Terms of Service

These terms are an agreement between you and LOGZAI SRL, a limited liability company registered in Romania (“we”, “us”), covering the hosted kvbox service: the control plane at api.kvbox.sh, the hosts that run your boxes, the HTTPS addresses under kvbox.app, the web app, and this website. By creating an account or logging the kvbox command-line tool in to the service you accept them. If you do not accept them, do not use the service.

• Registered office: Fagarasi 19, Dumbravita, Romania
• Tax identification number (CUI): 53038901
• Trade Register number: J2025094020008
• EUID: ROONRC.J2025094020008

The kvbox software itself is open source under the MIT licence, and running it on your own machines is governed by that licence, not by these terms. How we handle data is covered separately in our Privacy Policy, which forms part of these terms.

kvbox is pre-release software under active development. That is not a formality; it has practical consequences you should plan around:

• There is no uptime commitment and no SLA. A host may be restarted, moved or taken offline without notice, and your boxes stop or become unreachable while it is.
• It will contain bugs, including ones that lose or corrupt a box’s disk or a snapshot. We do not back up the contents of your boxes.
• Commands, API shapes, base images and the way boxes are stored may change between versions, including in ways that are not backwards compatible.
• The beta itself may be paused, changed or ended at any time. If we end it, we will give you a reasonable chance to copy your data out first, and refund unspent credit.
• Do not keep the only copy of anything that matters in a box. Treat a box like a machine that may disappear: code in a repository, data backed up elsewhere.

You create your account on this website. It is inactive until we activate it, and it is for you: you may not share it, resell access to it, or let someone else use it as their own. Boxes in an organisation are shared with its members according to the roles the organisation’s owners give them.

The login token and SSH certificate the CLI stores are bearer credentials. Anything holding them can create, open and remove your boxes, and we cannot tell one holder from another. Keep the machine you log in from secure, run kvbox logout on a machine you no longer trust, and tell us at hello@kvbox.sh if you think an account has been compromised.

You are responsible for everything done with your credentials, including by an agent acting on your behalf.

A box is a real virtual machine with its own kernel, and you are root inside it. kvbox is built so that you can hand one to an AI agent or run code you do not fully trust. That freedom comes with responsibility: everything a box does is treated as done by you, whether you typed the command, a script ran it, or an agent decided to.

That covers the traffic a box sends to the internet, what it serves at a public address or an HTTPS name, and the software and licences inside it. We do not inspect what runs in a box. We may stop or hibernate a box, or block its network, when it is causing harm to others or to the service, and we will tell you why.

You own everything in your boxes and snapshots: disks, memory, files and the software you install. We claim no ownership of it and no rights over the products or businesses built with it.

To run the service we need a narrow, practical licence: permission to store, copy, move and run your boxes and snapshots on our hosts, and to pass traffic to and from them, as described in the Privacy Policy. That licence exists only to provide the service, it is not exclusive, and it ends when you delete the box or close your account.

We do not look inside your boxes and we do not train machine learning models on their contents.

• Attack, scan or flood other systems, run an open proxy or relay, send spam, or host phishing or malware from a box.
• Mine cryptocurrency, or otherwise use a box in a way that takes an unfair share of a host’s CPU, memory, disk or network from other people’s boxes.
• Use the service unlawfully, or to store, serve or distribute unlawful material, or material that infringes anyone else’s intellectual property.
• Try to break out of a box, reach another account’s boxes or data, probe or circumvent authentication or access controls, or interfere with the hosts or the service’s security.
• Resell, sublicense or rent access to the service, or share your account with people who have no account of their own.

Security researchers are welcome: if you find a vulnerability, tell us at hello@kvbox.sh before telling anyone else, and do not access other people’s data while proving it.

kvbox is paid for with prepaid credit. A box spends credit while it runs, by the memory it was given, and kvbox usage shows what you have spent. Prices may change; we will tell account holders before a change takes effect, and it never applies to time already used.

When your credit runs out, your boxes are hibernated, not deleted: they keep their disk and memory and can be woken once you top up again. An account that stays without credit for a long time may be closed as described under “Ending these terms”. Credit is not refundable except where we end the service, or where the law says otherwise.

We actively want your feedback, and the beta exists to collect it. If you send us a suggestion, bug report or feature request, you allow us to use it to improve kvbox without any obligation of confidentiality, payment or attribution. You keep any rights you hold in the underlying material you send.

We will not treat a suggestion as confidential unless we have agreed otherwise in writing, so please do not send us anything commercially sensitive.

kvbox is provided “as is” and “as available”, without warranty of any kind. To the fullest extent permitted by law we exclude all implied warranties, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the service will be uninterrupted or error-free, that a box or a snapshot will survive a failure, that a box will be isolated from every possible attack, or that any defect will be fixed.

Nothing in these terms excludes or limits any right you have as a consumer that cannot lawfully be excluded. If you are a consumer, your statutory rights stand regardless of anything above.

To the fullest extent permitted by law, we are not liable for any indirect, incidental, special or consequential loss, nor for lost profits, lost revenue, lost or corrupted data, wasted engineering time, business interruption, or the cost of substitute services, whether or not we were warned such loss was possible.

Where liability cannot be excluded, our total liability to you is limited to the greater of the amount you have paid us for kvbox in the twelve months before the claim, or €500.

We do not exclude liability for death or personal injury caused by our negligence, for fraud, or for anything else that cannot lawfully be excluded.

You may stop using kvbox at any time and ask us to close your account, which ends these terms and deletes your boxes, snapshots and data as described in the Privacy Policy. Copy out what you want to keep first.

We may suspend or end your access if you breach these terms, if what runs in your boxes threatens other people or the service, or if we discontinue the beta or the product. Except where a breach makes it impossible, we will give you notice and a chance to copy your data out before deleting anything.

kvbox is in active development, and these terms will change as the product does. We will update the date at the top of this page, and tell account holders about anything significant. Continuing to use kvbox after a change means accepting the updated terms.

These terms are governed by Romanian law, and the competent courts of Romania have jurisdiction over any dispute.

If you are a consumer, this does not take away the protection of the mandatory consumer law of your own country of residence, and you may bring proceedings in your local courts where EU law gives you that right. Consumers may also raise a complaint with Romania’s consumer protection authority, the Autoritatea Națională pentru Protecția Consumatorilor (ANPC): anpc.ro.

Questions about these terms, or anything else: hello@kvbox.sh.