Cowboy Hub

Terms of Service

Last updated

Draft for legal review. This text is not in force yet.

Who these terms are between

These terms are an agreement between [Company legal name], [Registered address] (“we”, “us”), and the customer who creates a Cowboy Hub workspace (“you”). If you create a workspace for a company or another organisation, you accept these terms for it and confirm that you may do so.

You accept these terms when you create a workspace, by ticking the box on the sign-up page. You accept them again when you choose a paid plan at checkout. The workspace records which version you accepted and when.

The service

Cowboy Hub (“the Hub”) is a paid web service for managing many WordPress sites from one place. It works on top of Cowboy MCP, a free WordPress plugin. Through the Hub you can connect sites, set a policy per site, approve changes, read one activity timeline, use the Hub’s MCP server from your AI client, run built-in skills, and talk to an agent over email, Telegram or Slack.

The Cowboy MCP plugin is separate from the Hub. It stays free, keeps working without a Hub account, and has its own licence. These terms do not cover the plugin.

The beta

The Hub is in beta. It is beta software: it can have bugs, features can change or be removed, and the service can be interrupted while we work on it.

We tell workspace owners by email before a change that removes something they pay for.

Accounts, workspaces and members

You sign in with a link sent to your email address or with Google. There are no passwords. Keep access to your email account and your Google account secure, because they are how you sign in.

A workspace holds your sites, settings and activity. Each person in it has one of three roles:

  • Owner: everything an admin can do, and the only role that chooses or changes the plan and pays.
  • Admin: approves changes, manages members and changes site settings.
  • Member: uses the Hub on the workspace’s sites. In the beta every member sees every site.

Members join under your workspace. You are responsible for who you invite, for what they do in the Hub, and for removing people who should no longer have access.

Read-only workspaces

A workspace becomes read-only when its paid plan ends, or when it has more sites than its plan allows. In a read-only workspace:

  • reads, dry runs, the activity timeline and the approval inbox keep working;
  • every change on a site is refused, not queued. This includes changes approved before the plan ended, when they come to run;
  • you cannot connect a new site;
  • the Hub keeps your sites connected, and keeps putting a site’s Cowboy MCP settings back to the ones your workspace approved, if they are changed outside the Hub.

It becomes writable again once an owner has chosen a plan and the workspace is within its limits.

Plans and prices

There are two plans:

  • Studio: US$29 a month, up to 10 sites and 3 members.
  • Agency: US$99 a month, up to 40 sites and 10 members.

Plans are billed monthly. Prices exclude tax. Stripe Tax adds VAT or sales tax where it applies. A business in the EU can enter its VAT number at checkout. Discount codes apply as Stripe shows them at Checkout.

Site and member limits apply to every plan. Every site in the workspace counts, including disconnected ones, until you remove it. Pending invites count as members. At the site limit you cannot connect another site. Over the site limit, for example after moving to a smaller plan, the workspace is read-only until you remove sites. At the member limit you cannot invite another member; nobody loses access.

The Hub never charges for usage: there is no per-call or per-token metering. Model usage through your own OpenRouter key is billed to you by OpenRouter, not by us.

Billing, cancelling and refunds

Payments go through Stripe. You subscribe on a Stripe-hosted checkout page, and you manage your card, invoices, billing address, plan and cancellation in the Stripe customer portal. We never see or store card numbers.

Each month is charged at its start.

If a renewal payment fails, the workspace keeps working while Stripe retries the card. If the payment still fails and the subscription ends, the workspace becomes read-only.

You can cancel at any time in the customer portal. Cancelling takes effect at the end of the current billing period; the workspace stays writable until then. Plan changes are prorated by Stripe.

We do not refund a month that has started, except where the law requires it.

Your responsibilities

You are responsible for:

  • connecting only sites you are authorised to manage, and adding server access only where you may use it;
  • the policy you choose for each site (Ask first, Allow all or Read only), and every change you or your admins approve;
  • the AI clients you and your members connect to the Hub, and what you ask them to do;
  • your OpenRouter key, the model you choose and its costs, which OpenRouter bills to you directly;
  • the people you invite to the workspace and link to the agent;
  • your own backups of your sites. The Hub’s restore copies are a safeguard, not a backup service.

The outcomes of what happens on your sites through the Hub are your responsibility as the workspace owner, including the outcomes of changes made by an AI on your instructions.

What we commit to

Our commitment is the safeguards below. We do not commit to anything beyond them.

  • An approval ticket for every change on a site set to Ask first: the change waits until an owner or admin approves it. Every change to a site’s Cowboy MCP settings needs a ticket, whatever the policy.
  • A restore copy in Hub storage, kept for 30 days, of every file the Hub changes or deletes over server access, made before the change.
  • An audit trail on both sides: every call and every server action in the Hub’s activity timeline, kept for 90 days, and every call that goes through the plugin also in the site’s own Cowboy MCP log.
  • The plugin’s undo for a change, where the plugin offers undo for it.
  • Revoking from either side: you can revoke the Hub’s access to a site from the site’s own wp-admin or from the dashboard, and the Hub stops working on that site at once.

How we protect your data is described on the Security page.

No uptime or recovery guarantee

We give no uptime guarantee. The Hub can be unavailable. Your sites keep working when the Hub is down, and any direct connections you have to the plugin keep working too.

We give no recovery guarantee. The safeguards above make many changes reversible, but we do not promise that any change, site, file or data can be restored.

The service is provided “as is”, to the extent the law allows.

Acceptable use

You must not use the Hub to:

  • access, test or attack a site or server you are not authorised to manage;
  • store, publish or spread illegal content or malware;
  • break the law, or the rights of others;
  • overload, probe or get around the Hub’s own security or limits;
  • resell or give access to the Hub to third parties outside your workspace, unless we agree in writing.

Managing your clients’ sites in your own workspace is normal use, not reselling.

AI output

AI clients and models can be wrong. They can misread a site, propose the wrong change, or report a result that is not true. Check previews and dry runs before you approve a change, and check the result after it. The Hub’s skills tell the model to treat site content as data, not as instructions, but no safeguard catches every mistake a model makes.

Third-party services

Some parts of the Hub depend on services you choose: OpenRouter and the model provider behind it, Telegram, Slack, your AI clients, and your sites’ hosts. They are under their own terms and policies, and we are not responsible for them. The services we use to run the Hub are listed in the Privacy Policy.

Liability

[Placeholder for legal review.] To the extent the law allows, we are not liable for indirect or consequential loss, including lost profits, lost revenue, lost data or damage to your sites, and our total liability for all claims under these terms is limited to the fees you paid us in the 12 months before the event that gave rise to the claim.

Nothing in these terms limits liability that cannot be limited by law.

Suspension and termination

You can stop using the Hub at any time: cancel the subscription, revoke the Hub on your sites, and ask us to delete the workspace.

We can suspend a workspace, or a member, if they break these terms, if a payment is not made, or if it is needed to protect the Hub, other customers or a site. We tell the owner why, unless the law or a security reason prevents it. We can end these terms with [30] days’ notice by email, or at once for a serious breach.

Your data, export and deletion

Your data stays yours. While the workspace exists you can ask us for an export of its data by email. After the workspace ends we delete its data within [30] days, except billing records that tax law requires us to keep.

How we handle personal data is in the Privacy Policy and the Data Processing Terms, which form part of these terms.

Changes to these terms

We may change these terms. We tell workspace owners by email at least [30] days before a change that matters, and the date at the top of this page changes. If you do not agree, you can cancel before the change takes effect. If you keep using the Hub after that, the new terms apply.

Governing law

These terms are governed by [Governing law and courts].

Contact

Questions about these terms: hub@cowboymcp.com.