User Terms of Service

Your rights and responsibilities as a person using Carom

Last updated: July 26, 2026

Notice

These terms require most disputes to be resolved by individual arbitration rather than in court, and waive your right to participate in a class action. You may opt out within 30 days. See Warranties, liability, and disputes.

Summary

• Whoever pays for the account controls it and can remove you from it.
• What you create in the shared workspace — comments, tasks, notes, tags — stays with the account.
• What comes out of your mailbox is not shared with colleagues unless you share it.
• Whoever controls your mailbox at Google or Microsoft ultimately controls that data. If your employer administers your mailbox, they can reach it. See When your employer controls your mailbox.

Who these terms cover

You are a User if you use Carom, whether you were invited into an account someone else set up or created the account yourself.

If you joined your company’s account, you are a User and your employer is the Customer. If you signed up on your own for your own business, you are both the User and the Customer, and the Customer Terms apply to you as well.

Carom is for business use. The Services are offered for business, professional, nonprofit, and organizational purposes, not for personal, family, or household use. You must be at least 18 years old, and the Services are offered in the United States only.

You accept these terms when you set up your account or accept an invitation to join one. Continued use after we notify you of a change constitutes acceptance of the revised version.

Your relationship with the account owner

The Customer controls the account. They may remove your access, change your permissions, or restrict what you can see, at any time and for any reason. That is a matter between you and them, not something we decide or can override.

Your actions may cost them money. If the Customer permits you to add mailboxes or invite people, those actions incur fees on their account.

Connecting a mailbox

When you connect a mailbox, you are authorizing us directly. You give Carom and the vendors listed in our Privacy Policy permission to access, store, and process the mail, attachments, calendar events, and contacts in that mailbox, in order to provide the Services to you and to the account you belong to.

You confirm you are entitled to connect it. The mailbox must be yours, or one you are authorized to access and bring into the account. You can disconnect it at any time, and you can revoke our access entirely from your email provider’s security settings.

Who owns what

We claim no ownership of anything you bring or create. These terms do not decide ownership or other rights as among you, the Customer, your mailbox administrator, the people who wrote to you, or anyone else.

What you create in the shared workspace stays with the account. Comments, tasks, notes, tags, and similar content you produce while using Carom remain available to the Customer, who may read, edit, share, and delete it, including after your access ends. You grant Carom and the Customer a non-exclusive, worldwide, royalty-free license to host, store, copy, display, modify, and share that content for the purpose of operating the account and providing the Services. That license is irrevocable as to content you have already created, and survives the end of your access so the account can keep working without you.

Feedback. If you send us suggestions or comments about Carom itself — not your data or anyone’s confidential information — you grant us a perpetual, irrevocable, worldwide, royalty-free license to use them for any purpose, with no obligation to you.

What we import from your mailbox is not shared automatically. Your messages, files, calendar events, and contacts are visible to you. Carom does not show them to anyone else on the account unless you share them, and you can revoke sharing at any time. Shared mailboxes — sales@yourcompany.com, for instance — work differently by design: anyone given access to one can see its contents.

When your employer controls your mailbox

Our commitment not to share your mailbox data governs what Carom does. It does not bind whoever administers your mailbox.

If your employer administers your Google Workspace or Microsoft 365 account, they can take control of it at the provider — reset it, sign in as you, and reach both your mailbox and the Carom data derived from it. No setting in our product changes that.

Our position:

• Access follows the mailbox. Access to data we imported follows control of that mailbox at your email provider.
• We are not a transfer service. When someone asks us to hand over another person’s data — including an employer requesting a departed employee’s — we decline. We do not move data between accounts on request. The Customer Terms say the same thing to your employer.
• We do not resolve ownership disputes. Disagreements about who a mailbox belongs to are between the parties involved.
• Valid legal process overrides this. A subpoena, warrant, or court order takes precedence. Where legally permitted, we will tell you it happened.

If you use a mailbox your employer administers, treat its contents as reachable by your employer. Where a company needs to retain client correspondence after someone leaves, a shared mailbox is the appropriate tool. A genuinely personal mailbox remains under your control.

Acceptable use

Your use of Carom must comply with applicable law, including intellectual property, export control, and anti-spam law.

You agree not to:

• share your account, or use or attempt to use anyone else’s;
• infringe copyright, trademark, or other rights, or engage in unlawful or tortious conduct;
• transmit viruses, malware, or anything designed to damage or gain unauthorized access to systems;
• send spam or unsolicited bulk messages;
• send deceptive messages designed to extract personal information, including phishing;
• use Carom to build a competing product, or to copy our features, functionality, or design;
• reverse engineer, disassemble, hack, disable, overload, or interfere with the Services, or circumvent their security or usage limits, except where the law specifically protects that right;
• use automated means to scrape or extract data beyond what our API permits; or
• enable, encourage, or assist anyone else in the above.

We may suspend or terminate access where we reasonably believe these rules are being broken deliberately, repeatedly, or in a way that threatens other people, our Customers, the Services, or third parties.

We grant you a personal, non-exclusive, non-transferable, revocable right to use the Services for as long as the Customer authorizes your access, subject to these terms. Carom’s software, designs, documentation, and trademarks remain ours, and nothing else is conveyed.

Intellectual property complaints

You may not use Carom to infringe intellectual property rights. If you believe material processed through Carom infringes your copyright, contact legal@carom.io with enough information for us to identify and investigate it. We may remove or disable access to material and suspend repeat infringers where appropriate.

Warranties, liability, and disputes

These terms apply to you directly. They correspond to the equivalent sections of the Customer Terms.

No warranties. The Services are provided “as is” and “as available.” To the fullest extent permitted by law, we disclaim all warranties, express, implied, or statutory, including any implied warranty of merchantability, fitness for a particular purpose, title, accuracy, and non-infringement. We do not warrant that the Services will be available, uninterrupted, or error-free, or that anything they produce — including AI-generated summaries, tasks, tags, and briefings — will be accurate or complete.

On AI output specifically: it is wrong sometimes. It misreads, omits, and asserts incorrect things without signaling uncertainty. Carom organizes what is already in your mail; it does not replace reading it. Do not rely on it for decisions with legal, financial, medical, or safety consequences without checking the source, which we always link.

Limits on liability. We are not liable to you for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, revenue, data, goodwill, or business interruption. Our total liability to you for all claims, taken together, will not exceed the greater of $500 or the amount you personally paid us in the twelve months before the event giving rise to the claim. These limits do not apply to our gross negligence, willful misconduct, or fraud. Where local law does not permit some of these exclusions, they do not apply to you to that extent.

Resolving disputes. This section is governed by the Federal Arbitration Act.

Informal resolution first. Before filing anything, email legal@carom.io describing the problem and what would resolve it. We will spend 60 days trying to work it out. This is a precondition to arbitration and pauses any applicable deadline.

Arbitration. Any dispute arising out of or relating to these terms or the Services that is not resolved informally will be settled by binding individual arbitration administered by the American Arbitration Association under its Commercial Arbitration Rules, together with its Mass Arbitration Supplementary Rules where those apply. Judgment on the award may be entered in any court with jurisdiction. The arbitrator decides questions of arbitrability, except that a court decides whether the class action waiver is enforceable.

Where and what it costs. Arbitration is conducted by phone or video where possible, or in the federal judicial district where you are located. For claims under $25,000 we pay the filing and administrative fees unless the arbitrator finds the claim frivolous.

No class actions. You and Carom each agree to bring claims only individually, and not as a plaintiff or class member in any class, collective, consolidated, or representative action. The AAA’s Mass Arbitration Supplementary Rules apply according to their own terms. Separately, where 25 or more similar claims are filed by or with the assistance of the same counsel, the parties agree they may be administered in batches; each remains legally separate, is decided on its own record, and receives its own award.

Exclusions. Either of us may bring a qualifying claim in small claims court, and either may ask a court for an injunction to protect intellectual property or stop unauthorized access. Nothing here waives the right to seek public injunctive relief in court where such a waiver would be unenforceable, and any such claim is severed and stayed pending arbitration of the rest.

Opting out. Email legal@carom.io within 30 days of first accepting these terms with your name, the account, and the words “arbitration opt-out.” Everything else here still applies. Changes to this section do not apply to disputes that arose beforehand, and a material change gives you a fresh 30-day opt-out.

Arbitrator compensation. The arbitrator’s fees and expenses are allocated under the applicable AAA rules. Where those rules require us to bear them, we will.

If part of this fails. If the class action waiver is held unenforceable for a particular claim, that claim proceeds in court and the rest of this section continues to apply to all others. If any other provision here is held unenforceable, it is limited or removed to the minimum extent necessary and the remainder stays in force.

Courts. For anything not arbitrated, including if you opt out, you and Carom submit to the exclusive jurisdiction of the state and federal courts located in Delaware, and each of us waives the right to a jury trial.

Governing law. Delaware law governs, without regard to its conflict-of-law rules. Nothing here removes protections available to you under the law of your state that cannot be waived.

Notices. We send notices to the email address on your account. You send them to legal@carom.io or to the mailing address below. Email counts as written notice for both of us.

Severability. If any part of these terms is held unenforceable, it is limited or removed to the minimum extent necessary and the remainder stays in force.

Privacy

The Privacy Policy explains what we collect from you, who can see it, and how to have it deleted. In summary: no one at Carom reads your email in the ordinary course — only if you ask us to look at something, or where it is necessary for security or required by law — and we never use your data to train AI models.

Changes

We will update these terms as the product and the law change. The current version, with its date, is at carom.io/policies/user-tos, and prior versions are available on request. We will give at least 30 days’ notice of material changes before they take effect, and changes do not govern disputes that arose beforehand.

Contact

Terms: legal@carom.io Privacy requests: privacy@carom.io Security: security@carom.io Everything else: support@carom.io

Bankshot Software, LLC d/b/a Carom c/o Legalinc Corporate Services Inc. 131 Continental Drive, Suite 305 Newark, DE 19713