Terms of Service

These terms cover your use of Undrop — the MCP proxy, dashboard, CLI, and related services (the "Service") — operated by a solo, Philippines-based developer ("we," "us"). By creating an account or connecting a database, you agree to them.

What the Service does

Undrop acts as a proxy between your MCP-connected coding agent and your Supabase Postgres database. It classifies statements the agent sends, blocks statements it identifies as destructive or unclassifiable, snapshots your database before risky operations run, and lets you restore from those snapshots.

What the Service does not do — read this before you rely on it

We'd rather lose the sale than have you find this out during an incident:

• Guard mode (the default) protects statements sent through the MCP proxy. It does not stop an agent that obtains your database credentials by another route — for example, reading a connection string from a config file and connecting directly with psql. Closing that gap requires Lockdown mode, which rotates your database password so the only working credential is held by us.
• Classification is best-effort. Unparseable or unrecognized statement types are treated as destructive by default (they fail closed), but no classifier is perfect, and you remain responsible for reviewing statements before approving a block.
• Snapshot and restore depend on pg_dump/pg_restore compatibility with your Postgres version and on our infrastructure being reachable. We test restore paths continuously against a live Supabase project, but we do not guarantee zero downtime or a specific recovery time.
• Undrop is not a replacement for your own backup discipline, migration review process, or database access controls — it is an additional layer, not the only one you should have.

Accounts

You're responsible for the security of your account credentials and for any activity that happens through a database credential you connect. Tell us promptly at hello@undrop.dev if you suspect unauthorized access.

Acceptable use

Don't use the Service to violate law, to attempt to bypass or overwhelm our rate limits or classifier, to reverse engineer the hosted control plane, or to resell access to the Service without a separate written agreement. The enforcement-core classifier is open source under its own license; those terms govern that code independently of this agreement.

Fees and billing

The Free plan requires no payment. Pro is a monthly subscription billed per project. Payments are processed by Creem, our merchant of record — when you subscribe, you're entering into a purchase with Creem, who handles billing, invoicing, and applicable sales tax or VAT on our behalf. Cancelling a Pro subscription drops that project to Free-tier behavior immediately; see the refund policy for how refunds work.

Your data

You retain all rights to the data in your database and in the snapshots we create of it. We process it only to provide the Service, as described in the privacy policy. Snapshots are standard pg_dump archives, exportable at any time, with no format lock-in and no export fee.

Disclaimer of warranties

The Service is provided "as is." We disclaim warranties of merchantability, fitness for a particular purpose, and non-infringement to the maximum extent the law allows. We do not warrant that the Service will be uninterrupted, error-free, or that it will catch every destructive statement.

Limitation of liability

To the maximum extent permitted by law, our total liability arising from these terms or use of the Service is limited to the amount you paid us in the 12 months before the claim arose. We are not liable for indirect, incidental, or consequential damages, including data loss that occurs despite the Service's protections — the limitations described above (Guard mode's bypass path, classifier imperfection) are part of what you're agreeing to when you rely on the Service.

Termination

You can stop using the Service and delete your account at any time. If we ever discontinue the Service entirely, we'll give at least 60 days' notice and a bulk export path for all your snapshots before shutdown. We may suspend an account that violates the acceptable-use section above, with notice where practical.

Changes to these terms

We'll email account holders and update the date at the top of this page if these terms change materially. Continued use after that constitutes acceptance.

Governing law

These terms are governed by the laws of the Republic of the Philippines, without regard to conflict-of-law principles.

Contact

hello@undrop.dev