What these terms cover
These terms apply to the website at hexbot.app (the "site") and to Hex Connect, the optional hosted service at connect.hexbot.app and the hostnames under hexbot.app that it assigns ("Connect"). We call the two together the "services". "We" and "us" mean the Hexbot team, reachable at lumora.studio@hotmail.com. "You" means the person using the services or, if you use them for an organisation, that organisation as well.
By using the services you agree to these terms, the Acceptable Use Policy, and the Privacy Policy, which together form the whole agreement. If you do not agree, do not use the services.
The Hexbot software (the app and the daemon) is licensed to you separately under the GNU AGPL-3.0. Nothing in these terms limits the rights that licence gives you, and you can use the software without ever using Connect.
Your account
Connect requires an account. Sign-in is handled by Clerk, which stores your email address and sign-in method on our behalf. You must be at least 16 years old, or the age at which you can consent to online services where you live if that is higher, to create an account.
Keep your sign-in credentials to yourself and tell us promptly if you believe your account has been used without your permission. Everything done through your account is your responsibility until you tell us otherwise. One person may hold one account; you may not create accounts by automated means or on behalf of someone who is not allowed to have one.
What Connect does
Connect lets you reach a Hexbot daemon that you run, from outside its local network. It signs you in, keeps a list of the daemons you have registered, gives each daemon a hostname and a Cloudflare Tunnel, and issues short-lived, single-use login grants to your devices and browsers. That is all it does.
Connect is not the chat server and does not host your bots. Your conversations, memory, files, and provider keys stay on the machine running your daemon. Chat traffic travels through a Cloudflare tunnel, which Cloudflare decrypts at its edge to route, and never passes through the Connect service.
You never need Connect to use Hexbot. Pairing on your own network and connecting over Tailscale work without it, and because Connect is open source you may run your own instance, to which these terms do not apply.
Your daemons and devices
You may register only daemons that you own or are permitted to run, and only for your own use or the use of people you have chosen to give access to. A registered daemon gets a public hostname. Keeping the daemon patched, deciding who may pair with it, choosing what its bots are allowed to do, and paying your model provider are all up to you.
You can rename or revoke a daemon and sign out a device at any time at connect.hexbot.app, and revoke any device from the daemon's own settings. Revoke anything you do not recognise. Registration is limited to a reasonable number of daemons per account; we will tell you if you reach the limit.
Acceptable use
The Acceptable Use Policy is part of these terms. In short: use Connect only for your own daemons, do not attack, probe, or overload the services or Cloudflare's network, do not use a Connect hostname to publish services to the public or to relay traffic for third parties, and do not do anything that is illegal where you live or where we operate.
Your content
Connect holds very little that you create: the names you give your daemons and devices, and your sign-in identity. You keep every right to that content. You give us only the permission needed to display it back to you and to operate the service. We do not have access to your conversations, bot memory, or files, and we do not use anything of yours to train models.
The software and our marks
The Hexbot software, including the Connect service code, is available under the AGPL-3.0 in our GitHub repository. Hexbot is built on Hermes Agent by Nous Research under its licence. The Hexbot name and mark identify our services; you may describe compatibility with Hexbot, but do not present your own service as ours or use the mark in a way that suggests we endorse you.
Third-party services
Connect depends on Clerk for sign-in, Cloudflare for tunnels and hostnames, Neon for its database, and Vercel for hosting. The model providers your bots use are your own choice and your own relationship. Each of these has its own terms, and we are not responsible for them. If one of them stops serving us, Connect may stop working until we replace it.
Beta service and changes
Connect is free during its beta and is provided as a beta service. We may change it, add or remove features, set limits, pause it, or shut it down. If we plan to shut Connect down or to start charging for it, we will say so on this site at least 30 days in advance. Your daemons remain reachable on your own network and over Tailscale regardless, and there is nothing to export: Connect holds none of your data beyond the records listed in the Privacy Policy.
Suspension and ending your use
You can stop at any time: revoke your daemons and devices at connect.hexbot.app or run hexbot connect disconnect on each daemon, and delete your account as described in the Privacy Policy.
We may suspend or close an account, or revoke a daemon or hostname, if we reasonably believe it breaks these terms or the Acceptable Use Policy, puts other users or the services at risk, or is required by law. Where we can, we will tell you why and give you a chance to fix it first. Sections 6 and 11 to 14 survive the end of this agreement.
Disclaimers
The services are provided "as is" and "as available". To the extent the law allows, we make no warranties of any kind, whether express, implied, or statutory, including warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not promise that the services will be uninterrupted, timely, secure, or error-free, or that a hostname will stay the same. Nothing in these terms limits rights that consumer law gives you and that cannot be excluded.
Limitation of liability
To the extent the law allows, we are not liable for any indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, data, or goodwill, arising from or related to the services, however caused. Our total liability for all claims relating to the services is limited to the greater of the amount you paid us for Connect in the 12 months before the claim and 50 US dollars. During the beta you pay nothing, so the second figure applies. These limits do not apply to liability that cannot be limited by law, including liability for death or personal injury caused by negligence, or for fraud.
Your responsibility for misuse
If a third party brings a claim against us because of your misuse of the services, your breach of these terms, or content or traffic you sent through a daemon you registered, you will cover the reasonable costs and damages we incur as a result, including reasonable legal fees, provided we tell you about the claim promptly and let you take part in the defence.
Governing law and disputes
These terms are governed by the laws of the country in which we are established, without regard to its conflict-of-law rules, and the courts of that country have exclusive jurisdiction over disputes about them, except that if you are a consumer you keep the protection of the mandatory consumer laws of the country where you live and may bring a claim in its courts. Before either of us goes to court, we agree to try to resolve the dispute by contacting each other and talking for at least 30 days.
Changes to these terms
We may update these terms. The dates at the top tell you when. For material changes we will post a notice on this site at least 14 days before they take effect, and where we have your email address we will send you one too. Using the services after that date means you accept the new terms; if you do not, stop using them and delete your account.
Contact
Questions about these terms go to lumora.studio@hotmail.com or the contact form. Security reports go through the Security Policy.