Terms of Service

Version 2026-09-14

These terms govern your use of the hosted Hezo service at app.hezo.ai, which Hiddentao Labs Pte. Ltd. operates. They are a contract between you and us, so please read them before you create an account.

1. Who we are, and what this covers

The hosted Hezo service is operated by Hiddentao Labs Pte. Ltd. (UEN 202443955N), a company incorporated in Singapore with its registered office at 68 Circular Road, #02-01, Singapore 049422 ("Hezo", "we", "us"). "You" means the person or organisation using the service.

These terms cover the hosted service: the control plane at app.hezo.ai, the Hezo instance we run for you at your own subdomain of app.hezo.ai, and the agent containers that instance drives. They also cover the hezo.ai website.

They do not cover the Hezo software itself. Hezo is published under the GNU General Public License, version 3 or later. You may download, run, modify and redistribute it under that licence, and nothing in this document limits, adds to, or conditions any right that licence gives you. What we charge for is running it for you.

2. Eligibility

You must be at least 18 years old to enter into these terms on your own behalf. If you are between 13 and 17 you may use the service only with the agreement of a parent or guardian, who accepts these terms with you. The service is not for anyone under 13.

If you accept these terms for an organisation, you confirm you are authorised to bind it, and "you" then means that organisation.

3. Your account

Accounts are created and accessed with a single-use link sent to your email address. There is no password. Anyone who can read your email can therefore reach your account, so keep that address secure and tell us promptly if you believe it has been compromised.

One account runs one Hezo instance, at a subdomain of app.hezo.ai that you choose - so an instance named acme answers at acme.app.hezo.ai. Subdomain names are not reused after an account is deleted.

You are responsible for everything done through your account and your instance, including everything your agents do with the credentials and repositories you give them.

4. Plans, trials and payment

The service is sold in plans. Each grants a number of concurrent task containers and a monthly pool of container-hours: one container running for one hour is one container-hour, and time is metered only while a container is up. Projects and agents are unlimited on every plan. The plans, their pools and their prices are on our pricing page, and those are the ones that apply.

Nothing is charged above your plan unless you ask for it. If you spend your pool you may buy an hour pack, which is a one-off purchase that sits behind your plan's own hours, is spent only once those run out, and does not expire. Automatic top-ups are off until you turn them on, you set how many packs a billing period may buy on its own, and a pack one buys appears on your next invoice. If you run out with no pack left, no new container starts until the period rolls over or you buy more; work already running is not interrupted.

Your model spend is separate and is not billed by us. You connect your own model-provider accounts and those providers bill you directly, on their terms.

New accounts get a free trial, with no card required. Its length and its included container-hours are stated on the pricing page, and it is the same for everyone whatever plan you arrived from. The trial ends at whichever comes first, its time or its hours, and the account is then held until a plan is chosen.

Payment is handled by Stripe, which is the merchant of record. Your card details never reach us. Plan charges are billed in advance and packs when you buy them, and both are non-refundable except where the law requires otherwise.

We may change plans and prices for future billing periods. A subscription already running keeps the price it was signed at.

Container-hours are measured by us, from outside your box. We count the containers running for your account on our own clock, because your instance's database is yours and we do not read its ledger for this purpose. Our measurement is what we bill.

5. Taxes

Prices are exclusive of tax unless stated otherwise. Where Singapore Goods and Services Tax or any other tax applies to your purchase, it is added to the amount you pay. If you are required to withhold any tax, the amount payable to us is grossed up so that we receive what we would have received without the withholding.

6. Renewal, cancellation, dormancy and hold

Subscriptions renew automatically at the end of each billing period until you cancel. You can cancel at any time from your dashboard, and cancellation takes effect at the end of the period you have paid for.

Moving up a plan takes effect immediately, and the difference settles on your next invoice rather than being charged on the spot. Moving down, and switching between monthly and annual billing in either direction, take effect at the end of the period you have paid for.

An instance is held when its account has stopped paying or its trial has run out. A hold is a fact about the account rather than a state of the machine: the instance stays up, its agent containers are stopped, and its address answers with a notice instead of the application. A hold ends when it is lifted or when it becomes a dormancy.

An instance is dormant when it has been stopped. We record why. Dormancy is reversible and does not destroy your data.

Deleting your account is the one action that removes your instance and its data. It is not reversible. What we keep afterwards, and why, is set out in the Privacy Policy.

7. Acceptable use

You must not, and must not let your agents:

  • use the service for anything unlawful, or to infringe anyone's rights;
  • commit an offence under the Computer Misuse Act 1993 or any equivalent law, including unauthorised access to any computer or data;
  • attempt to reach another customer's instance, containers, database or data, or to defeat the isolation between them;
  • probe, scan or test the security of our systems without our written permission, or interfere with anyone else's use of the service;
  • run cryptocurrency mining, denial-of-service traffic, spam relays, bulk credential testing, or anything else whose purpose is to consume resources or attack a third party;
  • resell, sublicense or share the compute we provide, or use the service to offer a substantially similar hosted service to others;
  • upload or process material that is illegal to hold, or that you have no right to give us;
  • circumvent metering, plan limits or concurrency limits, or use more than the plan you pay for.

Agents act on your instructions and with your credentials. You are responsible for what they do, including code they write, commands they run, requests they send and changes they make to your repositories.

If you breach this section we may suspend or terminate your access. Where the breach is not serious and can be fixed, we will normally tell you first and give you a reasonable chance to fix it.

8. Your content and your credentials

Everything you put into the service stays yours: your tasks, documents, comments, code, repositories, files and credentials. We claim no ownership of any of it.

You grant us only the licence we need to run the service for you - to host, store, copy, transmit and display your content so the product works, and so we can support you when you ask. That licence ends when the content is deleted, except for copies in backups until they expire, and for what we must keep by law.

You confirm you have the right to give us the content and credentials you provide, and that doing so breaks no agreement you have with anyone else.

Credentials you store are encrypted, and agents reference them by placeholder rather than by value, apart from the model-provider key the agent's own tool needs to authenticate. How that works, and what its limits are, is described in the Privacy Policy and our documentation.

9. AI output, and what agents do

Hezo drives large language models. Their output is generated, and it can be wrong, incomplete, outdated or confidently mistaken. It is not professional, legal, financial, medical or any other kind of advice. You are responsible for reviewing it before you rely on it or ship it.

Agents write and run code against your repositories. They make commits, open pull requests, install packages, and call the third-party services you connect. Review what they produce. Give them the narrowest access that lets them do the work.

You supply your own model-provider key. Your prompts, your task text and the contents of the repositories your agents work in are sent to that provider, under your account with them and subject to their terms and their data-handling practices, not ours. We do not control what a provider does with what it receives, and you should read their terms before pointing your instance at them.

We make no promise about the accuracy, quality, originality or fitness of any output, and no promise that the same input produces the same output twice.

10. Third-party services

The service lets you connect third-party tools and providers. Those are your arrangements with them. We are not a party to them, we do not control those services, and we are not responsible for what they do, what they charge, or whether they stay available.

11. Availability

We work to keep the service available and will give reasonable notice of planned maintenance where we can, but we do not offer a service level agreement and we do not promise the service will be uninterrupted or error-free. The service may be unavailable because of maintenance, a fault, or a failure at one of the providers we depend on.

We may change how the service works, and may add, alter or withdraw features. Where a change materially reduces what you are paying for, we will tell you before it takes effect.

12. Warranties and liability

Except as these terms say, and to the extent the law allows, the service is provided as is and we give no warranties, express or implied.

Nothing in these terms limits or excludes our liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, or for anything else that cannot lawfully be limited or excluded.

Subject to that:

  • neither of us is liable to the other for loss of profit, loss of revenue, loss of anticipated savings, loss of business, or for indirect or consequential loss; and
  • our total liability arising out of or in connection with these terms, whether in contract, tort (including negligence), for breach of statutory duty or otherwise, is limited in aggregate to the greater of the amount you paid us in the twelve months before the event giving rise to the claim, and one hundred Singapore dollars.

You are responsible for keeping your own copies of anything you cannot afford to lose. We are not liable for loss of data you could have retained yourself.

These limits are what makes the service viable at the price we charge for it. If any of them is found unreasonable, it applies to the greatest extent that is reasonable rather than not at all.

13. Indemnity

You will indemnify us against claims, losses and reasonable costs arising from your use of the service in breach of these terms, from content or credentials you had no right to give us, or from a third party's claim about what your agents did. We will tell you promptly about any such claim, and will not settle it without your agreement.

14. Suspension and termination

You may stop using the service at any time, and may delete your account from your dashboard.

We may suspend or terminate your access if you materially breach these terms, if your account goes unpaid, if we are required to by law, or if continuing would expose us or another customer to a serious risk. Where the circumstances allow it, we will tell you first.

On termination your instance is destroyed. If you delete your account, the database and the files behind it go with it; if we terminate your access, we may remove them too. Some records survive - our audit trail names your account, and Stripe keeps its own record of your payments. The Privacy Policy sets out exactly what is deleted, what is kept, and for how long. Read it before you assume deletion is total.

15. Changes to these terms

We may change these terms. Each version carries the version identifier shown at the top of this page, which is also the version recorded against your account when you signed up.

For a change that materially affects your rights or obligations we will give at least 30 days' notice by email before it takes effect, and you may cancel before then if you do not accept it. Other changes take effect when published.

16. General

These terms, together with the Privacy Policy, are the whole agreement between us about the service. If any part is unenforceable, the rest stands. Not enforcing a term is not a waiver of it. You may not assign these terms without our consent; we may assign them to a successor to our business.

Nobody other than you and us has any right to enforce these terms under the Contracts (Rights of Third Parties) Act 2001.

17. Governing law

These terms are governed by the laws of Singapore, and the courts of Singapore have exclusive jurisdiction over any dispute arising from them. If you are a consumer, this does not deprive you of the protection of any mandatory law of the country where you live.

18. Contact

Write to us at team@hezo.ai, or at Hiddentao Labs Pte. Ltd., 68 Circular Road, #02-01, Singapore 049422.