Terms of Service

Plain-language summary

1. Parties and definitions

1.1 Parties

These Terms of Service (the “Terms”) form a binding agreement between you (“Owner”, “You”) and CODEDUNES SOLUTIONS – FZCO (“Mari”, “we”, “us”), a free-zone company registered in IFZA, Dubai Silicon Oasis, DDP, Building A1, Dubai, United Arab Emirates, License Number 28506.

1.2 What you are agreeing to

You accept these Terms by creating an account, by connecting any channel or integration, or by otherwise using Mari. If you are using Mari on behalf of a company, you confirm that you have authority to bind that company.

1.3 Definitions

Owner

The natural or legal person who holds the Mari account.

Agent

The AI assistant configured by the Owner, which acts on the Owner's behalf across channels and integrations.

Contact

Any person the Agent communicates with on the Owner's behalf, a third party who may or may not be a Mari user themselves.

Channel

A messenger or communication platform the Agent operates on, such as Telegram and WhatsApp.

Integration

A third-party application connected via OAuth, such as Gmail, Google Calendar, Google Drive, Google Meet, and Zoom.

Credits

The internal billing unit used to meter consumption inside the service.

Subprocessor

A third party we use to provide the service (listed in the Privacy Policy).

Personal Data

As defined by the UAE Federal Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and the EU General Data Protection Regulation (GDPR).

2. What Mari is and is not

2.1 What Mari does

Mari is an AI-powered assistant that connects to your messengers and selected apps, reads and writes messages on your behalf, runs scheduled and long-running work, and keeps memory of people, projects and commitments across channels.

2.2 What Mari is not

• Mari is not a substitute for licensed professional advice (legal, medical, financial).
• Mari is not an official client of any third-party platform. It uses publicly available APIs and bot interfaces where permitted by those platforms.
• Mari does not guarantee the accuracy of AI-generated content. Large language models can produce incorrect, outdated, or fabricated information. You remain responsible for reviewing output before relying on it.
• Mari does not moderate the content sent by Contacts.

3. Account and eligibility

3.1 How you sign in

Mari supports the following sign-in methods:

• Email and password
• Google OAuth
• Sign in with Apple
• Telegram OpenID Connect

3.2 Eligibility

You must be at least 18 years old to create an account. Mari is not designed for and may not be used by minors.

3.3 Account security

You are responsible for the security of your password and any connected OAuth sessions. Notify us at security@mari.bot immediately if you suspect unauthorised access.

3.4 Account closure

You may request account closure at any time by writing to privacy@mari.bot. On closure your data is deleted within 30 days, except records we are required to retain (administrative audit log for 365 days; billing records as required by UAE tax law).

4. Channels, integrations, and agent modes

4.1 Connected channels

Mari connects to Telegram and WhatsApp. For each channel you confirm that you have the right to use the underlying account and that you will comply with the platform's own terms of service. WhatsApp operates over session-based access and may, under WhatsApp's own rules, lead to account-level restrictions for automated use. You accept that risk when you connect an account.

4.2 OAuth integrations

Mari connects to Gmail, Google Calendar, Google Drive, Google Meet, and Zoom through an integration broker. OAuth access and refresh tokens are encrypted at rest. You may revoke access at any time, either through the third party's own account settings or via Mari.

4.3 The three agent modes

The Agent operates in one of three connection modes per channel. Each mode has different legal weight:

4.4 Common rules for all modes

• You configure the Agent's personality, tool policy (allowed actions), and notification preferences.
• Every action the Agent takes is logged and visible to you in the activity feed and audit log.
• You may pause the Agent on any channel at any time. A single switch silences all in-flight activity.
• Replies are generated by a third-party large language model using your system prompt and conversation context. Mari does not curate or pre-screen each individual reply.

5. Your obligations toward contacts

Mari processes Personal Data of people who are not themselves users of Mari, the people you communicate with. The legal grounds for that processing rest with you as the Owner. You agree to:

• Inform your Contacts that some or all of your replies may be AI-generated and that conversation content is processed by our infrastructure and AI subprocessors. This is mandatory under EU AI Act Article 50 for Contacts in the EU and a best practice everywhere else.
• Have a lawful basisfor storing your Contacts in Mari (consent, legitimate interest, or contractual necessity), depending on the Contact's jurisdiction (GDPR, UAE PDPL, UK GDPR, CCPA, LGPD, PIPL, PDPA, or other local law).
• Honour deletion requests from Contacts. The Owner dashboard lets you delete a Contact and the associated history; Mari may also act on a direct deletion request from a Contact under applicable data-protection law.
• Not enroll Contacts who have objected to AI processing or whom you do not have permission to message in the first place.

For data-protection purposes, with respect to Contact data, you are the controller and Mari is the processor. In Agent-bot mode (B), where the Contact has actively reached out to the bot, Mari and the Owner may act as joint controllers for that interaction.

A suggested notice you can copy into your bio or first message: “I use Mari, an AI assistant, to help with my conversations. Some of my replies may be AI-generated. If you would rather not, let me know.”

6. Acceptable use

6.1 You must not

• Send spam, mass commercial communications without opt-in, or unsolicited marketing.
• Harass, threaten, stalk, defame, or impersonate any person.
• Use Mari for fraud, phishing, social engineering, market manipulation, or any unlawful purpose.
• Scrape Personal Data from third parties to load into Mari without a lawful basis.
• Reverse-engineer, decompile, or attempt to bypass technical protections, rate limits, or content safeguards.
• Create or distribute deepfakes that impersonate real people, or use dedicated-account mode (C) to impersonate any natural person other than yourself.
• Operate in owner mode (A) without informing Contacts of the AI involvement where required by law.
• Violate the terms of the underlying messenger or integration platform when operating on it through Mari.
• Process child sexual abuse material or other content illegal under UAE Federal Decree-Law No. 34 of 2021 (Cybercrime Law), local law, or international law.

6.2 Account limits

Each plan includes defaults for the number of stored Contacts and active integrations. We may apply rate limits to the API and to large-language-model usage to keep the service stable.

6.3 Our right to act

We may suspend or restrict your account if we have good-faith reason to suspect a violation of Section 6, in response to a lawful request from authorities, or to protect the integrity of the service. Where possible we will tell you first.

7. Credits, billing, and refunds

7.1 Credits

Mari is metered in Credits, an internal billing unit. Credits are consumed per operation, primarily large-language-model inference and text-to-speech, at cost-plus pricing. The current Credit rates and any included grant are shown on the Pricing page and in your account.

7.2 Top-ups

Card payments are handled by an industry-standard, PCI-DSS compliant payment processor. Mari does not see or store your full card number; the processor returns a payment confirmation that we use to credit your account.

7.3 Taxes

Where applicable, UAE Value Added Tax (currently 5%) is added to invoices for UAE residents. You are responsible for determining and paying any tax obligations in your own jurisdiction.

7.4 Refunds

Unused Credits are refundable on request within 30 days of top-up. Consumed Credits, those already spent on inference, text-to-speech, or other operations, are non-refundable. On account closure with a positive balance, unused Credits are returned via the same channel as the top-up where technically possible.

7.5 Inactivity

Accounts inactive for more than 12 months may be archived after written notice. Unused Credits are preserved during the notice period.

8. Intellectual property

8.1 Mari's rights

The Mari software, designs, brand, documentation and the service itself are owned by CODEDUNES SOLUTIONS – FZCO. You receive a limited, non-exclusive, non-transferable, revocable licence to use the service in line with these Terms.

8.2 Your content

You retain all rights in the messages, files, prompts, contacts and configuration you bring to Mari. You grant us only the licence we need to operate the service for you, to store it, route it through subprocessors, generate replies, and surface it back to you in the product.

8.3 AI output

Output generated by the Agent on your behalf is yours to use, subject to two caveats: (a) similar prompts may produce similar output for other Owners, Mari cannot guarantee uniqueness; (b) you may not use AI-generated content to infringe a third party's rights or to mislead Contacts about its origin where the law requires disclosure.

8.4 Feedback

If you send us feedback, suggestions, or ideas, we may use them without obligation or compensation.

8.5 DMCA and trademark notices

Send infringement notices to legal@mari.bot. Include the work claimed to be infringed, the allegedly infringing material, your contact details, and a good-faith statement.

9. AI disclaimers and human oversight

9.1 The model

Mari uses large language models from Anthropic (the Claude family) accessed through Cloudflare AI Gateway. Voice synthesis uses ElevenLabs and OpenAI. We may switch or add providers; the Privacy Policy reflects the current set.

9.2 Accuracy

Large language models can hallucinate, miss context, and be confidently wrong. The Agent's output is not advice and is not guaranteed to be accurate, current, or fit for any particular purpose. You remain the human in the loop.

9.3 No training on your data

Mari does not use your messages, contacts, files or Agent configuration to train its own models. Our use of the Anthropic API is subject to terms that prevent your data from being used to train Anthropic's models.

9.4 Transparency obligations (EU AI Act)

Under EU AI Act Article 50, natural persons interacting with an AI system must be informed of that fact. Where the Agent operates in owner mode (A), you are the “deployer” of the system and you are obliged to inform Contacts located in the EU.

9.5 No automated decisions about people

Mari does not perform profiling, credit scoring, or other automated decision-making with legal or similarly significant effects on Contacts within the meaning of GDPR Article 22.

10. Availability and changes

Mari is provided on an as-is and as-available basis. We rely on third parties (AWS, Cloudflare, Anthropic, Google, Telegram and others) whose availability is outside our control.

We may add, change, or remove features. Material changes to these Terms will be announced by email and in the dashboard with at least 30 days notice before they take effect. Continued use after the effective date constitutes acceptance.

11. Warranties and liability

11.1 Disclaimer of warranties

To the maximum extent permitted by law, Mari disclaims all warranties, whether express, implied, statutory or otherwise, including warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy of AI output, and uninterrupted operation.

11.2 Limitation of liability

To the maximum extent permitted by law, Mari's total aggregate liability arising out of or relating to these Terms or the service is limited to the amounts you paid Mari in the twelve months preceding the event giving rise to the claim.

Mari is not liable for indirect, incidental, consequential, special, exemplary, or punitive damages, including lost profits, lost data, or business interruption, even if advised of the possibility of such damages.

11.3 Carve-outs

Nothing in these Terms excludes or limits liability that cannot be limited under applicable law, including gross negligence, wilful misconduct, fraud, death or personal injury caused by negligence, and statutory data-protection rights of EU consumers.

11.4 Platform risk

Suspension or restriction of your account on an underlying messenger or integration platform is outside Mari's control and is not Mari's responsibility.

12. Indemnification

You agree to indemnify and hold harmless Mari and its officers, employees and contractors from any third-party claim, demand, loss or expense (including reasonable legal fees) arising from: (a) your breach of these Terms; (b) your use of Mari to violate applicable law or third-party rights; (c) claims by Contacts based on your failure to obtain the consents, notices, or lawful bases required by Section 5; or (d) tax obligations in your jurisdiction.

13. Suspension and termination

13.1 By you

You may stop using Mari at any time and request account deletion at privacy@mari.bot. See Section 3.4 for what happens to your data.

13.2 By us

We may suspend access immediately for a material breach of Section 6 (Acceptable use), for non-payment, or in response to a lawful order. We may terminate the service in full on at least 60 days written notice; in that case unused Credits are refunded where technically possible.

13.3 Survival

Sections that should reasonably survive termination, including Sections 8 (IP), 11 (Warranties and liability), 12 (Indemnification), 14 (Governing law) and 16 (Miscellaneous), survive.

14. Governing law and disputes

14.1 Governing law

These Terms are governed by the laws of the United Arab Emirates, with mandatory consumer rights of users in their home jurisdictions preserved where the law requires it (including, for EU consumers, the right to bring proceedings in their country of residence under EU Regulation 1215/2012).

14.2 Forum

Unless arbitration applies under Section 14.3, the courts of Dubai, United Arab Emirates have exclusive jurisdiction. EU consumers retain the right to bring proceedings in their country of residence; nothing in this section takes that away.

14.3 Arbitration for international disputes

Any dispute, controversy or claim arising out of or in connection with these Terms, including the validity, breach, or termination thereof, may be referred to and finally resolved by arbitration administered by the Dubai International Arbitration Centre (DIAC) under its Arbitration Rules. The seat of arbitration is Dubai. The language of arbitration is English. The tribunal consists of a single arbitrator unless either party requests three.

14.4 Informal resolution first

Before filing in court or arbitration, you agree to attempt good-faith resolution by writing to legal@mari.bot. Both parties will use reasonable efforts to resolve the matter within 30 days.

14.5 Online dispute resolution (EU)

EU consumers may also use the European Commission's Online Dispute Resolution platform at ec.europa.eu/consumers/odr.

15. UAE-specific provisions

15.1 Cybercrime Law

You must not use the service to publish or distribute content prohibited by UAE Federal Decree-Law No. 34 of 2021 on Combatting Rumours and Cybercrimes, including content offending public morals, the State, religious values, or privacy. Mari will cooperate with lawful requests from UAE authorities.

15.2 Sanctions and export controls

You may not use the service if you are located in, or are an individual or entity subject to, sanctions administered by the UN, the United States (OFAC), the European Union, or the United Arab Emirates. You will comply with all applicable export-control laws.

15.3 Consumer protection

Nothing in these Terms limits the rights of UAE residents under Federal Law No. 15 of 2020 on Consumer Protection.

16. Miscellaneous

16.1 Severability

If any clause is held unenforceable, the rest of the agreement remains in force.

16.2 No waiver

A failure to enforce a right is not a waiver of that right.

16.3 Assignment

Mari may assign these Terms to an affiliate or in connection with a corporate transaction. You may not assign without our written consent.

16.4 Force majeure

Neither party is liable for delay or failure caused by events beyond reasonable control, including natural disasters, war, civil disturbance, government action, third-party network or cloud failure.

16.5 Notices

We notify you by email to the address on your account and by in-product banner. You notify us at legal@mari.bot.

16.6 Entire agreement

These Terms together with the Privacy Policy and any document expressly incorporated by reference constitute the entire agreement between you and Mari and replace any prior agreements on the same subject.

16.7 Language

The English text of these Terms is the controlling version. Translations are provided for convenience.

17. Contact

• Legal: legal@mari.bot
• Privacy and data-subject requests: privacy@mari.bot
• Security incidents: security@mari.bot
• Support: support@mari.bot
• Postal: CODEDUNES SOLUTIONS – FZCO, Dubai Silicon Oasis, DDP, Building A1, Dubai, United Arab Emirates

© 2026CODEDUNES SOLUTIONS – FZCO. All rights reserved. Version v1.0 · Effective May 24, 2026.