Terms of Use

These Terms of Use ("Terms") are a contract between you and Nyfty.ai, Inc., a Delaware corporation, trading as Backlit ("Backlit", "we", "us"). They govern your use of the Backlit service, including the console, the REST API, the hosted SDK, the MCP interface, and every app hosted on the platform.

You accept these Terms when you create a Backlit account, sign in to the service, or deploy an app, including when you do any of those things through an AI assistant or agent acting on your instructions. If you do not agree, do not use the service.

These Terms incorporate by reference our Privacy Policy and our Data Processing Agreement ("DPA").

1. The service

Backlit is a managed hosting platform for AI-generated web apps, each built from one or more static HTML pages. Each deployed app (a "glow") is served from a backlit.run subdomain. The service includes hosting and delivery, built-in end-user sign-in, per-app data storage, and deployment interfaces for both people and AI agents. Backlit does not run AI inside hosted apps.

"Customer Content" means the apps you deploy and all data you or your end users submit to them, including data in an app's shared (data), per-user (userdata), public-read (records), and write-only (capture) stores.

2. Eligibility and accounts

You must be at least 18 years old, or the age of majority where you live, to create an account. You are responsible for your account, for keeping your credentials secure (including per-glow API keys and OAuth tokens), and for everything done through your account, including actions taken by AI agents you authorise. Tell us promptly at reporting@backlit.run if you believe your account has been compromised.

3. Plans, billing, and limits

Current prices, quotas, and plan limits are on the pricing page. Paid plans are billed through Stripe. Prices may change; we will give you at least 30 days' notice by email before a price increase takes effect on your existing glows.

We do not automatically charge you more when you approach a usage limit. We will warn you by email as you near a limit. If you exceed it and do not add capacity, we may stop serving the affected glow until you do.

Fees are non-refundable except where the law requires otherwise (see section 14).

4. Your content

You own your Customer Content. You grant us a worldwide, non-exclusive licence to host, store, copy, transmit, and display it, only as needed to provide and secure the service. We claim no other rights in it.

You are responsible for your apps: what they do, what they collect, and whether you have the rights and legal bases to publish and operate them.

5. Acceptable use

You must not use the service, and must not allow your apps or end users to use the service, to:

• store, publish, or distribute content that is illegal in the place it is published or accessed, including child sexual abuse material, terrorist or violent extremist material, and material depicting or inciting serious crime or violence;
• infringe anyone's intellectual property or other rights;
• publish pornography or other age-restricted material. Backlit does not operate an age-verification or restricted-access system, so this material is prohibited outright;
• distribute malware, or run phishing, scams, spam, or other deceptive or fraudulent schemes;
• harass, defame, or threaten others, or share intimate images without consent;
• probe, overload, or disrupt the service or other people's glows, or circumvent quotas, access controls, or billing;
• misrepresent who operates an app, or impersonate any person or organisation.

Restricted data. The service is not designed to safeguard sensitive data. You must not submit to or process through the service:

• special categories of personal data as defined in Article 9 GDPR (such as health data, biometric data used for identification, or data revealing racial or ethnic origin, political opinions, religion, trade-union membership, sex life, or sexual orientation), or personal data relating to criminal convictions and offences;
• personal data of children under 16, and you must not operate any glow directed at children under 16;
• regulated data such as payment card numbers (PCI) or protected health information (HIPAA).

You are fully responsible for any breach of this section. We may suspend or remove any glow we reasonably believe violates it.

6. Reporting illegal content

Anyone can report illegal or infringing content hosted on Backlit by emailing reporting@backlit.run. A useful report includes: the exact URL of the content, an explanation of why you consider it illegal, your name and email address, and a statement that your report is accurate and made in good faith. We will confirm receipt and tell you the outcome.

A report is an allegation, not proof. We act on reports that are substantiated enough for the problem to be apparent, and we may ask for more information. We may suspend the reporting privileges of anyone who repeatedly submits manifestly unfounded reports.

reporting@backlit.run is also our point of contact for courts, regulators, and law enforcement, including the Australian eSafety Commissioner and authorities of EU member states.

7. Removal, suspension, and appeals

We may remove or disable access to any content, and suspend or terminate any glow or account, where we reasonably believe it breaches these Terms or the law, where a court, regulator, or law enforcement authority requires it, or where it is necessary to protect the service or others. Where the law sets a deadline for removal (for example a notice from the eSafety Commissioner), we will comply within that deadline.

When we remove your content or restrict your account, we will tell you what we removed, which rule or law it breached, and how to appeal, except where the law prohibits or does not require notification (for example, suspected child sexual abuse material, which we instead preserve and report to the relevant authority such as NCMEC or the eSafety Commissioner, as the law requires).

To appeal a removal or restriction, reply to the notice or email reporting@backlit.run. A person will review your appeal and we will reinstate content removed in error. If you are in the EU, you may also have access to out-of-court dispute settlement under the Digital Services Act, and nothing in this section limits your right to go to court.

You agree that we may act in good faith on reports and on our own review, and that we are not liable for removing or restricting content we reasonably believed breached these Terms or the law, even if it later turns out it did not.

8. Copyright and the DMCA

We respond to copyright notices under the US Digital Millennium Copyright Act. Send notices to our designated agent at copyright@backlit.run. A valid notice must include: identification of the copyrighted work; the URL of the infringing material; your contact details; a statement of good-faith belief that the use is not authorised; a statement, under penalty of perjury, that the notice is accurate and you are authorised to act for the owner; and your physical or electronic signature.

If your content is removed under a DMCA notice, you may send a counter-notice to the same address containing: identification of the removed material and its former URL; a statement under penalty of perjury that you believe the removal was a mistake or misidentification; your name, address, and phone number; consent to the jurisdiction of the US federal district court for your district (or, if outside the US, any judicial district in which we may be found); and your signature. If the claimant does not file suit within 10 to 14 business days of receiving the counter-notice, we may restore the material.

We terminate the accounts of repeat infringers. Knowingly false notices and counter-notices can make you liable for damages under 17 U.S.C. § 512(f).

9. Privacy and data protection

In this section, "Controller", "Processor", "Personal Data", and related terms have the meanings given in the GDPR, and "Data Protection Law" means the GDPR, the UK GDPR, the Australian Privacy Act 1988, and any other privacy law that applies.

9.1 Roles. For Personal Data that you or your end users put into your glows ("Customer Personal Data"), you are the Controller and Backlit is the Processor, and we process it only under the DPA, which forms part of these Terms. For your own account, authentication, and billing data, Backlit is the Controller, as described in the Privacy Policy.

9.2 Your obligations. You warrant that for all Customer Personal Data: you have a valid lawful basis and any required consents; you have given your end users the privacy information the law requires, including about the data locations and sub-processors described below; your instructions to us are lawful; and you will not use the service in a way that causes us to breach Data Protection Law.

9.3 Data location. The service has two planes. The data plane (your glow's assets and end-user application data) is stored in the region you select for the glow, currently us-central1 (US), australia-southeast1 (Australia), or europe-west1 (EU), and is not replicated across regions. The control plane (glow metadata, access allowlists, end-user identity records including email addresses, and usage counters) is stored in a United States multi-region datastore for every glow, whatever data-plane region you select. Selecting europe-west1 therefore gives EU residency for the data plane only. It does not keep all Customer Personal Data in the EU, and we do not represent that the service provides full EU data residency. Transfers are safeguarded as set out in the DPA.

9.4 Security. We maintain the technical and organisational measures described in Annex II of the DPA. You are responsible for the security of your own credentials and for configuring your glows (auth mode, allowlists, permissions) appropriately.

10. Suspension and termination

You can delete a glow or your account at any time from the console. We may suspend or terminate as described in section 7, or on 30 days' notice if we discontinue the service. On termination or deletion, your content is soft-deleted and then permanently deleted within 30 days, as described in the DPA. Export your data before deleting; we cannot recover hard-deleted content.

11. Disclaimers

The service is provided "as is" and "as available". To the extent the law allows, we disclaim all implied warranties, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the service will be uninterrupted or error-free. Glows are built by their owners, not by us; we do not review, endorse, or warrant any hosted app.

12. Liability

To the extent the law allows: neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data; and our total liability under these Terms is capped at the amounts you paid us in the 12 months before the event giving rise to the claim, or USD 50 if you paid nothing. These limits do not apply to your payment obligations, your indemnities, either party's wilful misconduct, or any liability that cannot be limited by law. Nothing in these Terms limits a data subject's rights under the GDPR or either party's direct statutory liability to data subjects or supervisory authorities.

13. Indemnity

You will defend and indemnify Backlit against claims, fines, penalties, and losses arising from: your Customer Content; your breach of sections 5, 6, or 9; or your breach of your obligations as a Controller under Data Protection Law.

14. Consumer law

Some places give consumers rights that cannot be excluded by contract. Nothing in these Terms excludes, restricts, or modifies those rights.

Australia. Our services come with guarantees that cannot be excluded under the Australian Consumer Law. Where the law permits, our liability for breach of a consumer guarantee is limited, at our option, to resupplying the service or paying the cost of having it resupplied.

EU and UK. If you use the service as a consumer in the EU or UK, you keep the protections of the mandatory consumer law of the country you live in, and you may bring proceedings in the courts of that country.

15. Changes

We may update the service and these Terms. For material changes to these Terms we will give you at least 30 days' notice by email or in the console before they take effect. If you keep using the service after that, the new Terms apply. If you do not agree, delete your account before the effective date.

16. Governing law and disputes

These Terms are governed by the laws of the State of Delaware, USA, excluding its conflict-of-law rules, and the parties submit to the exclusive jurisdiction of the state and federal courts located in Delaware. This is subject to section 14: if you are a consumer with mandatory local rights, those rights and venues are unaffected.

17. General

These Terms, the Privacy Policy, and the DPA are the entire agreement between us about the service. If a clause is unenforceable, the rest stays in force. You may not assign these Terms without our consent; we may assign them in connection with a merger, acquisition, or sale of assets. Our failure to enforce a clause is not a waiver. Notices to us go to reporting@backlit.run; notices to you go to your account email.

18. Contact

Nyfty.ai, Inc., trading as Backlit.
Legal, abuse, and illegal-content reports: reporting@backlit.run
Copyright (DMCA) notices: copyright@backlit.run
Security vulnerability reports: security@backlit.run