Terms of Service

These terms govern your use of the hosted Nothing Left service. Please read them. If you do not agree, do not use the service.

1. The agreement

These terms are an agreement between you and Raunak Gupta, an individual in India operating as Nothing Left (“we”, “us”).

“The service” means the web app at work.nothingleft.dev, the REST API at api.nothingleft.dev, the MCP server at api.nothingleft.dev/mcp, the emails we send, and this website.

By creating an account or using the service, you accept these terms. If you use it for an organisation, such as your employer, you accept them for that organisation too, and “you” includes it.

The Privacy Policy explains how we handle personal data. It is part of these terms.

2. Who can use it

• You must be 18 or over and able to enter a binding contract.
• If you act for an organisation, you must have the authority to bind it to these terms.
• You must not be barred from using the service by the law that applies to you.

3. The beta

Nothing Left is in beta. It is ready for real work and it is still changing.

• It is provided as it is. Features can change, be added or be removed. There is no service level agreement, no uptime commitment and no guaranteed response time for support.
• There is no subscription charge during the beta, for a team of any size. The product has no payment flow and does not ask for payment details.
• The first 20 members of every organisation stay free, also after billing arrives.
• Before any charge for seats beyond the first 20 takes effect, you get advance notice. We give at least 30 days’ notice. Paid terms, when they exist, will be offered separately, and nothing is charged without them.
• Limits apply. File storage, file size, request rates and other limits are listed in Limits and billing. The storage limit applies during the beta.

4. Your account and its security

• Give accurate details, and keep them up to date.
• Keep your password, recovery codes and personal access tokens safe. You are responsible for what happens under your account.
• A personal access token acts as you, with your permissions, limited by the token’s scopes. Anyone who has the token can use it. Revoke a token as soon as you think it has been exposed.
• You are responsible for the AI agents you connect. An agent works through your token, so what it does counts as what you do. Choose the scopes and projects you give it with care.
• Tell us at admin@nothingleft.dev straight away if you think someone else has used your account.

5. Acceptable use

Do not use the service to:

• store or share content that is unlawful, infringes someone else’s rights, harasses people or exposes their private information without a right to do so;
• spread malware or phishing, or embed images or links meant to track or deceive the people who view them;
• send unwanted invitations or messages;
• go past the rate limits on purpose, or rotate accounts or tokens to get around them;
• run load tests or denial-of-service attacks against the service;
• scrape or collect data you are not authorised to see, including other organisations’ data;
• get around limits, permissions or security. Good-faith security research that follows our security policy, on accounts and organisations you control, is welcome;
• resell the hosted service, or offer it to others as your own service, without our written permission;
• pretend to be someone else, or break the law.

6. Your content

• You own it. As between you and us, what you put in the service belongs to you or to the organisation you add it to.
• You give us a limited licence. You allow us to host, store, copy, back up, process, transmit and display your content, only as needed to provide, secure and support the service for you and the people your organisation authorises. The licence ends when the content is deleted, except for copies in backups until they rotate out and records we must keep by law.
• You are responsible for it. Make sure you have the right to add what you add, including other people’s personal data, such as the email addresses of people you invite.
• Your organisation controls it. The Owner and Org Admins decide who is a member and with which role, and can export or delete the organisation’s content. What you add to an organisation stays there if you leave or are removed.
• We do not sell it, advertise with it, train AI models on it or send it to any AI provider.
• We may remove or restrict content where the law requires it, or where it clearly breaks section 5.
• Feedback. If you send us ideas or suggestions, we may use them without owing you anything.

7. Open source

The code of Nothing Left is licensed under the GNU Affero General Public License v3.0. That licence governs how you may use, copy, change and share the code. These terms govern only the hosted service, and they do not limit any right the licence gives you.

If you run Nothing Left on your own servers, that copy is yours to run. You are responsible for it, for its security and for the data in it. These terms and our Privacy Policy do not apply to it.

8. Services from others

• Signing in with Google or GitHub is also subject to their terms.
• Your organisation’s own bucket. If an Org Admin connects a Cloudflare R2 or AWS S3 bucket, the organisation is responsible for that bucket: its settings, region, security and cost. We do not delete files in it when the bucket is disconnected or the organisation is deleted.
• Your AI client and its provider have their own terms, which govern what they do with the content an agent reads.
• We are not responsible for services we do not run.

9. Suspension and termination

• You can stop at any time. Deactivate your account in Settings → Security. The Owner of an organisation can delete it. To have your personal data erased, see the Privacy Policy.
• We can suspend or deactivate an account or organisation if you break these terms, if the law requires it, or to protect the service or other people. Where it is reasonable and safe, we tell you first and say why.
• We can end the service. If we do, we give at least 90 days’ notice so you can export your data.

10. Your data when things end

• Export. Issues and reports export as CSV. Org Admins can export the audit log as CSV, and the whole organisation - every project, issue, article and file - as one download, kept for 7 days. Everything you can see is also available through the REST API and MCP.
• Deactivation keeps your memberships and your work, under your name. A deactivated account is erased six months after deactivation, as the Privacy Policy describes.
• Deleted issues and articles can be restored for 14 days, then they are deleted for good.
• Deleting an organisation is scheduled 14 days ahead, and the Owner can cancel at any time in between. After that, its projects, issues, comments, articles and files are deleted. A record that the organisation existed and its audit log stay, and its address stays reserved. Files in its own bucket are not touched. See Account security.
• Backups keep deleted data until they rotate out, about two to three weeks.
• Suspended or terminated accounts and organisations keep their data for six months after the suspension or termination. After that, their content and files are deleted, as for a deleted organisation.

11. Disclaimers

To the extent the law allows, the service is provided “as is” and “as available”, without warranties of any kind, express or implied, including fitness for a particular purpose, merchantability and non-infringement. We do not promise that it will be uninterrupted, free of errors or secure, or that data will never be lost. Keep your own copies of anything important.

Nothing in these terms takes away rights you have by law that cannot be excluded by contract.

12. Limitation of liability

To the extent the law allows:

• we are not liable for indirect, incidental, special, consequential or punitive loss, or for loss of profits, revenue, data or goodwill;
• our total liability for all claims about the service is limited to the greater of the amounts you paid us for the service in the 12 months before the claim, and ₹1,000.

These limits do not apply to liability that the law does not allow us to limit, such as for fraud.

13. Indemnity

You will compensate us for claims made by others, and the reasonable costs of defending them, that arise from your content, from your breach of these terms, or from your misuse of the service, including by an agent you connected.

14. Changes

• To the service. The service changes during the beta, as section 3 describes.
• To these terms. When we change them, we update this page and the date at the top. If a change is significant, we tell account holders by email or in the app at least 30 days before it takes effect. If you keep using the service after a change takes effect, you accept it. If you do not, stop using the service and deactivate your account.

15. Governing law and courts

These terms are governed by the laws of India. The courts at Kolkata, West Bengal have exclusive jurisdiction over any dispute about them or the service.

16. General

• These terms and the Privacy Policy are the whole agreement between you and us about the service.
• If a court finds part of these terms unenforceable, the rest still applies.
• If we do not enforce a term straight away, we can still enforce it later.
• You may not transfer these terms to anyone else without our written consent. We may transfer them to someone who takes over the service, and we will tell you if we do.
• We send notices to the email address on your account. Send notices to us at admin@nothingleft.dev.

17. Contact

Raunak Gupta, operating as Nothing Left. Email: admin@nothingleft.dev.