Skip to content
Back to home

Sunzu · Legal & privacy

Customer agreement

Proposed terms · 30 September 2026

Business terms for Sunzu subscriptions and prepaid research credits.

Draft for review. This version is not yet effective. It takes effect for a customer only when a final version is expressly incorporated into an accepted order or signup. Viewing this page does not accept it or change an existing agreement.

1. Parties and scope

This agreement is between the business identified in an accepted order or signup (Customer, you) and the Sunzu company identified there (Sunzu, we). Sunzu is supplied for business and professional use only. A person accepting on behalf of a business must have authority to bind it.

  • UK, Switzerland and EEA customers: Alpha Base OS Ltd, registered in England and Wales under company number 16212608, registered office 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
  • Customers elsewhere, including the US: Sunzu, Inc., a Delaware corporation, file number 10756833. Legal notices: c/o Techstars, 1615 Pearl St., Boulder, CO 80302, USA.

An order means the plan, checkout or signed order accepted by both parties, including the service, price, term and applicable usage limits. It must identify the provider. Only that provider is a party; group ownership does not create joint liability. A change of customer location does not automatically change the provider.

The Data Processing Agreement (DPA) applies to personal data processed on your behalf. Mandatory transfer clauses prevail over conflicting terms, followed by the DPA for data-protection matters, an expressly negotiated order, and this agreement. An order cannot remove mandatory statutory protections. Website notices or later published terms do not silently amend an accepted agreement.

2. Access and accounts

During the agreed term, Sunzu gives your authorised users a non-exclusive right to use the web app, available integrations and research functions within your plan. You manage user access, protect credentials, and remain responsible for users acting through your account. Notify us promptly of suspected unauthorised access.

We may update the service, but will not materially reduce the paid core functionality during a committed subscription term without an agreed alternative or a right to end the affected service and receive an appropriate refund for unused prepaid service. Availability, support commitments and any service-level agreement must be stated in the order; this agreement does not promise an uptime percentage.

3. Subscriptions and prepaid credits

Prices, currency, billing interval, included usage and taxes are disclosed in the order. Subscriptions renew automatically only where the order expressly says so and describes the renewal term and how to cancel. You may prevent renewal through the stated cancellation process before the renewal date. Cancellation normally takes effect at the end of the paid term.

Prepaid credits are consumed according to the usage rates disclosed when purchased or before a research task is run. Credits have no cash value and cannot be resold. Expiry, rollover and any requirement for an active subscription must be disclosed before purchase; if no expiry is disclosed, we will not impose one retrospectively. Changes to usage rates will not retrospectively change charges for completed tasks.

Except where an order or applicable law provides otherwise, amounts paid are non-refundable and cancellation does not refund a partially used subscription term. If we permanently discontinue a paid service without a suitable replacement, or you terminate for our uncured material breach, we will refund the unused prepaid portion of the affected service and unused purchased credits that can no longer be used.

Fees for a committed term are fixed unless the order expressly provides otherwise. We will give advance notice of renewal-price changes so you can cancel before they take effect. You must pay undisputed amounts when due. Tell us promptly about a billing dispute; both parties will work in good faith to resolve it.

4. Customer inputs and research outputs

Inputs are briefs, files, images, recordings, customer records and other materials you supply. You and your licensors retain ownership of inputs. You give Sunzu and its authorised providers the permission necessary to host, reproduce, analyse and otherwise process them to deliver, secure and support your service under the DPA where applicable.

Outputs are research responses, analyses, reports and other materials generated by Sunzu for you. Sunzu retains its rights, to the extent such rights exist, in its software, models, methods and generated outputs, excluding your pre-existing materials. Subject to payment of the relevant fees, Sunzu grants you a perpetual, worldwide, royalty-free, non-exclusive licence to use, copy, adapt and distribute those outputs for lawful business purposes, including work for your clients. Ending the service does not revoke rights in paid outputs already delivered. Third-party materials remain subject to their applicable rights.

AI-generated outputs may not be protectable by intellectual property rights and may resemble outputs produced for others. This agreement cannot grant rights that neither party holds. Enterprise inputs and outputs remain protected by the confidentiality and use restrictions below regardless of ownership.

5. Service improvement and model training

Pay-as-you-go only. If your accepted order expressly designates the service as pay-as-you-go and incorporates this clause, you grant the contracting Sunzu provider a worldwide, perpetual, irrevocable, royalty-free, non-exclusive licence, without a limit on the number of permitted uses, to use, reproduce, analyse, adapt and derive improvements from your inputs and associated outputs to develop and improve Sunzu services, including evaluating, training and fine-tuning Sunzu’s own models. Sunzu may retain and use resulting improvements subject to the privacy, deletion and confidentiality restrictions in this agreement. This is a licence for these purposes, not a transfer of ownership of your inputs or a right to disclose your confidential content publicly.

Enterprise exclusion. No licence to improve services or train models is granted over enterprise inputs or outputs. Sunzu and its providers may use enterprise content only to deliver, secure and support that customer’s contracted service, comply with law, and fulfil agreed deletion or return obligations. This exclusion covers anonymised derivatives of enterprise content as well as the original content. Any additional use requires a separate express written agreement.

A subscription or credit purchase is not automatically pay-as-you-go for this clause. If the order does not expressly designate the service as pay-as-you-go, no improvement or training licence is granted. Existing customer-specific restrictions, including no-training commitments, continue unless the customer expressly agrees to change them.

No independent provider rights. Subcontractors receive only the limited permissions needed to perform services for Sunzu. They receive no ownership rights or independent licence to reuse customer inputs or outputs, improve their own services or train their own or third-party models using that content. Sunzu must impose corresponding contractual restrictions on providers.

Personal data. The licence does not override data-protection law, the DPA, deletion duties, confidentiality or an individual’s rights. It does not constitute consent from a person described in a customer file. Before Sunzu uses personal data for its own improvement or training purposes, it must establish and document the applicable lawful basis, provide the required notices, meet any additional conditions for sensitive or criminal-offence data, assess risks to children, and provide applicable rights mechanisms. Where these conditions are not met, personal data must be excluded from that use. Pseudonymisation alone does not make data anonymous. Service-provider or processor restrictions cannot be bypassed by relabelling the purpose.

This clause permits future training under the stated conditions. It does not state that Sunzu currently trains models on customer content or grant retrospective rights over earlier customer data.

6. Lawful use and research judgment

You must have the rights and lawful authority needed to supply inputs and instruct the research. Identifiable participant information, recordings, sensitive information and children’s data may be included only where the processing is lawful, necessary for the study and covered by the applicable notices, permissions and safeguards. Identify these categories in the processing instructions so appropriate protections can be applied. The product is offered to businesses, not directly to children.

Do not submit unlawfully obtained material, unlawful exploitation or abuse content, or use Sunzu to infringe rights, deceive people, bypass access controls or conduct unlawful surveillance. We may restrict access to suspected illegal content, preserve necessary evidence, and report unlawful material or conduct to the appropriate authorities where required or otherwise lawfully permitted. Any disclosure must be necessary, proportionate and legally justified.

Sunzu simulates human behaviour using AI. Outputs are research aids and can be inaccurate, incomplete or biased. You must assess their suitability, validate consequential findings and use appropriate human judgment. Do not present synthetic respondents as real participants or use outputs as the sole basis for a consequential decision about an identifiable person. No particular commercial outcome or equivalence to every form of human research is guaranteed.

7. Privacy and confidentiality

The DPA describes customer-instructed processing, security, suppliers, locations and deletion. The privacy notice covers Sunzu’s own processing purposes and individuals’ rights. Our regional data commitments apply independently of the worldwide scope of an intellectual-property licence.

Each party will protect the other’s confidential information, use it only for purposes expressly permitted by the agreement, and disclose it only to personnel, advisers and providers who need access and are bound by appropriate confidentiality obligations. Confidential information excludes information demonstrably public without breach, already lawfully known, independently developed without using the confidential information, or lawfully received without restriction. Disclosure required by law is permitted, with advance notice where lawful. The pay-as-you-go licence does not permit disclosure of identifiable customer research to other customers. These duties survive termination.

8. Suspension and termination

We may suspend affected access where reasonably necessary to address a security risk, unlawful use or material breach, or unpaid undisputed fees after notice and a reasonable opportunity to pay. We will limit suspension to what is necessary and explain the reason unless prohibited by law or doing so would undermine security. Access will be restored when the issue is resolved.

Either party may terminate an affected order for a material breach that remains unremedied 30 days after written notice describing it. Immediate termination is permitted if the breach cannot be remedied or continuing the service would be unlawful. Termination does not remove accrued payment obligations or rights that expressly survive. Sunzu will return or delete customer personal data within 30 days after termination at your choice, subject to legal retention requirements; residual backup copies may remain for up to 90 days after deletion from active systems, isolated from ordinary use.

Surviving rights in non-personal improvements and genuinely anonymous model parameters do not authorise retention of personal data contrary to the DPA. If a model or training artefact contains personal data, applicable deletion and other rights continue to apply.

9. Warranties

Each party warrants that it has authority to enter the agreement. Sunzu will perform the service with reasonable skill and care. You warrant that your inputs and instructions, and the licences you grant, are lawful. Except for express commitments in this agreement or an order, and to the extent permitted by law, Sunzu excludes implied warranties of merchantability, fitness for a particular purpose and non-infringement. Nothing here overrides the express security, confidentiality or data-protection obligations.

10. Liability

To the extent permitted by law, neither party is liable for indirect or consequential loss, lost profits or lost business opportunities arising from the agreement. Except as set out below, each party’s total aggregate liability arising from the agreement is limited to the fees paid or payable for the affected services in the 12 months before the event giving rise to the claim. Related claims are treated as one event for this cap.

The cap does not limit your obligation to pay agreed fees, either party’s fraud or fraudulent misrepresentation, deliberate misuse of the other’s intellectual property or confidential information, death or personal injury caused by negligence, or liability that cannot lawfully be limited. A cap does not restrict a regulator’s powers or an individual’s statutory compensation rights. Mandatory transfer clauses retain their own liability provisions. Any additional indemnity or enhanced liability cap must be expressly agreed in an order.

11. Regional governing law and disputes

For an agreement with Alpha Base OS Ltd, the laws of England and Wales apply and the courts of England and Wales have exclusive jurisdiction over contractual disputes. For an agreement with Sunzu, Inc., Delaware law applies, excluding conflict-of-laws rules, and the state and federal courts located in Delaware have exclusive jurisdiction over contractual disputes. Mandatory data-protection rules, regulatory jurisdiction and non-excludable rights remain unaffected.

Before bringing a contractual claim, the parties will try in good faith to resolve it through their business contacts. This does not prevent urgent protective relief or cause a statutory deadline to expire.

12. General terms and notices

Legal notices must be sent to the contracting provider at hello@sunzu.com and may also be sent to its address in section 1. Customer notices go to the account or legal contact in the order. Keep contact details current. Sunzu cannot use a website update alone to expand an existing customer’s training licence. Material changes require the agreement mechanism in the accepted order or express acceptance of a new version.

Neither party may assign an order in a way that reduces the other’s contractual protections without consent, except to a successor in a genuine reorganisation or business transfer that assumes the obligations. This does not waive transfer safeguards or change agreed data locations. If a provision is unenforceable, the remaining lawful provisions continue. The agreement and accepted order form the entire agreement on their subject matter, without excluding liability for fraud. Third parties have no contractual enforcement rights except where the DPA, mandatory transfer clauses or applicable law provide otherwise.