Effective October 12, 2026; updated November 13, 2026
November 13 update: the Privacy section now covers the nl-veil browser link extension for Chrome and Edge, and Google Analytics on this website.
October 12 update: section 8 extends the indemnity to project partners and supporting organizations, subject to its stated limits.
nl-veil (the Veil) is a free, open-source project maintained as an independent project. These terms explain user responsibility, the project's ZERO involvement principle, warranty and liability limits, and how the app handles data.
These terms cover official nl-veil distributions and project materials, including its desktop app, server, command-line and web clients, agents, swarms, Agent Garrett, tater-tots, tools and optional integrations. “Developers” means the project's authors, copyright holders, maintainers and contributors. If you do not agree, do not use official project offerings under these terms. If you act for an organization, you must have authority to accept any applicable terms for that organization.
These terms do not replace the MIT license, revoke permissions already granted by it, or impose additional conditions on exercising its rights to use, copy, modify, distribute or sell the MIT-licensed code. Dependencies retain their own licenses. Optional security tools connect to an external service whose implementation is not bundled with NL-Veil. If a provision here conflicts with a component's open-source license, that license controls for that component. See the repository's MIT license.
The project and its developers have ZERO involvement in, and do not assume responsibility for, the activities a user independently carries out with nl-veil. Making the software available, contributing code or providing general project support does not constitute participation in, approval of, endorsement of, supervision of, or authorization for your tasks, targets, content or outcomes.
The developers do not become your agent, partner, employer, adviser or operator merely because you use the software. The term “agent” describes a software feature; it does not appoint a developer as your legal representative. Your configuration, instructions and use of the tools remain your responsibility, including unattended work and actions you delegate to software agents.
This clause concerns independently chosen user activities. It does not erase actual developer participation in a particular activity or exclude responsibility for conduct or obligations that applicable law does not allow to be excluded.
You are responsible for your prompts, files, credentials, connected accounts, permissions, deployments and use of generated content. Obtain all necessary rights and permissions before accessing, testing, scanning or changing a system. Use security tools only on systems you own or are expressly authorized to test, within the approved scope. A tool being available is not permission to use it against a target.
Comply with applicable law, privacy obligations, intellectual-property rights and the terms of your service providers. You remain responsible for unlawful access, fraud, malware, harassment, infringement or other misuse you carry out with the software. The project does not authorize or endorse such conduct.
Review and test generated code and other output before relying on, publishing or deploying it. Maintain backups, protect credentials, restrict permissions and set appropriate spending and execution limits. Agents can read and change files, run commands, contact services and deploy resources. Cloud agents may continue working and incurring charges after you close the desktop app; stop or remove those resources separately when necessary.
AI output can be inaccurate, incomplete, insecure, biased or unsuitable, and may resemble material subject to third-party rights. A successful tool call, benchmark, test or agent report does not guarantee correctness, security, legality or fitness for your circumstances. Verify important claims and results independently.
The software and its output are not professional legal, medical, financial or other regulated advice and are not designed as the sole safeguard for emergency, life-critical or safety-critical decisions.
Models, plugins, websites, Microsoft Store, GitHub, Cloudflare and other connected services have their own operators, terms, licenses, privacy practices and charges. You are responsible for selecting and configuring the services you use and paying your provider charges. Free nl-veil software does not mean free cloud computing, storage, model inference or other third-party services. The project does not guarantee third-party availability, behavior, security or continued compatibility.
nl-veil's developers will always strive to improve the algorithms and tooling behind the project, pursue state-of-the-art approaches where appropriate, and uphold high open-source engineering standards through transparent source, reproducible evidence, testing and community review.
This is a statement of development intent, not a warranty that the software is the best available, meets a particular certification or benchmark, or will achieve any particular result. No contributor promises uninterrupted maintenance, support, updates, compatibility or a deadline for fixes. Features may change or be discontinued, subject to applicable legal and distribution-platform obligations.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, NL-VEIL, ITS AGENTS, TOOLS, OUTPUT AND PROJECT MATERIALS ARE PROVIDED “AS IS” AND “AS AVAILABLE”, WITHOUT WARRANTIES OF ANY KIND, EXPRESS, IMPLIED OR STATUTORY, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT.
The developers do not warrant that the software or output will be accurate, secure, error-free, uninterrupted, free of harmful components, or suitable for your hardware, project or intended use. Documentation, support responses, demonstrations and performance results do not create additional warranties.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE DEVELOPERS SHALL HAVE NO LIABILITY FOR ANY CLAIM, DAMAGE, LOSS OR OTHER LIABILITY ARISING FROM, OUT OF, OR IN CONNECTION WITH NL-VEIL, ITS AGENTS, TOOLS, OUTPUT OR YOUR USE OF THEM, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE) OR OTHERWISE.
This includes, where legally excludable, direct, indirect, incidental, special, consequential and punitive damages; lost profits, revenue, business or opportunities; data loss or corruption; security incidents; unauthorized disclosure; damage to systems; provider charges; and the cost of replacement services, even if a developer was advised of the possibility. These limits apply to the greatest extent allowed even if a remedy fails of its essential purpose.
Nothing in these terms excludes or limits liability for fraud, deliberate misconduct, death or personal injury, or any other matter to the extent such liability cannot lawfully be excluded or limited. Non-waivable consumer rights and other mandatory protections prevail over these terms.
For this section, “protected parties” means the developers and any partner, sponsor, collaborator, distributor or supporting organization involved with nl-veil, including providers of models, cloud services, hosting, tools and integrations used with nl-veil, and their respective directors, officers, employees, contractors and representatives. Protection applies only to claims connected with nl-veil or those related services; this definition does not represent that a named provider has a commercial partnership with the project.
To the extent permitted by applicable law, and only where these terms form an enforceable agreement, you agree to indemnify and hold harmless the protected parties against third-party claims and reasonable resulting losses, damages, liabilities and costs, including reasonable legal fees, to the extent caused by your unlawful use of nl-veil or its agents, infringement of another person's rights, or material breach of these terms.
This does not cover loss caused by a protected party's own wrongful conduct, apply beyond the share of loss attributable to your conduct, or shift liability or waive rights that cannot lawfully be shifted or waived. It does not amend any open-source license or a provider's separate agreement with you.
The protected parties are intended beneficiaries of this indemnity clause and may rely on or enforce it only to the extent applicable law permits. A party seeking indemnification must give reasonably prompt notice of the claim and reasonable cooperation; delayed notice reduces your obligation only to the extent the delay materially prejudices your ability to respond. No settlement may impose an admission, payment or other obligation on you or a protected party without that party's prior written consent.
You retain any rights you have in your own content. The project does not claim ownership of your prompts, files or outputs by virtue of your use of nl-veil; this is not a guarantee that AI output is copyrightable or free of third-party rights. The MIT license does not grant trademark rights or permission to imply that the developers endorse your fork, service, content or activities.
Changes will be published on this page with an updated effective date. Material changes will be identified here and apply prospectively only to the extent valid notice and acceptance requirements under applicable law are met. Continued use constitutes acceptance only where the law permits; posting a change does not retroactively change an existing license or waive mandatory rights.
If a provision is unenforceable, it applies only to the lawful extent, and the remaining provisions continue to apply where legally possible. Any waiver must be express; a delay in enforcement is not itself a waiver. These terms do not override mandatory local law, applicable open-source licenses or binding Store obligations.
For project and policy questions, use the public project support tracker. Do not include credentials, private code or sensitive personal information.
The data used by a task depends on the model, tools and connected services you choose. Agreement to the terms above is not blanket consent to access or disclose personal information. Any consent required by law or the distribution platform must still be obtained for the relevant feature.
The app stores conversations, project memory, settings, logs and credentials in its local data folder. Agents can read project files, write changes and run commands as part of the tasks you give them. Use the app with projects you intend it to access and review the resulting changes and activity.
Portable installs normally keep data next to the app. Microsoft Store installs use the package's per-user LocalState folder. A configured data-directory override can change that location. Local files are subject to your Windows account's access controls and any backup or sync software you use.
Local inference can process prompts on your machine using the built-in model engine or a local model provider such as Ollama. Model downloads contact the hosting service. Choosing a hosted provider sends prompts, conversation context and relevant project or tool content to that provider. Its terms, privacy practices and charges apply.
Web searches, browsing, remote tools and other network features contact their destinations and send the inputs needed for that operation. A local model does not make network tools offline. Connected providers and websites may receive network information such as your IP address.
Connecting Cloudflare authorizes the features you use in your own account. These may include Workers AI, Workers, R2 storage, Containers and Tunnel. Workers AI receives model requests. R2 backup can upload conversations and related app data; automatic backup is enabled by default for a connected account and can be turned off in the app. Cloud tasks upload their task inputs and runtime to your account and may continue while the desktop app is closed. Cloudflare's terms and privacy practices apply.
The pages of this website (veil.garrettstimpson.ca, including the web chat page) use Google Analytics 4, loaded through Google Tag Manager. It records page views, scrolling, clicks on links that leave the site, site searches, form interactions, embedded video plays and file downloads, together with what Google Analytics collects with every visit: the page address and title, the referring page, browser, device, language and an approximate location derived from your IP address. Google processes this data under its own privacy policy.
A banner asks before analytics cookies are set. Until you press Accept, or if you press Decline, Google's consent mode sends only cookieless pings without an identifier. Ad storage, ad user data and ad personalization are always off. Your choice is kept in your browser's local storage.
On the web chat page, the tag never receives what you type, your messages, files, keys or the model's replies; the login code from Cloudflare is cleared from the address before the tag loads. Following a link out of the site, including one in a chat reply, is recorded as an outbound click with that link's address. The desktop app, its server and the browser link extension contain no analytics.
The optional nl-veil browser link extension for Chrome and Edge lets the veil drive one tab in your browser. The extension opens that tab itself, pinned and in the background, and attaches the browser's debugger only to it. The tab uses your browser profile, so the sites it opens see your existing logins.
What the extension handles: the commands it is sent for that tab and their replies, which can include the content of the pages it opens, plus that tab's console messages and network requests (addresses, status and headers). It passes these only to whoever drives the tab: a veil server on your own computer at 127.0.0.1, or the nl-veil web chat at veil.garrettstimpson.ca/chat/ open in the same browser, and the web chat only after you tick “Let the web chat drive a tab” in the extension's popup. The web chat then sends what it reads to the model and harness in your own Cloudflare account, as described above.
What it stores, in the browser's extension storage: the local server's port and pairing token, the pause setting, your web chat choice and the id of the veil's tab. The extension sends nothing to the developers or any project server, and has no analytics or telemetry. Pausing, disconnecting or unticking the web chat box closes the veil's tab; removing the extension removes its stored settings.
Official portable bundles check GitHub for app releases. Microsoft Store manages updates for Store installations. Those services handle downloads and associated network requests under their own privacy policies.
You can remove conversations and other local data using available app controls, or close the app and remove its data folder. Back up anything you wish to keep. Removing the app or local data does not remove copies held by a hosted provider, your own backups or resources deployed into a cloud account. Manage those copies and revoke connected-service access with the relevant provider. Previously deployed cloud tasks and resources may need to be stopped or deleted separately.
For questions about the app's data handling, use the project support tracker. That tracker is public; do not post credentials, private source code or sensitive personal information. The source is available at github.com/gary23w/nl-veil. This page will be updated when the described behavior changes.