LEGAL
Terms of Service
Last updated: 17 September 2026
These Terms of Service ("Terms") govern your use of Pallas by Lonia AI ("Service"), operated by Lonia AI ("Company", "we", "us"). By accessing or using the Service, you agree to these Terms.
1. Acceptance of Terms
By creating an account or using the Service, you agree to be bound by these Terms and our Privacy Policy. If you are using the Service on behalf of an organization, you represent that you have authority to bind that organization to these Terms.
2. Account Terms
You must authenticate via a supported OAuth provider (Google or Microsoft) to create an account. You are responsible for maintaining the security of your authentication credentials. You must be at least 18 years old to use the Service. One person or legal entity per account. You are responsible for all activity that occurs under your account.
3. Service Description
Pallas is an accessibility operations platform that provides automated scanning, remediation tracking, and compliance reporting for websites and documents against WCAG 2.2, Section 508, and EN 301 549 standards. Automated scanning covers the criteria that can be machine-tested; a manual review checklist covers the rest. Section 508 and EN 301 549 mappings are derived from the WCAG scan. The Service does not guarantee full accessibility compliance. It is a tool to assist in identifying and remediating accessibility issues.
4. Payment Terms
Paid plans are billed monthly or annually via Stripe, according to the plan and billing period you select at checkout. Annual plans are billed at eleven months (one month free). All fees are non-refundable except as required by law, including the withdrawal rights described in section 4.1 below. We reserve the right to change pricing with 30 days' notice. You create your account with OAuth (Google or Microsoft) after completing checkout.
4.1 Right of withdrawal for consumers in the EU and the UK
Pallas is sold to organizations, and most of our customers are businesses acting in a commercial capacity, for whom the rights in this section do not apply. We set them out anyway, because the test is what you are rather than what we assumed.
If you are a consumer resident in the European Union, Directive 2011/83/EU gives you 14 days from the conclusion of the contract to withdraw from it, without giving a reason. If you are a consumer resident in the United Kingdom, the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 give you the same 14-day period.
How to withdraw: email support@lonia.ai with a clear statement that you are withdrawing. You do not need to use a particular form of words, and you do not need to explain why. We refund within 14 days of receiving your notice, using the same payment method you paid with, and we do not charge a fee for doing so.
One condition worth reading before you start: if you ask us to begin providing the Service during the withdrawal period, and you then withdraw, you may be charged a proportionate amount for what was supplied up to the point you told us. Where the Service has been fully performed within the period at your express request, the right of withdrawal is lost. Because access begins immediately on checkout, starting to use the Service is that request. In practice a subscription cancelled in the first days of a month costs at most those days.
Nothing here replaces the cancellation right in section 5, which is available to every customer at any time and is not limited to 14 days.
Where our reading of the withdrawal right turns out to be narrower than the law requires, the law governs and we will apply it, rather than holding you to this page. If you think we have a provision wrong, write to support@lonia.ai.
5. Cancellation and Termination
You may cancel your subscription at any time through the billing portal. Cancellation takes effect at the end of the current billing period. Upon cancellation, your access to paid features will end but your data will remain accessible in read-only mode for 30 days. After 30 days, account data will be deleted in accordance with our data retention policies.
6. Data and Content
You retain ownership of all content you upload or create within the Service. We do not claim any intellectual property rights over your content. Uploaded documents are analyzed and discarded by default. Scan results and findings are retained for the duration of your subscription plus the 30-day post-cancellation period. We will not access your data except to provide the Service or as required by law.
7. Acceptable Use
You agree not to: use the Service for any unlawful purpose; attempt to gain unauthorized access to any part of the Service; interfere with or disrupt the Service; upload malicious content; resell or redistribute the Service without written permission; use the Service to conduct vulnerability testing of third-party sites without authorization.
8. Limitation of Liability
The Service is provided "as is" without warranty of any kind. We shall not be liable for any indirect, incidental, special, consequential, or punitive damages. Our total liability shall not exceed the amount paid by you for the Service in the 12 months preceding the claim. The Service does not provide legal advice and does not guarantee compliance with any accessibility standard or regulation.
Australian Consumer Law. If you are a consumer as defined by the Australian Consumer Law, our services come with guarantees that cannot be excluded, restricted, or modified under that law. Nothing in these Terms excludes, restricts, or modifies any such non-excludable guarantee, right, or remedy. Where our liability for a failure to comply with a non-excludable guarantee can be limited, our liability is limited, at our option, to supplying the services again or paying the cost of having the services supplied again. The exclusions and limitations elsewhere in this section apply only to the extent permitted by applicable law and do not affect your mandatory statutory rights.
9. Modifications to Terms
We may update these Terms from time to time. We will notify you of material changes via email or through the Service at least 30 days before they take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated Terms.
10. Governing Law
These Terms are governed by the laws of the State of New Jersey, United States, without regard to conflict of law provisions. Nothing in these Terms limits the mandatory statutory rights of consumers and customers in their country of residence. If you are located in the European Union, the United Kingdom, Canada, or Australia, you retain the mandatory consumer-protection and data-protection rights afforded by your local law, and this governing-law clause does not deprive you of those rights. Where you are a consumer, you may also bring proceedings in the courts of your own country of residence, and this clause does not require you to litigate in New Jersey.
10.1 Institutional and negotiated agreements
These Terms are the standard, publicly posted terms for self-service purchase. They are not the document an institutional buyer signs. Universities, public sector bodies, healthcare organizations, and enterprises with their own procurement requirements are contracted under a negotiated agreement with a Data Processing Addendum; the public templates name Lonia AI as the party, and the executed version is issued once terms are agreed. Those agreements govern where they conflict with this page. To start that process, email support@lonia.ai.
11. Data Processing and Security
Where Pallas processes personal data on your behalf as a processor, our Data Processing Agreement applies and forms part of these Terms. Our use of subprocessors is listed on our Subprocessor page.
We maintain technical and organizational security measures including OAuth-only authentication with no password storage, encryption of data in transit and at rest provided by our platform providers, row-level security enforcing tenant isolation, least-privilege access controls, and a tamper-evident audit log (SHA-256) in which any modification, deletion, or reordering of history is detected and any lawful erasure is recorded as a redaction entry with its reason. We hold no SOC 2 certificate today and do not claim one.
12. Data protection and your rights
Our Privacy Policy is the authoritative statement of how we handle personal information and of the rights you hold. It names every right that applies to you, jurisdiction by jurisdiction, and gives step-by-step instructions for exercising each one: see Your rights, by jurisdiction and How to exercise your rights. Nothing in these Terms limits or waives any of those rights.
Who controls what. Lonia AI is the data controller for your personal profile data, which is the information identifying you as an individual. Your organization is the data controller for its own scan and compliance data, which is the content it puts into the Service and the records the Service produces from it: assets, scans, findings, evidence, reports, and the organization's audit trail. For that data we act as a processor on your organization's documented instructions. If you are an organization using the Service, the controller obligations for that data are yours, including responding to your own users' requests, and we assist you with them as our Data Processing Agreement requires.
Self-service controls. Every account holder can use Export your data and Delete your account from Settings, then Data Privacy, inside the Service. No support ticket is required and there is no waiting period. Account deletion is permanent and immediate, and it will refuse if you are the sole administrator of an organization until another administrator is promoted or the organization is deleted. The Privacy Policy sets out the full scope and limits.
13. Contact
Questions about these Terms, privacy requests and data subject rights requests, and Data Processing Agreement requests all go to support@lonia.ai.