Skip to content
Subset

Legal

Terms, privacy, refunds, licence

Five documents. Every one of them is a draft written by the people building this, to be replaced by a qualified lawyer before anything is sold — and they are published in that state on purpose, because a policy nobody can read until launch is a policy nobody argues with.

What is still blank

Each of these appears in the documents as a marked gap rather than as a plausible answer, because a plausible answer is the one kind of placeholder a reader cannot spot. This table is generated from the documents, so it cannot fall out of step with them.

BlankWhoseWhy it is blankAppears in
legal entity nameBusinessNo company is registered. Subset is a product name; the counterparty on these terms does not exist yet.Terms of service, Privacy policy
registered postal addressBusinessFollows the entity. Consumer law in most of the EU and the UK requires a real postal address on a trader's terms, so this is not optional at launch.Terms of service, Privacy policy
governing law and venueLawyerDepends on where the entity is incorporated and on the consumer-protection rules that cannot be contracted away for buyers elsewhere. A guess here would be the most expensive sentence on the page.Terms of service, Privacy policy
address for legal noticesBusinessThe apex domain is not registered (#2), so there is no mailbox. Until there is, the issue tracker is the only channel that reaches us and it is not a service address.Terms of service
address for privacy requestsBusinessA data-subject request has a statutory deadline from the day it arrives, so it needs a monitored address rather than whichever inbox exists.Privacy policy, Hosted AI credits — data handling
how to ask for a refundBusinessThere is no checkout (#12) and no support inbox, so there is no route to request one yet. The fourteen-day window itself is decided — see docs/pricing.md.Refund policy
AI providerBusinessFLX-14 has not chosen one, and the provider is a subprocessor a customer is entitled to know by name before they send it their content.Privacy policy, Hosted AI credits — data handling
data regionBusinessThe Supabase project's region is not pinned, and it determines where account data rests — which is the first question any transfer analysis asks.Privacy policy, Hosted AI credits — data handling

Two things in here are not drafts

Most of the wording above will be rewritten. Two of the commitments it describes are decided, written down elsewhere in the repository, and will survive the rewrite — so they are worth separating from the rest.

A lapsed licence never breaks your site. Expiry, cancellation and refund all mean the same thing: no more updates, no more support, no more hosted credits, and a plugin that carries on working with every feature on. The licensing client caches its last good answer and fails open, which is the one rule in this codebase that other decisions are made around.

Fourteen days to change your mind, and a fourteen-day grace period on a failed renewal payment. Both are settled in the pricing decisions, not invented by the refund policy.