Bunkhouse

Legal

Terms of Service

Effective 2 November 2026

See also our Privacy Policy.

These Terms of Service (the "Agreement") are between Lanius Limited, a company registered in New Zealand, trading as Bunkhouse AI ("Bunkhouse", "we", "us"), and the person or entity that creates an account, starts an agent trial or otherwise uses the Services ("Customer" or "you"). If you use the Services on behalf of a company, you confirm you are authorised to accept this Agreement for it, and "you" means that company.

The Agreement takes effect when you first create an account, start an agent trial or otherwise access the Services (the "Effective Date").

Changes to this Agreement. We may change this Agreement from time to time. We will notify you of material changes by email or in the dashboard at least 30 days before they take effect, unless a change is required sooner by law or for security. If you object, you may cancel before the change takes effect. Continuing to use the Services after the change takes effect means you accept it.

By accepting this Agreement or using the Services, you agree to be bound by it. If you do not agree, do not use the Services.

1. Definitions

  • "AI Output" means responses, actions, generated skills and other content produced by AI models through the Services.
  • "Credentials" means publishable keys, secret keys, signing secrets, passwords and access tokens issued for the Services.
  • "Customer Data" means data submitted to the Services by you or on your behalf, including data about or from End Users collected through the Embed on Customer Properties.
  • "Customer Properties" means websites and applications operated by or for you on which you install the Embed.
  • "Dashboard" means our web interface at app.bunkhouse.ai.
  • "Documentation" means the documentation at docs.bunkhouse.ai.
  • "Embed" means the Bunkhouse JavaScript, APIs and related code we provide for installation on Customer Properties.
  • "End Users" means users of and visitors to Customer Properties.
  • "External Agent" means a third-party AI agent or MCP client that an End User or you connect to a browser tab through the Services.
  • "Services" means the Dashboard, the Bunkhouse API, the Embed, agent trials, external-agent connections and related services we provide.
  • "Model Providers" means OpenRouter and the third-party AI model providers it routes requests to.

2. The Services

2.1 Overview. Bunkhouse provides an AI agent that runs inside Customer Properties. The agent reads the permitted parts of the current page, calls allowed APIs and, with End User approval, performs actions in the application.

2.2 Access. Subject to this Agreement, you may access and use the Services for your own business and for the benefit of your End Users, in line with the Documentation. You are responsible for all activity under your account and Credentials. Keep Credentials confidential: secret keys and signing secrets must never be exposed in client-side code. Tell us promptly at [email protected] if you believe your account or Credentials have been compromised, and rotate them.

2.3 Embed licence. During the term of this Agreement we grant you a limited, non-exclusive, non-transferable, non-sublicensable licence to install the Embed on Customer Properties that you register in the Dashboard, solely to use the Services. Changes you make to Customer Properties may affect how the Services work, and we are not responsible for that.

2.4 Usage limits. We may apply rate limits, spending holds and other usage limits, and may suspend or throttle use that threatens the security, integrity or availability of the Services.

2.5 Restrictions. You will not, and will not allow anyone else to:

  1. resell, sublicense or provide the Services to third parties other than as part of Customer Properties;
  2. reverse engineer or attempt to obtain the source code of the Services, except to the extent the law allows this despite this restriction;
  3. circumvent usage limits, origin allowlists, approval prompts, privacy controls or other security measures;
  4. use the Services to build a competing product; or
  5. use the Services in breach of Section 4.

2.6 Agent trials. Agent trials are free, last up to 24 hours, and are provided for evaluation only. Use only dummy data in a trial. The coding agent running a trial supplies the model, and trial messages are passed to that agent. We may end a trial at any time. Trials are provided "as is" without any warranty, support or service level.

2.7 Beta features. Features we identify as beta, preview or experimental may change or be withdrawn without notice and are provided "as is" at your own risk.

3. Customer Data

3.1 Ownership. As between the parties, you own Customer Data. You grant us a non-exclusive, worldwide, royalty-free licence to host, process and transmit Customer Data during the term only as needed to provide, secure and support the Services. We do not use Customer Data to train AI models.

3.2 Data processing. For personal data within Customer Data you are the controller and we are your processor (or service provider). We will:

  1. process it only to provide the Services and on your documented instructions, including this Agreement and your configuration;
  2. ensure people authorised to process it are bound by confidentiality;
  3. use only the subprocessors listed in our Privacy Policy, which we will update before adding a new one;
  4. help you respond to End User requests and meet your security and breach notification obligations;
  5. notify you without undue delay after becoming aware of a breach affecting it; and
  6. delete it after the Agreement ends, as described in Section 9.

3.3 Model Providers. To generate AI Output we send Customer Data to Model Providers through OpenRouter. We instruct OpenRouter to use only providers that, according to OpenRouter, do not store or train on the data. We do not control Model Providers and are not responsible for their acts, except as stated in this Agreement.

3.4 Usage Data. We may collect data about use of the Services, such as token counts, costs, request outcomes and performance ("Usage Data"), and use it to operate, bill, secure and improve the Services. We may use Usage Data that does not identify you or any individual for any purpose.

3.5 Your responsibilities. You are responsible for Customer Data and you will:

  1. have all rights, notices and consents needed for us to process Customer Data under this Agreement;
  2. keep a privacy policy on each Customer Property that discloses your use of Bunkhouse and an AI model provider, and not suppress, alter or bypass the notice the Embed shows End Users before sending data;
  3. mark private any page sections that should not be read, and configure the API origins the agent may call so that it can access only data the End User is entitled to see;
  4. make sure your own backend enforces authorisation for every request; the Services act in the End User's browser session and do not replace your access controls;
  5. not supply user IDs that contain sensitive information, such as email addresses or government identifiers, unless you have a lawful basis to do so; and
  6. comply with all laws that apply to your use of the Services.

3.6 Sensitive data. Unless we agree otherwise in writing, you will not use the Services to process payment card data, health information or special categories of personal data. The Services do not read password or payment fields and are not PCI DSS compliant.

4. Acceptable use

You will not use the Services, or allow End Users or External Agents to use them, to:

  • break the law or infringe anyone's rights, including privacy and intellectual property rights;
  • send spam or unsolicited communications;
  • create, distribute or facilitate malware, phishing, fraud or deceptive practices;
  • attack, probe or overload the Services, Customer Properties or any third-party system;
  • access data or systems you are not authorised to access;
  • make decisions with legal or similarly significant effects on individuals without meaningful human review; or
  • breach the usage policies of OpenRouter or the Model Providers.

5. AI Output

5.1 AI Output is generated automatically and may be inaccurate, incomplete or inappropriate. You are responsible for evaluating AI Output, for the actions End Users approve, and for how you use AI Output. Do not rely on AI Output as professional advice.

5.2 As between the parties, and to the extent we have any rights in it, you own AI Output generated for your Customer Properties. Similar output may be generated for others.

6. External Agents and third-party services

6.1 The Services can relay requests from External Agents to a browser tab after the End User grants access. External Agents are third-party services that we do not control. We are not responsible for External Agents, their use of data or their actions, other than relaying requests as described in the Documentation.

6.2 Your use of third-party services together with the Services, including your own Stripe account relationship, is governed by those third parties' terms.

7. Ownership and feedback

7.1 We and our licensors own the Services, the Embed, the Documentation and all related technology and intellectual property. Except for the rights expressly granted in this Agreement, no rights are transferred to you.

7.2 If you give us feedback or suggestions, we may use them without restriction or obligation to you.

8. Subscription, fees and payment

8.1 Plan. Paid use of the Services requires a monthly subscription. The subscription fee, the usage credit included with each paid period and the token rates are published in the billing documentation and shown in the Dashboard before you subscribe. All amounts are in US dollars.

8.2 Renewal and payment. Your subscription renews automatically each month until cancelled. By subscribing, you authorise us, through Stripe, to charge your payment method each month in advance for the subscription fee and when you buy credit.

8.3 Credit. Usage is paid from credit: first the credit included with your current paid period, then credit you buy. Included credit expires at the end of its billing period. Purchased credit does not expire, but can be spent only while your subscription is active. Before each model call we hold the maximum cost of that call and then charge the actual usage. We may refuse requests that available credit cannot cover.

8.4 Cancellation. You may cancel at any time from Billing in the Dashboard. Cancellation takes effect at the end of the current billing period, and you keep access until then.

8.5 Refunds. Except as required by law or stated in this Agreement, fees and purchased credit are non-refundable. If we refund a subscription payment, in whole or in part, the remaining included credit for that period is revoked.

8.6 Price changes. We may change prices with at least 30 days' notice. Changes apply from your next billing period after the notice period.

8.7 Taxes. Fees exclude taxes. You are responsible for all taxes other than taxes on our income, and we may charge taxes where we are required to collect them.

8.8 Non-payment and disputes. If a payment fails or is disputed, or your purchased credit balance becomes negative, we may refuse requests or suspend the Services until the matter is resolved.

9. Term and termination

9.1 This Agreement starts on the Effective Date and continues until your account is closed or the Agreement is terminated.

9.2 You may stop using the Services at any time. To close your account, cancel your subscription and email [email protected].

9.3 Either party may terminate this Agreement by notice if the other materially breaches it and does not cure the breach within 30 days of notice. We may suspend or terminate the Services immediately if your use breaches Section 4, threatens the security of the Services or others, or if required by law.

9.4 When this Agreement ends, your right to use the Services ends and you must remove the Embed from Customer Properties. We will delete or de-identify Customer Data within 90 days, except data we must keep by law. Unused credit is forfeited unless the law requires otherwise.

9.5 Sections 2.5, 3.4, 3.5, 3.6, 5, 7, 8 (for amounts due), 9.4, 10, 11, 12, 13 and 14 survive termination.

10. Warranties and disclaimers

10.1 We will provide the Services with reasonable care and skill and substantially in line with the Documentation. If they do not, your remedy is for us to use reasonable efforts to fix the problem or, if we cannot, for either party to terminate the affected subscription and for us to refund prepaid fees for the unused part of the period.

10.2 EXCEPT AS EXPRESSLY STATED IN THIS AGREEMENT, THE SERVICES AND AI OUTPUT ARE PROVIDED "AS IS" AND "AS AVAILABLE". TO THE EXTENT PERMITTED BY LAW, WE DISCLAIM ALL OTHER WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED OR ERROR-FREE, OR THAT AI OUTPUT WILL BE ACCURATE.

10.3 Business use. You are acquiring the Services for the purposes of a business. To the extent permitted by law, the Consumer Guarantees Act 1993 does not apply, and the parties agree that it is fair and reasonable that sections 9, 12A, 13 and 14(1) of the Fair Trading Act 1986 do not apply.

11. Limitation of liability

11.1 TO THE EXTENT PERMITTED BY LAW, NEITHER PARTY IS LIABLE FOR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL OR BUSINESS INTERRUPTION, OR ANY INDIRECT OR CONSEQUENTIAL LOSS, EVEN IF ADVISED OF THE POSSIBILITY.

11.2 TO THE EXTENT PERMITTED BY LAW, EACH PARTY'S TOTAL LIABILITY ARISING OUT OF OR RELATING TO THIS AGREEMENT IS LIMITED TO THE AMOUNTS YOU PAID US IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM.

11.3 These limits do not apply to your payment obligations, your obligations under Sections 3.5 and 4 or 12, or liability that cannot be limited by law, such as for fraud.

12. Indemnities

12.1 You will defend and indemnify us against third-party claims, losses and reasonable legal costs arising from Customer Data, Customer Properties, your breach of Section 3.5 or Section 4, or actions taken in your application through the Services by your End Users.

12.2 We will defend and indemnify you against third-party claims that the Services, used as permitted, infringe that third party's intellectual property rights, and pay damages finally awarded or agreed in settlement. This does not apply to claims arising from Customer Data, AI Output, combinations with things we did not provide, or modifications we did not make. If such a claim is made, we may modify the Services, obtain a licence, or terminate the affected Services and refund prepaid fees for the unused period.

12.3 The indemnified party must give prompt notice of the claim, let the indemnifying party control the defence and settlement, and give reasonable help at the indemnifying party's cost.

13. Confidentiality

Each party will keep the other's non-public information that is marked or reasonably understood to be confidential, including Credentials and non-public details of the Services, confidential and use it only to perform this Agreement. This does not apply to information that is or becomes public through no fault of the receiving party, was already known to it, is independently developed, or must be disclosed by law.

14. General

14.1 Governing law. This Agreement is governed by the laws of New Zealand. The courts of New Zealand have non-exclusive jurisdiction. Before starting proceedings, a party must notify the other of the dispute and both parties will try in good faith to resolve it for 30 days, except where urgent relief is needed.

14.2 Notices. We may give you notices by email to your account address or in the Dashboard. You must give us notices by email to [email protected].

14.3 Assignment. Neither party may assign this Agreement without the other's consent, except to a successor in a merger, acquisition or sale of substantially all of its relevant business or assets.

14.4 Subcontractors. We may use subcontractors and service providers to provide the Services and remain responsible for their performance under this Agreement.

14.5 Force majeure. Neither party is liable for delay or failure to perform caused by events beyond its reasonable control, other than payment obligations.

14.6 Export and sanctions. Each party will comply with applicable export control and sanctions laws. You confirm you are not on a restricted party list and will not use the Services in a sanctioned country.

14.7 Entire agreement. This Agreement, together with the Privacy Policy and the Documentation it refers to, is the entire agreement between the parties on its subject and supersedes prior agreements. Terms in your purchase orders do not apply.

14.8 Other. If any provision is unenforceable, the rest remains in effect. A failure to enforce a right is not a waiver. The parties are independent contractors. No third party has rights under this Agreement.