Legal

Policies governing use of the CATO platform

Terms of Service

Effective: September 21, 2026

1

Acceptance of Terms

These Terms of Service ("Terms") constitute a legally binding agreement between you ("User," "you," or "your") and Nyrus Corp., a Delaware corporation ("Nyrus," "we," "us," or "our"), the operator of the CATO platform ("CATO" or the "Service").

By creating an account, accessing, or using CATO, you acknowledge that you have read, understood, and agree to be bound by these Terms, our Privacy Policy, and our Usage Policy. If you do not agree to these Terms, you must not use the Service.

If you are using CATO on behalf of an organization, you represent and warrant that you have the authority to bind that organization to these Terms.

2

Description of Service

CATO is an AI-powered data analysis platform designed for biomedical and life sciences researchers. The Service provides:

  • Conversational AI assistance for data analysis and statistical modeling
  • Sandboxed code execution environments for Python and R
  • Literature Intelligence: multi-source academic search with AI-powered evidence extraction, citation network analysis, and document generation
  • Interactive data visualizations and publication-ready figures
  • Dataset management with a durable working filesystem for each project
  • Access to curated biomedical databases and specialized analysis tools
  • Full-text access for open-access research papers via PMC, bioRxiv, medRxiv, and Europe PMC
  • Support for 60+ file types including SPSS, microbiome, genomics, and medical imaging data

CATO's AI models and underlying infrastructure are periodically upgraded to improve performance, accuracy, and reliability. Model versions may change without prior notice, and outputs may vary across model versions.

We reserve the right to modify, suspend, or discontinue any aspect of the Service at any time, with or without notice. We will make commercially reasonable efforts to notify users of material changes in advance.

3

Account Registration & Security

To use CATO, you must create an account by providing accurate and complete information. You are responsible for:

  • Maintaining the confidentiality of your login credentials
  • All activity that occurs under your account
  • Notifying us immediately of any unauthorized access or use of your account
  • Ensuring that your account information remains accurate and up to date

You must be at least 18 years old, or older if the age of majority where you live is higher, to create an account. We reserve the right to suspend or terminate accounts that violate these Terms or that we reasonably believe are being used fraudulently.

Labs and Shared Projects

A lab is a group account created by a lab owner who buys seats for its members. A project assigned to a lab can be opened and worked on by every member of that lab, and its conversations, files, and outputs are visible to them. Only the project's creator or a lab owner or admin can delete a lab project. Lab owners and admins manage seats and membership; removing a member ends that member's access to lab projects but does not delete work already in them. Projects you keep outside a lab remain private to you.

The lab owner is responsible for the members they admit and for ensuring that data placed in lab projects may be shared with those members. Where a lab is operated by an organization, that organization's separate agreement with Nyrus, if any, governs its members' use as described in Section 15.

4

Subscription Plans & Billing

Plans & Pricing

CATO offers multiple subscription tiers, including free and paid plans. Details of each plan, including features, usage limits, and pricing, are available on our pricing page. We reserve the right to change our pricing at any time, with at least 30 days' notice to existing subscribers; a price change takes effect on your first renewal after that notice period.

Included AI usage on subscription plans is measured in credits. Credits are consumed at different rates by different models and levels of reasoning effort, and each plan allows a set amount of credit use within rolling time windows (currently a five-hour window and a seven-day window); your remaining allowance is shown in the app. When a window is exhausted, AI responses pause until enough earlier usage has aged out of the window. Pay-as-you-go usage is metered as described on the pricing page.

Promotional Credits, Gifts, and Invitations

Nyrus may grant complimentary plan access, promotional credit, or invitation codes. These have no cash value, are not refundable or transferable, and may be withdrawn if we reasonably believe they are being obtained or used fraudulently or in breach of these Terms. They expire on the date stated when granted, or twelve months after they are granted if no date is stated. A credit balance is not a bank account, digital wallet, stored-value account, or other payment instrument, confers no property right, and can be used only for the Service.

Billing & Payment

Paid subscriptions are billed in advance on a monthly recurring basis and renew automatically each month at the then-current price until you cancel. Pay-as-you-go usage is billed in arrears based on actual consumption. All payments are processed through our payment processor. By subscribing to a paid plan, you authorize us to charge the payment method on file for all applicable fees on each renewal date.

Taxes

Our fees do not include taxes. You are responsible for any sales, use, value-added, goods and services, withholding, or similar taxes that apply to your purchase, other than taxes on our net income. Where we are required to collect a tax, we will add it to your charge based on the billing address on your account. If you are exempt, you must give us a valid exemption certificate before you are charged.

Failed Payment

If a charge to your payment method fails, we may retry it, and we may downgrade your account to free features or suspend paid features until the outstanding amount is paid. You remain responsible for all fees incurred, including pay-as-you-go usage that has already accrued. Keep your payment details current to avoid an interruption.

Cancellation & Refunds

You may cancel your subscription at any time through your account settings. Cancellation takes effect at the end of your current billing period, and you will retain access to paid features until that date. We do not provide prorated refunds for partial billing periods. If you believe you have been billed in error, please contact us within 30 days of the charge.

5

Acceptable Use

You agree to use CATO only for lawful purposes and in compliance with these Terms. You may not:

  • Use the Service to violate any applicable law, regulation, or third-party right
  • Upload, transmit, or process Protected Health Information (PHI) as defined under HIPAA unless you are on an Enterprise plan with a signed Business Associate Agreement (BAA)
  • Upload, transmit, or process other identifiable consumer health, genetic, biometric, or patient-level data through a standard account
  • Attempt to gain unauthorized access to any part of the Service, other users' accounts, or our systems and infrastructure
  • Reverse-engineer, decompile, disassemble, or otherwise attempt to derive the source code of any part of the Service
  • Use the Service to develop competing products or services, or use Output (defined in Section 6) to develop, train, or improve artificial intelligence models that compete with CATO
  • Interfere with or disrupt the integrity or performance of the Service
  • Circumvent or attempt to circumvent credit windows, usage limits, rate limits, sandbox or network restrictions, or any protective measure or safety mitigation in the Service
  • Use automated means (bots, scrapers, crawlers) to access the Service without our prior written permission, or automatically or programmatically extract Output or other data from the Service other than through the export features we provide
  • Represent that Output was human-generated when it was not
  • Sell, transfer, share, or lend your account, a lab seat, or an invitation link to anyone else, or use an account, seat, or invitation that was not issued to you
  • Resell, sublicense, or commercially exploit the Service without our prior written consent
  • Upload content that is unlawful, harmful, threatening, abusive, defamatory, or otherwise objectionable

Violation of these restrictions may result in immediate suspension or termination of your account.

6

User Content & Data

Input, Output, and Ownership

You provide content to the Service, including prompts, instructions, questions, uploaded files, datasets, project files, memories you save, and literature you collect or annotate ("Input"). In response, the Service generates analyses, statistical results, code, figures, tables, reports, documents, structured records, and other text or files ("Output" or "AI Output"). Input and Output together are your "User Content".

You retain all rights, title, and interest in your Input. We do not claim ownership of your User Content. Ownership of Output is addressed in Section 8.

You are responsible for your Input. You represent and warrant that you have all rights, licenses, consents, and permissions needed to provide your Input to the Service and to have it processed as these Terms describe, including any participant consent, data-use agreement, repository or publisher terms, or institutional approval that applies to it.

License Grant

By providing Input or generating Output, you grant us a limited, non-exclusive, worldwide license to store, process, transmit, and display your User Content as necessary to provide, secure, evaluate, and improve the Service, subject to these Terms and our Privacy Policy.

Data Handling

Each project has its own durable working filesystem, attached to that project's isolated sandbox while the agent works. Uploaded files, generated code, figures, and other outputs live in that filesystem until you delete them or delete the project. Sandbox pods receive no cloud-storage credentials or application secrets, cannot reach other projects' filesystems, and are blocked from internal cloud networks and metadata services.

Uploading a file does not, by itself, copy the full raw file into an agent trajectory. If CATO reads or processes the file, excerpts, selected rows, summaries, tool results, generated outputs, or other content surfaced to the agent may be recorded in the applicable trajectory. For full details, please refer to our Privacy Policy and Data Processing notice.

Service Trajectories, Safety, and Model Improvement

CATO records agent trajectories. A trajectory may include your prompts, model responses, tool calls and results, generated code, citations, reviewer results, execution metadata, safety signals, and User Content that appears in those records. We use these records to operate and restore workflows, reproduce failures, evaluate scientific performance, prevent misuse, enforce our policies, investigate security events, create curated evaluation and training data, and improve or train CATO models and agent systems.

Production systems may create operational records but cannot read them back for training. A restricted cleaning and approval pipeline must read an operational record, apply the applicable review and minimization controls, and create a separate approved copy before a training system can access it. Training systems have read access only to the training-approved store.

By accepting these Terms and using CATO, you authorize this processing. Do not submit PHI or other identifiable health data through a standard account, and do not submit confidential or third-party content unless you are authorized to have it processed as these Terms describe. You may contact contact@nyrus.ai to request that identifiable records no longer be selected for future model-improvement datasets. A request does not affect processing completed before it is implemented or records that must be retained for security, fraud prevention, policy enforcement, disputes, or legal obligations.

We do not authorize third-party model providers to use your User Content to train their own models. Where supported, CATO uses zero-data-retention inference paths. This restriction does not prevent Nyrus from using trajectories to improve CATO and its other offerings as described above.

Data Portability & Deletion

You may export or delete User Content through the Service. Deleting a conversation or project removes the primary application copy, but it may not immediately remove copies from security, diagnostic, trajectory, or backup systems. Trajectory records already written cannot be removed on request; you may email contact@nyrus.ai to ask that identifiable records no longer be selected for future model-improvement datasets. De-identified or aggregated evaluation and training data may be retained where permitted by law. Data already included in a training run that is underway, and improvements already incorporated into trained model weights, cannot generally be traced back and selectively reversed.

7

AI-Generated Output

CATO uses artificial intelligence models to generate the analysis results, code, visualizations, and text defined as AI Output in Section 6. You acknowledge and agree that:

  • AI Output may contain errors, inaccuracies, or biases and should not be relied upon as the sole basis for scientific conclusions, clinical decisions, or regulatory submissions
  • You are solely responsible for reviewing, validating, and verifying all AI Output before use in research, publications, or any downstream applications
  • AI Output does not constitute medical, clinical, legal, or professional advice of any kind
  • Statistical results, p-values, and analytical conclusions generated by CATO must be independently verified using established scientific methodology
  • AI Output may vary between sessions even for identical inputs, and reproducibility is not guaranteed
  • AI capabilities are periodically expanded with new analysis libraries and tools. Users should validate all outputs, especially when using newly available analytical methods

CATO is not a medical device. It has not been cleared, approved, or certified by the FDA or any other regulator, and it is not validated for clinical, diagnostic, or in vitro diagnostic use. The Service is not intended for use in the diagnosis, treatment, or management of any health condition. If you use the Service or AI Output in a clinical, diagnostic, or otherwise regulated healthcare context, you do so on your own responsibility, including responsibility for any regulatory requirement, validation, or professional oversight that applies.

You are responsible for ensuring that your use of AI Output complies with the publication guidelines of any journals, institutions, or funding bodies to which you submit work.

8

Intellectual Property

Our Property

The Service, including its design, architecture, source code, documentation, branding, and all associated intellectual property rights, is and remains the exclusive property of Nyrus. These Terms do not grant you any right, title, or interest in the Service except the limited right to use it in accordance with these Terms.

Your Output

As between you and Nyrus, and to the extent permitted by applicable law, you own the Output. We hereby assign to you all of our right, title, and interest, if any, in and to the Output. You are free to use, publish, and distribute your Output without restriction, provided you comply with these Terms, applicable laws, and institutional policies.

Feedback

If you provide feedback, suggestions, or ideas about the Service, you grant us a perpetual, irrevocable, royalty-free license to use that feedback for any purpose, including to improve the Service, without any obligation to you.

9

Third-Party Services

CATO relies on third-party service providers for AI inference, application hosting and databases, file and sandbox infrastructure, error monitoring, payment processing, and email delivery. The current providers, the function each performs, the data it receives, and its retention posture are listed on our Subprocessors and Service Providers page, which we update before a new provider receives production user data. By using CATO, you acknowledge that your data may be processed by those providers in accordance with their respective terms.

We do not authorize our AI inference or retrieval providers to use your User Content to train their models. The Literature Intelligence feature transmits your search queries to public academic, clinical trial, and patent databases so that it can retrieve results; those services are external data sources with their own terms.

Sandboxed analyses may make outbound HTTPS requests to an approved list of public destinations, such as package repositories, code hosts, and scientific databases, for package installation, data retrieval, or code that you request or approve. CATO blocks sandbox access to every other destination, including internal cloud networks and metadata services. Data your code sends to an approved destination is subject to that destination's terms, and you are responsible for ensuring the transfer is appropriate for your data.

Contracted service providers process data for CATO under their applicable agreements. Public research services operate under their own terms and policies. Review our Privacy Policy, Data Processing notice, and Subprocessors page for details about how data is handled.

10

Limitation of Liability

To the maximum extent permitted by applicable law, Nyrus and its officers, directors, employees, and agents shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including:

  • Loss of data, revenue, profits, or business opportunities
  • Errors, inaccuracies, or omissions in AI-generated output
  • Service interruptions, downtime, or data loss
  • Actions taken based on analysis results produced by the Service
  • Unauthorized access to or alteration of your data

Our total aggregate liability for any claims arising out of or relating to these Terms or your use of the Service shall not exceed the greater of (a) the amount you paid to us in the twelve (12) months preceding the claim, or (b) one hundred U.S. dollars ($100).

These limitations do not apply to liability that cannot be limited under applicable law, including liability arising from our gross negligence, willful misconduct, or fraud. Some jurisdictions do not allow the exclusion or limitation of incidental or consequential damages, so some of the above limitations may not apply to you; in that case our liability is limited to the greatest extent permitted by law.

If you use CATO under a separate written agreement with Nyrus, such as a pilot, institutional, or enterprise agreement, the liability terms in that agreement apply instead of this Section.

11

Indemnification

To the extent permitted by applicable law, you will defend Nyrus and its officers, directors, employees, and agents against any third-party claim, demand, or proceeding, and pay the resulting damages, losses, costs, and reasonable legal fees, if the claim arises out of or relates to:

  • Your use of the Service, or anything you publish, distribute, or act on that contains Output
  • Your Input, including any claim that it was provided without the rights, consents, or approvals described in Section 6
  • Your breach of these Terms, the Usage Policy, or applicable law

We will give you prompt notice of any such claim, reasonable cooperation at your expense, and control of the defense and settlement, except that you may not settle a claim in a way that admits fault on our behalf or imposes an obligation on us without our written consent. We may take part in the defense with our own counsel at our own expense.

12

Disclaimer of Warranties

The Service is provided on an "as is" and "as available" basis without warranties of any kind, whether express, implied, or statutory, including implied warranties of merchantability, fitness for a particular purpose, accuracy, and non-infringement.

Without limiting the foregoing, we do not warrant that:

  • The Service will be uninterrupted, timely, secure, or error-free
  • AI-generated results will be accurate, complete, or suitable for any particular purpose
  • The Service will meet your specific requirements or expectations
  • Any defects in the Service will be corrected

You assume all risk associated with your use of the Service and any reliance on AI Output.

13

Termination

By You

You may terminate your account at any time by contacting us or through your account settings. Upon termination, your right to access the Service ceases immediately. You remain responsible for any outstanding fees incurred prior to termination. If you close your account before the end of a paid period, you give up the rest of that period and no refund is due.

By Us

We may suspend or terminate your account at any time if we reasonably believe that you have violated these Terms or engaged in fraudulent or abusive behavior, or if the law requires it. Where practicable, we will provide advance notice and an opportunity to export your data before termination.

If you believe a suspension or termination was made in error, you may appeal by emailing contact@nyrus.ai with the details. We will review the appeal and tell you the outcome.

Effect of Termination

Upon termination, your license to use the Service terminates immediately. Sections of these Terms that by their nature should survive termination continue in effect, including User Content and Data, Limitation of Liability, Indemnification, Disclaimer of Warranties, Intellectual Property, Dispute Resolution, and General Provisions, and you remain responsible for any unpaid fees.

14

Dispute Resolution

Please read this Section carefully. It requires that most disputes between you and Nyrus be resolved by binding individual arbitration rather than in court, and it limits the ways you can seek relief. You can opt out of arbitration as described below.

Informal Resolution First

Before either of us starts arbitration or a lawsuit, we agree to try to resolve the dispute informally. You start by emailing a written notice to contact@nyrus.ai with "Dispute Notice" in the subject line, describing the dispute and what you want; we start by emailing the address on your account. The notice must be sent by the person with the dispute, not by counsel alone. Either of us may then ask for a video or telephone conference to discuss it. If the dispute is not resolved within 60 days after the notice is received, either of us may begin arbitration. Any limitation period is paused during that 60-day window.

Binding Arbitration

Except as provided below, any dispute, claim, or controversy arising out of or relating to these Terms or the Service, regardless of when it arose, will be resolved by binding arbitration. The arbitration will be administered by the American Arbitration Association under its Consumer Arbitration Rules or, where you use the Service on behalf of an organization, its Commercial Arbitration Rules. The Federal Arbitration Act governs the interpretation and enforcement of this Section. The arbitration will be conducted by a single arbitrator, by video conference or written submissions unless the arbitrator decides a hearing is necessary, in which case it will be held, at your choice, in Delaware or in a location reasonably convenient to you. The arbitrator has exclusive authority to decide all issues, including the scope and enforceability of this Section, except that a court, not the arbitrator, decides whether the Class Action and Jury Trial Waiver is enforceable. The arbitrator may award the same relief a court could award to you individually, and judgment on the award may be entered in any court with jurisdiction. Arbitration fees are allocated under the applicable AAA rules, and Nyrus will not seek its legal fees from you in arbitration unless the arbitrator finds your claim frivolous.

Exceptions

Either of us may bring an individual claim in small claims court if it qualifies. Either of us may also seek an injunction or other equitable relief in court to stop unauthorized use or abuse of the Service or infringement of intellectual property rights.

Class Action and Jury Trial Waiver

You and Nyrus agree that each may bring claims against the other only in an individual capacity and not as a plaintiff or class member in any purported class, collective, consolidated, or representative proceeding. The arbitrator may not consolidate more than one person's claims or preside over any form of representative proceeding. To the extent a claim proceeds in court rather than arbitration, you and Nyrus each waive any right to a jury trial.

Batch Arbitration

If 25 or more claims raising substantially similar issues are asserted against Nyrus by the same or coordinated counsel within 90 days, you and Nyrus agree to ask the administrator to group them into batches of up to 50 and assign one arbitrator to each batch, with a single set of fees and a single hearing per batch. This paragraph does not affect the individual nature of each claim.

Opt-Out

You may opt out of arbitration by emailing contact@nyrus.ai with "Arbitration Opt-Out" in the subject line, your name, and your account email, within 30 days of creating your account or, for a change to this Section, within 30 days of that change taking effect. If you opt out, the rest of these Terms still apply, and disputes will be resolved in the courts named in Section 15.

Severability of this Section

If any part of this Section is found unenforceable, the rest remains in effect, except that if a finding would allow a class, collective, consolidated, or representative proceeding to go forward in arbitration, this entire Section is unenforceable as to that dispute, which will then be resolved in court.

15

General Provisions

Governing Law

These Terms shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of law provisions. Subject to Section 14, any dispute arising from these Terms shall be resolved exclusively in the state or federal courts located in Delaware, and you consent to their jurisdiction.

Trade Controls

You must comply with all applicable export control, sanctions, and trade laws, including those of the United States. You may not use the Service in, or for the benefit of, any country or territory subject to comprehensive U.S. sanctions, or if you are on a U.S. government restricted-party list, and you may not use it for any end use those laws prohibit. Your Input must not include data, sequences, designs, or technical information whose release or export requires a government license, including controlled biological agents, toxins, and related technology.

Assignment

You may not assign or transfer these Terms or your account without our prior written consent, and any attempt to do so is void. Nyrus may assign these Terms to an affiliate or to a successor in connection with a merger, acquisition, or sale of all or substantially all of its assets, and will notify you if it does.

Force Majeure

Neither party is liable for any delay or failure to perform, other than a payment obligation, caused by events beyond its reasonable control, such as natural disasters, epidemics, war, terrorism, labor disputes, government action, failures of the internet or of third-party infrastructure or AI inference providers, or utility outages.

Changes to These Terms

We may update these Terms from time to time, for example to reflect changes in the law, in the Service, or in how we operate it. If a change materially and adversely affects your rights or obligations, we will notify you by email or through a prominent notice within the Service at least 30 days before it takes effect. All other changes take effect when we post the updated Terms with a new effective date. Your continued use of the Service after a change takes effect constitutes acceptance of the updated Terms; if you do not agree, stop using the Service before that date.

Changes to these Terms do not apply to any dispute between you and Nyrus that arose before the change took effect. That dispute is governed by the version of these Terms in force when it arose.

Notices

Legal notices to Nyrus under these Terms must be sent by email to contact@nyrus.ai with "Legal Notice" in the subject line, and are effective when received. We may give you notice by email to the address on your account, which is effective when sent, or by a notice within the Service, which is effective when posted. Keep your account email current.

Severability

If any provision of these Terms is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary, and the remaining provisions shall remain in full force and effect.

Separate Written Agreements

If you use CATO under a separate written agreement between Nyrus and you or your organization, such as a pilot, institutional, or enterprise agreement, that agreement governs your use. Where it conflicts with these Terms, the Privacy Policy, the Usage Policy, or the Data Processing notice, the separate agreement controls. Nothing in these Terms reduces the data-use, confidentiality, security, or deletion commitments Nyrus has made in such an agreement, including any restriction on using your content to train or improve models.

Entire Agreement

Subject to the preceding paragraph, these Terms, together with our Privacy Policy, Usage Policy, and Data Processing notice, constitute the entire agreement between you and Nyrus regarding your use of the Service and supersede all prior versions of these documents.

No Waiver

Our failure to enforce any right or provision of these Terms shall not constitute a waiver of that right or provision.

Contact

If you have questions about these Terms, please contact us at contact@nyrus.ai.