Terms & Conditions

Last updated: February 23, 2026

1. Terms of Service

By accessing or using HostAIBot ("the Service"), you agree to be bound by these Terms & Conditions. If you do not agree, do not use the Service.

You must be at least 18 years old to use this Service.
You are responsible for maintaining the security of your account and bot tokens.
You must not use the Service for any unlawful purpose or to violate any laws in your jurisdiction.
We reserve the right to suspend or terminate accounts that violate these terms.

2. Service Description

HostAIBot is a managed hosting platform for AI chatbot assistants powered by OpenClaw. The Service provides:

One-click deployment of AI assistants on multiple messaging channels (Telegram, Discord, Slack, WhatsApp, and more). Each platform's own terms of service apply.
Managed infrastructure including container orchestration, scaling, and monitoring.
AI model access via shared or user-provided API keys (OpenAI, Anthropic, Google, xAI).
Dashboard management for configuring models, skills, plugins, and settings.

3. Free Trial

New users who have never created an instance or subscription are eligible for a one-time limited free trial. Trial terms:

Trial provides a limited period of free bot usage.
A valid payment method is required to start the trial. Your card is saved but not charged during the trial period.
Trial instances use GPT-4o Mini on our shared API key.
A warning notification is sent before the trial expires.
After the trial ends, your subscription automatically begins at $29.99/month.
You may cancel anytime during the trial from the Settings page to avoid being charged.
If you cancel during the trial, your bot will be stopped and removed.
Only one free trial per user is allowed. Users with any prior instance or subscription history are not eligible.

4. Subscriptions & Billing

Paid subscriptions are billed monthly at $29.99/month per instance slot.

Each subscription provides one active instance slot with 1,000 messages per month.
Payment is processed securely via Stripe. We do not store your payment card details.
Subscriptions renew automatically at the end of each billing period.
You may cancel at any time from the Settings page. Cancellation takes effect at the end of the current billing period.
Deleting an instance does not cancel your subscription — you can redeploy on the same slot.
Refunds are handled on a case-by-case basis. Contact support for refund requests.

5. Usage Limits

Each instance includes a monthly message allowance to ensure fair usage of shared resources:

Each instance includes 1,000 messages per month on the shared API key.
Your usage cycle starts from the date of deployment and resets monthly.
You can monitor your current usage from the dashboard.
When the limit is reached, new messages are rejected until the counter resets.
Usage limits may be adjusted in the future as we scale. We will notify users of any changes.

6. Data Collection & Privacy

We collect and process the following data to provide the Service:

6.1 Data We Collect

Account information: Name, email address, and profile image from your authentication provider (e.g. Google OAuth or email/password).
Bot tokens: Messaging platform bot tokens you provide, stored encrypted (AES-256-GCM) and used solely to connect your bot to the chosen channel.
API keys: If you provide your own AI API keys, they are stored encrypted and used only for your instances.
Instance metadata: Deployment status, model selection, channel configuration, timestamps.
Payment data: Stripe customer ID, subscription status, and payment history. Card details are handled entirely by Stripe and never touch our servers.
Usage logs: Container logs, health check results, and error reports for debugging and service reliability.
Support communications: Ticket messages and attachments you submit through our support system, retained to resolve your requests.

6.2 How We Use Your Data

To provide and maintain the Service (deploy, manage, and monitor your AI bots).
To process payments and manage your subscription.
To send transactional emails (trial warnings, deployment status, payment receipts).
To diagnose and fix technical issues.
We do not sell, rent, or share your personal data with third parties for marketing purposes.

6.3 Data Retention

Account data is retained while your account is active.
Cancelled trial instance data is deleted 1 month after the instance is stopped.
Destroyed instance records are retained for billing and audit purposes.
You may request account deletion by contacting support.

6.4 Third-Party Services

We use the following third-party services:

Stripe — Payment processing (Stripe Privacy Policy)
Authentication providers — Google OAuth and other identity services used for sign-in (their respective privacy policies apply)
Fly.io — Container hosting (Fly.io Privacy Policy)
Microsoft Azure — Container hosting (Microsoft Privacy Statement)
PostHog — Product analytics, session replay, and error tracking. Loaded only after consent. Data hosted in the EU. (PostHog Privacy Policy)
Microsoft Clarity — Heatmaps and session replay for UX improvement. Loaded only after consent. PII is automatically redacted. (Microsoft Privacy Statement)
Resend — Transactional emails (Resend Privacy Policy)
OpenAI / Anthropic / Google AI / xAI — AI model providers (when using shared or your own API keys)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Legal basis for processing: We process your data based on (a) your consent, (b) performance of a contract (providing the Service), and (c) our legitimate interests (security, fraud prevention).
Right to access: You can request a copy of all personal data we hold about you.
Right to rectification: You can request correction of inaccurate data.
Right to erasure: You can request deletion of your personal data ("right to be forgotten").
Right to portability: You can request your data in a machine-readable format.
Right to object: You can object to processing of your data for certain purposes.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us via our Support page.

8. Cookies & Local Storage

We use the following cookies and browser storage:

Essential (always active)

Authentication session cookie — Essential for keeping you signed in. Set by Better Auth. Expires when your session ends.
Theme preference — Stored in localStorage to remember your dark/light mode preference.
Consent preference — Stored in localStorage to remember your cookie/data consent choice.

Analytics (loaded only after your consent)

PostHog — Product analytics, session replay, heatmaps, and error tracking to help us improve the service. No advertising.
Microsoft Clarity — Heatmaps and session recordings to understand how users navigate our site. PII is automatically redacted.

We do not use advertising cookies. Analytics cookies are only loaded if you click "Accept & Continue" on the cookie banner. If you choose "Essential cookies only," no analytics scripts are loaded.

9. Security

All sensitive data (bot tokens, API keys) is encrypted at rest using AES-256-GCM.
All connections use HTTPS/TLS encryption in transit.
API endpoints are protected by rate limiting and HMAC signature verification where applicable.
Stripe webhook payloads are verified using Stripe signature verification.
Admin endpoints require verified administrator authentication.

10. Acceptable Use

You agree not to:

Use the Service to send spam, harass others, or generate harmful content.
Attempt to reverse engineer, decompile, or extract source code from the Service.
Exceed fair usage limits or abuse shared API keys.
Use the Service to violate any third-party terms of service (messaging platforms, AI model providers, etc.).
Share your account credentials or bot tokens with unauthorized parties.

11. Limitation of Liability

The Service is provided "as is" without warranty of any kind. We are not liable for:

Downtime or service interruptions caused by infrastructure providers.
Data loss resulting from trial instance auto-deletion.
Actions taken by AI models in response to user queries.
Third-party service failures (payment processors, messaging platforms, AI model providers, infrastructure providers).

12. Changes to Terms

We may update these terms from time to time. Continued use of the Service after changes constitutes acceptance of the updated terms. Material changes will be communicated via email or dashboard notification.

13. Contact

For questions, data requests, or support:

Support: hostaibot.com/support
Website: hostaibot.com