Attunr terms of service

Draft. Written 2026-10-17 and revised the same day after the legal review in lawyer-review.md. Not in force and not published.

LICENSED LAWYER: marks a point where a licensed lawyer's sign-off is still needed before publishing. BUILD: marks a promise that is only true once a planned build step ships (step numbers are from docs/relay-product-plan.md). If that step isn't live when the first customer signs, change the clause. Words in [square brackets] are placeholders.

Attunr is the cloud edition of Relay, Figured Media's own sales CRM. In the code it is still called Relay. These terms describe what the code does, with file references in docs/legal/README.md.

1. Who we are

Attunr is a sales CRM made and sold by [legal name of the corporation], doing business as Figured Media ("we", "us", "our"). We are a corporation based in Ottawa, Ontario, Canada.

• Registered office: [registered office address].
• Business number: [business number].
• LICENSED LAWYER: the US trademark filing for ATTUNR must be made by a US-licensed attorney, within 6 months of the Canadian filing to keep its date (lawyer-review.md, point 5).

You can reach us at hello@attunr.com or [mailing address].

2. What these terms cover

These terms are an agreement between us and the business that opens an Attunr account ("you", "the customer").

• Attunr is for business use only. It isn't sold to consumers. When you sign up, you confirm you're buying Attunr for a business.
• The person who signs up must be an adult (the age of majority where they live) and have the right to bind the business.
• Attunr is sold to businesses in Canada and the US. It isn't open to businesses in Quebec yet. It will open once these documents are available in French, and Quebec businesses will be offered the French version first.

These documents together make up the agreement. Each one is linked from the sign-up page, and you agree to all of them when you sign up:

1. These terms.
2. The Data processing agreement.
3. The Acceptable use policy.
4. Cancellation and refunds.
5. The Subprocessor list.
6. The plan, price and limits shown when you sign up or change plans.

The Privacy policy explains how we handle information about you and your team.

If two of them disagree, the data processing agreement wins on anything about personal information, and these terms win on everything else.

BUILD: the sign-up asks for the business's province or state, holds Quebec businesses on a waitlist, has the owner confirm the account is for a business, and names and links every document above next to the box they tick (step 3.3).

3. Accounts and people

Kinds of account

• Company account. One workspace for your sales team.
• Agency account. An agency workspace plus one workspace for each client business you manage. BUILD: agency mode is Stage 4. Until it opens, only company accounts are sold.

Roles

• Owner. The person who opens the account. The owner controls billing, seats, settings and who sees money, and can close the account. The owner always sees everything in the workspace.
• Leadership. Can change settings, sequences and the team.
• Managers and members. Work their own leads, and a manager also sees their team's.

Seats and sign-in

• Each seat is one named person. Don't share a sign-in between people.
• You are responsible for everyone you invite and for what they do in Attunr.
• Sign-in uses a password of at least 12 characters or a passkey, with a bot check (Cloudflare Turnstile) on the sign-in page. Sessions end after 30 days, or after 7 days without use.
• Keep sign-ins secret. Tell us at once at hello@attunr.com if you think someone else has used one.

Agency accounts and client workspaces

BUILD: Stage 4.

• The agency is our customer for every client workspace it opens, and the agency pays for them. We follow the agency's instructions for those workspaces.
• As between the agency and its client, their own contract decides who owns the data in a client workspace.
• The agency promises that it has its client's written permission to keep the client's data in Attunr, and a contract with the client that allows us to act as its subprocessor.
• A client's people see only their own workspace. They never see the agency's workspace, its billing or any other client.
• Agency staff see only the client workspaces they are given.
• The agency agrees now that, when its account ends or it closes a client workspace, we may email that workspace's client users 14 days before we delete it, and let the client take an export or move the workspace into its own Attunr account.
• Clients of an agency aren't parties to this agreement and can't enforce it, except for the notice and move in the point above.

4. Trial, plans and limits

Trial

• New accounts get a free trial for the length shown at sign-up.
• When the trial ends, the account becomes read only until you choose a plan. If you don't choose one within 30 days, we delete the account as described in Cancellation and refunds.

Plans and limits

Each plan has limits. They are shown on the plan page and in the account's billing screen:

• Seats.
• Leads you can keep.
• Site checks a day.
• Pitch pages a month.
• AI writing and paid search a month.
• Calling.

What happens at a limit:

• AI writing. Drafts and wrap-ups fall back to Attunr's templates and plain rules until the next month.
• Paid search. Market scans, rank checks and pitch-page searches wait until the next month. You can still check a lead on Google yourself with Check Google (section 7.1).
• Site checks and pitch pages. New ones wait until the next day or month.
• Seats and leads. You can't add more until you remove some or change plan.

We never charge you more than your plan price unless you choose to.

AI writing and paid search are included in every plan and run through our own accounts with those providers. You don't need your own keys for them.

Calling

Calling runs on your own Telnyx account. You pay Telnyx directly, and Telnyx's terms apply. Attunr's plans don't include calling minutes.

Fair use

If an account's use slows Attunr down for other customers, we may slow that account's background work (site checks, imports, pitch pages) and will tell you why.

5. Paying

• We bill through Stripe, in Canadian dollars for customers in Canada and US dollars for customers in the US.
• You pay monthly or yearly, in advance. Plans renew automatically until you cancel.
• When you choose a yearly plan, you tick a box saying it renews every year until you turn renewal off. We email the owner 45 days and again 20 days before it renews, with the date, the amount and a link to turn renewal off. You can turn renewal off at any time up to the renewal date.
• Adding a seat bills the part of the current period that's left. Removing a seat takes effect at the next renewal.
• When you choose a plan, you let us charge your payment method through Stripe at the start of each period until you cancel.
• We never see or store your card number. Stripe does.
• Prices don't include tax. We add GST or HST at the rate for your billing address in Canada, and provincial sales tax in British Columbia, Manitoba and Saskatchewan where we're registered to collect it. A business outside Canada that isn't registered for GST/HST pays no Canadian tax. In the US, we add state sales tax where we're registered to collect it. If your business is exempt from a tax, send us proof and we'll stop charging it.
• BUILD: GST/HST registration and Stripe Tax before the first sale (lawyer-review.md, point 7).
• If a payment fails, Stripe tries again. The steps after that are in Cancellation and refunds.

Price changes

We tell you at least 30 days before a price change, by email to the owner. The new price starts at your next renewal after that. A launch or founding price lasts as long as its offer says.

6. Your data and our software

Our software

• Attunr, its code, design and templates, and everything we build, belong to us and our licensors.
• While your plan is paid (or your trial runs), we give your team the right to use Attunr for your business, under these terms. The right isn't exclusive and you can't transfer it.
• If you send us ideas or suggestions, we may use them without owing you anything.

Your data

"Your data" means everything you and your team put into Attunr or that Attunr gathers for you: leads, companies, notes, emails logged on leads, call recordings and transcripts, voice notes, proposals, pitch pages, files and settings.

• You own your data.
• You let us use it only to run Attunr for you. That means storing it, copying it for backups, processing it and showing it to the people you allow, as the data processing agreement says.
• We don't sell your data. We don't use it to advertise. We don't use it to train AI models.
• You decide what goes into Attunr and why. You must have a lawful reason to keep each person's information and give them the notices the law requires. This includes prospects, your clients and your clients' customers.
• Don't put health information, bank or card numbers, government ID numbers or information about children into Attunr. It isn't built for them.
• Mailbox passwords and keys you connect are stored encrypted (AES-256-GCM) and are never sent back to a browser.
• We keep counts and technical records of how Attunr is used, for example how many site checks ran and how long pages took. We use them to run and secure Attunr, enforce plan limits, bill and decide what to improve. They never include the content of your records.

7. How Attunr gathers information from outside

Attunr's prospecting tools read public information about businesses. You choose when to use them, and you are responsible for how you use what they find.

7.1 The browser extension

• The extension does nothing until you press its button (or Alt+Shift+R). Then it reads the one page you are on. It takes the business name, contact links, phone numbers, town, social links and the page's business markup, and shows you a form. Nothing is saved until you add it.
• LinkedIn. When you press the button on a LinkedIn profile, it reads that one profile's name, headline, company, location and address, and saves them only if you press "Add as lead". It never reads search results, lists, connections or messages, and it reads nothing when a profile merely opens.
• Google. A lead's page has a "Check Google" button. It opens that lead's search in a normal tab you can see. Press the extension's button on that tab to send the results page to Attunr.
• It doesn't read other tabs, your browsing history or pages you don't act on. It uses a personal token tied to your seat.
• Google's and LinkedIn's own terms limit add-ons and automated use, and LinkedIn's limit add-ons that copy profile data. Your use of those sites, and of every site you visit, stays under their terms, and the risk to your own Google or LinkedIn account is yours.
• BUILD: the Attunr build of the extension drops the automatic background Google searches, adds the Check Google button, and reads LinkedIn profiles only on a press (scripts/build-extension.mjs --cloud, extension/background.js, extension/content.js).

7.2 Site checks

• Attunr's servers load a business's public website: up to 16 pages, the homepage on a phone, and a phone speed test through Google PageSpeed. They also read its security certificate and public domain records.
• Only public pages are read. Attunr refuses private and internal addresses.
• Results are kept while the business has a live lead and deleted 30 days after it doesn't. Screenshots are kept for the 1,000 most recent sites.

7.3 Pitch pages

• A pitch page is a public web page about one business, built from its own public website. It shows laptop and phone screenshots of their site, a film of it loading on a slow phone, the problems marked, where they rank for two searches and which businesses rank above them, and what you would fix first.
• Anyone with the link can open it without signing in. It asks search engines not to list it.
• Every pitch page:
  • credits the screenshots: "Screenshots of [domain], taken [date], shown here to review the site";
  • shows when and how each finding was measured, and labels your advice as advice;
  • says near the top that your business can see when the page is opened and how far it's read, with a link to your privacy notice;
  • has an "Ask to take this page down" link, which tells you.
• Attunr records when the page is opened, how far it is read, the type of browser, reactions and call-back requests, and tells you. When the lead's address is in Quebec, the page records nothing until the visitor taps OK on the tracking line.
• You are responsible for what your pitch pages say. Keep them true and fair. Don't add figures for lost sales or customers unless you measured them.
• Take a page down at once when you choose to, and within 5 business days when the business asks.
• BUILD: the credit line, the measured-on line, the tracking line with the Quebec rule, and a way to take a page down (none of these exist today). Add them before launch.

7.4 Market scans and searches

• Attunr searches for words like a trade and a city ("snow removal Ottawa") through the Brave Search API and DataForSEO. These are included in your plan up to its monthly limit.
• Keyword ideas and demand charts come from DataForSEO too, inside the same limit.
• Attunr only searches through services it has a licence for. It doesn't read public search result pages or autocomplete by software. When the monthly limit is used up, searches wait until the next month.
• BUILD: today the code also reads Brave's, DuckDuckGo's and Bing's public result pages, Google, Bing, DuckDuckGo and YouTube autocomplete, and Google Trends (server/marketing/keywords.mjs). The Attunr build turns all of those off.

7.5 Enrichment and email finding

• Attunr reads a company's website, its public DNS records, public job boards and Wikidata to fill in company details.
• It can guess a person's likely email address from common patterns (like first.last@company) and, if you connect your own Hunter account, check whether the mailbox exists.
• A guessed address is not permission to email someone. In Canada, a lead whose address came from the finder can't get sales email until you record another reason you may email them. See the Acceptable use policy. BUILD: the "why can we email" field, required in that case.

7.6 Doorstep day

To plan visits, Attunr sends business street addresses to a map address service named in the subprocessor list, and caches the answer.

BUILD: today it uses OpenStreetMap's free public server, whose rules ask for no personal data and at most one request a second. A sole trader's business address may be their home, so Attunr moves to a paid service with a data agreement, or its own server.

8. Email

• Attunr sends email through your own mailbox (IMAP and SMTP), as you, and files a copy in your Sent folder. Your mail provider's terms and limits apply. Your domain's sending reputation is yours.
• Every few minutes Attunr reads new mail to or from your leads and logs it on the lead's timeline. It doesn't copy any other mail into Attunr.
• The Mail page shows your whole mailbox, read live from your provider. It isn't stored in Attunr, except files you attach to a message you are sending, which are kept for up to 24 hours.
• Sales email (sequences, autopilot, pitch-page emails and new emails to leads) gets a footer with "Sent by [your name] for [your business]. This is a sales email.", your mailing address and an unsubscribe link, plus one-click unsubscribe headers. Attunr won't send sales email until you add a mailing address. BUILD: the "Sent by" line.
• When a lead unsubscribes, Attunr blocks further sales email to them at once. Replies to them still work. The unsubscribe link keeps working with no end date.
• Each mailbox has a daily send limit (80 by default) to protect your domain. You can raise it.
• Don't remove the footer or send around it. See the Acceptable use policy.

9. Calling, recordings and transcripts

Calling

• Calling runs on Telnyx. You buy and own your phone numbers. Attunr doesn't buy or release numbers. Telnyx, not Attunr, provides your phone service.
• Built-in guards:
  • calling hours in the other person's time zone (9:00 to 21:30 on weekdays and 10:00 to 18:00 on weekends in Canada, 9:00 to 20:00 in the US);
  • a do-not-call list that follows the phone number, not just the lead;
  • daily dial caps per number;
  • a daily spend limit and a per-minute price cap;
  • US calling off until you turn it on;
  • Canada and the US only.
• These guards help. They don't promise that your calling follows the law.
• Attunr doesn't check numbers against Canada's National Do Not Call List or the US Do Not Call Registry.
• No emergency calls. Attunr calling can't reach 9-1-1 or other emergency services. Call them from a phone. The call screen says so before your first call.

Recordings

• Recording is off until the owner turns it on in calling settings.
• When it's on, the rep tells the other person first. At the start of each call the rep says: "This call is recorded so I have good notes. Is that OK?" (or "recorded and transcribed" when the live transcript is on). Recording starts only when the rep presses They agreed. Without that, the call goes on unrecorded.
• Or Attunr says it. The owner can turn on a spoken notice and set the purpose people hear. Attunr then plays it as the other person answers, or as you pick up a call they made to you: "This call is recorded for our notes". Nothing is recorded before the notice ends.
  • Calls between two Canadian numbers: recording starts when the notice ends.
  • Any other call (US numbers, other countries, a caller who hides their number): the notice ends with "Is that OK?" and recording starts only when the rep presses They agreed.
• Stop recording. The call screen has a Stop recording button. It stops the recording and deletes what was recorded on that call. Use it whenever someone objects, then carry on or end the call.
• Where recordings are. Recordings stay in your own Telnyx account. Attunr plays them from there and doesn't keep its own copy. Telnyx stores them in the US unless you pick another storage region it offers (Telnyx offers no Canadian one today).
• Recordings are kept for the number of days set in your calling settings (90 by default, anything from 1 to 365). Then Attunr asks Telnyx to delete them.
• Recordings can be heard by the rep on the call, the lead's owner, their manager and the account owner.

Mic recordings

• On a call that doesn't run on Telnyx (you dial from your own phone with the call screen open), the call screen can record your own microphone. It's off until you turn it on with "Record my mic". If your phone is on speaker it picks up the other person too, so the same rules apply: tell them, and stop if they object.
• Mic recordings and voice notes are kept for the retention set in your calling settings, and only the people who can hear call recordings can play them.
• BUILD: today "Record my mic" starts on, and mic recordings and voice notes are kept with no end date on Attunr's own disk, where any signed-in teammate with the address can play them (src/components/CallConsole.tsx:89, server/server.mjs:473 and :624). Fix all three before launch.

Transcripts

• Live transcript. During a call, the call screen can show a live transcript using your browser's own speech service. In Chrome, that service sends your microphone audio to Google. The call screen says so the first time you turn it on. BUILD: that note.
• Full transcript. Attunr can transcribe a recording with Whisper on fal.ai.
• Wrap-up. An AI summary of the call. See section 10.
• Telnyx's own transcription is off.

10. AI features

• These parts of Attunr use AI:
  • call wrap-ups;
  • email drafts and the marketing writer;
  • meeting prep briefs;
  • voice notes;
  • call practice, where an AI plays the prospect;
  • report notes and AI images;
  • Ask Attunr, which sends only your question and the names of your fields, never your records.
• Text AI runs on Google's Gemini API (paid tier), with Anthropic's Claude as the fallback. Transcripts, practice voices and images run on fal.ai. The subprocessor list names each company.
• None of them may train AI models on your data. Google and Anthropic keep what we send only for a short abuse check (Google 55 days, Anthropic 30 days), longer only for content flagged as abuse. We ask fal.ai not to keep a history of our requests, and to let files it makes for us expire soon after we have them.
• BUILD: today text AI runs through fal.ai's any-llm service, which passes it through OpenRouter to Google, Anthropic or OpenAI. The move to Google and Anthropic directly, and the "don't store" setting on every fal.ai request, must ship before launch (server/ai.mjs, server/voice.mjs).
• AI can be wrong. Read what it writes before you send it or rely on it. Attunr never sends an AI draft by itself. Voice notes are saved only when you press Save.
• The owner can turn AI off for the whole team in Settings.

11. Money privacy inside your team

• Attunr can hide money from people on your team: proposal amounts, lead values, monthly revenue, client prices and amounts typed into notes. Attunr's server removes them before they reach that person's browser, and refuses changes to amounts they can't see.
• This is a tool for running your team. It is not a promise of secrecy:
  • the owner always sees everything;
  • anyone you give "all revenue" sees it too;
  • "View as" shows the owner exactly what another person sees;
  • an amount written in an unusual way might not be caught.
• Calls, meetings and emails stay visible to everyone on the team.
• Turning a page off for a person removes it from their menu. It is not a lock on the data behind it.

12. History and removing things

• Attunr keeps a history of every change in your workspace. Each entry is fingerprinted, so the history can be checked.
• Removing an entry or archiving a lead hides it from every screen but keeps it in the history.
• Erasing one person. The owner or leadership can erase one person. Attunr removes their details, notes, emails, call recordings, transcripts, voice notes and pitch-page visits from the current records and from the history. The history keeps a marker that an erase happened, so it can still be checked. Their email address and phone number stay only as a one-way fingerprint on the do-not-email and do-not-call lists, so no one contacts them again by mistake. Copies in backups are gone within 30 days.
• Use it when someone asks you to delete their information and you have no legal reason to keep it.
• BUILD: per-person erase, recommended in the product plan, is not built. Until it ships, we erase a person by hand within 30 days of the owner's written request to hello@attunr.com.
• Closing the account deletes everything in it, as Cancellation and refunds says. BUILD: per-account export and full delete is Stage 3.4.

13. Our access to your workspace

• Our staff can't open your workspace unless you allow it, for a set time, from your settings. Every visit is logged, and you can see the log. BUILD: guard 6 in the product plan.
• Without your permission, staff may open it only:
  • to stop or look into a security incident or abuse;
  • when the law requires it;
  • to fix an urgent fault in your account when we can't reach the owner in time.
• We use the least access needed, log it, and tell the owner within 72 hours unless the law forbids it.
• Your data isn't copied to our staff's computers.

14. Changes to Attunr and how well it runs

• We update Attunr often. Each release runs first on Figured Media's own Relay and goes to Attunr only after it passes a health check.
• We may change or remove features. If a change takes away something important you pay for, you can cancel and get back the unused part of what you prepaid.
• Features marked beta may change or stop.
• We back up Attunr: database backups kept 10 days, and a nightly copy of each account kept 30 days. BUILD: Stages 2 and 3.4.
• We don't promise a set uptime and don't give service credits. Our status page at [status page address] shows when something is wrong. BUILD: a public status page.

15. Services you connect

Attunr works with outside services you choose to connect: your mailbox, Telnyx, Google, Meta, LinkedIn and others listed in Subprocessors, part C.

• Their own terms apply between you and them.
• They can change, limit or cut off their service. For example, Google limits apps it hasn't verified, and Meta needs app review for some permissions.
• We aren't responsible for them, but we'll tell you when one stops working with Attunr.

16. Suspending and ending

• You can cancel at any time. See Cancellation and refunds.
• We may suspend an account:
  • when it is unpaid;
  • when it breaks the Acceptable use policy;
  • when it puts Attunr or other customers at risk;
  • when the law requires it.
• When we suspend, we stop outgoing email and calls first, and tell the owner why when we can.
• We may end the agreement if you seriously break these terms and don't fix it within 14 days of our notice, or at once for serious abuse such as spam or fraud.
• If we end the agreement without you being at fault, we refund the unused part of what you prepaid.
• After the agreement ends, you can export your data for 30 days. Then it is deleted.

17. Keeping things confidential

Each of us keeps the other's non-public information confidential and uses it only for this agreement. Your data is covered by the data processing agreement.

18. What we promise and what we don't

• We will run Attunr with reasonable care and skill, and keep the security measures in the data processing agreement.
• Apart from that, and to the extent the law allows, Attunr is provided as it is. We don't promise it will be error free or always available, or that its site checks, search positions, AI writing or calling guards will be accurate or complete.
• To the extent the law allows, we give no other conditions or warranties, written or implied, including any of quality, merchantability or fitness for a purpose, and any under the Sale of Goods Act (Ontario) or similar laws.

19. Limits on liability

• The general cap. Each of us is liable to the other for no more than the greater of the fees you paid us in the 12 months before the event that caused the claim, and 1,000 dollars in your billing currency.
• The data cap. For claims that come from us breaking the data processing agreement or its security measures, the cap is 3 times the general cap. It covers the reasonable cost of notifying people and regulators that our breach made necessary.
• No indirect losses. Neither of us is liable for indirect or consequential losses, such as lost profits or lost data you could have exported. This doesn't limit the data cap or your cover in section 20.
• Outside every cap:
  • fees you owe us;
  • your cover for us in section 20;
  • either side's fraud, intentional fault or gross fault;
  • bodily or moral injury.
• We buy technology errors and omissions insurance and cyber liability insurance, and keep it while Attunr is sold.

20. Covering each other

• You cover us for claims, fines and reasonable legal costs that come from:
  • your email, calls, texts and pitch pages;
  • data you put into Attunr without a lawful reason;
  • breaking the Acceptable use policy.
• We cover you for claims that Attunr's own software infringes someone's intellectual property. This sits inside the data cap in section 19. If such a claim is made, we may change Attunr so it no longer infringes, get the right for you to keep using it, or end the affected part and refund what you prepaid for it.
• How it works. The side asking for cover tells the other promptly, lets it run the defence and settle, and helps at its cost. No one settles in a way that admits fault for the other side without their written OK.

21. Law and disputes

• Ontario law and the federal laws of Canada that apply in Ontario govern this agreement. The UN Convention on Contracts for the International Sale of Goods doesn't apply.
• Disputes go only to the courts of Ontario sitting in Ottawa. A claim within its limit may go to the Small Claims Court in Ottawa.
• Either of us may ask any court for an urgent order to protect confidential information or intellectual property.
• This applies to customers in every province and in the US.

22. Changes to these terms

• If we change these terms in a way that hurts you, we email the owner at least 30 days before the change starts. You can cancel before then and get back the unused part of what you prepaid.
• Other changes start when we post them.

23. Everything else

• You can't transfer this agreement without our written OK. We can transfer it to a business that takes over Attunr, and we'll tell you.
• Neither of us is responsible for delays caused by things outside our reasonable control.
• Notices to you go to the owner's email. Notices to us go to hello@attunr.com.
• If a court strikes out part of these terms, the rest still applies.
• Sections 6, 12, 16 (export and deletion), 17, 19, 20 and 21, and anything else that by its nature should, keep applying after the agreement ends.
• This agreement replaces anything else we said about Attunr before you signed up.
• Language. These documents are written in English. When Attunr opens to businesses in Quebec, they'll be offered the French version first and may choose English. A customer in Quebec may rely on either version if they differ.