Terms of Service

Firebird Solutions Limited · NZBN 9429054006225 · Auckland, New Zealand

Atamaia Terms of Service

Effective date: 9 October 2026 Last updated: 9 October 2026 Version: 2.1


1. About these terms

Atamaia ("Atamaia", "we", "us", "our") is an AI identity, memory and context management platform operated by Firebird Solutions Limited (New Zealand limited liability company, NZBN 9429054006225), trading as Firebird Solutions, of 34 Rainsford Road, Pukekohe, Auckland 2120, New Zealand.

These Terms of Service (the "Terms") form a binding agreement between you and Firebird Solutions Limited. They apply when you:

  • create an account on, or use, the hosted Atamaia service at atamaia.ai (the "Hosted Service");
  • access the Atamaia REST API or MCP (Model Context Protocol) interfaces; or
  • otherwise use any part of the Hosted Service, including under a free plan.

If you do not agree to these Terms, do not use the Hosted Service.

Separate terms apply to the Atamaia source code — see section 4.

The following documents are incorporated into these Terms by reference and form part of your agreement with us:

Document Covers
Privacy Policy How we handle personal information
Acceptable Use Policy What you may and may not do with the service
Subprocessors Third parties that may process customer data
Data Processing Addendum Applies where you are a business customer subject to GDPR or similar laws

Where a conflict exists, the order of precedence is: a signed written agreement with us, then the Data Processing Addendum, then these Terms, then the other referenced documents.


2. Definitions

"Account" — your registered account on the Hosted Service.

"AI Identity" — a named, persistent AI persona within Atamaia that holds memories, preferences and context.

"Customer Content" — everything you or your AI Identities store in, or transmit through, the Hosted Service: memories, facts, documents, tasks, messages, projects, identity configurations, prompts, and any output stored back into the platform.

"External Provider" — a third-party AI model, embedding, or inference service that you choose to configure and connect to your Account (for example by supplying your own API key).

"Tenant" — the isolated data boundary within which your Account, users, AI Identities, projects and Customer Content sit.

"Service Data" — data we generate about the operation of the Hosted Service: request telemetry, logs, usage counts, performance metrics and billing records.


3. The Hosted Service

3.1 What it does

The Hosted Service provides persistent memory, identity, context and related management capabilities for AI systems, accessible via REST API, MCP, and a web dashboard. Available features, quotas and limits depend on your plan, as published at atamaia.ai/pricing.

3.2 What it does not do by default

Atamaia is, by default, a storage, retrieval and orchestration service. In its default configuration:

  • we do not send Customer Content to any third-party AI model, embedding or inference provider;
  • any model inference performed by the platform itself runs on infrastructure we operate;
  • Customer Content leaves our systems when you or your configured tools retrieve it.

This includes the generation of the embeddings that make retrieval work, which runs on a model on hardware we operate.

This is a platform-level configuration under our control, and we treat changing it as a subprocessor change. If we adopt a third-party service for any platform-side inference, we will list it at /subprocessors and give at least 30 days' notice before the change takes effect.

This default may change only in the ways described in section 10 (External Providers), which you control.

3.3 Changes to the service

We may add, change, or remove features. For changes that materially reduce functionality you rely on in a paid plan, we will give at least 30 days' notice by email to your Account address, except where a change is required urgently for security, legal or safety reasons.


4. The source code and self-hosted deployments

The Atamaia source code is not currently published. If and when we publish it, your rights to use, copy, modify and distribute the source code will be governed exclusively by the licence published with it, and nothing in these Terms limits those rights.

These Terms govern the Hosted Service only. They do not restrict any rights you may have in the source code under a licence we publish for it.

If you deploy Atamaia yourself ("Self-Hosted Deployment"):

  • you are solely responsible for that deployment, its security, its availability, its backups and its compliance with law;
  • you are the controller and operator of all data in it;
  • we have no access to it, no obligations in respect of it, and no liability arising from it;
  • our Privacy Policy does not apply to it;
  • our support obligations, warranties and service commitments do not apply to it;
  • you must not represent your Self-Hosted Deployment as being operated, endorsed or supported by us, and you must comply with section 15 (trade marks).

5. Eligibility and accounts

5.1 Eligibility

You must be at least 16 years old, or the age of digital consent in your jurisdiction if higher, to create an Account. If you are using the Hosted Service on behalf of an organisation, you warrant that you have authority to bind that organisation to these Terms, and "you" means that organisation.

5.2 Account security

You are responsible for:

  • keeping your credentials, API keys and access tokens confidential;
  • all activity that occurs under your Account or API keys, whether or not you authorised it;
  • promptly notifying us at [email protected] if you suspect unauthorised access.

API keys grant programmatic access to your Tenant. Treat them as you would a password. We are not liable for loss arising from your failure to secure them.

5.3 Users, roles and organisation structure

The Hosted Service supports multiple users within a Tenant, organised through role-based access control, an organisational unit tree, and group membership on resources such as projects. Where you add users to your Tenant:

  • you are responsible for their compliance with these Terms;
  • you control what they can see and do through the permissions you assign;
  • you are responsible for the lawfulness of granting them access to Customer Content, including any personal information about third parties.

6. Early access

The Hosted Service is currently offered on an early access basis. This means:

  • it is provided "as is" and "as available", with no service level commitment;
  • features may change, be renamed, or be withdrawn;
  • APIs may introduce breaking changes;
  • interruptions, defects and data loss are possible;
  • we may impose, change or remove limits at any time.

We commit to:

  • giving at least 30 days' notice by email before an intentional breaking change to a documented API endpoint or MCP tool, except where required urgently for security or legal reasons;
  • giving at least 30 days' notice before permanently discontinuing the Hosted Service, and making export available throughout that period.

You should maintain your own backups of anything you cannot afford to lose. Export is available at any time through the dashboard or API.

6.1 Moving to general availability

When the Hosted Service leaves early access:

  • we will give at least 30 days' notice before this section ceases to apply;
  • accounts continue without interruption — you will not need to re-register;
  • Early-access pricing is grandfathered: the price you signed at carries into general availability for as long as your subscription remains active.

7. Plans, fees and billing

7.1 Plans

Plans, prices and quotas are published at atamaia.ai/pricing. Optional quota boosts may be purchased in addition to a base plan.

7.2 Payment

Paid plans are billed monthly in advance. Payments are processed by Stripe, Inc. We do not receive or store your full payment card details; card data is handled by Stripe under its own terms and privacy policy. You authorise us (through Stripe) to charge your nominated payment method for all fees due.

7.3 Taxes

Prices include New Zealand GST (we are GST-registered, no. 149870199) unless stated otherwise at checkout. You are responsible for any other taxes, duties or withholdings applicable in your jurisdiction, other than taxes on our income.

7.4 Cancellation and refunds

You may cancel at any time from your dashboard. Cancellation takes effect at the end of the current billing period; you retain access until then.

Fees are non-refundable, except as expressly provided in section 16.2 (where we terminate for convenience), in the Data Processing Addendum section 8.3 and the subprocessors page (where you object to a new subprocessor), and where a refund is required under the New Zealand Consumer Guarantees Act 1993 or the Australian Consumer Law (see section 20). Outside those cases we do not provide pro-rata refunds for partial months, unused quota, or periods of non-use.

7.5 Failed payment

If a payment fails, we may retry it and will notify you. If payment remains outstanding after 14 days, we may downgrade your Account to the free plan or suspend access. We will not delete Customer Content for non-payment without giving you at least 30 days' notice and the opportunity to export.

7.6 Price changes

We may change prices with at least 30 days' notice by email. Changes take effect at your next billing period. If you do not accept a price change, your remedy is to cancel before it takes effect.

7.7 Quotas

Quotas (identities, memories, projects, request rates) are enforced per plan. We may throttle, queue or reject requests that exceed your quota. Sustained excessive use that degrades the service for others may be limited even where it is nominally within quota.


8. Free plan

The free plan is provided at no charge and, in addition to section 6:

  • carries no uptime, support, durability or data-retention commitment of any kind;
  • may have its features and quotas limited or changed at any time without notice;
  • may be suspended or discontinued as a plan on 30 days' notice, during which export remains available — the notice commitments in sections 6 and 16.2 apply to free accounts too;
  • may be suspended or terminated for inactivity of 12 months or more, after email notice to your Account address and a reasonable opportunity to export;

Do not use the free plan for anything you cannot afford to lose.

On downgrade from a paid plan (see section 7.5), content exceeding free-plan quotas becomes read-only rather than being deleted, and remains exportable. We will not delete it without the 30 days' notice required by section 7.5.


9. Customer Content

9.1 You own it

You retain all right, title and interest in Customer Content. We claim no ownership of it.

9.2 The licence you give us

You grant us a worldwide, non-exclusive, royalty-free licence to host, store, copy, transmit, index, encrypt, back up and display Customer Content solely to the extent necessary to operate, secure and support the Hosted Service for you. This licence ends when the content is deleted, except to the extent it persists in backups or in the records described in section 16.3.

9.3 What we will not do

We will not:

  • sell Customer Content, or share it for cross-context behavioural advertising;
  • use Customer Content to train AI models;
  • access Customer Content except as set out in section 9.4.

9.4 When we may access Customer Content

Personnel may access Customer Content only:

  • where you ask us to, for support;
  • where strictly necessary to investigate a security incident, a suspected breach of the Acceptable Use Policy, or a fault we cannot otherwise diagnose;
  • where required by law (see the Privacy Policy for how we handle such requests).

Access is limited to personnel who need it and is logged.

9.5 Your responsibilities for content

You are responsible for Customer Content and warrant that:

  • you have the right to store and process it in the Hosted Service;
  • it does not infringe anyone's rights;
  • where it contains personal information about other people, you have a lawful basis for storing it and have given any notices and obtained any consents required by applicable privacy law;
  • it complies with the Acceptable Use Policy.

9.6 Sensitive information

The Hosted Service may be used to store sensitive personal information — including health information — where you have the right to do so. In that case:

  • you are the controller of that information and we act as processor on your instructions;
  • you are responsible for the lawfulness of collecting and storing it;
  • if you are a business customer processing others' sensitive information, you must enter into our Data Processing Addendum.

We do not currently hold certifications for regulated data regimes. In particular, we do not offer HIPAA Business Associate Agreements, and we are not PCI-DSS certified for cardholder data. Do not store protected health information subject to HIPAA, full payment card numbers, government identity credentials, or classified or export-controlled material in the Hosted Service. Section 3 of the Acceptable Use Policy is the authoritative list.

9.7 Service Data

We may use Service Data — request telemetry, usage counts, performance metrics and billing records — to operate, secure, troubleshoot, and improve the Hosted Service, to plan capacity, and to produce aggregated statistics that do not identify you, your tenant or any individual. We may publish such aggregated statistics.

This does not extend to Customer Content. Nothing in this section permits us to use the substance of your memories, facts, documents, tasks or messages for any purpose beyond operating the service for you, and nothing here permits training AI models on it — see section 9.3.

9.8 Feedback

If you send us suggestions or feedback about the Hosted Service, we may use it without obligation or compensation. This does not give us any right to Customer Content.


10. External Providers (your own AI provider keys)

The Hosted Service allows you to connect External Providers — third-party AI model, embedding or inference services — by supplying your own credentials.

This is off by default. Nothing is sent to an External Provider unless you configure one.

If you configure an External Provider:

  • Customer Content that you or your agents route to it leaves our infrastructure and is handled under that provider's terms and privacy policy, not ours;
  • you are responsible for reading and complying with that provider's terms, including any restrictions on the content you may submit and any training-on-input defaults it applies;
  • you are responsible for the lawfulness of the transfer, including any cross-border transfer obligations under applicable privacy law;
  • we do not control, endorse, warrant or accept liability for that provider's availability, security, output, pricing or data practices, and you agree not to seek to hold us liable for them;
  • costs charged by that provider are between you and it.

We will show you which External Providers are configured for your Tenant. We recommend reviewing this before storing sensitive information.


11. Acceptable use

You must comply with the Acceptable Use Policy. In summary, you must not use the Hosted Service to break the law, harm others, infringe rights, compromise security, circumvent quotas, or store content you have no right to store.

We may investigate suspected breaches and may suspend or terminate access under section 16.


12. API, rate limits and automated access

You may access the Hosted Service programmatically through the documented REST API and MCP interfaces. You must:

  • respect published rate limits and any limits communicated to you;
  • not attempt to circumvent quotas, throttling or authentication;
  • not use the API in a way that imposes an unreasonable load on our infrastructure;
  • not scrape, crawl or bulk-extract data other than your own Customer Content.

We may change API behaviour subject to the notice commitment in section 6.

Agent execution features consume model tokens and incur costs. Agent inference routes through the same model routing as the rest of the service: by default, models we operate on our own hardware, plus cloud models you explicitly select (disclosed under Privacy Policy section 6). Embeddings for retrieval are generated on hardware we operate. Agent runs never require you to supply your own provider credentials unless you choose to use a cloud model.

Call and token-usage telemetry generated by model routing is Service Data held on our New Zealand infrastructure. Content sent to a cloud model you have selected is processed by that provider outside New Zealand — the Privacy Policy, section 9, carries the complete cross-border disclosure.

Where an agent you configure runs autonomously, you remain responsible for its actions, its resource consumption and the content it creates or transmits as if you had performed them yourself.


13. Privacy and data protection

Our handling of personal information is described in the Privacy Policy.

Where you are a business customer and we process personal information on your behalf as a processor, the Data Processing Addendum applies and forms part of these Terms.


14. Confidentiality

Each party may receive non-public information from the other. The receiving party will protect it with at least reasonable care, use it only for purposes of this agreement, and not disclose it except to personnel and advisers who need it and are bound by equivalent obligations, or where required by law. This does not apply to information that is public through no fault of the receiving party, independently developed, or lawfully received from a third party.


15. Intellectual property and trade marks

Other than any source code we release under a separate licence, and Customer Content, all intellectual property in the Hosted Service — including its design, documentation, and the "Atamaia", "AIM" and "Firebird Solutions" names and logos — remains ours or our licensors'.

You may not use our names or logos in a way that suggests we operate, endorse or support your deployment or product, without our prior written permission. Nominative reference ("built on Atamaia") is permitted where accurate and not misleading.


16. Suspension, termination and what happens to your data

16.1 By you

You may stop using the Hosted Service and close your Account at any time from the dashboard, or by contacting [email protected]. Closing requires your password confirmation. You are offered an export first, the erasure is irreversible, and a deletion receipt is emailed to you when it completes — see section 16.3.

16.2 By us

We may suspend or terminate your access:

  • immediately, where we reasonably believe you have materially breached these Terms or the Acceptable Use Policy, where continued access poses a security or legal risk, or where required by law;
  • on 30 days' notice, for any other reason, in which case we will refund any prepaid fees covering the period after termination.

Where we suspend rather than terminate, we will tell you why (unless legally prevented) and what you need to do to restore access.

16.3 Effect of termination

On termination:

  1. Your right to access the Hosted Service ends, except for the export access preserved by paragraph 2.
  2. Export first. You may export Customer Content through the dashboard or API at any time before deletion, and we will make export available for at least 30 days after termination. We may withhold this export window only where we terminated under section 16.2 for conduct falling within section 2 of the Acceptable Use Policy, or where providing it would itself be unlawful. In every other case, including any other material breach, you get the export window.
  3. Deletion. On account closure, all Customer Content is irreversibly deleted by cascade — memories, facts, documents, tasks, messages, chat sessions, agent traces, the knowledge graph and your AI identities' memories — per Privacy Policy section 8.2. Paid accounts are purged immediately; free accounts within 30 days. Backups roll off their 30-day retention cycle. Closure is self-service from the dashboard and requires your password confirmation: you are offered an export first, the erasure then runs, and a deletion receipt confirming what was destroyed and when is emailed to you.
  4. Records we are required to keep — billing and tax records, and security and audit logs — are retained as described in the Privacy Policy. These do not contain the substance of your memories, documents or facts.
  5. Sections 2 (definitions), 9.1, 9.2 (to the extent content persists in backups or records under paragraph 4), 9.7, 9.8, 14, 15, 17, 18, 19, 20, 21, 22 and 24 survive termination.

17. Warranties and disclaimers

To the maximum extent permitted by law, and subject to section 20:

  • the Hosted Service is provided "as is" and "as available";
  • we disclaim all implied warranties, including merchantability, fitness for a particular purpose, and non-infringement;
  • we do not warrant that the Hosted Service will be uninterrupted, error-free, or free of harmful components, or that data will never be lost or corrupted;
  • we do not warrant that output produced by AI systems using Atamaia will be accurate, complete, appropriate or fit for any purpose.

AI output is probabilistic. Memory retrieval, context assembly and agent behaviour can surface incorrect, incomplete or out-of-date information. You must not rely on the Hosted Service as the sole basis for any decision with legal, financial, medical, safety or similarly significant consequences.


18. Limitation of liability

To the maximum extent permitted by law, and subject to section 20:

18.1 Neither party is liable for indirect, incidental, special, consequential or punitive damages, or for loss of profit, revenue, goodwill, business opportunity or anticipated savings, however arising.

18.2 Our total aggregate liability arising out of or in connection with these Terms and the Hosted Service, whether in contract, tort (including negligence), equity or otherwise, is limited to the greater of:

  • the total fees you paid us for the Hosted Service in the twelve months immediately before the event giving rise to the claim; or
  • NZ$100.

18.3 Enhanced cap for data-protection events. Where the claim arises from our breach of our data-protection obligations (the Privacy Policy or the DPA) — unauthorised access to, disclosure of, or loss of your Customer Content — the cap in 18.2 instead is the greater of:

  • the total fees you paid us in the twelve months immediately before the event; or
  • NZ$25,000.

This reflects what a memory product is: the cap on the failure mode that matters most to you is an order of magnitude above the cap on ordinary service failures. For enterprise agreements the enhanced cap may be superseded by a negotiated figure in the DPA's enterprise schedule.

18.4 Free plan. Where you use the Hosted Service on a free plan, our total aggregate liability is limited to NZ$100, except that the enhanced cap in 18.3 applies to data-protection events.

18.5 Nothing in this section limits liability that cannot lawfully be limited, including liability for fraud, for death or personal injury caused by negligence, or under the non-excludable consumer guarantees described in section 20.

18.6 These limitations reflect the allocation of risk between the parties, the early access nature of the Hosted Service, and the prices charged. They apply even if a limited remedy fails its essential purpose.


19. Indemnities and warranty posture

19.1 The Hosted Service is provided "as is" for business users

If you use the Hosted Service for the purposes of a business, the disclaimers in section 17 apply to their full extent: the service is provided "as is" and "as available", without warranties of any kind beyond those stated in these Terms, and section 18's limits apply without further carve-outs beyond those stated.

19.2 Consumer users keep the statutory floor

If you use the Hosted Service for personal, domestic or household purposes, sections 17 and 18 apply subject to section 20 — the non-excludable consumer guarantees are not disclaimed, limited or contracted out of. Section 20's business-user exclusions do not apply to you.

19.3 Your indemnity (both plans)

You will indemnify us against any third-party claim, and reasonable legal costs, arising from:

  • Customer Content, including any claim that it infringes rights or was stored unlawfully;
  • your breach of the Acceptable Use Policy or of applicable law;
  • your configuration or use of an External Provider;
  • actions taken by agents or AI Identities you configure.

We will notify you promptly of any such claim, give you control of the defence (subject to our right to participate with our own counsel at our cost), and reasonably cooperate. You may not settle a claim in a way that imposes an obligation or admission on us without our written consent. Your obligations under this section are not subject to the limitations and exclusions in section 18.

19.4 Our indemnity to you (paid plans)

We will defend you against any third-party claim that your permitted use of the Hosted Service, as we provide it and without modification, infringes that party's New Zealand or European Union intellectual property rights, and pay any damages finally awarded or settlement we approve. Our obligations here do not apply where the claim arises from Customer Content, from content retrieved, generated or assembled through the service (including anything an AI identity produces from stored memories), from your combination of the service with things we did not provide, or from use after we advised you of a modification that would have avoided the claim. Where we receive information of such a claim, we may, at our option and expense: procure the right for you to continue using the affected part of the service; modify or replace it so it no longer infringes; or, if neither is commercially reasonable, terminate the affected part and refund any prepaid fees covering the period after termination. This indemnity states your exclusive remedy for such a claim and is subject to section 18's caps.

For free-plan users, this indemnity is limited to claims arising from our infringement of another's intellectual property by the Hosted Service itself, and excludes legal costs beyond a reasonable amount.


20. Consumer law

20.1 New Zealand

Nothing in these Terms limits your rights under the Consumer Guarantees Act 1993 or the Fair Trading Act 1986 where those Acts apply.

If you acquire the Hosted Service for the purposes of a business, you agree that the Consumer Guarantees Act does not apply, and that this exclusion is fair and reasonable, in accordance with section 43 of that Act. You also agree that sections 9, 12A, 13 and 14(1) of the Fair Trading Act do not apply, and that it is fair and reasonable to be bound by this provision.

20.2 Australia

Where the Australian Consumer Law applies, our goods and services come with guarantees that cannot be excluded. Where we are permitted to limit our liability for a failure to comply with a consumer guarantee, our liability is limited to resupplying the service or paying the cost of resupply.

20.3 Elsewhere

If mandatory consumer protection law in your jurisdiction gives you rights that these Terms would otherwise limit, those rights prevail to the extent of the inconsistency.


21. Force majeure

Neither party is liable for failure to perform (other than a payment obligation) caused by events beyond its reasonable control, including natural disaster, war, civil unrest, epidemic, industrial action, failure of internet infrastructure or third-party services, or government action. The affected party must notify the other and use reasonable efforts to resume performance.


22. Governing law and disputes

These Terms are governed by the laws of New Zealand. The courts of New Zealand have non-exclusive jurisdiction, meaning we may also bring proceedings in a court that has jurisdiction over you.

Before starting proceedings, each party will first raise the issue in writing and the parties will attempt in good faith to resolve it within 30 days. This does not prevent either party seeking urgent interim relief.


23. Changes to these Terms

We may update these Terms. For material changes we will give at least 30 days' notice by email to your Account address and by notice in the dashboard, and will publish the updated version with a new effective date. Continued use after the effective date constitutes acceptance. If you do not accept a change, your remedy is to stop using the Hosted Service and cancel before the change takes effect.

We maintain a change log at the foot of this page.


24. General

Assignment. You may not assign these Terms without our written consent. We may assign them to an affiliate or in connection with a merger, acquisition or sale of assets, on notice to you.

Entire agreement. These Terms and the documents incorporated by reference are the entire agreement between the parties about the Hosted Service and supersede prior discussions.

Severability. If any provision is unenforceable, it is modified to the minimum extent necessary to make it enforceable, or severed, and the rest continues in force.

No waiver. A failure to enforce a right is not a waiver of it.

Notices. We will send notices to your Account email address. You should send notices to [email protected]. Notices are deemed received on the next business day after sending.

Relationship. The parties are independent contractors. Nothing creates a partnership, agency, employment or joint venture.

No third-party beneficiaries. Except as stated, no one other than the parties may enforce these Terms under the Contract and Commercial Law Act 2017.


25. Contact

Purpose Address
General and support [email protected]
Legal notices [email protected]
Privacy [email protected]
Security reports [email protected]

Firebird Solutions Limited 34 Rainsford Road, Pukekohe, Auckland 2120, New Zealand


Change log

Version Date Change
2.1 9 October 2026 Account closure is now self-service from the dashboard; deletion receipt is emailed on completion; export available through the dashboard as well as the API.
2.0 8 October 2026 Full rewrite: added early access, billing, liability, termination, consumer law, External Provider and open-source terms.
1.0 March 2026 Initial short-form terms.