Storm OS Terms of Service

Effective date: October 20, 2026
Last updated: October 20, 2026
Version: 1.4

1. Agreement to these Terms

These Terms of Service ("Terms") are a binding agreement between On-Call CMO LLC, a Pennsylvania limited liability company doing business as Storm OS ("Storm OS," "we," "us"), and the person or organization that creates a Workspace or uses the Service ("you," "Customer").

The "Service" means the Storm OS marketing site and the Storm OS application, both at storm-os.app (including the application's installable Progressive Web App), our APIs, and any related support and documentation.

By creating an account, accepting an invitation to a Workspace, installing the app, or otherwise using the Service, you agree to these Terms. If you do not agree, do not use the Service.

If you accept these Terms on behalf of a company or other legal entity, you represent that you have authority to bind that entity, and "you" means that entity.

The "Early Access Period" runs from August 1, 2026 through at least March 31, 2027. We may extend it by telling Workspace Admins by email before it ends, and that email will give the new end date. Storm OS is an early release product during that time: its features change quickly as we build it (§10), and the third party services it runs on are still being selected, configured and tuned. Where these Terms, the Privacy Policy or the Data Processing Addendum promise a period of notice before a change takes effect, that period does not apply during the Early Access Period, unless the section that promises it says it does. We still tell you what changed and when, as soon as we reasonably can, and every right you have to object, to terminate or to export your data is unchanged. From the day after the Early Access Period ends, those notice periods apply in full.

2. What Storm OS is (and is not)

Storm OS is relationship and pipeline management software for founders and small startup teams. It helps you track customers, investors, and partners in one place: records, pipelines, tasks, notes, and reporting.

Storm OS is a software tool. It is not a broker-dealer, investment adviser, placement agent, law firm, accounting firm, or fundraising intermediary, and nothing in the Service is legal, tax, accounting, investment, or fundraising advice. Nothing in the Service constitutes an offer or solicitation to buy or sell securities. You are solely responsible for your fundraising, sales, and partnership activities and for complying with the laws that govern them.

3. Definitions

4. Accounts, eligibility, and sign-in

4.1 Eligibility. You must be at least 18 years old (or the age of majority where you live, if higher) to create an account. The Service is intended for business use and is not directed to children.

4.2 Account security. You are responsible for safeguarding credentials and for all activity under your account. Enable multi-factor authentication where offered. Notify us promptly at security@storm-os.com if you suspect unauthorized access.

4.3 Sign-in with Google. You may sign in using a Google Account. If you do:

• Your use of those identity providers remains governed by their own terms and privacy policies. We are not responsible for their services.
• We use only the minimum identity information needed to authenticate you and create your profile: your unique Google identifier, your email address and whether Google has verified it, and your name. Google's sign-in response can also carry your profile picture, which we do not read or keep. We do not request access to your Gmail, calendar, files, or contacts as part of sign-in.
• If we later offer features that require additional permissions, we will ask you to authorize those permissions separately, describe what they do at the point of consent, and let you decline without losing access to sign-in.
• You may disconnect Storm OS at any time from your Google Account permissions page. Disconnecting removes our ability to authenticate you via Google; it does not by itself delete your Workspace or Customer Data (see §14).
• If we add further sign-in providers, we will update these Terms and the Privacy Policy before that option becomes available to you.

4.4 Invitations and membership. Workspace Admins may invite, deactivate, and change the roles of Authorized Users. If you join a Workspace created by someone else, you understand that the Workspace's owner controls that Workspace, including its data, permissions, and continued existence, and may remove your access at any time.

5. Your data, your ownership

5.1 Ownership. As between you and Storm OS, you own all Customer Data. We claim no ownership rights in it.

5.2 Limited license to us. You grant us a worldwide, non-exclusive, royalty-free license to host, store, transmit, copy, index, display, back up, and otherwise process Customer Data solely to: (a) provide, secure, and maintain the Service for you; (b) prevent or address technical problems, abuse, or security incidents; and (c) comply with law. This license ends when the Customer Data is deleted, except for backups pending expiry.

5.3 What we will not do. We will not sell, rent, or license Customer Data. We will not use Customer Data to serve advertising. We will not use Customer Data to train machine-learning or generative AI models, whether our own or a third party's.

5.4 Who can access Customer Data. Access is limited to: (a) Authorized Users of the Workspace, as governed by that Workspace's permission and sharing settings; (b) Integrations that you or a Workspace Admin explicitly connect; (c) our subprocessors, which receive data to provide their services to us and are listed, with what each one receives, at storm-os.app/subprocessors; and (d) a small number of Storm OS personnel under the narrow, audited circumstances described in our Privacy Policy (support you request, and investigation of security or availability incidents). We do not browse Workspaces.

5.5 Your responsibility for the data you upload. Storm OS is a relationship tool, which means you will store information about third parties such as prospects, investors, partners, and their staff. You represent that you have a lawful basis to collect and process that information, that you will honor applicable notice and rights obligations toward those individuals, and that you will not upload information you are not permitted to hold. For personal data subject to the GDPR, UK GDPR, or similar laws, you are the controller and we act as your processor (see §6).

5.6 Sensitive data. Do not upload government identification numbers, payment card numbers, health records, precise biometric data, or information subject to sector-specific regimes such as HIPAA, PCI-DSS, GLBA, FERPA, or ITAR/EAR-controlled technical data. The Service is not designed for those categories and we disclaim liability arising from them.

6. Data protection roles

For Customer Data, you are the controller (or business) and we are the processor (or service provider). Our DATA PROCESSING ADDENDUM ("DPA") governs that processing, including subprocessors, security measures, international transfer mechanisms, breach notification, and assistance with data-subject requests. The DPA is incorporated into these Terms by reference and applies automatically where required by law. For Account Data and for our own operational and security telemetry, we act as a controller; see the Privacy Policy.

7. Acceptable use

You will not, and will not permit anyone to:

1. Use the Service in violation of any law, including data protection, anti-spam (CAN-SPAM, CASL, PECR, GDPR Art. 6/21), securities, sanctions, or export control laws.
2. Upload or transmit malware, or attempt to gain unauthorized access to the Service, other Workspaces, or any system or data you are not permitted to access.
3. Probe, scan, or load-test the Service, or conduct penetration testing, without our prior written permission (request at security@storm-os.com).
4. Reverse engineer, decompile, or attempt to derive source code, except to the extent that restriction is unenforceable by law.
5. Resell, sublicense, or provide the Service as a service bureau to third parties, or build a competing product using our confidential information.
6. Scrape or use automated means to extract data from the Service other than through our documented API and within published rate limits.
7. Circumvent usage limits, rate limits, or access controls.
8. Upload content that is unlawful, infringing, defamatory, harassing, or that you lack the right to store.
9. Use the Service to send unsolicited bulk communications, or to build or enrich contact lists in ways that violate applicable law.
10. Misrepresent your identity or affiliation, including in Workspace invitations.

We may suspend access without notice if we reasonably believe conduct threatens the security, integrity, or availability of the Service or another customer's data. We will restore access promptly once the risk is resolved.

7.1 Marketing sending. Storm OS sends a Workspace's marketing email from that Workspace's own sending domain once the domain is verified, and a Workspace that connects MailChimp sends through its MailChimp account instead. If you use the Service to send marketing email to your own contacts, you warrant that you have valid consent, under CAN-SPAM, CASL, PECR, GDPR, and other applicable law, for every recipient on every list you use, and you will not use a purchased or scraped list. We may pause a send in progress or block a Workspace from sending if it crosses our deliverability thresholds for bounce or spam-complaint rates, and will restore it once the underlying list is fixed. Campaign email a Workspace sends carries no line naming Storm OS. Email that Storm OS sends from its own address on a Workspace's behalf, such as proposals, invoices, Room invitations and form replies, says that it was sent via Storm OS.

8. Progressive Web App and offline use

Storm OS is installable as a Progressive Web App and caches a working subset of your Workspace on your device so it works offline.

• Cached data is scoped to the signed-in user and Workspace and is cleared when you sign out.
• Your operating system or browser may evict cached data without warning. Cached data is not a backup.
• Changes made offline are queued locally and applied when connectivity returns. Where two people edited the same record, the app will surface a conflict for you to resolve. You are responsible for reviewing and resolving conflicts.
• Device-level security is your responsibility: use a device passcode, and use the in-app lock and remote sign-out features if a device is lost.

9. Integrations and third-party services

You may connect Integrations to a Workspace. MailChimp, your own Stripe account for invoice payments, and your own AI provider key are Integrations. When you connect one, you authorize us to exchange the data necessary for that Integration to function. Integrations are provided by third parties under their own terms; we do not control them, do not warrant them, and are not liable for their acts or omissions, including their handling of data you direct us to send them. Disconnecting an Integration stops future exchange but does not retrieve data already shared.

10. Early release, beta features, and how the Service changes

10.1 An early release product. Storm OS is an early release product, and we are building it quickly. During the Early Access Period defined in §1, any part of the Service may change rapidly and without advance notice: features may be redesigned, renamed, moved, combined, split or rebuilt, and the way a feature works may change from one release to the next. Features we label "beta," "preview," or "early access" change the fastest, and may keep changing this way after the Early Access Period ends.

10.2 No feature degradations. We change features to improve them. We will not make a change that takes away what a feature does for you or leaves it doing less, and this includes beta, preview and early access features. When we replace a feature, its replacement does the same job or more, and what you stored in the old one stays yours and stays exportable under §14.4. The only exceptions are a change the law requires, a change security requires, and a change forced on us when a third-party service a feature depends on changes or withdraws what it provides. In those cases we tell Workspace Admins what changed and why, as soon as we reasonably can. AI allowances, and how AI usage is measured, are governed by §11 rather than this section.

10.3 Beta features. Features labeled "beta," "preview," or "early access" are provided as-is and may be less reliable than the rest of the Service. Apart from §10.2, they are excluded from any service commitments. Do not rely on them alone for business-critical processes.

11. Fees, plans, and trials

Current plans and prices are published at https://storm-os.app/pricing. In summary:

• Storm Eye, the core relationship and pipeline module, is licensed per Workspace in a bundle that includes 5 users, at US$19 per month billed annually or US$24 per month billed monthly.
• Additional users beyond the included 5 are US$4 per user per month billed annually or US$5 per user per month billed monthly.
• Storm Project, Storm Marketing, and Storm Finance are optional modules licensed in blocks of 5 users at US$9 per block per month billed annually or US$12 per block per month billed monthly. Module blocks are allocated at the Workspace level and must cover every licensed Storm Eye user. A Workspace with 6 Storm Eye users therefore requires 2 blocks of any module it enables. Per-user module allocation is not offered.
• Early access accounts. A Workspace created during the Early Access Period defined in §1 is an early access account. For at least 12 months from the date the Workspace is created, an early access account has every module and feature of the Service, including Storm Project, Storm Marketing, and Storm Finance, at its introductory price: the Storm Eye and additional user prices above as they stood on the day the Workspace was created, with no charge for any other module.
• Early access prices after the first 12 months. After those 12 months, we may raise an early access account's prices if our costs of operating the Service rise, by no more than 20% per module in any 12-month period. Storm Eye, Storm Project, Storm Marketing, and Storm Finance each count separately, and so does the additional user price. An increase is measured from the price the account pays for that module before the increase; for Storm Project, Storm Marketing, and Storm Finance, which an early access account first pays for after its included period, it is measured from the block prices above. We will give Workspace Admins at least 30 days' notice by email before an increase, and it takes effect at your next renewal. Extended discounts are available to early access accounts case by case, and any we agree to is confirmed in writing.
• Modules after the included period. At the end of an early access account's first 12 months, Storm Project, Storm Marketing, and Storm Finance will be disabled unless you choose to license them. We will notify Workspace Admins by email at least 30 days before that period ends, stating what will change and what it will cost. We will not begin charging you for a module you have not affirmatively chosen to license.
• The two notices in the two bullets above apply during the Early Access Period as well.
• AI credits. Each Workspace's plan includes a monthly allowance of AI credits, shown in the Service, that renews on the Workspace's billing date. AI-assisted features use credits when a member asks for them and they run on our accounts. Features that run on a Workspace's own AI provider key use none, except research's lookups with data providers, which always run on our accounts, and reading documents already filed, in the background, uses none. When a Workspace's credits are used up, those features pause until the allowance renews, and the rest of the Service keeps working.

All prices are in US dollars, which is currently the only supported billing currency.

AI-assisted features. While the Service is in early access we may introduce, adjust, meter, or withdraw AI allowances, and may change how AI usage is measured. Where a change would reduce an allowance included in a plan you are already paying for, we will give at least 30 days' notice by email to Workspace Admins, and you may terminate and export your data under §14.4 if you object. Some AI-assisted features may be offered as beta features under §10.

AI output can be inaccurate, incomplete, or unsuitable for your situation. You are responsible for reviewing it before acting on it, and §2 applies to anything it produces. Our commitment in §5.3 applies in full to these features: we will not use Customer Data to train machine-learning or generative AI models.

The AI-assisted features are on unless a Workspace Admin turns them off, during setup or at any time. When they run on our account, the content they work with is sent to Anthropic, PBC, under Anthropic's commercial terms, which do not permit Anthropic to train models on it, and Anthropic's data processing addendum. Anthropic states that it deletes API inputs and outputs within 30 days, except where it keeps them longer to enforce its usage policy (up to 2 years for content it flags) or to comply with the law. Where a Workspace routes a feature to its own AI provider key, that provider's terms with the Workspace apply to what runs on that key (§9). Research, unless a Workspace Admin turns it off, sends what it searches with to the data providers listed at storm-os.app/subprocessors. No field on a record is changed until a member accepts what research found, and a research run on a company also files the further company details the providers return, such as funding, technology and headcount, on that company's record.

Where fees apply: fees are stated in the applicable plan or order, are payable in advance, are billed to the payment method on file through our payment processor, are non-refundable except where required by law, and exclude taxes, which you are responsible for. We may change pricing on 30 days' notice effective at your next renewal. Non-payment may result in suspension after notice and a reasonable cure period. If we offer a free tier or trial, we may change or discontinue it at any time on reasonable notice.

12. Intellectual property; feedback

We and our licensors own the Service and all software, design, documentation, trademarks, and content within it, excluding Customer Data. We grant you a limited, non-exclusive, non-transferable, revocable right to access and use the Service during your subscription, for your internal business purposes, subject to these Terms.

If you send us feedback, ideas, or suggestions, you grant us a perpetual, irrevocable, royalty-free license to use them without obligation to you. We will not identify you as the source without your permission.

13. Confidentiality

Each party may receive the other's non-public information. The receiving party will protect it with at least reasonable care, use it only to perform under these Terms, and disclose it only to personnel and advisors who need it and are bound by confidentiality. This does not apply to information that is public through no fault of the receiver, independently developed, or lawfully received from a third party. Compelled disclosure is permitted with prompt notice where legally allowed. Customer Data is your Confidential Information.

14. Term, termination, export, and deletion

14.1 Term. These Terms apply from your first use until terminated.

14.2 Termination by you. You may stop using the Service and delete your Workspace at any time from the Workspace Admin console.

14.3 Termination by us. We may terminate or suspend for material breach that remains uncured 10 days after notice, for non-payment, for conduct posing legal or security risk, or if we discontinue the Service (with at least 60 days' notice, and a pro-rata refund of prepaid unused fees).

14.4 Export window. For 30 days after termination, you may export your Customer Data in full, as a documented CSV/JSON bundle covering all objects, custom fields, and relationships. Data portability is included in every plan.

14.5 Deletion. After the export window, we will delete Customer Data from active systems within 30 days and from backups within our normal backup expiry cycle (currently 35 days), except where retention is required by law. Deletion of individual records inside the Service follows the in-product lifecycle: soft delete, Recycle Bin restore for 30 days, then purge.

14.6 Survival. Sections 5.1, 12, 13, 15, 16, 17, 18, and 20 survive termination.

15. Disclaimers

Except as expressly stated in these Terms and to the fullest extent permitted by law, the Service is provided "as is" and "as available." We disclaim all implied warranties, including merchantability, fitness for a particular purpose, title, non-infringement, and any warranty arising from course of dealing or usage of trade. We do not warrant that the Service will be uninterrupted, error-free, or that it will meet your requirements, and we do not warrant results obtained from the Service, including scores, forecasts, or reports, which are indicative only. Some jurisdictions do not allow certain disclaimers; those disclaimers apply only to the extent permitted.

16. Limitation of liability

To the fullest extent permitted by law:

• Neither party is liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, revenue, goodwill, or data, even if advised of the possibility.
• Each party's total aggregate liability arising out of or relating to these Terms is limited to the greater of (a) the fees you paid or owed to us in the 12 months before the event giving rise to the claim, or (b) US$100.
• These limits do not apply to: your breach of §7 (Acceptable Use), either party's indemnity obligations, your payment obligations, or liability that cannot be limited by law (including, in some jurisdictions, gross negligence, willful misconduct, death, or personal injury).

Nothing in these Terms limits rights that consumers or others have under mandatory local law.

17. Indemnification

17.1 By you. You will defend and indemnify us against third-party claims arising from Customer Data, your use of the Service in breach of these Terms or applicable law, or your infringement of a third party's rights.

17.2 By us. We will defend and indemnify you against third-party claims that the Service, as provided by us and used in accordance with these Terms, infringes a US patent, copyright, or trademark, and will pay damages finally awarded or agreed in settlement. Our obligation does not apply to claims arising from Customer Data, combination with items not supplied by us, or use of beta features. We may procure the right to continue, modify the Service, or terminate and refund prepaid unused fees.

17.3 Process. The indemnified party must give prompt notice, allow the indemnifying party to control the defense, and provide reasonable cooperation.

18. Governing law and disputes

These Terms are governed by the laws of the Commonwealth of Pennsylvania, USA, without regard to conflict-of-law rules. The UN Convention on Contracts for the International Sale of Goods does not apply.

Before filing a claim, the parties will attempt in good faith to resolve the dispute by notice to legal@storm-os.com and 30 days of discussion. Any unresolved dispute will be brought exclusively in the state or federal courts located in Allegheny County, Pennsylvania, and both parties consent to that jurisdiction and venue. Either party may seek injunctive relief in any court to protect intellectual property or confidential information.

If you are a consumer in the EU, UK, or another jurisdiction with mandatory local protections, nothing here deprives you of the right to bring proceedings in your home courts under local law.

19. Export controls and sanctions

You represent that you are not located in, ordinarily resident in, or organized under the laws of a country or region subject to comprehensive US sanctions, and that you are not on any US, UK, or EU restricted-party list. You will not use or export the Service in violation of US export control or sanctions laws.

20. General

20.1 Changes to these Terms. We may update these Terms. For material changes we will give at least 30 days' notice by email to Workspace Admins and by an in-app notice, and the change takes effect at the end of that period. Continued use after the effective date means acceptance. If you object, you may terminate and export your data under §14.4.

During the Early Access Period defined in §1, the 30 day period above does not apply. We will still tell Workspace Admins by email what changed, as soon as we reasonably can, and the change takes effect on the date the notice gives. Your right to object, to terminate and to export your data under §14.4 is unchanged. From the day after the Early Access Period ends, the 30 day period applies in full.

20.2 Changes to the Service. We improve the Service continuously. §10 describes how it changes while it is an early release product, and the commitment in §10.2 applies during the Early Access Period and after it.

20.3 Assignment. You may not assign these Terms without our consent, except to a successor in a merger or sale of substantially all assets with notice to us. We may assign to an affiliate or successor.

20.4 Entire agreement. These Terms, the Privacy Policy, and the DPA are the entire agreement and supersede prior discussions. Terms on a purchase order or vendor portal have no effect.

20.5 Severability and waiver. If a provision is unenforceable, the rest remains in effect. A failure to enforce is not a waiver.

20.6 Force majeure. Neither party is liable for delays caused by events beyond reasonable control, excluding payment obligations.

20.7 Independent contractors. No agency, partnership, joint venture, or employment relationship is created.

20.8 Publicity. We will not use your name or logo publicly without your prior written consent.

21. Contact

On-Call CMO d/b/a Storm OS
239 4th Ave, Ste 1401, Pittsburgh, PA 15222, USA
General: hello@storm-os.com · Legal: legal@storm-os.com · Security: security@storm-os.com · Privacy: privacy@storm-os.com