Rules document

Terms of service

These terms explain the rules for using Gracer Works and the limits of the provider's liabilityUsing the service means accepting these terms in full

Last corrected 30 September 2026

Account access

Signup is closed. A person must receive an invite code from an administrator before an account can be created An administrator can revoke an invite code or limit how many times it works

Account and responsibility

A person is responsible for their own account and must keep their password safe
An organization admin adds and removes that organization's members
Do not act on behalf of another organization, or try to reach data you are not authorized for

Data you put into the system

Project data, tasks, comments and attachments belong to your organization The provider is responsible for the security of the data, but not for the accuracy or completeness of the content.

API key

You can create an API key so an external system can act on your behalf. Each key is bound to one organization and should be kept secret like a password, because it can be handed straight on with no second check

If a key leaks, revoke it in settings straight away. Revoking takes effect immediately for every request using it

AI Agent

When an agent connects through MCP or OAuth 2.0 it works within that organization's access You must set the scope and permissions yourself, and should check the agent's behaviour periodically

Service provision

The service may be stopped for maintenance or upgrades, and the provider may amend these terms with notice through the contact channel users can reach

Limitation of liability

The provider is liable for damage to the extent the applicable law allows.