Terms of Service
1. Who we are
AI Search ("we", "us") is provided by Thaitus, a sole trader business in Lithuania. Contact: info@thaitus.com.
These Terms govern your use of the AI Search service, including the AI Product Search WordPress plugin, the AI Search API and any related dashboards (together, the "Service"). "You" means the business that installs the plugin or uses the API, and the person accepting these Terms confirms they are authorised to bind that business.
2. Business use only
The Service is offered only to businesses for use in their trade or profession. It is not offered to consumers. By accepting these Terms you confirm that you are acting for business purposes.
3. The Service
The Service lets shoppers on your online store describe what they need in natural language and returns matching products from the catalog you sync to us. Results and short explanations are produced automatically using machine-learning models, including third-party AI providers listed in our Privacy Policy.
We may improve, change or discontinue features of the Service. If a change materially reduces the core functionality of a paid plan, we will give you reasonable advance notice.
4. Your account and API keys
Access to the Service uses API keys issued to you. You are responsible for keeping your keys confidential and for all activity that happens using them. Tell us promptly if you believe a key has been exposed; we can revoke it and issue a new one.
5. Trial, plans and fees
- We may offer a free trial with limited duration and usage. When the trial ends, AI answers stop until you choose a paid plan; basic (fast) search may remain available.
- Paid plans, their monthly usage allowances and prices are shown in the plugin or on our pricing page at the time you subscribe. Usage beyond your allowance may be limited until the next billing period or until you upgrade.
- Paid plans are billed monthly in advance through our payment processor and renew automatically until cancelled. You can cancel at any time; cancellation takes effect at the end of the current billing period.
- Fees are non-refundable except where required by law or where we terminate the Service without cause.
- Prices exclude taxes unless stated otherwise. You are responsible for applicable taxes, including VAT under the reverse-charge mechanism where it applies.
- We may change prices by giving at least 30 days' notice. The new price applies from your next billing period after the notice period.
6. Acceptable use
You must not use the Service to:
- break any law or infringe anyone's rights;
- sync content that is unlawful, infringing, deceptive or harmful, or that you do not have the right to use;
- attempt to gain unauthorised access to the Service or other customers' data, or probe, scan or overload the Service;
- resell, sublicense or provide the Service to third parties other than as search for your own store(s), unless we agree in writing;
- reverse-engineer the Service or use it to build a competing product.
7. Your content
You keep all rights in the product data you sync to us ("Catalog Content"). You grant us a non-exclusive, worldwide licence to host, copy, process and transmit Catalog Content only as needed to provide, secure and improve the Service for you. You are responsible for the accuracy and lawfulness of your Catalog Content, including product descriptions, prices and stock levels.
8. AI-generated results
Search results and explanations are generated automatically and may be incomplete, inaccurate or out of date. They are not professional advice. You remain responsible for the information shown on your store and for your relationship with your shoppers. You should not rely on the Service for decisions about safety-critical, medical or legal suitability of products.
9. Personal data
When shoppers search on your store, their search text is sent to the Service. For this data you are the controller and we act as your processor. Our Privacy Policy describes what we process and which sub-processors we use, and the Data Processing Terms in the Annex below are our data processing agreement for that processing. You are responsible for informing your shoppers, for example in your store's privacy notice, that search text is processed by an external search provider.
10. Availability and support
We aim to keep the Service available and fast, but we do not guarantee uninterrupted or error-free operation and no service-level agreement applies unless agreed in writing. If AI answers are unavailable, the plugin falls back to basic search where possible. Support is provided by e-mail on a reasonable-efforts basis.
11. Suspension and termination
You may stop using the Service and delete the plugin at any time. We may suspend or terminate your access if you materially breach these Terms, fail to pay fees when due, or if your use creates a security or legal risk. Where reasonable, we will warn you first and give you a chance to fix the problem. After termination we delete your Catalog Content as described in the Privacy Policy.
12. Disclaimer
Except as expressly stated in these Terms, the Service is provided "as is" and "as available", and we make no warranties, express or implied, including fitness for a particular purpose, to the extent permitted by law.
13. Limitation of liability
To the extent permitted by law, neither party is liable for indirect or consequential loss, or for loss of profit, revenue, goodwill or data. Our total liability arising out of or in connection with the Service in any 12-month period is limited to the fees you paid us in that period. Nothing in these Terms limits liability that cannot be limited by law, including liability for fraud, wilful misconduct or gross negligence.
14. Indemnity
You will compensate us for claims by third parties arising from your Catalog Content or from your use of the Service in breach of these Terms.
15. Changes to these Terms
We may update these Terms. Each version has a date shown at the top. For material changes we will notify you at least 30 days in advance, by e-mail or in the plugin, and ask you to accept the new version. If you do not agree, you may stop using the Service before the change takes effect.
16. Governing law and disputes
These Terms are governed by the laws of the Republic of Lithuania. Disputes will be resolved by the competent courts of Vilnius, Lithuania, unless mandatory law provides otherwise.
17. Miscellaneous
These Terms are the entire agreement between you and us about the Service. If a provision is found unenforceable, the rest remains in effect. You may not transfer your rights under these Terms without our consent; we may transfer them as part of a transfer of our business. Failure to enforce a provision is not a waiver.
Annex — Data Processing Terms
This Annex is our data processing agreement under Article 28 of the EU General Data Protection Regulation (GDPR). It applies whenever we process personal data on your behalf while providing the Service, and you accept it together with these Terms. If it conflicts with the rest of these Terms on data protection, this Annex prevails.
A1. Roles and scope
For the personal data described in A13 ("Merchant Personal Data") you are the controller and we are your processor. This Annex does not cover data we process as a controller for our own purposes, such as your account, contact and billing data, which our Privacy Policy describes.
A2. Instructions
We process Merchant Personal Data only on your documented instructions, unless EU or Member State law requires otherwise, in which case we tell you before processing unless that law forbids it. Your instructions are these Terms and how you configure and use the Service, for example the catalog you sync and the searches your store sends. We tell you promptly if we believe an instruction infringes data protection law. You are responsible for having a lawful basis for the processing and for informing your shoppers.
A3. Confidentiality
Everyone we authorise to process Merchant Personal Data is bound by confidentiality, by contract or by law.
A4. Security
We apply the technical and organisational measures in A14. We may update them as technology and risks change, as long as the overall level of protection does not decrease.
A5. Sub-processors
You give us general authorisation to engage sub-processors. Those that process Merchant Personal Data are listed in our Privacy Policy. We will tell you about any intended addition or replacement at least 14 days in advance, by updating that list and by e-mail or a notice in the plugin. You may object on reasonable data protection grounds within that period. If we cannot reasonably address your objection, you may end the Service, and we will refund any prepaid fees for the period after it ends. We impose data protection obligations on each sub-processor that are no less protective than this Annex, and we remain liable to you for their performance.
A6. International transfers
Merchant Personal Data is stored in the EU (AWS, Frankfurt). Where a sub-processor processes it outside the European Economic Area, we rely on an adequacy decision (such as the EU–US Data Privacy Framework, where the provider is certified) or on the European Commission's Standard Contractual Clauses.
A7. Data subject requests
If a shopper or other data subject contacts us about Merchant Personal Data, we pass the request on to you without undue delay and do not respond ourselves, except to refer them to you. Taking into account the nature of the processing, we help you with appropriate technical and organisational measures, where possible, to respond to such requests. Search text is not linked to a shopper identity, so we can usually locate it only from the exact text or time you give us.
A8. Personal data breaches
We notify you without undue delay, and in any case within 48 hours, after becoming aware of a personal data breach affecting Merchant Personal Data. As far as known at the time, the notice describes what happened, the categories and approximate volume of data affected, the likely consequences and the measures taken or proposed, and we add further information as it becomes available. Notifying you of a breach is not an admission of fault.
A9. Assistance with your obligations
Taking into account the nature of the processing and the information available to us, we give you reasonable help to meet your obligations under Articles 32 to 36 GDPR as they relate to the Service: security of processing, notifying personal data breaches to the supervisory authority and to affected individuals, data protection impact assessments and prior consultations with supervisory authorities.
A10. Deletion and return
Your catalog stays in your own store and you can re-sync it at any time. When you close your account in the plugin, we delete your live catalog and API keys straight away. Other Merchant Personal Data is deleted within the periods in A13, unless EU or Member State law requires us to keep it. If you want a copy of any Merchant Personal Data we still hold, ask us before closing your account.
A11. Audits
We make available all information reasonably necessary to demonstrate compliance with Article 28 GDPR and this Annex, including answers to reasonable security questionnaires. If that is not enough, or a supervisory authority requires it, we allow and contribute to audits, including inspections, by you or an independent auditor bound by confidentiality. Audits need at least 30 days' written notice, take place at most once in any 12 months (unless a supervisory authority requires more, or after a personal data breach), happen during business hours, are at your cost, and must not disrupt the Service or reveal other customers' data.
A12. Liability and duration
Liability under this Annex is subject to section 13, except where the GDPR does not allow such a limitation. This Annex applies for as long as we process Merchant Personal Data for you and ends once that data has been deleted under A10.
A13. Details of the processing
| Subject matter and duration | Providing the Service, for as long as you use it, plus the deletion periods below. |
|---|---|
| Nature and purpose | Receiving, storing, embedding, matching, ranking, logging and deleting data to return matching products and short AI-written answers to your shoppers, and to keep the Service secure, debug it and improve its search quality. Not used for advertising, not sold, and not used by us to train AI models. |
| Data subjects | Your shoppers; any individuals you name in your catalog. |
| Personal data | Free-text search queries, which may incidentally contain personal data if shoppers type it, and the AI's replies to them; personal data you include in your catalog (normally none). Shoppers' IP addresses are received with direct storefront searches but not stored. No special categories are intended; if a shopper types such information into a query, it is processed only to answer that query. |
| Retention | Live catalog: until removed by sync or account closure. Search logs (query text and AI reply, with e-mail addresses and phone numbers masked): 90 days. Search caches: expire after a few minutes and are then deleted automatically, normally within a few days. Database backup restore points: up to 35 days. |
A14. Technical and organisational measures
- Hosting: AWS, EU region eu-central-1 (Frankfurt).
- Encryption: HTTPS/TLS for all traffic; data encrypted at rest by AWS.
- Tenant isolation: each merchant's data is partitioned by a tenant identifier and every request is limited to the tenant of its API key.
- Access control: separate search-only and catalog-management API keys per store, stored hashed; storefront search uses short-lived tokens bound to the store's origin; provider credentials kept in AWS Secrets Manager; production access limited to the operator's accounts.
- Abuse protection: rate limiting and lockout after repeated invalid API keys.
- Data minimisation: the plugin sends only the query text and search settings, with no shopper identity; e-mail addresses and phone numbers are masked in search logs.
- Resilience: point-in-time recovery for the main database; monitoring and alarms on errors and AI-provider health.
- Retention: automatic expiry of logs and caches.