1. Acceptance of Terms
By downloading, installing, or using Privateer, you agree to these Terms of Service. If you do not agree, do not use the App.
2. Description of Service
Privateer is an encrypted AI interface providing private conversation storage and AI-powered analysis — including optional spoken (voice) conversations — routed through third-party inference providers: OpenRouter, NEAR AI Cloud, Tinfoil, Phala, and fal.ai. NEAR AI Cloud, Tinfoil, and Phala run models inside hardware secure enclaves (Trusted Execution Environments); OpenRouter is a model gateway; fal.ai serves media generation only — voices, music, sound effects, and 3D meshes. See the Privacy Policy, Section 4, for how each provider handles your data.
2.1 What "the App" means here. These Terms use "the App" for everything we publish under the Privateer name: the mobile apps, the web app, the desktop application for macOS and Windows, the privateer command-line agent (installed from the desktop app, from our install script, or from npm), and our hosted services. Terms that describe our servers apply to the hosted parts; terms that describe software you install apply to the desktop app and the command-line agent.
2.2 Software that runs on your own computer. The desktop application and the command-line agent are AI agents, not only chat clients. Within a folder you explicitly choose, an agent can read and write files, run shell commands, and connect to third-party tools and MCP servers that you configure. By default every such action is gated behind a permission prompt; you can lower or disable that gate.
You are responsible for the folders you grant access to, for the third-party tools and MCP servers you connect, and for reviewing proposed actions before approving them. An AI agent can misinterpret an instruction and take a destructive action — deleting or overwriting files, or running a command whose effects cannot be undone. Keep backups of anything you cannot afford to lose. Sections 10 and 11 apply to those actions whether or not you approved them.
Software you install is additionally subject to the licence presented during installation. Third-party open-source components included in it are licensed by their own copyright holders under their own terms, which govern those components; the notices ship with the software. The privateer command-line agent is published under the MIT Licence.
2.3 Harbor (hosted agents). Harbor is an optional paid feature in which we run an agent for you on Privateer infrastructure, inside a hardware-attested confidential computing environment. Unlike the desktop and command-line agents, a Harbor agent processes your content in our cloud by design. See the Privacy Policy for what that does and does not protect.
3. Eligibility
You must be at least 13 years of age to use Privateer. If you are under 18, a parent or guardian must have agreed to these Terms on your behalf.
4. Account Responsibility
4.1 Authentication Privateer supports email/password sign-in and Solana wallet sign-in. Both produce identical sessions and unlock the same encrypted data. Wallet sign-in works by signing a canonical, pubkey-bound message issued by our server; the signature is single-use, time-limited, and bound to your wallet public key. You are responsible for the security of your credentials and your wallet.
You may also use Privateer in guest mode without creating an account. Guest sessions store data only on your device and have no server-side identity. Converting a guest session into a regular account preserves your existing guest chats only if you explicitly choose to import them at sign-up.
4.2 Encryption Key Your data is encrypted with a randomly generated 32-byte master key. The master key is itself wrapped (encrypted) by a key-encryption key (KEK) that is derived locally on your device:
- For password accounts, the KEK is derived from your password using Argon2id at the modern OWASP minimum or stronger (
m ≥ 64 MiB,t ≥ 3,p ≥ 1). The server rejects new accounts that try to enroll with weaker parameters. - For wallet accounts, the KEK is derived via HKDF-SHA256 from a signature your wallet produces over a domain-separated, pubkey-bound message:
"Privateer vault key v2 for <your-pubkey-hex>".
The unwrapped master key never leaves your device. The server only ever holds the wrapped blob.
YOU BEAR SOLE RESPONSIBILITY FOR YOUR PASSWORD OR WALLET ACCESS. IF YOU FORGET YOUR PASSWORD OR PERMANENTLY LOSE ACCESS TO YOUR WALLET, YOUR ENCRYPTED DATA IS PERMANENTLY IRRECOVERABLE. PRIVATEER DOES NOT OFFER PASSWORD RESET AND CANNOT RECOVER YOUR DATA FOR YOU.
4.3 Storage Backend You choose where your data lives. Cloud storage is the default. Local storage keeps all of your content on your device; our content-write endpoints are configured to refuse content from local-storage accounts as a server-side enforcement of that choice. See the Privacy Policy, Section 5, for the details.
4.4 Account Security Notify us immediately at support@privateer.pro if you suspect unauthorized account access.
5. Acceptable Use
You agree not to use Privateer to:
- Generate, distribute, or store content illegal in your jurisdiction.
- Produce content that exploits or harms minors.
- Circumvent the encryption architecture, attempt to derive other users' keys, or access other users' data.
- Submit signatures, signed messages, or credentials obtained outside the Privateer app in an attempt to impersonate another account.
- Reverse-engineer or tamper with the App or server infrastructure.
- Conduct large-scale automated scraping, evade rate limits, or abuse API endpoints (including image and video generation).
- Threaten, harass, or harm any person.
- Facilitate fraud, phishing, or identity theft.
We reserve the right to suspend or terminate accounts engaged in prohibited conduct. Because user content is encrypted, enforcement primarily operates at the inference, billing, and account-signal layers — see our Content Policy.
6. AI-Generated Content
6.1 AI output is produced by third-party models routed through our inference providers (OpenRouter, NEAR AI Cloud, Tinfoil, Phala, and — for voices, music, sound effects, and 3D meshes — fal.ai). It may be inaccurate, incomplete, or inappropriate. You are responsible for evaluating AI output before relying on it.
6.2 Nothing generated by the App constitutes legal, medical, financial, or other professional advice.
6.3 You retain all rights to content you input. You grant us only the minimal technical rights needed to transmit your input to the inference provider and return the result.
6.4 Voice chat mode transcribes your spoken input and synthesizes spoken replies using third-party speech providers — via OpenRouter, or inside Tinfoil's secure enclaves for confidential voice models. Transcription and speech synthesis may be inaccurate, and your recorded audio is transmitted to those providers to be processed, as described in the Privacy Policy. As with all AI output, you are responsible for evaluating the result before relying on it.
6.5 Rights in generated output. As between you and us, you own the text, images, video, voice, music, sound effects, and 3D meshes the App generates for you. We claim no ownership of them and take no licence in them beyond the technical rights described in 6.3. Three limits apply, and all three originate outside Privateer:
(a) The licence of the model you chose governs, and it reaches you directly. Every model is operated by a third party under its own terms. Our inference gateways pass those terms through to you rather than replacing them: OpenRouter's terms provide that your ownership rights in output are set out in the terms for each model you use, and that by using a model you agree to comply with them. Those terms are not uniform. Some models permit commercial use outright; some make it conditional on a paid tier; some define a licensed territory that excludes particular countries; and some require a separate licence before output may be used in advertising, film, television, or games. Before using generated output commercially, it is your responsibility to read the terms of the specific model you selected.
(b) We do not warrant that output is copyrightable, original, or non-infringing. Generative models can produce output resembling existing works. Separately, in a number of jurisdictions — including the United States — material produced without sufficient human authorship may not attract copyright protection at all, so output you generate may be something you are free to use but cannot register or enforce as your own copyright. We make no representation on either point and we do not indemnify you against claims arising from your use of output. Sections 10, 11, and 12 apply to it.
(c) Provenance marks. Some providers embed a provenance signal in what they generate — an invisible watermark such as Google's SynthID, or C2PA metadata carried in the file. Removing, obscuring, or misrepresenting such a signal may breach that provider's terms and, in some jurisdictions, the law.
7. Service Availability
Privateer is provided on an "as available" basis. We do not guarantee uninterrupted service and are not liable for loss resulting from service interruptions.
8. Billing
8.1 Credits Credits are required for certain features. Some features — including video generation and voice chat — additionally require a qualifying subscription tier or an equivalent held credit balance, and usage-based features (including voice transcription and speech synthesis) draw down your credit balance as you use them. All credit purchases are final and non-refundable except where required by law. Credits have no cash value and are non-transferable. Pricing may change with reasonable notice.
8.2 Subscriptions Subscriptions are billed monthly or annually via Stripe and renew automatically until cancelled. Cancellation stops future renewals but does not refund the current billing period, except where local consumer-protection law requires otherwise (for example, the EU/UK 14-day right of withdrawal during the initial purchase window). Plan changes prorate according to Stripe's defaults. If a renewal payment fails, you will receive a grace period; if the payment cannot be collected, your account will be downgraded to the free tier.
Subscription state (active plan, renewal date, Stripe customer ID) is a small set of plaintext metadata that we necessarily store server-side to operate the billing system. We do not store your card details — those are handled directly by Stripe.
9. Intellectual Property
The Privateer name, logo, software, and associated materials are owned by Hayden Bulk Tech Labs and protected by applicable law. These Terms grant no license to our intellectual property beyond the right to use the App as described herein.
9.1 Licence to installed software. For the desktop application and any other Privateer software you install, we grant you a personal, non-exclusive, non-transferable, revocable licence to install and run it on devices you own or control, for personal or internal business use, for as long as these Terms are in force. You may not sell, rent, sublicense, or redistribute it, or remove or alter its notices. This is a licence to use the software, not a sale of it; all rights not granted are reserved. Components released by us under an open-source licence — including the privateer command-line agent under the MIT Licence — are governed by that licence instead, and nothing here restricts the rights it gives you.
10. Disclaimer of Warranties
THE APP IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NONINFRINGEMENT.
THIS APPLIES IN PARTICULAR TO SOFTWARE THAT RUNS ON YOUR OWN COMPUTER. WE DO NOT WARRANT THAT THE DESKTOP APPLICATION OR THE COMMAND-LINE AGENT WILL OPERATE WITHOUT ERROR, THAT THE PERMISSION GATE WILL PREVENT EVERY UNINTENDED ACTION, OR THAT AN AGENT WILL NOT MODIFY OR DELETE DATA IN A FOLDER YOU HAVE GRANTED IT ACCESS TO.
Nothing in these Terms excludes any warranty or right that cannot be excluded under the law that applies to you. Some jurisdictions do not allow the exclusion of implied warranties, so parts of this section may not apply to you.
11. Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, HAYDEN BULK TECH LABS IS NOT LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOSS OF DATA, LOSS OF FILES, OR LOST PROFITS — INCLUDING ANY ACTION TAKEN ON YOUR COMPUTER BY THE DESKTOP APPLICATION OR THE COMMAND-LINE AGENT, WHETHER OR NOT YOU APPROVED IT. OUR TOTAL LIABILITY SHALL NOT EXCEED THE GREATER OF THE AMOUNT YOU PAID US IN THE PRIOR 12 MONTHS OR ONE HUNDRED CANADIAN DOLLARS ($100 CAD).
12. Indemnification
You agree to indemnify and hold Hayden Bulk Tech Labs harmless from claims, damages, or expenses arising from your use of the App, your violation of these Terms, or your violation of third-party rights.
13. Governing Law
These Terms are governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein, without regard to conflict-of-law principles. Disputes shall first be submitted to good-faith negotiation, then to binding arbitration in Ontario under applicable Canadian arbitration rules.
14. Changes to Terms
We may update these Terms at any time. Continued use after the effective date of revised Terms constitutes acceptance. We will provide reasonable notice of material changes.
15. Termination
We may terminate or suspend your account for violation of these Terms, illegal activity, or conduct harmful to the App or other users. You may terminate at any time by contacting support@privateer.pro.
16. Entire Agreement
These Terms, together with our Privacy Policy, our Content Policy, and any licence presented when you install Privateer software, constitute the entire agreement between you and Hayden Bulk Tech Labs regarding the App. Where an installation licence and these Terms address the same subject, these Terms control.
Questions? Contact us at support@privateer.pro
Effective Date: June 16, 2026 Operator: Hayden Bulk Tech Labs Contact: support@privateer.pro