Prello is an AI orchestration platform from Vallgaard. It is a hosted service: the Studio on the web, the Mac app and the iPhone app all connect to Prello's servers, which run the agents and call AI models on Prello's provider accounts or with your own keys. One idea runs through these terms: your code and your data stay yours. These documents explain how that works.
What's here
Terms of Service
The agreement between you and Vallgaard for using Prello: accounts, plans, your responsibilities, and ours.
Acceptable Use Policy
What you may and may not do with autonomous agents, runners and connectors.
Billing & Refunds
How plans, usage windows and top-ups work, and when money comes back.
Privacy Policy
What we collect, what we deliberately don't, and the rights you have over your data.
Cookie Policy
The small number of cookies and local-storage keys Prello uses.
Data Processing Addendum
For business customers: GDPR-aligned terms covering data we process on your behalf.
Subprocessors
The third parties that process data for Prello, and where.
Security
How we protect keys, sandboxes and your account.
Who we are
Vallgaard ("Vallgaard", "we", "us") is the team behind the Prello product ("Prello", "the Service"), based in Sweden. Vallgaard is the name we build Prello under; it is not yet a registered company, so there is no company number, and we keep our operating address private. The best way to reach us is email: legal@prello.dev.
Questions about any of this? Email legal@prello.dev. A human reads it.
Agreement
Terms of Service
Effective 4 June 2026Updated 24 September 2026Version 2.2Governing law: Sweden
These Terms are a contract between you and Vallgaard governing your use of Prello. By creating an account, installing the app, or running a loop, you agree to them.
1The Service
Prello lets you direct AI agents that plan, build and check software. It is a hosted service: the agent work runs on Prello's servers and on the AI model providers they call.
Managed usage: Prello calls AI models on its own provider accounts for you, within your plan's usage allowance.
Bring your own key (BYOK): Prello calls your provider with an API key you add. Prello stores the key encrypted (AES-256-GCM) and uses it only for your requests; you pay that provider directly.
Your projects: Prello keeps your projects, chats and files so you can pick up where you left off, and on plans with cloud storage runs code for you in isolated, short lived sandboxes. Personal data inside your projects is handled under the Data Processing Addendum.
The Mac app can also open project folders on your computer. Content from them is sent to Prello and the model provider when you use it in Prello.
2Accounts
You must be at least 16 and able to form a binding contract. If you are under 18, you need a parent's or guardian's consent to buy a paid plan. You're responsible for your account, for anything done under it, and for keeping your credentials and any connected runners secure. Tell us promptly at security@prello.dev if you suspect unauthorized access.
3Plans, usage & payment
Prello is offered on the BYOK Limited (free), BYOK, Premium, Power User, Professional, Ultra and Enterprise plans. Every plan includes the full Builder, Code and Design toolset. Plans differ in managed usage, usage windows, cloud storage, runs a day and a few platform features (such as custom domains, a free test domain and loops side by side), and in one visible detail: apps built on BYOK Limited carry a small "Built with Prello" link and apps built on BYOK a small Prello mark. The details are in Billing & Refunds. In short:
Premium and every larger plan include a managed usage allowance; BYOK Limited and BYOK run on your own key: model work Prello runs on its own provider accounts for you, weighed by what each call costs to run, so a larger model or a longer answer uses more of it. It is paced by three nested windows, 6 hours, week and month, and managed work runs only while all three have room, so a larger window always limits the smaller ones. You see each window as the share you have used, never as an amount. How big each plan's windows are is in the usage schedule.
When a window is full, managed work pauses until it refills, draws on a top-up if you bought one, or carries on with your own keys if you turned that on. There's no overage billing.
We may change the window amounts only as set out in Billing & Refunds §2: increases can apply at once, decreases need 30 days' notice, and a lower monthly amount never applies inside a period you have already paid.
Fees are billed in advance and are non-refundable except as set out in Billing & Refunds or required by law.
If you use your own keys, you pay your providers directly and are responsible for those costs.
4Your content & your output
You own what you bring and what you build. Code, prompts, data and projects you create with Prello are yours. We claim no ownership over them. You grant us only the limited licence needed to operate the Service for you, for example, to send a prompt to a model provider, to store your projects, or to show your project back to you.
You're responsible for having the rights to the content you feed into Prello and for how you use what comes out.
5AI output: no guarantees
⚑
Agents write and run code autonomously. Output can be wrong, insecure, or unsuitable for your purpose, and quality gates reduce but do not eliminate that risk. You are responsible for reviewing, testing and approving anything before you ship or rely on it. Prello is a tool, not a warranty of correctness.
Prello is an AI system: the replies, code, designs, images, audio and video it produces are generated by AI models. If you publish AI generated content where the law requires a disclosure, for example under Article 50 of the EU AI Act, you are responsible for making it.
6Connectors & third-party services
When you connect a service (for example GitHub, or an AI provider through your own key), you authorize Prello to act within the scopes you grant, and your use of that service remains subject to its own terms. We are not responsible for third-party services, and a connector can be revoked by you at any time.
7Acceptable use
Your use must follow the Acceptable Use Policy. We may suspend or limit access to protect the Service, other users, or to comply with law.
8Intellectual property
Prello, its name, brand and software are owned by Vallgaard and licensed to you, not sold. The license is non-exclusive, non-transferable, and lasts only as long as you comply with these Terms.
9Disclaimers
The Service is provided "as is" and "as available" to the fullest extent permitted by law. We disclaim implied warranties of merchantability, fitness for a particular purpose, and non-infringement. If you are a consumer, you keep the rights the Swedish Consumer Sales Act (konsumentköplagen, SFS 2022:260) gives you for digital content and services, including having faults corrected; nothing in these Terms takes them away.
10Limitation of liability
To the maximum extent permitted by law, Vallgaard will not be liable for indirect, incidental, special or consequential damages, or for lost profits, data, or business. Our total liability for any claim is capped at the greater of the fees you paid in the 3 months before the claim or USD 100. This section does not limit liability for gross negligence or intent, or anything else that cannot be limited by law, and does not reduce a consumer's rights under Swedish consumer law.
11Indemnity
If you use Prello for a business, you'll defend and indemnify Vallgaard against third party claims arising from your content, your use of the Service in breach of these Terms, or your breach of law. This section does not apply to consumers.
12Termination
You can stop using Prello and close your account at any time. We may suspend or terminate access if you materially breach these Terms or use the Service unlawfully. Files you saved to your own computer stay there. Projects, chats and keys Prello holds are handled as the Privacy Policy describes, so save anything you want to keep first, for example by pushing it to GitHub.
13Changes
We may update these Terms. For material changes we'll give reasonable notice (in-app or by email). Continuing to use Prello after changes take effect means you accept them. Changes to usage amounts follow the rules in Billing & Refunds §2, including your right to cancel with a pro-rata refund.
14Governing law & disputes
These Terms are governed by the laws of Sweden, excluding conflict-of-law rules. Disputes go to the courts of Sweden, unless mandatory consumer law gives you another venue. If you are a consumer you can also bring a dispute to the Swedish National Board for Consumer Disputes (Allmänna reklamationsnämnden, arn.se). Prello is built in Sweden and our documents are written in English; if we provide a Swedish translation and it conflicts, the English version governs.
Prello hands real autonomy to agents: they run code, hit APIs, and act through your connectors. This policy keeps that power safe for you and everyone else on the platform.
1Don't do harm
You may not use Prello to build, run or distribute anything that:
breaks the law or facilitates illegal activity;
creates malware, exploits, spam, or tooling for unauthorized access to systems;
infringes someone else's IP, privacy or other rights;
generates content that sexualizes minors, incites violence, or harasses;
attempts to deceive people about being AI-generated where the law requires disclosure.
2Connectors & data you reach
Only connect accounts you own or are authorized to use, and only point agents at data and systems you're allowed to access. Automated actions taken through a connector (sending mail, opening PRs, posting messages) are your responsibility.
3Fair use of the platform
Usage windows exist to keep Prello fast and fair. You may not circumvent rate limits or usage windows, share one account across an organization to dodge seats, or run loops whose only purpose is to consume resources. Enterprise plans exist for higher-volume needs.
4Security testing
Don't probe, scan or load-test Prello's own infrastructure without written permission. To report a vulnerability, see the Security page.
5Reporting illegal content
To report illegal content in something Prello hosts, write to abuse@prello.dev with the address of the content and why you believe it is illegal. We confirm receipt, decide without undue delay, and tell both you and the person who posted it what we decided and why.
⚑
We'd rather warn than ban. Where we can, we'll flag a problem and give you a chance to fix it, but serious or repeated violations can lead to immediate suspension.
Prello's plans are billed monthly or yearly in US dollars. Purchases are sold by Polar Software, Inc., the merchant of record: Polar's buyer terms cover the payment, and these terms cover your use of Prello. Every plan with managed usage carries nested usage windows (6 hours, week, month); smart routing picks the cheapest model that still clears your gates, so each window stretches as far as the task allows.
1Plans
Plan
Price
Managed usage
Cloud storage
BYOK Limited
Free
None, local only
none
BYOK
$7 / mo
None, your own key
200 MB
Premium
$20 / mo
Included
3 GB
Power User
$60 / mo
Included
5 GB
Professional
$120 / mo
Included
15 GB
Ultra
$240 / mo
Included
20 GB
Enterprise
Custom
Custom
Custom
Every plan includes the full Builder, Code and Design toolset and every loop type. Plans differ in managed usage, cloud storage, runs a day and a few platform features, such as custom domains, a free test domain and loops side by side. On BYOK Limited that means: it is local only. It runs on your own device with your own key, with no managed usage, cloud storage, cloud sessions or cloud loops, and you can steer it from your other devices as those apps arrive. Loops you schedule on your device are not counted, and run while the app is open. Bigger plans carry bigger usage windows; each plan's size against the plan before it is in the usage schedule in §2. Annual billing is 10× the monthly price: two months free.
2Usage windows
What counts: model work Prello runs on its own provider accounts for you, weighed by what each call costs to run, so a larger model or a longer answer uses more of a window. Calls on your own keys and work paid from a top-up don't count toward a window.
What you see: each window as the share you have used, as a bar, and when it refills. Prello never shows usage as an amount.
The 6-hour window covers the last six hours and refills continuously: each call's cost drops out six hours after it ran. It smooths bursts so a single session can't drain your week.
The weekly window starts at each weekly refresh, on Mondays at 03:00 UTC, at least seven days after the last one.
The monthly window runs one month at a time from the day your billing period started (an annual plan has twelve). It is the outer limit and what your plan's price buys each month.
On paid plans the schedule lets a busy week or session use far more than an even share of the month: the monthly window is what keeps the total in line.
When a window is used up, loops pause until it refills; there's no overage billing and no surprise charges. With your own keys as fallback, work carries on uninterrupted.
◷
Your live windows and pace are always visible in Settings → Plan & usage, as the share of each window you've used, so there's never a mystery about where you stand.
Usage schedule
How big each plan's windows are: the month as a multiple of the plan before it, the week as a share of the month, and 6 hours as a share of the week. A scheduled change is shown as how much smaller or larger a window gets.
Plan
Month
Week
6 hours
Premium
The base allowance
50% of the month
25% of the week
Power User
3.2× Premium
50% of the month
25% of the week
Professional
2× Power User
50% of the month
25% of the week
Ultra
2× Professional
50% of the month
25% of the week
Scheduled changes appear here with the date they start.
Changes to usage amounts
We may change window amounts for a valid reason: changes in provider prices or capacity, keeping Prello fast and fair for everyone, preventing abuse, or complying with law.
Increases can apply straight away.
Decreases are announced in the app and by email at least 30 days before they apply, and apply only from then on: usage you already consumed is never counted again, a window already in progress is never cut below what you've used, and top-ups you bought are never reduced.
A lower monthly amount applies from your next billing period that starts after the change, never inside a period you've already paid (for annual plans, the paid year).
If a decrease affects you more than minimally, you may cancel before it applies and get a pro-rata refund of the unused part of your prepaid period.
To protect the service from abuse, a security incident or an outage we may set a temporary limit. We'll tell you in the app, keep it as short as we can, and it never stands in for a planned change.
If you think we measured your usage wrong, write to billing@prello.dev. We'll check the records and correct any error.
3Top-ups
Need more before your reset? Buy a top-up of $5 to $500, in whole dollars. All of it goes to managed usage, weighed the same way as your plan, with nothing added. Checkout adds a $1.35 service fee and Polar's payment processing fee and shows the total before you pay. A top-up never expires and is used only when a usage window is full.
4Bring your own key
If you power Prello with your own provider keys, those calls don't count toward your usage windows and aren't billed by us; you pay your provider directly. You can also use your keys as a fallback so loops keep running when a usage window is exhausted.
5Renewals & cancellation
Subscriptions renew automatically each period until cancelled. Cancel any time in Settings; you keep access until the end of the paid period, and you won't be charged again.
6Refunds
Right of withdrawal (consumers): you can withdraw from a purchase within 14 days, without giving a reason, by writing to billing@prello.dev from the address on your account. If you asked Prello to start at once, which you do by using the plan within those 14 days, you pay for the part you used and get the rest back within 14 days of your message.
Subscriptions: within 14 days of a first purchase or upgrade, email us for a full refund if you've barely used the plan.
Managed usage already used (model work already performed) is non-refundable.
Top-ups are refundable for the unused part within 14 days of purchase.
Where consumer law gives you stronger rights, those apply.
Polar, as the seller, calculates and collects VAT or sales tax where it applies and shows it at checkout.
Effective 4 June 2026Updated 24 September 2026Controller: Vallgaard
This policy explains what personal data Prello handles, why, where it goes, how long it is kept and your rights. Prello is a hosted service, so what you type and build in it is processed on Prello's servers.
1What Prello doesn't do
No card details. Polar handles payment; Prello never sees your card.
No training on your content. Prello does not train models on your prompts, code or files, and by default asks its model router to use only providers that do not store or train on requests. If you turn on data sharing in Settings, providers that may keep requests are allowed too.
No advertising trackers, and no sale of personal data.
2What we do collect
Data
Why
Account: name, email, password hash (held by Supabase Auth); if you sign in with Google or GitHub, your profile name, username and avatar, and for GitHub an access token with the permissions you approve
To create and secure your account.
Security logs: IP address, browser and time of sign ins and admin actions
To secure accounts and investigate abuse.
Billing: plan, usage, invoices
To run subscriptions and metering. Purchases are sold and processed by Polar, our merchant of record; card data never reaches us.
Your content: prompts, chats, generated code, designs, files, project settings and AI replies
To provide the Service. Stored in Prello's database and file storage and sent to the model provider that answers each request. Covered by the DPA where it holds other people's data.
Site analytics: pages viewed, referrer, country, browser, operating system, device type and page speed (Vercel Web Analytics and Speed Insights; no cookies)
To see what is used and keep pages fast. Only if you accept analytics.
Waitlist: email, name if given, referral code, who referred you, source tag
To invite you and count referrals.
API keys you add in the Studio, the Mac app or the iPhone app
Stored with us, encrypted at rest (AES-256-GCM), so our runners can call your provider on your behalf. Never written to logs, never shown back to you in full, and deleted when you remove the key.
Support: what you send us
To answer you.
3How we use it
To provide and secure the Service, process payments, respond to support, meet legal obligations, and improve Prello. We do not sell your personal data, and we do not train models on your code or prompts.
4Legal bases (GDPR)
Prello relies on contract for your account, projects, usage metering and support; legitimate interests for security logs, abuse prevention, the waitlist and service emails; consent for analytics and for provider data sharing; and legal obligation for bookkeeping. An email address is needed for an account; everything else is optional. Prello makes no decisions about you based solely on automated processing.
5Sharing
We share data only with the subprocessors listed on the Subprocessors page, with authorities where legally required, and in a business transfer (with notice). Each subprocessor is bound by data-protection terms.
6Retention
Account: until you delete it. Deleting your account in Settings anonymises your profile and removes you from every workspace at once. Your sign in record (email, password hash and linked Google or GitHub identity) stays until you ask privacy@prello.dev to erase it.
Projects, chats, prompts, files and AI replies: until you delete them or the project; there is no automatic expiry. To have everything erased, write to privacy@prello.dev.
API keys: until you remove them, which deletes them at once.
Security logs, usage records and billing records: kept until you ask for them to be erased, except what bookkeeping law requires Prello to keep.
Accounting records: 7 years, as the Swedish Bookkeeping Act requires (bokföringslagen, SFS 1999:1078).
Waitlist entries: until you join or ask to be removed.
7Your rights
Access & portability
Get a copy of your data in a portable format.
Correction & deletion
Fix it, or ask us to erase it.
Object & restrict
Object to processing based on legitimate interests.
Withdraw consent
Turn off optional analytics any time.
Export or delete your account in Settings, or write to privacy@prello.dev; Prello answers within one month. You can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se) or the authority where you live or work.
8International transfers
Prello's database is in Ireland (EU). Prello's servers run in the United States (Vercel, Washington, D.C.), and OpenRouter, the model providers, Polar, Resend and Upstash are US companies. Prello relies on the EU–US Data Privacy Framework where the provider is certified, and on the European Commission's Standard Contractual Clauses otherwise.
9Children
Prello isn't for anyone under 16, and we don't knowingly collect their data.
Prello uses very few cookies, and several "cookies" are really just local-storage keys that stay on your device, for example remembering your theme or which loop you were viewing.
1What we use
Type
Purpose
Needs consent?
Essential
Your sign in session (Supabase cookies named sb-…-auth-token, which also carry a GitHub access token when you sign in with GitHub) and the preview pass (prello_preview, 30 days) that lets invited visitors in.
No; required to work.
Preferences
Theme, drafts, your provider list with masked keys and your cookie choice, kept in local storage on your device.
No.
Analytics
Vercel Web Analytics and Speed Insights: pages viewed, referrer, country, browser and page speed. No cookies.
Yes: off until you accept.
2Managing them
You can clear or block cookies in your browser, and turn optional analytics on or off with Cookie settings below. Blocking essential cookies may break sign in.
3No ad-tracking
We don't use third-party advertising or cross-site tracking cookies.
This DPA forms part of the Terms for customers who use Prello to process personal data. Where you are the controller, Vallgaard acts as your processor.
1Roles & scope
You determine the purpose and means of processing (controller); we process personal data only on your documented instructions (processor), namely to provide Prello as described in the Terms.
Subject matter and duration: hosting and processing your project content while you use Prello. Nature and purpose: storage, AI processing and code execution to provide the Service. Personal data: whatever your projects contain, such as names, emails and records of your own apps' users. Data subjects: your users, customers and staff.
2Our obligations
Process only on your instructions, and tell you if an instruction appears unlawful.
Ensure people authorized to process are bound by confidentiality.
Apply appropriate technical and organizational security measures (see Security).
Engage subprocessors only under equivalent terms, with notice of changes (see Subprocessors).
Assist you with data-subject requests, breach notification, and impact assessments.
Delete or return personal data at the end of the service, except where law requires retention.
3Sub-processing
You give general authorization for the subprocessors listed on the Subprocessors page. We'll give reasonable notice before adding a new one, and you may object on reasonable data-protection grounds.
4International transfers
Transfers outside the EEA/UK rely on Standard Contractual Clauses or another valid mechanism.
5Breach notification
We'll notify you without undue delay after becoming aware of a personal-data breach affecting your data, with the information you need to meet your own obligations.
6Audits
We'll make available the information needed to demonstrate compliance and support audits, subject to reasonable confidentiality and frequency limits.
⛁
Need a signed copy for procurement? Email legal@prello.dev and we'll countersign.
Privacy & data
Subprocessors
Last updated 24 September 2026
These third parties process data for Prello. Using your own keys changes only which AI provider answers.
Subprocessor
Purpose
Region
Vercel Inc.
Hosting of the site and API, code execution sandboxes, site analytics and request logs
US (Washington, D.C.), global edge
Supabase Inc.
Sign in, database and file storage
EU (Ireland)
OpenRouter Inc.
Routes managed model calls to model providers
US
AI model providers (reached through OpenRouter, by default Anthropic, also Google, OpenAI and others depending on the model)
Model inference for managed usage
US and others
Resend Inc.
Waitlist, notification and usage change emails
Sends from the EU (Ireland); US company
Upstash
Rate limiting and short lived session data
US company
Cloudflare Inc.
DNS and routing of email sent to prello.dev addresses
Global
⇄
Using your own keys? Prello sends those requests to the provider you chose, which is your own counterparty under its terms. Polar is not listed here: as the seller of Prello's plans and top ups it handles payment data under its own privacy policy, and tells Prello your email, name, country and subscription status.
We'll post changes here and, for DPA customers, give advance notice before a new subprocessor starts handling your data.
How Prello protects your keys, your code and your account.
1Keys & secrets
Keys you add in the Studio, the Mac app or the iPhone app are sent over TLS and stored encrypted at rest (AES-256-GCM) with a master key kept outside the database. They are decrypted only on Prello's servers to call your provider, never written to logs and never shown back to you in full. Removing a key deletes it.
Connector tokens use OAuth scopes you control and can revoke at any time.
2Account protection
Sign in with Google or GitHub to use that account's two factor protection.
Sign out of every other session at once from Settings.
Passwords are hashed; we never store them in the clear.
3Hosting and code execution
Encryption in transit (TLS) and at rest.
Code Prello runs for you executes in isolated, short lived Vercel Sandbox microVMs with limited outbound network access.
Admin actions are audit logged.
4Sandbox & agent safety
Agents run inside a configurable sandbox. You set the security level, choose whether actions outside a project root need approval, and decide whether passing builds auto-deploy. Quality gates must pass before a loop reports success.
5Reporting a vulnerability
⚿
Found something? Email security@prello.dev, ideally with steps to reproduce. We investigate promptly, won't pursue good-faith research, and will credit you if you'd like.
On Prello's servers, and when code runs, in isolated cloud sandboxes. AI requests go to the model provider that answers them. The Mac app can also open project folders on your computer.
Do you train on my code?
No. Prello doesn't train models on your code or prompts, by default uses only providers that don't store or train on them, and doesn't sell your data. See the Privacy Policy.
What happens when I hit a usage window?
The 6-hour window refills continuously; the weekly and monthly windows reset on their own schedules. A paused loop resumes by itself when the window refills, or turn on BYOK fallback to keep going on your own keys. See Billing.
Can I use my own AI provider?
Yes: add a key from OpenRouter, Vercel AI Gateway, Anthropic, OpenAI, Groq, Fireworks, DeepInfra or Together AI in Settings, set a budget, and the router works within it. See Security for how keys are protected.
How do I cancel or get a refund?
Cancel any time in Settings; refunds follow the Billing & Refunds policy.
3Service status
◉
Incidents are posted in the app and on the changelog. Enterprise customers can ask for incident notifications by email.