Terms of Use and Data Processing Notice
RawKit — Version 1.3 · Effective 2026-09-06 · Last updated 6 September 2026
These Terms of Use ("Terms") govern your use of RawKit, a web application for evidence-based research and go-to-market work operated by Elijah Ross. They form a binding contract between you and the provider named in section 2.
The Privacy Policy sets out in detail what personal data RawKit stores, why, on what legal basis, where, for how long, and who else receives it. It is written to satisfy the information duties of Articles 12–14 GDPR, is published as its own document, and is an integral part of these Terms — see section 13.
1. Scope
1.1 These Terms apply to every use of the RawKit web application, its application programming interfaces, the collaborative canvas, the AI agent runtime, the research connectors and every associated service (together, the "Service"), whether or not you have created an account.
1.2 By creating an account or otherwise using the Service you accept these Terms. If you do not accept them, you must not use the Service.
1.3 Deviating, conflicting or supplementary terms of a business user do not become part of the contract, even where the provider performs without express objection, unless the provider has agreed to them in writing.
1.4 The Service is directed at users in the European Economic Area. It is not marketed to, and is not designed for compliance with the laws of, jurisdictions outside the EEA. You are responsible for whether your local law permits your use.
2. Provider (information under section 5 ECG and section 5 DDG)
<!-- ECG §5 (AT) / DDG §5 (DE) / UGB §14 -->| Provider | Elijah Ross, sole trader (Einzelunternehmer) |
| Address | Kulmgasse 38/20, 1180 Vienna, Austria |
| service@ml-canvas.com | |
| VAT | No VAT identification number. Small-business exemption under section 6(1)(27) of the Austrian VAT Act (UStG); no VAT is shown on invoices. |
| Trade authority | Magistrat der Stadt Wien, Magistratisches Bezirksamt für den 18. Bezirk |
| Chamber membership | Wirtschaftskammer Wien, Fachgruppe UBIT (Unternehmensberatung, Buchhaltung und Informationstechnologie) |
| Applicable trade law | Gewerbeordnung 1994 (GewO), available at www.ris.bka.gv.at |
| Data protection supervisory authority | Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at |
No data protection officer has been appointed. The provider is a sole trader whose processing does not meet the thresholds of Article 37 GDPR; the appointment obligation is reassessed whenever the scope of processing changes.
3. Definitions
- Account — your personal login, identified by a verified email address.
- Workspace — the tenant that owns boards, files, conversations and connectors. Every object in RawKit belongs to exactly one workspace.
- Board — a collaborative canvas. Its live state is a conflict-free replicated data type (Yjs) document.
- Agent — the automated research runtime that plans and executes steps, calls language models and external data sources, and writes results onto a board.
- Connector — a social or publishing account you connect by OAuth so the Service can publish on your behalf and read engagement metrics.
- User Content — everything you or your workspace members create, upload or import: board contents, uploaded files, chat messages, drafts and publications.
- Consumer / Business user — a consumer is a natural person acting outside their trade, business or profession (section 1(1)(2) KSchG, Article 2(1) of Directive 2011/83/EU). Everyone else is a business user.
4. The Service, and what it is not
4.1 What RawKit does. RawKit lets you run structured research on a canvas. An AI agent decomposes a question, queries public and commercial data sources, and writes the findings back onto the board as structured objects with citations. You can attach files, converse with the agent about the board, generate images and video, and publish drafted content to connected social accounts.
4.2 Beta status. The Service is in open beta. Features may change, degrade or be withdrawn at short notice; data loss, incorrect output and downtime are realistic possibilities. No service level is owed (section 15). This clause does not limit the statutory rights of consumers.
4.3 No professional advice. RawKit produces research output. It is not legal, tax, financial, medical or investment advice, and it is not a substitute for professional judgement. Funding deadlines, market figures, competitor data and regulatory statements produced by the agent may be incomplete, outdated or wrong. You must verify every material fact against the cited primary source before relying on it. In particular, the Service is expressly not an eligibility assessment for any grant, subsidy or public funding programme.
4.4 Third-party data. Findings derive from third-party sources listed in section 5 of the Privacy Policy. Their availability, accuracy, licensing and pricing are outside the provider's control, and a source may be removed without notice.
5. Registration, account and eligibility
5.1 An account requires a valid email address, which must be confirmed before the Service becomes usable. You may not register with a false identity or an address you do not control.
5.2 Minimum age. You must be at least 16 years old. Users under 18 may only conclude a paid contract with the consent of their legal guardian. The provider does not knowingly process the data of children below the age thresholds of Article 8 GDPR (16 in Germany; 14 in Austria under section 4(4) DSG) and will delete such accounts on becoming aware of them.
5.3 Credentials. You are responsible for keeping your password confidential and for all activity under your account. Notify the provider without undue delay at the address in section 2 if you suspect unauthorised access.
5.4 Workspace members. If you invite others into a workspace, you are responsible for ensuring that they are permitted to see the content in it, and that you have a lawful basis for any personal data you place there (section 10 of the Privacy Policy).
5.5 Status declaration. When registering you state whether you act as a consumer or as a business user. Clauses marked "business users only" do not apply to consumers, and clauses marked "consumers only" do not apply to business users. If you register as a business user while in fact acting as a consumer, the mandatory consumer protections still apply to you.
6. Plans, fees and payment
6.1 Plans. The Service is offered on three plans, each applying to a workspace: Free (no subscription; pay as you go), Creative (USD 9.99 per month) and Pro (USD 24.99 per month). Every workspace starts on Free. No charge is ever levied on an account without the account holder's prior express action — a top-up or a subscription — and a Free workspace never converts into a paid one on its own. The features, limits and usage rates of each plan are published at rawkit.io/#pricing and in the documentation; the version in force when you subscribe applies for that billing period.
6.2 Usage balance. Use of the Service is metered. Every model call, paid search and media generation is priced at the third-party provider's price plus the plan's rate (Free +30 %, Creative +20 %, Pro +10 %) and drawn from the workspace's prepaid balance. The balance is funded by top-ups (USD 5 to USD 500) and, on a paid plan, by the subscription price, which is credited to the balance in full at the start of every billing period. The balance is a prepaid usage credit: it is not a deposit, earns no interest and is not paid out, except where statutory law — in particular the right of withdrawal in section 7 — provides otherwise.
6.3 Payment provider. Payments are processed by Stripe Payments Europe, Ltd., Dublin, Ireland. Card details are entered on Stripe's own pages and are never held by the provider. If you enable automatic recharge, the saved card is charged the amount you set whenever the balance falls below the threshold you set; you can disable it at any time. Clauses 6.5, 6.8 and 6.9 apply to subscriptions only.
6.4 Prices and tax. Prices are stated in USD, before tax, at the point of purchase. Where tax applies, it is calculated and shown at checkout in addition to the stated price; stated prices and the usage balance are always pre-tax amounts. The provider applies the small-business VAT exemption (section 6(1)(27) UStG), so no Austrian VAT is shown. For cross-border supplies within the EU, statutory VAT rules including the reverse-charge mechanism and the EU SME scheme may apply.
6.5 Billing period and renewal. Subscriptions run for the period selected and renew for the same period unless terminated before the end of the current period. For consumers, any tacit renewal is subject to the limits of section 6(1)(2) and section 6(3) KSchG; the provider will send a reminder before each renewal and the notice period for consumers will not exceed one month.
6.6 Payment default. If payment fails, the provider may suspend paid features after a reminder with a reasonable grace period. Consumer accounts will not be deleted for non-payment; they revert to the free tier.
6.7 Usage-based cost and caps. Agent runs consume paid third-party capacity (language models, search providers, media generation). The Service enforces a ceiling per run (currently USD 1 on every plan, a maximum number of reasoning turns and a wall-clock limit) and records every run's cost in a ledger visible to you. A run that would exceed the workspace's balance stops and keeps its partial result; nothing is charged beyond the balance you have funded, and a workspace without balance cannot start a run. Features your plan does not include are refused with a message naming the plan that has them; they never generate a charge.
6.8 Price changes. For consumers, an enforceable price-adjustment clause must state the trigger, the yardstick and a termination right. The following is a conservative default and must be confirmed. The provider may change prices with at least eight weeks' notice, sent by email and in the application. If you do not accept the change, you may terminate with effect from the date the new price would take effect; continued paid use after that date constitutes acceptance. The notice will state this expressly.
6.9 Refunds. Statutory rights, including the right of withdrawal in section 7, remain unaffected. Beyond those, fees for a period already begun are not refunded on termination for convenience.
7. Right of withdrawal — consumers only
<!-- FAGG §11 ff. / RL 2011/83/EU -->This section applies only if you are a consumer within the meaning of section 5.5.
7.1 Notice of the right of withdrawal
You have the right to withdraw from this contract within fourteen days without giving any reason. The withdrawal period expires fourteen days from the day of the conclusion of the contract.
To exercise the right of withdrawal you must inform the provider (Elijah Ross, Kulmgasse 38/20, 1180 Vienna, Austria, service@ml-canvas.com) of your decision to withdraw by an unequivocal statement (for example a letter sent by post or an email). You may use the model withdrawal form below, but it is not obligatory. To meet the withdrawal deadline, it is sufficient for you to send your communication concerning the exercise of the right of withdrawal before the withdrawal period has expired.
7.2 Effects of withdrawal
If you withdraw from this contract, the provider shall reimburse all payments received from you without undue delay and in any event not later than fourteen days from the day on which the provider is informed of your decision to withdraw. The provider will use the same means of payment as you used for the initial transaction, unless you have expressly agreed otherwise; in no event will you be charged any fees as a result of such reimbursement.
7.3 Early performance and loss of the right of withdrawal
If you have requested that the supply of the service begin during the withdrawal period, you shall pay the provider an amount which is in proportion to what has been supplied until the moment you informed the provider of your withdrawal, in comparison with the full coverage of the contract (section 16 FAGG).
For digital content not supplied on a tangible medium, the right of withdrawal lapses under section 18(1)(11) FAGG only where all of the following apply: you have expressly consented to performance beginning before the end of the withdrawal period, you have acknowledged that you thereby lose your right of withdrawal, and the provider has given you confirmation of that agreement on a durable medium.
8. Acceptable use
8.1 You must not use the Service to:
a) infringe the rights of others, in particular copyright, trade mark, trade secret, personality or data protection rights; b) upload or generate unlawful content, including content that is defamatory, inciting, terrorist, or that depicts the sexual abuse of minors; c) process special categories of personal data (Article 9 GDPR) or criminal conviction data (Article 10 GDPR) without your own valid legal basis and appropriate safeguards (see section 10 of the Privacy Policy); d) circumvent, or attempt to circumvent, the plan limits, run budgets, rate limits, authentication, tenant isolation or any other technical control; e) resell, sublicense or provide the Service or its agent runtime to third parties as a competing offering, or use it to build a substantially similar product; f) run automated bulk extraction of the Service or of the third-party sources it reaches beyond ordinary interactive use; g) generate or publish content that impersonates a real person or organisation, fabricates records, reviews or endorsements, or is designed to deceive as to its origin; h) use connected social accounts to send spam, engage in coordinated inauthentic behaviour, or otherwise breach the terms of the connected platform; i) use the Service to build profiles of identifiable natural persons for purposes those persons could not reasonably expect, or to make decisions about individuals that produce legal or similarly significant effects for them.
8.2 AI-specific rules. You must not use the Service to develop or operate an AI practice prohibited by Article 5 of Regulation (EU) 2024/1689 (AI Act), nor to produce synthetic audio, image or video content that is presented as authentic without the disclosure required by Article 50(4) of that Regulation.
8.3 Enforcement. Where there is a substantiated suspicion of a breach, the provider may restrict or suspend the affected function, workspace or account. The provider will notify you of the reason and, unless prohibited by law or the breach is serious, give you an opportunity to remedy it. Suspension is proportionate and temporary; termination follows the rules in section 19.
9. AI features, output and human oversight
<!-- VO (EU) 2024/1689 Art. 4, Art. 50 -->9.1 You are interacting with an AI system. Chat replies, board objects, research summaries, drafts, images and video produced by the agent are generated by machine learning models. This disclosure is made under Article 50(1) AI Act.
9.2 Synthetic content. Images and video generated through the Service are artificially generated. If you publish such content, you are responsible for any marking or disclosure obligations that apply to you as a deployer, including Article 50(4) AI Act for deepfakes and the labelling rules of the platform you publish to.
9.3 Risk classification. The provider assesses the Service as an AI system of limited risk under the AI Act: it generates content and interacts with humans, and it is not intended for any use listed in Annex III. It must not be used as a high-risk system — in particular not for recruitment or worker management decisions, creditworthiness assessment, access to essential services, education access or law enforcement — because it has not been designed, tested or documented for those uses.
9.4 No automated decision-making about you. The provider does not use automated processing to take decisions producing legal or similarly significant effects concerning you within the meaning of Article 22 GDPR. Plan gating and budget enforcement are deterministic rule checks, not profiling.
9.5 Accuracy and hallucination. Language models produce fluent output that can be factually wrong, including invented citations. The Service mitigates this by requiring the agent to cite sources and by validating certain data (for example, funding deadlines are re-checked against the source at query time), but it cannot eliminate it. Human oversight is yours.
9.6 Rights in output. As between you and the provider, output generated for you belongs to you (section 11.3). The provider gives no warranty that AI output is free of third-party rights, and no warranty that output is copyrightable — under Austrian and EU law, purely machine-generated content may not attract copyright protection.
10. Third-party services and connectors
10.1 Connectors. You may connect accounts on LinkedIn, X, Instagram, Facebook, Reddit and further platforms by OAuth. In doing so you authorise the Service to act on your behalf within the scopes you grant: reading your account identity, publishing content you have created or approved, and retrieving engagement metrics for posts made through the Service.
10.2 Platform terms bind you. Each connected platform has its own terms and developer policies. Your use of a connector is additionally governed by them, and a platform may suspend or rate-limit your account for reasons outside the provider's control. The provider is not liable for a platform's decisions.
10.3 Revocation. You may disconnect a connector at any time in the application. On disconnection the stored OAuth tokens are marked revoked and the credentials are deleted; posts already published on the platform are not withdrawn, because the provider has no continuing authority over them after disconnection. Delete them on the platform itself.
10.4 Publishing is your act. Content published through a connector is published in your name, by you, using the Service as a tool. You are the author and the responsible party under media, advertising and competition law, including the labelling of advertising and the disclosure duties of the platform.
11. User Content and licences
11.1 You keep your rights. You retain all rights in your User Content. The provider claims no ownership of it.
11.2 Licence to operate the Service. You grant the provider a non-exclusive, worldwide licence, limited in time to the duration of your use and to the retention periods in section 9 of the Privacy Policy, to store, reproduce, transmit, display, adapt technically and — where a feature you invoke requires it — disclose your User Content to the sub-processors listed in section 5 of the Privacy Policy, for the sole purpose of providing the Service to you. The licence covers technical adaptation (format conversion, thumbnailing, text extraction, chunking and embedding for search) and nothing else.
11.3 No training licence. The provider does not use your User Content to train, fine-tune or evaluate its own models, and does not licence it to third parties for that purpose. The position of the AI providers the Service calls is set out in section 7 of the Privacy Policy.
11.4 No marketing use. The provider will not use your User Content, your name or your logo for marketing or reference purposes without your prior separate consent.
11.5 Your warranty. You warrant that you hold the rights necessary to upload and process your User Content, and that its processing through the Service does not infringe third-party rights or data protection law.
11.6 Provider's own rights. The Service itself, including its software, interface, prompt library, model registry and documentation, is protected and remains the provider's property. You receive a non-exclusive, non-transferable right to use it for the duration of your contract, and no more.
12. Availability and support
12.1 No availability figure is warranted during the beta. The provider aims for continuous availability but performs maintenance, deploys changes and depends on upstream providers.
12.2 The provider may modify or discontinue individual functions. If a material function is discontinued to your disadvantage and you pay for it, you may terminate the paid plan with immediate effect and receive a pro-rata refund for the unused period.
12.3 Support is provided by email at the address in section 2, on a best-efforts basis and in English or German.
13. Data processing
<!-- Art. 12–14 DSGVO — the full notice lives in privacy.en.ts, rendered at /privacy -->13.1 The information required by Articles 12 to 14 GDPR — what personal data RawKit stores, why, on what legal basis, where, for how long and who else receives it — is set out in the Privacy Policy. It is published as its own document so that it can be read, cited and updated without the contract terms around it.
13.2 The Privacy Policy is an integral part of these Terms. Where a question is one of data protection and both documents address it, the Privacy Policy prevails.
13.3 The Privacy Policy carries its own version and effective date, because the processing it describes changes on its own schedule: a new processor, a new platform connector or a changed retention period does not alter this contract. Section 18 governs changes to these Terms; section 14 of the Privacy Policy governs changes to that document.
13.4 The controller is the provider named in section 2. Where you place personal data of third parties into a workspace, you are the controller and the provider acts as your processor under Article 28 GDPR — see section 10 of the Privacy Policy.
13.5 Instructions for deleting your data, including data received from a connected platform, are published at rawkit.io/data-deletion.
14. Confidentiality
14.1 The provider treats your User Content as confidential and does not disclose it to third parties except to the recipients listed in section 5 of the Privacy Policy for the purpose of providing the Service, where you instruct disclosure, or where disclosure is legally required.
14.2 Where a legal obligation to disclose arises, the provider will, to the extent legally permitted, inform you before disclosing, so that you can seek legal protection.
15. Warranty (statutory conformity)
15.1 Consumers. The Austrian Consumer Warranty Act (VGG) applies to the supply of digital services to consumers. The provider owes a service that conforms to the contract for the entire period of supply. Your statutory warranty rights — improvement, price reduction, termination — are not restricted by these Terms. The two-year limitation period of section 12 VGG applies where the supply is a single act; for continuous supply, conformity is owed throughout.
15.2 Business users. For business users the following applies: the Service is provided in its then-current state. The provider warrants that the Service substantially performs the functions described in the documentation. Warranty claims are excluded for defects caused by use contrary to these Terms, by modifications you make, by third-party services outside the provider's control, or — during the beta — by the experimental character of a function that has been marked as such. The warranty period for business users is twelve months from provision. Section 924 ABGB (presumption of defectiveness) is excluded for business users.
15.3 No warranty of output correctness. For both groups: the provider does not warrant that AI-generated output is correct, complete, current or fit for a particular purpose (section 4.3, section 9.5). This is a description of what the Service is, not a limitation of statutory warranty for the service itself.
16. Liability
16.1 Consumers. The provider is liable without limitation for damage caused intentionally or by gross negligence, for personal injury, and under the Austrian Product Liability Act. For slight negligence the provider is liable only for the breach of a material contractual obligation — an obligation whose fulfilment makes proper performance of the contract possible in the first place and on whose observance you may regularly rely — and then limited to the foreseeable damage typical for this kind of contract. Statutory liability that cannot be excluded remains unaffected.
16.2 Business users. Liability for slight negligence is excluded. Liability for gross negligence and intent, for personal injury and under the Product Liability Act remains unaffected. Liability for indirect damage, loss of profit, loss of data (beyond the cost of restoring properly maintained backups), loss of savings and third-party claims is excluded to the extent permitted by law. Aggregate liability towards a business user is limited to the fees paid by that user in the twelve months preceding the event giving rise to liability, and where the Service is used free of charge, to EUR 1,000.
16.3 Data backup. You are responsible for keeping your own copies of content that matters to you. The provider's liability for loss of data is limited to the effort that would have been required to restore it had you kept backups in accordance with ordinary diligence. This does not apply to consumers where it would contravene section 6 KSchG.
16.4 Third-party content and services. The provider is not liable for the content, availability, accuracy or legality of third-party sources, connected platforms or AI provider output, nor for a connected platform's decisions about your account.
16.5 Use of output. You alone decide whether and how to act on the Service's output. The provider is not liable for decisions you take on the basis of research results, funding recommendations, market figures or drafted content, save within the limits of 16.1 and 16.2.
17. Indemnity — business users only
If a third party asserts a claim against the provider because of your User Content, your published content or your use of the Service in breach of these Terms, you will indemnify the provider against that claim and against the reasonable costs of legal defence, unless you are not responsible for the breach. The provider will inform you of the claim without undue delay and will not settle without your consent, which you may not unreasonably withhold.
18. Changes to these Terms
18.1 The provider may amend these Terms where an amendment is necessary because of a change in the law, in case law, in the technical operation of the Service, or because a new function is added, and where the amendment does not upset the balance of the contract to your disadvantage.
18.2 You will be notified of any amendment by email and in the application at least six weeks before it takes effect. The notice will state what changes, when it takes effect, and that you may object.
18.3 If you object before the effective date, the contract continues on the existing terms and either party may terminate on ordinary notice. If you do not object and continue to use the Service after the effective date, the amended Terms apply. The notice will state this consequence expressly.
18.4 Amendments to essential elements of the contract — the description of the service, the price, the term — require your express consent.
19. Term and termination
19.1 The contract runs for an indefinite period.
19.2 Your termination. You may terminate at any time, without notice, by deleting your account in the application or by notifying the provider. For paid plans, termination takes effect at the end of the paid period unless you exercise a statutory right of immediate termination.
19.3 Provider's termination. The provider may terminate a free account on one month's notice. Paid plans may be terminated at the end of the paid period. The right to terminate for cause remains unaffected; cause includes in particular a serious or repeated breach of section 8 that you fail to remedy after being asked to.
19.4 Effect of termination. You lose access to the Service. Export your data before terminating; the Service provides export functions for boards, tables and conversations. After termination the provider deletes your data as described in section 9 of the Privacy Policy. On request made within 30 days of termination, the provider will provide a copy of your data in a machine-readable format, if it is still available.
19.5 Discontinuation of the Service. If the provider discontinues the Service, users will be notified at least three months in advance and given the opportunity to export their data.
20. Governing law, jurisdiction and dispute resolution
20.1 Governing law. Austrian law applies, excluding its conflict-of-law rules and the United Nations Convention on Contracts for the International Sale of Goods. For consumers, this choice of law does not deprive you of the protection of the mandatory provisions of the law of your country of habitual residence (Article 6(2) of Regulation (EC) No 593/2008).
20.2 Jurisdiction — business users. The exclusive place of jurisdiction is the court competent for Vienna Inner City, Austria.
20.3 Jurisdiction — consumers. The statutory rules apply. A consumer domiciled in Austria may only be sued in the court of their domicile, habitual residence or place of employment (section 14 KSchG); a consumer domiciled elsewhere in the EU may bring proceedings, and may only be sued, in accordance with Articles 17 to 19 of Regulation (EU) No 1215/2012.
20.4 Alternative dispute resolution. The European Commission's Online Dispute Resolution platform was discontinued on 20 July 2025 by Regulation (EU) 2024/3228 and is no longer available. The provider is not obliged and not willing to participate in dispute resolution proceedings before a consumer arbitration board. Consumers may nevertheless contact the Internet Ombudsstelle (www.ombudsstelle.at) or, for cross-border matters within the EU, the European Consumer Centre Austria (www.europakonsument.at), which advise consumers free of charge. Your right to bring court proceedings is unaffected.
21. Final provisions
21.1 Severability. If a provision of these Terms is or becomes invalid, the validity of the remaining provisions is unaffected. The invalid provision is replaced by the statutory rule. This clause does not reverse the burden of proof to the detriment of a consumer.
21.2 Assignment. You may transfer this contract to a third party only with the provider's written consent. The provider may transfer the contract to a legal successor of the business, in which case you may terminate within one month of being notified.
21.3 Written form. Text form, including email, is sufficient for notices under these Terms.
21.4 Language. These Terms are published in English and German. In the event of a discrepancy, the German version prevails; for consumers, the version in the language in which the contract was concluded prevails.
21.5 Contact. Elijah Ross, Kulmgasse 38/20, 1180 Vienna, Austria, service@ml-canvas.com.
Version 1.3, effective 2026-09-06. Previous versions are available on request.