Draft, 14 September 2026. Not yet reviewed by qualified counsel; not to be relied on until it is. Follows HelpingNeighbor's terms in structure; the substance is a business-to-business data-governance service rather than a marketplace, so the marketplace, contractor and background-check sections have no counterpart here.
Effective: [date on publication] · Between: [legal entity] ("we", "LumenNexus") and the organisation that opens a workspace ("you", the "Customer").
Opening a workspace, or accepting an invitation into one, is acceptance of these terms by the person doing it and, where they act for an organisation, by that organisation. If you do not agree, do not open or join a workspace. The Privacy Notice and, for workspace data, the Data Processing Agreement are part of these terms.
LumenNexus is a multi-tenant data-governance control plane: a catalog of data products with sensitivity labels and residency; clearance enforced in the database; quality rules; change requests, approvals, attestations, validation records and electronic signatures; an assistant that answers from your workspace with citations; and an audit trail of all of it. It is a system of record for decisions about data. It is not a system of record for the data itself — a product loaded into it is a governed copy, and the source you loaded it from remains yours to keep.
You will not: use the service to break the law or someone else's rights; load data you are not entitled to process; try to reach another workspace, another member's data, or any part of the platform your role does not grant; probe or load-test the service without a written agreement (a throwaway workspace is free for honest testing, and /.well-known/security.txt says where to report what you find); resell the service; or remove the provenance stamp from an artifact it renders.
Answers, drafts and proposals produced by a model are proposals. The platform is built so that nothing a model produces becomes a served fact without a named person agreeing (a draft description is approved; an extracted proposal is confirmed; a signature is a person's). You are responsible for what you approve. We do not use your content to train any model. Where a workspace chooses its own inference endpoint, what that endpoint does with the request is between you and it; a no-egress policy is available and enforced.
Your content stays yours. You grant us only what is needed to run the service on it: to store it, index it for your workspace's assistant, render exports of it for you, and back it up. We keep the platform's software; you get a right to use it while you have a workspace. Feedback you give us we may use without obligation.
We aim for the service to be available continuously and make no availability guarantee at this stage; the ops status the platform publishes is monitored, and incidents are handled under our incident procedure. The database is backed up nightly, kept for 14 days, and the restore is rehearsed weekly. We may change the service; anything that removes a capability you pay for gets 30 days' notice.
Each of us keeps the other's non-public information confidential and uses it only for these terms. Our security measures are described in the DPA and in the published control mapping; we will tell you of a security incident affecting your data without undue delay and within 72 hours of confirming it.
You may close a workspace at any time from its Plan page; the owner types the workspace's name and gives a reason. Closing is not deleting: no member can open the workspace afterwards, and its records are retained under the retention rules you set, then removed. We may suspend or close a workspace for breach of §5, non-payment after 14 days' notice, or a legal requirement, and will say why. On termination you may export your data first; export is available on every plan.
The service is provided as described in these terms and in the published control mapping, which says plainly what is in place, partial or not yet built; we make no other warranty, and disclaim implied warranties to the extent the law allows. The platform does not validate itself and does not attest to its own controls; a SOC 2 report, when one exists, is an auditor's. To the extent the law allows, neither party is liable to the other for indirect, consequential or special loss, and our total liability under these terms is limited to the fees you paid in the twelve months before the claim. Nothing limits liability for fraud, death or personal injury, or anything that cannot be limited by law.
You will indemnify us against third-party claims arising from content you loaded without the right to, or from your breach of §5.
We will try to resolve any dispute informally first: write to legal@lumennexus.ai and we will talk within 30 days. These terms are governed by the law of [jurisdiction], and its courts have exclusive jurisdiction, except that either party may seek an injunction anywhere to protect confidential information. [Counsel to decide whether an arbitration clause, as in HelpingNeighbor's terms, is appropriate for a B2B service.]
These terms and the documents they reference are the whole agreement. If a clause is unenforceable the rest stands. Notices to us go to legal@lumennexus.ai; notices to you go to the owner's email address and the workspace's Alerts. We may update these terms with 14 days' notice for anything material.