Terms of Service

For clarity, some terms used in these Terms mean the following:

Nestiel is a team email management tool for users on their own domain. It does not connect to SMTP or IMAP directly; all email send, receive, and delivery events are handled through the third-party Resend HTTP API. Login one-time codes are delivered by email.

Email metadata, conversations, orgs, and member information are stored in a PostgreSQL database, and email attachments are stored in the object storage you configure (e.g., Aliyun OSS). In self-hosted deployments, both the database and object storage are provided and controlled by you.

Specific features may be added or removed with new versions of the service, without individual notice.

You log in via an email one-time code (OTP). You must safeguard your login credentials and are responsible for all activity under your account.

Organization administrators (admins) can configure org keys, invite members, and manage mailboxes and sending domains. You confirm you have authority to invite members and are responsible for the activity of members within your org.

If you find your account has been used without authorization, take immediate action and notify us via the contact channel listed in these Terms.

You agree to use the service lawfully and in compliance with applicable rules, and you are solely responsible for all content sent through the service. You must not use the service to (including but not limited to):

The service relies on third-party services, including but not limited to Resend for email transport, an object storage provider (e.g., Aliyun OSS) for attachment storage, an email service used to deliver login one-time codes, and (when you enable AI features) an OpenAI-compatible large language model provider you configure.

These third-party services are operated by their respective providers and are subject to their own terms of service and privacy policies. You should read and comply with them when using the relevant features. We are not responsible for the availability or stability of third-party services, or for losses caused by them.

The intellectual property in the Nestiel software, interface, trademarks, documentation, and related content belongs to the operator and is protected by law. Without written permission, you must not copy, modify, distribute, sell, or use them commercially (unless the open-source license accompanying the software provides otherwise).

Email content you create, send, or store through the service belongs to you or the relevant rightsholder; you grant us a limited license to process such content solely as necessary to provide the service.

The service is provided on an 'as is' and 'as available' basis. To the maximum extent permitted by law, we make no express or implied warranties regarding fitness for purpose, uninterrupted operation, error-free behavior, or suitability for your specific needs.

Whether email is ultimately delivered depends on third-party services, recipient servers, anti-spam policies, and other factors. We do not guarantee that every email will be delivered, will avoid bounces, or will not be classified as spam.

Please note in particular: under a 'trusted runtime' design assumption, sensitive credentials (such as the Resend API key, object storage keys, and LLM API key) are currently stored in plaintext in the database. The service does not provide end-to-end encryption. In self-hosted deployments, you are responsible for evaluating and accepting the associated risks.

To the maximum extent permitted by law, we are not liable for any indirect, incidental, special, or consequential damages (including data loss, business interruption, or loss of profit) arising from use of or inability to use the service.

In any case, our aggregate liability to you under these Terms is capped at the amount you have actually paid (if any) for the service; for free use, liability is limited to what is required by law.

If you self-host the software, you act as the deployer and operator, and you are solely responsible for the configuration, operation, backup, and security of the servers, database, object storage, network, and credentials.

In self-hosted deployments, we provide only the software itself on an 'as is' basis, and we do not access, store, or process any data in your instance, nor are we responsible for its availability, security, or compliance. You are responsible for ensuring your deployment and data processing activities comply with applicable law.

We may update, adjust, suspend, or terminate the service according to operational needs, and we will make reasonable efforts to notify significant changes.

If you breach these Terms, we may suspend or terminate the hosted service without prior notice. You may also stop using the service and delete your account at any time.

These Terms are governed by the laws of the mainland of the People's Republic of China (excluding conflict-of-law rules).

Any dispute arising from or related to these Terms should first be resolved through friendly negotiation; failing that, either party may bring proceedings before the competent court at the operator's location. If you use the service outside mainland China, you must also comply with the mandatory laws of your jurisdiction.

We may revise these Terms from time to time. Revised Terms are published on the website and take effect from the date of publication. Continuing to use the service after an update constitutes acceptance of the revised Terms.