Terms of service

These terms govern your use of openattribution.org and api.openattribution.org (the "Service"), operated by OpenAttribution, a community interest company limited by guarantee registered in England and Wales (company number 17002582).

By creating an account or sending telemetry to our API, you agree to these terms.

1. The service

OpenAttribution provides open infrastructure for content attribution in AI agent interactions. The service includes:

• Domain registration and verification
• Telemetry ingestion and storage
• Attribution dashboards
• API access for telemetry submission and retrieval
• Domain resolution (allowing agents to discover where to send telemetry)

The service is currently provided free of charge. We may introduce paid tiers in future, but existing free functionality will remain available.

2. Accounts

You must provide accurate information when creating an account. One account per person. You are responsible for keeping your sign-in credentials secure. If you suspect unauthorised access, notify us immediately at security@openattribution.org.

Accounts are associated with organisations. You may create or join organisations, and each organisation may register domains and receive telemetry.

3. Domain verification

You may only register domains that you own or are authorised to manage. Domain verification (via DNS TXT record, HTML meta tag, or .well-known file) confirms your control over the domain.

If we receive a credible dispute about domain ownership, we may suspend the registration while we investigate. We will notify you and give you reasonable opportunity to respond.

4. Telemetry data

If you are a publisher (receiving telemetry about your content)

Telemetry sent to our API about URLs on your verified domains is made available to you through the dashboard and API. You are the controller of this data under UK GDPR where it relates to your content and users.

If you are an agent operator (sending telemetry)

You are responsible for ensuring that telemetry you send complies with applicable law, including data protection law. Specifically:

• Do not include personally identifiable information in telemetry events. The user_context field is for opaque, non-identifying segment labels only.
• Do not include PII in content URLs (for example, URLs containing email addresses or user IDs in query parameters).
• Conversation turn data must respect the privacy level you declare. If you set minimal, do not include query or response text.

We reserve the right to reject or delete telemetry that contains PII or is otherwise non-compliant with the specification.

Data accuracy

Telemetry must reflect actual events. Fabricating sessions, inflating event counts, or sending misleading attribution data is prohibited and grounds for immediate termination.

5. API usage

API keys are scoped to your organisation and must not be shared outside it. You are responsible for all activity under your API keys. Revoke compromised keys immediately.

We may introduce rate limits. If your usage requires higher limits, contact us. Do not circumvent rate limits by rotating keys or distributing requests across accounts.

6. Acceptable use

You must not:

• Use the service to track, profile, or surveil individuals
• Send telemetry containing personal data beyond what the specification permits
• Attempt to access other organisations' data
• Reverse-engineer telemetry to identify individual users
• Use the service to gain competitive intelligence about other publishers' traffic
• Interfere with the service's operation or other users' access
• Scrape dashboards or API endpoints beyond your authorised scope

7. Intellectual property

The OpenAttribution specification and reference implementations are open source under the Apache 2.0 licence. You may use, modify, and distribute them under that licence.

You retain ownership of your data. By using the service, you grant us a licence to store, process, and display your data as needed to provide the service. We may use aggregated, non-identifying usage statistics for public reporting (for example, "the network processed X million events this month").

8. Service availability

We aim for high availability but do not guarantee it. The service is provided on a best-efforts basis. We may need to take the service offline for maintenance, and will give reasonable notice where possible.

We are a small team running open infrastructure. If the service has an outage, we will communicate status openly.

9. Disclaimer

The service is provided "as is" without warranties of any kind, express or implied, including but not limited to fitness for a particular purpose, reliability, or accuracy of attribution data.

Attribution calculations depend on the quality and completeness of telemetry received. We do not guarantee the accuracy of any attribution model applied to the data.

10. Limitation of liability

To the maximum extent permitted by law, OpenAttribution's total liability to you for any claims arising from your use of the service is limited to the amount you have paid us in the 12 months preceding the claim (which may be zero if you are on the free tier).

We are not liable for indirect, incidental, consequential, or punitive damages, including lost revenue, lost data, or business interruption.

Nothing in these terms excludes liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be excluded by law.

11. Termination

You may delete your account at any time. We will delete your account data in accordance with our privacy policy.

We may suspend or terminate your account if you breach these terms. We will notify you and explain the reason, except where we are legally prevented from doing so or where immediate action is needed to protect the service.

12. Changes to these terms

We may update these terms. Material changes will be communicated via email at least 30 days before they take effect. Continued use after that date constitutes acceptance.

13. Governing law

These terms are governed by the laws of England and Wales. Disputes will be subject to the exclusive jurisdiction of the courts of England and Wales.

14. Contact

OpenAttribution
71-75 Shelton Street, Covent Garden
London, WC2H 9JQ
England and Wales
hello@openattribution.org