Terms of Service

By accessing or using any HexaClaw products, software, or services (collectively, the "Service"), you agree to be bound by these Terms of Service ("Terms"). These Terms constitute a legally binding agreement between you and HexaClaw.

If you do not agree to all of these Terms, you must not access or use the Service. Your continued use of the Service following any changes to these Terms constitutes your acceptance of those changes.

These Terms apply to all visitors, users, and others who access or use the Service, including trial users and paid subscribers.

The following terms have specific meanings when used in these Terms:

• "Service" means the HexaClaw software, website (hexaclaw.com), Cloud API Platform, Guardian security engine, curated skill packs, desktop application, CLI, and all related documentation, updates, and services provided by HexaClaw.
• "Cloud API Platform" means HexaClaw's unified API proxy that provides access to multiple third-party AI services through a single API key and credit-based billing system, including but not limited to: large language model (LLM) completions, embeddings, web search, image generation, text-to-speech, speech-to-text, browser automation, and vector storage and retrieval.
• "Credits" means the unit of currency within the HexaClaw billing system, where one (1) credit equals $0.01 USD. Credits are used to pay for Cloud API Platform usage and are allocated through subscription plans, purchased as credit packs, or earned through promotions.
• "API Key" means the unique authentication credential (prefixed "hx_live_" or "hx_device_") issued to you for programmatic access to the Cloud API Platform.
• "BYOK" means "Bring Your Own Key," a feature that allows you to use your own third-party API keys with HexaClaw's routing and management infrastructure for a reduced platform fee.
• "Third-Party Provider" means an external service provider whose APIs are accessed through the Cloud API Platform, including but not limited to Anthropic, OpenAI, Google, DeepSeek, Mistral, Groq, xAI, Brave, fal.ai, and Browserbase.
• "Guardian" means HexaClaw's runtime security engine that monitors, analyzes, and filters AI agent activity using pattern matching, heuristic analysis, and machine-learning classification.
• "Skills" means third-party or first-party extensions that add capabilities to the AI agent, including but not limited to integrations, tools, and automation workflows.
• "You," "Your," or "User" means the individual or entity accessing or using the Service.
• "We," "Us," "Our," or "Company" means HexaClaw and its operators, officers, directors, employees, and agents.

You must be at least eighteen (18) years of age or the age of majority in your jurisdiction, whichever is greater, to use the Service.

If you are using the Service on behalf of an organization, you represent and warrant that you have the authority to bind that organization to these Terms, and "You" shall refer to both you individually and the organization.

By using the Service, you represent and warrant that you meet all eligibility requirements. If you do not meet these requirements, you must not access or use the Service.

To access certain features of the Service, you must register for an account. When registering, you agree to:

• Provide accurate, current, and complete information during the registration process
• Maintain and promptly update your account information to keep it accurate, current, and complete
• Maintain the security and confidentiality of your account credentials, including your password and any API keys
• Accept responsibility for all activities that occur under your account
• Notify us immediately at hello@hexaclaw.com if you become aware of any unauthorized access to or use of your account

We reserve the right to suspend or terminate accounts that contain inaccurate information or that we reasonably believe have been compromised.

The Service is offered under the following subscription tiers:

• 7-Day Trial: New users receive a 7-day trial with 200 Credits and access to all Cloud API Platform services. A valid credit card is required at signup. After 7 days, your trial automatically converts to a Pro subscription at $19.99/month and your card will be charged unless you cancel before the trial ends. You will receive reminder emails at day 5 and day 7 before any charge occurs.
• Pro ($19.99/month): Includes 2,000 Credits per month, full Guardian security, curated skill packs, over-the-air rule updates, all Cloud API Platform services, and priority support.
• Max ($49/month): Includes 5,000 Credits per month, higher rate limits, increased concurrent request limits, and all Pro features.
• Enterprise: Custom pricing with dedicated support, custom rate limits, team management, SSO, private cloud routing, and a custom service-level agreement. Contact hello@hexaclaw.com for details.

Credit Packs

You may purchase additional Credit packs at any time in denominations ranging from $10 to $100. Purchased Credits are non-refundable, do not expire while your account remains active, and are not transferable between accounts. Credits cannot be converted to cash or applied toward subscription fees. Monthly allotment Credits that are unused at the end of a billing cycle do not roll over. For dormant accounts (no login or API activity for 12 consecutive months), purchased Credits expire. We will send a warning email 30 days before expiration. Any login or API request resets the dormancy clock.

Billing

Subscriptions are billed on a recurring monthly basis through Stripe. By subscribing, you authorize us to charge your payment method on each billing cycle until you cancel.

We reserve the right to change subscription prices with at least thirty (30) days' prior written notice. Price changes will take effect at the start of your next billing cycle following the notice period.

All applicable taxes, duties, and levies are your responsibility unless otherwise stated. For information about cancellations and refunds, please see our Refund Policy.

Subject to your compliance with these Terms and payment of any applicable fees, we grant you a limited, non-exclusive, non-transferable, revocable license to use the Service for personal or internal commercial use on machines you own or control.

You may:

• Install and use the Service on multiple machines that you own or control
• Modify configuration files for your own use within your organization
• Use the Service in commercial environments
• Create backups of configuration files and skill packs for your own use

You may not:

• Redistribute, resell, sublicense, or otherwise make the Service available to any third party
• Share your subscription access, account credentials, or licensed materials with individuals or entities outside your organization
• Remove, alter, or obscure any copyright notices, trademarks, or attribution contained in the Service
• Reverse engineer, decompile, or disassemble any proprietary components of the Service for the purpose of creating a competing product or service
• Use the Service to build or train competing security products or services

This license is effective until terminated in accordance with Section 17 of these Terms.

The Service is delivered digitally. After registration or purchase, you will receive access to download the applicable software, configuration files, skill packs, Guardian rules, and documentation as described for your subscription tier.

Trial: Includes the version of the Service available at the time of installation during your 7-day trial period. Future updates are included as released at our discretion.

Pro tier: Includes priority security updates, new Guardian rules, updated curated skill packs, and new features for the duration of your active subscription. Upon cancellation or expiration of your subscription, you retain the version installed at that time but will no longer receive Pro-tier updates.

Guardian is a core component of the Service that provides runtime security monitoring for AI agent activity. The following subsections describe the nature, scope, and limitations of Guardian.

8.1 Nature of Service

Guardian uses a multi-tiered approach to threat detection, including pattern matching (regular expressions), heuristic behavioral analysis, and machine-learning classification. It operates by intercepting and analyzing tool calls, agent outputs, and skill activity in real time. Guardian is designed to function as one layer in a defense-in-depth security strategy.

8.2 No Guarantee of Detection

Guardian cannot and does not guarantee the detection of all security threats. New attack techniques, zero-day exploits, novel social engineering methods, and previously unseen malicious patterns may bypass Guardian's detection capabilities. We make commercially reasonable efforts to update detection rules and improve Guardian's capabilities on an ongoing basis, but there will always be a gap between threat emergence and rule availability.

8.3 Not a Substitute for Comprehensive Security

Guardian is not a substitute for comprehensive security practices. You should maintain and employ additional security measures including, but not limited to:

• Regular security audits of your systems and workflows
• Access control policies and least-privilege principles
• Network security measures (firewalls, intrusion detection)
• Employee security awareness training
• Incident response plans and disaster recovery procedures
• Regular backup and data protection practices

8.4 Evolving Threat Landscape

The security threat landscape for AI agents and skills changes rapidly. New attack vectors, prompt injection techniques, and malicious skill behaviors emerge on a regular basis. There may be delays between the emergence of new threats and the availability of corresponding Guardian rules or updates. We do not guarantee any specific response time for new threat coverage.

8.5 Third-Party Dependencies

Guardian's effectiveness depends on factors outside our control, including but not limited to the security of your underlying operating system, the behavior of third-party skills and extensions, the behavior and output of AI models, network conditions, and system resource availability. We are not responsible for security failures attributable to these external factors.

8.6 User Responsibility

You remain solely responsible for the security of your systems, data, credentials, and computing environment. You should not rely exclusively on Guardian for security. You are responsible for reviewing skill permissions, monitoring agent activity, and maintaining appropriate security hygiene for your environment.

8.7 Commercially Reasonable Efforts

We commit to commercially reasonable efforts to maintain and update Guardian detection rules, respond to reported vulnerabilities in a timely manner, improve detection capabilities through ongoing research and development, and communicate significant security findings to affected users. "Commercially reasonable" means efforts consistent with accepted practices in the security software industry, taking into account the size and resources of our organization.

Curated skill packs are collections of skills that have been selected based on our security review criteria. These packs are available to Pro subscribers and may include productivity, developer, content, and other categorized skill bundles.

While we apply security review criteria to skills included in curated packs, we do not guarantee that curated skills are free from all vulnerabilities, bugs, or security issues. Skills may be added to, removed from, or updated within curated packs at our discretion based on ongoing security assessments.

You should review the permissions and capabilities of any skill before enabling it, even within curated packs. You are responsible for evaluating whether a skill is appropriate for your use case and security requirements.

The Cloud API Platform is a unified proxy that routes your API requests to Third-Party Providers through a single API Key and credit-based billing system. Usage is metered per request based on the specific service, model, and token volume consumed.

10.1 Available Services

The Cloud API Platform currently provides access to:

• LLM Completions: Text generation via models from Anthropic (Claude), OpenAI (GPT, o-series), Google (Gemini), DeepSeek, Mistral, Groq, and xAI (Grok)
• Embeddings: Vector embeddings for semantic search and retrieval via OpenAI and Google models
• Web Search: Real-time web search results via the Brave Search API
• Image Generation: AI-generated images via fal.ai (Flux models) at multiple quality tiers
• Text-to-Speech (TTS): Audio synthesis from text via OpenAI TTS models
• Speech-to-Text (STT): Audio transcription via OpenAI Whisper
• Browser Automation: Cloud browser sessions for web interaction via Browserbase
• Vector Storage: Persistent semantic memory with vector storage and retrieval
• Guardian Scanning: AI safety and content threat analysis

We may add, modify, or discontinue individual services within the Cloud API Platform with reasonable notice. Changes that materially reduce the functionality of your current subscription tier will be communicated at least thirty (30) days in advance.

10.2 Third-Party Provider Terms

The Cloud API Platform routes your requests to Third-Party Providers. While HexaClaw manages authentication, billing, and request routing, the underlying AI models and services are operated by their respective providers. You acknowledge that:

• Third-Party Provider acceptable use policies apply to the content you submit through the Cloud API Platform, and you are responsible for compliance
• AI model outputs are generated by Third-Party Providers and may contain inaccuracies, biases, hallucinations, or errors
• HexaClaw does not control, endorse, or guarantee the accuracy, completeness, or reliability of any AI-generated output
• Third-Party Providers may update, modify, or deprecate their models at any time, which may affect the output quality or availability of specific models
• You are solely responsible for evaluating and validating AI outputs before relying on them for any decision or action

10.3 Rate Limits & Fair Use

Each subscription tier includes rate limits to ensure fair access for all users. Current rate limits are published on our pricing page and may be adjusted with notice. Attempts to circumvent rate limits through multiple accounts, request manipulation, or other technical means constitute a violation of these Terms.

10.4 BYOK (Bring Your Own Key)

The BYOK feature allows you to use your own Third-Party Provider API keys with HexaClaw's routing and management infrastructure for a reduced platform fee. When using BYOK:

• You are directly bound by the terms of service of the applicable Third-Party Provider for your API key
• You are responsible for the security of your own API keys and any charges incurred on your Third-Party Provider accounts
• HexaClaw charges a platform fee of 5% of the equivalent Credit cost (minimum 1 Credit per request) for routing, monitoring, and management services
• HexaClaw is not liable for any charges, data processing, or service disruptions related to your own Third-Party Provider accounts

10.5 AI Output Disclaimer

AI-generated outputs accessed through the Cloud API Platform (including text completions, images, audio, embeddings, and search results) are provided for informational purposes only. HexaClaw does not warrant that AI outputs are accurate, complete, current, or suitable for any particular purpose. You must not rely on AI outputs as a substitute for professional advice (legal, medical, financial, or otherwise). You are solely responsible for any actions taken based on AI-generated content.

10.6 Content Ownership

You retain ownership of all input content you submit through the Cloud API Platform. Ownership of AI-generated outputs is governed by the applicable Third-Party Provider's terms and applicable intellectual property law. HexaClaw claims no ownership over your inputs or the outputs generated from them.

Your use of the Service is subject to our Acceptable Use Policy, which is incorporated into these Terms by reference.

You agree not to misuse the Service, including but not limited to using it for illegal purposes, attempting to circumvent security measures on systems you do not own or have authorization to test, or interfering with the operation of the Service for other users.

Violations of the Acceptable Use Policy may result in suspension or termination of your account and access to the Service, at our sole discretion.

The Service, including the Guardian engine, HexaClaw branding, website design, documentation, curated skill pack selections, and all proprietary code, is owned by HexaClaw and protected by intellectual property laws. All rights not expressly granted in these Terms are reserved.

You retain full ownership of your data, configurations, custom skills, and any content you create or process using the Service. We claim no ownership rights over your data.

Certain components of the Service incorporate open-source software licensed under the MIT License. These components are governed by their respective licenses as described in Section 20 of these Terms.

Your privacy is important to us. Our collection, use, and disclosure of personal information is governed by our Privacy Policy, which is incorporated into these Terms by reference.

By using the Service, you consent to the collection and processing of data as described in the Privacy Policy. We process data in accordance with applicable data protection laws and regulations.

Please read this section carefully. It limits our obligations to you.

Please read this section carefully. It limits our liability to you.

Your Indemnification Obligations

You agree to indemnify, defend, and hold harmless HexaClaw, its affiliates, officers, directors, employees, and agents from and against any and all claims, liabilities, damages, losses, costs, and expenses (including reasonable attorneys' fees) arising out of or in connection with: (a) your use or misuse of the Service, (b) your violation of these Terms, (c) your violation of any applicable law or regulation, or (d) your violation of any third-party rights, including intellectual property, privacy, or publicity rights.

Our Indemnification Obligations

We agree to indemnify, defend, and hold harmless you from and against any third-party claims that the proprietary components of the Service infringe upon any third-party intellectual property rights, provided that: (a) you promptly notify us in writing of any such claim, (b) you grant us sole control of the defense and settlement of the claim, and (c) you provide us with reasonable cooperation at our expense. This indemnification obligation does not extend to open-source components described in Section 20, modifications you make to the Service, or your use of the Service in combination with third-party products or services not provided by us.

Either party may terminate these Terms at any time. You may terminate by canceling your subscription and ceasing all use of the Service. We may terminate or suspend your access to the Service immediately, without prior notice or liability, if you breach any provision of these Terms.

Upon termination:

• Your license to use the Service will immediately cease
• You must delete all copies of the Service software, configuration files, and skill packs from your systems
• Any outstanding payment obligations remain due and payable
• You may export your own data prior to the effective date of termination

The following sections shall survive termination of these Terms: Definitions (Section 2), Cloud API Platform (Section 10.2, 10.5), Intellectual Property (Section 12), Disclaimer of Warranties (Section 14), Limitation of Liability (Section 15), Indemnification (Section 16), this Termination section (Section 17), Dispute Resolution (Section 18), General Provisions (Section 23), and Contact (Section 24).

Informal Resolution

Before initiating any formal dispute resolution proceeding, you agree to first attempt to resolve any dispute, claim, or controversy arising out of or relating to these Terms or the Service informally by contacting us at legal@hexaclaw.com. We will attempt to resolve the dispute informally within thirty (30) days of receiving your notice.

Binding Arbitration

If we cannot resolve a dispute informally, you and HexaClaw agree that any dispute, claim, or controversy arising out of or relating to these Terms or the Service shall be resolved through binding arbitration administered by JAMS in accordance with its Streamlined Arbitration Rules and Procedures. The arbitration shall be conducted by a single arbitrator, in the English language, and the seat of arbitration shall be Wilmington, Delaware.

Class Action Waiver

You and HexaClaw agree that any arbitration or court proceeding shall be conducted on an individual basis only and not as a class action, collective action, or representative action. You expressly waive any right to participate in a class action lawsuit or class-wide arbitration against HexaClaw.

Small Claims Exception

Notwithstanding the foregoing, either party may bring an individual action in small claims court for disputes or claims within the jurisdictional limits of that court.

Governing Law

These Terms and any disputes arising hereunder shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict-of-law provisions. For any matters not subject to arbitration, you consent to the exclusive jurisdiction and venue of the state and federal courts located in the State of Delaware.

Neither party shall be liable for any failure or delay in performing its obligations under these Terms where such failure or delay results from causes beyond the reasonable control of that party, including but not limited to:

• Natural disasters, floods, earthquakes, or fires
• War, terrorism, civil unrest, or government sanctions
• Pandemics or public health emergencies
• Government actions, orders, regulations, or embargoes
• Internet or telecommunications outages or disruptions
• Power failures or electrical grid disruptions
• Failures of third-party service providers, hosting infrastructure, or cloud platforms
• Cyberattacks, distributed denial-of-service attacks, or similar events affecting the Service infrastructure

The affected party shall give prompt written notice to the other party of the force majeure event and shall use commercially reasonable efforts to mitigate the effects of such event.

The Service incorporates components licensed under open-source licenses. These components are subject to their respective license terms, which take precedence over these Terms with respect to those components. The principal open-source components are:

• OpenClaw: MIT License, Copyright Peter Steinberger 2025
• Pi-Mono: MIT License, Copyright Mario Zechner 2025

Full license texts for all open-source components are available in the THIRD-PARTY-LICENSES.md file distributed with the Service. Nothing in these Terms is intended to limit any rights you have under applicable open-source licenses.

Our indemnification obligations under Section 16 do not extend to open-source components, which are provided under their respective licenses without additional warranties or indemnification from us.

The Service may be subject to United States export control laws and regulations, including the Export Administration Regulations (EAR). You agree not to export, re-export, or transfer the Service or any technical data received from us, directly or indirectly, to any country, entity, or person prohibited by or in violation of US export laws and regulations.

You represent and warrant that you are not located in, under the control of, or a national or resident of any country or territory subject to comprehensive US sanctions, and that you are not on any US government restricted party list.

We reserve the right to modify these Terms at any time. For material changes, we will provide at least thirty (30) days' prior notice through email notification to the address associated with your account or through an in-app notification.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Terms. If you do not agree to the updated Terms, you must stop using the Service and cancel your subscription before the changes take effect.

We will maintain an archive of previous versions of these Terms, which you may request by contacting us. The "Last updated" date at the top of this page indicates when these Terms were most recently revised.

Severability

If any provision of these Terms is held to be invalid, illegal, or unenforceable by a court of competent jurisdiction, that provision shall be modified to the minimum extent necessary to make it enforceable, or if modification is not possible, shall be severed from these Terms. The invalidity of any provision shall not affect the validity or enforceability of the remaining provisions, which shall continue in full force and effect.

Entire Agreement

These Terms, together with the Privacy Policy, Acceptable Use Policy, API Terms of Use, DMCA & Copyright Policy, Refund Policy, and any other policies referenced herein, constitute the entire agreement between you and HexaClaw regarding the Service and supersede all prior and contemporaneous agreements, proposals, or representations, written or oral, concerning the subject matter of these Terms.

Waiver

No waiver of any provision of these Terms shall be deemed a further or continuing waiver of such provision or any other provision. Our failure to assert any right or provision under these Terms shall not constitute a waiver of such right or provision.

Assignment

You may not assign or transfer these Terms, or any rights or obligations hereunder, without our prior written consent. We may assign these Terms in connection with a merger, acquisition, reorganization, or sale of all or substantially all of our assets, upon notice to you.

If you have questions or concerns about these Terms, please contact us:

• Legal matters: legal@hexaclaw.com
• General questions: hello@hexaclaw.com