Terms of Service
Effective date: 2026-07-25 | Last updated: 2026-07-25
Welcome to MsgMesh (the "Service"). The Service is a multi-tenant, managed "persistent event bus" built on Apache Kafka, letting developers and teams connect to real-time messages and event streams with minimal setup.
These Terms of Service (the "Terms") form a legal agreement between you and the operator of the Service regarding your use of it. Please read them carefully; by registering for or using the Service, you agree to these Terms. The Service is currently in public Beta, so please pay particular attention to the provisions below concerning Beta status, as-is disclaimers, and data retention.
1.Acceptance and Eligibility
Please read these Terms carefully before using the Service. By registering, creating an account, or otherwise accessing or using the Service, you confirm that you have read, understood, and agree to be bound by these Terms. If you do not agree, do not use the Service.
You must have full legal capacity to use the Service. If you are a minor under the laws of your jurisdiction, you may use the Service only with the consent of your legal guardian. If you use the Service on behalf of an organization, you represent and warrant that you are authorized to bind that organization to these Terms.
The Service is operated by an individual or a small team. You may contact us at [email protected], or through any other contact method announced by the Service.
2.Description of the Service
The Service is a multi-tenant, managed "persistent event bus" built on Apache Kafka. It lets you publish and subscribe to real-time messages and event streams with minimal setup, through interfaces including HTTP, Server-Sent Events (SSE), WebSocket, the Model Context Protocol (MCP), and our official SDKs.
Typical use cases include customer support systems, chat rooms, event management, and AI agents subscribing to events. You can create your own topics and connect using API keys.
The Service is currently in public Beta, and its features and interfaces may continue to change. We reserve the right to add, modify, or discontinue any part or all of the Service at any time.
3.Accounts and Security
To create an account, you must provide a valid email address and set a password. Passwords are stored hashed using argon2id; we do not store your password in plain text. You may also choose to sign in with Google or Telegram.
You are responsible for all activity under your account and for safeguarding your credentials and API keys. API keys are stored hashed; once generated, the original key cannot be shown to you again, so please store it securely at the time of creation. A key grants access equivalent to your account—never publish it or embed it in untrusted clients.
If you become aware of any unauthorized use of your account or keys, please notify us promptly using the contact method above. You are responsible for keeping your registration information accurate and up to date.
4.Acceptable Use Policy
When using the Service, you agree not to do, and not to help others do, any of the following:
- violate any applicable law, or transmit or store unlawful content;
- send spam, bulk unsolicited messages, or engage in any abusive or fraudulent communication;
- infringe the intellectual property, privacy, trade secrets, or other rights of others;
- upload or distribute malware or viruses, or attempt to gain unauthorized access to the Service, other tenants, or any system;
- use resources beyond a reasonable scope, circumvent quotas or usage limits, or interfere with or disrupt the normal operation of the Service;
- transmit harassing, hateful, violent, or otherwise harmful content.
You are solely responsible for content you publish, transmit, or store through the Service. We do not proactively monitor user content, but we may remove content or restrict access where necessary (for example, upon a report or as required by law).
If content you transmit or store through the Service contains the personal data of third parties, you are the data controller of that personal data and represent and warrant that you have a lawful basis for its collection, use, and transmission (including, where necessary, the consent of the data subjects or another lawful ground). We process such content solely to provide, deliver, and store it within the retention period you configure, and only in accordance with your instructions—that is, acting as a data processor.
5.Data Collection and Privacy
To provide the Service, we collect and process the following personal data and service data:
- Account data: your registration email and hashed password (argon2id); or, if you use third-party sign-in, the email and name provided by Google, or the user ID and username provided by Telegram.
- Service data: the content of messages and events you publish or receive through the Service, the topics you create, API keys (stored hashed), and usage metering data (message counts and byte counts) for quota management and, if billing is enabled in the future, as the basis for billing (the Service is free during Beta).
- Analytics data: we use a self-hosted Matomo with privacy-first settings—no cookies, IP anonymization, and respect for the browser's Do Not Track (DNT) setting.
- Technical logs: standard server logs (such as IP address and timestamps) for security and operations.
The above data is primarily stored and processed in Taiwan. However, when you use third-party sign-in, or when we send emails or proxy traffic, limited related data (such as your email address) may be processed outside Taiwan by Resend, Google, Telegram, or Cloudflare, subject to their respective privacy policies (see the next section). We strive to follow the fundamental principles of personal data protection, collecting and using only the data necessary to provide, operate, and improve the Service.
6.Third-Party Services and Processors
The Service uses the following third-party services to help operate it, and may transmit relevant data to them to the extent necessary:
- Resend: to send verification and notification emails, which involves transmitting the recipient's email address.
- Google / Telegram: only when you choose third-party sign-in, to verify your identity.
- Cloudflare: for CDN, DNS, and edge traffic proxying (static sites and traffic delivery).
Payment data: the Service is entirely free during Beta and has not enabled any payment processing, so we currently do not collect any payment data. If we begin charging in the future, we will update these Terms and describe the relevant processing.
7.Your Data Rights
With respect to your personal data, you may request to access or review it, to supplement or correct it, to delete it, and to delete your account.
To exercise these rights, please submit a request via [email protected] (or another contact method announced by the Service). We will process your request within a reasonable time. Please note that some data may be retained for a period as required by law or for operational needs.
8.Beta and As-Is Provision
The Service is currently in public Beta and is provided on an "as-is" and "as-available" basis. During Beta:
- the Service provides no service level agreement (SLA) and does not guarantee availability, uninterrupted operation, freedom from errors, or timely responses;
- the Service may reset data in the test environment for testing or maintenance purposes. Do not store the only copy of, or business-critical, data on the Service, and please keep your own backups;
- message retention depends on your plan (for example, roughly 1 day on the free tier and roughly 30 days on metered tiers); messages beyond the retention period are automatically deleted.
We may change, suspend, or terminate the Beta at any time without individual notice.
9.Fees
The Service is provided free of charge during Beta. No payment processing is currently enabled, and no payment data is collected.
Any future pricing and plans are only tentative directions at this stage and may change before general availability. If we begin charging, we will announce it in advance via the website or email and update these Terms; you may then choose whether to continue using the Service.
10.Intellectual Property
Your data: you retain the rights you already hold in the messages and content you publish, transmit, or store through the Service ("User Content"). We do not claim ownership of your User Content.
To the extent necessary to provide the Service (for example, to receive, deliver, buffer, route, and store messages within your configured retention period), you grant us a non-exclusive, worldwide, royalty-free license to process your User Content. This license exists solely to operate the Service and ends when the corresponding data is deleted or your account is terminated.
Our rights: the Service's platform, software, SDKs, documentation, trademarks (including the "MsgMesh" name), and other related intellectual property belong to the Service or its licensors. Except as expressly granted in these Terms, you acquire no such rights by using the Service.
11.Suspension and Termination
You may stop using the Service at any time and request deletion of your account using the contact method above.
If you violate these Terms, engage in abusive or unlawful conduct, or your use poses a risk to the Service or other users, we may suspend or terminate your access to all or part of the Service. Where circumstances permit, we will make reasonable efforts to notify you in advance or promptly.
After termination, data associated with your account may be deleted. Given the Beta nature of the Service, we are not responsible for data loss resulting from suspension or termination; please keep your own backups.
12.Disclaimer and Limitation of Liability
To the maximum extent permitted by applicable law, the Service is provided "as-is" and "as-available," without warranties of any kind, whether express or implied, including but not limited to merchantability, fitness for a particular purpose, non-infringement, and uninterrupted or error-free operation.
To the extent permitted by applicable law, we are not liable for any indirect, incidental, special, punitive, or consequential damages, or for loss of profits, data, or goodwill.
However, nothing in these Terms excludes or limits any liability that cannot be excluded or limited under the laws of the Republic of China (Taiwan), including liability arising from intent or gross negligence, and any mandatory rights you have under applicable consumer protection law. If any limitation of liability is found to be invalid, our liability shall be limited only to the minimum extent permitted by law.
13.Indemnification
You agree, to the extent permitted by law, to indemnify and hold the Service harmless from any claims, damages, losses, or expenses (including reasonable attorneys' fees) brought by a third party arising from your breach of these Terms, your violation of applicable law, or your User Content or use of the Service.
14.Changes to These Terms
We may revise these Terms from time to time to reflect changes in features, legal requirements, or operational needs. Revised Terms will be posted on the website (msgmesh.alderflux.com) with an updated effective date at the top; for material changes, we will make reasonable efforts to provide additional notice.
Your continued use of the Service after the revised Terms take effect constitutes your acceptance of them.
15.Governing Law and Jurisdiction
These Terms, and any dispute arising out of these Terms or the Service, are governed by the laws of the Republic of China (Taiwan), excluding its conflict-of-laws rules.
For such disputes, the parties agree that the courts of Taiwan shall have jurisdiction as the court of first instance, without prejudice to any mandatory consumer protection venue rules that belong to you under law.
16.Severability
If any provision of these Terms is held by a court or competent authority of competent jurisdiction to be invalid, unlawful, or unenforceable, the remaining provisions shall remain in full force and effect; the affected provision shall, to the extent permitted by law, be interpreted or adjusted in a valid manner that most closely reflects its original intent.
17.Contact Us
If you have any questions about these Terms, or wish to exercise your data rights, please contact us:
- Email: [email protected] (currently our only external contact channel; this may change to a domain mailbox after Beta)
- Website: msgmesh.alderflux.com
The Service is operated by an individual or a small team. We will respond to your message within a reasonable time.