Terms of Service

By creating a Recalled account, accessing the dashboard at recalled.dev, or sending a request to our API, you confirm that you have read, understood and accepted these Terms of Service and our Privacy Policy.

If you are using Recalled on behalf of an organization, you represent that you are authorized to accept these terms on behalf of that organization.

If you do not agree with these terms, you must not use the Service.

Recalled provides an API and a dashboard for recording, storing, searching, and exporting audit log events generated by your own applications.

The Service includes: a REST API at /v1/*, an npm SDK package named "recalled", a web dashboard at recalled.dev, and an embeddable React component for displaying audit logs inside your own product.

We may add, modify, or remove features at any time. We will notify active users of material changes by email at least 30 days in advance when practical.

To use the Service, you must create an account with a valid email address. You are responsible for maintaining the confidentiality of your credentials, API keys, and embed tokens.

You must notify us immediately of any unauthorized access to your account or any other security breach. We are not liable for any loss caused by your failure to protect your credentials.

You must be at least 16 years old to create an account.

Recalled offers a Free plan and paid plans (Pro, Scale). Current pricing, features, and quotas are displayed on the home page and inside the dashboard, and are subject to change with 30 days notice for existing subscriptions.

Paid plans are billed monthly in advance via Stripe. Your subscription renews automatically at the end of each billing period until you cancel from the dashboard.

If you exceed the event quota of your plan, the API returns HTTP 429 for further ingestion attempts until the start of the next billing cycle or until you upgrade. We never silently drop events.

Refunds are issued on a case-by-case basis for clear service unavailability. Please contact contact@recalled.dev.

You agree not to use the Service to store unlawful content, to log data you do not have the right to collect, to reverse engineer or disrupt the Service, to exceed published rate limits in a way that degrades service for other customers, or to abuse the free tier with multiple accounts.

You are solely responsible for the content of the events you send to Recalled. You must not send personal data you are not authorized to process under applicable privacy laws.

We reserve the right to suspend accounts that violate these rules, after notice when practical.

Recalled, the Service, the dashboard, the SDK, and all related materials are owned by Recalled and protected by intellectual property laws.

You retain full ownership of the audit log data you send to Recalled. We claim no rights over your event data.

We grant you a non-exclusive, revocable license to use the SDK and the embeddable component within the scope of your subscription.

Recalled acts as a data processor on your behalf for the audit log events you send us. You act as the data controller.

A Data Processing Agreement (DPA) compliant with GDPR Article 28 is automatically in effect upon subscription. You can request a signed copy at contact@recalled.dev.

Data is hosted exclusively within the European Union. We do not transfer audit log data outside the EU unless explicitly agreed with you in writing.

For more details on how we process data, see our Privacy Policy.

Customers on the Scale plan are covered by a contractual Service Level Agreement committing Recalled to a monthly uptime of 99.9% on the covered endpoints, with the exclusions, measurement method, remedy and claim process set out in our SLA available at recalled.dev/sla. Customers on the Free and Pro plans are provided the Service on a best-effort basis with no contractual availability commitment.

To protect your audit trail during transient API unavailability on any plan, the official Recalled SDK (npm package "recalled") includes built-in client-side resilience: events emitted via the SDK while the ingestion API is unreachable are held in an in-memory queue on the client side and automatically retried with exponential backoff for up to 24 hours. Short API interruptions are therefore transparent to your application, provided the client process remains alive long enough for the retry mechanism to complete.

Scheduled maintenance is announced at least 48 hours in advance and performed outside of business hours (Europe/Paris) when possible.

Live uptime is published on our public status page at https://recalled.openstatus.dev, which is the authoritative reference for measured availability under the SLA.

In case of material and prolonged unavailability on plans without a contractual SLA, contact contact@recalled.dev: we review every situation on a case-by-case basis.

To the fullest extent permitted by law, our total liability for any claim arising from or related to the Service is limited to the amount you paid to Recalled in the 12 months preceding the event giving rise to the claim.

We are not liable for any indirect, consequential, incidental, or punitive damages, including loss of profit, loss of data, business interruption, or loss of reputation.

Nothing in these terms limits our liability for fraud, willful misconduct, or any liability that cannot be limited under applicable law.

You can cancel your subscription at any time from the dashboard. The cancellation takes effect at the end of your current billing period.

We may suspend or terminate your account for material breach of these terms, non-payment, or abusive behavior, after reasonable notice when practical.

Upon termination, you have 30 days to export your data via the export API. After this period, we permanently delete your data, except for anonymized data required by law or for the integrity of the Service.

We may update these Terms of Service from time to time. Material changes will be notified by email to active customers at least 30 days before they take effect.

Continued use of the Service after the effective date constitutes acceptance of the updated terms.

These Terms of Service are governed by French law. Any dispute arising from or related to the Service will be submitted to the exclusive jurisdiction of the competent courts of Paris, France, except where mandatory consumer protection laws provide otherwise.

For any question about these terms, write to contact@recalled.dev. We aim to reply within 2 business days.