These Terms of Service ("Terms") are an agreement between Mintry Software, Inc., a Delaware corporation with its address at 16192 Coastal Highway, Lewes, DE 19958, USA ("Mintry", "we", "us"), and the organisation or person that creates a Penny team or uses Penny ("Customer", "you"). Penny is a product of Mintry.
Penny is a team memory. It reads the conversations, mail, code and data that you connect, remembers the decisions, promises and facts in them, answers questions about them, and sends digests.
By clicking "Continue" (or "Sign up", "Join team" or any button that refers to these Terms), you accept these Terms, including the Acceptable Use rules in section 6, and confirm you have read the Privacy Policy. The person who creates a team becomes its owner and also accepts, on the team's behalf, these Terms and the Data Processing Addendum (the "DPA"). If the owner accepts on behalf of a company or other organisation, they confirm that they are authorised to bind it, and "you" means that organisation. Members who join a team accept these Terms for their own use of Penny.
1. Who may use Penny
1.1 Who may use it. Anyone aged 18 or over may use Penny, whether for a business or as an individual. If you use Penny for purposes outside your trade, business, craft or profession, you are a "consumer", and the consumer provisions of these Terms (marked "Consumers:") apply to you. Nothing in these Terms limits the rights that the consumer law of the country where you live gives you and that cannot be excluded by contract.
1.1A What Penny is for: work chats inside teams. Penny is designed as a memory for a team's own internal work chats: channels and groups whose participants are the members of your team (and colleagues who may see everything the team connects). Everything Penny learns is shared with every member of the team, and anyone in a bound chat can ask Penny questions (section 4).
1.2 Age. You must be at least 18 years old and legally able to enter into contracts. Penny is not directed at children, and you must not connect sources in which you know children under 16 take part (for example, a school chat) unless you have a lawful basis and any required parental consent.
1.3 Accounts. You sign in with Google or with a one-time email link. Your account can exist before you have agreed to these Terms and the Privacy Policy (for example, when you open an email sign-in link in a different browser from the one where you ticked the box), but you can't use Penny until you agree: until then you cannot see your team's data or connect sources, and Penny asks you to agree on its first screen. Keep access to your email and Google account secure. You are responsible for everything done through your account and your team's MCP tokens.
1.4 Sanctions and export controls. You confirm that you are not located in, or acting for anyone in, a country or on a list subject to comprehensive sanctions under the laws of the United States, the EU or the UK.
2. Teams, members and authority
2.1 A team (tenant) is the unit that owns connected sources, memory and balance. The person who creates it may invite others by link.
2.2 Everyone sees everything. Every member of a team can see everything in the team's memory, connect and disconnect sources, bind chats, invite and remove members (except the owner), change digest settings, top up, lower or switch off auto-recharge, and use the team's balance. Invite only people who may see everything the team connects.
2.3 The owner. Each team has one owner: the person who created it, or a member to whom the owner has transferred the role. Only the owner may: (a) accept these Terms, the DPA and later versions of them on the team's behalf; (b) delete the team; (c) own the team's billing: set the billing details, save or replace the card used for auto-recharge, turn auto-recharge on, and raise its amount, threshold or monthly cap (section 9.6); and (d) transfer the owner role. The owner cannot be removed by other members and cannot leave without transferring the role.
2.4 Authority. The Customer is the organisation or person on whose behalf the owner created the team. The owner confirms that they are authorised to bind the Customer. Instructions given by any member through the Service (connecting, disconnecting, deleting a source, exporting, asking) are the Customer's instructions to Mintry for the purposes of the DPA; instructions reserved to the owner in 2.3 are valid only from the owner.
3. Your content and the sources you connect
3.1 Customer Content means everything that reaches Penny from your team: messages, threads, emails and their attachments, files, code, database schemas and query results, exports you upload, questions you ask, and everything Penny derives from them (facts, summaries, entities, embeddings, digests and answers).
3.2 Ownership. As between you and Mintry, you (or your licensors) own Customer Content. You grant Mintry a worldwide, non-exclusive, royalty-free licence to host, copy, process, transmit and display Customer Content only to provide, secure and support the Service for you, as described in the DPA.
3.3 No training, ever. Mintry never uses Customer Content to train, fine-tune or improve any AI model, ours or anyone else's, and configures the AI providers it uses so that they neither train on it nor retain it (zero data retention; see Subprocessors).
3.4 Your warranties about connected sources. Penny reads conversations and mailboxes that contain messages from people who never signed up for Penny: colleagues, clients, contractors and others ("Third Parties"). Before you connect a source, upload an export or add the Penny bot to a chat, you represent and warrant that:
(a) Right to connect. You are authorised by the owner or administrator of the Slack workspace, Telegram group or channel, mailbox, GitHub organisation or repository, or database to connect it to Penny and to let Penny read it, including its past history where you choose a backfill or upload an export.
(b) Lawful basis. You have a lawful basis under applicable data-protection law (for example, the legitimate interests of your organisation, a contract, or consent) for Penny to process the personal data of every person in that source, including Third Parties and including messages sent before Penny was added.
(c) Notice. You have given, or will give without undue delay, every person whose messages Penny will process a clear notice that the chat or mailbox is recorded by Penny, processed by AI, and searchable by your team, with a link to how they can object or ask for removal. Penny's join message (see Third-Party Notice) helps but does not replace your own notice where the law requires one.
(d) Consent where required. Where the law requires consent (for example, some laws on recording communications, employee monitoring, or the processing of special categories of data), you have obtained it.
(e) Employees and works councils. Where you connect your employees' communications, you have met any duty to inform or consult employee representatives or works councils, and your use is not unlawful monitoring.
(f) Confidentiality duties. Connecting a source does not breach any confidentiality obligation, professional secrecy (for example, legal, medical or financial secrecy) or the terms of the platform the source lives on.
(g) Platform rules. You will comply with the terms of Slack, Telegram, Google, GitHub and any other platform you connect, as they apply to you.
(h) Internal work chats, or informed participants. You connect only your team's own internal work chats, or, if you bind a chat that includes anyone outside your team, you accept that everyone in that chat can ask Penny and see answers drawn from your team's whole memory (unless you switch on "Answer only from this chat"), and you are responsible for that disclosure (section 4).
3.5 Sensitive data. Do not connect sources whose main purpose is to exchange special categories of personal data (health, biometric or genetic data, sex life, religious or political beliefs, trade-union membership), criminal records, payment card numbers, government identity numbers or credentials, unless Mintry has agreed in writing. Penny masks many secrets it recognises, but masking is best effort and is not a security control you may rely on.
3.6 Removal requests from Third Parties. Mintry processes Customer Content as your processor. If a Third Party asks Mintry to remove their data, Mintry will forward the request to you (see the DPA and Third-Party Notice). You must handle it within the time the law requires, using the tools in Penny or by instructing Mintry. Where Mintry cannot identify the team, or the team does not respond within 30 days, Mintry may disable the source concerned.
3.6A Opt-outs and platform-required deletion. You instruct Mintry to honour opt-outs individuals make through
Penny's in-chat commands (such as /forgetme) and deletion requests that a connected platform's terms require Mintry to
honour, as described in the DPA, section 9.3. You must not ask people to withdraw an opt-out, or work around it.
3.7 Indemnity for connected content. You will defend and indemnify Mintry against claims by Third Parties, platform operators or authorities arising from your breach of section 3.4 or 3.5.
4. What Penny does in shared chats
4.1 Anyone in a bound chat may ask, from the whole memory. When the Penny bot is in a Slack channel or Telegram group bound to your team, any participant in that chat, including people outside your team, may mention Penny and receive an answer. By default, answers draw on your team's whole memory: other chats, mailboxes, repositories and databases. Penny assumes a bound chat is one of your team's internal work chats (section 1.1A).
4.1A Chats with outsiders. When you bind a chat, Penny shows a warning that everyone in the chat will see its answers. For any chat, a member can switch on "Answer only from this chat", after which Penny answers from that chat's own history only. You are responsible for choosing which chats to bind and for switching this on in any chat that includes people who should not see your team's whole memory. Disclosures made through Penny's answers in a chat you bound are made on your instructions (DPA, section 10.5).
4.2 Digests posted to chats are visible to everyone in that chat, as in 4.1.
4.3 Bot notices. When added to a Telegram group, Penny posts a short notice that the chat is being remembered. You must not delete, hide or contradict this notice, or ask Penny not to post it. When you connect Slack channels, Penny does not post in them; it sends you that notice to share with the people in those channels, and telling them remains your responsibility under 3.4(c).
4.4 Your own agents (MCP). If you connect Penny to an AI assistant through MCP (for example Claude, ChatGPT or Cursor), Customer Content flows to that assistant under your agreement with its provider. That provider is not Mintry's subprocessor, and Mintry is not responsible for it.
5. The Service
5.1 Provision. Mintry will provide Penny with reasonable skill and care, in line with the documentation.
5.2 Pilot features. Some features are offered as a pilot or beta, marked as such in the product (at the time of writing: the Slack app outside the Slack Marketplace, the Gmail connection on an unverified Google client, and exports). Pilot features are provided as is, may be slow, limited (for example by the platform's rate limits or user caps), changed or withdrawn at any time, and are excluded from any service level.
5.3 Third-party platforms. Penny depends on Slack, Telegram, Google, GitHub, AI model providers and other services that Mintry does not control. If one of them changes or withdraws access, suspends Penny's app or bot, or limits the rate at which Penny may read, the affected feature may stop working. This is not a breach of these Terms.
5.4 Changes. Mintry may change Penny. We will give at least 30 days' notice by email or in the product of a change that materially reduces core functionality, unless the change is required by law, by a platform, or for security.
5.5 Support. By email at support@ipenny.app. No response time is guaranteed unless agreed in writing.
6. Acceptable use
You and your members must not, and must not allow anyone to:
- connect a source you are not authorised to connect, or add the bot to chats to gather other people's messages without the notice and basis required by section 3.4;
1A. bind chats that include people outside your team without either switching on "Answer only from this chat" or accepting that they may see answers from your team's whole memory (section 3.4(h)); or add Penny to public groups, communities or chats with strangers to harvest their messages;
- use Penny to surveil, profile, stalk, harass or discriminate against individuals, or for covert monitoring of employees where the law forbids it;
- use Penny for any purpose covered by Article 5 of the EU AI Act (prohibited AI practices), or to make decisions with legal or similarly significant effects on people (hiring, firing, credit, housing, insurance) solely on the basis of Penny's output;
- process data of children under 16, or special-category data at scale, contrary to section 3.5;
- upload malware, or content that is unlawful, infringing, or sexual content involving minors;
- attack, probe, overload or reverse-engineer the Service, bypass rate limits, tenant isolation or balance checks, or access another team's data;
- use prompts or content designed to make Penny's AI reveal other teams' data, system instructions or secrets, or to produce content that breaches the usage policies of the underlying AI providers;
- resell or white-label Penny, or use it to build a competing product, without Mintry's written consent;
- use Penny's Telegram bot or Slack app in a way that breaches Telegram's or Slack's terms, or that could cause them to suspend Penny for everyone (for example, mass messaging or spam);
- abuse the free credit (for example, creating several accounts or teams to obtain it again);
- connect a customer database that you do not have the right to query, or give Penny credentials with write access (Penny requires a read-only user).
Mintry may investigate suspected breaches. Automated systems check some of these rules; people at Mintry look at Customer Content only as described in the DPA, section 5.
7. AI output
7.1 Output may be wrong. Penny's answers, summaries, digests and extracted facts are generated by AI models. They may be incomplete, out of date, attributed to the wrong person, or wrong, and may reflect errors in your sources. Check anything important against the cited source before you rely on it.
7.2 No professional advice. Output is not legal, financial, medical, tax or other professional advice.
7.3 Your responsibility. You are responsible for decisions you make using output, and for output you share with others. As between the parties, you own the output generated for you, to the extent any rights exist in it.
7.4 AI disclosure. Penny identifies itself as an AI in chats it answers in. You must not present Penny's messages as written by a human.
8. Third-party services you connect
Slack, Telegram, Google, GitHub and your databases are services you choose to connect. Mintry accesses them on your instruction and with the permissions you grant. Your use of them stays governed by your agreements with their providers. Mintry does not warrant their availability.
9. Credit, billing and payments
9.1 Prepaid credit. Penny is paid from a prepaid balance of credit in US dollars held for your team ("Balance"). Credit is not money, not a deposit, not transferable between teams, and cannot be exchanged for cash.
9.2 Free credit. A new account receives USD 10 of free credit for its first team only. Free credit has no cash value, is not refundable, and may be withdrawn if Mintry reasonably suspects abuse (section 6, item 10). Free credit does not expire.
9.3 Usage charges. Penny's AI work (reading and remembering messages, processing history, embeddings, answering, digests, database descriptions) is charged against your Balance at the cost Mintry pays the AI provider, multiplied by the markup shown on the pricing page (currently 1.5). The cost is as reported by our AI routing provider for each call. Estimates shown before a backfill are estimates only; you are charged actual usage. Mintry may change the markup or the pricing model with at least 30 days' notice; the change applies to usage after it takes effect.
9.4 Zero or negative Balance. When the Balance reaches zero, Penny keeps saving new raw messages but pauses AI processing, answers and digests until you top up. Work already started may take the Balance slightly below zero; the next top-up covers that amount first. You agree to pay any negative Balance.
9.5 Top-ups. Any member can top up manually by card through our payment provider, Stripe. Amounts are in USD. Before you pay, the checkout shows the credit amount, the tax and the total.
9.6 Auto-recharge. Only the team's owner can save the card for auto-recharge and turn it on. When the owner does so, they tick a box next to this text, which is also shown on the page:
"I authorise Mintry Software, Inc. to charge this card lt;amount> plus tax each time the team's balance falls below lt;threshold>, up to lt;cap> per calendar month, until I turn auto-recharge off. I can turn it off at any time in Balance settings, with immediate effect for future charges. I'm the cardholder or authorised by the cardholder."
Only the owner may raise the amount, the threshold or the monthly cap, or turn auto-recharge back on after a dispute. Any member may lower them or switch auto-recharge off. Every change is emailed to all members, and every automatic charge is confirmed by email with its invoice and a link to switch auto-recharge off. Turning it off stops future charges but does not reverse past ones. Some banks require you to confirm a payment (3-D Secure); if you do not confirm within 72 hours, that attempt lapses.
9.6A Auto-recharge disclosures. Before auto-recharge is turned on, the page shows, next to the tick box and not behind a link: the amount of each charge and that tax is added; the balance that triggers a charge; the monthly cap; that charges continue until auto-recharge is turned off; and how to turn it off (one switch in Balance settings, no call or email needed). After it is turned on, Mintry emails the owner a confirmation with the same terms and the link to switch it off. If no automatic charge has happened for 12 months, Mintry reminds the owner that auto-recharge is still on before the next charge. Consumers: each automatic charge is a separate purchase of credit with its own right of withdrawal (9.7A); the confirmation email for each charge says so.
9.7 No refunds. Payments are non-refundable and unused credit is not refunded, except: (a) where Mintry charged you in error (for example a duplicate charge or a billing bug), which Mintry will correct by refund or credit; (b) if Mintry terminates these Terms for convenience under section 12.3, when Mintry refunds unused paid credit; (c) for consumers, under 9.7A; and (d) where applicable law gives you a right to a refund that cannot be excluded.
9.7A Consumers: right of withdrawal. If you are a consumer in the EU, the EEA or the UK, you have the right to withdraw from a purchase of credit within 14 days of the payment, without giving a reason, by using the "Withdraw from contract here" button in Balance settings or by emailing billing@ipenny.app.
- Immediate use. At checkout Penny asks you to confirm: "I want Penny to start using this credit straight away. I understand that if I withdraw within 14 days I will get back only the credit I haven't used, and that I lose the right to withdraw once the credit is fully used." If you do not tick it, the credit becomes usable after 14 days.
- What you get back. If you withdraw, Mintry refunds the part of that payment that corresponds to credit not yet used (including the tax on it), within 14 days, to the same card. Credit already used is not refunded, and once a top-up's credit is fully used your right to withdraw from it ends.
- Auto-recharge. When the owner turns auto-recharge on, the same request and acknowledgement are asked for once and apply to each later automatic charge; the confirmation email of every automatic charge repeats it.
- Free credit is used before paid credit, so a refund is computed on paid credit only.
- Confirmation. The confirmation email of each purchase (a durable medium) records that you asked for immediate use and acknowledged when the right ends, and includes the model withdrawal form.
9.8 Taxes. Prices exclude taxes. Stripe Tax calculates sales tax, VAT or GST for your billing address, and it is added to each payment. If you give a valid VAT or tax id, reverse charge may apply. You are responsible for the accuracy of your billing details and for any taxes that apply to you.
9.9 Invoices. Every payment gets an invoice or receipt from Stripe, sent to the team's billing email.
9.9A Consumers: pre-contract information. Before any payment, consumers see: the total price including tax, how usage is charged (cost times markup, with examples), the withdrawal right and its loss, auto-recharge terms if chosen, the functionality and compatibility of the service, and Mintry's identity, geographical address and contact details. The payment button reads "Pay now" or an equally clear phrase (CRD Art. 8(2)). Mintry confirms each purchase by email with these Terms attached or linked in a durable form.
9.10 Chargebacks and failed payments. If a payment is disputed or reversed, Mintry debits the disputed amount from the Balance (which may make it negative), may pause AI processing, and disables auto-recharge until the dispute is resolved. If the dispute is decided in your favour, the amount is credited back. Please contact billing@ipenny.app before disputing a charge. Repeated or unfounded disputes are grounds for suspension.
9.11 Payment processor. Card details go directly to Stripe and never reach Mintry's servers. Stripe's own terms apply to its processing.
10. Suspension
Mintry may suspend all or part of the Service for a team, a member, a source or a chat, with notice where practicable:
(a) if required by law, a court or authority, or by a platform whose API Penny uses; (b) to prevent a security incident or harm to the Service, other customers or Third Parties; (c) for a material breach of section 3.4, 3.5 or 6; (d) for non-payment or repeated chargebacks.
Mintry will limit the suspension to what is reasonably necessary and lift it once the cause is resolved. Suspension does not delete Customer Content; deletion follows section 12 and the Retention and Deletion Policy.
11. Confidentiality and security
11.1 Mintry treats Customer Content as confidential and uses it only to provide the Service and as the DPA allows.
11.2 Mintry protects Customer Content with the technical and organisational measures in DPA Annex II, including per-team isolation in the database, encryption in transit and at rest, and restricted staff access.
11.3 Mintry may disclose Customer Content if required by law, after notifying you where legally permitted.
12. Term, termination, export and deletion
12.1 Term. These Terms apply from acceptance until the team is deleted or the Terms are terminated.
12.2 By you. You may stop using Penny at any time and disconnect any source. The owner may delete the team (in the product when available, otherwise by writing to support@ipenny.app from the owner's email address). Any member may delete their own account.
12.2A Disconnecting a source deletes its data. When a source is disconnected in Penny, uninstalled on the platform (for example, Penny's Slack app is removed or its tokens revoked), or the Penny bot is removed from a Telegram chat, Mintry immediately stops reading it and deletes the data Penny holds from that source and everything derived from it, normally within hours and at the latest within 24 hours; backup copies expire within a further 7 days (see the Retention and Deletion Policy). This cannot be undone. Export anything you need before disconnecting. Note that an admin of the Slack workspace or Telegram chat can trigger this by removing Penny.
12.3 By Mintry. Mintry may terminate for convenience with 60 days' notice, or immediately for a material breach that is not cured within 15 days of notice (or immediately if the breach cannot be cured, or for a breach of section 6).
12.4 Export. Until deletion, the owner and members can export the team's memory in a machine-readable format (JSON/CSV). Until self-service export exists in Settings, Mintry provides the export on request to support@ipenny.app within 30 days.
12.5 Deletion. After a team is deleted or these Terms end, Mintry deletes Customer Content from active systems within 30 days (normally within 24 hours of the deletion taking effect) and from backups as they expire (within a further 7 days), as set out in the Retention and Deletion Policy. Mintry may keep billing and tax records, and records needed for legal claims, for as long as the law requires.
12.6 Survival. Sections 3.2 (to the extent needed for deletion), 3.4–3.7, 7, 9 (for amounts due), 12.5, 13, 14 and 16 survive termination.
13. Warranties and disclaimers
Except as expressly stated in these Terms, Penny is provided "as is" and "as available". To the extent the law allows, Mintry disclaims all implied warranties, including merchantability, fitness for a particular purpose, non-infringement, and that Penny will be uninterrupted, error-free, or capture every message. Nothing in these Terms excludes a warranty or right that cannot be excluded by law.
Consumers: you have statutory rights, including that the service conforms to the contract (in the EU under the Digital Content Directive (EU) 2019/770 as implemented where you live; in the UK under the Consumer Rights Act 2015). This section does not affect those rights.
14. Limitation of liability
14.1 Excluded losses. Neither party is liable for indirect, incidental, special or consequential loss, or for loss of profits, revenue, goodwill or anticipated savings, however caused.
14.2 Cap. Each party's total liability arising out of or in connection with these Terms in any 12-month period is limited to the greater of (a) the amounts you paid Mintry in the 12 months before the event, and (b) USD 100.
14.3 Data-protection super-cap. For breaches of the DPA or section 11, the cap is the greater of 3 times the amounts paid in the previous 12 months, and USD 5,000.
14.4 Not limited. Nothing limits liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, your payment obligations, your indemnity in section 3.7, or any liability that cannot be limited by law.
14.5 Consumers. If you are a consumer, sections 14.1–14.3 do not apply to you. Instead: Mintry is liable for foreseeable loss caused by its breach of these Terms or its failure to use reasonable care and skill, but not for loss that was not foreseeable, or for business losses (you are using Penny outside a business); Mintry does not exclude or limit liability for intent or gross negligence, for death or personal injury, or where the law where you live does not allow it. Your indemnity in section 3.7 applies to you only for losses caused by your intentional or negligent breach.
15. Changes to these Terms
Mintry may update these Terms. We will notify you by email and in the product at least 30 days before a material change takes effect. If you continue to use Penny after that date, the updated Terms apply. If you do not agree, you may stop using Penny and the owner may delete the team before that date; unused paid credit is then refunded if the change is to your disadvantage and you are a consumer. Changes to these Terms must be accepted by the owner on the team's behalf.
16. General
16.1 Governing law and courts. These Terms are governed by the laws of the State of Delaware, USA, without regard to its conflict-of-laws rules. The state and federal courts located in the State of Delaware have exclusive jurisdiction, except that either party may seek urgent relief in any competent court, and subject to 16.1A.
16.1A Consumers. If you are a consumer, the choice of US state law does not deprive you of the protection of the mandatory consumer and data-protection law of the country where you live, and you may bring proceedings in the courts of that country; Mintry may bring proceedings against you only there. EU consumers can also use the EU's consumer-dispute resources.
16.2 Entire agreement. These Terms, the DPA and the documents they link to are the entire agreement on their subject. If they conflict, the DPA prevails on data protection, then these Terms.
16.3 Assignment. You may not assign these Terms without Mintry's consent. Mintry may assign them to an affiliate or to a successor of the Penny business, with notice.
16.4 Force majeure. Neither party is liable for delay caused by events beyond its reasonable control, including the actions of third-party platforms and AI providers.
16.5 Notices. To Mintry: legal@ipenny.app and 16192 Coastal Highway, Lewes, DE 19958, USA. To you: the email address of the team's owner (for notices to the Customer) and of each member (for notices about their own account).
16.6 Severability and waiver. An unenforceable provision is replaced by the closest enforceable one; the rest stays in force. Not enforcing a right is not a waiver of it.
16.7 Language. These Terms are written in English. A translation is for convenience only.
Contact
Mintry Software, Inc., 16192 Coastal Highway, Lewes, DE 19958, USA · Legal notices: legal@ipenny.app · Billing: billing@ipenny.app · Privacy: privacy@ipenny.app · Support: support@ipenny.app · EU representative (GDPR Art. 27) and UK representative (UK GDPR Art. 27): being appointed; until they are named here, write to privacy@ipenny.app.