Terms of service

These terms are the contract between you and the operator of zdr.sh: what the service is, what it costs, what you may use it for, and what each side owes the other. They apply to the website, the dashboard, the API and support. You accept them at sign-up; with a second, separate checkbox you also approve the clauses listed in section 11. The English text is the authoritative one, not a courtesy translation: no other language version is published.

1. Who we are#

Write to support@rackduck.sh for anything about the service, these terms or your data.

2. What the service is#

• A request you send to the API is served by one of the models the platform offers. We choose how it is served; you have no right to a particular supplier or to a particular machine, and the models your key can reach are listed in the dashboard.
• A model remains a service of its own provider, under the terms that provider publishes: its usage policies bind you when you use that model, and its availability and terms may change or end without notice. If a change removes an essential feature of the service, you may end the contract and, if you are a consumer, get the unused credit refunded as section 10 says.
• The service is provided with professional diligence but without guaranteed service levels. It may be interrupted for maintenance, faults or outages, and we announce planned maintenance where possible. Features marked as experimental may change or end at any time.
• Every model is served under a zero-retention agreement: the provider commits not to keep the request or the answer once it has served them. Retention is not a setting of your account, and we keep no copy of the text of a request or an answer except in the places section 8 and the privacy policy name.

3. Accounts and keys#

• Sign up with accurate and true details, and keep them current; confirm your email address. The contract starts when the account is activated. You must be an adult. If you register for a company or an organization, you confirm you have the authority to bind it.
• State correctly, when you open the account, whether you buy as a consumer or as a business customer. We rely on what you stated at the time of the purchase to decide the right of withdrawal and refunds, but that field does not decide what you are: if you bought as a consumer, you keep every right the law gives a consumer.
• One account per person. Do not create several accounts to obtain a bonus more than once or to evade limits or measures.
• Keep passwords, passkeys, recovery codes and API keys safe and never share them. You are responsible for the requests made with your credentials, and for the resulting charges, until you revoke the keys concerned and tell us about unauthorized use. If you suspect a compromise, revoke the keys in the dashboard at once and write to us.

4. Prices and payments#

• Prices are in euro. Requests are priced by the token and the search tool by the query. Prices are published on the public price page and in the dashboard, and each request is charged at the price in force when it runs. The price of each model is published before you use it and is fixed for the request. Prices may change; a change never reduces the euro credit you have already bought, and section 12 gives the notice. You can leave at any time: close the account and the credit you bought and have not used is refunded as section 10 says.
• You buy credit with a top-up paid in BTC, ETH, XMR or USDT, to the address the top-up screen shows, and it becomes available when the transfer reaches the confirmations that asset requires. There is no card, no bank transfer and no payment intermediary: no payment instrument of yours is given to us, and we store none.
• The dashboard shows the invoice information for each confirmed payment: the amount, the date, the asset, the network and the transaction id. We do not issue a PDF invoice or receipt. Where the law requires a tax document, write to support@rackduck.sh.
• A crypto transfer is final: there is no chargeback to raise and none to answer. If a payment is credited twice, or credited for an amount that was not owed, we may take back the credit it gave, and we ask you only for the amount that was actually owed. We tell you what we say is owed and let you reply before we ask. A business customer must dispute a payment in writing within 60 days.

5. Credit#

• Credit is the prepaid euro balance of the account. It is bought with top-ups paid in crypto and becomes available when the transfer reaches the confirmations the asset requires.
• Credit is personal and non-transferable: it cannot be assigned, sold or moved to another account. It is an advance on the price of the zdr.sh services, usable only for them: it is not electronic money, bears no interest, and is not refundable in cash except through the withdrawal right of section 7 and at the end of the contract under section 10.
• Each request first reserves its estimated cost, then charges the actual one, which the response reports. An interrupted response is charged for what was already produced. A negative balance is owed and is offset against the next top-up.
• Tokens already consumed are not refunded: a request that ran is owed even if the answer did not please you.
• Credit does not expire while the account is active.
• Credit we give you for free (a sign-up bonus, a promo code, a referral reward) follows the conditions it was given under and is never refunded. It is revoked when the payment it is tied to is reversed. Free credit is spent first, so the unused balance of a refund is the credit you bought, as far as you have not used it.

6. No subscription#

• The service has no plan, no subscription, no seat, no monthly fee and no renewal. Nothing is charged automatically and there is nothing to cancel.
• You spend the credit you bought, at the price of each request, and that is the whole commercial relationship. There is no allowance to count down, no renewal date, no upgrade and no downgrade; the balance is the only limit on how much you can spend, and section 10 states what happens to it when the contract ends.

7. Withdrawal#

If you are a consumer you can withdraw from each purchase within 14 days, without giving a reason. At payment you can ask for the service to start at once, during the withdrawal period; with that request you accept that, if you withdraw, you pay for the service already supplied, and that the right ends once the service has been fully supplied. The amount you pay for a top-up is the credit you have used, and the credit you have not used comes back to you, up to the amount paid. The refund is paid in crypto, in the asset you name, to the address you name; the operator confirms the amount and the network before sending, and no card or bank account is involved because none was charged. The withdrawal page explains the amounts, the form and the model form; the withdrawal button is at /withdraw. A business customer has no right of withdrawal.

8. Your content, the outputs and the duties of AI#

• The content you send stays yours. You authorize us to process inputs and outputs for the only purpose of providing the service: serving them, keeping what the service needs to run, and handling what you keep on purpose, such as the memory vault. You confirm that you hold every right needed for what you send, including a legal basis for any personal data of third parties. Do not send special categories of data without a basis. The text of a request is not stored; the places where content can rest are the ones the privacy policy lists, and each is a choice you make.
• Outputs are generated automatically by models: they may be wrong, incomplete or offensive, and are not professional advice. Check them before relying on them; you are responsible for their use. Their use may be restricted by the usage policies of the model providers, including for the development of competing models.
• Models generate content artificially. Under Regulation (EU) 2024/1689 (the AI Act), Article 50 puts the transparency duties of an AI system on the provider and on the deployer of that system: a system of yours that interacts with people must tell them they are interacting with AI (Article 50(1)), the synthetic content that system generates must be marked in a machine-readable way as artificially generated (Article 50(2)), and content you publish to inform the public on matters of public interest must disclose that it was generated artificially (Article 50(4)). Those systems are yours, and so are those duties, both for the systems you build on the service and for what you publish with them. For its own part zdr.sh is the provider of the systems it runs on its own hardware and a deployer of the systems it serves through third parties; every answer a model generates through it carries a machine-readable statement that it is AI-generated and which model generated it, as the AI transparency page describes. The duties the AI Act puts on the providers of third-party models, including the duties on providers of general-purpose models in Articles 53 to 55, stay with those providers.
• We do not build a dataset from your requests, we do not license one to anyone, and there is no trace store to opt out of. The privacy policy states what is processed, why and for how long.

9. Acceptable use and the prohibitions of the AI Act#

• You must comply with the acceptable use policy: it is part of these terms, and breaching it is a breach of the contract.
• You may not use the service for the AI practices that the EU AI Act prohibits outright, in its Article 5: subliminal or manipulative techniques that materially distort a person's behaviour and cause harm; exploiting the vulnerabilities of a person because of age, disability or a social or economic situation, to cause harm; social scoring; predicting the risk that a person will commit a crime from profiling or personality traits alone; building facial recognition databases through the untargeted scraping of facial images; inferring emotions in the workplace or in an educational institution, except for medical or safety reasons; categorizing people by their biometrics to infer sensitive characteristics; real-time remote biometric identification in public spaces for law enforcement.
• You may not use the service to produce or spread illegal content, to commit or facilitate a crime or a fraud, to generate child sexual abuse material or any material that sexualizes minors, or to circumvent sanctions, export controls or trade restrictions.
• A breach of this section or of the acceptable use policy is grounds for the suspension and the ending measures of section 10, besides any claim we may have; we may report illegal use to the authorities.

10. Liability, suspension and the end of the contract#

• We are liable as the law requires. Nothing in these terms limits our liability for wilful misconduct, gross negligence, death or personal injury.
• For a business customer we are not liable, within the limits of the law, for indirect or consequential loss, lost profit or lost data, for decisions taken on the outputs, or for the acts of the independent third parties we rely on, and our total liability does not exceed what you paid us in the 12 months before the claim. A consumer keeps every right the law gives them.
• As a business customer, you hold us harmless from third-party claims, penalties and reasonable legal costs arising from your content, from your use of the service and the outputs, or from your breach of these terms; we tell you of the claim promptly and cooperate in the defence.
• We may suspend the service for your account, in whole or in part, if you breach these terms or the acceptable use policy seriously or repeatedly, if we have grounded indications of fraud, unauthorized use or compromised credentials, if a payment is reversed or was not owed, or if the law or an authority requires it. Suspension is proportionate and lasts until the cause ends; we tell you the reason and you can reply, unless an investigation prevents it.
• If you are a consumer, the digital services we supply are covered by the legal guarantee of conformity of articles 135-octies and following of the Consumer Code: where the service does not conform to the contract, you can ask us to bring it into conformity and, under those articles, ask for a proportionate reduction of the price or for the termination of the contract.
• You can close the account at any time by writing to support@rackduck.sh: we close it, refund what this section says and confirm it by email. We may end the contract with 30 days' notice by email, or at once if you seriously breach the acceptable use policy, share or resell keys or access without authorization, commit payment fraud or give false details. Closing disables the keys; data is handled as the privacy policy describes. Export the vault before closing, or ask us for a copy within 30 days afterwards.
• If an account records no sign-in and no API request for 24 consecutive months, we may close it with an email notice sent at least 60 days in advance.
• When the contract ends, the credit you bought and have not used is refunded, in crypto, without deductions and without your having to ask: a consumer's always, and a business customer's when we end the contract, when we close the account for inactivity or when you end it over a change you do not accept. A business customer who ends the contract for their own reasons is the one case in which the remaining bought credit is not refunded. Free credit is never refunded. Refunds are made within 30 days, in the asset and to the address you name.

11. Clauses you approve separately#

At sign-up, with a checkbox of its own, you specifically approve these clauses, which are the onerous ones article 1341, second paragraph, of the Italian civil code lists:

1. section 4: the 60 days a business customer has to dispute a payment in writing;
2. section 5: credit being personal, non-transferable and not refundable in cash, and the rules on free credit and on the negative balance;
3. section 10: the limits of our liability towards a business customer, including the exclusion of indirect loss and lost profit and the cap at what you paid us in the 12 months before the claim;
4. section 10: our right to suspend the service and to end the contract, and the reasons that allow it;
5. section 10: the handling of the remaining credit when the contract ends;
6. section 12: our right to change these terms for justified reasons, with the notice that section describes;
7. section 12: the exclusive court of the Tribunal of Arezzo for a business customer.

The clauses are approved together with the version of these terms they belong to; the version and the clauses are identified by the number and the text of this section, which is the list the approval covers.

As a consumer you keep every protection the law gives you against unfair clauses.

12. Changes, law and courts#

• We may change these terms for justified reasons: changes in the law, changes to the service, security, costs. Material changes, which are a price stated in these terms, a fee and the rules on credit and on refunds, are announced by email and in the dashboard at least 30 days before they take effect. Changes that do not reduce your rights apply from publication. If you do not accept one, you can end the contract before it takes effect, with the refund described in section 10, without deductions; if you keep using the service afterwards, the change is accepted. We may ask you to accept the terms again at your next sign-in, and we record the version each account accepted. The version and date at the top of this page identify the text in force; earlier versions are kept and you can ask support@rackduck.sh for the one you accepted.
• The contract is governed by the law of Italy; a consumer keeps the protection of the mandatory rules of their own country. If you are a consumer, you can sue in the court of the place where you live or are habitually resident: in Italy, article 66-bis of the Consumer Code gives you that court, and article 33, second paragraph, letter u), of the same code makes a clause that moves it presumptively unfair; if you live in another State of the European Union, articles 17 to 19 of Regulation (EU) 1215/2012 give you the courts of that State and limit where we may sue you. For a business customer, the Tribunal of Arezzo has exclusive jurisdiction.
• Send a complaint to support@rackduck.sh: we answer within 30 days. If you are a consumer and the answer does not satisfy you, you can use the out-of-court resolution of disputes that articles 141-sexies and following of the Consumer Code provide, before a body of the place where you live; that route does not take away your right to go to court.

13. Moving your data to another provider#

• You can end this contract to move the data of this account to another provider or to your own systems. Tell us, with a notice of at most two months; from the end of the notice we run the switch, and its transition period is at least 30 days. The contract ends when the export or the erasure you asked for is complete.
• While the notice runs and through the transition the service keeps running as it is, and we tell you of every known risk to its continuity.
• The data you can take (the exportable data): the memory vault, as the zip the dashboard exports, and the usage records, as the CSV the usage page exports. The configuration of your keys, that is their names, the models they may reach and their limits, is not exported by a button today: write to support@rackduck.sh and we hand it over in a machine-readable file within 30 days.
• For at least 30 days after the switch you can retrieve the data above. At the end of that window we erase what we hold, except what we keep for longer: the accounting records and the encrypted backups, for the periods the privacy policy states.
• The switch costs you nothing: we charge no switching charge, and after 12 January 2027 article 29 of Regulation (EU) 2023/2854 forbids one. Nothing in this section takes away a consumer's rights under the mandatory rules of the law.