Draft. Version 2026-09-19-draft. This document has not yet been reviewed by a lawyer and is not yet in force. Company details marked as placeholders will be completed when Tablemere SL is registered. It is published now so that what the service does today is written down before the first customer relies on it.

Tablemere — Terms of Service

Version: 2026-09-19-draft
Effective: [effective date]
Provider: Tablemere SL (in formation), [registered address], Spain, CIF [CIF/NIF]

DRAFT for lawyer review. Not yet in force. See legal/README.md.

1. Who we are and what this is

1.1 Tablemere SL ("Tablemere", "we") operates Tablemere, a managed Apache Iceberg lakehouse: an Iceberg REST catalog, an S3-compatible object store, a control plane API, a command-line tool and a website, all run by us on servers in Germany (the "Service").

1.2 These Terms are a contract between Tablemere and the organisation or person that opens an account ("you", the "Customer"). By creating an account, or by using the Service, you accept them.

1.3 The Service is for businesses, public bodies, researchers and developers acting in a professional capacity. It is not offered to consumers. You must be at least 18 years old and, if you act for an organisation, authorised to bind it.

1.4 These documents are part of the contract: the Acceptable Use Policy, the Data Processing Agreement (where you store personal data in the Service) and the Privacy Policy. If they conflict, the Data Processing Agreement prevails for personal data, then these Terms, then the other documents.

2. Accounts and organisations

2.1 An account is created with a verified email address. We send a one-time code to the address; the account exists once the code is entered. We do not store passwords for this path.

2.2 The first account holder with a given company email domain creates an organisation. Later account holders with a verified address on the same domain join it automatically if the organisation has enabled that; otherwise they join by invitation. Public mail domains (for example gmail.com) never create or join an organisation by domain. Organisations have owners, admins and members.

2.3 You are responsible for everyone who acts under your organisation's accounts, including automated agents you give credentials to.

2.4 Optionally, a human may sign in through our identity provider at auth.tablemere.eu and then create API keys. Sign-in with third-party identity providers is not offered on the managed Service at the moment.

3. Credentials

3.1 The Service issues three kinds of credentials: long-lived API keys (shown once, stored by us only as a hash), short-lived tokens for our API (15 minutes), and short-lived storage credentials scoped to one table or one warehouse (60 minutes). You keep API keys secret and revoke any key you no longer need. A lost API key cannot be recovered; a new one is issued through the email-code recovery flow, and the old keys keep working until you revoke them.

3.2 You are responsible for what is done with credentials issued to your account until you revoke them or tell us at [security@ address] that they are compromised.

4. The free tier and paid plans

4.1 Every account may use the free tier: up to 5 GB of stored data per organisation. No other dimension is metered on the free tier. Operational limits that exist to prevent abuse (number of tables, namespaces and warehouses, commit rate, number of objects) are listed in the Acceptable Use Policy and are visible to you at GET /v1/usage.

4.2 Paid plans will be announced separately. Nothing in these Terms obliges you to pay for the free tier, and nothing obliges us to keep the free tier open indefinitely (see clause 12 on changes and clause 13 on termination).

4.3 When the free-tier limit is reached, we may refuse new writes and new credentials until you are back within the limit or on a paid plan. We will not delete your data for exceeding the limit without the notice in clause 13.

5. Your data

5.1 Yours. Everything you store — tables, files, metadata, schemas — is yours. We claim no rights in it beyond what is needed to run the Service for you (store it, back it up, serve it to credentials you authorise, run table maintenance on it).

5.2 Open formats. Your tables are Apache Iceberg tables with Parquet, ORC or Avro data files; your files are plain objects. You can read and export them with any compatible tool at any time.

5.3 Where it lives. Your data, metadata, backups and logs are stored on infrastructure in Germany operated for us by Hetzner Online GmbH. We do not move them outside the European Union / European Economic Area. Our sub-processors are listed in Annex III of the Data Processing Agreement and in the Privacy Policy.

5.4 Personal data in your data. If you store personal data, you are the controller and we are your processor under the Data Processing Agreement, which applies automatically.

5.5 Maintenance. The Service runs automated table maintenance on your tables (compaction of small files, expiry of old snapshots, retention of old metadata files, removal of orphaned files) to keep them fast and within storage limits. On the free tier, snapshots older than 7 days or beyond the 20 most recent per table may be expired; time travel to expired snapshots is then no longer possible. These settings are published at GET /v1/usage.

5.6 Isolation. Each warehouse is a separate catalog and a separate bucket with its own identity; the catalog enforces that a credential for one warehouse cannot reach another. This is the core of the Service and is described in security-overview.md.

6. Acceptable use

You will use the Service only as permitted by the Acceptable Use Policy and applicable law. We may suspend credentials or accounts that breach it, with notice where practicable.

7. Availability, support and changes to the Service

7.1 No service level agreement yet. The Service is offered without a committed availability level. We publish what we do to keep it running in security-overview.md (single host today, daily backups with a rehearsed restore, no high availability yet). A service level agreement for paid plans will be published later and will not apply to the free tier unless it says so.

7.2 We may change, add or remove features. We will not remove the ability to export your data in open formats.

7.3 Support is by email at [support@ address] on a best-effort basis.

8. Fees and taxes

The free tier is free. Fees for paid plans, when announced, will be stated excluding VAT; VAT is added where Spanish or EU law requires. Payment terms will be part of the plan description.

9. Confidentiality

Each party keeps the other's non-public information confidential and uses it only for this contract. Your data is confidential information. This clause survives termination for three years; for your data, for as long as we hold it.

10. Our warranties, and their limits

10.1 We will provide the Service with reasonable skill and care, in accordance with these Terms and applicable law.

10.2 Beyond 10.1, the Service is provided as described in the documentation and without further warranty. In particular we do not warrant that it is fit for a purpose we have not been told about, or that it is uninterrupted or error-free.

10.3 Nothing in these Terms excludes or limits liability that cannot be excluded or limited under Spanish law, including liability for wilful misconduct (dolo) or gross negligence (culpa grave), for death or personal injury, or for breach of data protection law to the extent it cannot be limited.

11. Limitation of liability

11.1 Subject to 10.3, neither party is liable for indirect or consequential loss, loss of profit, loss of business or loss of anticipated savings.

11.2 Subject to 10.3, our total liability under this contract in any twelve-month period is limited to the fees you paid us for the Service in the twelve months before the event giving rise to the claim, and, for the free tier, to EUR 100 [founder to confirm the free-tier cap].

11.3 Backups are ours; copies are yours. We back up the Service daily and keep copies off-host for 14 days, but a single loss event could still lose up to one day of writes, and we cannot restore a single table for you from a backup today. You should keep your own copy of data you cannot afford to lose. This is not a limit on 10.3.

12. Changes to these Terms

We may change these Terms, the Acceptable Use Policy and the Data Processing Agreement. We will email every account holder at least 30 days before a change takes effect and publish the new version with its version date and change log. If you do not accept a change, you may end the contract before it takes effect (clause 13.1). Continuing to use the Service after the effective date is acceptance. Changes that only add features, fix errors, or are required by law may take effect immediately.

13. Term and termination

13.1 By you. You may stop using the Service at any time and ask us to delete your account by writing to [support@ address] from the account's email address. We delete the account, its credentials and its data within 30 days of the request, except for copies in backups, which expire within a further 14 days, and records we must keep by law (clause 13.4).

13.2 By us, for cause. We may suspend or terminate an account immediately if it breaches the Acceptable Use Policy, if its credentials are being abused, if we are required to by law or by a competent authority, or if the security of the Service or of other customers requires it. We tell you why, unless the law prevents it.

13.3 By us, for convenience. We may end the free tier or close an account on the free tier with 60 days' notice by email. During the notice period you can export your data; after it, clause 13.1 deletion applies.

13.4 What survives. Clauses 9, 10.3, 11, 14 and 15 survive termination, as do accounting and tax records we are required to keep by Spanish law.

14. General

14.1 Entire agreement. These Terms and the documents in clause 1.4 are the whole contract. They replace earlier discussions. Order forms or plan descriptions for paid plans may add to them.

14.2 Assignment. Neither party assigns this contract without the other's consent, except that we may assign it to a successor of the business that takes on these obligations, with notice to you.

14.3 Notices. To you: the email address of your account. To us: [legal@ or contact email]. Notices by email are effective when sent, unless a bounce is received.

14.4 Severability. If a clause is unenforceable, the rest remains in force and the clause is read as narrowly as needed.

14.5 Language. These Terms are written in English, which is the governing text. A Spanish courtesy translation will be published; in case of conflict the English text prevails. [founder to confirm; see DECISIONS-FOR-THE-FOUNDER.md]

14.6 No waiver. Not enforcing a clause once is not a waiver of it.

15. Governing law and courts

These Terms are governed by the laws of Spain. Disputes are submitted to the courts of [city of the courts — Madrid assumed], Spain, without prejudice to any mandatory jurisdiction rule that applies to you.

16. Contact

Tablemere SL, [registered address]. Email: [legal@ or contact email]. Registered at [Registro Mercantil data]. CIF [CIF/NIF].

Change log

  • 2026-09-19-draft — first draft, written from the product as built on this date. Not published.