Terms of Service

1. What CoreLoop is

CoreLoop makes a business discoverable, understandable and transactable by AI agents. You give us your website; we read it, build a structured profile of your business from it, and then publish that profile in the formats AI agents can read directly — as well as on a page a person can read.

In practice, an account gives you some or all of the following, depending on your plan and on what you switch on:

• A crawl of your website. We fetch a limited number of pages from the address you give us and use an AI model to extract a structured profile — your name, description, category, contact details, locations, services, hours and policies.
• A public CoreLoop Page. A page at your own address on coreloop.so, and on your own custom domain if your plan includes one.
• Machine-readable endpoints for AI agents. A per-business MCP endpoint, an A2A endpoint, an agent card, and a plain-text llms.txt file — the ways an AI agent finds and reads your business.
• A set of tools an agent can call. Agents can look up your business information, list and compare your services, check your opening hours, read testimonials you have selected, and send you an enquiry. Every one of these is read-only except the enquiry.
• A listing in the CoreLoop directory. A public, cross-business directory that agents and people can search.
• Enquiries. Messages sent by an agent or by a visitor to your page arrive in your CoreLoop inbox and by email.
• Analytics. Counts and patterns of how agents are interacting with your profile.

Which of these you get, and any limits on them, depend on your plan. Features described on our website or in the product may change — see Changes to the service and to these Terms.

2. Accounts and organisations

Signing in is handled by our authentication provider. You are responsible for keeping your sign-in credentials secure, for enabling the security features we make available, and for everything done through your account. Tell us promptly if you believe an account has been compromised.

Your work in CoreLoop happens inside an organisation — the container for one business's profile, subscription, data and settings. An organisation has one owner, and may have admins and members depending on your plan.

• The owner binds the organisation. The owner accepts these Terms for it, and controls billing, ownership transfer and deletion. Admins may also manage billing. Members cannot.
• Everyone in an organisation acts for it. Anything a member does in the organisation counts as the organisation's act, and the organisation is responsible for it.
• Ownership can be transferred from within the product. If an owner wants to close an account while other people are still members of their organisation, we ask them to contact us first, so the organisation is not left without an owner.

Agencies and multiple businesses. One account can manage several organisations — one per business you look after. Each organisation carries its own subscription, its own profile and its own data, and these Terms apply to each of them separately.

3. What you promise us about your content

CoreLoop takes what you give us and publishes it to the open internet in a form built for machines. That only works if what you give us is genuinely yours to publish. So these promises are the core of our agreement, and you make each of them every time you publish or update a profile:

• The website is yours to hand us. You own the content on the website you ask us to crawl, or you are authorised to publish it, and publishing it through CoreLoop is lawful.
• Connected systems are yours to connect. If you connect a business system to CoreLoop — a booking system, a point of sale, a business listing, a CRM — you are authorised to connect it and to share the data in it with us and, where you have chosen to publish it, with the public and with AI agents.
• The domain is yours to point at us. If you point a custom domain at CoreLoop, you control that domain and are entitled to direct it to us.
• The information is true. The business information you publish through CoreLoop — including prices, services, availability, locations, policies and any claims about ratings, reviews or accreditations — is accurate and not misleading, and you keep it up to date.
• You are who you say you are. You are not impersonating another business or person, and you are not presenting someone else's business, brand or reputation as your own.
• Other people's personal data has a lawful basis. Where your content names or shows other people — staff, clients, anyone in a photograph or testimonial — you have a lawful basis to publish it and have given those people whatever information the law requires. Our crawl and extraction do not strip personal data out of your content; if it is on your website, it can end up on your profile and in what agents read.
• You have the rights you are giving us. You hold the rights necessary to grant the licence in section 8, including for any images, logos, text or testimonials created by someone else.
• You are acting for a business. You use CoreLoop for business purposes and not as a consumer.

We do not verify these things for you. We do not check who owns a website before crawling it, and we do not audit whether your prices or claims are correct. That responsibility is yours, and section 12 sets out what follows if a third party says you got it wrong.

4. Publishing, and what publishing means

Nothing you create in CoreLoop is public until you publish it. Draft profiles are served to nobody — not to the public page, not to any agent endpoint, not to the directory. Publishing is a deliberate act, and it is the point at which the rest of this section applies.

Three consequences follow, and you should be sure of them before you publish:

• It can be copied and cached beyond our control. Agents, model providers, search systems and other third parties may read, store, cache, index, summarise and reuse your published content. Once they have it, what they do with it is governed by their terms, not ours.
• Unpublishing stops us serving it — it cannot recall copies. When you unpublish, we stop serving that profile from every surface, and our own caches expire shortly afterwards. Copies already taken by third parties are outside our reach, and we cannot make anyone delete them.
• Hiding the human page does not silence the agent endpoints. CoreLoop lets you hide your public page — for example when your own website is your front door. That hides the page from people and search engines. It deliberately does not switch off your MCP endpoint, your A2A endpoint, your agent card or your llms.txt file, which stay live and keep serving agents. If you want to be invisible to agents as well, unpublish the profile or switch off the individual protocol.

Protocols are on unless you switch them off. Agent protocols are active by default for a published profile. You can disable an individual protocol, or an individual tool, from your dashboard, and we will stop serving it. Until you do, assume it is live.

Directory listing is on by default. A published profile is included in the public CoreLoop directory, where agents and people can find it by searching. You can opt out of the directory at any time from your settings; opting out removes the listing but does not unpublish the profile.

Translation. Where your plan includes it and you enable it, we machine-translate your profile text into other languages and publish those translations alongside the original. Machine translation is imperfect; the responsibility for what a translated profile says about your business remains yours, and you can override any translation.

Enquiries you receive. Agents and visitors can send you a message through CoreLoop. We transmit and store those messages so we can deliver them to you, but the relationship is between you and the person who wrote to you: once an enquiry reaches your inbox, you decide what to do with it and you are responsible for handling that person's data lawfully, including replying, retaining and deleting it. If someone asks us to erase their data, we can erase what they sent to us — we do not reach into your inbox, because that data is yours to control.

5. AI-generated content

Much of what appears on your profile is generated or summarised by an AI model from the content of your website and from documents you upload. That is what makes setup fast. It also means it can be wrong.

Re-crawls never publish themselves. If we re-read your website later and the extraction changes, we do not apply those changes to your live profile. We save them for your review and tell you they are waiting. Nothing reaches your published profile until you approve it. The one exception is cosmetic: where you have not set a logo or brand colour, we may fill in the one we found on your site.

We give no warranty about what third-party agents say about you. CoreLoop publishes structured, accurate-as-you-made-it information to agents. What an AI agent then tells a user about your business — whether it quotes you correctly, summarises you fairly, recommends you, or mentions you at all — is entirely outside our control. We do not promise any level of visibility, ranking, traffic, enquiries or bookings from any agent, model or platform.

The same applies in reverse: we are not responsible for the accuracy of anything an agent sends you, including the identity of whoever is behind an enquiry.

6. Acceptable use

You must not, and must not allow anyone else to:

• bypass, disable or attempt to circumvent any rate limit, quota, access control, authentication, kill switch, tier limit or other technical restriction in CoreLoop, or use any means to access the service other than the interfaces we provide;
• reverse engineer, decompile or disassemble any part of CoreLoop, or attempt to derive its source code, other than to the extent that restriction is prohibited by mandatory law;
• use CoreLoop, or any data obtained from it, to train, fine-tune, evaluate or develop a machine-learning model or service that competes with CoreLoop, without our prior written permission;
• scrape, harvest or systematically extract data from the CoreLoop directory or from other businesses' profiles, other than through the published agent endpoints and within their limits;
• publish business information you know or ought to know is false, misleading or deceptive — including invented services, prices you will not honour, fabricated reviews or testimonials, or claimed accreditations you do not hold;
• impersonate any business or person, or present another business's identity, brand, reviews or premises as your own;
• publish another person's personal data without a lawful basis for doing so, or publish content about an identifiable person who has asked you not to;
• publish content that is unlawful, infringing, defamatory, obscene, hateful, or that promotes violence or discrimination;
• upload or transmit malware, or content designed to manipulate, mislead or hijack an AI model or agent that reads your profile;
• use the enquiry channel, or any other messaging feature, to send unsolicited marketing, spam, phishing or abusive messages, or to overwhelm another business;
• interfere with the operation, security or integrity of CoreLoop, probe it for vulnerabilities without our written permission, or place a load on it that degrades it for others;
• resell, sublicense or make CoreLoop available to a third party as a service, except by managing that third party's own organisation as described in section 2;
• use CoreLoop in breach of any applicable law, including sanctions, export control, consumer-protection, advertising and data-protection law.

If you find a security vulnerability, tell us at support@coreloop.so and give us a reasonable opportunity to fix it before disclosing it. We will not pursue you for good-faith research that respects this and does not access, alter or exfiltrate anyone else's data.

7. Plans, billing and taxes

CoreLoop has a free plan and several paid plans. Each plan carries its own set of entitlements — limits on locations, team members and connected systems, and access to features such as automatic re-crawling, custom domains, translation and client reporting. What each plan includes, and what it costs, is shown on our pricing page and confirmed at checkout before you pay.

Payments. Payments are processed by Stripe. We do not receive or store your full card details; Stripe holds them, and we keep only enough to show you which card is on file. Subscriptions are billed in advance for the period you choose, and renew automatically for a further period of the same length until cancelled.

Currency. Prices are shown and charged in the currency confirmed at checkout. Where more than one currency is offered, the currency shown to you is chosen automatically and is the currency you will be billed in.

VAT and other taxes. Prices are exclusive of VAT and any other applicable taxes, which are calculated and added at checkout based on the billing address you supply. Because we sell to businesses, you can enter your VAT identification number at checkout or in the billing portal. Where a valid number is supplied and the reverse charge applies, VAT is accounted for by you rather than charged by us. You are responsible for keeping your billing address and VAT number accurate; if they are wrong, any tax consequence is yours.

Trials. We sometimes offer a free trial. Where we do, the length and terms of the trial are shown at the point you start it, and unless you cancel before it ends, the plan continues as a paid subscription.

Cancelling and changing plan. You can cancel, upgrade or downgrade at any time from the billing portal in your settings — no email to us, no notice period. Cancellation takes effect at the end of the period you have already paid for. After that your organisation moves to the free plan and keeps its data; it does not disappear.

What happens on a downgrade. Moving to a lower plan removes the entitlements that plan does not include, and only those. Nothing is deleted. What changes depends on which entitlement the new plan drops:

• Connected business systems. If the new plan's limit is lower than the number you have connected, the ones over the limit are paused — the oldest connections are the ones kept. Nothing is disconnected or deleted, and your tools fall back to the information already on your profile. If the new plan's limit still covers what you have, nothing is paused.
• A custom domain. If the new plan does not include custom domains, yours is disabled while staying attached, so it redirects to your CoreLoop page rather than breaking. Upgrading again puts it back into the verification queue rather than switching it straight back on — it goes live once the check passes.
• Automatic re-crawling. Every paid plan re-crawls weekly. Only moving to the free plan stops automatic re-crawling altogether, after which you refresh your profile manually.
• The verified badge. Removed only on a move to the free plan. It is not restored automatically if you upgrade again — ask us and we will re-verify you.
• Serving your profile on both your CoreLoop page and your own website. If the new plan does not include it, your profile falls back to the CoreLoop page. Your website address is kept, so re-selecting it after an upgrade is one click — but it is not re-selected for you.

Moving between two paid plans that share an entitlement changes nothing about it. Your data is preserved throughout. Where something is not restored automatically on a later upgrade, ask us and we will sort it out.

Non-payment. If a payment fails and is not resolved, we may downgrade or suspend the organisation. We will tell you before we do.

Refunds. Fees already paid are non-refundable, except where mandatory law requires a refund. Cancelling part-way through a paid period does not entitle you to a refund for the remainder, and we do not refund for periods in which you did not use the service.

Price changes. We may change our prices. A price change affecting your existing subscription takes effect no earlier than your next renewal, so you can always cancel or change plan before it applies to you.

8. Intellectual property

What is ours. CoreLoop — the platform, its software, design, documentation, structure, the CoreLoop name and logo, and everything we create in providing the service — belongs to us and to our licensors. Nothing in these Terms transfers any of it to you.

What we grant you. For as long as your account is in good standing, we grant you a non-exclusive, non-transferable, non-sublicensable, revocable right to access and use CoreLoop for your own business purposes, in accordance with these Terms and the plan you are on.

What is yours. Your content stays yours. That includes your website content, the documents and images you upload, your business information, and the profile text as you have edited and approved it. We claim no ownership in any of it.

The licence you give us. To run CoreLoop for you, we need permission to do specific things with your content. You grant us a worldwide, non-exclusive, royalty-free licence to host, store, copy, back up, reformat, summarise, translate, cache, transmit and publish your content, and to make it available to the public and to third-party AI agents through the surfaces you have published to. That licence exists only to operate and provide the service to you. We do not use it to sell your content, to license it on to anyone as a dataset, or to advertise on it.

The licence ends when you unpublish or delete the content, or when your account is deleted — except that we may keep copies for the short period our backups and caches take to expire, and except that it cannot reach copies already taken by third parties (see section 4).

Feedback. If you send us ideas, suggestions or feedback about CoreLoop, we may use them freely, without restriction, attribution or payment. We would rather hear them than not, so we keep this simple: nothing you tell us about how to improve the product creates an obligation on us.

9. Reporting a listing or content

CoreLoop hosts business listings that its customers publish, and makes them publicly searchable. We do not review them before they go live. If you believe something published through CoreLoop is unlawful, infringes your rights, or breaches section 6, tell us and we will look at it.

Send your report to support@coreloop.so. So we can act on it quickly, please include:

• the address of the page, profile or endpoint concerned — the more precise, the better;
• a clear explanation of what is wrong and why you believe it is unlawful or in breach of these Terms;
• your name and an email address we can reply to (you may omit these if your report concerns certain offences against a person, where the law allows an anonymous report);
• if you are claiming an infringement of your own rights, enough detail to show what those rights are;
• a statement that, to the best of your knowledge, the information in your report is accurate and complete.

What we do with it. We confirm receipt where you have given us contact details, review the report without undue delay, and decide in a diligent, non-arbitrary and objective way. We may remove or restrict access to content, suspend a profile, or take no action. Where we act against content, we give the affected business a statement of reasons — what we did, why, what information we relied on, and how to challenge it — and we tell the person who reported it what we decided.

Challenging a decision. If you are the business affected, or the person who reported the content, and you disagree with our decision, reply to us at support@coreloop.so within six months, setting out why. We will review it again — where practicable with someone who was not involved in the first decision — and tell you the outcome. If we got it wrong, we will put it right, including by restoring content we should not have removed.

Misuse of this route. If someone repeatedly sends us reports that are manifestly unfounded, we may stop processing their reports for a reasonable period after warning them. The same applies to a business that repeatedly publishes manifestly unlawful content.

This section does not limit any other legal remedy you may have, and nothing here requires you to come to us before going to a court or an authority.

10. Suspension, termination and your data

You can leave at any time. Cancel your subscription from the billing portal, and delete your organisation or your whole account from the danger zone in your settings. You do not need our permission and you do not need to give a reason. One case is deliberately blocked: if you own an organisation that still has other members, we refuse to delete your account until ownership is transferred or the other members leave, so that an organisation other people are working in is never orphaned. Transfer ownership from your settings, then delete.

When we may suspend or terminate. We may suspend a profile, an organisation or an account, or terminate these Terms, if: you materially breach these Terms and do not fix it within a reasonable time after we ask; a payment remains unpaid; content published through your account is unlawful or creates a serious risk to others; your use threatens the security, integrity or availability of CoreLoop; or the law requires it. Where the circumstances allow, we will warn you first and give you a chance to put it right. Where they do not — a live legal or security risk — we may act immediately and tell you afterwards.

Deletion, and the seven days before it is final. Deleting an organisation, and deleting an account, are different things. Deleting an organisation takes its page and every agent surface dark immediately — in-browser tools already running in a visitor’s browser stop within minutes as their signed tool lists expire — and schedules the organisation and its data for permanent deletion. Deleting an account does the same only where you are that organisation's sole member; where you are a member of an organisation you do not own, your membership simply ends and the organisation carries on with its data intact.

Where something is scheduled for permanent deletion it is kept for seven days, during which we can still restore it if you ask us — contact us at support@coreloop.so. There is no self-service undo, and a restored profile comes back unpublished, so you choose when it goes live again. After seven days a scheduled job permanently erases the data; at that point we cannot recover it. The erase covers our own database and the providers we hold a delete handle for — stored files, caches, your custom domain, your subscription, and your organisation at our authentication provider. It does not reach every provider we use: our payment provider retains the customer and billing records behind the cancelled subscription for tax and accounting purposes, and our analytics, error-monitoring, background-job and email providers hold their own operational copies. Our audit records are kept but stripped of the link to your organisation.

Getting your content out. Your content is visible to you in the dashboard for as long as your account exists, and your published profile is readable from your own public page and endpoints, so take what you need before you delete. If you want help extracting your data, ask us before you delete and we will do what we reasonably can. We do not currently offer a one-click export.

Deletion does not recall published copies. As in section 4, third parties who have already read your published profile may still hold copies. Deleting your account stops us serving it; it does not reach them.

The following survive the end of these Terms:

• section 3 (your promises about content), for anything published before termination;
• section 6 (acceptable use), so far as it restricts continuing conduct;
• section 8 (intellectual property), including the feedback licence;
• section 11 (disclaimers) and section 12 (liability and indemnity);
• section 14 (governing law and forum) and section 15 (general terms);
• any fees that fell due before termination;
• any other provision that by its nature is intended to survive.

11. What we do and do not promise

We work hard on CoreLoop and we want it to work for you. We are also being straight with you about what we can and cannot guarantee.

Except where these Terms say otherwise, CoreLoop is provided "as is" and "as available". To the fullest extent permitted by law, we exclude all warranties, conditions and representations that are not expressly set out here, whether implied by statute, common law or otherwise — including implied warranties of merchantability, satisfactory quality, fitness for a particular purpose and non-infringement.

In particular, we do not promise that:

• the service will be uninterrupted or error-free. We do not offer a service-level agreement or an uptime commitment. Our status page is published for information and is not a promise about availability;
• AI extraction will be accurate. What a model reads from your website may be wrong or incomplete — which is why nothing is published until you approve it (section 5);
• any agent will find, use or fairly represent your business. We publish to open protocols; we do not control who reads them, whether an agent recommends you, or what it says about you;
• you will receive enquiries, bookings, traffic or revenue of any kind, or any particular result from using CoreLoop;
• third-party services will keep working. CoreLoop depends on services we do not control — hosting, payment, email, AI models, crawling, connected business systems and the agents themselves. If one of them changes, degrades or stops, parts of CoreLoop may too;
• we can protect you from every risk of publishing. We take reasonable technical measures, including checks on the addresses we crawl and filtering designed to reduce prompt-injection risk, but these are safeguards, not guarantees, and part of the fetching is performed by a third party on its own infrastructure.

Nothing in this section limits any warranty or right that cannot be excluded under mandatory law.

12. Limitation of liability, and indemnity

This section allocates risk between two businesses. It is deliberately clear about where our exposure stops, because the price of the service reflects it.

Losses we exclude. To the fullest extent permitted by law, neither party is liable to the other for indirect, incidental, special, punitive or consequential loss, or for loss of profits, revenue, business, contracts, opportunity, anticipated savings, goodwill or reputation, or for loss or corruption of data — in each case however caused, and whether or not the loss was foreseeable.

What the cap does not cover. The exclusions and the cap above do not apply to: death or personal injury caused by negligence; fraud or fraudulent misrepresentation; wilful misconduct or gross negligence; your obligation to pay fees that are due; your indemnity below; or any other liability that cannot lawfully be excluded or limited.

Your indemnity. You will defend us against, and indemnify us for, any third-party claim, and any resulting loss, liability, damages, fine, penalty and reasonable legal cost, arising out of: the content you published through CoreLoop; your breach of the promises in section 3; your breach of section 6; your use of a custom domain; any business system you connected or data you made available through it; or your handling of personal data belonging to people who contacted you through CoreLoop.

The carve-back. This indemnity does not apply to the extent the claim arises from our own negligence, our wilful misconduct, or our breach of these Terms.

How it works in practice. We will tell you promptly about any claim we want to be indemnified for, let you control the defence and settlement (using competent counsel), and give you reasonable cooperation at your cost. You will not settle in a way that admits fault on our part, imposes an obligation on us, or fails to release us fully, without our written consent, which we will not unreasonably withhold. We may participate in the defence with our own counsel at our own expense.

13. Changes to the service and to these Terms

Changes to the service. CoreLoop evolves — the protocols it speaks are themselves new and moving. We may add, change, or withdraw features, and we may change how a feature works.

Changes to these Terms. We may update these Terms — for example to reflect a new capability, a change in the law, or a change in how the service works. A change takes effect when we publish it here, under a new effective date and version number. We do not currently send advance notice of a change, and we would rather say so than promise a notice we do not send: check the effective date at the top of this page.

If you do not accept a change. Cancel. You can do that at any time from the billing portal, with no notice period, and your subscription ends at the end of the period you have already paid for. Continuing to use CoreLoop after a change is published counts as accepting it.

We may also make an immediate change without prior notice where the law requires it, or where a delay would create a security or legal risk. If we do, we will tell you as soon as we reasonably can.

14. Governing law and where disputes are heard

These Terms, and any dispute or claim arising out of or in connection with them or their subject matter (including non-contractual disputes), are governed by the laws of Finland, excluding its conflict-of-law rules and excluding the United Nations Convention on Contracts for the International Sale of Goods.

The District Court of Helsinki (Helsingin käräjäoikeus), Finland, has exclusive jurisdiction to settle any such dispute or claim. Either party may, however, apply to any court of competent jurisdiction for urgent interim or injunctive relief to protect its intellectual property or confidential information.

Before starting proceedings, we would rather talk. Write to us at support@coreloop.so and we will make a genuine attempt to resolve the matter with you. This is an invitation, not a precondition — it does not stop either of us going to court.

15. General terms

• Entire agreement. These Terms, together with the Privacy Policy and Cookie Policy and anything we agree with you in writing, are the whole agreement between us about CoreLoop, and replace any earlier understanding. Neither of us relies on any statement not set out in them, though nothing here excludes liability for fraudulent misrepresentation.
• Order of precedence. If a written agreement signed by both of us conflicts with these Terms, that agreement prevails for the conflicting part only.
• Severability. If any provision is found unenforceable, it is modified to the minimum extent needed to make it enforceable, or if that is not possible, severed. The rest of these Terms continues in force.
• Waiver. If either of us does not enforce a right, that is not a waiver of it, and does not prevent enforcement later.
• Assignment. You may not assign or transfer these Terms without our written consent, except to a successor of your business. We may assign them to an affiliate, or in connection with a merger, acquisition or sale of assets, provided the assignee assumes our obligations to you.
• Subcontracting. We use third-party providers to run CoreLoop — hosting, storage, payment, email, AI models, crawling and analytics among them. We remain responsible to you for the service. Which providers handle personal data, and where, is set out in the Privacy Policy.
• Force majeure. Neither of us is liable for a failure or delay caused by something beyond our reasonable control — including internet or hosting failure, the failure or withdrawal of a third-party service we depend on, cyber attack, power failure, natural disaster, war, epidemic, strike or governmental action. The affected party will tell the other and do what it reasonably can to limit the effect.
• Notices. We give notices to the email address on your account or through the product; it is your responsibility to keep that address current. You give notices to us at support@coreloop.so.
• No partnership. Nothing in these Terms creates a partnership, joint venture, agency or employment relationship between us.
• Language. These Terms are published in English, and the English text is the operative version.

16. Contact us

CoreLoop is operated by Melange Oy. If anything here is unclear, or you want to raise something with us, write to us — a person reads it.

• Company: Melange Oy
• VAT / Business ID: FI27760448
• Registered address: Pitkäkalliontie 9, 01800 Klaukkala, Finland
• Email: support@coreloop.so
• Governing law: Finland
• Forum: District Court of Helsinki, Finland