Terms of Service

By clicking "Accept", signing in, or otherwise accessing or using the Services, you agree to these Terms. If you use the Services on behalf of a company or other entity, you represent and warrant that you have authority to bind that entity, and "you" refers to that entity.

We may modify these Terms at any time. If we make material changes, we will post the updated Terms and update the "Last updated" date, and where practicable give notice in-product or by email. Changes are effective when posted (or, for material changes, no fewer than the notice period we provide). If you continue to use the Services after changes take effect, you agree to the updated Terms. We may change, suspend, or discontinue any part of the Services at any time.

You may use the Services only if you are at least 18 years old, are of the age of majority in your jurisdiction, and are not barred from using the Services under applicable law. You represent and warrant that you are not located in, and are not a national or resident of, any country or region subject to comprehensive sanctions or embargo, and that neither you nor any person or entity that owns or controls you is identified on any sanctions or restricted-party list, including the U.S. Treasury Department's Specially Designated Nationals (SDN) List or the U.S. Commerce Department's Entity List. You agree not to use the Services in violation of any export-control or sanctions laws.

You access the Services by authenticating through our login provider using a wallet or email, which provisions an embedded wallet on your behalf. That wallet's signature authorizes your sandbox sessions. You are responsible for maintaining the security of your authentication method and wallet and for all activity that occurs under your account. We cannot recover a lost wallet, recovery phrase, or similar secret for you. Notify us promptly of any unauthorized use.

Each sandbox is a disposable virtual machine that you control with full root access and that may be reachable over the public internet at a <slug>.zbox.sh subdomain. Subject to your compliance with these Terms, we grant you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to access and use the Services for your personal or internal business purposes. You may not reverse engineer, decompile, or attempt to derive the source code of the Services except to the extent that restriction is prohibited by law.

You are solely responsible for all code, commands, data, content, and software that you — or any AI agent acting on your behalf — upload, generate, execute, serve, or transmit through the Services, and for its accuracy, quality, legality, and compliance with these Terms, the Acceptable Use restrictions below, applicable law, and third-party rights.

The Services are designed to run autonomous and semi-autonomous AI coding agents (for example Claude Code, Codex, Cursor, and Grok). Any action taken within or by a sandbox — including any action initiated by an AI agent — is deemed your action, taken under your direction and supervision, and you are fully responsible and liable for it. This includes actions you did not specifically intend or foresee, such as actions resulting from prompt injection, model error, or autonomous tool use.

AI agents and large language models are provided by third parties. We do not test, verify, endorse, or control their outputs, and you are responsible for independently reviewing and verifying any output before relying on or acting upon it. Your use of any third-party agent, model, or tool inside a sandbox is subject to that third party's own terms, and you are responsible for complying with them.

You may not use the Services, and may not permit any agent or third party to use the Services, to:

• Engage in or facilitate any illegal or fraudulent activity, or promote illegal goods or services;
• Create, store, or distribute child sexual abuse material or content that sexually exploits or endangers minors, or non-consensual intimate imagery;
• Infringe or misappropriate any intellectual property, privacy, publicity, or other right of any person;
• Create, host, or distribute malware, viruses, worms, ransomware, or backdoors, or operate botnet command-and-control or exploit-delivery infrastructure;
• Probe, scan, monitor, or test the vulnerability of any system or network, or breach or circumvent any security or authentication measure, without prior written authorization from the system's owner;
• Conduct or facilitate network abuse — including denial-of-service or distributed-denial-of-service attacks, flooding, mail-bombing, operating open proxies, open relays, or Tor exit nodes, or spoofing network or email identities;
• Mine cryptocurrency or perform comparable proof-of-work or resource-abusive workloads;
• Send spam or unsolicited bulk messages, or conduct phishing or social-engineering;
• Scrape or harvest data in violation of applicable terms or law, or host VPNs, proxies, or anonymization services for third parties;
• Circumvent or attempt to circumvent usage limits, rate limits, billing, the free-tier allowance, or any access restriction;
• Resell, lease, sublicense, or otherwise provide third parties access to the Services, or use the Services to build a competing product;
• Use a sandbox as persistent hosting, a content-delivery network, or general file storage or a download server, rather than as a disposable execution environment;
• Register or use deceptive, offensive, or impersonating zbox.sh subdomains, or use them to impersonate another business or person.

This list is not exhaustive. We may investigate suspected violations and take any remedial action we consider appropriate, including removing content, reclaiming subdomains, and suspending or terminating access.

The Services are not designed or intended for use in hazardous or high-risk environments requiring fail-safe performance, including the operation of nuclear facilities, life-support or emergency-services systems, autonomous vehicles, aircraft navigation or air-traffic-control systems, or weapons systems, where failure could lead to death, personal injury, or severe physical or environmental damage. You assume all risk and liability for any such use, and we disclaim all liability arising from it.

When you expose a sandbox to the public internet via its <slug>.zbox.sh subdomain, you are solely responsible and liable for that exposure and for the conduct of any third party who accesses it. Any resulting harm or damage may be recovered from you, and we may treat all actions performed through such access as performed under your direction and supervision. Public sandbox URLs are provided "AS IS", "WITH ALL FAULTS", and "AS AVAILABLE", and are not covered by any warranty or service-level commitment. We may reclaim, rename, or disable any subdomain at any time.

Sandboxes are ephemeral and disposable by design. Data inside a sandbox is destroyed when the sandbox is stopped, and may be deleted, altered, or lost at any time, for any reason, with or without notice. We do not back up sandbox data and are not liable for any loss, corruption, or deletion of it. You are solely responsible for exporting and backing up anything you wish to keep before stopping a sandbox.

THE SERVICES ARE PROVIDED "AS IS", "AS AVAILABLE", AND "WITH ALL FAULTS", WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED. TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT, AND ANY WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE. WE DO NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, SECURE, ERROR-FREE, OR FREE OF HARMFUL COMPONENTS, OR THAT ANY SANDBOX OR ITS ISOLATION CANNOT BE COMPROMISED. NO ENVIRONMENT IS PERFECTLY SECURE.

TO THE MAXIMUM EXTENT NOT PROHIBITED BY LAW, WE WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL, ARISING OUT OF OR RELATED TO YOUR USE OF OR INABILITY TO USE THE SERVICES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. OUR TOTAL LIABILITY FOR ANY CLAIMS RELATING TO THE SERVICES WILL NOT EXCEED THE GREATER OF (A) ONE HUNDRED U.S. DOLLARS (US$100) OR (B) THE TOTAL FEES YOU PAID US FOR THE SERVICES IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM.

You agree to defend, indemnify, and hold harmless Tribes and our affiliates, officers, directors, employees, and agents from and against any claims, damages, obligations, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from or related to: (i) your use of the Services; (ii) your code, content, data, or AI-agent activity; (iii) your violation of these Terms or applicable law; (iv) your violation of any third-party right, including intellectual-property rights; and (v) any third party's access to or use of a sandbox you exposed to the public internet. This obligation survives termination.

We may suspend or terminate your access to the Services, in whole or in part, immediately and without notice, if we reasonably believe you have violated these Terms or the Acceptable Use restrictions, if your use poses a risk to the security, availability, or integrity of the Services or other users, if required by law, or for any other reason. You may stop using the Services at any time. On termination, your sandboxes and their data are deleted, and you remain responsible for any obligations incurred before termination.

We provide the Services using commercially reasonable efforts but do not guarantee any level of availability, and no service-level commitment applies to free or preview use. We may modify, suspend, or discontinue the Services, in whole or in part, at any time, with or without notice.

You retain all rights, title, and interest in and to your code, content, and data. You grant us a limited, non-exclusive license to host, store, process, transmit, and display that content solely as needed to operate and provide the Services to you. We and our licensors retain all rights, title, and interest in and to the Services and all related software and technology. We do not use the contents of your sandboxes to train machine-learning or AI models.

The Services may reference or provide access to third-party services, software, models, or content. We do not control and are not responsible for third-party materials, and your use of them is at your own risk and subject to the third parties' terms.

These Terms are governed by the laws of the State of California, without regard to conflict-of-law principles. If you are located in the United States or Canada, any dispute relating to these Terms or the Services will first be subject to good-faith informal resolution for at least 60 days after written notice, and thereafter resolved by binding individual arbitration administered by the American Arbitration Association under its applicable rules, seated in San Francisco, California. You and we waive the right to a jury trial and to participate in a class, collective, or representative action. If the class-action waiver is held unenforceable, the entire arbitration agreement is void. Either party may bring an individual claim in small-claims court or seek injunctive or equitable relief for intellectual-property or unauthorized-use claims in a court of competent jurisdiction in San Francisco, California.

These Terms constitute the entire agreement between you and Tribes regarding the Services. If any provision is held invalid, the remaining provisions remain in full force and effect. You may not assign or transfer these Terms without our prior written consent; we may assign them without restriction. Our failure to enforce any provision is not a waiver. Sections that by their nature should survive termination (including Sections 6 and 10–13) survive.

Questions about these Terms or reports of abuse can be sent to support@tribes.xyz.