Terms of Service

Effective date: March 26, 2026

1. Introduction

These Terms of Service (“Terms”) govern your use of UserActivity.ai and all related services. When we say “we,” “us,” or “our,” we mean Roarke Clinton, operating UserActivity.ai. When we say the “Service,” we mean the UserActivity.ai website, API, MCP server, CLI, tracker script, and dashboard — whether accessed via the web, programmatically, or through AI agent integrations. “You” refers to any individual or entity using the Service.

By accessing or using the Service, you agree to be bound by these Terms. If you do not agree, do not use the Service.

2. Development Preview

Development Preview Notice

UserActivity.ai is a pre-release product in active development. Features, APIs, data formats, and default behaviors may change without advance notice. There is no uptime guarantee during the Development Preview period. Data handling practices may evolve as the product matures. All published documentation reflects the current state of the Service at the time of writing and may not remain accurate as the product changes.

3. Account Terms

Access to certain features of the Service requires an account. Accounts are created via GitHub OAuth or email-based authentication, both powered by Supabase Auth.

  • You may only maintain one account per person.
  • You are responsible for maintaining the security of your account and any credentials associated with it.
  • You are responsible for all activity that occurs under your account.
  • We reserve the right to suspend or terminate accounts that violate these Terms.

4. The Service

UserActivity.ai provides:

  1. A JavaScript tracker script that collects anonymous behavioral signals (clicks, scroll depth, navigation patterns, form interactions, and other engagement data) from websites you own or control.
  2. A hosted API and MCP server for querying and analyzing behavioral data, designed for both human and AI agent consumption.
  3. A dashboard for managing sites, viewing analytics, and administering your account.
  4. Source-available packages — including the CLI, core library, and MCP server — published under the Elastic License 2.0 (ELv2). The tracker script is published under the MIT license. Use of these packages is governed by their respective licenses; these Terms apply to the hosted Service.

5. Data Ownership

You own your data. We claim no intellectual property rights over the behavioral data collected through your use of the Service.

We process your data solely to provide the Service — to store, aggregate, analyze, and present behavioral signals as described in the documentation.

You can delete your sites and all associated event data at any time from the dashboard. Upon deletion, event data is permanently removed from our systems. We do not retain deleted data.

6. Your Responsibilities

  1. You may only install the tracker script on websites you own or have explicit authorization to instrument.
  2. You are responsible for complying with all applicable laws and regulations regarding user privacy and data collection on your websites. This includes, but is not limited to, obligations under GDPR, CCPA, ePrivacy, and similar frameworks.
  3. We provide the tracking tool; you determine where and how it is used. We recommend informing your site visitors about the use of analytics tools in your privacy policy or cookie notice.

7. API and MCP Access

API keys are credentials. Treat them with the same care as passwords.

  • Keep your API keys secure and private.
  • Do not share keys publicly, embed them in client-side code, or commit them to public repositories.
  • Rate limits are enforced on all API and MCP endpoints. Abuse of rate limits or systematic overuse of API endpoints may result in temporary or permanent access restriction.
  • You are responsible for all API calls made with your credentials.

8. Use Restrictions

You may not:

  1. Use the Service to track users on websites you do not own or control.
  2. Attempt to extract personally identifiable information (PII) from behavioral data collected through the Service.
  3. Circumvent rate limits, authentication mechanisms, or other access controls.
  4. Use the Service for surveillance, monitoring of specific individuals, or any purpose that violates applicable law.
  5. Interfere with, disrupt, or place an unreasonable burden on the Service’s infrastructure.
  6. Resell, sublicense, or commercially redistribute API access without prior written authorization.

9. Uptime, Security, and Privacy

The Service is provided “as is” and “as available.” We make no guarantees regarding uptime, availability, or uninterrupted access, particularly during the Development Preview period.

We take security seriously and employ the following measures:

  • TLS encryption for all data in transit.
  • Row-level security (RLS) at the database layer.
  • Encryption of data at rest.

We use the following third-party infrastructure providers to deliver the Service:

  • Supabase — database and authentication.
  • Vercel — hosting and edge functions.
  • Resend — transactional email.

Each provider operates under its own terms of service and privacy policy:

These provider terms may change independently of ours. We do not control their practices. We review provider terms periodically and will notify you of material changes that affect how your data is handled. If a provider's practices become incompatible with our privacy commitments, we will migrate to an alternative provider.

Transparency note

During the Development Preview, UserActivity.ai operates on standard (non-enterprise) hosting tiers. This means we do not currently have enterprise-grade Data Processing Agreements (DPAs) with all providers. As the service scales, we will establish formal DPAs and upgrade to hosting tiers that provide stronger contractual data protections. We believe transparency about where we are is more valuable than implying protections we don't yet have.

Your use of the Service is also governed by our Privacy Policy.

10. Liability Limitation

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, USERACTIVITY.AI, ITS OPERATOR, AFFILIATES, AND CONTRIBUTORS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, OR USE, WHETHER IN AN ACTION IN CONTRACT, TORT, OR OTHERWISE, ARISING OUT OF OR IN CONNECTION WITH THE USE OF THE SERVICE. OUR TOTAL LIABILITY SHALL NOT EXCEED THE AMOUNTS PAID BY YOU TO US IN THE TWELVE MONTHS PRECEDING THE CLAIM.

In plain language: we built this tool in good faith. If something goes wrong, our liability is limited. We encourage you to review the tracker’s open-source code and make your own assessment.

11. Changes to These Terms

We may update these Terms from time to time. When we make material changes, we will notify you via the dashboard or by email to the address associated with your account.

Continued use of the Service after changes take effect constitutes acceptance of the revised Terms. If you do not agree with the updated Terms, you should stop using the Service.

12. Governing Law

These Terms are governed by and construed in accordance with the laws of the State of Hawaii and applicable federal laws of the United States, without regard to conflict of law principles.

Any disputes arising from these Terms or your use of the Service shall first be resolved through good-faith negotiation. If a resolution cannot be reached, disputes may be submitted to binding arbitration or the courts of competent jurisdiction.

If any provision of these Terms is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary so that the remaining provisions remain in full force and effect.

13. Contact

Questions about these Terms? Contact us at team@useractivity.ai.

These terms are adapted from Basecamp’s open-source policies, available under a Creative Commons Attribution 4.0 International license.