Legal

Terms of Use

Last updated October 7, 2026

These terms cover your use of kalyxosec.com, the Kalyxo early access waitlist, app cloud review and private beta releases.

Who we are and accepting these terms

kalyxosec.com is run by Wend Labs Inc., doing business as Kalyxo ("Kalyxo", "we", "us"). Kalyxo is a Mac app, in early access, that checks what AI agents do on your computer.

By using the site, joining the waitlist, or using the app's cloud review services, you agree to these terms. If you do not agree, do not use the service.

The Privacy Policy explains the data handled by the website, waitlist, and app cloud review. App features and cloud review are in early access and may change.

App cloud review

The app performs most checks on your Mac. Eligible uncertain actions and selected package source reviews use Kalyxo's cloud review service. The app sends a redacted report for review and uses the signed response to resolve the action. Local hard blocks do not require cloud review. The Privacy Policy describes report contents, enrollment metadata, and handling.

Do not use cloud review if you are not authorized to submit the material included in a report. Redaction is designed to remove secrets and identifying patterns before upload, but may not remove every sensitive detail.

The waitlist

You can join the waitlist by entering your email address in the early access form. Here is what joining means:

• No guarantee of access. Joining does not guarantee that you will get early access, or when. We decide who is invited and in what order.
• We may email you. We use your address to contact you about early access and Kalyxo's launch, and, from time to time and infrequently, about major milestones.
• Reading the white paper. Entering your email to read the technical white paper adds you to this same waitlist and unlocks the paper in your browser. The paper is shared for reading, not redistribution; please share the link rather than the file, so each reader gets their own access.
• Opt out anytime. Every email includes a way to opt out. You can also ask us to delete your entry by writing to privacy@kalyxosec.com.
• Use your own address. Please only submit an email address that belongs to you.

Our Privacy Policy explains exactly what the form collects and how long we keep it.

Acceptable use

Please use the site the way it is meant to be used. When using kalyxosec.com, you agree not to:

• Attack the site or the systems that run it, including attempts to break in, overload it, or disrupt it.
• Abuse the waitlist form, for example with automated submissions or addresses that are not yours.
• Scrape or crawl the site in a way that puts a burden on it.
• Interfere with anyone else's use of the site.
• Use the site for anything unlawful.

We may block access or remove waitlist entries that break these rules.

Security research is welcome. If you are testing Kalyxo in good faith, follow the scope and rules on our Security page, which also describes our safe harbor for researchers. Reports go to security@kalyxosec.com.

Intellectual property

The content of this site, including its text, design and graphics, belongs to Wend Labs Inc. The Kalyxo name and logo also belong to Wend Labs Inc.

You are welcome to link to the site and share it. Please do not copy the site, or use the Kalyxo name or logo in a way that suggests we endorse or partner with you, without our written permission.

Third-party statistics and links

The landing page cites statistics and news from other organizations. These are provided for information only and belong to their publishers. We link to each source so you can check it yourself.

We do not control third-party websites and are not responsible for their content. When you follow a link off kalyxosec.com, that site's own terms and privacy policy apply.

Disclaimers

• As is. The site is provided "as is" and "as available", without warranties of any kind, to the extent allowed by law.
• Information may change. We try to keep the site accurate, and its content may change at any time without notice.
• Early access product. Product details on this site describe an early access product. Features, availability and other details may change.
• General information. Nothing on the site is security advice for your specific situation.

Limitation of liability

To the extent allowed by law, Wend Labs Inc. is not liable for any indirect, incidental, special, consequential or punitive damages, or for any loss of data, profits or goodwill, arising from your use of the site or the waitlist.

To the extent allowed by law, our total liability for any claim related to the site or the waitlist is limited to one hundred US dollars (US$100).

Some places do not allow these limits, so parts of this section may not apply to you.

Changes to these terms

We may update these terms as the site and early access program change. When we do, we update the "Last updated" date at the top of this page. If you keep using the site after a change, the updated terms apply.

If any part of these terms cannot be enforced, the rest still applies.

Contact

Questions about these terms: privacy@kalyxosec.com.

Security reports: security@kalyxosec.com.

Invite-only beta access

A private invitation is for one specified, admitted app release. Before an invitation can be redeemed or a download session can start, you must select the unchecked box on the invitation page to agree to these Beta Access Terms and acknowledge the Privacy Policy. We record the accepted terms version, server time and a random receipt with the invitation. If you do not accept, the invitation remains unused and no download session starts. This acceptance is separate from optional website analytics and any optional structured security-improvement sharing. It does not opt you into either; structured sharing is a distinct unchecked choice, is currently disabled, and declining it does not turn off local diagnostics.

The current internal-test Project Tools build6 covers the selected folder and the selected MCP list_files, read_file and create-only write_file tools, with five-minute authority and up to 32 calls for small visible UTF-8 files. New files appear immediately in the selected folder. Existing files cannot be replaced; proposed edits are new files that you must review and apply yourself. Task text and exact filenames are not enforced. Agent ordinary shell/file tools, direct network, hidden files, OS isolation and system protection are outside coverage. It has been qualified only on one Apple silicon Mac running macOS 26.4.1 with Codex CLI 0.153.2. The package declares macOS 13 as its minimum, but broader Mac, OS and agent compatibility has not been qualified.

An internal-test invitation grants one bounded download session for up to 30 minutes. Interrupted downloads can retry within that session, with up to 16 transfer requests and a total reserved byte limit of three times the release size. An internal-test download does not issue an app pairing code, bind an app identity, or enroll GuardCore protection. Invitation expiry and revocation end future downloads. Downloaded bytes cannot be recalled or protected from copying. No automatic invitation email is sent.

The latest internal build download is restricted to a Google session for an owner account in Kalyxo's existing admin allowlist. It uses a short-lived download ticket for the exact admitted release. No public release is promised by these terms.