> ## Documentation Index
> Fetch the complete documentation index at: https://marrow-docs.hologrow.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Terms of Service

# Marrow Terms of Service

**Last Updated: July 29, 2026**

*This draft is adapted from the reviewed Hologrow Pulse terms of use to Marrow's product and service model, and is provided for review by qualified counsel before publication.*

***

By registering, accessing, or using any part of Marrow, you agree to these Terms. They form a binding contract between you and HOLOGROW INC. Read them once — they cover billing, usage, security, your rights, and ours.

## 1. Introduction

These Terms of Service (**"Terms"**) form a binding legal contract between you (**"you"**, **"your"**, or **"Customer"**) and HOLOGROW INC, a Delaware corporation with registered address at 8 The Green, Ste A, Dover, DE 19901 (**"Hologrow"**, **"we"**, **"our"**, or **"us"**), and govern your use of **Marrow** (also referred to as **Hologrow Marrow**), including the web application, data synchronization services, data schema and data layer, MCP server, APIs, OAuth connection flows, Skills, dashboards, and related services (collectively, the **"Service"**).

By registering, accessing, or using any portion of the Service, you affirm that you have read, understood, and agree to be bound by these Terms and our Privacy Policy, which is incorporated by reference. If you do not agree, do not use the Service.

## 2. Eligibility

You must be at least 18 years old, or the age of majority in your jurisdiction, to use the Service. By using Marrow, you represent and warrant that all information you provide is truthful, accurate, and complete.

If you use the Service on behalf of a company or other organization, you warrant that you are **authorized to bind that organization** to these Terms, and "you" refers to that organization. When you invite additional users to a workspace you administer, you accept these Terms on their behalf and warrant that they will comply; invited users are bound by these Terms from the moment they first access the Service through your workspace.

## 3. Service Description

Marrow is a **data middle layer for commerce and advertising operators**. The Service:

* Lets you authorize store and advertising accounts — such as Amazon Seller, Amazon Vendor, Amazon Ads, Shopify, Shoplazza, Google Ads, Google Analytics (GA4), Google Search Console, Facebook Ads (Meta), Lingxing ERP, and other supported integrations — via OAuth or platform-issued API credentials;
* Syncs historical and daily incremental data from those connections into normalized, governed tables in your Marrow data layer, on the schedules and history windows described in the product;
* Makes that data available to the **AI platforms you explicitly connect** — such as Codex, Claude, ChatGPT, Cursor, Gemini CLI, and other MCP-compatible clients — through OAuth sessions and Marrow's MCP server, using per-user sessions or MCP API keys;
* Provides ready-made, **read-only analysis Skills** that your AI clients can run against your synced data;
* Provides usage metering, data-health monitoring, manual tables you maintain yourself, and related tooling.

**Marrow is read-only by design.** The Service does not pause or launch campaigns, change bids or budgets, edit listings, send messages, or modify settings in your connected platforms, and it never posts on your behalf through AI platform connections. If write-enabled features are ever introduced, they will be disabled by default and will require your explicit, per-feature authorization before taking effect.

Specific plan allowances, sync coverage, history windows, and feature availability are described in the product and on the pricing page, and may vary by plan.

## 4. Account Registration & Security

To use the Service, you must register an account and provide accurate, current, and complete information. You may register with email credentials or through Google or Microsoft single sign-on.

You are responsible for maintaining the confidentiality of your credentials, OAuth sessions, MCP API keys, and tokens, and for **all activity that occurs under your account and keys**. You must notify us immediately at **[security@hologrow.ai](mailto:security@hologrow.ai)** if you suspect unauthorized access to your account, a connected platform, or an MCP key. You may revoke OAuth sessions and rotate or revoke MCP keys at any time in the product.

We reserve the right to deny registration, suspend access, or terminate accounts in accordance with these Terms.

## 5. Privacy Policy

Your use of the Service is governed by our Privacy Policy, which is incorporated into these Terms by reference. It explains what we collect — including account data, connected platform data, usage data, technical data, and billing data — and how we use, protect, retain, and delete it, including platform-specific commitments for Amazon, Meta, and Google API data.

## 6. Connected Platforms & Your Authorizations

* When you connect a store or advertising account, you grant Marrow **read-only access** via the platform's authorized flow. We receive only the OAuth tokens or API keys the platform issues to us — never your platform login password.
* You represent and warrant that you **own or are authorized to connect** each account you link, that you have provided all notices and obtained all consents and lawful bases necessary for Marrow to process the connected data on your behalf, and that your use complies with all applicable third-party platform terms — including the Amazon Services Business Solutions Agreement and SP-API policies, the Meta Platform Terms, the Google API Services User Data Policy, and Shopify's and other platforms' terms.
* You may disconnect a source at any time. Disconnecting stops future syncs for that connection; previously synced data is handled per the Privacy Policy and your retention settings.
* Platform-side changes — permission scopes, API deprecations, rate limits, token expiry, or policy enforcement — may interrupt syncing. Reconnecting or re-authorizing may be required to resume.

## 7. Amazon Data

When you authorize Marrow to connect to your Amazon Seller, Vendor, or Amazon Ads accounts, we receive **Amazon Data** on your behalf via the Selling Partner API and Amazon Ads API.

* **Purpose limitation.** We use Amazon Data **solely to provide the Service to you** — syncing, normalizing, and delivering it to you and the AI platforms you explicitly connect. We do **not**: sell, rent, license, or share Amazon Data with third parties for marketing purposes; use Amazon Data to target Amazon customers for advertising, review fabrication, or product promotion; publish or aggregate insights about Amazon's business for our own commercial purposes; or use Amazon Data to **train AI/ML models** — neither our own nor any third-party provider's.
* **PII exclusion.** Marrow's standard data schema is designed to **exclude buyer personally identifiable information (PII)** (such as customer names and shipping addresses). We do not request restricted PII access from Amazon's APIs for standard synchronization.
* **Retention.** Where any Amazon personal data is processed, it is retained no longer than **30 days** from collection or completion of the authorized purpose, except where retention is required by law, consistent with Amazon's Data Protection Requirements.
* **Attribution and isolation.** Amazon Data is tagged at the source within our systems so it can be traced to its origin and to the workspace that authorized it. We maintain logical isolation between customer workspaces.
* **Deletion on request.** Upon your written request, or upon Amazon's request where applicable, we will permanently and securely delete Amazon Data within **30 days**, except to the extent retention is required by law.
* Our handling of Amazon Data is aligned with **Amazon's SP-API Data Protection Requirements**. See the Privacy Policy for the full Amazon Data section.

## 8. AI Platforms, MCP & Skills

* **Your direction.** Transmitting your synced data to AI platforms is the core function you configure. When you connect an AI client via OAuth or MCP, your data is delivered to that client **at your direction**, and the client's provider (for example Anthropic, OpenAI, Google, or Anysphere) processes it under **its own terms and privacy policy**. We are not responsible for third-party AI platforms' acts, omissions, models, or policies.
* **MCP keys.** MCP API keys are long-lived credentials for headless clients such as CLI agents and scripts. Treat them like passwords: store them securely, scope them to intended clients, and rotate or revoke them if exposed.
* **Skills.** Skills are ready-made analysis packages installed into your AI clients. They are **read-only** — they read your synced data and never change your connected accounts.
* **Revocation.** You can revoke any AI platform session or MCP key at any time. Revocation stops future data delivery through that connection; data already delivered to a third-party AI client is governed by that provider's terms.
* **No training.** Your data is never used to train AI/ML models — not ours, and not those of any AI provider. We do not operate advertising or marketing on your data.

## 9. AI Outputs

AI clients and Skills may generate analyses, summaries, recommendations, forecasts, or other outputs based on your synced data. **AI outputs are probabilistic in nature and may contain errors, inaccuracies, hallucinations, outdated information, or omissions.**

You are **solely responsible** for reviewing and verifying any AI output before relying on it, and for all decisions, actions, communications, campaigns, and business outcomes based on it. The Service does not provide legal, tax, accounting, financial, employment, compliance, or other professional advice. Marrow is a tool you control — not your financial advisor, your Amazon advisor, or your operational decision-maker.

## 10. Your Data & Manual Tables

* **Ownership.** You retain all right, title, and interest in your data — including connected platform data associated with your accounts and the content of manual tables (such as cost-of-goods or supplier-price data) you upload or maintain. Marrow never overwrites manual tables.
* **License to us.** You grant Hologrow a worldwide, non-exclusive, royalty-free license to host, process, transmit, normalize, display, and analyze your data **solely as necessary to provide, secure, support, and operate the Service**, and as otherwise permitted by these Terms.
* **Your warranties.** You warrant that your data and your use of the Service do not violate applicable law, infringe intellectual-property or privacy rights, bypass consent requirements, breach confidentiality obligations, or violate third-party platform policies.
* **Sensitive data.** Do not upload sensitive personal information, payment card data, protected health information, government identifiers, children's data, biometric data, or similarly regulated data into manual tables or elsewhere in the Service unless we expressly agree in writing under an applicable data processing agreement.
* **Aggregated analytics.** We may use metadata, usage telemetry, system logs, and aggregated or de-identified statistics to operate, secure, and improve the Service, provided such information does not identify you or any individual.
* **Backups.** You are responsible for maintaining backups of business-critical information outside the Service unless otherwise agreed in writing.

## 11. Subprocessors

To deliver the Service, we engage a small set of **vetted subprocessors** — currently Google Cloud Platform (hosting, database, storage, logging, United States), Stripe (payment processing, United States), and Google/Microsoft (single sign-on, only if you choose it). Each subprocessor is contractually bound by confidentiality and data-protection obligations consistent with these Terms and applicable law. The Privacy Policy's subprocessor list is the authoritative version and may be updated from time to time.

**We do not sell customer data or connected platform data, and no subprocessor is permitted to use it for any purpose other than providing the specific service we contract for.** AI platforms you connect are not our subprocessors — they receive data at your direction under their own terms (Section 8).

## 12. Security

We operate the Service with reference to frameworks including **ISO/IEC 27001**, **ISO/IEC 27002**, and the **NIST Cybersecurity Framework**. Key controls include TLS 1.3 encryption in transit, AES-256-GCM encryption at rest, managed secret storage for tokens and keys, MFA and least-privilege IAM for administrative access, quarterly access reviews with prompt offboarding revocation, segregated test and production environments, access and security logging retained for a minimum of 12 months, annual personnel security training, and a documented incident management plan. The Privacy Policy describes these controls in detail.

## 13. Incident Response

Hologrow maintains a documented incident management plan covering detection, classification, containment, eradication, recovery, and post-incident review. If we become aware of a confirmed security incident affecting your data, we will notify you **without undue delay** and within the timeframes required by applicable law (for example, 72 hours under GDPR; 24 hours where Amazon Data is involved, per Amazon's Data Protection Requirements), describe the nature of the incident and categories of data involved, and cooperate reasonably with your own response obligations. Our security point of contact is **[security@hologrow.ai](mailto:security@hologrow.ai)**.

## 14. Data Processing & International Transfers

If you are a controller of personal data under GDPR, the UK GDPR, the CCPA, or comparable laws, and require a Data Processing Addendum (DPA), we offer a standard DPA incorporating the European Commission's **Standard Contractual Clauses** and the **UK International Data Transfer Addendum**. Contact **[privacy@hologrow.ai](mailto:privacy@hologrow.ai)** to request it. Once executed, the DPA forms part of these Terms and prevails in the event of conflict with respect to the processing of personal data.

The Service is operated from the United States, and data is stored and processed in the United States. If you use the Service from outside the United States, your data will be transferred to and processed in the United States under the mechanisms described above.

## 15. Plans, Metering & Billing

* **Subscription model.** The Service is provided on a recurring subscription basis. Each plan includes allowances described on the pricing page and in the product — for example, the number of connected data sources, AI-ready data capacity, and data history window. Plan details, prices, and allowances are as displayed at purchase or in your workspace.
* **Metering.** Usage — such as rows synced and MCP calls made by your AI platforms — is metered and visible in the product's Usage area. Allowances **reset on the first day of each billing cycle** and do not roll over unless stated in your plan.
* **Exhaustion.** We will alert you as you approach your plan limits. When an allowance is exhausted, affected features (such as data syncing or MCP access) **pause** until the next cycle, a plan upgrade, or a purchased add-on re-enables them. We do not charge overage unless your plan or an explicit opt-in says so.
* **Billing rhythm.** Subscription fees are **billed in advance**. All payments are **non-refundable**, including in the event of cancellation, downgrade, or unused time, except as required by law or expressly stated in writing.
* **Price changes.** We may modify pricing with at least **30 days' prior notice**; changes apply to your next renewal term unless otherwise stated.
* **Late payment.** Overdue amounts accrue interest at **1.5% per month**, or the maximum rate permitted by law, whichever is lower. We may suspend the Service for non-payment.
* **Taxes.** Fees exclude taxes, duties, and similar governmental assessments. You are responsible for all taxes associated with your purchases, excluding taxes based on our net income.
* **Electronic billing.** You agree to receive invoices and billing notices by email or through the product.

## 16. Free Trials

If we offer a free trial, the following applies unless the offer states otherwise: trials are available to new users only (one per user or organization); the trial converts to a paid subscription at the price shown at sign-up unless you cancel before it ends; if you cancel before the trial ends, you will not be charged. We may refuse or revoke trial access in case of misuse. Data retention after cancellation follows Section 25.

## 17. Acceptable Use

You agree not to:

* Use the Service for any **unlawful purpose**, or to transmit unlawful, harmful, deceptive, defamatory, harassing, discriminatory, infringing, or otherwise abusive content;
* Attempt to gain **unauthorized access** to systems, accounts, workspaces, or data not your own;
* Disrupt or interfere with the **operation, security, or performance** of the Service;
* Scrape, copy, benchmark for competitive purposes, or extract data from the Service without authorization, or use the Service to build or improve a competing product;
* Circumvent **rate limits, plan allowances, quotas, or technical restrictions**;
* Resell, sublicense, or redistribute the Service without our written authorization;
* Share accounts or keys contrary to your plan, or use the Service for spam, phishing, credential harvesting, malware, unauthorized surveillance, or deceptive manipulation;
* Use the Service to facilitate or promote **any violation of a connected platform's policies** — including Amazon's Business Solutions Agreement and SP-API policies, Meta's Platform Terms, Google's API policies, or Shopify's terms — by you or any third party.

Violations may result in **immediate suspension and permanent termination** of your account, and legal action where appropriate. If we become aware that a customer is using the Service to violate their agreement with Amazon, we may **notify Amazon** (including via [spapi-abuse@amazon.com](mailto:spapi-abuse@amazon.com)) and may suspend the offending account.

## 18. Intellectual Property

As between the parties, Hologrow owns and retains all right, title, and interest in and to the Service — including code, software, models, algorithms, normalized schema designs, data dictionaries, workflows, Skills, templates, user interfaces, APIs, product designs, documentation, trademarks, know-how, and aggregated statistics — and any improvements, modifications, or derivative works of the foregoing.

Subject to your compliance with these Terms and payment of applicable fees, we grant you a limited, non-exclusive, non-transferable, non-sublicensable right during your subscription to access and use the Service for your internal business purposes. These Terms grant you no other rights in our intellectual property.

You may not copy, modify, translate, reverse engineer, decompile, disassemble, attempt to derive source code, bypass technical limits, interfere with security controls, or create derivative works of the Service, except to the extent such restrictions are prohibited by applicable law.

## 19. Feedback

You may provide feedback, suggestions, ideas, or recommendations regarding the Service. We may use such feedback without restriction or obligation to you, provided we do not disclose your confidential information in doing so.

## 20. Service Availability & Changes

We work in good faith to maintain a stable, reliable Service but do not commit to a specific uptime percentage on standard plans. The Service may experience scheduled maintenance, occasional outages, or temporary unavailability of specific features. Sync freshness depends on third-party platforms finishing their own reporting; timelines such as sync windows are planning estimates, not guarantees.

You should not rely on the Service for **mission-critical operations** without independent backups and verification of any data you intend to act upon. We are not liable for losses arising from service interruptions, except as stated in Section 23.

We may update, enhance, modify, suspend, or discontinue features from time to time, and will use commercially reasonable efforts to provide advance notice of material changes that materially reduce core functionality. We may temporarily suspend access to prevent security risks, protect the Service or other customers, comply with law, address non-payment, or respond to suspected misuse, using reasonable efforts to limit scope and duration.

## 21. Third-Party Services

The Service depends on third-party platforms, APIs, cloud providers, AI model providers, and identity providers outside our control. We are **not responsible** for failures, delays, data inaccuracies, outages, permission or scope changes, rate limits, policy changes, enforcement actions, or account suspensions caused by third-party services or by systems you control. Your use of any connected platform or AI client remains subject to that provider's own terms.

## 22. Warranty Disclaimer

Each party represents that it has the legal power and authority to enter into these Terms. We will provide the Service in a professional and workmanlike manner.

**Except as expressly provided in these Terms, the Service — including all outputs, analytics, Skills, beta features, and third-party integrations — is provided "as is" and "as available."** To the maximum extent permitted by law, we disclaim all warranties, express, implied, statutory, or otherwise, including warranties of merchantability, fitness for a particular purpose, accuracy, non-infringement, and uninterrupted or error-free operation. We do not warrant that the Service will meet your requirements, achieve any business result, increase revenue, produce accurate forecasts, identify every issue, or comply with every platform policy applicable to you.

## 23. Limitation of Liability

* To the maximum extent permitted by law, neither party will be liable for **indirect, incidental, special, consequential, exemplary, or punitive damages**, or for lost profits, lost revenue, lost business, lost goodwill, lost data, business interruption, or cost of substitute services, even if advised of the possibility of such damages.
* Without limiting the foregoing, we are **not liable** for decisions made or actions taken based on AI outputs or synced data, nor for the acts, omissions, model behavior, policy enforcement, outages, or data errors of connected platforms or AI clients.
* To the maximum extent permitted by law, **Hologrow's total aggregate liability** arising out of or relating to these Terms will not exceed the amounts paid or payable by you for the affected Service during the **twelve (12) months** immediately preceding the event giving rise to liability.
* The foregoing cap does not limit your payment obligations, either party's liability for breach of confidentiality, either party's infringement or misappropriation of the other party's intellectual property rights, your violation of the acceptable-use restrictions, or liability that cannot be limited under applicable law.
* The parties agree these limitations are fundamental to the allocation of risk and pricing of the Service and apply regardless of the legal theory of liability.

## 24. Indemnification

You will **defend, indemnify, and hold harmless** Hologrow and its affiliates, officers, directors, employees, contractors, and agents from and against any third-party claims, damages, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from: your data; your use of the Service in violation of these Terms or applicable law; your products or services; your decisions or actions based on outputs or synced data; or your breach of third-party platform terms.

Hologrow will defend you against any third-party claim alleging that the Service, when used as authorized under these Terms, directly infringes a U.S. patent, copyright, or trademark, and will pay damages finally awarded or agreed in settlement, subject to customary exclusions (claims arising from your data, your instructions, unauthorized use, combinations with non-Hologrow products, modifications not made by us, or third-party services). If the Service becomes or is likely to become subject to such a claim, we may procure the right to continue use, modify or replace the affected service without materially reducing core functionality, or terminate the affected service and refund prepaid unused fees. This Section states each party's exclusive remedy for intellectual-property infringement claims.

The indemnified party must promptly notify the indemnifying party of the claim, provide reasonable cooperation, and allow the indemnifying party to control the defense and settlement; no settlement may impose non-monetary obligations or admission of fault on the indemnified party without its prior written consent.

## 25. Term, Termination & Data Export

* These Terms begin when you first accept them, register, or access the Service, and continue until terminated. Subscriptions renew for successive terms unless canceled before renewal.
* You may **cancel at any time** in the product or by contacting us; cancellation takes effect at the end of the then-current billing period, and fees already paid are non-refundable except as stated in Section 15.
* Either party may terminate for material breach if the breaching party fails to cure within **30 days** after written notice. We may suspend or terminate immediately for non-payment, security risk, unlawful use, or material violation of Section 17.
* Upon termination or expiration, your access rights end and you must stop using the Service. Your data is retained for **30 days after termination**, during which it is available for export in a standard format, and is then permanently deleted from our active systems, except where retention is required by law. Backups containing residual data are overwritten on our standard rotation.
* Sections that by their nature should survive — including payment obligations, data use, intellectual property, confidentiality, disclaimers, limitation of liability, indemnification, termination effects, and general provisions — survive termination.

## 26. Confidentiality

Each party may receive non-public business, technical, financial, product, security, pricing, or other information of the other party that is marked confidential or should reasonably be understood to be confidential (**"Confidential Information"**). The receiving party may use it only to perform or receive services under these Terms, may disclose it only to personnel, advisors, affiliates, and service providers bound by obligations at least as protective, and must protect it with reasonable care. Confidential Information does not include information that is public without breach, previously known, received from a third party without breach of duty, or independently developed. If legally required to disclose, the receiving party will, where permitted, give prompt notice and reasonable assistance to seek protective treatment.

## 27. Publicity

Unless you object in writing (including by emailing **[legal@hologrow.ai](mailto:legal@hologrow.ai)**), we may identify you as a customer and use your name and logo on our website, in pitch materials, and in customer lists, complying with reasonable trademark guidelines you provide. Any press release, detailed case study, or public quote describing the relationship in detail requires the prior written approval of both parties.

## 28. Force Majeure

Neither party is liable for delay or failure to perform caused by events beyond its reasonable control — including natural disasters, war, terrorism, civil unrest, labor disputes, epidemics, governmental actions, internet or telecommunications failures, cloud provider outages, third-party platform outages, power failures, or cyberattacks. The affected party will use commercially reasonable efforts to mitigate and resume performance.

## 29. Changes to These Terms

We may amend these Terms from time to time. Material changes will be communicated by **email, in-product notice, or website posting**, and take effect on the date stated in the notice or, if none, **30 days** after notice. Changes do not retroactively alter the commercial terms of an active paid term unless required by law or agreed in writing. **Continued use of the Service after the effective date constitutes acceptance.** If you disagree, you must stop using the Service before the changes take effect.

## 30. Governing Law & Jurisdiction

These Terms are governed by the laws of the **State of Delaware**, without regard to conflict-of-law principles. The parties consent to the exclusive jurisdiction and venue of the state and federal courts located in Delaware for disputes arising out of or relating to these Terms, except that either party may seek injunctive or equitable relief in any court of competent jurisdiction. Each party waives any objection based on forum non conveniens.

## 31. General Provisions

* **Assignment.** You may not assign these Terms without our prior written consent, except to a successor in a merger, reorganization, or sale of substantially all assets, provided the successor is not our competitor and assumes all obligations. We may assign to an affiliate or in connection with a merger, reorganization, financing, change of control, or sale of substantially all assets.
* **Notices.** Notices to Hologrow must be sent to HOLOGROW INC, 160 Tasman Dr, Suite 125, San Jose, CA 95134, USA, with a copy by email to **[legal@hologrow.ai](mailto:legal@hologrow.ai)**.
* **Relationship.** The parties are independent contractors; these Terms do not create a partnership, joint venture, agency, fiduciary, or employment relationship.
* **Severability.** If any provision is held invalid or unenforceable, the remaining provisions remain in full force, and the invalid provision will be modified to the minimum extent necessary to make it enforceable.
* **Waiver.** A waiver is effective only if in writing and signed by the waiving party. Failure to enforce a provision is not a waiver.
* **Entire agreement.** These Terms, together with the Privacy Policy and any DPA or order you execute, constitute the entire agreement between the parties regarding the Service and supersede all prior or contemporaneous agreements and understandings on the same subject matter. Your purchase orders, vendor terms, or procurement terms do not apply and are rejected.

## 32. Contact

Questions about these Terms, billing, security, or privacy?

* **Company:** HOLOGROW INC (Marrow)
* **Legal:** [legal@hologrow.ai](mailto:legal@hologrow.ai) · **Privacy:** [privacy@hologrow.ai](mailto:privacy@hologrow.ai) · **Security:** [security@hologrow.ai](mailto:security@hologrow.ai)
* **Registered address:** 8 The Green, Ste A, Dover, DE 19901, USA
* **Mailing address:** 160 Tasman Dr, Suite 125, San Jose, CA 95134, USA

***

> **Drafting notes — confirm before publication:** (1) contact mailboxes (legal@ / privacy@ / [security@hologrow.ai](mailto:security@hologrow.ai) assumed; the live Pulse pages used an obfuscated hologrow\.ai mailbox); (2) whether the launch pricing-page mechanics (data-source limits, AI-ready capacity, history windows) match Section 15's description — the section intentionally references the in-product pricing page rather than hardcoding amounts; (3) whether a free trial will be offered at launch (Section 16 is conditional); (4) publication URLs and in-product footer links (signup page currently references these documents with `href="#"`).