A separate balance for managed AI

Software access and AI usage are separate

The $100 one-time Pro license includes Pro access, lifetime updates and email product support for the maintained life of NoryBot. It includes two device activations. Installation, licensing and reproducible product bugs are covered; custom test development, consulting and guaranteed response times are separate services.

Optional cloud credit funds test generation and security review through NoryBot. It does not pay for local browser execution, include hosted browser jobs, or replace your software license. You can continue to use your own AI provider keys without buying cloud credit.

Cloud use terms

Version 2026-09-30-managed-ai

NoryBot Cloud is operated by N&R Tech Labs LLC. Before buying cloud credit or creating a token, agree to these usage, billing, refund and data-handling terms in your account. We record the accepted version and date. A material update requires agreement before new cloud requests; you can still inspect your balance and revoke tokens.

Use managed AI only to test and review systems you own or have permission to assess. You must be at least 18 and have the rights and permissions needed to submit page observations, test context and findings for processing. Do not send credentials, payment-card details, protected health information or personal data you are not authorized to share. Redaction helps, but does not guarantee that all sensitive information is removed. Review AI results before relying on them; they can be inaccurate.

You agree to follow the applicable provider and model terms linked below, including their usage restrictions, privacy requirements, export controls and supported-country limitations. Do not use cloud AI for illegal or harmful activity, unauthorized access, or to probe, jailbreak, disrupt or bypass safeguards of NoryBot or its upstream models. Keep your cloud tokens private; they authorize spending from your wallet. You may not resell those tokens or provide generic access to the upstream APIs.

• OpenRouter and OpenAI: NoryBot uses a reviewed route with no fallback to other providers. Applicable rules are the OpenRouter terms, OpenAI Services Agreement, Service Terms and Usage Policies. OpenRouter's data-collection filter is set to deny; this is not a promise of zero retention across all services. See the OpenRouter and OpenAI privacy policies.
• Anthropic via OpenRouter: Managed test generation uses a reviewed Anthropic route with no automatic provider fallback. The Anthropic Commercial Terms, Acceptable Use Policy and Privacy Policy apply alongside OpenRouter's terms.
• Abliteration: NoryBot may use this provider for managed review. Its Terms of Service, Privacy Policy and the underlying model license apply. Abliteration says prompts and outputs are processed transiently without storage by default; it retains operational telemetry.

Usage rates and spending limits are shown in your account before funding. NoryBot manages model selection and improves its AI configuration over time. If a provider is unavailable, NoryBot does not silently send your findings to a different provider. We may pause cloud access for abuse, payment disputes or service outages. Unused-credit and hold reviews remain available through support. These terms do not limit any rights you have under applicable consumer law.

Prepaid credit, rates and spending limits

The credit flow supports $10, $25 and $50 USD top-ups. There is no automatic top-up or monthly cloud subscription. Applicable taxes appear at checkout and do not add usage credit. Payment is handled by Polar; NoryBot does not store payment-card details.

Managed AI is charged by actual usage plus a fee for each completed AI step. Test planning, code or workflow generation, optional exploration decisions and repair steps are separate requests. A complete test run can use several requests; local browser execution itself uses no cloud credit. You do not need to choose a model or maintain provider accounts. The usage breakdown below shows the current rate range and maximum temporary hold. Actual token usage plus the operation fee determines the charge. Any provider-reported reasoning tokens included in output usage count toward the output rate. Rates are saved when the request starts, so a later rate change does not change that request's bill.

The account page shows available and held credit. The maximum request charge is reserved before the model is called; unused credit is released when the actual charge is known. A request cannot start if available credit or the daily limit cannot cover that maximum. Replaying the same request ID does not charge again.

Each wallet starts with a $10 daily limit. Set it from $0 to $1,000 in your account; $0 pauses new requests. The UTC day counts charges for requests started that day and all outstanding reservations. Requests already dispatched can still finish. Credits are tied to their linked license, are not transferable between accounts and have no automatic expiry.

Failed requests, refunds and payment disputes

When usage is known but the model output is unusable, NoryBot releases the reservation without charging the customer. If a timeout or missing usage leaves the provider's charge unknown, credit stays held for reconciliation. It is not an extra settled charge. Network failures do not automatically retry the paid request. A configured repair after a completed generation or local runner failure is a new AI step and can incur another charge.

Contact support with the request ID if a hold needs review. Saved results are available for 24 hours. After that, an old request ID cannot be used to run the model again or obtain a new free result.

Refund requests are reviewed through support and Polar. Approved refunds reverse the corresponding usage credit. If that credit has already been spent or is held by a running request, new spending is paused until the balance is reconciled. A payment dispute freezes the affected wallet for review. These controls do not remove any statutory consumer rights. NoryBot does not offer self-service cash withdrawals.

Connect the CLI

Sign in with a verified email, link your existing activated Pro license, accept the Cloud terms, then create a cloud token in your account. Tokens are shown once; save yours in a local environment file or CI secret store. Each active token can spend the linked wallet's credit. Revoke tokens you no longer need.

AI_PROVIDER=norybot
NORYBOT_CLOUD_TOKEN=your-cloud-token
SECURITY_TRIAGE_PROVIDER=norybot

Run norybot init --provider norybot to save managed test generation in your project. Existing installations must update to CLI 0.1.3 or later. Managed AI validates your Pro license online. Model-driven security investigation and optional embedding search still require your own provider configuration.

Data sent to the cloud

Managed triage sends up to 40 selected, redacted findings through the NoryBot backend to one of the AI providers disclosed above. Test generation sends redacted page observations, test plans, selected local QA guidance and repair evidence. Cloud exploration uses text observations rather than screenshots. Finding descriptions, bounded evidence and relationship metadata may contain client information despite redaction. Review the disclosed providers' data terms and your authorization before sending it. Local scans, test execution and your full project stay in your own environment.

Revoking a cloud token prevents further authentication with that token; it does not cancel dispatched work or erase accounting records. Contact support for account access or deletion requests. We may need to retain transaction records for payment disputes and applicable recordkeeping obligations. The account dashboard does not currently provide self-service deletion.