1. Company Registration. Each company must register with a valid business email and select a licensing tier before accessing the OnlyAllowAI firewall. Free tier is available for evaluation purposes.

2. Usage Limits. Monthly request quotas, AI agent counts, department limits, and riddle counts are enforced per plan tier. Overages are soft-blocked with a warning period of 48 hours before hard enforcement.

3. Data Isolation. Each licensed company operates in a fully isolated multi-tenant environment. Riddles, departments, assets, audit logs, and certificates are scoped exclusively to the company. No cross-tenant data visibility.

4. Fair Use. All plans include fair-use provisions. Automated abuse (request flooding, riddle brute-forcing, certificate farming) may result in temporary suspension. Rate limiting (60 req/min global, 30 req/min per agent) applies to all tiers.

5. Billing. Paid plans are billed monthly via Stripe in South African Rand (ZAR). Upgrades take effect immediately. Downgrades take effect at the next billing cycle. No pro-rating on downgrades.

6. Enterprise SLA. Enterprise customers receive a 99.9% uptime SLA, dedicated support channel, custom domain mapping, and priority feature requests. Terms are governed by a separate Enterprise Agreement.

7. Data Retention. Audit logs and accountability records are retained for 90 days on Free/Starter, 1 year on Pro, and indefinitely on Enterprise. Riddle evolution history is retained for the plan duration.

8. Termination. Companies may delete their account at any time. All data (riddles, departments, audit logs, certificates) is permanently purged within 30 days. Active subscriptions are cancelled immediately with no refund for the current billing period.