Terms of Service

Version of 28 September 2026. Provider: BOP BLUEOCEAN PRIVACY LTD, Delphon 8, Livadia, Office 204, 7060 Larnaca, Republic of Cyprus (“we”).

This is a convenience translation. The German version prevails in case of discrepancy.

1. What we provide

BlueOcean Orbit is an AI-based work assistant provided as a service over the internet. The chat runs on a language model operated on our own server. The service includes the web application, the optional Windows application and the operation of the required technology.

We also offer the BlueOcean Messenger: encrypted messages and calls in the apps for iPhone and Android and in the browser. It is a separate offering; sections 8a to 8d apply to it in addition.

2. Who may use the service

We offer the work assistant exclusively to businesses within the meaning of commercial law, as well as to self-employed persons, freelancers, legal entities and public bodies. By booking it you confirm that you act in the exercise of a commercial or self-employed professional activity and are at least 18 years old.

You may use the messenger both professionally and privately, including as a consumer. You must be at least 18 years old. If you are younger, you can only join the messenger through a family, at the earliest from 13 years old and only with the consent of a parent or guardian (section 8c). By registering you confirm that you are at least 18 or that you are joining this way.

Where something different applies to consumers than to businesses, it is stated at the relevant point.

3. Conclusion of contract and account

The contract is concluded when you confirm your e-mail address and set a password. An account is personal; credentials must not be shared. You are responsible for keeping them safe and for notifying us without delay if you suspect misuse. Even with a family seat (section 8b) you have your own account and your own contract with us.

4. Trial, price, payment

This section applies to the work assistant. For the messenger, section 8a applies.

• Free for 14 days from first sign-in. No payment details required. The trial ends automatically — no payment obligation arises if you do not add payment details.
• Thereafter EUR 29.00 net per user and month, plus applicable VAT. Billing is monthly in advance.
• Payment is processed by our payment provider Revolut. Card data is entered and stored exclusively there.
• If a payment fails, we may temporarily suspend access after prior notice. Stored content is retained during that time.

5. Term and cancellation

The contract runs for an indefinite period and may be cancelled by either party with effect from the end of the current billing period — for you at any time with one click in the workspace, without notice period and without giving reasons. Access remains until the end of the period. We may cancel with two months’ notice to the end of a month; the right to extraordinary termination for good cause remains unaffected for both parties. You cancel a messenger subscription with the store through which you bought it (section 8a point 2). You can delete your messenger account at any time.

6. Your data is yours — switching and portability

All content you enter or upload remains yours. We acquire no rights in it and do not use it to train models.

You may export your data at any time in a common, machine-readable format and switch to another provider. We support you in doing so and charge no fee for it. After the contract ends, your data remains available for retrieval for 30 days; we then delete it unless a statutory retention obligation applies. This implements Chapter VI of Regulation (EU) 2023/2854 (Data Act).

7. Artificial intelligence — what you must know

• You are interacting with an AI system. Responses are generated by machine (Art. 50 Regulation (EU) 2024/1689).
• AI responses can be wrong, incomplete or fabricated. Verify results before acting on them.
• Orbit does not replace legal, tax, financial or medical advice.
• You must not use Orbit as the sole or decisive basis for decisions with significant effects on people — in particular hiring, dismissal, evaluation of employees, creditworthiness, access to education, entitlement to social benefits or law enforcement. Such uses are classified as high-risk under Annex III of the AI Act and are contractually prohibited.
• Where synthetic voices or images are generated, we label them as artificially generated.

8. Acceptable use

The following is prohibited in particular:

• creating or distributing unlawful content, infringing third-party rights,
• circumventing security measures, overloading the service or scraping it automatically (beyond the documented interface),
• passing on or reselling access to third parties — family seats under section 8b are excepted,
• entering credentials, keys or third-party personal data without a legal basis,
• generating content intended to deceive others (such as fake identities).

In case of serious or repeated violations we may suspend access.

8a. Messenger

The BlueOcean Messenger is a separate product, booked separately. It does not come with your Orbit access and can be cancelled independently. You may use it both professionally and privately (section 2). The following points apply to it in addition.

1. Activation. Before you can use it: a free seat or an invitation, an active messenger subscription or a family seat (section 8b), a confirmed e-mail address and two-factor sign-in. We check this at every activation. After registering you can use the messenger for a test period without a subscription; the app shows you how long. During the test phase a voucher issued by us can replace seat, subscription and two-factor sign-in — it does not replace the three text acceptances.
2. Subscription and payment. You buy the messenger subscription in the app, through Apple's App Store or through Google Play. The purchase is handled by the respective store: it shows you the price, term and renewal before purchase, and it charges you. You can cancel at any time in the subscription settings of your store account, with effect from the end of the period already paid for. Withdrawal from and refund of a purchase run through the store and under its terms; we cannot intervene in your store account.
3. Code of conduct. The code of conduct applies in its current version. You must accept it expressly before activation. If we change it substantively, we ask for your acceptance again.
4. No tolerance. There is zero tolerance for objectionable content and for users who abuse or harass others. We look at every report — from the app or via the code of conduct — within 24 hours and act: we remove the reported content from our sphere of control or block the offender, and we report criminal content to the authorities. In the app you can block any participant and report any content — press and hold a message or a participant.
5. We cannot read your messages. They are encrypted and decrypted on the devices of the people in the chat; the keys stay with you. It follows that if you lose your security phrase and all signed-in devices, the affected conversations are gone for good. We cannot restore them — that is not a defect but the point.
6. What we do see. No content, but metadata: who is in which room with whom and when, room names, and storage use. So do not put confidential details into room names. Details in the privacy policy.
7. Our promise about that. Connection data arises because communication does not work without it — we accept that and say so openly. We do not evaluate content. Neither messages nor calls, neither by hand nor automatically, and never for advertising, recommendations or analyses. Nor do we build profiles from the connection data about who talks to whom. This line holds without exception and is part of the contract, not merely an intention.
8. Calls. Voice and video calls run directly between devices wherever possible. Where that fails, a server of ours in Germany relays them — no third-party provider. Sound and picture stay encrypted for that server too.
9. Limits. 50 MB per file and a storage guideline of 2 GB per account. If you exceed it persistently we will contact you with a deadline; if you do not clear space, we may suspend the messenger access. We delete nothing silently.
10. Invitations. An invitation is personal, redeemable once and expires after 30 days. Reselling it is not permitted.
11. Test phase. Test accounts are marked as such. Things may be rough, and we may end test accounts when the test phase ends. We announce it beforehand.

Finding contacts: at your request, the app can check which e-mail addresses from your address book already have an account (details in the privacy policy, section 6e — the server only checks, stores nothing and passes nothing on). The feature exists solely to reach your own contacts. Using it systematically to find out who is a customer — for example with bought, harvested or guessed address lists — is prohibited; requests are technically limited for that reason.

8b. Family

Sections 8b to 8d apply once the app offers the family. Until then there are no family seats, and under 18 you cannot yet use the messenger.

With a messenger subscription you can start a family and give up to five people a family seat — together you are up to six. A family seat is included in the subscription and costs nothing extra. Whoever pays for the subscription is called the payer here.

1. Only the payer invites. Someone with a family seat cannot invite anyone; for that they need their own subscription. An invitation to the family is personal, redeemable once and expires after 30 days.
2. Private, for people close to you. Family seats are for your family and for people who are personally close to you. You must not sell them, rent them out or use them for a business. Anyone who uses the messenger professionally needs their own subscription.
3. A family seat only writes within the family. With a family seat you message and call only people in your family; for everyone else you need your own subscription. Every family has a shared family room: whoever joins is in, whoever leaves is out. If someone from outside tries to reach you, the app shows you that. For children, the parent or guardian sees it (8c).
4. With your own subscription in the family. If you have your own subscription, you can still belong to a family. You then do not take up one of the five seats, and point 3 does not apply to you.
5. Apple Family Sharing. If the payer bought through Apple and switched on Family Sharing there, Apple can share the subscription with their Apple family. Anyone who joins this way gets a family seat as soon as the payer confirms them in the app. Until then they message no one. These seats also count towards the five.
6. One family per person. You belong to at most one family. Whoever is the payer of a family cannot be a member of another.
7. Leaving and removing. You can leave your family at any time, and the payer can remove a member. Anyone who loses their family seat has their account suspended until they take out their own subscription or join another family. We delete nothing silently in the process.
8. If the payer's subscription ends — through cancellation, expiry or refund — all family seats of their family are suspended. The app shows those affected why, and what happens next. Members with their own subscription are not affected. Anyone who takes out their own subscription can keep writing immediately.
9. Everyone has their own contract. Each member has their own account and their own contract with us and is responsible to us for what they write. The payer sees who belongs to their family; they do not see your messages (8a point 5). The payer only invites people who want it and gives truthful information — in particular about age and about who is a parent or guardian (8c).

8c. Children and young people under 18

1. Only through a family, from 13. Under 18 you use the messenger only through a family and at the earliest from 13 years old.
2. The age is entered by an adult. When the payer adds a child, they state that the child is under 18 and in which month the child turns 18. The child cannot change this. We do not store a date of birth, only the month and year in which the rules of this section end. If a family member's device tells us that they are under 18 — on the iPhone via Apple's age declaration — they count as a minor, even if something else is entered.
3. A parent or guardian consents. A child uses the messenger only with the consent of a parent or guardian. If the payer is themselves the parent or guardian, they state so when adding the child; their invitation is then the consent. If they are not, the parent or guardian consents themselves, with their name and a statement that they are the parent or guardian. Until then the child messages no one. Whoever consents thereby also declares that another holder of parental responsibility agrees. The consent covers the three texts accepted before activation (8a point 1). If we change one of them, the parent or guardian consents again, not the child.
4. The parent or guardian decides who can reach the child. A new family member can reach the child only once the parent or guardian has consented. If the payer is themselves the parent or guardian, their invitation is the consent. If someone from outside tries to reach a child, the parent or guardian sees this, not the child.
5. No one can read along. Messages are end-to-end encrypted (8a point 5). Neither the parent or guardian, nor the payer, nor we can read them. The parent or guardian decides who can reach the child, not what is written.
6. Own subscription only with consent. A child may take out their own subscription only with the consent of their parent or guardian; we activate it only afterwards. With their own subscription the child also messages outside the family, and that is exactly what the consent is asked for. For children's accounts, the store may additionally make the purchase dependent on parental approval; that is governed by Apple and Google, not by us.
7. Withdrawal. The parent or guardian can withdraw their consent at any time. The child's access is then suspended; nothing is deleted. Any subscription of the child's own is cancelled through the store, not by us. We tell you how.
8. Entered incorrectly? Anyone entered as a minor can see who did so and can object. We then check under section 8d. The entry stands until the decision is made.
9. Turning 18 automatically. On the first day of the month after the month in which you turn 18, the rules of this section end without anyone having to do anything. You and your parent or guardian receive a notice, and we delete the connection to them along with their address. A family seat remains a family seat (8b) until you have your own subscription.

8d. Checking information

The family and the protection of children depend on a few pieces of information: whether someone is an adult, who is a parent or guardian, and that a family seat is used privately. We reserve the right to check this information by spot check — for the payer as well as for members.

1. The information, not the person. We only check the specific information in question.
2. By chance or on objection. Who we check is chosen at random, and we record the selection. We also check when someone objects to a piece of information (8c point 8).
3. The mildest step first. First we ask. If that is not enough, we ask for confirmation by the parent or guardian. Only as a last resort do we ask for an ID document, on which you may black out everything except your name and month and year of birth.
4. We keep only the result. We delete the evidence as soon as the check is complete. We keep when the check was made, with what result and by whom.
5. A human decides, not a machine. You learn the result and can object.
6. Correcting, not punishing. If a piece of information is incorrect, we correct it; for example, we then record an account as belonging to a minor. Anyone who refuses the check or does not respond within the deadline stated in our request may have their account suspended — only that account, not the whole family.

How we handle your data in doing so is set out in the Privacy Policy.

9. Availability

We strive for continuous availability but do not owe it. Maintenance is announced where possible. Excluded are disruptions for which we are not responsible (force majeure, failures of upstream providers, network disruptions). If you are a consumer, your statutory rights regarding defects in digital products remain unaffected; this section does not limit them.

10. Liability

We are liable without limitation for intent and gross negligence and for injury to life, body or health. In case of simple negligence we are liable only for breach of a material contractual obligation (an obligation whose fulfilment makes the performance of the contract possible in the first place and on whose observance you may regularly rely), limited in amount to the foreseeable damage typical for this type of contract, but no more than the fees paid in the twelve months preceding the damaging event. Liability for lost profit and for indirect damages is excluded in case of simple negligence. Liability under mandatory law remains unaffected.

Towards consumers, the limitation to the fees paid and the exclusion for lost profit and indirect damages do not apply; liability remains limited to the foreseeable damage typical for this type of contract.

We are not liable for damages arising from your adopting AI results without verification.

11. Data protection

Which data we process is set out in our Privacy Policy. Where we process personal data on your behalf, we will conclude a data processing agreement pursuant to Art. 28 GDPR on request.

12. Open source software, language models and their licences

Orbit uses third-party open source components. The full list with their respective licences is available at licence notices. These terms do not affect the rights granted under those licences.

12.1 What ships to your device with the apps. The apps for iPhone and Android contain third-party libraries under the Apache-2.0 licence, in particular the matrix-rust-sdk for the Matrix protocol and end-to-end encryption. The licence texts ship with the app and can be viewed inside it; we also provide them on request.

12.2 Language models carry their own licences — and those apply to you as well. The language model Llama 3.2 is licensed under the Llama 3.2 Community License by Meta Platforms, Inc., and image understanding Gemma 3 under the Gemma Terms of Use by Google. These are not ordinary open-source licences: they permit commercial use but contain usage restrictions (among them the respective “Acceptable Use Policy” and “Prohibited Use Policy”) which we are contractually required to pass on to you. By using the model features of Orbit you accept those restrictions. We provide the texts on request and link to them under licence notices.

12.3 Services under copyleft. Individual components — the Matrix home server Synapse and the search engine SearXNG — are licensed under the AGPL-3.0. We run them unmodified as standalone services; their source code is publicly available from the respective maintainers, and on request we will name the version we run. No source code from these services sits in Orbit or in our apps.

12.4 Our own part. Orbit, the messenger and the apps are written by us. They contain no copied source code from third-party projects. The rights in them are ours; these terms grant you no further rights in them.

13. Changes to these terms

We may amend these terms where necessary to adapt to changes in law, case law or developments of the service. We announce changes by e-mail at least 30 days before they take effect and state what is changing. A change takes effect only with your consent; we then ask you for it in the app or in the workspace. If you do not consent, the previous version continues to apply to you. We may then cancel the contract under section 5, and you may end it at any time.

14. Final provisions

The law of the Republic of Cyprus applies, excluding the UN Convention on Contracts for the International Sale of Goods. If you are a consumer, this choice of law applies only to the extent that it does not deprive you of the protection of mandatory provisions of the country in which you have your habitual residence. The exclusive place of jurisdiction for merchants is Larnaca, Cyprus; consumers may also sue us at their place of residence. Should any provision be invalid, the remainder of the contract remains effective. For businesses: side agreements require text form.

15. Right of withdrawal

This notice applies if you conclude a contract with us as a consumer for use of the messenger, including through a family seat. You withdraw from the purchase of a subscription with the store through which you bought it (section 8a point 2).

Withdrawal notice

Right of withdrawal

You have the right to withdraw from this contract within 14 days without giving any reason. The withdrawal period will expire after 14 days from the day of the conclusion of the contract.

To exercise the right of withdrawal, you must inform us (BOP BLUEOCEAN PRIVACY LTD, Delphon 8, Livadia, Office 204, 7060 Larnaca, Republic of Cyprus, telephone +357 96915453, e-mail info@blueocean.report) of your decision to withdraw from this contract by an unequivocal statement (e.g. a letter sent by post or e-mail). You may use the attached model withdrawal form, but it is not obligatory.

To meet the withdrawal deadline, it is sufficient for you to send your communication concerning your exercise of the right of withdrawal before the withdrawal period has expired.

Effects of withdrawal

If you withdraw from this contract, we shall reimburse to you all payments received from you, including the costs of delivery (except for the supplementary costs resulting from your choice of a type of delivery other than the least expensive type of standard delivery offered by us), without undue delay and in any event not later than 14 days from the day on which we are informed about your decision to withdraw from this contract. We will carry out such reimbursement using the same means of payment as you used for the initial transaction, unless you have expressly agreed otherwise; in any event, you will not incur any fees as a result of such reimbursement.

If you have requested to begin the performance of services during the withdrawal period, you shall pay us an amount which is in proportion to what has been provided until you have communicated to us your withdrawal from this contract, in comparison with the full coverage of the contract.

Model withdrawal form

(Complete and return this form only if you wish to withdraw from the contract.)

• To BOP BLUEOCEAN PRIVACY LTD, Delphon 8, Livadia, Office 204, 7060 Larnaca, Republic of Cyprus, info@blueocean.report:
• I/We (*) hereby give notice that I/We (*) withdraw from my/our (*) contract for the provision of the following service (*)
• Ordered on (*)/received on (*)
• Name of consumer(s)
• Address of consumer(s)
• Signature of consumer(s) (only if this form is notified on paper)
• Date

(*) Delete as appropriate.

Questions? info@blueocean.report