Terms of Service

1. Agreement and scope

These draft Terms of Service (the Terms) are intended to form an agreement between the legal person providing Tileflow (Tileflow, we, or us) and the person or organisation accessing the Service (Customer or you).

Before these Terms become effective, this paragraph must identify the provider's full legal name, legal form, NIF/VAT number, registered address, and any applicable registry details. Tileflow currently expects the provider to be established in Madrid, Spain. If you are considering a paid pilot and your order documents do not identify the provider, price, and service scope, do not purchase or submit business data; contact hello@tileflow.dev first.

These Terms cover tileflow.dev, the hosted Tileflow API and CDN, the dashboard, command-line tools, software development kits, documentation, static-map rendering, and related preview services (together, the Service). They apply to a paid pilot only when incorporated into a signed order form or accepted through a versioned electronic flow that records the accepting account, organisation, version, and time. Merely viewing this draft does not create an agreement.

If documents conflict, a data processing addendum controls for personal-data processing, an order form controls commercial scope and price, a private-preview schedule controls preview conditions, and these Terms control everything else. Product pages and marketing copy are descriptive only and do not expand a signed service commitment.

2. Accounts and authority

The Service is intended for businesses, professionals, and developers acting in a business capacity. It is not directed to consumers or anyone under 18. If you use Tileflow for an organisation, you represent that you have authority to bind that organisation.

Hosted accounts currently use an approved Google account. You must provide accurate account information, keep access to that account secure, and promptly tell us about suspected unauthorised access. One person must not share an individual login with another person. The account holder remains responsible for the approved account and for requesting removal when access is no longer required. Additional users are available only when Tileflow provisions them in writing.

3. The Service and preview status

Tileflow provides code-first tools to create, validate, preview, deploy, and deliver MapLibre map styles. Hosted preview access includes one workspace, one project, and one production style by default, together with API credentials, map delivery through a CDN, basic usage information, and server-side static maps where enabled. Any additional workspace, project, style, user, or capability must be listed in the order form.

The Service is pre-release. Features, interfaces, map data, limits, and documentation may change. Preview functionality may contain defects and is not covered by a service-level agreement unless a separate signed agreement expressly says otherwise. We will use reasonable care in operating a paid pilot and, where practical, give advance notice of a material change that reduces the agreed pilot scope.

Do not use the Service for emergency response, autonomous control, safety-critical navigation, dispatch of emergency services, or any situation where an error, delay, or outage could reasonably cause death, personal injury, material property damage, or environmental harm.

4. Service and SDK licence

Subject to these Terms and any applicable fees, Tileflow grants Customer a limited, non-exclusive, non-transferable, worldwide right during the applicable term to:

• access and use the hosted Service for Customer's internal business purposes;
• install, run, copy, and modify Tileflow SDK and CLI packages only as reasonably necessary to integrate Tileflow into Customer's own websites and applications;
• bundle and distribute the SDK only as a non-standalone part of those Customer applications; and
• allow employees and contractors under Customer's control to perform that integration and allow end users to view maps within those applications.

This licence does not permit Customer to resell Tileflow as a standalone service, provide third parties with direct access to the dashboard or private APIs, redistribute bulk map data, create a competing hosted map-data service, remove rights notices, or bypass technical restrictions. Mandatory rights under applicable law and third-party open-source licences remain unaffected.

Software or assets identified as third-party or open source remain governed by their own licence terms. If a specific Tileflow package includes a licence file that grants broader rights, that file controls for the package only.

5. Customer Content

Customer Content means map configurations, style JSON, tilesets, PMTiles archives, metadata, attribution, overlays, markers, coordinates, and other material Customer submits to the Service. Customer keeps all ownership rights in Customer Content.

Customer grants Tileflow and its service providers a non-exclusive, worldwide, royalty-free licence to host, copy, validate, transform, render, cache, and deliver Customer Content only as needed to operate, secure, and support the Service for Customer's account. Tileflow will not use Customer Content to train a general model or improve a product for other customers without separate permission. This licence ends when the Content is deleted from active systems, subject to ordinary cache expiry, legally required retention, and residual provider backups.

Customer represents that it has all rights and lawful bases needed to submit and use Customer Content, including any personal data, intellectual property, or third-party map data it contains. Customer must maintain accurate attribution and must not submit content that is unlawful, malicious, deceptive, or infringes another person's rights.

During the private preview, Customer must not upload personal data or identifiable precise locations in Customer Content unless Tileflow agrees to the use case in writing and the parties first execute an appropriate data processing agreement. Special-category data, medical or biometric data, credentials, financial account data, children's data, and datasets intended to track identifiable people are prohibited unless a later written agreement expressly authorises them.

6. Public map delivery

Tileflow is designed to deliver map assets to end-user applications. Published styles, tiles, sprites, glyphs, and generated static-map images may be reachable through public, cacheable URLs. A static render request requires a private server-side credential, but the resulting image URL may be public, content-addressed, and cached as an immutable asset for at least one year. Domain allowlists are an abuse control, not authentication or a confidentiality boundary.

During the preview, Customer must not place personal data, identifiable coordinates, secrets, regulated data, or confidential material in public delivery assets. Customer is responsible for its own application's notices and permissions for any later approved use of personal data.

7. Map data and attribution

The Service may include map data, styles, fonts, icons, or other materials supplied under third-party terms. OpenStreetMap/OpenMapTiles-based maps require visible attribution to OpenStreetMap contributors. Customer must also preserve OpenMapTiles attribution and every additional notice emitted in Tileflow styles or metadata, including notices required by any terrain, font, icon, or dataset provider.

Third-party map data is not owned by Tileflow and may be incomplete, outdated, inaccurate, or unavailable. Tileflow does not warrant road access, boundaries, addresses, terrain, routing suitability, or factual accuracy. Customer must independently assess whether map data is appropriate for its use case.

Unless expressly allowed in writing or by the applicable data licence, Customer may not scrape, bulk-download, reconstruct, or redistribute the underlying map dataset outside its permitted applications.

8. Acceptable use

Customer and its users must not use the Service to:

• break the law or violate intellectual-property, privacy, or other third-party rights;
• identify, monitor, discriminate against, or make high-impact decisions about people based on protected traits or sensitive location data;
• upload malware, probe vulnerabilities, disrupt infrastructure, or access another tenant;
• evade rate limits, usage controls, attribution, access restrictions, or billing controls;
• share, sell, publish, or embed private API credentials in client-side code;
• send excessive automated traffic or use the Service for denial-of-service activity; or
• misrepresent map data as authoritative for a safety-critical or regulated decision.

We may investigate suspected abuse and take proportionate steps to protect users, third parties, and the Service. We will not access Customer Content except as necessary for those purposes, to support Customer, to comply with law, or as otherwise permitted by these Terms.

9. Credentials and limits

Customer must keep API keys and device credentials confidential, use the narrowest practical permissions, set expirations where available, rotate exposed credentials, and notify us promptly of suspected compromise. Private keys are for trusted servers and development tools, not browser bundles or public repositories.

Use of the Service is subject to technical and agreed limits, including rate, rendering, storage, file-size, and traffic limits. Limits for a paid pilot must be stated in the order form or written pilot documentation. We may rate-limit or reject traffic that exceeds those limits. Tileflow does not charge usage overages unless Customer has expressly agreed to the applicable metric and price in writing.

10. Fees and taxes

Private-preview fees, currency, service period, and payment schedule are set out in the applicable order form or invoice. If no due date is stated, an undisputed invoice is due 30 days after receipt. Prices exclude VAT and similar transaction taxes unless stated otherwise. Customer is responsible for taxes it is legally required to pay, excluding taxes on Tileflow's income.

A pilot does not automatically renew, and Tileflow will not impose metered charges or overages unless a signed order expressly provides for them. Fees already earned are non-refundable except where required by law or stated in the order form. If Tileflow ends a prepaid pilot for convenience and Customer is not in breach, Tileflow will refund the unused portion of the prepaid fee.

11. Support and changes

Preview support is provided on a reasonable-efforts basis through the contact channel stated in the order form or through hello@tileflow.dev. Response targets, service credits, uptime commitments, and priority support apply only when included in a separate signed agreement.

We may update the Service to improve security, reliability, or functionality. For a paid pilot, we will make reasonable efforts to notify Customer before a material discontinuation and to provide a practical transition or export path. Emergency security changes may take effect immediately.

12. Data protection and confidentiality

Our Privacy Policyexplains how Tileflow handles personal data as a controller. Tileflow may process personal data in Customer Content on Customer's behalf only after the parties execute a data processing addendum that satisfies applicable law and describes the approved use case. Until then, Customer must not submit personal data or identifiable precise locations to the Service. Customer remains responsible for its privacy notices, lawful basis, end-user choices, and lawful instructions.

Each party may receive non-public business, technical, or security information from the other. The receiving party will use that information only for the agreement, protect it with reasonable care, and disclose it only to personnel and service providers who need it and are subject to confidentiality duties. These obligations do not cover information that is public without breach, already lawfully known, independently developed, or lawfully received from another source.

If disclosure is legally required, the receiving party may disclose the minimum required information and, where legally permitted, will give prior notice. Confidentiality obligations last three years after disclosure; trade secrets remain protected for as long as they qualify as trade secrets under applicable law.

13. Suspension and termination

We may suspend affected credentials or access when reasonably necessary to address a security incident, unlawful activity, material breach, risk to other tenants, or overdue undisputed fees. Where practical, we will notify Customer, limit the suspension to the affected part, and restore access after the issue is resolved.

Either party may terminate a paid pilot for a material breach that is not cured within 15 days after written notice. A party may terminate immediately if the breach cannot be cured, if continued use creates an urgent legal or security risk, or if the other party becomes insolvent. Customer may stop using free preview services at any time.

At termination, Customer must stop using hosted credentials and pay accrued fees. If Customer requests an export before termination or within 30 days afterward, we will make reasonable efforts to provide Customer Content in an existing, commonly readable format. Deletion is handled manually during the private preview and follows the Privacy Policy. Public caches and provider backups may expire later than active storage.

14. Warranties

Tileflow warrants that it has authority to enter into an applicable order form and will provide a paid pilot using reasonable professional care. Customer's exclusive remedy for a material breach of that warranty is re-performance of the affected Service or, if that is not reasonably possible, termination and a proportional refund of prepaid fees for the affected period.

Except for that limited warranty and to the maximum extent permitted by law, the preview Service, map data, SDKs, and documentation are provided as is and as available. We do not promise uninterrupted operation, error-free output, a particular latency, compatibility with every environment, or that map data is complete, current, or fit for a particular purpose.

15. Liability and claims

To the maximum extent permitted by law, neither party is liable under these Terms for lost profits, lost revenue, loss of goodwill, or indirect, incidental, special, exemplary, consequential, or punitive damages, even if advised they were possible.

Except for the higher cap below, each party's total aggregate liability arising from the Service or these Terms is limited to the amount Customer paid or owed for the Service during the 12 months before the event giving rise to the claim. For free use, Tileflow's aggregate liability is limited to EUR 100. Liability for breach of confidentiality, breach of data-protection obligations, or an indemnity expressly stated below is limited to twice that general cap. These limits do not apply where liability cannot legally be limited, including fraud, wilful misconduct, or death or personal injury caused by negligence.

Customer will defend and indemnify Tileflow against a third-party claim that Customer Content infringes that third party's rights or that Customer's use materially breaches the Acceptable Use section. Tileflow will defend and indemnify Customer against a third-party claim that the unmodified Service, when used as authorised, infringes an intellectual-property right in the European Union. Tileflow has no obligation for a claim caused by Customer Content, third-party materials, unauthorised use, or a combination not supplied or required by Tileflow.

The indemnifying party may control the defence with reasonably qualified counsel. The other party must promptly notify it and provide reasonable cooperation at the indemnifying party's expense. No settlement may admit fault by, impose a non-monetary obligation on, or require payment from the other party without that party's written consent, not to be unreasonably withheld. For an infringement claim, Tileflow may obtain continued rights, modify or replace the affected Service, or terminate it and refund unused prepaid fees.

16. General terms

Tileflow and its licensors own the Service, SDKs, documentation, designs, and marks, except for Customer Content and third-party materials. Customer may provide feedback voluntarily. Tileflow may use that feedback without restriction or payment, but will not identify Customer publicly or disclose Customer's confidential information through that use.

These Terms, the applicable signed order form, private-preview schedule, and data processing addendum are the complete agreement about the Service and replace prior discussions on that subject. The Privacy Policy is a notice, not part of that commercial agreement. Customer may not assign the agreement without our written consent, except as part of a merger, reorganisation, or sale of substantially all relevant assets. Tileflow may assign it on the same basis, with notice to Customer.

Neither party is liable for delay caused by events beyond its reasonable control, except for payment obligations. A failure to enforce a term is not a waiver. If a term is unenforceable, it will be adjusted only as much as necessary and the remainder stays effective.

We may update these Terms for future free use by posting a new effective date. Material changes to an active paid pilot apply only with Customer's agreement or at the next renewal, unless a change is required by law or addresses an urgent security risk.

Accrued payment obligations and provisions concerning ownership, confidentiality, data return or deletion, disclaimers, liability, indemnities, disputes, and any other term that by its nature should survive will remain effective after termination.

Subject to confirmation of the provider's identity and legal review, the proposed governing law is the law of Spain and the proposed exclusive forum is the courts of Madrid, Spain, except where mandatory law requires another forum. Before filing a claim, each party will make a good-faith effort for 30 days to resolve the dispute directly.

17. Contact

Legal notices and questions about these Terms can be sent to hello@tileflow.dev. Notices to Customer may be sent to the account email or contact stated in the applicable order form. Before these Terms become effective, this section must include Tileflow's legal name, postal notice address, and when notices are considered received.