Terms of Service

Nil, hosted by NØNOS. Effective date: 19 October 2026

These terms are an agreement between you and eK NONOS, an individual based in Italy ("NØNOS", "we" or "us"). They cover Nil, hosted by NØNOS: the sign-up page at https://nil.nonos.app and every workspace at an address such as https://yourteam.nil.nonos.app.

When you sign up, your wallet signs a message that names your workspace's address and says that you accept the terms at https://nonos.app/terms. That signature is how you agree to these terms. If you join a workspace that someone else signed up, these terms apply to your use of it too.

Our Privacy Policy explains what data we process and why.

1. What the service is

Nil is open-source software for team tasks, docs, bounties and votes. We run it on our server, so your team doesn't need one.

Each workspace is its own copy of Nil, in its own container, with its own storage and its own network. Other workspaces can't reach it, and it has no route to the internet. Its only outside connection is to the Ethereum node that checks payments and holdings.

We take encrypted backups every night, install updates and watch the server's health.

Because a workspace can't reach the internet, features that need an outside service don't work on hosted workspaces. Push notifications and built-in AI are switched off.

2. Who can use it

You must be at least 18 years old and able to enter into a binding agreement. If you sign up for an organisation, you confirm that you may accept these terms on its behalf. You may not use the service where the law forbids you to.

3. Your wallet is your account

Nil doesn't ask for an email address, a password or a phone number. You sign in by signing a message with an Ethereum wallet. Signing is free and sends no transaction.

Keeping your wallets safe is up to you. We never see a wallet's private key or recovery phrase, and we can't recover a lost wallet. Anyone who controls a wallet linked to your account can sign in as you.

Link a second wallet and invite a second admin, so that losing one wallet doesn't lock you out. Keep a recovery kit for your encryption keys. If you lose every wallet that holds your keys and have no recovery kit or working passkey, nobody can open your encrypted docs and private tasks again. That includes us.

4. Signing up

You choose an address, sign the message and get a setup code. The sign-up page shows the code only once. It proves the workspace is yours, so keep it until you have set the workspace up.

One wallet can own up to 10 hosted workspaces. We also limit how many sign-ups can come from one network and from one wallet in a given time.

On busy days, or once 90% of the server's places are in use, a sign-up waits for our approval. The sign-up page tells you so and still shows your setup code. Your address opens once we approve the request. We decide whether to approve or reject a waiting sign-up. If we do neither within 7 days, the request is dropped and the address is free again.

When the server is full, sign-ups close.

Some addresses are reserved or blocked. The address of a deleted workspace stays unavailable to others for 90 days.

A workspace whose setup isn't finished within 30 days of its creation is removed, without a backup, and its address becomes free again.

We don't pause or delete a workspace because nobody has used it for a while. If that ever changes, we will say so in these terms before it applies (see section 16).

5. Your workspace and its content

The person who signs up becomes the workspace's owner. The owner decides who joins and with what role. The owner is responsible for the workspace and for what its members, guests and agents put in it.

Your content stays yours. You allow us to store, copy, back up and transmit it only as far as we need to run the service for you.

Docs and private tasks are encrypted in your browser, and we can't read them. Everything else in a workspace is stored in readable form on our server. We don't look at it. But as the host we are technically able to, and a court could order us to hand it over. Docs and private tasks would be handed over still encrypted. The Privacy Policy lists what is encrypted and what isn't.

Encryption in the browser protects you only while your browser runs Nil's published code. Anyone can check what a hosted workspace sends against a public release, byte for byte. docs/verify-a-server.md in the source code explains how.

If you put personal data about other people into a workspace, for example members, guests or people who apply for a bounty, you are responsible for having a legal basis for it. For that data we act on your behalf (see section 15).

6. Acceptable use

Don't use the service to:

• store or share anything illegal, such as material that sexually exploits children, terrorist content, or content that infringes someone else's rights;
• harass, threaten or defraud anyone, or send spam or phishing;
• spread malware, or attack the service, other workspaces or anyone else;
• try to get at other teams' data or break the separation between workspaces;
• get around our limits, for example by signing up workspaces only to hold on to addresses;
• put a heavy load on the server on purpose.

If you find a security problem, report it privately as SECURITY.md in the source code describes. Don't test it on other people's workspaces.

7. Resource limits

Each workspace has fixed limits on processing power, memory and storage. Uploads stop when a workspace reaches its storage limit. If a workspace still grows well beyond it, it is suspended, with a notice on its address. Contact us to get it back. It then gets time to be cleaned up or moved to a larger plan.

8. Nil Pro and payments

What is free

Using a workspace is free. Tasks, projects, goals, encrypted docs, time tracking, reminders, share links, reading and exporting never need Nil Pro.

Nil Pro adds new bounties and the public bounty board, new votes, the token-holder door, connecting AI assistants over MCP, and room for more than 5 people. Guests never count as people.

Trial

A new workspace has Nil Pro free for its first 14 days. The last 7 of those days are a grace period. Erasing a workspace or restoring a capsule doesn't start a new trial.

Price and discounts

Nil Pro costs 12 US dollars per 30 days, plus 3 US dollars per 30 days for each person above 5. One invoice can cover up to 24 periods of 30 days. The price you pay is the amount the invoice shows.

These discounts and perks apply by themselves, as the invoice shows:

• Paying in NOX costs less than paying in USDC, currently 20% less.
• When an admin has staked NOX in the official staking contract, the invoice costs less: currently 10% off from 10,000 NOX staked and 25% off from 100,000. The highest tier any one admin reaches applies. A stake counts once Nil has seen it at that tier for at least 6 hours, and only if it is still there when the invoice is made.
• If the owner or an admin holds a Zero-State Pass in a linked wallet, the workspace has Nil Pro without paying. Nil checks every few hours, so it can take up to about 12 hours to start. It ends at the first check that no longer finds the pass.

We may change prices and discounts. A change applies only to invoices made after it, never to time already paid for.

How you pay

An admin makes an invoice in Settings → Plan. Before anything is made, it shows the price line by line: the flat fee, the seats, any discount and credit, and what that comes to in USDC and in NOX. The invoice stays open for 24 hours. Its price, NOX rate and discounts are fixed for that time.

You pay in USDC or in NOX on Ethereum mainnet, from any wallet or exchange, straight to our treasury. The treasury is a Safe at 0xC4155a7bcE81a5DFE03919eF81A02a44f30Cfbee. When NOX can't be priced, invoices are offered in USDC only.

Send exactly one of the amounts the invoice shows. To tell your payment apart from everyone else's, each amount is rounded up slightly and ends in six digits of its own. In USDC this adds less than 2 USDC, and in NOX less than 0.02 NOX. An exchange that rounds the amount can't be matched to your invoice. A payment in another token, on another network or to another address isn't counted, and we may not be able to return it.

A payment counts once its block is final. If less than the amount arrives, the invoice shows what is missing. If more arrives, the extra buys extra days in proportion. Whatever reaches an invoice after it expired or was cancelled becomes credit for your next invoice. NOX that arrives late counts at the lower of the invoice's rate and the rate on the day.

Nothing renews by itself, and we never ask for a card.

Payments on Ethereum are public, like any transaction.

When Nil Pro runs out

When paid time or the trial runs out, a grace period of 7 days keeps the paid tools working. Owners and admins get reminders before Nil Pro runs out. After the grace period, the paid tools pause. Nothing is deleted, and everything already in the workspace stays readable.

Refunds

Nil has no way to send a payment back, and we don't refund payments for Nil Pro. Overpayments and late payments become paid time or credit, as described above. This doesn't affect the statutory rights of consumers in the EU, including any right of withdrawal where the law gives one.

9. Availability

We run the service on a best-effort basis. There is no service level agreement and no promised uptime. Upgrades, maintenance and server restarts take workspaces offline for short periods, and things can break. Keep your own copies of anything important (see section 11).

We may change, add or remove features as Nil develops. Hosted workspaces run Nil's published releases.

10. Open source

Nil is free software under the GNU Affero General Public License, version 3 or later (AGPL-3.0-or-later). Its source code is at https://github.com/NON-OS/NIL-. You can run it on your own server at no cost and move your workspace there with a capsule.

The names Nil and NØNOS and their logos are not covered by that licence. TRADEMARKS.md in the source code explains how you may use them.

These terms cover the hosted service. They don't limit what the AGPL lets you do with the software.

11. Exporting, leaving and deletion

You can leave at any time and take your data with you.

• An admin can download an encrypted capsule in Settings → Data & privacy. It holds the whole workspace in one file, locked with a passphrase you choose, and restores into any self-hosted Nil server. Without the passphrase nobody can open it, you included.
• Anyone can export the tasks they can see as a spreadsheet (CSV). Admins can also download a readable backup (JSON).

To delete the workspace, the owner writes to ops@nonos.app. We may ask you to sign a message with the owner's wallet to show that the request is yours. We then stop the workspace at once and take a final encrypted backup. We erase the workspace 14 days later. Until then, you can ask us to bring it back. Backups, the final one included, expire 30 days after they are made. The address stays reserved for 90 days, so nobody else can take it while your old links are still around.

An owner can also erase everything inside the workspace from Settings → Data & privacy. That doesn't remove the workspace itself or backups we have already made.

12. Suspension and termination by us

We may suspend a workspace if it breaks these terms or the law, if it puts the service or other workspaces at risk, or if the law requires it. A suspended workspace goes offline with a notice on its address, and its data is kept. Where we can, we tell you why first and give you a chance to fix the problem.

We may delete a workspace that holds clearly illegal content, or after a serious or repeated breach of these terms. We take a final encrypted backup first, unless the law requires otherwise.

To report illegal content in a workspace, write to ops@nonos.app. Give the workspace's address, where the content is and why you think it is illegal. We can't see docs or private tasks, because they are encrypted.

If we stop offering the hosted service, we will announce it on nil.nonos.app at least 30 days before, so you have time to export.

13. No warranty

We provide the service as it is and as available. As far as the law allows, we make no promises about it beyond these terms. This doesn't affect the legal guarantees that consumers have under mandatory law. Please keep in mind that:

• no part of Nil's own code, including how it uses cryptography and smart contracts, has had an independent security audit;
• encrypted weighted votes are in beta;
• the check of what the Ethereum node says is built on Helios, an unaudited light client;
• payments on Ethereum are final, and token prices change.

14. Liability

Nothing in these terms limits or excludes our liability for intent or gross negligence, for injury to life, body or health, or in any other case where the law doesn't allow it. The limits below don't apply in those cases.

Otherwise, and as far as the law allows:

• we are not liable for loss caused by lost wallets, setup codes, recovery kits or passphrases, by on-chain transactions or token prices, or by services you connect to a workspace yourself, such as an AI assistant or a calendar app;
• our total liability is limited to what you paid us for Nil Pro in the 12 months before the event that caused the claim.

If you are a consumer, this section doesn't affect your statutory rights.

15. When we process personal data for you

Personal data in a workspace is controlled by the workspace owner, or by the organisation the owner acts for. We process it for them as a processor. This section is our agreement for that under Article 28 of the GDPR.

• We process the data only to run the service as these terms and your use of Nil describe, unless the law requires otherwise. In that case we tell you first, unless the law forbids it.
• Everyone who works on the service for us is bound to confidentiality.
• We protect the data with the measures that the Privacy Policy describes.
• Our sub-processors are Cherry Servers, for the server and its encrypted backups, and Alchemy and Infura, for Ethereum lookups. We will list any change in the Privacy Policy at least 30 days before it applies. If you object, you can export your data and leave.
• We help you answer requests from people who use their data protection rights, and with your duties on security, data breaches and impact assessments, as far as we can with what we can see.
• If we learn of a personal data breach that affects your workspace, we tell the owner without undue delay, through any contact the owner has given us or a notice on nil.nonos.app.
• When your workspace is deleted, we erase its data as section 11 describes.
• We give you the information you need to show that this agreement is kept. The source code shows how the service handles data.

16. Changes to these terms

We may change these terms. We publish every new version on this page with a new effective date. A change that affects you significantly applies no sooner than 30 days after we publish it, unless the law or a security need requires it sooner. Nil doesn't ask for your email address, so we may not be able to tell you directly.

If you keep using the service after a change applies, the new terms apply to you. If you don't agree, you can export your data and leave.

17. Law and disputes

These terms are governed by Italian law. If you are a consumer living in the EU, you also keep the protection of the mandatory law of the country where you live, and you can bring a claim before the courts there.

If part of these terms is invalid, the rest still applies.

18. Contact