days and from backups within our normal backup expiry cycle (currently 35 days), except where retention is required by law. Deletion of individual records inside the Service follows the in-product lifecycle: soft delete, Recycle Bin restore for 30 days, then purge.

14.6 Survival. Sections 5.1, 12, 13, 15, 16, 17, 18, and 20 survive termination.

15. Disclaimers

Except as expressly stated in these Terms and to the fullest extent permitted by law, the Service is provided "as is" and "as available." We disclaim all implied warranties, including merchantability, fitness for a particular purpose, title, non-infringement, and any warranty arising from course of dealing or usage of trade. We do not warrant that the Service will be uninterrupted, error-free, or that it will meet your requirements, and we do not warrant results obtained from the Service, including scores, forecasts, or reports, which are indicative only. Some jurisdictions do not allow certain disclaimers; those disclaimers apply only to the extent permitted.

16. Limitation of liability

To the fullest extent permitted by law:

• Neither party is liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, revenue, goodwill, or data, even if advised of the possibility.
• Each party's total aggregate liability arising out of or relating to these Terms is limited to the greater of (a) the fees you paid or owed to us in the 12 months before the event giving rise to the claim, or (b) US$100.
• These limits do not apply to: your breach of §7 (Acceptable Use), either party's indemnity obligations, your payment obligations, or liability that cannot be limited by law (including, in some jurisdictions, gross negligence, willful misconduct, death, or personal injury).

Nothing in these Terms limits rights that consumers or others have under mandatory local law.

17. Indemnification

17.1 By you. You will defend and indemnify us against third-party claims arising from Customer Data, your use of the Service in breach of these Terms or applicable law, or your infringement of a third party's rights.

17.2 By us. We will defend and indemnify you against third-party claims that the Service, as provided by us and used in accordance with these Terms, infringes a US patent, copyright, or trademark, and will pay damages finally awarded or agreed in settlement. Our obligation does not apply to claims arising from Customer Data, combination with items not supplied by us, or use of beta features. We may procure the right to continue, modify the Service, or terminate and refund prepaid unused fees.

17.3 Process. The indemnified party must give prompt notice, allow the indemnifying party to control the defense, and provide reasonable cooperation.

18. Governing law and disputes

These Terms are governed by the laws of the Commonwealth of Pennsylvania, USA, without regard to conflict-of-law rules. The UN Convention on Contracts for the International Sale of Goods does not apply.

Before filing a claim, the parties will attempt in good faith to resolve the dispute by notice to legal@storm-os.com and 30 days of discussion. Any unresolved dispute will be brought exclusively in the state or federal courts located in Allegheny County, Pennsylvania, and both parties consent to that jurisdiction and venue. Either party may seek injunctive relief in any court to protect intellectual property or confidential information.

If you are a consumer in the EU, UK, or another jurisdiction with mandatory local protections, nothing here deprives you of the right to bring proceedings in your home courts under local law.

19. Export controls and sanctions

You represent that you are not located in, ordinarily resident in, or organized under the laws of a country or region subject to comprehensive US sanctions, and that you are not on any US, UK, or EU restricted-party list. You will not use or export the Service in violation of US export control or sanctions laws.

20. General

20.1 Changes to these Terms. We may update these Terms. For material changes we will give at least 30 days' notice by email to Workspace Admins and by an in-app notice, and the change takes effect at the end of that period. Continued use after the effective date means acceptance. If you object, you may terminate and export your data under §14.4.

20.2 Changes to the Service. We improve the Service continuously. We will not materially reduce core functionality without reasonable notice.

20.3 Assignment. You may not assign these Terms without our consent, except to a successor in a merger or sale of substantially all assets with notice to us. We may assign to an affiliate or successor.

20.4 Entire agreement. These Terms, the Privacy Policy, and the DPA are the entire agreement and supersede prior discussions. Terms on a purchase order or vendor portal have no effect.

20.5 Severability and waiver. If a provision is unenforceable, the rest remains in effect. A failure to enforce is not a waiver.

20.6 Force majeure. Neither party is liable for delays caused by events beyond reasonable control, excluding payment obligations.

20.7 Independent contractors. No agency, partnership, joint venture, or employment relationship is created.

20.8 Publicity. We will not use your name or logo publicly without your prior written consent.

21. Contact

On-Call CMO d/b/a Storm OS
239 4th Ave, Ste 1401, Pittsburgh, PA 15222, USA
General: hello@storm-os.com · Legal: legal@storm-os.com · Security: security@storm-os.com · Privacy: privacy@storm-os.com