Terms of Service

Effective Date: · Last Updated:

Terms in plain English — not a substitute for the full text below

  • Your data stays yours. Chion claims no ownership of your queries, schemas, or Generated Output (§5.1, §5.2).
  • No model training on paid-tier API data. Chion uses Mistral (core model) with OpenAI and Google fallbacks, all on paid commercial API tiers — providers are contractually barred from training on your content (§3.2a, §10).
  • Database credentials are encrypted with AES-256-GCM and never logged or persisted in plaintext (§3.3, §8.1).
  • Pipeline operations are read-only SELECT with a hard row cap; connect with a read-only DB user (§8.4).
  • You can delete all your stored data yourself from account settings, any time (§15.4).
  • Disputes are handled by binding arbitration in Broward County, FL; class actions are waived (§13.2, §13.3).

These Terms of Service ("Terms") govern your access to and use of Chion ("Service," "Platform," "we," "us," or "our"), an AI-powered analytics platform operated by Dagnostics LLC dba Chion, a Florida-based company. By creating an account or using the Service, you agree to be bound by these Terms. If you do not agree, do not use the Service.

1. Definitions

"Account" means your registered Chion account.

"Content" means any data, queries, database schemas, SQL statements, visualizations, or other materials you submit to, generate through, or access via the Service.

"Generated Output" means SQL queries, D3.js visualizations, narrative analytics, and any other content produced by the Service's AI-powered pipeline in response to your inputs.

"Data Source" means any third-party database or data system you connect to the Service via credentials or connection strings.

"Credits" means the unit of consumption used to meter access to pipeline features, as defined by your subscription plan.

2. Eligibility and Accounts

2.1. You must be at least 18 years old and capable of forming a binding contract to use the Service.

2.2. You are responsible for maintaining the confidentiality of your account credentials and for all activity under your account. You agree to notify us immediately of any unauthorized use.

2.3. You may not create multiple accounts to circumvent usage limits, rate limits, or credit caps.

3. Description of Service

3.1. Chion is an AI-native analytics platform that transforms natural language queries into SQL and data visualizations. The Service connects to your databases, processes queries through large language model (LLM) pipelines, and returns structured analytical outputs.

3.2. The Service uses third-party AI models — including Anthropic Claude, OpenAI, Google Gemini, and Mistral — to process natural language inputs and generate SQL and analytical content. Your queries are transmitted to these third-party providers for processing. Model selection is automatic in Quick Start mode and fully configurable in Custom Setup. See Section 10 (Third-Party Services) for details.

3.2a. No Model Training on Your Data. Chion accesses all LLM providers exclusively through paid commercial API tiers. Under the standard commercial terms of these providers, your queries and generated outputs are not used to train, improve, or fine-tune any third-party AI models.† However, all providers retain prompts and responses for limited periods (typically 30–55 days) solely for abuse monitoring, safety enforcement, and compliance with legal obligations. See Section 10 for provider-specific details.

3.3. The Service stores database connection credentials using AES-GCM encryption with time-limited in-memory decryption. Plaintext credentials are never logged, persisted to disk, or retained beyond the active session window.

3.4. Data Sampling. To power entity resolution and semantic understanding, the Service samples a limited number of representative values from categorical columns in your connected data sources. These samples — such as frequent category values, dimension labels, or entity names — are used to improve query accuracy (e.g., matching a natural language reference like "Q3 revenue" to the actual column value "2024-Q3" in your data). Sampled values are stored in your tenant-isolated space, protected by row-level security, and are never shared with other users or used for any purpose outside your account. You may delete all sampled data at any time through the Service's account settings.

3.5. Document Processing. When you connect a document source (such as Google Drive), the Service processes document content to extract structure, summaries, keywords, and temporal references for analytical use. Document content is stored in your tenant-isolated space, protected by row-level security, and processed through the same AI providers listed in Section 10. You control which documents are approved for processing, and you may delete all document data at any time through the Service's account settings.

4. Subscription Plans, Credits, and Billing

4.1. Plans.

The Service is offered under tiered subscription plans (currently: Starter, Pro, and Business), each with defined credit allotments, data source limits, and feature access. Plan details and pricing are published on our website and may be updated with 30 days' notice.

4.2. Credits.

Pipeline operations (chart creation, chart updates, source indexing) consume credits. Credit costs vary by operation complexity and token consumption. Question-answering via the template-qa system does not consume credits. Included plan credits expire at the end of each billing period and do not roll over. Purchased credit packs do not expire and persist until used.

4.3. Billing.

Subscriptions are billed monthly or annually in advance via Stripe. Overage charges, if applicable, are billed in arrears at the end of each billing cycle. All fees are non-refundable except as required by applicable law.

4.4. Trial Period.

New accounts receive a limited trial period with a defined credit allotment. No payment method is required during the trial. After trial expiration, accounts are locked to read-only until a paid plan is selected.

4.5. Rate Limits.

All accounts are subject to rate limits on pipeline operations (currently 10 per hour, 50 per day) regardless of credit balance. These limits exist to protect platform stability and may be adjusted.

4.6. Plan Changes.

You may upgrade or downgrade your plan at any time. Upgrades take effect immediately with prorated charges. Downgrades take effect at the start of the next billing period.

4.7. Cancellation.

You may cancel your subscription at any time. Cancellation takes effect at the end of the current billing period. After cancellation, your account transitions to read-only. We retain your data for 30 days after cancellation, after which it is permanently deleted unless you request earlier deletion.

5. Intellectual Property and Ownership

5.1. Your Data. You retain all ownership rights in the data, schemas, queries, and other content you provide to the Service ("Your Data"). We claim no ownership over Your Data.

5.2. Generated Output. You own the Generated Output produced by the Service in response to your inputs, including SQL queries, visualizations, and narrative analytics. We retain no rights to your Generated Output except as necessary to provide the Service.

5.3. Platform IP. We retain all rights in the Service itself, including but not limited to: the pipeline architecture, prompt templates, semantic layer logic, UI/UX design, and underlying code. Nothing in these Terms grants you rights to our proprietary technology.

5.4. Feedback. If you provide feedback, suggestions, or ideas about the Service, you grant us a non-exclusive, royalty-free, perpetual license to use that feedback for any purpose without obligation to you.

5.5. Open-Source Components. The Service incorporates open-source software components, including D3.js (ISC License, Copyright 2010–2023 Mike Bostock) for data visualization rendering. These components are provided under their respective open-source licenses, which are made available at chion.ai/licenses. In the event of any conflict between these Terms and the license terms of any open-source component, the open-source license terms shall govern with respect to that component.

6. Acceptable Use Policy

You agree not to use the Service to:

6.1. Execute, generate, or attempt to generate SQL that intentionally damages, corrupts, or destroys data in any connected database, or that is designed to exfiltrate data beyond what is necessary for your authorized analytical purposes.

6.2. Connect databases containing data you do not have authorization to access or analyze.

6.3. Attempt to inject malicious content into prompts, queries, or pipeline inputs for the purpose of manipulating the AI system's behavior, bypassing safety controls, or extracting proprietary system prompts or pipeline logic.

6.4. Use the Service in connection with regulated industries (healthcare, financial services, legal) without independently validating all Generated Output against applicable regulatory requirements. The Service does not provide compliance guarantees for regulated use cases.

6.5. Reverse-engineer, decompile, or attempt to extract the source code, prompt templates, or pipeline architecture of the Service.

6.6. Use automated scripts, bots, or other tools to access the Service in a manner that exceeds the published rate limits or circumvents usage controls.

6.7. Resell, sublicense, or redistribute access to the Service or its Generated Output as a competing analytics product.

6.8. Use the Service for any purpose that violates applicable local, state, national, or international law or regulation.

6.9. Access the Service from, or provide access to the Service in, any U.S. embargoed country or region, or to any person or entity on the U.S. Treasury Department's Specially Designated Nationals list, the U.S. Department of Commerce Denied Persons or Entity Lists, or any other applicable restricted party list. You represent and warrant that you are not located in any such country and are not on any such list.

6.10. Store, process, or transmit protected health information (as defined by HIPAA) through the Service without a separately executed Business Associate Agreement. The Service is not HIPAA-compliant by default.

7. Generated Output Disclaimer

7.1. AI-Generated Content. The Service generates SQL and analytical content using large language models. Generated Output may contain errors, inaccuracies, suboptimal query patterns, or incorrect analytical conclusions — including material inaccuracies that may appear accurate due to their level of detail or specificity. Factual assertions in Generated Output should not be relied upon without independently checking their accuracy, as they may be false, incomplete, misleading, or not reflective of recent events or information. You are solely responsible for reviewing, validating, and testing all Generated SQL before executing it against any database, especially production systems.

7.2. No Warranty of Correctness. We do not warrant that Generated Output will be accurate, complete, error-free, or suitable for any particular purpose. The Service is a productivity tool, not a substitute for qualified data engineering or analytical judgment.

7.3. Execution Risk. You acknowledge that executing AI-generated SQL against a live database carries inherent risk, including but not limited to data loss, corruption, or unintended modification. We strongly recommend using read-only database connections and testing queries in non-production environments before executing them against production data.

7.4. No Professional Advice. Generated Output does not constitute financial, legal, medical, or other professional advice. You should not rely on it as such.

8. Data Security and Credential Handling

8.1. Credential Storage. Database connection credentials are encrypted at rest using AES-GCM encryption. Credentials are decrypted in-memory only during active pipeline operations and are subject to time-to-live (TTL) expiration. We never log, persist, or retain plaintext credentials.

8.2. Tenant Isolation. Your data is logically isolated from other users' data through row-level security (RLS) policies applied at the database layer. Each user's data sources, queries, and outputs are accessible only to their authenticated account.

8.3. Transmission Security. All data in transit between your browser and the Service, and between the Service and connected databases, is encrypted using TLS 1.2 or higher.

8.4. Your Responsibility. You are responsible for the security of your database credentials and for ensuring that the database user you connect has appropriate permission scoping (e.g., read-only access). We recommend granting the minimum privileges necessary for your analytical needs.

9. Privacy and Data Processing

9.1. Our collection, use, and processing of personal data is governed by our Privacy Policy, which is incorporated into these Terms by reference.

9.2. We collect limited account information (email address, name, and company name if provided) for authentication, billing, and service communications. We do not collect personally identifiable information from your connected databases. The data transmitted to AI providers for query processing consists of structural metadata, semantic labels, and limited representative samples — never full row exports, credentials, or bulk data.

9.2a. Data transmitted to third-party AI providers may be processed and temporarily stored in any country in which those providers or their agents maintain facilities. By using the Service, you consent to this transfer and processing. We enter into data processing agreements with all sub-processors to ensure appropriate safeguards are in place.

9.3. We collect usage telemetry (pipeline execution counts, token consumption, feature usage) for billing, performance optimization, and product improvement. This data is aggregated and anonymized where feasible.

9.4. We retain AI inference records (prompts submitted to and responses received from AI providers) in your tenant-isolated space for the purpose of maintaining your semantic layer and session continuity. These records are protected by the same row-level security policies as all other user data and are included in data deletion requests.

9.5. The Service generates mathematical representations (vector embeddings) of your data source metadata and document content for semantic search and entity resolution. These embeddings are derived metadata, not full content reproductions — they contain only statistical representations used for retrieval. They are stored in your tenant-isolated space and deleted when you delete the associated data.

10. Third-Party Services and Sub-Processors

10.1. The Service relies on the following third-party services ("Sub-Processors") to operate:

Anthropic (Claude API) †

Processes natural language queries and generates SQL and analytical content. Under Anthropic's Commercial Terms of Service (Section B), Anthropic is contractually prohibited from training models on customer content submitted through the API. Anthropic may retain prompts and responses for a limited period solely for abuse monitoring and legal compliance. Queries are subject to Anthropic's Usage Policy.

OpenAI †

Additional LLM provider for query processing and SQL generation. Under OpenAI's Services Agreement, API data is not used to train or improve OpenAI models by default. OpenAI retains abuse monitoring logs for up to 30 days. Use is subject to OpenAI's Usage Policies.

Google (Gemini API) †

Additional LLM provider for query processing and SQL generation. Chion accesses the Gemini API exclusively through paid service tiers. Under Google's Gemini API Additional Terms, paid service prompts and responses are not used to improve Google products or train models. Google logs prompts and responses for a limited period (up to 55 days) solely for detecting violations of their Prohibited Use Policy. Use is subject to Google's Gemini API Terms.

Mistral †

Additional LLM provider for query processing and SQL generation. Under Mistral's standard commercial API terms, customer content submitted through paid API tiers is not used to train Mistral's models. Model selection is configurable per deployment.

CoreWeave

Provides dedicated GPU compute infrastructure for customers who require isolated model hosting. CoreWeave-hosted models run the same read-only, zero-export pipeline with identical isolation guarantees. Customers may also elect to use their own on-premise GPU infrastructure, in which case Chion provides only cloud orchestration capabilities — no customer data transits Chion's servers.

Google (Drive API)

Used to access documents you have authorized for processing. The Service reads document content solely for the purpose of extracting structure, summaries, and analytical metadata. Google Drive access is granted and revoked by you, and we access only the files you explicitly approve. Chion's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Use is subject to Google's API Services Terms.

Supabase

Provides database infrastructure, authentication, edge function hosting, and vector storage for the Service's backend. Under Supabase's Terms of Service, Supabase may collect and use aggregated, anonymized data derived from your use of their platform. Customer Data ownership is retained by you. Supabase does not support storage of protected health information without a separately executed Business Associate Agreement, and does not permit storage of payment cardholder information without prior written approval.

Stripe

Processes subscription payments, credit pack purchases, and overage billing. Payment card information is collected and processed exclusively by Stripe and is never stored on our servers. We retain only Stripe-issued reference identifiers for the purpose of managing your subscription and billing history.

D3.js and Open-Source Libraries

The Service uses D3.js (ISC License) and other open-source libraries for data visualization rendering. These components run client-side and do not transmit data to third parties. Open-source license details are available at chion.ai/licenses.

10.2. We may update Sub-Processors with 30 days' advance notice. Material changes to Sub-Processors will be communicated via email to your registered account.

10.3. We enter into appropriate data processing agreements with all Sub-Processors and require them to maintain security standards consistent with industry best practices.

Chion is actively negotiating dedicated data processing agreements (DPAs) with each LLM provider marked above to formalize contractual prohibitions against model training on customer content. Until these agreements are executed, the no-training guarantees described in this section are governed by each provider's standard commercial API terms, which prohibit the use of paid API inputs and outputs for model training. We will update this section as agreements are finalized.

11. Limitation of Liability

11.1. Disclaimer of Warranties. THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ANY WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE.

11.2. Limitation of Damages. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL WE BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO: LOSS OF DATA, LOSS OF PROFITS, LOSS OF BUSINESS, DATABASE CORRUPTION OR DAMAGE, COSTS OF PROCUREMENT OF SUBSTITUTE SERVICES, OR DAMAGES ARISING FROM THE EXECUTION OF AI-GENERATED SQL, REGARDLESS OF THE THEORY OF LIABILITY AND EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

11.3. Aggregate Cap. OUR TOTAL AGGREGATE LIABILITY UNDER THESE TERMS SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU HAVE PAID TO US IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED U.S. DOLLARS ($100).

11.4. Specific AI Liability Exclusion. You expressly acknowledge that AI-generated SQL and analytical outputs may contain errors. We bear no liability for damages arising from your decision to execute, rely on, or distribute Generated Output without independent validation.

12. Indemnification

You agree to indemnify, defend, and hold harmless Dagnostics LLC dba Chion and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, costs, and expenses (including reasonable attorneys' fees) arising from: (a) your use of the Service; (b) your violation of these Terms; (c) your execution of Generated Output against any database; (d) your connection of databases you are not authorized to access; or (e) your violation of any applicable law or third-party rights.

13. Dispute Resolution

13.1. Informal Resolution. Before filing any formal proceedings, you agree to contact us at contact@chion.ai and attempt to resolve the dispute informally for at least 30 days.

13.2. Binding Arbitration. Any dispute not resolved informally shall be resolved by binding arbitration administered by the American Arbitration Association (AAA) under its Commercial Arbitration Rules. The arbitration shall take place in Broward County, Florida. The arbitrator's decision shall be final and binding.

13.3. Class Action Waiver. YOU AND DAGNOSTICS LLC DBA CHION AGREE THAT EACH PARTY MAY BRING CLAIMS AGAINST THE OTHER ONLY IN YOUR OR ITS INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR REPRESENTATIVE PROCEEDING.

13.4. Small Claims Exception. Either party may bring qualifying claims in small claims court in Broward County, Florida.

13.5. Governing Law. These Terms are governed by the laws of the State of Florida, without regard to conflict of law principles.

13.6. Export Controls. The Service relies on third-party AI services subject to U.S. export control laws and regulations. You may not use, export, or re-export the Service except as authorized by United States law, the laws of the jurisdiction in which the Service was accessed, and any other applicable laws and regulations. In particular, the Service may not be exported or re-exported into any U.S. embargoed countries or to anyone on the U.S. Treasury Department's Specially Designated Nationals list or the U.S. Department of Commerce Denied Persons or Entity List.

14. Modifications to Terms

14.1. We may modify these Terms at any time by posting the revised version on our website with an updated "Last Updated" date. Material changes will be communicated via email at least 30 days before taking effect.

14.2. Your continued use of the Service after modified Terms take effect constitutes acceptance. If you do not agree to the modified Terms, you must discontinue use and cancel your subscription.

15. Termination

15.1. By You. You may terminate your account at any time by canceling your subscription and contacting us at contact@chion.ai.

15.2. By Us. We may suspend or terminate your access to the Service immediately, without prior notice, if we reasonably believe you have violated these Terms, engaged in fraudulent activity, or pose a security risk to the platform or other users.

15.3. Effect of Termination. Upon termination: (a) your right to access the Service ceases immediately; (b) we will delete your stored data within 30 days unless earlier deletion is requested or legal retention is required — this includes your account information, session history, connected data source metadata, sampled values, document content, AI inference records, generated outputs, and vector embeddings; (c) you may request immediate deletion of all your data at any time through the Service's account settings or by contacting contact@chion.ai; (d) aggregated, anonymized usage telemetry that cannot be linked to your identity may be retained indefinitely; (e) outstanding payment obligations survive termination; (f) diagnostic logs and email delivery records may be retained for their standard retention period as described in the Privacy Policy, after which they are purged.

15.4. Self-Service Data Deletion. You may delete all of your stored data — including data source metadata, sampled values, document content, session history, and generated outputs — at any time through the data management controls in your account settings, without needing to cancel your account or contact support.

16. General Provisions

16.1. Entire Agreement. These Terms, together with the Privacy Policy and any applicable Data Processing Agreement, constitute the entire agreement between you and Dagnostics LLC dba Chion regarding the Service.

16.2. Severability. If any provision of these Terms is found unenforceable, the remaining provisions remain in full force and effect.

16.3. Waiver. Our failure to enforce any provision of these Terms does not constitute a waiver of that provision.

16.4. Assignment. You may not assign your rights under these Terms without our prior written consent. We may assign our rights without restriction.

16.5. Force Majeure. We shall not be liable for any failure or delay in performance due to circumstances beyond our reasonable control, including but not limited to natural disasters, acts of government, internet or infrastructure failures, or third-party service outages.

Common questions about these terms

Does Chion train AI models on my data?

No. Chion uses paid commercial API tiers of Mistral (core), OpenAI and Google (fallbacks), and Anthropic. Under these providers' commercial terms, paid-tier prompts and responses are not used to train or improve models. Providers retain logs for 30–55 days for abuse monitoring only. (§3.2a, §10)

Can I delete my data from Chion?

Yes. You can delete all stored data — data source metadata, sampled values, document content, session history, generated outputs — from your account settings, without canceling or contacting support. (§15.4)

How are my database credentials stored?

Encrypted at rest with AES-256-GCM. Decrypted in-memory only during active pipeline operations with TTL expiration. Plaintext credentials are never logged or written to disk. (§3.3, §8.1)

What happens to my data when I cancel?

Account transitions to read-only at the end of your billing period. Stored data is deleted within 30 days of termination unless you request earlier deletion. (§4.7, §15.3)

Is Chion HIPAA-compliant?

No, not by default. Processing PHI through the Service requires a separately executed Business Associate Agreement. (§6.10)

17. Contact

For questions about these Terms, contact us at:

Dagnostics LLC dba Chion

Broward County, FL

contact@chion.ai

chion.ai

    Terms of Service

    Effective Date: · Last Updated:

    Terms in plain English — not a substitute for the full text below

    • Your data stays yours. Chion claims no ownership of your queries, schemas, or Generated Output (§5.1, §5.2).
    • No model training on paid-tier API data. Chion uses Mistral (core model) with OpenAI and Google fallbacks, all on paid commercial API tiers — providers are contractually barred from training on your content (§3.2a, §10).
    • Database credentials are encrypted with AES-256-GCM and never logged or persisted in plaintext (§3.3, §8.1).
    • Pipeline operations are read-only SELECT with a hard row cap; connect with a read-only DB user (§8.4).
    • You can delete all your stored data yourself from account settings, any time (§15.4).
    • Disputes are handled by binding arbitration in Broward County, FL; class actions are waived (§13.2, §13.3).

    These Terms of Service ("Terms") govern your access to and use of Chion ("Service," "Platform," "we," "us," or "our"), an AI-powered analytics platform operated by Dagnostics LLC dba Chion, a Florida-based company. By creating an account or using the Service, you agree to be bound by these Terms. If you do not agree, do not use the Service.

    1. Definitions

    "Account" means your registered Chion account.

    "Content" means any data, queries, database schemas, SQL statements, visualizations, or other materials you submit to, generate through, or access via the Service.

    "Generated Output" means SQL queries, D3.js visualizations, narrative analytics, and any other content produced by the Service's AI-powered pipeline in response to your inputs.

    "Data Source" means any third-party database or data system you connect to the Service via credentials or connection strings.

    "Credits" means the unit of consumption used to meter access to pipeline features, as defined by your subscription plan.

    2. Eligibility and Accounts

    2.1. You must be at least 18 years old and capable of forming a binding contract to use the Service.

    2.2. You are responsible for maintaining the confidentiality of your account credentials and for all activity under your account. You agree to notify us immediately of any unauthorized use.

    2.3. You may not create multiple accounts to circumvent usage limits, rate limits, or credit caps.

    3. Description of Service

    3.1. Chion is an AI-native analytics platform that transforms natural language queries into SQL and data visualizations. The Service connects to your databases, processes queries through large language model (LLM) pipelines, and returns structured analytical outputs.

    3.2. The Service uses third-party AI models — including Anthropic Claude, OpenAI, Google Gemini, and Mistral — to process natural language inputs and generate SQL and analytical content. Your queries are transmitted to these third-party providers for processing. Model selection is automatic in Quick Start mode and fully configurable in Custom Setup. See Section 10 (Third-Party Services) for details.

    3.2a. No Model Training on Your Data. Chion accesses all LLM providers exclusively through paid commercial API tiers. Under the standard commercial terms of these providers, your queries and generated outputs are not used to train, improve, or fine-tune any third-party AI models.† However, all providers retain prompts and responses for limited periods (typically 30–55 days) solely for abuse monitoring, safety enforcement, and compliance with legal obligations. See Section 10 for provider-specific details.

    3.3. The Service stores database connection credentials using AES-GCM encryption with time-limited in-memory decryption. Plaintext credentials are never logged, persisted to disk, or retained beyond the active session window.

    3.4. Data Sampling. To power entity resolution and semantic understanding, the Service samples a limited number of representative values from categorical columns in your connected data sources. These samples — such as frequent category values, dimension labels, or entity names — are used to improve query accuracy (e.g., matching a natural language reference like "Q3 revenue" to the actual column value "2024-Q3" in your data). Sampled values are stored in your tenant-isolated space, protected by row-level security, and are never shared with other users or used for any purpose outside your account. You may delete all sampled data at any time through the Service's account settings.

    3.5. Document Processing. When you connect a document source (such as Google Drive), the Service processes document content to extract structure, summaries, keywords, and temporal references for analytical use. Document content is stored in your tenant-isolated space, protected by row-level security, and processed through the same AI providers listed in Section 10. You control which documents are approved for processing, and you may delete all document data at any time through the Service's account settings.

    4. Subscription Plans, Credits, and Billing

    4.1. Plans.

    The Service is offered under tiered subscription plans (currently: Starter, Pro, and Business), each with defined credit allotments, data source limits, and feature access. Plan details and pricing are published on our website and may be updated with 30 days' notice.

    4.2. Credits.

    Pipeline operations (chart creation, chart updates, source indexing) consume credits. Credit costs vary by operation complexity and token consumption. Question-answering via the template-qa system does not consume credits. Included plan credits expire at the end of each billing period and do not roll over. Purchased credit packs do not expire and persist until used.

    4.3. Billing.

    Subscriptions are billed monthly or annually in advance via Stripe. Overage charges, if applicable, are billed in arrears at the end of each billing cycle. All fees are non-refundable except as required by applicable law.

    4.4. Trial Period.

    New accounts receive a limited trial period with a defined credit allotment. No payment method is required during the trial. After trial expiration, accounts are locked to read-only until a paid plan is selected.

    4.5. Rate Limits.

    All accounts are subject to rate limits on pipeline operations (currently 10 per hour, 50 per day) regardless of credit balance. These limits exist to protect platform stability and may be adjusted.

    4.6. Plan Changes.

    You may upgrade or downgrade your plan at any time. Upgrades take effect immediately with prorated charges. Downgrades take effect at the start of the next billing period.

    4.7. Cancellation.

    You may cancel your subscription at any time. Cancellation takes effect at the end of the current billing period. After cancellation, your account transitions to read-only. We retain your data for 30 days after cancellation, after which it is permanently deleted unless you request earlier deletion.

    5. Intellectual Property and Ownership

    5.1. Your Data. You retain all ownership rights in the data, schemas, queries, and other content you provide to the Service ("Your Data"). We claim no ownership over Your Data.

    5.2. Generated Output. You own the Generated Output produced by the Service in response to your inputs, including SQL queries, visualizations, and narrative analytics. We retain no rights to your Generated Output except as necessary to provide the Service.

    5.3. Platform IP. We retain all rights in the Service itself, including but not limited to: the pipeline architecture, prompt templates, semantic layer logic, UI/UX design, and underlying code. Nothing in these Terms grants you rights to our proprietary technology.

    5.4. Feedback. If you provide feedback, suggestions, or ideas about the Service, you grant us a non-exclusive, royalty-free, perpetual license to use that feedback for any purpose without obligation to you.

    5.5. Open-Source Components. The Service incorporates open-source software components, including D3.js (ISC License, Copyright 2010–2023 Mike Bostock) for data visualization rendering. These components are provided under their respective open-source licenses, which are made available at chion.ai/licenses. In the event of any conflict between these Terms and the license terms of any open-source component, the open-source license terms shall govern with respect to that component.

    6. Acceptable Use Policy

    You agree not to use the Service to:

    6.1. Execute, generate, or attempt to generate SQL that intentionally damages, corrupts, or destroys data in any connected database, or that is designed to exfiltrate data beyond what is necessary for your authorized analytical purposes.

    6.2. Connect databases containing data you do not have authorization to access or analyze.

    6.3. Attempt to inject malicious content into prompts, queries, or pipeline inputs for the purpose of manipulating the AI system's behavior, bypassing safety controls, or extracting proprietary system prompts or pipeline logic.

    6.4. Use the Service in connection with regulated industries (healthcare, financial services, legal) without independently validating all Generated Output against applicable regulatory requirements. The Service does not provide compliance guarantees for regulated use cases.

    6.5. Reverse-engineer, decompile, or attempt to extract the source code, prompt templates, or pipeline architecture of the Service.

    6.6. Use automated scripts, bots, or other tools to access the Service in a manner that exceeds the published rate limits or circumvents usage controls.

    6.7. Resell, sublicense, or redistribute access to the Service or its Generated Output as a competing analytics product.

    6.8. Use the Service for any purpose that violates applicable local, state, national, or international law or regulation.

    6.9. Access the Service from, or provide access to the Service in, any U.S. embargoed country or region, or to any person or entity on the U.S. Treasury Department's Specially Designated Nationals list, the U.S. Department of Commerce Denied Persons or Entity Lists, or any other applicable restricted party list. You represent and warrant that you are not located in any such country and are not on any such list.

    6.10. Store, process, or transmit protected health information (as defined by HIPAA) through the Service without a separately executed Business Associate Agreement. The Service is not HIPAA-compliant by default.

    7. Generated Output Disclaimer

    7.1. AI-Generated Content. The Service generates SQL and analytical content using large language models. Generated Output may contain errors, inaccuracies, suboptimal query patterns, or incorrect analytical conclusions — including material inaccuracies that may appear accurate due to their level of detail or specificity. Factual assertions in Generated Output should not be relied upon without independently checking their accuracy, as they may be false, incomplete, misleading, or not reflective of recent events or information. You are solely responsible for reviewing, validating, and testing all Generated SQL before executing it against any database, especially production systems.

    7.2. No Warranty of Correctness. We do not warrant that Generated Output will be accurate, complete, error-free, or suitable for any particular purpose. The Service is a productivity tool, not a substitute for qualified data engineering or analytical judgment.

    7.3. Execution Risk. You acknowledge that executing AI-generated SQL against a live database carries inherent risk, including but not limited to data loss, corruption, or unintended modification. We strongly recommend using read-only database connections and testing queries in non-production environments before executing them against production data.

    7.4. No Professional Advice. Generated Output does not constitute financial, legal, medical, or other professional advice. You should not rely on it as such.

    8. Data Security and Credential Handling

    8.1. Credential Storage. Database connection credentials are encrypted at rest using AES-GCM encryption. Credentials are decrypted in-memory only during active pipeline operations and are subject to time-to-live (TTL) expiration. We never log, persist, or retain plaintext credentials.

    8.2. Tenant Isolation. Your data is logically isolated from other users' data through row-level security (RLS) policies applied at the database layer. Each user's data sources, queries, and outputs are accessible only to their authenticated account.

    8.3. Transmission Security. All data in transit between your browser and the Service, and between the Service and connected databases, is encrypted using TLS 1.2 or higher.

    8.4. Your Responsibility. You are responsible for the security of your database credentials and for ensuring that the database user you connect has appropriate permission scoping (e.g., read-only access). We recommend granting the minimum privileges necessary for your analytical needs.

    9. Privacy and Data Processing

    9.1. Our collection, use, and processing of personal data is governed by our Privacy Policy, which is incorporated into these Terms by reference.

    9.2. We collect limited account information (email address, name, and company name if provided) for authentication, billing, and service communications. We do not collect personally identifiable information from your connected databases. The data transmitted to AI providers for query processing consists of structural metadata, semantic labels, and limited representative samples — never full row exports, credentials, or bulk data.

    9.2a. Data transmitted to third-party AI providers may be processed and temporarily stored in any country in which those providers or their agents maintain facilities. By using the Service, you consent to this transfer and processing. We enter into data processing agreements with all sub-processors to ensure appropriate safeguards are in place.

    9.3. We collect usage telemetry (pipeline execution counts, token consumption, feature usage) for billing, performance optimization, and product improvement. This data is aggregated and anonymized where feasible.

    9.4. We retain AI inference records (prompts submitted to and responses received from AI providers) in your tenant-isolated space for the purpose of maintaining your semantic layer and session continuity. These records are protected by the same row-level security policies as all other user data and are included in data deletion requests.

    9.5. The Service generates mathematical representations (vector embeddings) of your data source metadata and document content for semantic search and entity resolution. These embeddings are derived metadata, not full content reproductions — they contain only statistical representations used for retrieval. They are stored in your tenant-isolated space and deleted when you delete the associated data.

    10. Third-Party Services and Sub-Processors

    10.1. The Service relies on the following third-party services ("Sub-Processors") to operate:

    Anthropic (Claude API) †

    Processes natural language queries and generates SQL and analytical content. Under Anthropic's Commercial Terms of Service (Section B), Anthropic is contractually prohibited from training models on customer content submitted through the API. Anthropic may retain prompts and responses for a limited period solely for abuse monitoring and legal compliance. Queries are subject to Anthropic's Usage Policy.

    OpenAI †

    Additional LLM provider for query processing and SQL generation. Under OpenAI's Services Agreement, API data is not used to train or improve OpenAI models by default. OpenAI retains abuse monitoring logs for up to 30 days. Use is subject to OpenAI's Usage Policies.

    Google (Gemini API) †

    Additional LLM provider for query processing and SQL generation. Chion accesses the Gemini API exclusively through paid service tiers. Under Google's Gemini API Additional Terms, paid service prompts and responses are not used to improve Google products or train models. Google logs prompts and responses for a limited period (up to 55 days) solely for detecting violations of their Prohibited Use Policy. Use is subject to Google's Gemini API Terms.

    Mistral †

    Additional LLM provider for query processing and SQL generation. Under Mistral's standard commercial API terms, customer content submitted through paid API tiers is not used to train Mistral's models. Model selection is configurable per deployment.

    CoreWeave

    Provides dedicated GPU compute infrastructure for customers who require isolated model hosting. CoreWeave-hosted models run the same read-only, zero-export pipeline with identical isolation guarantees. Customers may also elect to use their own on-premise GPU infrastructure, in which case Chion provides only cloud orchestration capabilities — no customer data transits Chion's servers.

    Google (Drive API)

    Used to access documents you have authorized for processing. The Service reads document content solely for the purpose of extracting structure, summaries, and analytical metadata. Google Drive access is granted and revoked by you, and we access only the files you explicitly approve. Chion's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Use is subject to Google's API Services Terms.

    Supabase

    Provides database infrastructure, authentication, edge function hosting, and vector storage for the Service's backend. Under Supabase's Terms of Service, Supabase may collect and use aggregated, anonymized data derived from your use of their platform. Customer Data ownership is retained by you. Supabase does not support storage of protected health information without a separately executed Business Associate Agreement, and does not permit storage of payment cardholder information without prior written approval.

    Stripe

    Processes subscription payments, credit pack purchases, and overage billing. Payment card information is collected and processed exclusively by Stripe and is never stored on our servers. We retain only Stripe-issued reference identifiers for the purpose of managing your subscription and billing history.

    D3.js and Open-Source Libraries

    The Service uses D3.js (ISC License) and other open-source libraries for data visualization rendering. These components run client-side and do not transmit data to third parties. Open-source license details are available at chion.ai/licenses.

    10.2. We may update Sub-Processors with 30 days' advance notice. Material changes to Sub-Processors will be communicated via email to your registered account.

    10.3. We enter into appropriate data processing agreements with all Sub-Processors and require them to maintain security standards consistent with industry best practices.

    Chion is actively negotiating dedicated data processing agreements (DPAs) with each LLM provider marked above to formalize contractual prohibitions against model training on customer content. Until these agreements are executed, the no-training guarantees described in this section are governed by each provider's standard commercial API terms, which prohibit the use of paid API inputs and outputs for model training. We will update this section as agreements are finalized.

    11. Limitation of Liability

    11.1. Disclaimer of Warranties. THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ANY WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE.

    11.2. Limitation of Damages. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL WE BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO: LOSS OF DATA, LOSS OF PROFITS, LOSS OF BUSINESS, DATABASE CORRUPTION OR DAMAGE, COSTS OF PROCUREMENT OF SUBSTITUTE SERVICES, OR DAMAGES ARISING FROM THE EXECUTION OF AI-GENERATED SQL, REGARDLESS OF THE THEORY OF LIABILITY AND EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

    11.3. Aggregate Cap. OUR TOTAL AGGREGATE LIABILITY UNDER THESE TERMS SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU HAVE PAID TO US IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED U.S. DOLLARS ($100).

    11.4. Specific AI Liability Exclusion. You expressly acknowledge that AI-generated SQL and analytical outputs may contain errors. We bear no liability for damages arising from your decision to execute, rely on, or distribute Generated Output without independent validation.

    12. Indemnification

    You agree to indemnify, defend, and hold harmless Dagnostics LLC dba Chion and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, costs, and expenses (including reasonable attorneys' fees) arising from: (a) your use of the Service; (b) your violation of these Terms; (c) your execution of Generated Output against any database; (d) your connection of databases you are not authorized to access; or (e) your violation of any applicable law or third-party rights.

    13. Dispute Resolution

    13.1. Informal Resolution. Before filing any formal proceedings, you agree to contact us at contact@chion.ai and attempt to resolve the dispute informally for at least 30 days.

    13.2. Binding Arbitration. Any dispute not resolved informally shall be resolved by binding arbitration administered by the American Arbitration Association (AAA) under its Commercial Arbitration Rules. The arbitration shall take place in Broward County, Florida. The arbitrator's decision shall be final and binding.

    13.3. Class Action Waiver. YOU AND DAGNOSTICS LLC DBA CHION AGREE THAT EACH PARTY MAY BRING CLAIMS AGAINST THE OTHER ONLY IN YOUR OR ITS INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR REPRESENTATIVE PROCEEDING.

    13.4. Small Claims Exception. Either party may bring qualifying claims in small claims court in Broward County, Florida.

    13.5. Governing Law. These Terms are governed by the laws of the State of Florida, without regard to conflict of law principles.

    13.6. Export Controls. The Service relies on third-party AI services subject to U.S. export control laws and regulations. You may not use, export, or re-export the Service except as authorized by United States law, the laws of the jurisdiction in which the Service was accessed, and any other applicable laws and regulations. In particular, the Service may not be exported or re-exported into any U.S. embargoed countries or to anyone on the U.S. Treasury Department's Specially Designated Nationals list or the U.S. Department of Commerce Denied Persons or Entity List.

    14. Modifications to Terms

    14.1. We may modify these Terms at any time by posting the revised version on our website with an updated "Last Updated" date. Material changes will be communicated via email at least 30 days before taking effect.

    14.2. Your continued use of the Service after modified Terms take effect constitutes acceptance. If you do not agree to the modified Terms, you must discontinue use and cancel your subscription.

    15. Termination

    15.1. By You. You may terminate your account at any time by canceling your subscription and contacting us at contact@chion.ai.

    15.2. By Us. We may suspend or terminate your access to the Service immediately, without prior notice, if we reasonably believe you have violated these Terms, engaged in fraudulent activity, or pose a security risk to the platform or other users.

    15.3. Effect of Termination. Upon termination: (a) your right to access the Service ceases immediately; (b) we will delete your stored data within 30 days unless earlier deletion is requested or legal retention is required — this includes your account information, session history, connected data source metadata, sampled values, document content, AI inference records, generated outputs, and vector embeddings; (c) you may request immediate deletion of all your data at any time through the Service's account settings or by contacting contact@chion.ai; (d) aggregated, anonymized usage telemetry that cannot be linked to your identity may be retained indefinitely; (e) outstanding payment obligations survive termination; (f) diagnostic logs and email delivery records may be retained for their standard retention period as described in the Privacy Policy, after which they are purged.

    15.4. Self-Service Data Deletion. You may delete all of your stored data — including data source metadata, sampled values, document content, session history, and generated outputs — at any time through the data management controls in your account settings, without needing to cancel your account or contact support.

    16. General Provisions

    16.1. Entire Agreement. These Terms, together with the Privacy Policy and any applicable Data Processing Agreement, constitute the entire agreement between you and Dagnostics LLC dba Chion regarding the Service.

    16.2. Severability. If any provision of these Terms is found unenforceable, the remaining provisions remain in full force and effect.

    16.3. Waiver. Our failure to enforce any provision of these Terms does not constitute a waiver of that provision.

    16.4. Assignment. You may not assign your rights under these Terms without our prior written consent. We may assign our rights without restriction.

    16.5. Force Majeure. We shall not be liable for any failure or delay in performance due to circumstances beyond our reasonable control, including but not limited to natural disasters, acts of government, internet or infrastructure failures, or third-party service outages.

    Common questions about these terms

    Does Chion train AI models on my data?

    No. Chion uses paid commercial API tiers of Mistral (core), OpenAI and Google (fallbacks), and Anthropic. Under these providers' commercial terms, paid-tier prompts and responses are not used to train or improve models. Providers retain logs for 30–55 days for abuse monitoring only. (§3.2a, §10)

    Can I delete my data from Chion?

    Yes. You can delete all stored data — data source metadata, sampled values, document content, session history, generated outputs — from your account settings, without canceling or contacting support. (§15.4)

    How are my database credentials stored?

    Encrypted at rest with AES-256-GCM. Decrypted in-memory only during active pipeline operations with TTL expiration. Plaintext credentials are never logged or written to disk. (§3.3, §8.1)

    What happens to my data when I cancel?

    Account transitions to read-only at the end of your billing period. Stored data is deleted within 30 days of termination unless you request earlier deletion. (§4.7, §15.3)

    Is Chion HIPAA-compliant?

    No, not by default. Processing PHI through the Service requires a separately executed Business Associate Agreement. (§6.10)

    17. Contact

    For questions about these Terms, contact us at:

    Dagnostics LLC dba Chion

    Broward County, FL

    contact@chion.ai

    chion.ai