Terms of Service

These Terms of Service are the agreement between you and Kirora for using kirora.io and everything we provide through it. They explain what we do, what you are responsible for, and what happens if something goes wrong.

1. Who we are and accepting these Terms

Kirora is operated by Kirora Technologies Limited, a company with its registered address at Woodland Court, DPK Estate, Orchid, Lagos, Nigeria (“Kirora”, “we”, “us”).

You accept these Terms when you create an account or accept an invitation to a workspace and tick the box agreeing to them. This is version 2026-10-01 of the Terms. We record the version you accepted and when.

If you accept on behalf of an organisation, you confirm you have authority to bind it, and “you” means that organisation.

Kirora is a business tool for people aged 18 or over acting for a business. You must be at least 18, and you must use the Service for business purposes, not as a consumer.

2. Documents that form part of these Terms

These Terms incorporate the following documents by reference:

Our list of sub-processors is at /legal/subprocessors and our use of cookies is explained at /legal/cookies.

On the processing of personal data, the DPA wins over these Terms. A signed order form or written agreement with us wins on the points it covers.

3. Definitions

Service means the Kirora platform and everything we provide through it: the web app, email and push campaigns, transactional messages, event-triggered journeys, the email designer, signup forms, Kiro AI, the public API, the MCP server, the CLI, SDKs, embeddable components and related documentation and support.
Customer means the person or organisation that accepts these Terms and holds a plan for one or more Workspaces.
Workspace means a separate account space in the Service with its own contacts, content, settings, sending domains and members.
User means a person who signs in to a Workspace, whether as owner, admin or member.
Contacts means the people whose details you store in the Service or to whom you send messages through it.
Customer Data means all data you or your Users put into the Service, including Contacts’ personal data, events, attributes, consent records and message history.
Content means the messages, templates, designs, images, forms, copy and other material you create, upload or send using the Service, including material drafted with Kiro AI.

4. Accounts, workspaces and roles

Each Workspace has one owner, and may have admins and members. The owner controls membership, credentials and destructive actions such as deleting the Workspace. Admins run operational settings such as sending domains, push apps, webhooks, suppressions and sending. Members create and edit content and audiences within the limits the Workspace allows. You decide who has access and at what role, and you are responsible for everything done in your Workspaces by your Users and by your API keys.

Tell us promptly at support@kirora.io if you believe someone has accessed your account without permission.

5. Partner accounts

Some Customers use the Service to offer messaging features inside their own products. With a partner account, a partner can create and manage Workspaces for its own customers (“tenant Workspaces”), embed Kirora builders in its product, and suspend or resume tenant Workspaces.

If you are a partner:

you are responsible to us for your tenant Workspaces and for how your customers use them, as if they were your own use;
you must make sure each of your customers agrees to terms that are at least as protective of us, of Contacts and of sending reputation as these Terms and the Acceptable Use Policy;
you are responsible for your customers’ support, billing and data-protection arrangements, unless we agree otherwise in writing;
you cannot delete your partner account while it still holds tenant Workspaces.

Bounce and complaint safety measures apply across all Workspaces under the same partner or owner. One tenant’s abuse can therefore affect others under the same partner account.

6. Your responsibilities

You are the sender of every message that leaves your Workspace. The Service has safeguards, but they do not make your sending lawful. That is your responsibility. In particular, you must:

Send only lawful, wanted messages. Have a lawful basis, and for marketing the consent the law requires, for every Contact, identify yourself accurately and honour every unsubscribe, as the Acceptable Use Policy sets out.
Comply with the law. Follow all anti-spam, electronic-marketing and privacy laws that apply to you and your Contacts. Depending on where you and your Contacts are, these may include the GDPR, the UK GDPR and the Privacy and Electronic Communications Regulations (PECR), the US CAN-SPAM Act, Canada’s Anti-Spam Legislation (CASL), Nigeria’s Data Protection Act 2023, and the California Consumer Privacy Act as amended by the CPRA. You must also follow the sending rules of mailbox providers and push platforms.
Keep credentials safe. Protect passwords, two-factor devices, API keys, partner keys and agent keys. Do not share keys between organisations or put secret keys in public code or client-side apps. Rotate or revoke a key at once if you think it has been exposed.

7. Acceptable use

You must follow the Acceptable Use Policy, which covers prohibited content and sending practices, sensitive data, push notifications, API abuse and misuse of AI features, and how we enforce it. Breaking it is a breach of these Terms.

8. AI features (Kiro AI)

Kiro AI is the assistant built into the Service. It drafts campaigns, push messages, templates, forms, journeys and segments, and answers questions about your Workspace.

A person approves every send. Kiro AI drafts; it does not send. Anything Kiro AI creates or edits that could reach Contacts needs a separate confirmation by a User before it is sent, scheduled or activated.
Outputs can be wrong. AI output may be inaccurate or unsuitable. Review every draft. You are responsible for Content you approve, whoever drafted it.
Contact records are not read. Kiro AI cannot read individual Contact records.
You can switch it off. A Workspace owner or admin can turn Kiro AI off for a Workspace.
Usage limits apply. We may limit AI usage per User and per Workspace.

Agent keys let external AI agents work with your Workspace through the API or MCP server. An agent key can read, create and edit drafts, but can never send, schedule, activate or publish, or change Contacts, consent or suppressions. We enforce this on our servers.

We use our AI model provider to run Kiro AI. It is listed on our sub-processors page. Requests to it are sent with storage switched off.

9. API, MCP server and CLI

Keys and scopes. API keys carry the scopes you give them. A key can only do what its scopes allow. We show a secret once; store it safely.
Rate limits. We apply rate limits per key and per Workspace, described at /docs/api/rate-limits. Do not try to get around them.
Versioning. We version the API as described at /docs/api/versioning. We aim to give notice before removing or breaking a stable feature, but we may change or remove features at any time where needed for security, legal or abuse reasons.

10. Your data and our licence to use it

You own your Customer Data and your Content. We do not claim ownership of them.

You give us a worldwide, non-exclusive, royalty-free licence to host, copy, process, transmit and display Customer Data and Content only as needed to provide, secure and support the Service, prevent abuse and comply with the law. It ends when the data is deleted under section 16.

We may create aggregated, de-identified statistics about use of the Service, such as delivery rates, that do not identify you, your Users or your Contacts, and use them to run and improve the Service.

11. Data protection

For personal data about your Contacts, you are the controller and we are your processor. We process that data only on your documented instructions, as set out in the Data Processing Agreement, which forms part of these Terms.

For personal data about you and your Users, such as account and billing details, we are the controller, as explained in our Privacy Policy.

We host Customer Data in the EU; section 11 of the DPA sets out where, and the safeguards we use for international transfers. Our sub-processors, some of which process data in other countries, are listed at /legal/subprocessors.

12. Protecting sending reputation

All Customers depend on the reputation of our sending infrastructure. You agree that we may protect it with the safeguards described in the Acceptable Use Policy, including verified sending domains, automatic suppression of bounces and complaints, automatic pauses and monitoring. We may also limit, pause or suspend sending, or suspend a Workspace, where we reasonably believe your sending breaches these Terms or the Acceptable Use Policy, or harms the Service, other Customers or recipients.

13. Plans, fees and taxes

Plans. We offer Free, Starter, Pro and Enterprise plans, described on our pricing page; Enterprise is priced in an order form. A paid plan’s price covers a chosen number of emails each month, a number of Contacts (every Contact counts, on any channel, whether or not they have given marketing consent) and, where the pricing page says so, a monthly Kiro AI allowance. Push notifications are not charged on paid plans. Plans also differ in their workspace, member and feature limits. The Customer’s plan covers the Workspaces it owns, within those limits. Past a paid plan’s Contact limit, and any tolerance shown on the pricing page, new Contacts are refused until you move to a larger plan. Contacts are not charged for individually.

Overage. Emails beyond the monthly allowance are charged at the rate per 1,000 shown on the pricing page or in an order form, up to a monthly ceiling that starts at your plan’s monthly price and that you can change. At the ceiling, or with no balance or saved card to pay from, marketing email stops until the allowance resets the next month; transactional email continues for the grace allowance shown on the pricing page, billed with your next payment.

Billing periods. You can pay monthly, annually, or in advance for several months at the monthly price. Fees are charged in advance for each period, and the email allowance resets each month; unused emails do not roll over. A move to a smaller plan, or a cancellation, takes effect at the end of the period you paid for, and a cancelled plan then moves to the free plan (see section 15).

Currency and payment. Prices are in US dollars. In some countries you can also pay in your own currency, converted at the rate shown at checkout, including by bank transfer or mobile money. A plan paid by card renews automatically until you cancel it; any other plan must be paid again before it ends to continue.

Balance. On a paid plan you can add money to a prepaid balance, held in US dollars. It pays for overage and, if you choose, Kiro AI use beyond your plan’s allowance, at the rates in force when it is spent. The balance does not expire. It is a credit for the Service only: it is not refundable, withdrawable or transferable, and it is not stored money.

Free plan. The free plan does not expire. It has monthly and daily email limits and a Contact limit, and sending stops at those limits instead of running into overage. Marketing email sent on it carries a short “Sent with Kirora” line. We may change its limits with notice. There is no free trial of paid plans.

Changes to fees. We may change our prices. An increase applies from your first billing period that starts at least 30 days after we tell you about it.

Taxes. Fees do not include taxes. You are responsible for all applicable taxes, such as VAT, GST or sales tax, other than taxes on our income.

Refunds. Except where the law requires or section 24 provides, fees are not refundable, including for partly used periods or unused allowance.

Non-payment. If you do not pay fees when due, we may suspend the Service under section 14 or move your Workspaces to the free plan after giving you notice.

14. Suspension

We may suspend all or part of the Service, including sending, for a Workspace or a whole account, if:

you breach these Terms or the Acceptable Use Policy, or we reasonably suspect you have;
your use creates a security risk, legal risk or risk of harm to us, other Customers, Contacts or the Service;
we must do so to comply with the law, a court order or a request from a regulator or mailbox provider;
you have not paid fees that are due.

Where reasonable, we will tell you first and let you fix the problem. Where the risk is urgent, such as active spam, phishing or a compromised account, we may act first and tell you afterwards. We lift a suspension once its reason is resolved.

15. Termination

By you. You may stop using the Service at any time. You can delete a Workspace from its settings or cancel your plan. Cancelling a paid plan takes effect at the end of the current billing period.

By us. We may end these Terms or close a Workspace:

with at least 30 days’ notice, for any reason;
at once, by notice, if you materially breach these Terms and do not fix it within 14 days of our notice, or if the breach cannot be fixed, such as serious or repeated abuse;
at once, if required by law.

When these Terms end, your right to use the Service ends. Sections that by their nature should survive, such as fees owed, confidentiality, intellectual property, disclaimers, limitation of liability, indemnity and governing law, continue to apply.

16. Deletion and export of data

Export. You can export Contacts and other Customer Data through the app and the API, including all data about a single Contact. Each User can also download their own account data.

Workspace deletion. When an owner asks to delete a Workspace, sending stops at once and every member can see the scheduled deletion date. The owner can cancel within a 14-day grace period. After that, we permanently delete the Workspace, its Customer Data and stored files, and its sending resources.

When the Terms end or a Workspace is closed. When the Terms end or a Workspace is closed (other than at the owner’s request, as above), you can export Customer Data for 30 days , after which we delete it. Suspension alone does not start this period.

What we keep. Even after deletion, we may keep:

suppression records, such as addresses that unsubscribed, bounced or complained, so they are not messaged again;
anonymised and aggregate data that no longer identifies anyone;
records we must keep by law, such as invoices, and audit records needed to resolve disputes or abuse;
data in backups until those backups expire in the normal cycle.

Retention while active. We delete or anonymise some data automatically on a schedule. The default periods are listed in Annex 1 of the DPA for Customer Data and in section 5 of the Privacy Policy for account data.

17. Confidentiality

Each of us will keep the other’s non-public information confidential, use it only to perform under these Terms, and share it only with staff and advisers who need it and are bound by similar duties. Customer Data is your confidential information; non-public details of the Service and our security are ours. This does not cover information that is public, already known, independently developed or lawfully received from someone else. Either of us may disclose confidential information when the law requires, with notice where allowed.

18. Intellectual property and feedback

We and our licensors own the Service, including its software, designs, templates we provide, documentation and trademarks. Apart from the limited right to use the Service under these Terms, we do not give you any rights in it.

You must not copy, modify or create derivative works of the Service, or use our name or logos without permission. Templates we provide are licensed for use in your messages through the Service.

If you give us feedback or suggestions, we may use them without restriction or payment to you.

19. Third-party services and integrations

The Service can connect to third-party services you choose, such as payment platforms (for example Stripe and Paystack), automation tools and app stores. When you connect one:

your use of it is governed by your agreement with that provider, not by these Terms;
you authorise us to exchange data with it as needed for the integration to work;
we are not responsible for the third party’s service, its availability or what it does with your data.

Push notifications are delivered through Apple, Google and browser push services. Our sub-processors page explains how each is treated.

20. Service availability and changes to the Service

We work to keep the Service available and secure, but we do not promise it will be uninterrupted or error-free. There is no service-level agreement (SLA) unless we agree one with you in writing. We may carry out planned maintenance and will try to schedule it to limit disruption.

We may add, change or remove features. If we remove a material feature you pay for, we will give you reasonable notice. Features marked “beta”, “preview” or “coming soon”, such as WhatsApp and SMS, are provided as they are, may change, and may never be released.

21. Disclaimers

Apart from what these Terms expressly say, the Service is provided “as is” and “as available”. To the extent the law allows, we disclaim all other warranties and conditions, whether express or implied, including merchantability, fitness for a particular purpose, title and non-infringement.

In particular, we do not promise that any message will be delivered, reach the inbox or arrive on time, because delivery depends on mailbox providers and push platforms. The Service’s compliance safeguards do not replace your own legal advice.

Nothing in these Terms excludes rights you have under law that cannot be excluded.

22. Limitation of liability

To the extent the law allows:

neither party is liable for any loss of profits, revenue, business, goodwill or data, or for any indirect, consequential, special or punitive damages, however caused;
each party’s total liability arising out of or in connection with these Terms in any 12-month period is limited to the fees you paid us under these Terms in the 12 months before the event giving rise to the claim.

These limits do not apply to your obligation to pay fees, your indemnity under section 23, or liability that cannot be limited by law, such as for death or personal injury caused by negligence, or for fraud.

23. Indemnity

You will defend and indemnify us, our affiliates and our staff against any claim, fine, penalty, loss, damage or cost (including reasonable legal fees) arising from:

messages you send through the Service, including messages sent without a lawful basis or consent, or in breach of anti-spam or privacy laws;
your Content or Customer Data, including any claim that it infringes someone’s rights or is unlawful;
your breach of these Terms or the Acceptable Use Policy;
for partners, your tenant Workspaces and your customers’ use of them.

We will tell you promptly about a claim, let you control its defence and give reasonable help at your cost. You will not settle a claim that admits fault on our part without our consent.

24. Changes to these Terms

We may update these Terms from time to time. We will post the new version on this page with its date. For material changes, we will also email the owners of active Workspaces and show a notice in the Service at least 30 days before the changes take effect, unless a change is needed sooner for legal or security reasons.

You do not need to accept the Terms again: if you keep using the Service after a change takes effect, the updated Terms apply. If you do not agree, stop using the Service before then. If the change materially reduces your rights, you may end a paid plan and we will refund any prepaid fees for the unused period.

25. Governing law and disputes

These Terms and any dispute arising from them are governed by the laws of the Federal Republic of Nigeria. The courts of Lagos State have exclusive jurisdiction, except that either party may seek urgent injunctive relief in any competent court.

Before starting formal proceedings, please contact us at legal@kirora.io so we can try to resolve the issue informally within 30 days.

26. General

Assignment. You may not transfer these Terms without our written consent. We may transfer them to an affiliate or to a buyer of all or most of our business, with notice to you.
Force majeure. Neither party is liable for delay or failure caused by events beyond its reasonable control, such as natural disasters, war, internet or cloud-provider failures, or government action. This does not excuse payment.
Notices. We give notices by email to the account owner’s address, through the Service, or by posting on this site. You give notices to us at legal@kirora.io. Email notices are received when sent, unless we learn they failed.
Entire agreement. These Terms, with the documents in section 2 and any order form, are the whole agreement between us about the Service.
Severability. If a court finds part of these Terms unenforceable, the rest stays in force, and the unenforceable part is applied as far as the law allows.
Independent parties. These Terms create no partnership, agency or employment relationship.
Third-party rights. No one other than you and us may enforce these Terms.
Export and sanctions. You must not use the Service in breach of export-control or sanctions laws, or from a sanctioned country or on behalf of a sanctioned person.

27. Contact

Questions about these Terms: legal@kirora.io. Help with your account: support@kirora.io. Reporting abuse: abuse@kirora.io.

Post: Kirora Technologies Limited, Woodland Court, DPK Estate, Orchid, Lagos, Nigeria.