Terms of Service

Service description

Duct is a hosted permissioned action platform. The service includes, among other things: shell provisioning and credential issuance; the embeddable shell widget for human chat; the agent invoke API; manifest management via the dashboard and Duct SDK; session management and consent enforcement; analytics and audit logging; the dashboard playground; and optional shell-to-shell delegation (when enabled). Features marked as early access may change, be limited, or be withdrawn as the product matures.

Accounts and credentials

You are responsible for maintaining the confidentiality of your account and all credentials Duct issues to you — including Shell IDs, Secret Keys, agent access profiles, CLI session tokens, and any rotation or revocation settings you configure. Do not embed Secret Keys in client-side code. Notify us promptly via the support page if you believe any credential has been compromised. You are responsible for activity under your account until you revoke compromised credentials and notify us.

Your API, manifest, and end users

You define which actions exist, who may call them, and what requires confirmation through your manifest and dashboard settings. When a shell or agent invokes an action, Duct routes the request to your configured API on your behalf. You remain responsible for your API, the data it returns, your end users, and compliance with laws that apply to your product. Duct does not guarantee that routing, consent flows, or UI components will meet your regulatory obligations without your own review and configuration.

Acceptable use

You may not use Duct to transmit malware, impersonate others, circumvent access controls or rate limits, probe or abuse the shell-to-shell network, expose actions you did not intend to make callable, or violate applicable law. We may suspend or terminate accounts that violate these terms, pose a security risk, or degrade the service for other customers.

Early access

Parts of Duct — including shell-to-shell delegation and certain dashboard features — may be offered as early access. Early-access features are provided as-is, may have lower availability, and may change without notice. We may gate access by invitation during this period.

Third-party services

Duct may route requests through third-party LLM providers for intent classification, tool routing, and response synthesis, using platform credentials or keys you supply (bring-your-own-key). Invoking an action also calls your own API endpoints as configured in your manifest. Your use of those third-party and customer-controlled services is subject to their respective terms.

Fees

Pricing for paid plans, when applicable, will be described at signup or in your order. During early access, some features may be offered at no charge or on a preview basis. We will provide reasonable notice before charging for services that were previously free.

Termination

Either party may terminate at any time. You can delete your account from dashboard settings. We may suspend or terminate accounts that violate these terms, fail to pay applicable fees, or create security or operational risk, with or without notice where reasonably necessary.

Disclaimer and liability

The service is provided "as is" to the maximum extent permitted by law. Duct is not liable for indirect, incidental, special, or consequential damages. Our total liability for any claim arising from the service is limited to the amount you paid us in the twelve months preceding the claim, or one hundred U.S. dollars if you have not paid us, whichever is greater.

Intellectual property

Duct retains all rights in the platform, SDK, documentation, and branding. You retain all rights in your API, manifest, and product. You grant Duct a limited license to host, process, and display your manifest and configuration solely to operate the service for you.

Governing law

These terms are governed by the laws of the jurisdiction in which Duct, Inc. is incorporated, without regard to conflict-of-law principles.

Changes

We may update these terms from time to time. We will notify you by email before material changes take effect. Continued use after the effective date constitutes acceptance.

Contact

For questions about these terms, contact us through the support page.

See also: Privacy Policy · Security