Skip to main content
BIQ BoreholeIQ
Legal

BoreholeIQ Data License Agreement

Document: data_license_v1.0.0.md · Last updated

BoreholeIQ Data License — v1.0.0

PLACEHOLDER — NOT LEGALLY REVIEWED. Replace with counsel-reviewed text before the first paid customer. The provenance-layer endgame depends on getting this contract right. Tracked as a pre-production blocker in DISCOVERY_REPORT.md.

1. Scope

This Data License ("License") governs Joticle, Inc.'s use of data the Customer uploads, generates, or otherwise creates within the BoreholeIQ Service ("Customer Data"). It is an exhibit to the Terms of Service and is accepted on the same click.

2. Customer Retains Ownership

Customer owns Customer Data in its entirety. This License is a limited grant — not a transfer.

3. Grants to Joticle

Customer grants Joticle a worldwide, non-exclusive, royalty-free license to:

(a) Host, store, back up, and process Customer Data for the sole purpose of operating the Service for Customer.

(b) Use de-identified, aggregated operational metadata — including but not limited to drilling depth distributions, sample-collection timing, and equipment usage — for Service improvement, product analytics, and publication of anonymized benchmark statistics.

(c) Verify chain-of-custody signatures against Customer Data for the provenance-verification endpoints, including public verification of hashes (but not the underlying Customer Data).

4. What Joticle Will Not Do

Joticle will not:

  • Sell Customer Data.
  • Share identifiable Customer Data with third parties except as needed to operate the Service (sub-processors listed in the separate Sub-processors page).
  • Use Customer Data to train third-party models.
  • Publish Customer-identifiable logs or samples.

5. De-Identification Standard

"De-identified" means stripped of direct identifiers (firm name, project name, specific location below municipality-level) using the HIPAA Safe Harbor method as a floor. Location data may be rounded to county-level before inclusion in aggregate datasets.

6. Provenance Data

Cryptographic hashes, signatures, timestamps, and custody-chain metadata are considered integrity-verification data rather than Customer Data. Joticle may retain and serve these indefinitely, even after Customer Data is deleted, so that historical provenance claims remain verifiable.

7. Deletion

On Customer's written request or account termination, Joticle will delete identifiable Customer Data within 90 days. Aggregated or de-identified statistics already published are retained.

8. Changes

Material changes to this License require a new version and a fresh acceptance from the Customer; the prior version continues to govern data already under contract until Customer accepts the new version.

Document key: data_license · Version: 1.0.0 · Not yet in force.