# Polycyphers Commercial Software License Agreement

**Version 1.0 — effective 2026-04-25**

This End User License Agreement ("**EULA**") is a binding legal contract between you (either an individual or the entity you represent — "**Licensee**") and **Polycyphers / Karam Entreprises SARL** ("**Licensor**", "we", "us") governing your use of the software packages listed in [Schedule A](#schedule-a--covered-software) (the "**Software**").

By installing, loading, embedding, importing, or running the Software — including in development, test, staging, or production — Licensee agrees to be bound by this EULA. If Licensee does not agree, Licensee must not use the Software and must delete all copies in its possession.

---

## 1. Grant of License

Subject to (a) Licensee's full and ongoing payment of all applicable fees and (b) Licensee's full compliance with this EULA, Licensor grants Licensee a **non-exclusive, non-transferable, non-sublicensable, revocable** license to use the Software solely as follows:

- **1.1 Tier-bound usage.** Each license token issued to Licensee specifies a Tier (`pro`, `team`, `enterprise`, `internal`, or `trial`), a list of covered packages, a domain allowlist, a version specification, and an expiry date. Licensee may use the Software only within the bounds of its issued token.
- **1.2 Internal business purpose.** Licensee may incorporate the Software into Licensee's own applications and provide those applications to Licensee's end users, provided the end users do not gain independent rights to the Software itself.
- **1.3 Development and back-up copies.** Licensee may make a reasonable number of copies of the Software solely for development, testing, and disaster-recovery purposes within Licensee's organization.

No rights are granted by implication, estoppel, or otherwise.

## 2. Restrictions

Licensee shall not, and shall not permit any third party to:

- **2.1** distribute, sublicense, lease, rent, sell, or otherwise transfer the Software to any third party, except as part of a Licensee application that uses the Software internally;
- **2.2** publish the Software or any portion of it to any public or shared package registry, repository, CDN, mirror, or file-share;
- **2.3** remove, suppress, modify, or interfere with any copyright notice, trademark, license-key validation, watermark, telemetry, or attribution mechanism in the Software;
- **2.4** decompile, reverse-engineer, disassemble, decrypt, or otherwise attempt to derive the source code, signing keys, or internal logic of any compiled portion of the Software, except to the limited extent that such activity is expressly permitted by applicable law notwithstanding this restriction;
- **2.5** modify, patch, hot-swap, monkey-patch, override, or replace any function, module, or runtime check of the Software for the purpose of bypassing, disabling, or circumventing license validation, watermarking, telemetry, expiration, or domain-binding;
- **2.6** use, run, or deploy the Software on any host or domain not covered by Licensee's license token, including but not limited to: re-aliasing production hostnames to `localhost`, `*.local`, `*.test`, or any other reserved development hostname; using `/etc/hosts`, DNS rebinding, reverse proxies, or browser extensions to make the Software believe it is running in a development environment;
- **2.7** use the Software in violation of any applicable law, regulation, or third-party right;
- **2.8** use the Software in life-critical, life-support, nuclear, aviation-control, weapons, or similar high-risk applications.

## 3. Anti-Circumvention (DMCA §1201 / EU Directive 2001/29/EC Art. 6)

The Software contains technological protection measures within the meaning of:

- **§1201 of the U.S. Digital Millennium Copyright Act** (17 U.S.C. § 1201);
- **Article 6 of EU Directive 2001/29/EC** ("InfoSoc Directive") and its national implementations;
- **§95a of the German Urheberrechtsgesetz (UrhG)**;
- **L. 331-5 of the French Code de la propriété intellectuelle**;
- **Article 1349 of the Moroccan Code des obligations et contrats** and Law No. 2-00 on copyright and neighbouring rights, as amended;
- and any equivalent or successor provisions in any jurisdiction in which Licensee uses the Software.

These measures include but are not limited to: Ed25519 signature verification, license-token claim enforcement (`pkg`, `ver`, `dom`, `exp`, `jti`), the revocation list fetcher, the watermark renderer and its `MutationObserver` re-injection, and the integrity-self-check guard.

Licensee acknowledges and agrees that:

- **3.1** any act of circumventing, attempting to circumvent, or providing tools or instructions for circumventing these measures is a **violation of this EULA and constitutes a separate, independently actionable violation of applicable anti-circumvention law**;
- **3.2** Licensor is entitled to seek **statutory damages, injunctive relief, attorneys' fees, and (where available) criminal referral** in addition to any contractual remedies;
- **3.3** under U.S. law, statutory damages of up to **$2,500 per act** of circumvention (and up to $25,000 per act for willful, repeated violations) may apply pursuant to 17 U.S.C. § 1203(c)(3)(A);
- **3.4** publishing, distributing, or hosting a forked, patched, modified, or "cracked" version of the Software is itself an act of circumvention under § 1201(b) and equivalents.

## 4. Telemetry, Revocation, and License Validation

- **4.1 Validation.** The Software performs offline validation of Licensee's token using Ed25519 signatures and the package-bound public key.
- **4.2 Revocation.** The Software periodically retrieves a signed revocation list from `https://licenseapi.polycyphers.com/api/license/revoked.json`. If Licensee's token's `jti` appears on the list, the Software shall transition to an unlicensed state. The fetch is best-effort; cached revocation data may be used for up to seven (7) days during network outages.
- **4.3 Limited telemetry.** Licensor may collect anonymized aggregate counts of license activations, package versions, and validation outcomes solely for billing reconciliation, security monitoring, and abuse detection. Licensor will not collect personally identifying information from Licensee's end users through this mechanism.
- **4.4 No backdoor disablement.** Licensor will not remotely disable a properly-licensed installation. Revocation is reserved for cases of confirmed payment default, fraud, or material EULA breach.

## 5. Fees, Payment, and Renewal

- **5.1** Fees are as set out in the order form, invoice, or online checkout corresponding to Licensee's purchase.
- **5.2** Licenses are issued for a fixed term as set out in the issued token's `exp` claim. Renewal is at Licensor's then-current rates.
- **5.3** Late payments accrue interest at 1.5% per month (or the maximum permitted by law, whichever is lower) plus reasonable collection costs.

## 6. Term and Termination

- **6.1** This EULA takes effect on the earlier of (a) Licensee's purchase or (b) Licensee's first use of the Software, and continues until terminated.
- **6.2** Licensor may terminate this EULA immediately upon written notice if Licensee materially breaches any provision and fails to cure within ten (10) days, or immediately and without notice for any breach of Sections 2 or 3.
- **6.3** Upon termination, Licensee shall (a) immediately cease all use of the Software, (b) destroy all copies in its possession, and (c) certify destruction in writing on Licensor's request. Sections 2, 3, 7, 8, 9, and 11 survive termination.

## 7. Intellectual Property

The Software and all intellectual property rights therein are and shall remain the exclusive property of Licensor. This EULA is a license, not a sale. No source code is licensed to Licensee under this EULA, except as expressly delivered in source form.

## 8. Disclaimer of Warranties

THE SOFTWARE IS PROVIDED **"AS IS"** AND **"AS AVAILABLE"**. LICENSOR DISCLAIMS ALL WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WITHOUT LIMITATION ANY WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, OR UNINTERRUPTED OPERATION. LICENSEE BEARS THE ENTIRE RISK OF USE OF THE SOFTWARE.

## 9. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, LICENSOR'S TOTAL CUMULATIVE LIABILITY UNDER OR RELATING TO THIS EULA SHALL NOT EXCEED THE AGGREGATE FEES PAID BY LICENSEE TO LICENSOR IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM. IN NO EVENT SHALL LICENSOR BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, GOODWILL, OR DATA, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

## 10. Indemnification

Licensee shall defend, indemnify, and hold harmless Licensor from and against any third-party claim arising out of (a) Licensee's use of the Software in violation of this EULA, (b) Licensee's applications that incorporate the Software, or (c) any data, content, or system Licensee provides to or through the Software.

## 11. Governing Law and Disputes

This EULA is governed by the laws of **the Kingdom of Morocco**, without regard to its conflict-of-laws rules. The competent courts of **Casablanca, Morocco** shall have exclusive jurisdiction over any dispute arising out of or relating to this EULA, except that Licensor may seek injunctive or equitable relief in any court of competent jurisdiction worldwide. The U.N. Convention on Contracts for the International Sale of Goods does not apply.

## 12. Miscellaneous

- **12.1 Notices.** Notices to Licensor shall be sent to `licensing@karamentreprises.com` and `support@polycyphers.com`.
- **12.2 Assignment.** Licensee may not assign this EULA without Licensor's prior written consent. Licensor may assign this EULA freely.
- **12.3 Severability.** If any provision is held unenforceable, the remainder shall remain in full force.
- **12.4 Entire agreement.** This EULA, together with Licensee's order form and any Schedule, constitutes the entire agreement and supersedes all prior or contemporaneous agreements, oral or written.
- **12.5 Modifications.** Licensor may update this EULA. The version in effect at the time the license token was issued (matching the `iat` claim) governs that token. Renewals are subject to the then-current EULA.
- **12.6 Open-source components.** The Software may include open-source components governed by their own licenses, listed in `THIRD_PARTY_NOTICES.md` of each package. Those licenses apply to those components only.

---

## Schedule A — Covered Software

This EULA covers all current and future versions of:

- `@polycyphers/spreadsheet`
- `@polycyphers/spreadsheet-angular`
- `@polycyphers/ai-chat`
- any package later designated by Licensor as commercial Software in its package metadata.

The free, MIT-licensed companion packages — `@polycyphers/license`, `@polycyphers/tsconfig`, `@polycyphers/vite-config` — are governed by their respective MIT licenses and are **not** subject to this EULA.

---

**Polycyphers / Karam Entreprises SARL**
licensing@karamentreprises.com · support@polycyphers.com
https://packages.polycyphers.com/legal/eula