These Terms of Use are a binding agreement between you and Bahama governing your access to and use of the Bahama website, dashboard, OAuth flows, MCP server, API, deployment pipeline, managed infrastructure tooling, documentation, software, paid plans, support, and related services.

By creating an account, connecting an MCP client, using the dashboard or API, deploying an application, purchasing a plan, or otherwise using Bahama, you agree to these Terms and to our Privacy Policy. If you use Bahama on behalf of a company or other entity, you represent that you have authority to bind that entity, and references to you include that entity.

If you do not agree to these Terms, do not use Bahama.

Bahama is an agent-native infrastructure control plane. It allows you and authorized AI agents or MCP-compatible clients to create projects, manage project metadata, provision supported resources, receive runtime contracts, upload source archives, start deployment jobs, inspect usage, manage project secrets, and deploy applications to third-party infrastructure.

Bahama owns the control-plane experience: account authentication, project registry, access controls, source-upload handoff, deployment coordination, billing, usage attribution, and resource orchestration. Customer applications are intended to run on third-party infrastructure such as Cloudflare. Bahama's web application is not intended to sit in the production traffic path for deployed customer applications.

The current service may support only specific frameworks, backends, resource types, deployment formats, limits, regions, and providers. We may add, change, limit, deprecate, or remove features, integrations, providers, or supported runtimes over time.

• You must be at least 13 years old and able to enter into a binding agreement. If you use Bahama for an entity, you must have authority to act for that entity.
• You must provide accurate account, billing, tax, and contact information and keep it current.
• You are responsible for all activity under your account, including activity by authorized users, OAuth clients, API clients, MCP clients, AI agents, integrations, and anyone who obtains your credentials or tokens.
• You must protect your account credentials, OAuth grants, access tokens, refresh tokens, API keys, deployment secrets, MCP client configuration, and project secrets. Notify us promptly if you suspect unauthorized access.
• You may not share accounts in a way that avoids plan limits, billing obligations, abuse controls, or access restrictions.

Bahama is designed for use through AI agents and MCP-compatible clients. When you authorize a client, you authorize that client to act on your behalf within the scopes and permissions granted. Tool calls made by that client may create projects, query databases, request upload URLs, start deployments, inspect usage, or perform other actions available through Bahama.

You are responsible for choosing trustworthy clients, reviewing requested permissions, supervising agent behavior, and confirming that instructions sent by an agent are appropriate for your projects. Bahama may rely on authenticated requests from your clients as your instructions.

• Do not connect clients you do not trust.
• Do not expose tokens or MCP configuration to public repositories, browser code, logs, untrusted agents, or third parties.
• Do not use automation to evade rate limits, abuse controls, usage limits, billing limits, or security controls.
• Bahama may suspend or revoke tokens, clients, grants, sessions, or API access if we believe they are compromised, abusive, unlawful, or risky to the service or others.

You retain ownership of code, files, data, database content, project content, prompts, instructions, inputs, outputs, application assets, and other materials you submit to Bahama or deploy through Bahama, except for Bahama's own software, documentation, trademarks, templates, examples, and service materials.

You grant Bahama a non-exclusive, worldwide, royalty-free license to host, copy, transmit, process, cache, store, analyze, modify, transform, display, and otherwise use Customer Content as needed to provide, secure, support, debug, improve, and operate the service; fulfill your instructions; deploy and run your applications; prevent abuse; comply with law; and enforce these Terms.

You represent that you have all rights, permissions, notices, and consents needed to submit Customer Content to Bahama, authorize Bahama to process it, and deploy or publish it through third-party infrastructure. You are solely responsible for Customer Content and for any websites, apps, databases, APIs, outputs, or services you create or operate with Bahama.

Bahama may sign upload URLs for source archives or static bundles, store upload metadata, trigger build or deploy jobs, and send deployment materials to third-party infrastructure providers. You are responsible for ensuring uploaded source is lawful, secure, deployable, and free of malicious code.

Project secrets are intended for server-side runtime use by your deployed applications. You must not ask agents to expose raw secrets in chat, source code, browser bundles, logs, MCP output, or public repositories. Bahama may store masked secret metadata and may send raw secret values directly to infrastructure providers for encrypted storage or runtime binding.

Do not submit payment card numbers, protected health information, regulated financial account data, government identifiers, children's data requiring verifiable parental consent, export-controlled materials, or other highly sensitive regulated data to Bahama unless we have signed a separate written agreement that expressly covers that data.

You may use Bahama only for lawful purposes and in compliance with these Terms, documentation, plan limits, provider rules, and applicable law. You may not use Bahama, or applications deployed through Bahama, to harm others or interfere with the service.

• No malware, phishing, credential theft, spam, botnets, command-and-control systems, vulnerability exploitation, unauthorized scanning, denial-of-service activity, or abusive automation.
• No unlawful, infringing, defamatory, deceptive, harassing, hateful, sexually exploitative, violent extremist, or privacy-invasive content or activity.
• No use that violates intellectual property, publicity, privacy, consumer protection, export control, sanctions, anti-spam, data protection, child safety, or financial laws.
• No attempts to bypass authentication, authorization, ownership checks, usage limits, billing, rate limits, resource limits, isolation boundaries, deployment validations, or provider restrictions.
• No crypto mining, high-risk financial activity, regulated gambling, weapons-related activity, surveillance, scraping at abusive scale, or other workloads that we or our providers deem high risk without written permission.
• No reverse engineering, probing, or testing of Bahama systems except through a written security program or authorization from us.
• No resale, sublicensing, service bureau use, or managed-service use of Bahama unless your plan or a written agreement allows it.

You are responsible for the applications, websites, APIs, databases, files, outputs, and services you build, deploy, or operate with Bahama. You are also responsible for your end users, your terms and privacy notices, your legal compliance, and your handling of data collected by your applications.

If your application collects personal information, takes payments, sends emails, stores user data, offers subscriptions, or interacts with third-party services, you are responsible for providing appropriate disclosures, obtaining required consents, honoring user rights, maintaining security, and complying with applicable laws. Bahama does not become the publisher, merchant of record for your customer sales, payment facilitator for your end users, healthcare provider, financial institution, or legal compliance officer for your application merely because you deployed through Bahama.

Bahama relies on third-party services and infrastructure providers, including providers for hosting, Cloudflare-backed deployment and resources, authentication, databases, analytics, payments, email, support, error monitoring, and security. Your use of Bahama may require processing by those providers and may be subject to their rules, limits, availability, and terms.

You are responsible for third-party services you choose to connect to your projects, including AI providers, OAuth providers, payment providers, email providers, data providers, APIs, and other services whose credentials you store as project secrets. Bahama is not responsible for third-party products, outages, policy changes, data handling, pricing, support, or acts or omissions.

Bahama may offer free, alpha, beta, trial, usage-based, subscription, or paid plans. Plan features, quotas, limits, prices, and billing periods may be shown in the product, order flow, invoice, pricing page, or other written materials. We may change plans or pricing prospectively by giving notice as required by law or by the applicable plan terms.

Paid services are billed through Stripe or another payment processor. By providing a payment method or purchasing a paid plan, you authorize Bahama and its payment processor to charge all fees, taxes, usage charges, overages, renewal charges, and other amounts due for your plan. You must keep a valid payment method on file for paid services.

Subscriptions renew automatically unless canceled before the next billing date through the available account or billing flow, or by contacting us if no self-service cancellation flow is available. Cancellations take effect at the end of the current billing period unless otherwise stated. You remain responsible for all charges incurred before cancellation.

Bahama may apply account, project, deployment, source-upload, storage, database, compute, request, bandwidth, build, rate, concurrency, API, MCP, and other limits. We may enforce limits through dashboard restrictions, API restrictions, deployment restrictions, resource pausing, throttling, suspension, or blocking of deployed application traffic.

We may modify, discontinue, suspend, or limit any feature or service to maintain security, comply with law, manage provider constraints, prevent abuse, control costs, improve the product, or reflect changes in third-party infrastructure. We will try to give reasonable notice for material changes when practical, but urgent security, legal, provider, or operational needs may require immediate action.

Some Bahama features may be labeled alpha, beta, preview, experimental, early access, or similar. These features may be incomplete, unstable, undocumented, rate limited, changed without notice, or discontinued. You should not rely on pre-release features for critical workloads unless we have agreed otherwise in writing.

You are responsible for securing your account, clients, agents, code, secrets, applications, databases, and end-user data. You must promptly apply security fixes to your applications, rotate compromised secrets, avoid exposing credentials, and respond to security issues in your projects.

Bahama may investigate suspected vulnerabilities, compromise, abuse, data exposure, or violations. You agree to cooperate with reasonable security requests and not to interfere with investigations. If you discover a vulnerability in Bahama, report it responsibly to security@bahama.ai and do not access, modify, destroy, exfiltrate, or disclose data without authorization.

Bahama does not guarantee that use of the service will make your applications compliant with GDPR, CCPA, HIPAA, PCI DSS, SOC 2, COPPA, GLBA, export control, accessibility, consumer protection, or other legal or industry requirements. Compliance for your applications remains your responsibility unless a separate written agreement says otherwise.

Bahama and its licensors own all rights, title, and interest in the Bahama service, software, website, dashboard, APIs, MCP tool definitions, documentation, design, trademarks, logos, templates, examples, and other materials, excluding Customer Content. These Terms do not transfer any Bahama intellectual property rights to you.

Subject to these Terms, we grant you a limited, revocable, non-exclusive, non-transferable license to access and use Bahama for your internal development and deployment purposes during the term of your account. You may not copy, modify, distribute, sell, lease, sublicense, or create derivative works of Bahama materials except as expressly allowed by us or by applicable open-source licenses.

If you provide ideas, suggestions, bug reports, feature requests, comments, or other feedback, you grant Bahama a perpetual, irrevocable, worldwide, royalty-free right to use, disclose, reproduce, modify, license, distribute, and otherwise exploit that feedback without restriction or compensation to you.

Unless you tell us otherwise in writing, we may identify you or your company as a Bahama user using your name and logo in customer lists, pitch materials, and similar marketing. We will not imply endorsement or disclose confidential project details without permission.

You may stop using Bahama at any time and may request account deletion by contacting us or using available account tools. You remain responsible for outstanding fees and obligations incurred before termination.

We may suspend, limit, or terminate your account, projects, deployments, resources, tokens, API access, MCP access, or paid services if we believe you violated these Terms, failed to pay, created risk for Bahama or others, caused provider issues, exposed credentials, submitted unlawful or harmful content, exceeded limits, or if continued service would create legal, security, operational, or business risk.

After termination, we may delete or disable access to Customer Content, project metadata, deployments, databases, secrets, logs, and resources according to our retention practices and provider constraints. You are responsible for exporting any content or data you need before terminating or deleting your account.

Bahama is provided on an as-is and as-available basis. To the maximum extent permitted by law, Bahama disclaims all warranties, whether express, implied, statutory, or otherwise, including warranties of merchantability, fitness for a particular purpose, title, non-infringement, availability, security, accuracy, reliability, and uninterrupted or error-free operation.

Bahama does not warrant that deployments will succeed, that generated runtime contracts or AI-agent actions will be error-free, that third-party infrastructure will remain available, that data will never be lost, that security controls will prevent all unauthorized access, or that your use of Bahama will satisfy legal, regulatory, platform, marketplace, or provider requirements.

To the maximum extent permitted by law, Bahama and its affiliates, officers, employees, contractors, licensors, and providers will not be liable for indirect, incidental, special, consequential, exemplary, punitive, or enhanced damages; lost profits; lost revenue; lost business; loss of goodwill; loss, corruption, or recovery of data; security incidents; service interruption; cost of substitute services; or damages arising from third-party services, even if advised of the possibility of those damages.

To the maximum extent permitted by law, Bahama's total liability for all claims arising out of or relating to the service or these Terms will not exceed the greater of one hundred U.S. dollars or the amounts you paid to Bahama for the service giving rise to the claim during the six months before the event giving rise to liability.

Some jurisdictions do not allow certain limitations of liability, so some of the above limitations may not apply to you. In those jurisdictions, liability is limited to the fullest extent permitted by law.

You will defend, indemnify, and hold harmless Bahama and its affiliates, officers, employees, contractors, licensors, and providers from and against any claims, damages, losses, liabilities, costs, and expenses, including reasonable attorneys' fees, arising from or related to your Customer Content; your applications or end users; your use of Bahama; your violation of these Terms or law; your infringement or misappropriation of rights; your payment, tax, or consumer obligations; your connected third-party services; or any dispute between you and another person or entity.

These Terms are governed by the laws of the State of California, without regard to conflict-of-laws rules. Before filing a formal claim, you and Bahama agree to try to resolve disputes informally by sending a written notice describing the dispute and allowing thirty days for good-faith resolution.

Except for small claims, intellectual property claims, or requests for emergency injunctive relief, any dispute arising out of or relating to these Terms or Bahama will be resolved by binding individual arbitration administered by the American Arbitration Association under its applicable rules. You and Bahama waive the right to a jury trial and agree that disputes will be brought only on an individual basis, not as a class, consolidated, representative, or private attorney general action.

You may opt out of arbitration by sending legal@bahama.ai written notice within thirty days after you first accept these Terms. If the arbitration agreement is found unenforceable, the state and federal courts located in California will have exclusive jurisdiction, and you consent to venue and personal jurisdiction there.

We may update these Terms from time to time. If we make material changes, we will provide reasonable notice by updating the date above, posting in the service, sending an email, or using another reasonable method. Updated Terms become effective when posted or as stated in the notice. Your continued use of Bahama after updated Terms become effective means you accept the updated Terms.

• These Terms, together with referenced policies and any applicable order, plan, or written agreement, are the entire agreement between you and Bahama for the service.
• If any provision is unenforceable, the remaining provisions remain in effect.
• You may not assign these Terms without our consent. We may assign these Terms in connection with a merger, acquisition, reorganization, sale of assets, or by operation of law.
• Our failure to enforce a provision is not a waiver.
• Sections that by their nature should survive termination will survive, including payment obligations, Customer Content licenses needed for prior operation, intellectual property, disclaimers, limitations of liability, indemnity, dispute terms, and miscellaneous provisions.
• Notices to Bahama should be sent to legal@bahama.ai unless another address is required by law or provided in a separate written agreement.

Questions about these Terms may be sent to legal@bahama.ai. Billing questions may be sent to support@bahama.ai. Security reports may be sent to security@bahama.ai. Privacy requests may be sent to privacy@bahama.ai.