Terms of service

Service and account

KilatBot is operated by PT Kilat Inovasi Cerdas (“the operator”, “we”). KilatBot provides customizable AI agents for businesses (built on the open-source Hermes Agent by Nous Research), with websites and private pages they publish, and PocketBase backends for existing customers. Existing n8n services remain supported; n8n is closed to new deployments. Create an account to manage your workspace, agents, services, and wallet. You must be at least 18 years old to create an account. Keep your account, deployment credentials, and API keys secure. You are responsible for activity you authorize and for having permission to use content you deploy.

Wallet, payments, and renewal

Fund your IDR wallet through the QRIS instructions shown in checkout, using GoPay or any QRIS-compatible payment app. Pay the exact displayed amount and check payment status before paying again. Payment matching runs periodically; payment confirmation and provisioning are not guaranteed within a fixed time. Contact support for a payment that remains unmatched.

Each service purchases its own 30-day hosting term from wallet balance, not a calendar month. Review the displayed price and available capacity before purchasing. Auto-renewal charges your wallet when that service is due; stopping or restarting does not disable it. Failed renewal gets three days of grace from paid-through, then suspension. Turning off auto-renewal suspends at paid-through without failure grace. Data is retained for seven days after confirmed runtime suspension; suspension and purge notices are sent, with at least 24 hours after a purge warning before removal. Use authenticated Support for manual recovery or export. Payment alone does not restart a suspended service, and recovery is unavailable once deletion begins. Remote access may persist while a failed stop is retried. Wallet credit is not a bank account or savings product.

Refund requests are reviewed under the refund policy. There are strictly no cash, bank, or payment-method refunds to real money; approved refunds are issued exclusively as non-withdrawable wallet balance on a case-by-case basis. A wallet top-up does not guarantee deployment capacity. Purchases and deployments depend on available hosts in your selected region.

Capacity, API keys, outages, and backups

Resources shown for a plan are allocations, not performance benchmarks or a guarantee of unlimited disk, bandwidth, or availability. KilatBot agents use Kilat AI, paid from your plan's Credits and then your Balance at the published prices, or your own provider API key (BYOK); n8n workflows may also use external providers. With your own key you contract with and pay that provider separately; its limits, charges, and outages are outside the KilatBot price. PocketBase does not require a model provider key.

The smallest sizes (Small agents, Starter backends) are light-use hobby tiers. Large workflow payloads, agent tools, subprocesses, or database workloads can exhaust their memory; larger sizes provide more headroom but no guarantee for a particular workload. Infrastructure operators can access container configuration and persistent data. Use separate, least-privilege provider keys with spending limits; do not use unrestricted production keys or sensitive workloads. Revoke or rotate keys after removing a service. For PocketBase, keep superuser credentials private and configure collection API rules to restrict access to your data.

Hosting, networking, payment providers, and upstream applications may suffer outages or maintenance. Backends run on a mix of servers from several providers and are provided as is, on a best-effort basis: no uptime SLA, warranty, or fixed recovery deadline is promised. Flex agents on paid plans run on major cloud providers, such as Amazon Web Services, and KilatBot aims for 99.5% availability each month, as described in the Flex docs. That is a target, not a guarantee: missing it does not entitle you to a refund or credit. Keep independent backups of important data and export it before deleting a service or allowing it to expire. Do not rely on KilatBot as your only copy. Deletion removes application data; recreation preserves the persistent volume but is not a backup.

Kilat AI usage limits

Kilat AI usage may be limited per 5-hour window and per week, shown in your dashboard as a percentage and an estimated number of conversations, with the time each limit resets. The dashboard does not show exact amounts. Limits are promotional. We may change the limits, how much each model counts against them, and the windows. We announce a change in your dashboard before it applies. A change never raises the price of a plan period you have already paid for. Exact limits are not guaranteed.

Where we describe a limit as a number of conversations, such as “about 100 conversations per 5 hours”, that number is an estimate. What a conversation really uses depends on its length, its attachments and the model. The estimate is not a guaranteed quantity.

Usage beyond the limits is paid, and is charged only if you turn it on.

Connected AI assistants

You can connect an AI assistant, such as Claude or ChatGPT, to your workspace through KilatBot MCP and approve what it may do. Actions it takes with your approval count as actions you authorize: check what it proposes before allowing changes. Connected assistants cannot make purchases or change your plan. You can disconnect an assistant at any time under Account, then MCP. The assistant's provider is responsible for the assistant itself; see the privacy policy for what KilatBot receives and keeps.

Data processing for your customers' data

This section applies when your agent handles personal data of other people, such as customers who write to your Telegram bot, your Instagram account or your shop's customer agent. Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022), you are the data controller for that data and we are your data processor. This section is the data processing agreement between you and us. It applies from the moment you accept these terms.

• Your instructions. We process that data only to provide the service, as these terms and your settings instruct. We do not use it for our own purposes, sell it, or use it to train AI models. We tell you if we believe an instruction breaks the law.
• Your duties. You need a lawful basis to use your customers' data, and you must tell them how it is used, including that an AI agent answers them.
• Confidentiality. Our staff access your agent's data only when needed for support, security or operations, and are bound to keep it confidential.
• Sub-processors. You allow us to use the providers named in the privacy policy, including those that process data outside Indonesia. We update that list before a new provider starts handling the data. If you object, you can stop using that feature or the service.
• Security. We encrypt data in transit and on disk, keep each workspace's agents isolated from other workspaces, and limit access to the workspace's own members.
• Breach notice. If your customers' data is exposed, we notify you in writing without undue delay and within 3 × 24 hours of becoming aware, with what we know, so you can meet your own duties.
• Requests. We help you answer requests from your customers and from authorities, through the dashboard tools and through support.
• Deletion. When you delete an agent, or your service ends, we delete its data on the schedule in the privacy policy. Export what you need first.

Acceptable use and changes

Do not use the service for unlawful content or activity, malware, phishing, spam, unauthorized access, credential theft, denial-of-service attacks, or infringement of others' rights. Do not abuse shared infrastructure or evade access controls. Access may be restricted or suspended to address abuse or protect systems; contact support if you believe a restriction is mistaken.

Plan availability, prices, and these terms may change. Review the price shown before a new purchase or renewal and the effective date on this page. These terms are published in Indonesian and English. If the two differ, the Indonesian version prevails for users in Indonesia. Nothing here excludes statutory consumer rights or remedies that cannot lawfully be excluded.