The fine print,
in plain type.

Terms of Service

1. The service. Stone provides a shared, deduplicated filespace for creative work: you mount it, put files in it, and share them with people you choose. During the preview, features may appear, change, or occasionally vanish while we finish them. We will tell you when something meaningful changes.
2. Accounts. The preview is invite-only. You are responsible for your account, your credentials, and the people you invite into your filespace. Keep your tokens secret; tell us at support@stone.no if one leaks.
3. Acceptable use. Use of the service is subject to the Acceptable Use Policy below. It is short. Please actually read it.
4. Your content stays yours. We claim no ownership of anything you store. You grant us only the limited licence needed to store, transmit, and display your content back to you and the people you share it with — nothing more, and it ends when the content does.
5. Service levels during preview. The preview runs on a best-effort basis with no contractual SLA. We publish live availability at status.stone.no and announce maintenance in advance. We treat your data's durability as sacred even while the service around it is young.
6. Fees. The preview is free. When paid plans begin, we will give you at least 30 days' written notice and a clear price before anything is charged. Nothing is ever charged retroactively, and you can export and leave instead — see section 7.
7. Termination & data export. You can stop using Stone at any time. We can suspend accounts that break these terms, with notice except where the violation is severe or unlawful. Either way, you get a minimum of 60 days to export your content in standard formats — your files leave the way they arrived.
8. Liability. To the extent Norwegian law allows: we are not liable for indirect or consequential damages, and our total liability is capped at the fees you paid us in the preceding 12 months. During a free preview we recognise what that number is. Nothing in these terms limits liability for gross negligence or wilful misconduct.
9. Changes. We may update these terms as the service matures. Material changes come with 30 days' notice by email; continued use after that constitutes acceptance. The current edition always lives at this address.

Privacy & GDPR

Controller. Stone Storage Systems, P.O. Box 1522 St. Olavs plass, 0170 Oslo, Norway, is the data controller for personal data processed to run the Stone service. Privacy questions go to contact@stone.no.

What we process

• Account data — name, email address, organisation, and (when billing begins) invoicing details.
• Filesystem metadata — file and folder names, sizes, timestamps, and sharing permissions, as needed to operate your filespace.
• Encrypted content — the files you store, held in encrypted form and processed only to provide the service to you.
• Usage telemetry — client version, error reports, and aggregate performance counters that tell us what is slow or broken.

Lawful bases

We process account data and content to perform our contract with you (GDPR art. 6(1)(b)); telemetry and security logging under our legitimate interest in running a reliable, abuse-free service (art. 6(1)(f)); and anything requiring consent — such as marketing, should we ever send any — only with yours (art. 6(1)(a)).

Where data lives

In the EEA by default. If you bring your own storage bucket, your content lives wherever you put that bucket — that placement is your call, and your responsibility.

Retention

Account data is kept while your account is active and for up to 12 months after closure, unless law requires longer. Content is kept until you delete it, plus the export window in the Terms. Telemetry is retained for a maximum of 13 months, then deleted or anonymised.

Your rights

You have the right to access, rectification, erasure, portability, and objection under the GDPR. Write to contact@stone.no and we will act on it — no forms in triplicate. You may also lodge a complaint with the Norwegian Data Protection Authority, Datatilsynet.

Data Processing

For content your organisation stores in Stone, you are the controller and we act as your processor: we process that content only on your documented instructions — which, in practice, means storing it, moving it where you mount it, and showing it to whoever you share it with.

Our standard Data Processing Agreement, including the current sub-processor list, is available on request from contact@stone.no. Sub-processors are limited to infrastructure providers operating under EEA-adequate terms, and we remain fully responsible for their performance. We will notify DPA signatories before any change to the list.

Acceptable Use

Stone is shared infrastructure holding people's life's work. The rules follow from that.

1. No illegal content. Do not store or distribute material that is unlawful under Norwegian law or the law that applies to you.
2. No infringing distribution. Storing your own work is the whole point; distributing other people's work without the right to do so is not.
3. No abuse of shared infrastructure. Do not use Stone for spam, malware distribution, crypto-mining, or deliberate attempts to degrade the service for others.
4. No breaking tenant isolation. Do not probe, scan, or attempt to access filespaces, accounts, or data that are not yours. Found a weakness honestly? Tell us — we will thank you, not sue you.

We act on verified reports: confirmed violations can lead to content removal, suspension, or termination under the Terms, and we notify account owners except where law prevents it. Report abuse to contact@stone.no.