Terms of Service
Version 2026-10-11, updated 2026-10-11.
1. Beta, as is, at your own risk
Flag is beta software. It is still changing, may stop working, and may lose data without notice. It is provided "as is" and "as available", without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose and non-infringement. You use it at your own risk.
2. No liability
To the fullest extent the law allows, we are not liable for any damages of any kind, whether direct, indirect, incidental, special, consequential or punitive, including lost profits, revenue, data or goodwill, arising from or related to Flag, even if we were told they were possible. Our total liability for all claims is zero dollars ($0). Fees you pay are for services already rendered and are not refundable.
3. Keep your accounts secure
You are responsible for everything done with your accounts, sessions, API keys and OAuth grants, including by AI agents you connect. Practise good operational security:
- Sign in with a passkey where you can, and never reuse passwords.
- Treat API keys like passwords: give each one the fewest scopes it needs and an expiry date, keep them out of source code, and revoke keys you no longer use.
- Give people and agents the lowest role that works, and remove people who leave.
- Review your audit log, and rotate any credential you give us (bucket keys, AI provider keys, chat tokens) if you suspect it leaked.
4. Your data and the services you connect
Your data stays yours. You let us store and process it only to run Flag for you. Data kept in your own storage bucket stays under your control and your provider's terms. AI providers, storage buckets and other services you connect bill you directly under their own terms; we do not control them and are not responsible for them.
If Flag is unreachable, SDKs keep evaluating with the last snapshot they received; set safe defaults in code.
5. Acceptable use
Do not use Flag to break the law, send spam, distribute malware, attack or probe systems you do not own, get at other customers' data, or overload or disrupt the service.
6. Accounts and organizations
Organizations decide who belongs to them. Organization owners and admins can see what members do in the organization (the audit log) and can change or remove their access. Deleting your account is immediate and cannot be undone. Deleting an organization deletes its data.
7. Prices and payment
Prices are metered and listed on the pricing page; you pay the price in effect when the usage happens. We bill monthly in arrears through Stripe. A month that totals less than $5 carries over to the next month. We give 30 days' notice of price increases. During the beta, usage may be free; when charging starts you will be told first.
8. Suspension and ending
We may suspend or end access to Flag at any time, for any reason, including abuse or non-payment. You may stop using it and delete your account at any time.
9. Indemnity
You will defend and indemnify us against claims arising from your use of Flag, your data, or your breach of these terms.
10. Changes
We may change these terms. If a change matters, we will ask you to accept the new version before you continue using Flag.
11. Who we are
Flag is a Nightroll product. Nightroll is a trade name of JML Software Solutions LLC, which is the party to these terms ("we", "us"). Questions: admin@nightroll.app.