Terms of Service

Effective date: April 5, 2026

1. Introduction

These Terms of Service ("Terms") govern your use of the BundleLLM SDK, website, and related services operated by Dewey Labs ("we", "us", or "our"). By using our services, you agree to these Terms. BundleLLM provides a JavaScript SDK that enables websites to offer AI chat powered by users' own LLM provider accounts.

2. Definitions

  • SDK — The BundleLLM JavaScript library embedded on third-party websites.
  • Site Owner — A developer or business that integrates the BundleLLM SDK into their website.
  • End User — A person who connects their AI provider through the SDK on a Site Owner's website.
  • Provider — An LLM service (e.g., OpenRouter, Anthropic) that End Users connect to.

3. The Service

BundleLLM provides: (a) a JavaScript SDK that Site Owners embed on their websites, (b) an OAuth redirect handler that facilitates authentication with supported Providers, and (c) documentation and tools for integration. BundleLLM does not provide AI models, store conversation data, or process AI requests. All AI interactions occur directly between the End User's browser and their chosen Provider.

4. Site Owner Obligations

Site Owners who integrate the BundleLLM SDK must:

  • Provide End Users with a visible way to disconnect their Provider at any time.
  • Display token usage information so End Users can see the cost of each interaction.
  • Show which Provider and model the End User is connected to.
  • Not intercept, log, store, or transmit End Users' API keys or Provider credentials.
  • Not inject misleading, harmful, or deceptive content into the context or system prompt without the End User's knowledge.
  • Include a link to their own privacy policy explaining how they handle data on their site.
  • Comply with all applicable laws and regulations, including data protection laws.

5. End User Responsibilities

End Users are responsible for:

  • Managing their own Provider accounts and API keys.
  • Understanding that API usage on third-party sites is billed to their Provider account.
  • Reviewing the context/system prompt that Site Owners inject (visible via token usage).
  • Disconnecting from sites they no longer wish to use.
  • Reviewing and complying with their chosen Provider's terms of service and acceptable use policies.

5a. Provider Terms of Service

Your use of AI models through BundleLLM is subject to the terms of service of the underlying Provider. BundleLLM is not a party to the agreement between you and your Provider. You are solely responsible for complying with your Provider's terms, including any restrictions on API key usage, data handling, and acceptable use.

Provider terms of service:

BundleLLM does not warrant that its SDK or services are authorized or endorsed by any Provider. If a Provider's terms conflict with these Terms, the Provider's terms govern your use of that Provider's services.

6. API Keys and Credentials

When an End User connects a Provider via API key, the key is stored in the browser's localStorage on the Site Owner's domain. BundleLLM does not transmit, store, or have access to these keys on our servers. When an End User connects via OAuth (e.g., OpenRouter), the OAuth flow is handled by our redirect server, which exchanges the authorization code for an API key and returns it directly to the End User's browser. We do not store the resulting API key.

7. Prohibited Uses

You may not:

  • Use the SDK to collect, harvest, or exfiltrate End Users' API keys or credentials.
  • Modify the SDK to remove user protections (disconnect, token visibility).
  • Use the SDK for any illegal, fraudulent, or harmful purpose.
  • Resell or redistribute the SDK as a standalone product.
  • Attempt to reverse-engineer the OAuth redirect handler.

8. Intellectual Property

The BundleLLM SDK, website, documentation, and brand are the property of Dewey Labs. The SDK is provided under a proprietary license for integration on your websites. You may not claim ownership of the SDK or create derivative works for redistribution.

9. Disclaimers

THE BUNDLELLM SDK, WEBSITE, AND ALL RELATED SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.

Without limiting the foregoing, Dewey Labs does not warrant or guarantee:

  • The availability, accuracy, reliability, or uptime of the SDK or OAuth redirect handler.
  • The accuracy, quality, safety, or legality of any content generated by AI models accessed through the SDK.
  • The billing practices, pricing, availability, or terms of any AI Provider (including OpenRouter and Anthropic).
  • The behavior, compliance, or security practices of any Site Owner who integrates the SDK.
  • That the SDK will be error-free, uninterrupted, or free of harmful components.
  • That API keys stored in the browser's localStorage will remain secure from all threats.

End Users interact with AI Providers entirely at their own risk. Dewey Labs is not a party to the relationship between End Users and their chosen Providers.

10. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL DEWEY LABS, ITS OFFICERS, DIRECTORS, EMPLOYEES, OR AGENTS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR OTHER INTANGIBLE LOSSES, ARISING OUT OF OR RELATED TO YOUR USE OF OR INABILITY TO USE BUNDLELLM, REGARDLESS OF THE THEORY OF LIABILITY (CONTRACT, TORT, STRICT LIABILITY, OR OTHERWISE), EVEN IF DEWEY LABS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Without limiting the foregoing, Dewey Labs is not liable for:

  • Unexpected API charges incurred by End Users through their Provider accounts.
  • Data loss, corruption, or unauthorized access to API keys stored in the browser.
  • Service interruptions, downtime, or errors in the SDK or OAuth redirect handler.
  • Actions taken by Site Owners, including interception of user data or API keys.
  • Content generated by AI models, including harmful, inaccurate, or offensive outputs.
  • Changes to Provider APIs, pricing, terms, or availability that affect SDK functionality.
  • Any damages resulting from third-party access to API keys stored in browser localStorage.

IN NO EVENT SHALL DEWEY LABS' TOTAL AGGREGATE LIABILITY EXCEED THE GREATER OF (A) THE AMOUNT YOU PAID TO DEWEY LABS IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED US DOLLARS ($100).

11. Termination

We may suspend or terminate access to our services at any time for violation of these Terms. Site Owners may stop using the SDK at any time by removing it from their website. End Users may disconnect from any site at any time.

12. Changes to Terms

We may update these Terms from time to time. Changes will be posted on this page with an updated effective date. Continued use of our services after changes constitutes acceptance of the new Terms.

13. Contact

Questions about these Terms? Contact us at support@dewey-labs.com.