Devoku Terms of Service

Effective: 18 September 2026 Last updated: 17 September 2026

These Terms form a contract between you and Coded UAB, a company organized in Lithuania (“Coded,” “we,” “us”), for Devoku websites, applications, messaging, AI agents, computer workspaces, cloud resources, and related services (collectively, the “Services”).

Coded UAB

Karaliaus Mindaugo pr. 38, LT-44307 Kaunas, Lithuania

Company code 306350327, Register of Legal Entities of the Republic of Lithuania

VAT number LT100016150719

Legal: legal@devoku.com · Support: support@devoku.com

If you use a managed account for an organization, the organization may have a separate agreement with us and controls that account. If a conflict exists, the organization agreement governs its use of the Services.

1. Accepting these Terms

You accept these Terms by creating an account, clicking acceptance, signing an order, or using the Services after being shown these Terms. The Acceptable Use Policy, AI and Agent Terms, Community Guidelines, any order form, and any feature-specific terms presented to you are part of this agreement. The Privacy Policy describes our processing and is not incorporated as a contractual warranty except where it expressly says otherwise.

If you use the Services for an organization, you represent that you may bind it. “You” then includes that organization. If you do not agree, do not use the Services.

2. Eligibility and accounts

You must be at least 18 years old and at least the age of legal majority where you live. The Services are not offered to children. You must provide accurate information, protect your credentials and recovery methods, and promptly tell support@devoku.com about suspected account compromise.

For existing internal accounts known to pre-date the public age gate, Coded may document an administrator attestation that the account holder satisfies the eligibility requirement without fabricating a date of birth.

You are responsible for activity under your account except to the extent caused by our breach of this agreement or failure to use legally required care. You may not share credentials or evade account limits. We may require identity, age, payment, or organization verification.

An organization-managed account is controlled by that organization. Its authorized owners and administrators may access, configure, export, retain, transfer, restrict, or delete its agents, chats, files, workspaces, and other work product. There is no private workspace vis-à-vis that organization inside such an account.

Electronic communications

We may send electronic communications concerning Devoku products and Services, including new models, features, credits, offers, security, billing, account, legal, operational, migration, availability, and service-change information. You may opt out of promotional communications at registration, in settings, or through the unsubscribe method in a promotional message. Essential transactional, security, billing, account, legal, and service-related communications may continue while your account is active.

3. What Devoku does

Devoku combines:

• human messaging, groups, uploads, search, voice transcription, and notifications;
• conversations with AI systems and coding agents;
• customer-cloud and Coded-managed computer workspaces;
• tools that can read, create, modify, move, or delete files; run commands; browse websites; use networks; install software; interact with third-party systems; and consume paid resources; and
• integrations with model, identity, payment, hosting, speech, messaging, and developer-service providers.

Features and data responsibilities vary by deployment mode. In a customer-managed organization, its administrator may control identity, encryption keys, infrastructure, policies, and content. In Coded-managed Services, Coded and its subprocessors operate the applicable infrastructure.

Hosted Services and source code

These Terms govern Coded-operated websites, accounts, managed messaging, billing, cloud resources, support, and other hosted Services. Devoku source code made available under the Apache License 2.0 is governed by that license, not these Terms, and these Terms do not restrict rights the license grants. The Devoku name, logos, hosted accounts, and third-party services are not licensed under Apache 2.0.

If you independently deploy Devoku source code, you operate and secure that deployment and act as the relevant service provider and data controller or processor, as applicable to your use, unless another agreement says otherwise. Hosted-Service billing, availability, retention, and support terms do not apply to infrastructure Coded does not operate. Coded remains responsible for any Coded-managed component you separately use.

4. AI and autonomous tool risks

AI output is probabilistic and may be inaccurate, incomplete, offensive, biased, insecure, outdated, non-unique, or subject to third-party rights. It is not a statement of fact or professional legal, medical, financial, security, or other advice. You must independently review and test output before relying on or publishing it.

Agents may take real actions in authorized environments, including destructive or costly actions. You decide what access, secrets, tools, approval settings, spending limits, and environments to provide. Use version control, tested backups, least privilege, isolated non-production environments, review gates, and monitoring. Do not give an agent access you would not give an untrusted contractor.

You are responsible for your prompts, configurations, approvals, deployment decisions, and use of output, and for confirming that an action is suitable before it affects people, production systems, finances, security, or legal rights. This allocation does not exclude liability that applicable law does not allow us to exclude. The AI and Agent Terms provide additional detail.

Cloud workspaces and root access

Cloud workspaces run on third-party infrastructure and are subject to the provider’s rules. If you enable SSH or root access, you are responsible for authorized users and keys and for risk-appropriate patching, firewall, software, secret, backup, and workload controls. Root access can bypass product safeguards and expose or destroy an entire workspace.

Coded may throttle, isolate, suspend, or remove a workspace to address nonpayment, a provider request, unlawful activity, or an urgent threat to people or infrastructure. Where lawful and practicable, we will provide notice and an opportunity to export content. Resource deletion and subscription cancellation are separate actions.

Managed infrastructure and routing

For Coded-managed Services, Coded may select, use, replace, or change infrastructure providers, subprocessors, architectures, software, networks, internet addresses, hostnames, availability zones, regions, and processing locations. We may migrate, relocate, resize, reconfigure, patch, restart, rebuild, reimage, replace, consolidate, split, or transfer managed resources, including existing VMs, disks, workspaces, databases, gateways, and related services. We may change VM types and CPU, memory, storage, network, performance, capacity, isolation, or other specifications. Unless a signed order expressly promises a particular provider, location, specification, or service level, those characteristics are not guaranteed.

We may route or reroute prompts, context, files, tool results, model requests, and outputs through different gateways, upstream model providers, model versions, endpoints, or processing regions, including fallbacks, for availability, safety, security, legal compliance, performance, capacity, or commercial reasons. A selected product label does not guarantee a particular upstream host or processing region unless the Service expressly says so. Customer-controlled routes, including bring-your-own-key endpoints, remain subject to the configuration and provider selected by the customer or its administrator.

These operational changes can alter latency, performance, capacity, compatibility, or output and can cause planned or unplanned interruption, degraded operation, failover, retry, queueing, or temporary unavailability. They do not by themselves authorize a new charge that was not disclosed under Section 11. We will honor express location or service-level commitments in a signed order and provide notice, termination rights, refunds, or other remedies where applicable law requires them.

Operational access, safety review, and abuse prevention

To provide, maintain, secure, support, and enforce the Services, Coded and its authorized subprocessors may collect and analyze service, VM, workspace, gateway, model-routing, health, availability, resource-use, command, process, network, security, audit, and error logs and telemetry. Automated systems may screen or classify prompts, messages, uploads, files, links, model inputs and outputs, tool activity, metadata, and traffic indicators for malware, harmful or unlawful content, abuse, fraud, policy violations, or threats to users or infrastructure.

Authorized personnel may access or inspect relevant content, workspace data, configurations, logs, reports, and technical records when reasonably necessary to investigate a report or incident, provide requested support, restore or maintain service, enforce this agreement or provider rules, protect rights or safety, or comply with law. Access is subject to applicable law, the Privacy Policy, role-based controls, and need-to-know safeguards. We do not undertake to monitor every communication, file, workload, or model output, and safety systems may fail to detect or may incorrectly classify content.

5. Your content

“Your Content” means prompts, messages, files, audio, images, code, tool results, configurations, and other material you or your authorized users submit to the Services. As between you and Coded, you retain your rights in Your Content.

You grant Coded and its subprocessors a worldwide, non-exclusive, royalty-free license to host, reproduce, transmit, display, format, encrypt, index, analyze, and otherwise process Your Content only as reasonably needed to provide, maintain, secure, and support the Services you request, comply with law, and enforce this agreement. Improving general products or training models is not included unless the improvement uses de-identified operational data or we give a separate notice and obtain any choice required by law. This license ends when the relevant content is deleted from active systems, subject to backups, legal retention, and content shared with others.

You represent that you have the rights and lawful basis needed for Your Content and our instructed processing. Do not submit regulated, confidential, biometric, health, payment-card, export-controlled, or other high-risk data unless the selected Service is expressly approved for it in writing.

Coded does not use Your Content to train a general-purpose AI model unless we give a separate, clear notice and obtain any consent required by law. Third-party model providers process content under the selected provider terms and settings; Coded cannot extend protections not provided by that provider.

6. Output

To the extent Coded has rights in output generated specifically for you, Coded assigns those rights to you. This does not transfer rights in Coded software, models, systems, templates, documentation, or third-party material. Similar or identical output may be generated for others. Open-source code, package licenses, model-provider terms, and other third-party restrictions may apply. You are responsible for reviewing provenance and licenses before use.

7. Messaging and other users

You are responsible for what you send and for obtaining consent before adding, recording, monitoring, or contacting others. Messages may be copied, forwarded, screenshotted, exported, or retained by recipients or organization administrators.

Coded-managed messages are protected in transit and encrypted at rest with server-operated keys. They are not necessarily protected by user-held end-to-end encryption. Coded may access content when reasonably necessary to operate features, provide support, protect users, investigate abuse, or comply with law, subject to applicable safeguards.

Use reporting and blocking tools where available and contact abuse@devoku.com for urgent reports. The Community Guidelines apply to all communications. We may preserve evidence, restrict distribution, remove content, or suspend accounts as described below.

8. Third-party services

The Services may connect to providers chosen by you, your administrator, or Coded. Their terms, privacy policies, fees, quotas, geographic restrictions, retention, and output rules apply. You authorize us to send the information reasonably needed to complete your request.

For Devoku-managed model access, Coded currently sends requests through Vercel AI Gateway or OpenRouter and the upstream model provider selected through that gateway. A gateway may offer provider policy controls, but routing through a gateway is not a promise that every prompt or output is automatically screened, safe, accurate, or lawful. Devoku’s reporting tools and this agreement apply regardless of which managed route serves a request.

If you provide your own API key, provider account, local model, or custom endpoint, you choose and control that third-party or self-operated route. You instruct Coded to transmit the content needed to that route, and you are responsible for having authority to use it and for its provider terms, fees, retention, safety settings, geographic restrictions, and output. Coded does not select, certify, or promise to monitor the model or safety behavior behind a customer-controlled endpoint. The Acceptable Use Policy and applicable law still govern how you use Devoku, and Coded may enforce platform-level abuse, security, and legal controls.

You are responsible for your third-party accounts, API keys, permissions, and charges. We are not responsible for a third-party service, content, change, outage, or data practice, but this does not limit our responsibility for our own vendor selection or processing where law makes us responsible.

No use of Devoku authorizes you to automate or bridge Slack, Discord, WhatsApp, Signal, or another service contrary to its terms or without required API access and user consent.

9. Software and intellectual property

Except for Your Content and assigned output rights, these Terms do not transfer to you any intellectual-property rights in the Services. Subject to this agreement, you receive a limited, revocable, non-exclusive, non-transferable right to use hosted Services. Open-source components remain governed by their licenses.

You may not reverse engineer a non-open component except where law permits, circumvent security or usage limits, resell the Services without permission, misrepresent output as human-made where disclosure is required, or use Coded marks without authorization. Feedback may be used without restriction or payment, but we will not identify you publicly without permission.

10. Acceptable use

You must follow the Acceptable Use Policy and applicable law. You may not use the Services to harm people, violate rights, distribute unlawful content, compromise systems, facilitate fraud or abuse, create or distribute malware, evade safeguards, or conduct prohibited high-impact automated decisions.

You remain responsible for your users and integrations. We may investigate suspected violations and cooperate with lawful authorities. We do not promise to monitor every message or output.

11. Paid Services

Prices, included usage, billing period, taxes, renewal terms, and material limits are shown before purchase or in an order. Unless stated otherwise, subscriptions renew automatically for the same period at the then-disclosed price until canceled. We will give any notice of price changes required by law.

You may cancel through the purchase channel or account settings. Cancellation normally takes effect at the end of the paid period. Deleting an account does not automatically cancel an Apple, Google, or other third-party subscription; you must cancel through that provider. Store purchases and refunds are also subject to store rules.

Fees already paid are non-refundable except where an order, store policy, or law says otherwise. EU/EEA/UK consumers may have withdrawal, conformity, repair, price-reduction, termination, refund, and content-retrieval rights that these Terms do not restrict. Before immediate performance during a withdrawal period, we will request any acknowledgment or consent required by law. Usage charges incurred before lawful withdrawal may remain payable where permitted.

Cloud resources, model calls, voice processing, storage, traffic, and other metered features may consume credits or incur charges. You should set and monitor budgets appropriate to your use. Credits are not money, are not transferable, and expire only as disclosed before purchase, subject to mandatory law.

12. Beta and preview features

Beta, experimental, preview, and early-access features may be incomplete, unstable, insecure, changed, or discontinued and may have lower or no support, retention, portability, or availability commitments. Do not use them for production or irreplaceable data. Feature-specific notices control if they provide greater protection.

13. Service changes

We may update the Services for security, legal, technical, provider, or commercial reasons, including changing, restricting, suspending, replacing, or discontinuing a feature, model, integration, route, region, VM type, resource specification, provider, or infrastructure component. Section 4 describes operational changes to managed resources and routing. For a material change that adversely affects an ongoing paid consumer service, we will give reasonable advance notice where required and provide the right to terminate and receive any remedy required by law. Emergency security, provider, capacity, and legal changes may take effect sooner.

14. Suspension and termination

You may stop using the Services and request account deletion. We may restrict content, tools, spending, integrations, or accounts when reasonably necessary to address a legal requirement, security incident, nonpayment, risk to others, or material breach. Where appropriate and lawful, we will give notice, explain the principal reason, and provide an appeal route.

For curable breaches, we will ordinarily give a reasonable opportunity to cure. We may act immediately for urgent security, fraud, child-safety, illegal content, sanctions, or serious harm risks. Organization administrators may separately suspend managed accounts.

When you confirm account deletion, your access ends immediately. We permanently delete or de-identify remaining eligible account data within 30 days, subject to organization control, content retained by other participants, legal holds, protected backups, and mandatory billing, security, moderation, or legal retention. Keep independent copies of important data and review the Account and Data Deletion page before deleting.

15. Availability, backups, and security

Unless an order includes an SLA, we do not guarantee uninterrupted, error-free, secure, or loss-free operation. Internet, cloud, AI, and third-party systems can fail. Features, models, gateways, regions, providers, VMs, disks, workspaces, and network routes may be degraded or temporarily unavailable. Scheduled and emergency maintenance, migration, failover, security response, provider action, and capacity management may interrupt or delay access.

You should maintain independent, tested backups of important content and source code and verify exports, particularly before allowing an agent to change production or irreplaceable data. Sync, retention, snapshots, version control, or backup features are not a substitute for your own recovery plan unless a signed order expressly says otherwise.

We use measures designed to protect the Services, but no system is completely secure. Our security program may be informed by controls found in frameworks such as SOC 2 and ISO/IEC 27001. Unless Coded publishes a current, independently issued report or certificate identifying the exact scope, this does not mean Coded or Devoku is certified, attested, audited, or compliant under those frameworks.

16. Warranties and statutory rights

We warrant that we will provide paid Services with the professional diligence required by applicable law. Except for that warranty, an express written warranty, and rights that cannot be excluded, the Services are provided “as is” and “as available.” We disclaim implied warranties of merchantability, fitness for a particular purpose, accuracy, non-infringement, and quiet enjoyment to the extent permitted by law.

Nothing in these Terms excludes statutory guarantees or remedies that apply to you as a consumer.

17. Liability

For consumers, Coded is responsible for loss that is a foreseeable result of our breach or failure to use legally required care. Coded is not responsible for business loss suffered by a consumer or for loss caused by unauthorized use, unsupported modifications, or failure to take reasonable precautions clearly disclosed for a high-risk agent action, except to the extent Coded caused or contributed to that loss. Mandatory consumer remedies remain available.

For business users, neither party is liable for indirect, incidental, special, exemplary, or consequential loss, or lost profits, revenue, goodwill, or data, to the extent liability may lawfully be limited. To the maximum extent permitted by law, Coded’s aggregate liability to a business arising from the Services during any 12-month period is limited to the greater of (a) the amount the business paid Coded for the affected Services during that period or (b) EUR 100, unless an order provides a different cap.

These exclusions and limits do not apply to liability that cannot lawfully be limited, including liability for death or personal injury caused by negligence, intentional misconduct, gross negligence, fraud, mandatory product liability, or mandatory data-protection and consumer rights. They also do not reduce a remedy expressly promised in an order or applicable SLA.

18. Business indemnity

If you use the Services for business purposes, you will defend and indemnify Coded and its affiliates against third-party claims arising from Your Content, your unlawful use, or your material breach of Sections 5, 7, 8, 9, or 10, except to the extent caused by Coded. We will promptly notify you, permit you to control the defense with competent counsel, and reasonably cooperate. You may not settle in a way that admits Coded’s fault or imposes obligations on Coded without consent.

This section does not apply to consumers acting outside a trade, business, craft, or profession.

19. Governing law and disputes

Lithuanian law governs this agreement, without regard to conflict-of-law rules. Courts in Vilnius, Lithuania have jurisdiction, except that a consumer may rely on mandatory law and bring proceedings in any court available under the law of the consumer’s habitual residence.

Before filing a claim, contact legal@devoku.com and allow 30 days for an informal resolution, unless urgent relief or a statutory deadline requires faster action. Lithuanian consumers may contact the State Consumer Rights Protection Authority (Valstybinė vartotojų teisių apsaugos tarnyba), A. Goštauto g. 12, 01108 Vilnius, Lithuania, tarnyba@vvtat.lt, https://www.vvtat.lt/en. Consumers elsewhere may use an authorized local alternative-dispute-resolution body where available. These Terms do not require consumer arbitration or waive collective rights that cannot lawfully be waived.

20. Export controls and sanctions

You may not use or provide the Services in violation of EU, UN, US, UK, or other applicable trade controls or sanctions. You represent that you are not prohibited from receiving the Services. You are responsible for classifying and authorizing exports of your software, content, encryption, and technical data.

21. Changes to these Terms

We may update these Terms for legal, security, product, or operational reasons. We will state the update date and give advance notice of material changes where required. Material changes will not apply retroactively without agreement unless law requires it. Continuing to use the Services after the effective date means acceptance only where that method is legally valid.

22. General

Neither party is liable for delay caused by events beyond reasonable control, but this does not excuse payment obligations or legally required continuity measures. You may not transfer this agreement without our consent, except with a business reorganization where the successor accepts it. We may transfer it with our business if your rights are not materially reduced.

If one provision is unenforceable, the rest remains effective and the provision will be applied as closely as law permits. Failure to enforce is not a waiver. Headings are for convenience. These Terms, incorporated policies, and any order are the complete agreement about the Services.

Notices to Coded must be sent to legal@devoku.com and the registered address above once completed. We may send notices to your account email or in-product.