The rules. In plain English.

These Terms form a binding agreement between you (or the organization you represent) and Nacre Labs ("Nacre", "we") covering your use of nacre.sh, the customer dashboard, APIs, and any VM we provision for you (the "Service").

By clicking "Sign up", deploying a VM, or paying an invoice, you accept these Terms, our Privacy Policy, and (if executed) the DPA. If you are accepting on behalf of a company, you represent that you have authority to bind it. If you don't agree, don't use the Service.

Nacre provides managed hosting for OpenClaw, an open-source project we did not create and are not affiliated with. Every customer receives a dedicated agent environment, isolated from all other users. We handle provisioning, backups, TLS, and OS patching; you handle your bot's configuration, content, and LLM provider relationships.

Feature lists on /pricing and the home page describe the Service as currently delivered. We may add, remove, or change features — we will give reasonable notice for anything that materially reduces what you're paying for.

• Eligibility. You must be at least 16 and able to form a binding contract in your jurisdiction.
• One account per entity. Teams can have multiple seats, but don't create multiple accounts to avoid plan limits.
• Credentials. You're responsible for keeping your password and 2FA device safe. Tell us immediately if you suspect compromise.
• Accurate info. Use a real email and real billing details. We may verify.

Plans and prices are listed on /pricing. Prices are exclusive of VAT / GST / sales tax unless stated; we'll add them at checkout where required.

• Billing cycles. Monthly or annual, auto-renewing. Annual is pre-paid.
• Payment. Via Stripe. Failed payments are retried; after 7 days of failure we suspend service and after 30 days we may terminate.
• Cancellation. Cancel from the dashboard anytime. You keep access until the end of the paid period. All fees are non-refundable except where required by applicable law.
• Plan changes. Plan upgrades and downgrades are not currently self-serve. To move to a different plan, delete your agent (Settings → Delete agent), cancel your subscription from the Billing portal, and re-subscribe with the new plan. Self-serve plan changes are on our roadmap.
• Price changes. We'll email you at least 30 days before a price increase hits your renewal. If you don't like the new price, cancel.

Nacre does not resell LLM inference. You bring your own keys (OpenAI, Anthropic, Google, whoever). This means:

• You're responsible for your spend with those providers. A runaway loop is your bill, not ours.
• You must comply with each provider's terms of service, acceptable-use policy, and rate limits.
• If a provider suspends your key, that's between you and them. We can help you swap keys.
• Keys stored server-side are encrypted with pgsodium. Keys injected through the web terminal only touch your VM. Either way, we cannot read your plain-text keys.

You agree not to use the Service to:

• Do anything illegal under US, EU, or UK law.
• Send spam, phishing, CSAM, or content that violates a third party's rights.
• Harass, threaten, or dox anyone, directly or via automation.
• Run crypto mining, video transcoding farms, or other sustained 100%-CPU workloads unrelated to a chat agent.
• Host malware, C2 infrastructure, botnets, or vulnerability scanning against third parties.
• Attempt to break out of your VM, probe our control plane, or attack other customers' VMs.
• Resell Nacre as-is to third parties without a written reseller agreement.

We may investigate suspected violations. Confirmed abuse results in suspension under §10. We report unlawful content to the appropriate authorities.

Upstream provider AUPs. Your agent environment runs on infrastructure we rent from third-party cloud providers. Their acceptable use policies are incorporated into these Terms by reference and apply to your use of the Service in addition to §6. Current infrastructure sub-processors are available on request via security@nacre.sh; their AUPs apply by extension.

A breach of an upstream provider's AUP that puts our account at risk is, in itself, a breach of these Terms and triggers immediate suspension under §10 without refund.

Guard agent & monitoring consent. You acknowledge and consent that a small Nacre-supplied agent (the "guard agent") runs on your VM at all times. Limited to enforcing §6 and protecting the Service for other customers, it observes:

• Process names and command lines via /proc — to detect cryptocurrency miners and other prohibited binaries.
• Network connection metadata (destination IP, port, protocol fingerprint) — to detect mining-pool traffic, port scans, and outbound abuse.
• Aggregate system metrics (CPU, memory, I/O, packet rate) — to detect anomalous resource use.
• LLM API connection counts to detect runaway-spend anomalies (BYOK keys are never read by the agent — only the destination and connection rate).

The guard agent does not read your conversation history, memory files, uploaded data, or LLM request bodies. It reports only abuse signals (with evidence metadata) to our control plane. By using the Service, you consent to this monitoring as a necessary safeguard.

Anything you put on your VM — conversation history, memory files, skills, uploaded data — is yours. We claim no ownership and don't license it to anyone. You grant us the minimum rights we need to host, back up, restore, and transmit it to run the Service. That's it.

You are responsible for having the right to that content and for its lawful use.

The nacre.sh site, dashboard, control plane software, provisioning orchestration, and the Nacre brand are ours. We grant you a non-exclusive, non-transferable right to use them for the duration of your subscription. Don't reverse-engineer the control plane or scrape the dashboard.

OpenClaw itself is open source under its own license; your rights to it come from that license, not from us.

We target 99.5% monthly uptime for standard plans and 99.9% monthly uptime for Scale plans. SLA credits for Scale are documented in the plan's SLA addendum.

Scheduled maintenance is announced at least 48 hours in advance on our status page and doesn't count against uptime. Events outside our control (upstream provider outages, DDoS, acts of god) may excuse performance but we will communicate honestly.

We may suspend or terminate service if:

• You violate §6 (Acceptable use).
• Payment fails for 7+ days.
• We are required to by law, court order, or law enforcement.
• Your usage endangers the safety or integrity of the Service for other customers.

For non-urgent suspensions we'll email you first and give you a reasonable window to fix the issue. For urgent threats (active attack, CSAM, etc.) we act first and notify after. You may terminate your account any time from the dashboard.

When your account is deleted (by you or by us), your data is retained for a 90-day grace window so you can recover it. After 90 days, agent environments are destroyed and backups are purged. Billing records are kept for seven years for tax compliance (§4 of the Privacy Policy).

Export your /data before the 90-day window closes — Settings → Export in the dashboard.

Voluntary agent deletion (Settings → Delete agent) is distinct from account cancellation. When you delete your agent, the agent environment and all associated data — conversations, skills, connections, credentials — are permanently and immediately removed. There is no 90-day grace period for voluntary agent deletion. Export your data first if you wish to keep it. Your Stripe subscription is not automatically cancelled on agent deletion; cancel it separately from the Billing portal.

We provide the Service "as is" and "as available". To the maximum extent permitted by law, we disclaim all implied warranties including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Service will be uninterrupted, error-free, or secure against every possible threat. We do our genuine best, but no provider can promise perfection.

Nothing in these Terms limits warranties that cannot lawfully be excluded (e.g. consumer rights under EU/UK law).

To the maximum extent permitted by law, neither party will be liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenues, or data.

Our aggregate liability arising out of or related to these Terms is capped at the greater of (a) the fees you paid to us in the 12 months before the claim, or (b) USD 100.

These limits don't apply to liability that cannot be limited by law, fraud, willful misconduct, or infringement of our IP by you.

You will defend and indemnify Nacre against third-party claims arising from (a) your content, (b) your violation of §6, or (c) your breach of any LLM provider's terms. We will defend and indemnify you against third-party claims that the Service as provided by us infringes their IP — with the usual carve-outs (modifications you made, combinations we didn't authorize, continued use after we provide a fix).

For material changes (new restrictions, new fees, reduced rights) we give 30 days' email notice. For cosmetic changes (typos, clarifications) we update in place with a new effective date. If you don't like a material change, cancel before it takes effect.

These Terms are governed by the laws of the State of Delaware, USA, without regard to conflict-of-laws rules. Disputes will be resolved by binding arbitration in Wilmington, Delaware under the AAA Commercial Arbitration Rules — except that either party may seek injunctive relief in any court of competent jurisdiction to protect IP or confidential information.

If you are a consumer in the EU/UK, nothing above overrides your right to bring proceedings in your home jurisdiction or to rely on mandatory local consumer protections.