neotoma 0.3.0 → 0.3.2

package/docs/legal/privacy_policy.md

@@ -1,114 +0,0 @@
-# Neotoma Privacy Policy
-**Last Updated:** [Date]
-**Version:** 1.0
-## ⚠️ Legal Review Required
-**This document is a template and MUST be reviewed by legal counsel before publication.**
-## 1. Introduction
-Neotoma ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
-**Data Controller:**
-- Company Name: [Company Name]
-- Address: [Address]
-- Email: privacy@neotoma.com
-**Data Protection Officer:**
-- [Name] (if required)
-- Email: dpo@neotoma.com (if applicable)
-## 2. Information We Collect
-### 2.1 Information You Provide
-- **Documents:** PDFs, images (JPG, PNG) you upload
-- **Account Information:** Email address, password (hashed)
-- **Payment Information:** Processed by Stripe (we do not store credit card numbers)
-- **Support Communications:** Messages you send to our support team
-### 2.2 Information Automatically Collected
-- **Usage Data:** API calls, storage usage, feature usage
-- **Technical Data:** IP address, browser type, device information
-- **Logs:** Application logs (no PII, only record IDs and error codes)
-### 2.3 Information Extracted from Documents
-- **Structured Data:** Fields extracted from documents (invoice numbers, amounts, dates, etc.)
-- **Entities:** People, companies, locations identified in documents
-- **Events:** Timeline events generated from dates in documents
-## 3. How We Use Your Information
-We use your information to:
-- **Provide Service:** Process and structure your personal data (documents + agent-created data), store your memory, enable AI access via MCP
-- **Improve Service:** Analyze usage patterns (anonymized), fix bugs, enhance features
-- **Communicate:** Send service updates, security alerts, support responses
-- **Process Payments:** Handle subscription payments via Stripe
-- **Comply with Law:** Meet legal obligations, respond to legal requests
-**We do NOT:**
-- Sell your data to third parties
-- Use your data for advertising
-- Scan your email automatically
-- Access your data without your explicit upload or agent interaction
-## 4. Legal Basis for Processing (GDPR)
-We process your personal data based on:
-- **Consent:** You explicitly upload documents and provide structured data via MCP actions (dual-path ingestion)
-- **Contract:** Processing necessary to provide Neotoma service (structured personal data memory)
-- **Legitimate Interest:** Service improvement, security, fraud prevention (minimal processing)
-## 5. Data Sharing and Disclosure
-### 5.1 Third-Party Processors
-We share data with:
-- **Hosting (when deployed):** Database, storage, application hosting (location depends on vendor; Standard Contractual Clauses when outside EU)
-- **Stripe:** Payment processing (US, with DPA and Standard Contractual Clauses)
-- **Gmail API:** Email attachment import (if you connect Gmail, via Google DPA)
-### 5.2 AI Agents (via MCP)
-- Your structured personal data memory is exposed to AI agents (ChatGPT, Claude, Cursor) via Model Context Protocol (MCP)
-- AI agents can read your memory and write new structured data (with your consent)
-- AI agents access only data you explicitly share via MCP
-- Dual-path ingestion: file uploads + agent interactions (`submit_payload`)
-### 5.3 Legal Requirements
-We may disclose your information if required by law, court order, or government request.
-**We do NOT sell your data to third parties.**
-## 6. Data Subject Rights (GDPR)
-You have the right to:
-- **Access:** Request a copy of your personal data
-- **Rectification:** Request correction of inaccurate data
-- **Erasure:** Request deletion of your data
-- **Portability:** Request export of your data in machine-readable format
-- **Object:** Object to processing based on legitimate interest
-- **Restrict:** Request restriction of processing
-**How to Exercise Rights:**
-- Email: data_request@neotoma.com
-- Response Time: Within 30 days (or 60 days with extension notice)
-**Note:** Neotoma stores immutable truth layer — we cannot modify extracted data. To correct data, upload a corrected document (new record created).
-## 7. Data Retention
-- **User Data:** Retained until you request deletion
-- **Legal Obligations:** Retained if required by law (e.g., tax records, 7 years)
-- **Backups:** Retained for 30 days (automated deletion)
-- **Logs:** Application logs (90 days), access logs (1 year), audit logs (7 years)
-## 8. Data Security
-We implement security measures to protect your data:
-- **Encryption:** Data encrypted at rest and in transit (HTTPS, WSS)
-- **Access Controls:** Row-Level Security (RLS), authentication required
-- **Logging:** No PII in logs (only record IDs, error codes)
-- **Vendor Security:** We use vendors with security certifications (SOC 2, ISO 27001)
-**However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.**
-## 9. International Data Transfers
-Your data may be transferred to and processed in:
-- **United States:** Hosting (when deployed), Stripe (payments)
-- **Safeguards:** Standard Contractual Clauses (SCCs) with vendors
-- **Adequacy:** No adequacy decision for US transfers; SCCs provide safeguards
-## 10. Children's Privacy
-Neotoma is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
-## 11. Data Breach Notification
-In the event of a data breach that poses a high risk to your rights and freedoms, we will:
-- Notify the relevant supervisory authority within 72 hours
-- Notify affected users without undue delay (if high risk)
-- Provide details of the breach and measures taken
-## 12. Changes to This Privacy Policy
-We may update this Privacy Policy from time to time. We will notify you of material changes by:
-- Email notification (if you have an account)
-- In-app notification
-- Updated "Last Updated" date
-**Continued use of Neotoma after changes constitutes acceptance of the updated Privacy Policy.**
-## 13. Contact Us
-**Privacy Inquiries:**
-- Email: privacy@neotoma.com
-- Response Time: Within 30 days
-**Data Subject Requests:**
-- Email: data_request@neotoma.com
-- Response Time: Within 30 days
-**Deletion Requests:**
-- Email: delete_request@neotoma.com
-- Response Time: Within 30 days
-## 14. Supervisory Authority (GDPR)
-If you are located in the EU/EEA, you have the right to lodge a complaint with your local supervisory authority if you believe we have violated your data protection rights.
-**This Privacy Policy is effective as of [Date].**

package/docs/legal/privacy_policy_changelog.md

@@ -1,49 +0,0 @@
-# Privacy Policy Changelog
-Track all changes to the Privacy Policy for compliance and transparency.
-## Version History
-### Version 1.0 — [Date]
-**Status:** Draft (Legal Review Required)
-**Initial Version:**
-- Privacy Policy template created
-- Covers GDPR requirements (data subject rights, legal basis, data sharing)
-- Includes CCPA/CPRA considerations
-- Defines data retention and security measures
-**Notification:**
-- [ ] Not yet published
-- [ ] Legal review pending
-- [ ] User notification not required (initial version)
-## Change Log Template
-For each version update, document:
-```markdown
-### Version X.Y — [Date]
-**Status:** Published / Draft
-**Changes:**
-- [Change 1]: [Description]
-- [Change 2]: [Description]
-**Material Changes:** Yes / No
-**Notification:**
-- [ ] Published: [Date]
-- [ ] Users notified: [Date] (if material changes)
-- [ ] Notification method: Email / In-app / Both
-**Legal Review:**
-- Reviewed by: [Name/Organization]
-- Review date: [Date]
-- Approval: [Date]
-```
-## Material Changes Definition
-Material changes require user notification (30 days' notice):
-- Changes to data collection practices
-- Changes to data sharing or disclosure
-- Changes to data subject rights procedures
-- Changes to international data transfers
-- Changes to data retention policies
-- Changes to security measures (if reduced)
-Non-material changes (notification not required):
-- Clarifications or formatting improvements
-- Updates to contact information
-- Corrections of typos or errors
-## Compliance Notes
-- **GDPR:** Material changes require notification and may require re-consent
-- **CCPA/CPRA:** Material changes require notification (30 days' notice)
-- **Documentation:** All changes must be documented in this changelog
-- **Version Control:** Track changes in git (markdown source)

package/docs/legal/terms_of_service.md

@@ -1,185 +0,0 @@
-# Neotoma Terms of Service
-**Last Updated:** [Date]
-**Version:** 1.0
-## ⚠️ Legal Review Required
-**This document is a template and MUST be reviewed by legal counsel before publication.**
-## 1. Acceptance of Terms
-By accessing or using Neotoma ("Service"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, you may not use the Service.
-**Age Requirement:** You must be at least 18 years old to use Neotoma. If you are under 18, you may use Neotoma only with the consent and supervision of a parent or guardian.
-## 2. Service Description
-### 2.1 What Neotoma Does
-Neotoma is a **deterministic, structured memory substrate** that transforms fragmented personal data into AI-ready knowledge via dual-path ingestion. Neotoma:
-- Accepts personal data via dual-path ingestion:
-  - File uploads (PDFs, images)
-  - Agent interactions (structured data via MCP `submit_payload`)
-- Extracts structured fields (invoice numbers, amounts, dates, etc.) from documents OR accepts structured data from agents
-- Identifies entities (people, companies, locations) across all personal data
-- Builds timelines from dates across all personal data
-- Exposes structured personal data memory to AI agents via Model Context Protocol (MCP)
-- Cross-platform: works with ChatGPT, Claude, Cursor
-### 2.2 What Neotoma Does NOT Do
-- **No automatic scanning:** We do not scan your email or cloud storage automatically
-- **No email body reading:** We only process attachments you explicitly upload
-- **No guessing or inferring:** Extraction is deterministic (rule-based in MVP)
-- **No background data collection:** We only process data you explicitly provide via upload or MCP interaction
-- **Not conversation-only:** Unlike provider memory (ChatGPT, Claude, Gemini), Neotoma provides structured personal data memory with entity resolution and timelines
-## 3. User Accounts
-### 3.1 Account Creation
-- You must provide accurate, complete information when creating an account
-- You are responsible for maintaining the security of your account credentials
-- You must notify us immediately of any unauthorized access to your account
-### 3.2 Account Responsibility
-- You are responsible for all activities that occur under your account
-- You must not share your account credentials with others
-- You must not create multiple accounts to circumvent usage limits
-## 4. User Obligations
-### 4.1 Lawful Use
-You agree to use Neotoma only for lawful purposes and in accordance with these Terms. You agree NOT to:
-- Upload illegal, harmful, or offensive content
-- Upload content that violates third-party rights (copyright, privacy, etc.)
-- Use Neotoma to violate any laws or regulations
-- Interfere with or disrupt the Service
-- Attempt to gain unauthorized access to the Service or other users' data
-- Use automated systems (bots, scrapers) to access the Service without permission
-### 4.2 Content Responsibility
-- You are solely responsible for the content you upload
-- You represent that you have the right to upload and process the content
-- You grant Neotoma a license to process and store your content to provide the Service
-### 4.3 Prohibited Content
-You may NOT upload:
-- Malicious software (viruses, malware, etc.)
-- Content that violates laws or regulations
-- Content that infringes on intellectual property rights
-- Content that contains sensitive personal information of others without consent
-## 5. Intellectual Property
-### 5.1 Your Content
-- **You retain ownership** of all documents and data you upload
-- You grant Neotoma a **non-exclusive, worldwide, royalty-free license** to use, process, and store your content solely to provide the Service
-### 5.2 Neotoma Service
-- Neotoma owns all rights, title, and interest in the Service, software, and technology
-- You receive a **non-exclusive, non-transferable, revocable license** to use the Service
-- You may not copy, modify, distribute, or create derivative works of the Service
-### 5.3 Trademarks
-- "Neotoma" and related marks are trademarks of Neotoma
-- You may not use our trademarks without prior written permission
-## 6. Payment Terms
-### 6.1 Subscription Plans
-- **Individual Plans:** €30–€150/month (monthly or annual billing)
-- **Team Plans:** €500–€2,500/month for 2–20 users (monthly or annual billing)
-- **Free Tier:** Limited features for activation
-### 6.2 Billing
-- Subscriptions are billed in advance (monthly or annual)
-- Payment is processed by Stripe (we do not store credit card numbers)
-- You authorize us to charge your payment method for subscription fees
-### 6.3 Refunds
-- **Monthly Subscriptions:** No refunds for partial months
-- **Annual Subscriptions:** Refunds prorated if canceled within 30 days
-- **Refund Policy:** Refunds at our discretion, subject to applicable law
-### 6.4 Payment Failure
-- If payment fails, we may suspend or terminate your subscription
-- We will notify you of payment failures and provide opportunity to update payment method
-- Service access restored upon successful payment
-### 6.5 Price Changes
-- We may change subscription prices with 30 days' notice
-- Price changes apply to subsequent billing cycles
-- You may cancel before price change takes effect
-## 7. Service Availability
-### 7.1 No Uptime Guarantee
-- Neotoma is provided "as is" and "as available"
-- We do not guarantee uninterrupted or error-free service
-- We may perform maintenance that temporarily interrupts service
-### 7.2 Service Modifications
-- We may modify, suspend, or discontinue the Service at any time
-- We will provide reasonable notice of material changes (30 days)
-- We are not liable for any modification, suspension, or discontinuation
-### 7.3 Maintenance
-- We may perform scheduled maintenance with advance notice
-- Emergency maintenance may occur without notice
-- We will minimize service disruption during maintenance
-## 8. Data and Privacy
-### 8.1 Data Processing
-- We process your data as described in our [Privacy Policy](privacy_policy.md)
-- You retain ownership of your data
-- We do not sell your data to third parties
-### 8.2 Data Deletion
-- You may request deletion of your data at any time
-- We will delete your data within 30 days of request (unless legal obligation requires retention)
-- Deleted data may remain in backups for up to 30 days
-### 8.3 Data Export
-- You may export your data at any time (via data subject request)
-- We provide data in machine-readable format (JSON, CSV)
-## 9. Limitation of Liability
-### 9.1 No Warranties
-- **THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND**
-- We disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement
-- We do not warrant that the Service will be uninterrupted, error-free, or secure
-### 9.2 Limitation of Damages
-- **TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEOTOMA SHALL NOT BE LIABLE FOR:**
-  - Indirect, incidental, special, consequential, or punitive damages
-  - Loss of profits, revenue, data, or business opportunities
-  - Damages exceeding the amount you paid for the Service in the 12 months preceding the claim
-### 9.3 Indemnification
-- You agree to indemnify and hold Neotoma harmless from any claims, damages, or expenses arising from:
-  - Your use of the Service
-  - Your violation of these Terms
-  - Your violation of any third-party rights
-## 10. Termination
-### 10.1 Termination by You
-- You may cancel your subscription at any time
-- Cancellation takes effect at the end of your current billing period
-- You may request immediate account deletion (data deleted within 30 days)
-### 10.2 Termination by Us
-We may suspend or terminate your account if:
-- You violate these Terms
-- You fail to pay subscription fees
-- You engage in fraudulent or illegal activity
-- We discontinue the Service
-### 10.3 Effect of Termination
-- Upon termination, your access to the Service will cease
-- We may delete your data (subject to legal obligations)
-- Provisions that survive termination: Intellectual Property, Limitation of Liability, Indemnification, Dispute Resolution
-## 11. Dispute Resolution
-### 11.1 Governing Law
-- These Terms are governed by the laws of [Jurisdiction]
-- Any disputes will be resolved in the courts of [Jurisdiction]
-### 11.2 Arbitration (Optional)
-- [If applicable] Disputes will be resolved through binding arbitration
-- Arbitration will be conducted by [Arbitration Organization]
-- You waive the right to a jury trial
-### 11.3 Class Action Waiver
-- [If applicable] You agree to resolve disputes individually, not as part of a class action
-## 12. Changes to Terms
-### 12.1 Modification
-- We may modify these Terms at any time
-- Material changes will be notified via email or in-app notification (30 days' notice)
-- Continued use of the Service after changes constitutes acceptance
-### 12.2 Material Changes
-Material changes include:
-- Changes to payment terms
-- Changes to service availability or features
-- Changes to dispute resolution procedures
-## 13. Miscellaneous
-### 13.1 Entire Agreement
-- These Terms constitute the entire agreement between you and Neotoma
-- They supersede all prior agreements and understandings
-### 13.2 Severability
-- If any provision is found unenforceable, the remaining provisions will remain in effect
-### 13.3 Waiver
-- Failure to enforce any provision does not constitute a waiver
-- Waivers must be in writing and signed by both parties
-### 13.4 Assignment
-- You may not assign these Terms without our written consent
-- We may assign these Terms to an affiliate or successor
-### 13.5 Force Majeure
-- We are not liable for delays or failures due to circumstances beyond our control (natural disasters, war, etc.)
-## 14. Contact Information
-**Support:**
-- Email: support@neotoma.com
-- Response Time: Within 48 hours
-**Legal:**
-- Email: legal@neotoma.com (if exists)
-**Billing:**
-- Email: billing@neotoma.com (if exists)
-## 15. Acknowledgment
-By using Neotoma, you acknowledge that you have read, understood, and agree to be bound by these Terms of Service.
-**These Terms of Service are effective as of [Date].**

package/docs/legal/terms_of_service_changelog.md

@@ -1,62 +0,0 @@
-# Terms of Service Changelog
-Track all changes to the Terms of Service for compliance and transparency.
-## Version History
-### Version 1.0 — [Date]
-**Status:** Draft (Legal Review Required)
-**Initial Version:**
-- Terms of Service template created
-- Covers service description, user obligations, payment terms
-- Includes intellectual property, limitation of liability, termination
-- Defines dispute resolution and governing law
-**Notification:**
-- [ ] Not yet published
-- [ ] Legal review pending
-- [ ] User acceptance not required (initial version)
-## Change Log Template
-For each version update, document:
-```markdown
-### Version X.Y — [Date]
-**Status:** Published / Draft
-**Changes:**
-- [Change 1]: [Description]
-- [Change 2]: [Description]
-**Material Changes:** Yes / No
-**Notification:**
-- [ ] Published: [Date]
-- [ ] Users notified: [Date] (if material changes)
-- [ ] Notification method: Email / In-app / Both
-- [ ] Re-acceptance required: Yes / No (if material changes)
-**Legal Review:**
-- Reviewed by: [Name/Organization]
-- Review date: [Date]
-- Approval: [Date]
-```
-## Material Changes Definition
-Material changes require user notification (30 days' notice) and may require re-acceptance:
-- Changes to payment terms or pricing
-- Changes to service availability or features
-- Changes to user obligations or prohibited activities
-- Changes to limitation of liability or warranties
-- Changes to dispute resolution procedures
-- Changes to termination or cancellation policies
-Non-material changes (notification not required):
-- Clarifications or formatting improvements
-- Updates to contact information
-- Corrections of typos or errors
-- Updates to service description (if no functional change)
-## Re-Acceptance Requirements
-**Re-acceptance required for:**
-- Material changes to payment terms
-- Material changes to limitation of liability
-- Material changes to dispute resolution
-- Changes that reduce user rights
-**Re-acceptance not required for:**
-- Clarifications or non-material updates
-- Updates that expand user rights
-- Corrections or formatting changes
-## Compliance Notes
-- **Notification:** Material changes require 30 days' notice before taking effect
-- **Re-acceptance:** Users must re-accept Terms if material changes affect their rights
-- **Documentation:** All changes must be documented in this changelog
-- **Version Control:** Track changes in git (markdown source)
-- **Continued Use:** Continued use after notification constitutes acceptance (if re-acceptance not required)