Terms of Service

Agreement

These Terms of Service (the “Terms”) are an agreement between xMap Ltd. (“xMap”, “we”, “us”) and the organization that uses xMap Flows (“you”). They govern your use of xMap Flows at flows.xmap.ai, including the website, the live run on the home page, the guest editor, the app, the APIs, the MCP server for AI assistants, webhooks and emails (together, the “Service”).

By creating an account, accepting an invitation, leaving a work email to receive a list, or otherwise using the Service, you agree to these Terms. If you use the Service for an organization, you confirm that you are authorised to accept these Terms for it, and “you” means that organization and each person who uses the Service under it. If you are not authorised, or do not agree, do not use the Service.

The Service is offered to businesses, not to consumers.

What the agreement is made of. The agreement consists of these Terms, the Data processing agreement where it applies, the prices and plan descriptions shown on the Pricing and Billing pages when you buy, and any order or separate written agreement signed by xMap. If they conflict, a signed order or agreement comes first, then the Data processing agreement (for the processing of personal data), then these Terms. Our Privacy Policy explains how we handle personal data. It is a notice, not a contract term.

The Service

xMap Flows lets you build, run, schedule and share workflows (“flows”) that combine xMap data blocks (for example business listings from public online maps, place details, job postings, traffic incidents, ship positions, satellite pictures and weather forecasts), AI blocks, logic blocks, your own data, and connections to the apps and systems you use.

Live and sample data. Each data block is marked in the product as live or sample. Live blocks fetch current information from xMap’s data services or from third-party sources when a flow runs. Sample blocks return illustrative figures, are labelled as sample wherever they appear, and are free of charge. Sample figures are not real measurements and must not be relied on for any decision. The guest editor runs on sample data.

Test runs and real runs. A test run works a flow out without sending anything to connected apps or recipients. A real run (Run once, a deployed schedule, a webhook, a new-rows trigger, or a run started through the API or by an assistant with sending requested) fetches live data, uses credits and sends what the flow says to send. You are responsible for what your flows do when they run for real.

Changes. We develop the Service continuously and may add, change or remove features, blocks, data sources and limits. We will give organization admins reasonable notice, at least 30 days where practicable, before a change that materially reduces the Service for paying customers, unless the change is needed for security, to comply with the law, or because a third-party source changed or ended.

Availability and support. We work to keep the Service available and show its current state on the Status page. Unless a signed order says otherwise, we do not promise a service level, and support is given by email and through the Help panel on a reasonable-efforts basis.

Beta features. Features marked beta, preview or early access are provided as they are, may change or end at any time, and are outside any commitment in a signed order.

Accounts and eligibility

• The Service is for business use. You must be at least 18 and sign up with a work email address at your company’s domain. Personal, free and temporary email addresses are not accepted.
• You must give accurate information, keep your password, two-step sign-in codes and recovery codes confidential, and tell us promptly at legal@xmap.ai if you suspect unauthorised use of your account.
• You are responsible for activity under your account. We may require extra verification, such as a code sent to your email or mobile number, or two-step sign-in.
• Each account is for one person. Do not share sign-in details.
• Access keys and assistants. An access key lets software, including an AI assistant you connect, act as you in the Service. Treat a key like a password. You are responsible for what is done with your keys.
• Sanctions and export rules. You confirm that you, your organization and its users are not located or ordinarily resident in a country or territory under comprehensive United States sanctions, are not on a United States government list of restricted parties, and will not use the Service in breach of export control or sanctions laws.

Organizations, roles and sharing

Flows, connections, runs, results and credits belong to an organization, not to the person who created them. Organization admins can invite and remove members, change roles, manage team connections, billing and credits, require two-step sign-in for everyone, and see the organization’s flows and activity. When a person leaves an organization, their flows there pass to an admin.

If you sign up with an email address at a company that already has an organization, you may be asked to join it instead of creating a new one.

xMap staff open an organization only while one of its admins allows it, for the time the admin chooses, and the admins can end that access at any time; everything staff open and change meanwhile is listed for the organization’s admins. Without that permission, xMap may still manage an organization’s plan and credits and act on the account as a whole (for example to keep the Service secure or to meet the law). A private flow that uses a member’s own connected accounts, and what it finds, is visible only to that member and the people they share it with, and an account connected for the whole team can be read from only by flows of the person whose account it is.

When you share a flow, the people you share it with can view or edit it according to the permission you choose. Runs of a flow always use the owning organization’s credits and connections. You are responsible for choosing who you share with.

Template pages. You can publish a flow as a template page that anyone with its link can open. People who use it sign in with their own account and get their own copy of the flow, which runs with their own connections and on their own organization’s credits, never yours; they can change their copy as they like. A page shows the flow’s name, the words you write, its steps, the questions you choose and, if you choose, your name and your organization’s name and logo. It never shows your accounts, keys, email addresses, tables or uploaded files. You are responsible for what you publish: it must be yours to share, accurate, and within these Terms. xMap may list a page in its community gallery after reviewing it, and may remove a page or its listing at any time. Copies people made stay theirs when you stop sharing.

Customer stories. When one of your AI employees has worked for 30 days, xMap Flows may draft a short story about it from your own figures only (what it found, its strong fits, its runs and an estimate of the hours saved; never credits, prices, names of people or the results themselves) and offer it to your organization’s admins. Nothing is published unless one of your admins chooses to publish it, with your organization’s name and logo or without your name; we keep who chose, when and which version. A published story is a public page at flows.xmap.ai/customers/ that anyone can read and share. Your admins can change it before publishing and take it down at any time; xMap may take any story off the site. By publishing, you allow xMap to show the story, your name and logo if you chose them, on that page and in links to it, until you take it down.

Credits, plans and fees

Credits. Runs and some other features use credits. Each block shows its price in the editor, and prices are listed on the Pricing page. A run that passes is charged for the blocks it used, and sending is charged only for what was actually sent. Some blocks are also charged for each request they send to a data service, whatever it finds (for example, Map business scan is charged for each search it sends, plus its price per place), and a step that calls a service has a minimum charge each time it runs, as listed on the Pricing page. Before a block calls a paid data or AI service, its expected cost is set aside from your balance; a run stops before that call if your organization does not have the credits for it. A run that fails is charged only for the live data and AI steps that finished before it failed. Ask xMap AI, and emails a flow sends to people outside your organization, also use credits, as shown in the product. Credits belong to your organization, have no cash value, cannot be transferred outside it, and are not refundable except as set out below.

Free credits. A company’s first organization receives free starter credits once. We may change or withdraw free credits and the Free plan for the future at any time.

Referral credits. An organization can share an invite link. When a company new to xMap Flows signs up through it and runs a flow for real, the inviting organization receives the referral credits shown on its Settings page, up to the yearly number shown there. Referral credits do not expire, cannot be exchanged for money, and are not given for invitations to the same company, to your own other organizations, or obtained by misuse; we may take them back if they were.

xMap for Startups. Startups that meet the conditions on the xMap for Startups page (for example being in an accelerator, or under the funding limit shown there) may receive startup credits, through an application we approve or a code an accelerator gives its startups. The amount and how long the credits last are shown on that page and in the email that gives them, and the credit history shows the day they end. Startup credits are given once per company (by its email domain), expire on that day (what is not used then is removed; credits you bought are never removed), have no cash value and cannot be transferred. We decide applications at our discretion and may decline one without giving a reason. We may change or end the programme, or stop a code, at any time for the future; credits already given keep their end date unless they were obtained by misuse or by giving us false details, in which case we may take them back.

The xMap line and the free AI employee. When we switch it on, what your flows send for you (emails, Slack, Teams and WhatsApp messages, PDF reports and pages shared by link) ends with one short line saying it was sent by an xMap AI employee, with a link to xMap Flows that carries your organization’s invite code and the kind of message it came in, so companies that join through it count toward your referral credits. On the Free plan the line stays; on a paid plan, or with your own address, an organization admin can switch it off in Settings. It is never added to replies in a conversation or to emails xMap sends about your account. We may also offer one small AI employee per organization that does not use credits (a daily email of a few new places of one type in one city, within the limits shown in the app); if its blocks are changed it uses credits like any other, and we may change or withdraw it for the future at any time.

Plans. A paid plan (Starter, Growth or Scale) is a subscription billed in advance, monthly or yearly, at the price shown when you subscribe. It adds its stated credits every month (on yearly plans too). Plan credits not used by the next monthly refill expire then. Plans renew automatically at the end of each billing period until cancelled. An organization admin can cancel at any time on the Billing page. The plan then ends at the end of the period already paid for, and no further charges are made. Upgrades take effect immediately and you are charged the prorated difference for the rest of the current period. Downgrades take effect at the next renewal.

Credit packs and auto-recharge. Credits bought as packs, through auto-recharge or on an invoice do not expire while your organization’s account is open. If you switch on auto-recharge, you authorise us to charge your saved payment method for the pack you chose whenever your balance falls below the level you set, up to the monthly limit you set. You can change it or switch it off at any time.

Payment. Payments are processed by Stripe. We do not receive or store full card numbers. You authorise us and Stripe to charge your payment method for the fees you agree to. If a payment fails, we may retry it, and if it remains unpaid your plan may end and its credits stop. Invoices issued by xMap (for example for Enterprise customers) are due within the period stated on the invoice, and credits on an invoice are added when it is paid. Amounts not paid when due may bear interest at 1% a month, or the highest rate the law allows if that is lower.

Taxes. Prices are in US dollars and exclude taxes, duties and similar charges, which you are responsible for. We add them where we are required to collect them. If the law requires you to withhold tax from a payment to us, you will pay the additional amount needed so that we receive the full fee.

Refunds. Fees are non-refundable except where the law requires it, where these Terms say so, or where we decide otherwise. If we refund a payment, we may remove the credits it bought (credits already used are not taken back). If you dispute a payment with your bank instead of contacting us, we take back the unused credits that payment bought, switch off automatic top-ups, and, if the payment was for a plan, cancel that plan at once (its monthly credits stop); we may also suspend the organization’s paid features while the dispute is open. If the dispute is resolved in our favour, we restore what we can.

Price changes. We may change prices for future periods. We will tell organization admins by email at least 30 days before a price change applies to an existing subscription. You can cancel before it takes effect.

Enterprise plans, xMap data plans and custom volumes may be provided under a separate order or agreement with xMap, which takes precedence over this section where they differ.

Your content and data

You keep all rights in the flows, settings, comments, files, tables and other content you put into the Service, and in data you bring from your own systems (“Your Content”). You give xMap a limited licence to host, copy, process, transmit and display Your Content only as needed to provide, secure and support the Service, and as you direct through your flows.

You are responsible for Your Content and for having the rights, and any consents and notices required, to use it with the Service, including for any personal data in it.

Personal data. Where you process personal data through the Service, you are the controller and xMap is your processor. The Data processing agreement then applies and forms part of these Terms.

What we do not do. We do not sell Your Content, and we do not use it to train AI models.

Usage information. We may collect and use information about how the Service is used (for example which blocks run, how long runs take and how often they fail) to operate, secure, bill for and improve the Service, and may publish it in aggregated form that identifies neither you nor any person.

Keep your own copies. You can export your flows and results. The Service is not an archive: keep your own copies of anything you need to keep.

xMap data and outputs

xMap data products, sample results and any datasets made available through the Service (“xMap Data”) are owned by xMap or its licensors. Subject to these Terms and your plan, you may use xMap Data and the outputs of your runs for your organization’s internal business purposes.

Sources. xMap Data includes information that xMap or its providers collect from public sources, such as public online map listings, public job postings, vessel position broadcasts (AIS), satellite imagery and weather models. It can be incomplete, out of date or wrong. Sources can change or stop without notice, and coverage differs by country. We do not promise that any particular place, posting, vessel or image will be available.

• Do not resell, sublicense, publish or redistribute xMap Data in bulk, present it as your own dataset, or use it to build a competing dataset or product.
• Do not attempt to identify, single out or track any individual from mobility, footfall or other aggregated data, or combine it with other data for that purpose.
• Do not scrape, copy or extract the Service or xMap Data by automated means except through the features we provide.
• Do not use results to contact people or businesses in breach of anti-spam, telemarketing or data protection law. You, not xMap, decide whom to contact, and you are responsible for doing so lawfully.

AI outputs. AI-generated outputs (scores, labels, summaries, decisions, and flows built by Ask xMap AI) can be inaccurate. Review them before relying on them.

Links to other sites. Where a result links to a third-party page, such as a map listing or a job posting, your use of that page is subject to its own terms.

Attribution. Maps and place search use data © OpenStreetMap contributors. Satellite pictures contain modified Copernicus Sentinel data. Weather forecasts are provided by Open-Meteo. If you publish a map, a picture or a forecast from the Service, keep the attribution shown with it.

Corrections and removal. If we are required to correct or remove data, for example at the request of a person or a source, we may do so, and may ask you to stop using or to delete the affected data. You agree to do so promptly. Requests to correct or remove information go to legal@xmap.ai.

Messages your flows send

Flows can send emails, chat messages, records and web requests. Emails from the Email block are sent through xMap’s email service and show “your organization via xMap Flows” as the sender. Other messages go through the accounts you connect.

• You are responsible for every message your flows send: for having a lawful basis and any consent needed to contact each recipient, for its content, and for honouring requests to stop.
• Every email a flow sends carries an unsubscribe link. We do not send to addresses that have unsubscribed from your organization, bounced or reported the email as spam.
• We may limit how many emails or messages an organization sends in a day, and whom an organization on the Free plan may write to.
• Do not use the Service to send bulk marketing email to people who have not asked for it.

The monthly challenge

xMap may run a challenge for people who build with xMap Flows, usually once a month. Each challenge has its own page on flows.xmap.ai/challenge/ with its brief, dates, what counts and prizes. By entering, you agree to these rules, which are part of these Terms.

• Who may enter. Anyone with an xMap Flows account who may use the Service under these Terms. No purchase is needed to enter or to win. People who work for xMap may take part but do not win prizes. While a challenge is a preview, only the people xMap names may enter it.
• Your entry. One entry per person per challenge: a flow you own and built yourself. You may change it and enter it again until the challenge ends. The client in a brief is made up: do not put real people’s personal data, or anyone else’s confidential information, into an entry.
• The checks. An entry is checked automatically when you enter it: the blocks the challenge asks for, linked from the flow’s start, and a run of it during the challenge that passed (a real run, when the challenge says so). Only entries that pass the checks are judged.
• What others see. An entry that passes is copied as a template page that anyone with its link can open and try. The copy keeps the flow’s blocks and settings, never your accounts, sign-ins, email addresses, tables or uploaded files. The challenge pages show your entry’s name and, if you choose, your first name and the first letter of your last name. Your entry is listed in the community templates only if you agree, and you can withdraw that consent at any time.
• Judging. xMap’s judges score the entries that passed on whether they do what the brief asks, how well they work, and how clear and inventive they are. Their decisions are final. xMap may disqualify an entry that breaks these Terms, copies someone else’s work or tries to get round the checks.
• Prizes. Prizes are the ones the challenge page names. Credits are added to the winner’s organization, have no cash value and cannot be exchanged, transferred or refunded. A badge is shown on the winner’s profile. A place in the Showcases needs the winner’s agreement to how they are named. Any tax on a prize is the winner’s. Winners are told in the app and by email.
• Changes. xMap may change, pause or end a challenge, for example if it cannot run fairly, and will say so on its page. A challenge is void where the law does not allow it.

Acceptable use

You must not use the Service to:

• break any law, including data protection, anti-spam, telecommunications and consumer protection laws;
• send unsolicited or unlawful messages to people through actions such as email or WhatsApp;
• infringe anyone’s intellectual property, privacy or other rights;
• track, monitor or locate identifiable individuals, or carry out unlawful surveillance;
• upload malware, probe or test the Service’s security without our written permission, or get around limits, credits or access controls;
• reach addresses inside private networks, or attack, overload or probe any third-party system through webhooks, the HTTP block or connected apps;
• overload or disrupt the Service or other customers’ use of it;
• discriminate against people, or make decisions with legal or similarly significant effects on individuals based solely on automated processing without appropriate human review;
• navigate a vessel or vehicle, direct an emergency response, or serve any other purpose where an error or an outage could lead to death, injury or serious damage, as the only source of information. The Service is not designed for such uses.

We may investigate suspected breaches, and may remove content or stop flows that breach this section. Good-faith security research is welcome under the rules on our Security page.

Third-party services

The Service relies on third-party providers, for example for hosting, databases, email, payments, AI and data, and lets you connect third-party apps and systems.

When you connect an app or system, you authorise xMap to access it on your behalf as your flows require. You are responsible for complying with that provider’s terms and for the permissions you grant. Some app blocks run on open-source connector code and are provided as they are.

We are not responsible for third-party services, including their availability, their accuracy, or changes to their interfaces that stop a block from working.

Confidentiality

Each party may receive information from the other that is marked confidential or would reasonably be understood to be confidential (“Confidential Information”). Your Content is your Confidential Information. Non-public features, the terms of a signed order and non-public security information are ours.

The party receiving Confidential Information will use it only to provide or use the Service under these Terms, protect it with at least reasonable care, and share it only with employees, contractors and advisers who need it and are bound to keep it confidential. This does not apply to information that is or becomes public through no fault of the receiving party, that the receiving party already knew, that it receives from a third party free to share it, or that it develops independently. A party may disclose Confidential Information where the law requires it, after giving the other party notice where it lawfully can.

Our intellectual property

The Service, including its software, design, templates, documentation and the xMap name and logo, belongs to xMap or its licensors. These Terms do not give you any rights in them except the right to use the Service as allowed here.

If you send us feedback or ideas, we may use them without any obligation to you.

We will not use your name or logo in our marketing without your consent.

Suspension and ending your account

By you. You can stop using the Service at any time. An organization admin can cancel a plan on the Billing page and remove members on the Team page. You can delete your own account in Settings, and ask us to close an organization by writing to legal@xmap.ai.

By us. We may suspend or end access if you seriously or repeatedly breach these Terms, if fees remain unpaid after we have told you, if the law requires it, or to protect the Service, other customers or the public. Where reasonable, we will tell you first and give you a chance to fix the problem. We may close a Free plan organization that has not been used for 12 months, after 30 days’ notice by email. We may also end the Service, or your use of it, for any other reason on 30 days’ notice. If we do that while you have a paid plan, we will refund the fees you prepaid for the period after the end date and for purchased credit packs you have not used.

What happens then. When an organization is closed, its flows stop and its unused credits end without refund, except as stated above. Export what you want to keep before closure. We delete or anonymise data as described in the Privacy Policy and the Data processing agreement.

Sections that by their nature should continue (such as ownership, confidentiality, fees owed, disclaimers, limits of liability, indemnity and governing law) survive the end of these Terms.

Disclaimers

The Service and xMap Data are provided “as is” and “as available”. To the extent the law allows, xMap gives no warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, title, non-infringement, accuracy, or uninterrupted or error-free operation. Location, mobility, traffic, vessel, weather, satellite and AI outputs are estimates and may be incomplete, wrong or out of date.

The Service does not give legal, financial, safety or other professional advice. You are responsible for the decisions you make with it.

Limitation of liability

To the extent the law allows, xMap will not be liable for any indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, data or goodwill, arising from or related to the Service.

To the extent the law allows, xMap’s total liability for all claims relating to the Service in any 12-month period is limited to the greater of the fees your organization paid for the Service in that period and USD 100.

These limits apply to every kind of claim, whether in contract, tort (including negligence) or otherwise, to liability under the Data processing agreement, and even if a remedy fails of its essential purpose. They reflect the prices we charge and the way risk is shared between us.

Nothing in these Terms limits liability that cannot be limited by law.

Indemnity

You will defend and indemnify xMap against third-party claims arising from Your Content, the messages your flows send, your use of connected third-party services, your use of xMap Data in breach of these Terms, or your breach of these Terms or of the law, and will pay the resulting costs and the damages finally awarded or agreed in settlement.

We will tell you promptly about any such claim, let you control its defence and settlement, and give reasonable help at your cost. You may not settle a claim in a way that admits fault by xMap or places obligations on it without our written consent.

Changes to these Terms

We may update these Terms. If a change is material, we will tell organization admins by email or in the Service at least 30 days before it takes effect, unless the change is required by law or only concerns a new feature, in which case it may take effect sooner. If you keep using the Service after a change takes effect, the updated Terms apply. If you do not agree, you may cancel before it takes effect, and your plan then ends at the end of the period paid for.

We keep a record of the version of the Terms each person accepted and when.

Governing law and disputes

These Terms, and any dispute arising from or relating to them or the Service, are governed by the laws of the Province of Ontario and the federal laws of Canada that apply there, without regard to their conflict-of-laws rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

Before starting court proceedings, the parties will try in good faith for 30 days to settle a dispute by discussion between people with authority to resolve it.

The courts of the Province of Ontario sitting in Toronto have exclusive jurisdiction over any such dispute, and you and xMap consent to their jurisdiction. To the extent the law allows, each party waives any right to a jury trial. Either party may seek urgent injunctive relief in any court of competent jurisdiction to protect its intellectual property or Confidential Information.

Nothing in this section takes away rights you have under mandatory laws where you are, including data protection laws.

General

• Whole agreement. The documents listed under Agreement are the whole agreement between you and xMap about the Service and replace earlier discussions and proposals about it.
• Transfer. You may not transfer these Terms without our written consent, except to a successor to all or substantially all of your business, on notice to us. We may transfer them to an affiliate, or to a successor in a merger, acquisition or sale of assets.
• Events beyond control. Neither party is liable for a failure or delay caused by events beyond its reasonable control, such as failures of the internet, of hosting or of third-party data sources, attacks on networks, natural events, war or acts of government. This does not excuse payment of fees due.
• Notices. We send notices to the email addresses of organization admins and may also post them in the Service. Send legal notices to us at legal@xmap.ai. A notice by email is given on the day it is sent, unless the sender learns that it was not delivered.
• Electronic acceptance. Accepting these Terms electronically has the same effect as signing them.
• If part fails. If a court finds part of these Terms unenforceable, the rest stays in force, and that part is applied as far as the law allows.
• No waiver. If we do not enforce a right at once, we can still enforce it later.
• Relationship. You and xMap are independent businesses. These Terms create no partnership, agency or employment, and give no rights to anyone who is not a party to them.
• Language. These Terms are written in English. If we provide a translation, the English text prevails.

Contact

Questions about these Terms: legal@xmap.ai.

By post: xMap Ltd., 20 Bay St., Suite 1100, Toronto, Ontario M5J 2N8, Canada.