Terms of Service

Kraftify provides backing infrastructure for applications written by AI agents. You create a target through our API, CLI, or MCP surface, and we provision compute, storage, and networking resources for that target.

Billing: Monthly per target. No tiers. No free plan. Flat fee regardless of usage.

Every target is dedicated to you. We do not sell access to a pool of pre-provisioned machines, and we do not oversubscribe. Each target runs in its own container with its own network namespace, filesystem, and resource limits.

We provide the infrastructure. You provide the application. We are not responsible for the software you run, the data you store, or the traffic that flows to and from it.

We reserve the right to modify, suspend, or discontinue any aspect of the service at any time, with or without notice. If we discontinue the service entirely, we will give you 90 days' notice and a full refund of any prepaid fees for the remaining period.

You sign in with GitHub or Discord OAuth, or with an email address and a password. We store your email and, for password logins, a salted scrypt hash of your password. We cannot recover it. If you lose it, you reset it.

You must be at least 13 years old, or the minimum age for online services where you live if that is higher. Accounts for younger children are not permitted. GitHub and Discord enforce their own minimum-age terms; signing in with them affirms you meet those too.

You are responsible for all activity under your account. If an agent you authorised creates targets or incurs charges, those are your charges.

We give you a monthly spending ceiling. Once set, no code path in our system can exceed it.

You may not share your account credentials with anyone. You may not allow anyone else to access your account. If we detect suspicious activity on your account, we may suspend it and require you to verify your identity before we restore access.

You must provide accurate and complete information when you create an account. You must keep your email address current. If we send you an email and it bounces, we may suspend your account until you provide a working email address.

We do not serve sanctioned jurisdictions or blocked persons. If sanctions law prohibits us from serving you, your account will be closed and prepaid fees for the remaining period refunded. See Sanctions & Export below.

You can host personal projects, client work, open source, and commercial products. We do not require you to disclose what you are hosting. Automated abuse screening runs on domain requests and abuse reports; we do not open your files or watch your traffic.

You can host content for adults. You can host content that is controversial. You can host content that is unpopular. We do not police speech on our platform unless it is on the prohibited list below or we are compelled by law to act.

You can run any software you want, subject to the restrictions below. You can run modified versions of open source software. You can run proprietary software. You can run software you wrote yourself.

Minecraft servers must comply with Mojang's End User License Agreement and Commercial Usage Guidelines. We are not affiliated with Mojang or Microsoft. Servers that violate the EULA — including pay-to-win monetization — will be suspended under the enforcement ladder below.

Zero tolerance : immediate permanent ban, no appeal, no refund, potential law enforcement referral:

Illegal Content

• Child sexual abuse material (CSAM) : We will report it to the National Center for Missing & Exploited Children (NCMEC) and the appropriate law enforcement authorities. This is a federal crime in the United States and illegal in most jurisdictions worldwide. We will preserve all relevant data and cooperate fully with law enforcement investigations.

• Terrorism content : Propaganda, recruitment materials, operational planning, financing infrastructure, and any content that supports or facilitates terrorist organisations as designated by the US State Department, the EU sanctions lists, or other applicable authorities. We will report this to the appropriate authorities.

• Human trafficking content : Any content that facilitates, promotes, or documents human trafficking, forced labour, or modern slavery. We will report this to law enforcement and relevant NGOs.

Attack Infrastructure

• DDoS attack infrastructure : Any system designed to be used in distributed denial-of-service attacks against third parties, including botnet command and control servers, stresser/booter services, and amplification attack reflectors.

• Credential stuffing operations : Systems designed to test large numbers of stolen username/password pairs against third-party services, including CAPTCHA-solving services, proxy rotation infrastructure, and credential validation APIs.

• Phishing infrastructure : Fake login pages, phishing kits, lookalike domains, and any infrastructure designed to steal credentials or personal information from third parties.

• Malware distribution : Systems designed to distribute viruses, worms, trojans, ransomware, spyware, or any other malicious software to third parties.

• Botnets : Any network of compromised systems controlled for malicious purposes, including spam distribution, click fraud, ad fraud, and proxy services.

Intellectual Property Violations

• Piracy infrastructure : Torrent trackers, streaming rip sites, cyberlockers, and any distribution of copyrighted content (movies, TV shows, music, software, games, books) without authorisation from the copyright holder.

• Cracked software distribution : Any distribution of software that has been modified to bypass licensing, activation, or copy protection mechanisms.

• Counterfeit goods marketplaces : Platforms facilitating the sale of counterfeit products, including fake luxury goods, fake pharmaceuticals, and fake electronics.

We respond to valid DMCA notices within 24 hours. Repeat infringers will have their accounts terminated regardless of whether the content is restored. See our Copyright Policy for the notice procedure and the three-strikes rule.

Fraud & Financial Crimes

• Fraudulent marketplaces : Platforms designed to defraud buyers or sellers, including fake escrow services, fake auction sites, and fake classifieds.

• Money laundering infrastructure : Systems designed to obscure the origins of illegally obtained money, including mixing services, tumblers, and unlicensed money transmission services.

• Scam operations : Romance scams, investment scams, Ponzi schemes, pyramid schemes, advance-fee fraud, and any other fraudulent schemes designed to obtain money or property from victims by deception.

• Fake financial services : Unlicensed banking services, fake investment platforms, fake cryptocurrency exchanges, and fake lending services.

Spam & Abuse

• Open mail relays : SMTP servers configured to relay mail for any sender to any recipient, enabling spam distribution.

• Spam bots : Systems designed to send unsolicited bulk email, SMS, or messages at scale.

• Comment spam infrastructure : Systems designed to post spam comments, reviews, or messages on third-party platforms at scale.

• Fake engagement services : Services selling fake followers, fake likes, fake reviews, or fake engagement on social media platforms.

Other Prohibited Content

• Cryptocurrency mining : Without written consent. We will suspend and delete the target. We will not refund the remaining billing period.

• Hacking tools distribution : Distribution of exploit kits, vulnerability scanners, password crackers, or other tools designed to gain unauthorised access to systems (unless you are a security researcher with written authorisation).

• Surveillance stalkerware : Software designed to monitor a person's device or activity without their knowledge or consent.

• Deepfake abuse : Non-consensual intimate deepfakes, deepfakes designed to defraud, and deepfakes designed to interfere with elections or democratic processes.

Any content or activity that is illegal in the jurisdiction where the target is running or where you are accessing it from. You are responsible for knowing and complying with the laws that apply to you and your use of the service.

• Do not use the service for anything illegal
• Do not use the service to harm others
• Do not attempt to gain unauthorised access to our systems or other customers' targets
• Do not interfere with or disrupt the service
• Do not generate excessive traffic or load that degrades the service for other customers
• Do not run cryptominers, chia plotting, or anything else that pins shared hardware around the clock without written consent
• If you run a Minecraft server, comply with the Minecraft EULA and Commercial Usage Guidelines

Enforcement follows one ladder, described in our Acceptable Use Policy: warning with a deadline, then suspension, then termination. CSAM, attacks, and other severe abuse skip straight to termination with no warning and no refund. Ordinary violations always get the export window below; there is no 'for any reason' termination.

Billing is not yet enabled. The schedule below is the plan, not a charge: nothing bills, no card is collected, and no invoice exists until a funded region opens. When billing launches we will announce it 30 days ahead.

We do not change prices for existing targets without 30 days' notice. If we change prices, we will email you at least 30 days before the new price takes effect.

If payment fails, we snapshot the target and hold it for seven days. You can export your data during that window. After seven days the target is deleted and the data is gone. We do not keep it 'just in case'.

Refunds are pro-rata within the first 30 days of a target's life, on request, no questions asked. After 30 days, we will not refund a month already consumed. You can cancel at any time and we will stop billing at the end of the current period.

You are responsible for all taxes. Prices do not include taxes. You are responsible for determining what taxes apply to your use of the service and paying them.

Your content data is four fields we cannot read:

1. Your email address
2. A salted scrypt hash of your password (password logins only)
3. Your env key names and set-flags — never secret values
4. The billing record (target ID, node ID, renewal date)

That is the whole content list. Console output, env secrets, chat history, query logs, and telemetry are never written to disk.

Running the service requires account and operations data too: OAuth profile for OAuth sign-ins, session tokens, console snapshot, appeals and moderation records, domain claims and requests, waitlist entries, correspondence, and short-lived edge logs. The full manifest with retention periods is in our Privacy Policy.

We do not sell your data. We share it with the processors named in our Privacy Policy and as required by law. We do not use your data for advertising. We do not use your data for machine learning.

Console output and query results stream to your client and are discarded at the socket. No command history. No chat logs. No crash dumps. No query logs. No plugin telemetry.

We do not sell your data. We do not share it with third parties except as required by law. We do not use your data for advertising. We do not use your data for machine learning.

If a court order compels us to produce data, we will produce the four things listed above and nothing more. We will notify you unless legally prohibited from doing so. We will challenge overbroad court orders.

You own your data. We do not claim any ownership of the data you store on our infrastructure. We do not claim any ownership of the applications you run on our infrastructure.

You are responsible for complying with applicable data protection laws, including GDPR, CCPA, and any other privacy laws that apply to you. We provide the infrastructure. You are responsible for what you put on it and how you handle the data of your users.

No SLA. No uptime guarantee. The service is provided "as is" and "as available."

If a node fails, we restore your target from the latest snapshot and credit you for the downtime.

Our liability is limited to the fees you paid in the 12 months preceding the claim. We are not liable for indirect, incidental, special, consequential, or punitive damages, including lost profits, lost data, lost business opportunities, or any other damages arising from your use of the service.

You are responsible for your own backups. We take snapshots, but snapshots are not backups. Snapshots are stored on the same infrastructure as your target. If the infrastructure fails, your snapshots may be lost. If you need a backup, export your data to your own storage.

We are not liable for any damage to your business, your reputation, your relationships, or your customers arising from your use of the service. We are not liable for any damage arising from the actions of your agents. We are not liable for any damage arising from the actions of third parties.

Our total aggregate liability for all claims arising out of or relating to these terms or the service shall not exceed the total fees you paid to us in the 12 months immediately preceding the event giving rise to the claim.

You agree to indemnify, defend, and hold harmless Kraftify, its officers, directors, employees, agents, and affiliates from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising out of or relating to your use of the service, your violation of these terms, or your violation of any applicable law or regulation.

This includes, without limitation, claims arising from content you host on the service, claims arising from the actions of your agents, claims arising from your failure to comply with applicable data protection laws, and claims arising from your failure to pay taxes.

We reserve the right, at our own expense, to assume the exclusive defense and control of any matter otherwise subject to indemnification by you, in which event you will cooperate with us in asserting any available defenses.

Any dispute arising out of or relating to these terms or the service shall be resolved through binding arbitration in accordance with the Consumer Arbitration Rules of the American Arbitration Association, conducted in [VENUE CITY, STATE]. Each party bears its own costs through the hearing, and the arbitrator may award the prevailing party its reasonable attorneys' fees where permitted by law.

Disputes will be resolved on an individual basis. You waive any right to participate in a class action lawsuit or class-wide arbitration. You may opt out of this arbitration agreement within 30 days of creating your account by emailing [email protected].

Notwithstanding the foregoing, either party may seek injunctive or other equitable relief in any court of competent jurisdiction to prevent the actual or threatened infringement, misappropriation, or violation of intellectual property rights or confidential information. Nothing here prevents you from filing in small claims court for claims within its limits.

These terms and any disputes arising out of or relating to them shall be governed by and construed in accordance with the laws of [STATE], without regard to its conflict of law provisions. Kraftify is operated by [OPERATOR LEGAL NAME], [registered address]. Our registered agent for service of process is [NAME, ADDRESS].

The United Nations Convention on Contracts for the International Sale of Goods does not apply to these terms.

We comply with US, EU, and UK sanctions and export controls. We do not provide the service to sanctioned jurisdictions or blocked persons, and we screen signups against the relevant lists. If sanctions law prohibits us from serving you, your account will be closed and prepaid fees for the remaining period refunded.

Cryptography in the service is standard TLS, scrypt, and AES. You may not use the service to develop or host military, nuclear, or surveillance applications in embargoed destinations, or to evade sanctions.

Our public promise of minimal verification has one exception, and it is this section: where sanctions, export, or child-safety law requires identification or screening, the law wins.

We do not charge for the export window. We do not charge an early termination fee. We do not make it difficult to leave.

Upon termination, all rights and licenses granted to you under these terms will immediately cease. You must immediately cease all use of the service. We delete your data as described in our Privacy Policy: everything within 30 days except the billing record (7 years, tax law) and closed case records (1 year). We have no obligation to retain anything else.

We may update these terms at any time. Material changes will be announced by email at least 30 days before they take effect. Continued use of the service after the effective date constitutes acceptance of the updated terms.

The current version is always available at kraftify.net/terms. We maintain a changelog of material changes on request. If you do not agree to the updated terms, you must stop using the service before the effective date.

We are not liable for any failure or delay in performing our obligations under these terms if the failure or delay results from circumstances beyond our reasonable control, including acts of God, natural disasters, pandemics, war, terrorism, riots, embargoes, acts of civil or military authorities, fire, floods, accidents, strikes, labor disputes, shortages of transportation, facilities, fuel, energy, labor, or materials, failure of telecommunications or information systems, power outages, or any other event beyond our reasonable control.

If any provision of these terms is held to be invalid or unenforceable, that provision will be struck and the remaining provisions will remain in full force and effect. The invalid or unenforceable provision will be modified to the minimum extent necessary to make it valid and enforceable while preserving the original intent of the provision.

These terms, together with any policies or guidelines referenced herein, constitute the entire agreement between you and Kraftify with respect to the service and supersede all prior or contemporaneous communications, representations, and agreements, whether oral or written, relating to the subject matter hereof.

No waiver of any provision of these terms will be effective unless made in writing and signed by an authorised representative of Kraftify. Our failure to enforce any provision of these terms will not be construed as a waiver of that provision or the right to enforce it at a later time.

If you have any questions about these terms, contact us at [email protected]. We will respond within 5 business days.