Terms of service

These Terms of service (the Terms) are a binding agreement between you and Core Skill, registered at coreskill.app, which operates the CoreSkill service. By ticking the acceptance box when you register, accepting an invitation, or using the service or any key it issues, you agree to these Terms. If you do not agree, do not create an account or use the service.

1. Definitions

Customer

The organization that creates a business in CoreSkill. The Owner of that business accepts these Terms on the organization's behalf, and the organization is responsible for everything done inside it.

User

Any individual who accesses the service under a Customer's business, including people invited by the Customer and people for whom the Customer issues a key.

Customer Data

Everything a Customer or its Users submit to the service: skills, attached files, server and department names, member details, and the MCP logs generated by their use.

Service

The CoreSkill web application, its MCP endpoints, its APIs and any related documentation, as made available by Core Skill from time to time.

Documentation

The user guide, the help pages and the policies published alongside these Terms, including the Privacy policy, the Cookie policy, the Acceptable use policy and the Data processing addendum.

2. Acceptance and eligibility

• The Service is designed for business and professional use. It is not offered to consumers acting for purposes outside their trade, business or profession.
• You must be at least 18 years old, or the age of legal majority where you live if that is higher, to create an account or a business. A person invited by their organization must be at least 16 years old, and the organization is responsible for obtaining any consent the law requires for that person.
• If you accept these Terms on behalf of an organization, you represent that you have the authority to bind that organization, and "you" then means that organization. If you do not have that authority, do not accept.
• You must provide accurate registration details and keep them current. The Owner's email address is the channel through which account recovery, billing and legal notices reach the Customer.
• You may not use the Service if you are barred from receiving it under the law of any applicable jurisdiction, including trade sanctions and export control laws, or if you are located in a country subject to a comprehensive embargo.

3. What the Service does

CoreSkill lets an organization write or upload skills, meaning sets of instructions and procedures for AI assistants, group them into servers, scope those servers to the whole organization or to individual departments, and issue a key to each person. Their AI assistants connect over the Model Context Protocol (MCP) and read the current skills for their department. Every call is recorded in a log, including calls that are refused.

4. Accounts and security

• You are responsible for everything done under your account and for keeping your credentials confidential. Use a strong password that you use nowhere else, and turn on two-factor authentication if you are an Owner, an Admin or a Manager.
• An MCP key is a secret equivalent to a password. Do not send it over a public channel, do not commit it to shared source code, and do not let several people share one key.
• A key is shown once, when it is issued. Only a hash is stored, so nobody can read a key back to you afterwards, including Core Skill staff.
• If you suspect a key or an account has been compromised, revoke the key or change the password immediately and tell Core Skill at [email protected] if the incident may affect the Service or other customers.
• Do not use a key that is not yours, and do not try to reach servers, skills, departments or businesses you have not been given access to.
• Keys are issued in the name of a person and every call is logged under that name. Issuing a key on somebody else's behalf and keeping it makes the log attribute calls to someone who did not make them, and is a breach of these Terms.

5. Customer Data and the licence to operate the Service

As between the parties, the Customer owns all Customer Data. Core Skill does not sell Customer Data, does not use it for advertising, and does not use it to train any artificial intelligence model.

The Customer grants Core Skill a worldwide, non-exclusive, royalty-free licence, for the term of the agreement and the deletion period that follows it, to host, copy, back up, transmit, display and otherwise process Customer Data only as needed to provide, secure and support the Service in accordance with these Terms, the Customer's settings and the Data processing addendum. Core Skill may also compile aggregated statistics about the operation of the Service, such as call volumes and error rates, provided they identify neither the Customer nor any individual and contain no skill content.

The Customer warrants that it has all rights, licences and consents needed to submit Customer Data and to let Core Skill process it as described, that the Customer Data does not infringe anyone's rights or break any law, and that it has given its Users the notices the law requires, including that their MCP calls are logged under their name.

6. Acceptable use

The Acceptable use policy lists the prohibited uses in full and forms part of these Terms. In short: nothing unlawful, nothing that attacks the Service or other customers, no attempt to reach data that is not yours, no sharing of keys outside your organization, and no automated extraction of skill content beyond what your own AI assistants need in order to do your work.

7. Personal data

For account data, meaning your name, email address, sign-in and security settings, Core Skill is the controller and the Privacy policy applies. For Customer Data, Core Skill acts as a processor on the Customer's instructions and the Data processing addendum applies. If the addendum and these Terms conflict on a question of personal data, the addendum prevails.

CoreSkill may use optional analytics and advertising technologies from Google, Meta and TikTok, on the public pages and, if enabled, in the signed-in app. They are described in the Privacy policy and the Cookie policy, run only as your cookie choices allow, and can be refused or switched off at any time in Cookie settings without affecting your use of the Service. They never receive Customer Data such as skill content, attached files, keys or MCP logs.

8. Plans, fees and payment

• The Service may be offered on free, trial and paid plans. The features and limits of each plan, such as the number of servers, members, skills and keys, are shown in the product. Free and trial plans, and their limits, may be changed or withdrawn on reasonable notice.
• Paid plans are purchased for a fixed period at the price shown at checkout, which is fixed for that period. Core Skill may change its prices for future periods and will give at least 30 days notice of an increase before it applies to a renewal. Plans do not renew automatically unless the checkout page says so.
• Payments are processed by third-party payment providers. Core Skill does not receive or store full card numbers. Prices exclude taxes unless stated, and the Customer is responsible for any taxes, duties and bank charges that apply to its purchase, other than taxes on Core Skill's income.
• When a plan expires and any grace period has passed, the Service may be restricted for that business, including refusing MCP calls, until the plan is renewed. Customer Data is not deleted because a plan expires, but it remains subject to section 11.
• Fees are non-refundable except where these Terms, the checkout page or applicable law provide otherwise. If you believe you were charged in error, write to [email protected] within 30 days of the charge.

9. Availability, maintenance and support

Availability

Core Skill uses reasonable efforts to keep the Service available, but no service level or uptime figure is guaranteed unless a separate written agreement signed by both parties states one. The Service depends on networks and providers outside Core Skill's control.

Maintenance

Planned maintenance that is expected to interrupt the Service will be announced in advance where practicable. Urgent security fixes may be applied without notice, because delaying them is the greater harm.

Support

Support is provided by email at [email protected] during normal business hours. No response time is guaranteed unless a separate written agreement states one.

10. Suspension

• Core Skill may suspend a business, an account or a key where it reasonably believes that there is a material breach of these Terms or of the Acceptable use policy, that the security or integrity of the Service or of other customers is at risk, that fees are overdue, or that suspension is required by law.
• A suspension of a business cuts off every key issued in it at once, so the AI assistants of every person in that business stop receiving skills immediately.
• Unless the law or an urgent risk prevents it, Core Skill will notify the Owner before or promptly after the suspension, state the reason, and lift the suspension once the cause has been resolved. Suspension is limited to what is reasonably needed to address the cause.

11. Term, termination and your data

• These Terms apply from the moment you accept them until your account and every business you own have been closed.
• The Customer may terminate at any time by deleting its business, and a User may leave a business or delete their account at any time. Termination does not entitle you to a refund of fees already paid, except where the law requires one.
• Core Skill may terminate on 30 days written notice for any reason, or immediately for a material breach that is not cured within 15 days of notice, for a breach that cannot be cured, or where continuing to provide the Service would be unlawful. If Core Skill terminates for convenience, it will refund the unused portion of any prepaid fees.
• Where Core Skill terminates for a reason other than the Customer's breach, the Customer has 30 days to export its Customer Data before it is deleted. The Customer can export its data at any time while the Service is running.
• Deleting a business removes its servers, skills, files, keys, members and logs immediately, and cannot be undone. Residual copies in routine backups expire on their normal cycle, as described in the Data processing addendum.
• Sections that by their nature should survive termination survive it, including those on Customer Data deletion, fees owed, intellectual property, confidentiality, disclaimers, limitation of liability, indemnification and governing law.

12. Intellectual property

The Service, its software, design, documentation and trademarks are owned by Core Skill or its licensors and are protected by intellectual property law. Subject to these Terms, Core Skill grants the Customer a non-exclusive, non-transferable, revocable right for its Users to access and use the Service for the Customer's internal business purposes during the term. No other right is granted, and all rights not expressly granted are reserved.

13. Feedback

If you send Core Skill suggestions, ideas or other feedback about the Service, Core Skill may use them freely, without obligation or payment to you. Feedback does not include Customer Data, and giving feedback does not give Core Skill any right to your skills or files.

14. Confidentiality

Each party will keep confidential the non-public information it receives from the other in connection with the Service, including Customer Data and any non-public information about the Service, will use it only to perform this agreement, and will protect it with at least reasonable care. This does not apply to information that is or becomes public without fault of the receiving party, that the receiving party already held or independently developed, or that it received lawfully from a third party. A party may disclose confidential information where the law or a competent authority requires it, after giving the other party notice where the law allows.

15. Third-party services

CoreSkill connects to AI assistants operated by other companies, such as Claude, ChatGPT, Cursor and Gemini, and may connect to sign-in, email and payment providers. Those products are governed by their own terms and privacy policies. Core Skill is not responsible for what a third-party AI assistant does with the skills it reads, nor for the availability or conduct of third-party services.

16. Disclaimers

To the fullest extent permitted by law, the Service is provided "as is" and "as available", and Core Skill disclaims all warranties, whether express, implied or statutory, including warranties of merchantability, fitness for a particular purpose, title and non-infringement, and any warranty that the Service will be uninterrupted, error-free or free of harmful components.

17. Limitation of liability

• To the fullest extent permitted by law, neither party is liable for any indirect, incidental, special, consequential or punitive damages, or for any loss of profits, revenue, goodwill or data, or business interruption, however caused and even if advised of the possibility.
• To the fullest extent permitted by law, each party's total aggregate liability arising out of or relating to this agreement is limited to the greater of the fees the Customer paid to Core Skill for the Service in the 12 months before the event giving rise to the claim, and one hundred US dollars (USD 100).
• These limits do not apply to the Customer's payment obligations, to a party's indemnification obligations, to breach of section 14 (Confidentiality), or to liability for fraud, gross negligence or wilful misconduct.
• Nothing in these Terms limits or excludes liability for death or personal injury caused by negligence, or any other liability that cannot be limited or excluded under applicable law.

18. Indemnification

The Customer will defend and indemnify Core Skill, its affiliates and personnel against any third-party claim, and the resulting losses, damages and reasonable costs, arising from Customer Data, from use of the Service by the Customer or its Users in breach of these Terms or of the law, or from infringement of a third party's rights by the Customer. Core Skill will defend and indemnify the Customer against any third-party claim that the Service itself, as provided by Core Skill and used in accordance with these Terms, infringes that third party's intellectual property rights. The indemnified party must notify the other promptly, give it control of the defence, and provide reasonable cooperation; neither party may settle a claim that imposes an obligation on the other without its consent.

19. Changes to these Terms and to the Service

• Core Skill may update these Terms. The new version is published on this page with a new effective date.
• For material changes, Core Skill will notify the Owner by email or in the product at least 30 days before the change takes effect, except where a shorter period is required by law or to address a security risk.
• Where a change is material, you may be asked to accept the new version the next time you sign in. If you do not accept it, you may terminate before it takes effect, and in that case the previous version continues to apply until termination.
• Core Skill may add, change or remove features. Where a change removes a material feature of a paid plan during its term, Core Skill will give reasonable notice and, if the Customer terminates as a result, refund the unused portion of prepaid fees.

20. Governing law and disputes

1. 1This agreement is governed by the law of Core Skill, without regard to its conflict-of-law rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply.
2. 2The parties will first try to resolve any dispute by good-faith negotiation for 30 days after one party notifies the other in writing.
3. 3A dispute not resolved by negotiation is submitted to the competent courts of Core Skill, unless the parties have agreed in writing to arbitration. Either party may seek urgent injunctive relief in any court of competent jurisdiction to protect its intellectual property or confidential information.

21. Mandatory rights

Some jurisdictions grant rights that cannot be waived by contract, including rights of consumers and of individuals over their personal data. Nothing in these Terms limits any right you have under mandatory law. Where a provision of these Terms is not permitted by the law that applies to you, it applies only to the extent that law allows.

22. Force majeure

Neither party is liable for a delay or failure to perform, other than a payment obligation, caused by events beyond its reasonable control, including natural disaster, epidemic, war, terrorism, civil unrest, labour action not involving its own staff, failure of public networks or utilities, failure of a third-party hosting or network provider, or an act of a public authority. The affected party must notify the other promptly and resume performance as soon as reasonably possible. If the event lasts more than 30 days, either party may terminate the affected Service by written notice.

23. Notices

Notices to you are sent to the email address on your account or shown in the product, and are treated as received on the day they are sent. Keep that address current. Legal notices to Core Skill must be sent to [email protected], with a copy by post to Core Skill, coreskill.app where the notice concerns a dispute or termination.

24. General

• Assignment. Neither party may assign this agreement without the other's written consent, except that either party may assign it to a successor in a merger, acquisition or sale of all or substantially all of its relevant business, with notice to the other.
• Severability. If any provision is held invalid or unenforceable, the rest remains in force, and the provision is modified to the minimum extent needed to make it enforceable.
• No waiver. Failure or delay in enforcing a right is not a waiver of it.
• Independent parties. The parties are independent contractors. Nothing in this agreement creates a partnership, joint venture, agency or employment relationship.
• Entire agreement. These Terms, together with the Acceptable use policy, the Privacy policy, the Cookie policy, the Data processing addendum and any order or plan accepted in the product, are the entire agreement between the parties on their subject and supersede any earlier understanding. Terms in a Customer's purchase order or similar document do not apply.
• Order of precedence. In case of conflict: a separate agreement signed by both parties, then the Data processing addendum on questions of personal data, then these Terms, then the other policies.

25. Language

These Terms are published in English and in Vietnamese, and the two versions are written to have the same meaning. If they differ, the English version prevails, except where mandatory law requires the Vietnamese version to prevail.

26. Contact

Questions about these Terms go to [email protected], or by post to Core Skill, coreskill.app. For anything to do with personal data, write to [email protected]. These Terms take effect on 22/9/2026.