Version 2026-10-30

End User License Agreement

この翻訳は参考のために提供しています。英語版が正本です。

This agreement covers the use of PromptFlowEngine. It is written to describe what the product actually does. If anything here is unclear, write to support@promptflowengine.com before you accept it.

1. Who this agreement is between

This End User License Agreement ("Agreement") is between you and the operator of PromptFlowEngine ("we", "us"). If you accept it on behalf of an organization, you confirm that you are authorized to bind that organization, and "you" includes it.

2. What it covers

  • The website at promptflowengine.com, including the browser workspace and its tools.
  • The PromptFlowEngine Chrome extension and VS Code extension, and the agent hooks the VS Code extension and CLI install.
  • The command-line tool, the MCP server, and the HTTP API.
  • PromptFlowEngine Enterprise: the organization console at /enterprise/admin, device enrollment, policies, security events, reports, and billing.

The source code of the engine, extensions, CLI, and MCP server is published under the MIT License. Your rights to that source code come from the MIT License, and nothing in this Agreement restricts them. This Agreement governs your use of the hosted services and the builds we distribute.

3. License

Subject to this Agreement, we grant you a non-exclusive, non-transferable, revocable license to install and use the distributed builds and to use the hosted services, for your personal use or for your organization's internal business purposes.

You may not: use the services to break the law or to infringe anyone's rights; attempt to access another organization's data or another person's account; probe, scan, or load-test the hosted services beyond normal use or the published rate limits; resell access to the hosted services; or remove notices that identify PromptFlowEngine.

4. What the software does with your prompts

  • Prompt analysis, optimization, and sensitive-data detection in the extensions, CLI, and MCP server run on your device. The HTTP API and the web workspace analyze the text you send them and do not store it.
  • If you connect a device to an organization, the device reports metadata-only security events to that organization: event kind, tool, category counts, policy rule identifiers, the policy action, token counts, and the time. Prompt text, code, file names, page contents, and the detected values are not sent. The event format has no free-text field, and the server rejects events that contain one.
  • The organization that enrolled a device decides its policy. A policy can warn you, ask you to confirm, redact values, or block a send, and it can block AI platforms the organization does not allow.
  • Your own on-device activity history, if you turn it on, stays on your device and is not sent to an organization.

5. Accounts and security

Enterprise members sign in with an email address or username and a password. You are responsible for keeping your password confidential and for activity under your account. Tell your organization's administrator and us at once if you believe your account or an enrollment key was compromised. Administrators can revoke sessions, devices, and enrollment keys.

6. Organizations

If you use PromptFlowEngine Enterprise, the Enterprise terms and Enterprise data handling also apply and take precedence over this Agreement where they differ. The organization is responsible for telling its people what is monitored before their devices are connected, for the policies it configures, and for the domains it claims.

Industry policy templates are configurable starting points. Using them does not make an organization compliant with, or certified under, HIPAA, PCI DSS, GDPR, ISO/IEC 27001, SOC 2, or any other law or standard. PromptFlowEngine is not certified under ISO/IEC 27001 or SOC 2.

7. Fees

The website tools, the extensions for personal use, the CLI, and the MCP server are free. Enterprise is a paid subscription priced per employee and billed through Stripe, as published on the Enterprise page. Card details are handled by Stripe and never reach PromptFlowEngine.

8. Limits of detection

Detection is deterministic pattern matching plus the rules an organization adds. It will miss some sensitive data and flag some harmless text. It reduces the risk of sending sensitive data to an AI service; it does not guarantee that sensitive data never reaches one. Token and cost figures are estimates unless the console says they come from measured counts and published prices.

9. No warranty

To the extent the law allows, the software and services are provided "as is" and "as available", without warranties of any kind, including merchantability, fitness for a particular purpose, and non-infringement. Some jurisdictions do not allow these exclusions, so some may not apply to you.

10. Limitation of liability

To the extent the law allows, we are not liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, data, or goodwill. For paid Enterprise subscriptions, our total liability is limited to the fees you paid in the twelve months before the claim. Nothing in this Agreement limits liability that cannot be limited by law.

11. Ending this Agreement

You can stop using PromptFlowEngine at any time; uninstalling the extensions removes them and their local data from your device. An organization owner can export and then delete the organization from the console, which deletes its data at once. We may suspend access that breaks this Agreement or puts other users at risk, and will tell you why where we lawfully can.

12. Changes to this Agreement

When this Agreement changes, the version above changes. Enterprise members are asked to accept the new version the next time they sign in, before they continue; we record who accepted which version and when. If you do not accept a new version, stop using the services covered by it.

13. Contact

Questions about this Agreement: support@promptflowengine.com.