These Terms of Service ("Terms") govern your access to and use of the "okay run" ephemeral microVM computing service (the "Service"), operated by Synlace ("Synlace", "we", "us", or "our"). By registering for an account, authenticating via Single Sign-On (SSO), or using the Service (including our CLI tool and web console), you agree to be bound by these Terms.

1.1 Service Description & Ephemerality

The Service provides disposable, short-lived virtual machines ("microVMs") powered by Firecracker technology.

• Strict Ephemerality: All microVMs are entirely ephemeral. Upon termination of a session—whether initiated by you, automatically triggered by resource/balance limits, or caused by system reboots—all data, configuration, and state within that microVM are permanently, immediately, and irreversibly destroyed.
• No Backups: We do not take backups, snapshots, or maintain replicas of your microVM volumes. You are solely responsible for exporting any code, logs, or data you wish to keep prior to terminating a session.

1.2 Account Registration & Authentication

We utilize passwordless Single Sign-On (SSO) through third-party identity providers (Google, GitHub, and Microsoft). You must maintain the security and access of your corresponding third-party accounts. You may generate authentication tokens to use the Service via our Command Line Interface (CLI). You must treat your API tokens as securely as passwords. Any action taken using your tokens is deemed to be taken by you.

1.3 Billing, Balances, & Automatic Termination

Usage is billed dynamically per-second at a rate of $0.01 per virtual machine boot fee plus $0.01 per hour of execution time ($0.00000278 per second). You must maintain a positive balance of account credits to run microVMs. Credits may be purchased using our payment processor (Stripe) in custom amounts between $2.00 and $100.00.

If your available balance reaches $0.00, our system automatically terminates all of your running microVMs immediately to prevent debt accumulation. We accept no liability for data lost during automated zero-balance terminations.

Any registration bonuses (such as the default $1.00 sign-up credit) are non-transferable, non-refundable, and have no cash value.

1.4 Suspension & the 3-Strikes Abuse Policy

We enforce automated security monitoring of hypervisor network and system activity. Actions violating our Acceptable Use Policy (AUP) trigger a "Strike." Upon accumulating three (3) strikes, your account is immediately and permanently suspended (banned).

If your account is suspended, all currently active microVM sessions are instantly destroyed, all session tokens are revoked, and you will be logged out. Banned users may contact support@okayrun.io to request account review.

1.5 Limitation of Liability & Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND. SYNLACE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL SYNLACE BE LIABLE FOR ANY INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES (INCLUDING LOSS OF DATA, REVENUE, OR VIRTUAL MACHINE STATE) ARISING OUT OF OR IN CONNECTION WITH THE SERVICE.

This Acceptable Use Policy (AUP) defines the prohibited uses of the "okay run" microVM platform. It is designed to protect our infrastructure, our users, and the broader internet from malicious activity.

2.1 Prohibited Network Activities

You may not use our microVMs or associated networking components to:

• Initiate or participate in Distributed Denial of Service (DDoS) attacks, SYN floods, or traffic amplification schemes.
• Conduct unauthorized port scanning, vulnerability scanning, or network penetration testing against external targets.
• Host Command-and-Control (C2) servers or botnet controllers.
• Proxy, tunnel, or anonymize traffic for illegal or unauthorized purposes (including running open relays or open proxies).
• Transmit unsolicited bulk email (Spam) or host phishing pages.

2.2 Prohibited System Activities

You may not use our platform to:

• Mine cryptocurrency (such as Monero, Bitcoin, or any other proof-of-work/proof-of-stake asset).
• Attempt hypervisor breakouts, privilege escalation on hypervisor hosts, or network isolation bypasses.
• Engage in resource abuse aimed at degrading host machine performance (e.g., deliberate CPU/memory thrashing or pinning).
• Store, execute, or distribute malware, ransomware, spyware, or malicious binaries.

2.3 Automatic Detection & 3-Strikes Enforcement

Our hypervisor agents actively monitor network traffic patterns and system metrics.

Violations of this AUP automatically trigger the termination of the offending microVM session, and a Strike is logged against your account profile. Accumulating three strikes results in an immediate account suspension. All active VMs across your account are forcibly terminated, all access credentials are deleted, and you will be barred from authenticating. If you believe your session was falsely flagged, contact support at support@okayrun.io.

Synlace ("we", "us") is committed to protecting your privacy. This policy outlines how "okay run" collects, processes, and stores data.

3.1 Information We Collect

We collect the minimum possible data required to securely operate the Service:

• Account Data: When you log in via SSO (Google, GitHub, or Microsoft), we collect your email address, display name, and profile image URL. We do not collect or store passwords.
• Technical Logs: We log API requests, client IP addresses (for security and geo-verification), CLI commands sent to our control plane, and VM performance metrics (boot duration, termination reasons).
• Payment Data: All payments are processed securely by Stripe. We do not store or process credit card numbers or raw CVV data on our servers. We only receive transactional metadata (amount, transaction ID, payment status) from Stripe.

3.2 How We Use Information

We use your data to:

• Authenticate your identity and manage API sessions.
• Calculate and enforce per-second billing.
• Detect network and resource abuse.
• Notify you of essential account-related issues (e.g., strikes or balance warnings).

3.3 Data Retention

• VM State Data: All filesystem data, environment variables, and memory states of your microVMs are permanently deleted from hypervisor storage immediately upon VM termination. No lingering remnants are retained.
• Account and billing records: Transaction history, promotional code usage, and login details are retained as long as your account remains active or as required by financial compliance laws.

3.4 Third-Party Sharing

We do not sell, rent, or trade your personal data with any third-party advertisers or brokers. Data is shared only with our core processing infrastructure partners: Stripe (to securely handle payment processing and card details) and Identity Providers (Google, GitHub, Microsoft) solely to verify authentication.

The "okay run" platform does not use tracking, advertising, or behavioral cookies. We use minimal local storage and session elements solely for technical execution.

4.1 Strictly Necessary Technologies

Local Storage (`jwt_token` / session credentials): We use local storage to hold your cryptographically signed JSON Web Token (JWT). This is strictly necessary to keep you authenticated in the web console and CLI without forcing you to re-authenticate on every action.

4.2 Third-Party Analytics and Pixels

We do not load third-party ad networks, tracking pixels, or cross-site tracking scripts. By using the Service, you consent to our use of these local storage and session tokens to preserve your login session.

Our pricing is designed to be completely transparent and consumption-based. You only pay for what you actually use down to the exact second.

5.1 Computational Billing Mechanics

Billing is calculated on a per-second, per-virtual-machine basis:

• Boot Fee: A flat fee of $0.01 is charged instantly upon executing a microVM boot command.
• Runtime Rate: $0.01 per hour ($0.00000278 per second) is billed for the entire duration that a microVM remains in a RUNNING state.
• Deduction Frequency: Balance deductions are evaluated and applied to your account in real-time.

5.2 Account Limits & Terminations

• Minimum Top-up: $2.00 USD.
• Maximum Top-up: $100.00 USD.
• Zero-Balance Rule: Our real-time Billing Enforcer monitors balances continuously. If your credit falls to $0.00, running sessions are instantly terminated. It is your responsibility to maintain sufficient pre-funded credits.

6.1 General Finality of Credits

Because computing resources are reserved and billed in real-time, all purchases of okay run account credits are final and non-refundable.

6.2 Case-by-Case Exceptions

We want to be fair. Refund requests may be submitted to support@okayrun.io within 14 days of payment if:

• The purchased credits have not been used (0% runtime deducted).
• A systemic, documented failure of our infrastructure prevented you from booting or utilizing your VMs.

Approved refunds will be processed back to the original Stripe payment method.

We take the security of our hypervisors and control plane seriously. If you discover a vulnerability, we appreciate your cooperation in reporting it to us in a responsible manner.

7.1 Scope

Our security boundaries of interest include:

• Hypervisor escapes (escaping a Firecracker microVM to the host system).
• Unauthorized host resource access or network isolation bypasses.
• Control plane bypasses (booting VMs, modifying balances, or accessing other accounts without valid credentials).

7.2 How to Report

Please email your findings to security@okayrun.io or support@okayrun.io with:

• A detailed description of the vulnerability.
• Step-by-step instructions to reproduce or a Proof of Concept (PoC).
• Please do not perform testing that disrupts services for other users (DDoS, brute-forcing, etc.).

If you detect malicious activity originating from our IP ranges or network blocks, please report it to our security response team immediately.

• Email: abuse@okayrun.io
• Alternative: support@okayrun.io

8.1 Required Reporting Information

Please include standard payload reports:

• Attack target IP and ports.
• Source IP (our host or VM IP).
• Exact timestamps in UTC.
• Raw packet captures (pcap), log files, or header logs if available.

Our automated strike system handles the majority of network scans, but we investigate manual abuse complaints and enforce immediate suspensions on malicious users.

"okay run" is an ephemeral cloud computing platform owned and operated by Synlace.

• Corporate Entity: Synlace AI
• Corporate Website: https://synlace.ai
• Support Email: support@okayrun.io