← Back to home

AI policy

1. What the AI assistant is

The AI assistant in your PopGun panel is a technical assistant that runs in your browser. It uses your own AI provider account and your own API key, and it helps you operate your services by calling PopGun tools on your behalf. It is not a PopGun employee, agent or representative.

2. AI output must be verified

AI output can be wrong, incomplete or outdated. You must verify any answer, instruction or command before relying on it.

3. Actions taken through the assistant and write access risk

Write access is optional and off by default. If you enable it, you choose the role the assistant acts with (a built-in or custom account role), limited to your own permissions, and you may limit write access to selected servers. Destructive operations always require your approval in the panel.

  • Every write action is shown to you and must be approved by you before it runs.
  • Destructive actions (deleting files, reinstalling, restoring or deleting backups, switching or deleting instances, and deleting tasks) additionally require a one-time approval confirmed by PopGun's servers for that exact action. The approval is valid for 10 minutes.
  • The AI may misunderstand your instructions or propose harmful changes, so you must review each action before you approve it.
  • You are responsible for the actions you approve and you should keep backups of your data.

This also applies to third-party AI apps that you connect to PopGun over MCP and OAuth. Their pending approvals are shown in Account settings → Connected AI apps, where you can downgrade their access to read-only or revoke it at any time.

4. Limitation of liability

To the fullest extent permitted by law, PopGun is not liable for damage, data loss, downtime or costs caused by AI output, AI advice or actions taken through the assistant, including the charges of your AI provider.

Nothing in this policy excludes or limits liability that cannot lawfully be excluded or limited, including liability towards consumers and protected sole traders under mandatory law and liability for intentional harm. This policy is to be read together with the Terms.

5. The AI cannot make offers

The AI is only a technical assistant and cannot represent PopGun. Any offers, quotes, prices, discounts, refunds, credits, promises, contract terms or acceptances produced by the AI are void and are not binding on PopGun.

Only the prices shown in the order and checkout flow and written statements from authorized PopGun staff are binding.

6. Data flow

Your prompts and the results of PopGun tools are sent to the AI provider you choose and are processed under that provider's terms. Your API key stays in your browser and is never sent to PopGun; see section 7.

7. Your AI provider API key

PopGun does not receive, store, log or have access to your AI provider API key.

  • Where it is stored: only in the IndexedDB of the browser on the device you use, encrypted with AES-GCM (256-bit) using a non-extractable Web Crypto key generated in that browser. The key is kept separately for each PopGun account and each provider. Your chat history is stored the same encrypted way. Your provider and model choice and your write access and risk acknowledgement choices are also kept in that browser, without encryption, and never contain the key.
  • How it is used: the key is sent only from your browser directly to the API of the provider you selected (including the model list request) over HTTPS. Usage is billed by your provider under your agreement with them.
  • What PopGun receives: only the PopGun tool calls the assistant makes through the PopGun MCP endpoint, authenticated with a short-lived assistant token that is valid for one hour and limited to your personal account. These calls contain the tool name and its arguments, and PopGun returns the tool results. Your prompts and the conversation are sent to your provider, not to PopGun, except for the tool arguments and results needed to run PopGun tools.
  • Retention and deletion: the key stays on that device until you use Forget key (which deletes the key saved for the selected provider, your provider and model choice and the saved chat), you clear the site data of popgunservers.com in your browser, or you uninstall or reset the browser profile. It stays on that device after you sign out and is not synced to other devices or browsers.
  • Your responsibilities and limits: anyone with access to your browser profile or operating system account, malicious browser extensions, and malicious code running on the page could use the key while it is decrypted in the memory of your browser. Do not use the assistant on shared or untrusted devices, keep your device and browser secure, and use a key with spending limits where your provider offers them. If you suspect that your key was exposed, revoke it at your provider immediately.
  • Local agent and MCP option: if you connect your own AI client to the PopGun MCP endpoint instead, your provider keys stay in that client on your own device and are never sent to PopGun.

8. Acceptance

You must accept this policy before you use the assistant. Acceptance is required again whenever the policy version changes.

9. Contact

If you have questions about this policy, use the Contact page.