Overview
These Terms of Service ("Terms") govern your use of the Nebula Deck platform ("Service"), operated by Dominykas Viecas ("we", "us", "our"). By creating an account or using the Service, you agree to these Terms. If you do not agree, do not use the Service.
Nebula Deck is a managed hosting platform that provides always-on AI workspaces and on-demand compute containers. We host and operate the infrastructure; you bring your own LLM provider API keys and control how your workspace is used.
We also maintain an Acceptable Use Policy and a Privacy Policy, both incorporated into these Terms by reference.
Account
You must create an account to use the Service. Authentication is handled through our identity provider (Zitadel). You may sign in with Google, GitHub, or email.
You are responsible for maintaining the security of your account credentials, including your workspace password, passkeys, and recovery key. We cannot recover encrypted vault contents if you lose all authentication methods.
You must be at least 18 years old to create an account. Accounts are for individual use unless you are on a team plan. You may not share account credentials or allow others to access your workspace through your account without authorization.
You must provide accurate information when creating your account. If we discover that account information is materially false, we may suspend or terminate your account.
The service
Nebula Deck provides:
A dedicated, always-on container running the Moltis AI server. Your workspace maintains persistent memory, connects to messaging platforms you configure, executes tools and scripts within its sandbox, and communicates with LLM providers using your own API keys.
On-demand ephemeral containers for coding tasks (OpenHands) and browser automation. These are spawned explicitly by you, billed per second, and destroyed when the task completes or times out.
Unlimited web search provided through a shared search engine instance. No additional API key required.
The Service is the infrastructure and orchestration layer. We do not provide the LLM models themselves — you connect your own provider keys (see Bring Your Own Key).
Bring your own key
Nebula Deck operates on a "bring your own key" (BYOK) model. You provide API keys for the LLM providers you wish to use (Anthropic, OpenAI, Gemini, DeepSeek, OpenRouter, and others). Your workspace communicates directly with those providers using your keys.
You are responsible for:
Complying with the terms of service of each LLM provider whose API key you use. We are not a party to those agreements.
All LLM token usage is billed by your providers at their rates. We do not mark up, subsidize, or intermediate token costs.
While we encrypt your keys at rest and zero them from memory on drop, you are responsible for the security of your keys before they enter our system. If you believe a key has been compromised, rotate it with your provider immediately.
We do not monitor, log, or inspect the content of requests sent to or received from LLM providers. Your workspace calls providers directly — traffic does not pass through our servers. When worker containers need model access for tasks you explicitly initiated, your API key is passed as an ephemeral environment variable at launch and the worker calls the provider directly.
Billing
Subscriptions are billed monthly through our payment processor, Polar.sh. By subscribing, you also agree to Polar.sh's terms of service.
A flat monthly fee for your always-on workspace. The workspace runs 24/7 regardless of usage.
Optional tiers that add concurrent worker container capacity and bundled compute credit. Compute is billed per second with a 60-second minimum.
If you exceed your included compute credit, usage continues at the same per-second rate and the overage is charged on your next bill. You can set a hard spending cap in your dashboard to prevent overage.
You may cancel your subscription at any time. Your workspace remains active until the end of the current billing period. After that, your workspace is stopped and your data is retained for 30 days before deletion.
We do not offer prorated refunds for partial months. If you believe you were charged in error, contact us within 14 days of the charge.
We do not store your payment card details. All payment processing is handled by Polar.sh and their payment infrastructure (Stripe).
Your content
You retain full ownership of all content you create, upload, or generate within your workspace. This includes conversations, memory files, skills, workspace files, and any artifacts produced by your workspace or worker containers.
We do not use your content to train AI models, improve our services, or for any purpose other than providing the Service to you. We do not read, access, or analyze your conversations or workspace files except when required to:
Debugging infrastructure issues that affect your workspace — for example, if your container fails to start. We do not access conversation content for this purpose.
Responding to valid legal requests, court orders, or regulatory requirements.
Investigating reports of abuse or violations of the Acceptable Use Policy, only to the extent necessary.
You are responsible for the legality of content you store in or process through your workspace. If your use of the Service generates content that violates applicable law, you bear that responsibility.
Credentials
API keys and tokens you store in your workspace are encrypted at rest in an isolated vault. Credential values are:
Using AES-256-GCM encryption with per-tenant keys.
Cleared from memory immediately when no longer needed.
Never written to application logs, debug output, or error reports.
Stored in your container's vault. Other tenants cannot access your credentials.
When worker containers require model access, your API key is passed as an ephemeral environment variable at launch. The worker calls the LLM provider directly. Credentials exist in the worker only for the duration of the task and are destroyed with the container.
Despite these measures, no system is perfectly secure. You acknowledge that storing credentials with any third-party service carries inherent risk. We recommend using provider-scoped API keys with the minimum permissions necessary and rotating them periodically.
Acceptable use
Your use of the Service is subject to our Acceptable Use Policy. In summary, you may not use the Service to:
Generate or distribute malware, phishing content, spam, harassment, or content that exploits minors.
Attempt to access other tenants' containers, probe the host system, escalate privileges, or circumvent resource limits.
Run cryptocurrency mining, sustained high-CPU workloads unrelated to AI tasks, or use the platform as general-purpose hosting.
Use the Service for any activity that violates applicable local, national, or international law.
We reserve the right to suspend or terminate accounts that violate the Acceptable Use Policy. We will attempt to notify you before taking action except in cases of immediate threat to infrastructure or other users.
Availability
We aim to keep your workspace available 24/7 but do not guarantee specific uptime. The Service may be temporarily unavailable due to:
Infrastructure updates and security patches. We will notify you in advance when possible.
Hardware or network issues at our hosting provider.
Events beyond our reasonable control.
The Service depends on third-party infrastructure (hosting, DNS, payment processing) and third-party LLM providers that you connect. We are not responsible for outages or degradation caused by those third parties.
Updates to your workspace are self-service. You choose when to apply updates, can schedule them for off-hours, or roll back to a previous version. We do not force updates without your consent except for critical security patches.
Intellectual property
The Service is built on open-source software, including Moltis (MIT License) and OpenHands (MIT License). Our contributions to the orchestration layer, Go backend, and platform infrastructure remain our intellectual property.
You retain ownership of all content you create using the Service. We claim no intellectual property rights over your conversations, code, files, or any outputs generated through your workspace or worker containers.
Intellectual property rights in outputs generated by LLM providers through your API keys are governed by your agreements with those providers, not by these Terms.
Termination
You may close your account at any time by contacting us. Upon account closure:
Your workspace remains available until the end of the current billing period. Compute credit does not carry over.
Your workspace data (conversations, memory, files, credentials) is retained for 30 days after your workspace is stopped, then permanently deleted.
You may export your data at any time while your workspace is active. We recommend exporting before cancellation.
We may terminate your account immediately if you materially breach these Terms or the Acceptable Use Policy. In cases of immediate threat, we may suspend first and investigate after. We will attempt to provide notice and an opportunity to cure non-critical violations before termination.
Limitation of liability
To the maximum extent permitted by applicable law:
The Service is provided "as is" and "as available" without warranties of any kind, whether express or implied, including implied warranties of merchantability, fitness for a particular purpose, or non-infringement.
We do not warrant that the Service will be uninterrupted, error-free, or secure. We do not warrant the accuracy, reliability, or quality of outputs generated by LLM providers through your workspace.
Our total liability to you for any claims arising from or related to these Terms or the Service is limited to the amount you paid us in the 12 months preceding the claim.
We are not liable for any indirect, incidental, special, consequential, or punitive damages, including loss of data, loss of revenue, or costs incurred from third-party LLM provider charges.
These limitations apply regardless of the legal theory on which the claim is based and even if we have been advised of the possibility of such damages.
Nothing in these Terms limits liability that cannot be limited under applicable law, including liability for fraud or willful misconduct.
Changes to terms
We may update these Terms from time to time. When we make material changes, we will notify you by email or through the Service at least 30 days before the changes take effect. Non-material changes (clarifications, formatting) may be made without advance notice.
Your continued use of the Service after changes take effect constitutes acceptance of the updated Terms. If you do not agree with the changes, you may cancel your subscription before they take effect.
Governing law
These Terms are governed by the laws of the Republic of Lithuania. Any disputes arising from these Terms or the Service shall be resolved in the courts of Vilnius, Lithuania.
If you are a consumer in the European Union, you retain any mandatory consumer protection rights granted by the laws of your country of residence, regardless of the governing law above.
Contact
For questions about these Terms, contact us at [email protected].