Terms of sale for the prepaid credit platform

Purpose

These terms apply to the SaaS AI agent orchestration platform, paid for with prepaid credits. They cover no other service.

Who is covered: businesses only. You buy for the purposes of your professional activity, in your company’s name.

By ordering, you accept these terms.

Duale AI - SAS with capital of €10,000 - Paris Trade Registry 994 521 128 - 60 rue François 1er, 75008 Paris, France - contact+legal@mail.duale.ai

Which documents form your contract

Your contract with Duale AI is made up of six documents:

1. The checkout summary you validate before each purchase. It states the amount and the automatic reload setting you chose. It can neither create an obligation absent from these terms nor cut back a right they give you.
2. These terms of sale.
3. The Terms of use for AI agent orchestration.
4. The Intended purpose, excluded uses, and behavioral constraints page, which states the Platform’s intended purpose, the excluded uses, and how the system behaves at its edges.
5. The Subprocessors and data transfer safeguards list.
6. The Privacy policy for personal data and AI services.

If two documents contradict each other, the one higher in this list prevails, and only on the contradicted point. Everything else keeps applying.

Terms the Terms of use for AI agent orchestration define keep the same meaning here, whether these terms of sale capitalize them or not.

We show you the summary before you pay. We email you a copy and we keep one.

The invoice creates no new obligation. It confirms a purchase already concluded. If an invoice line contradicts the documents above, those documents prevail.

We do not sign order forms. No other document enters your contract unless Duale AI signs it.

Pricing

Prices displayed in euros excluding VAT. VAT is added according to your situation.

The price is fixed per task, whatever its duration. A ten-day task costs the same as a thirty-minute task.

Price changes: 30 days’ notice by email. Your credits are denominated in euros: a price change alters what each task consumes, not the value of your balance. The price in force on the day of submission applies. You can stop reloading before the effective date.

Payment in advance. Duale AI grants no payment terms.

Prepaid wallet

How it works. You create an account, you load your wallet in euros, you accept these terms. Duale AI debits each task when it ends, whether it delivers an answer, fails, or you stop it. A task Duale AI never started is not debited. When the balance reaches zero, the service stops. You receive an invoice on each reload.

No balance, no service. Duale AI rejects any task submitted with an insufficient balance and returns an explicit error message.

The balance can go slightly negative. The stop is not instantaneous: a task already running can finish and take your balance below zero. Duale AI deducts that amount from your next reload. Duale AI claims nothing from you and charges no penalty if you never reload.

Automatic reload. Duale AI reloads your wallet once per depletion, by the amount you chose. Only you set and change that amount. You switch automatic reload off whenever you want, from your account.

Your card is enrolled with strong authentication, following our payment provider’s rules. Later reloads rely on that mandate.

Model calls do not go through this wallet. You contract directly with your model providers and you pay them directly. The Duale AI price covers orchestration, not the consumption of the models in your pool.

No subscription. Duale AI offers no subscription and no commitment period.

Payment

Credit card. Secure payment. Credits available after receipt.

After payment: confirmation email and invoice within 24h.

Reporting a problem. Write to contact+support@mail.duale.ai, ideally within 30 days. That deadline reduces neither your legal rights nor the 5-year limitation period.

Duration and termination

Your contract starts when you create your account. It has no fixed term and you take on no commitment period. You buy credits when you want, or never.

You terminate whenever you want. Close your account from your customer area or write to contact+support@mail.duale.ai. No notice, no fee. Within 24 hours, Duale AI stops accepting new tasks and confirms by email. Tasks already running go to their end, unless the agent that submitted one stops it.

We terminate without fault on your part with 3 months’ notice. During those 3 months the service continues and you can spend your credits.

We suspend or terminate immediately in case of fraud, attack on platform security, use prohibited by the Terms of use for AI agent orchestration, or an order from an authority. We write you the reason the same day. You can contest it at contact+appeals@mail.duale.ai; we answer within 15 days.

What happens to your balance

You terminate. We refund your unused balance within 14 days, to the payment method you used for the purchase. We withhold no fee.

We terminate without fault on your part. Same rule: full refund within 14 days.

We terminate for fraud, security breach, or prohibited use. We refund your unused balance, less what you owe us and the damage you caused us. We send you the itemized calculation. We never confiscate a balance.

Refunds go by credit note then by return transfer to the original payment method. We never send a refund to anyone other than the payer.

Warranties and liability

Our liability

Duale AI compensates the direct damage the Customer proves.

Cap. Over a rolling twelve months, across all claims combined, Duale AI owes no more than the amounts you paid during the twelve months preceding the event giving rise to the claim.

What Duale AI does not pay. Neither lost revenue, nor lost margin, nor reputational harm, nor loss of opportunity. Nor the outputs produced by the models in your pool.

What the cap never covers:

• Gross negligence (faute lourde) or willful misconduct (dol) by Duale AI
• Serious and established breach of GDPR obligations that caused damage
• Personal injury
• Product liability for defective products, towards the injured natural person

On that last point, the cap applies only so far as the law allows. Article 1245-14 of the French Civil Code treats as unwritten any clause excluding product liability, except for damage to goods not put to private use. Directive (EU) 2024/2853, to be transposed by December 9, 2026, at the latest, will reserve compensation to natural persons for products placed on the market after that date.

The cap above settles accounts between us. It settles nothing towards a third party suing us directly.

Force majeure

Neither party is liable for a failure caused by force majeure within the meaning of Article 1218 of the French Civil Code. All three of the following conditions must be met:

• the event is beyond the control of the party concerned;
• that event was not reasonably foreseeable when that party entered the contract;
• it cannot avoid the effects by appropriate measures.

Examples: natural disaster, war, pandemic, widespread cyberattack, major internet infrastructure failure, government action. Economic or financial hardship alone does not constitute force majeure.

If the impediment is temporary, performance is suspended. If it is permanent or lasts more than 30 days, either party has the right to terminate with 15 days’ notice. Duale AI then refunds the unused balance. No other compensation is due.

Evidence and cooperation

If a third party sues Duale AI and Duale AI cannot produce its logs, a court can presume the Platform was defective. The same rule applies to you. Both parties therefore keep what they need to defend themselves.

What Duale AI keeps, and for how long. Duale AI keeps for twelve months, from each message: the selected model, the timestamp, and the task identifier. These logs do not contain message content. They outlive the contract. Duale AI keeps the same way, beside the execution record of each task you stop: who stopped it, when, and the reason your agent supplied.

What Duale AI does not keep. Neither the reason a model was selected, nor the version of the routing algorithm. You therefore cannot compare two runs of the same agent on the routing decision after the fact.

What you keep. Your agents’ instructions and their versions, the model list you authorized and each change to it, and your human review decisions.

Cooperation. If either party receives a claim, a formal notice, or a summons connected to the Platform, it notifies the other within five business days. Each hands the other, within fifteen days, the material it holds that serves the defence.

Confidentiality. Each party asks the court for the measures that protect its trade secrets. Neither refuses to produce a document on the sole ground that it is confidential.

What this section does not change. Your content and the outputs produced are still deleted 30 days after the contract ends. Only the execution metadata above outlives them, to establish and defend legal rights.

Use outside France

Duale AI designs the service for French and European Union law. If you use it in another country, satisfying yourself that it is lawful there is your responsibility.

Your personal data

Data collected and legal bases (art. 6 GDPR)

Processing your data

• Your prompts and files pass through our platform to call AI models
• Your documents are stored and indexed for agent search
• Internet searches performed to enrich responses

You remain responsible for content you import.

Our subprocessors: hosting, network protection, payment, support. Complete list: Subprocessors and data transfer safeguards

The model providers you call with your own keys are not our subprocessors. They are your recipients, and putting that transfer on a lawful footing is your responsibility.

Transfers outside the European Economic Area: see the “Transfers outside the European Economic Area” section, further down this page.

Retention

The full table of durations is in the Privacy policy for personal data and AI services, section Retention periods. Note that your documents and prompts are deleted 30 days after the contract ends.

Delete your data: in the interface or contact+privacy@mail.duale.ai

Your rights

Access, rectification, deletion, portability, objection. Contact: contact+privacy@mail.duale.ai (response within one month).

Complaint: https://www.cnil.fr (opens in a new tab)

[Businesses] If you process your customers’ personal data via our platform, read the “Data processing agreement (Article 28 GDPR)” section, further down this page.

AI models

How it works

The Customer connects its own access keys to providers of its choice. Duale AI orchestrates the calls. These external models do not belong to Duale AI.

Internal models: Duale AI also uses open source models hosted on its European infrastructure for document processing (storage, indexing, search) and web search result ranking.

Who chooses what

• You declare the authorized model pool, you supply your provider keys, you supply the data, you decide where to place human oversight.
• Duale AI provides the platform, the infrastructure, its internal models, and the routing algorithm that selects, message by message, which model from your pool handles the request. Duale AI answers for that ranking and its execution, not for the content the models produce.
• The model providers answer for the operation of their models.

Model skill labels describe capabilities measured on public benchmarks. They do not describe uses Duale AI offers you. The list of prohibited uses in the Terms of use for AI agent orchestration prevails over those labels.

The Intended purpose, excluded uses, and behavioral constraints page states the Platform’s intended purpose, the excluded uses, and how the system behaves at its edges.

No warranty on AI outputs

AI responses can contain errors or “hallucinations” (invented information presented as true). These are not legal, medical, financial, or other professional advice.

You decide on human oversight. The platform imposes none and provides none. You develop the tools the agent calls and you put your own review policy inside them. You remain solely responsible for how you use generated content.

Uses that require a qualified professional. Medical, legal, or financial decisions: the agent’s output does not replace a professional’s advice.

Usage analytics

You view your usage analytics in the web interface. A tenant administrator exports the audit log from that interface, in a standard format.

Intellectual property

Our content: Content on the Duale AI website (texts, images, code, trademarks) belongs to us. Reproduction prohibited without authorization.

Your data: You retain all rights to data you import into the platform.

AI-generated content: content generated by AI without significant human creative input does not necessarily qualify for copyright protection under current French and European law. The outputs belong to you on the terms set by the Terms of use for AI agent orchestration, section Content and Outputs. Subject to that:

• Duale AI does not guarantee these contents do not infringe third-party rights
• You are responsible for verifying absence of infringement before any commercial use

Who reimburses whom when a third party sues, outside the cap

This section falls outside the liability cap, in both directions. Read it before you sign.

A third party obtains compensation from Duale AI. If the damage stems from your instructions, the pool you declared, the data you submitted, or a prohibited use, you reimburse Duale AI: compensation paid, legal costs, attorney fees.

The reverse applies. When a third party obtains compensation from you and the damage stems from a defect in the platform, Duale AI reimburses you on the same terms.

Each party involves the other in its defence. Neither party settles, on its own, a claim that implicates the other.

Availability

We run the platform and we execute the tasks you submit. We promise no figure for uptime.

• We aim for a service available 24/7. We do not guarantee it.
• We sometimes take the service down for maintenance. We warn you 48h ahead by email. For a security emergency we take it down without notice and explain afterwards.
• An outage can come from our providers. We treat it as an outage on our side: we inform you and we restore the service.

A task we do not execute costs you nothing. We never bill a task that fails on our side. If we did debit a task we did not execute, we credit it back without your having to ask. A task you stop is debited: the work already done is billed however the task ends.

If the service is unavailable for more than 72 consecutive hours, you can terminate immediately. We then refund your balance in full.

Support: contact+support@mail.duale.ai. We do not guarantee a response time.

Data processing agreement (Article 28 GDPR)

This section applies if you use Duale AI to process personal data of your own customers or users. You are then the data controller, we are your processor.

Subject matter and processing description

Our obligations (processor)

• Documented instructions only - We process your data only according to your written instructions, including for transfers outside the European Economic Area. If an instruction seems contrary to GDPR or other legislation, we inform you immediately. Where Union or Member State law requires us to process otherwise, we inform you of that legal requirement before processing, unless that law prohibits the information on important grounds of public interest.
• Confidentiality - Our teams are bound by contractual or legal confidentiality obligations.
• Security (art. 32 GDPR) - Encryption in transit. Application-level encryption at rest for Library documents and derived search data, database backups, and reporting copies. Page access can cache eligible tenant-scoped resources from public pages for about seven days without application-level encryption at rest; requests that contain cookies or authorization credentials bypass that cache. Multi-factor authentication for sensitive account changes. Per-Customer data separation. Code an AI Agent writes runs in a fresh sandbox separated from Customer systems; the Platform destroys that sandbox after execution. Role-based access controls. Logging of Tool routing dispatch decisions by name, on by default.
• Subprocessors - Subprocessors and data transfer safeguards. Notification 30 days before if the subprocessor is in the European Economic Area, or 90 days before if outside the European Economic Area. You have the right to object in writing within this period. Subprocessors are bound by the same obligations.
• GDPR assistance - We assist you in responding to data subject rights requests (access, rectification, deletion, portability), with impact assessments (DPIA) and, where the assessment calls for it, with prior consultation of the supervisory authority (Article 36 GDPR).
• Proof of compliance - On written request, and without a prior audit, we hand you the information needed to demonstrate compliance with the obligations in this section.
• Audits - You ask us for an audit in writing, with reasonable notice of 30 days. You audit our compliance yourself or you appoint a third party. You bear the costs, unless the audit establishes non-compliance: in that case, Duale AI bears them.
• Contract termination - At your choice, we delete or return the Customer Content we process for you, free of charge, within 30 days (Article 28(3)(g) GDPR). The retention periods for account, billing, security, and execution metadata remain those stated in the Privacy Policy or required by law. A tenant administrator can export the audit log from the web interface in a standard format. You view usage analytics in the web interface; you cannot export it through the API. Destruction certificate on request.

Your obligations (controller)

• Provide lawful and documented instructions
• Ensure you have a legal basis for processing
• Not import unlawful data or special categories, such as health data or political opinions, without appropriate safeguards
• Inform your data subjects of using Duale AI as processor

Breach notification (art. 33 GDPR)

When we confirm a personal data breach within our processor scope, we notify you without undue delay. The notification states: the nature of the breach, the categories and approximate number of data subjects affected, the likely consequences, and the measures taken or proposed.

Transfers outside the European Economic Area

Transfers outside the European Economic Area rely on the Data Privacy Framework where it applies, or on the 2021 standard contractual clauses with supplementary measures where required. Each subprocessor’s processing location is listed in the Subprocessors and data transfer safeguards.

Governing law

French law. In case of translation, French prevails.

If something goes wrong

Contact: contact+support@mail.duale.ai

Courts: Paris.