Orchard

Terms of Service

The rules for using Orchard. The short version: test only what you're allowed to test, keep malware inside the sandbox, and pay for the device-hours you use.

Last updated 10 November 2026

The agreement

These Terms of Service ("Terms") are an agreement between you and AirOverflow ("AirOverflow", "we", "us"), the maker of Orchard. They cover tryorchard.dev, the Orchard console, the API, the docs, the SDKs, the CLI, the MCP server, hosted devices and the Orchard software you run yourself (together, the "Service").

By creating an account, starting a device, or otherwise using the Service, you accept these Terms. If you use the Service for an organisation, you confirm you can bind it, and "you" means that organisation too. You must be at least 18.

On-premise and enterprise customers sign an order form or license agreement with us. Where it conflicts with these Terms, the signed agreement wins. Our Privacy Policy explains how we handle personal data.

The Service

Orchard gives you virtual iOS and Android devices (iOS emulators and simulators, and Android on Cuttlefish, Ranchu and Goldfish) that run jailbroken, rooted or stock, with tools to instrument, intercept, snapshot and automate them.

Access is currently by invitation. Features, device types and limits change as the product grows; when we remove something you rely on, we'll try to give you reasonable notice. Features we label preview, beta or early access are provided as they are, may change or stop without notice, and aren't covered by any service level.

Accounts and API keys

  • Give us accurate details and keep them up to date.
  • Keep your password, sessions and API keys secret. Scope keys to what they need and rotate any you think are exposed.
  • You're responsible for everything done through your account and keys, including by your team, your CI pipelines and the AI agents you connect.
  • Tell us straight away at privacy@tryorchard.dev if you suspect unauthorised use.

Authorised use only

Orchard is built for offensive and defensive security work. That makes these rules the most important part of the Terms.

Test only what you're allowed to test

You may install, instrument, intercept, reverse engineer or attack an app, service, device or network only if you own it or have the owner's permission, and only within the scope of that permission. Laws about computer misuse, interception and reverse engineering differ by country; you're responsible for following the ones that apply to you.

Keep malware in the sandbox

You may run malicious samples for analysis, research, detection engineering and teaching. You must not use the Service to spread malware, to infect or control systems other than your own Orchard devices, or to host command-and-control infrastructure for real campaigns.

You must not

  • scan, probe, attack, flood or exploit any system you aren't authorised to test, from a device or otherwise;
  • send spam or phishing, or run fraud, credential stuffing or account-takeover campaigns;
  • store, run or distribute content that is illegal, including child sexual abuse material, and content that infringes someone else's rights, such as pirated apps;
  • mine cryptocurrency, or use devices as proxies, VPN exits or bulk-traffic relays;
  • try to break out of a device, reach another customer's devices or data, or get around isolation, quotas, metering or billing;
  • load-test or attack the Orchard platform itself without our written permission;
  • resell, sublicense or offer the Service to others as a hosted product without an agreement with us;
  • use the Service in breach of export-control or sanctions laws, or if you are a sanctioned person or in a sanctioned country or region;
  • help or let anyone else do any of the above.

Found a hole in Orchard?

Report it to privacy@tryorchard.dev with enough detail to reproduce it, and give us reasonable time to fix it before you publish. Don't access, change or keep other customers' data while testing. We won't take legal action over good-faith research that follows these rules.

We may investigate suspected breaches of this section, which can include reviewing usage metadata and, where needed to stop abuse or comply with the law, the content involved. We may suspend devices or accounts and cooperate with authorities.

Your content

"Customer Content" is everything you put into or produce with the Service: apps, binaries, samples, files, scripts, device state, snapshots, screenshots, logs and captured traffic. You keep all rights to it.

You give us a limited licence to host, copy, process and transmit Customer Content only as needed to provide, secure and support the Service for you, and as the law requires. We don't claim ownership of it, and we don't use it for any other purpose.

You confirm you have the rights you need for everything you upload, and a lawful basis for any personal data in it, including data about people in traffic you capture. If you need a data processing agreement, ask us at privacy@tryorchard.dev.

Hosted devices are disposable. A device's state is lost when it's terminated or its idle timer runs out, unless you saved a snapshot. Keep your own copies of anything you can't afford to lose.

Third-party software and marks

Devices run operating systems, apps and tools made by others, such as iOS, Android, Frida and mitmproxy. Those are subject to their own licences, which you agree to follow. Make sure your use of any operating system image or app you load is permitted by its licence.

Apple, iOS, Google, Android and other names are trademarks of their owners. Orchard is not affiliated with, endorsed by or sponsored by Apple, Google or any vendor we compare ourselves with.

Pricing and payment

Cloud, for individuals

Hosted devices are charged per device-hour, at the rate for each device type shown in the console and on our pricing page when you use them. Usage is measured by our metering, which you can review in the console. Prices exclude taxes, which we add where required.

You pay for every device that is running, including idle ones. Idle timers help stop forgotten devices from billing, but you remain responsible for usage under your account.

We charge the payment method on your account. If a payment fails, we may suspend devices until it's settled. We'll give at least 30 days' notice of a price increase; it applies only to usage after it takes effect. Fees are non-refundable except where these Terms or the law say otherwise.

On-premise and enterprise

On-premise and enterprise deployments have no public price and aren't self-serve. Contact us at privacy@tryorchard.dev and we'll connect you with our sales team to understand your needs. Fees, term, capacity and support are then set in your order form.

On-premise software

When we provide Orchard software to run on your own infrastructure, we license it to you; we don't sell it. The licence is non-exclusive and non-transferable, lasts for the term in your order form, and covers the number of nodes, devices or users it states.

Unless your agreement allows it, you must not copy the software beyond what that use needs, distribute it, remove license checks, or offer it to others as a service. You're responsible for the security and operation of the machines you run it on.

Our rights and your feedback

The Service, including its software, design, documentation and the Orchard name and marks, belongs to AirOverflow and its licensors. These Terms don't give you any rights in it beyond using the Service as they allow. Open-source components stay under their own licences.

If you send us ideas or feedback, we may use them without any obligation to you.

Confidentiality

Each of us will protect the other's non-public information, received in connection with the Service, with at least reasonable care, use it only for the purposes of these Terms, and share it only with people who need to know it and are bound to keep it confidential. This doesn't cover information that is public through no fault of the recipient, was already known to it, or was independently developed. Either of us may disclose information when the law requires, giving notice first where allowed.

Suspension and termination

You can stop using the Service and close your account at any time. Charges for usage up to that point remain due.

We may suspend or terminate your access, wholly or partly, if you breach these Terms (especially Authorised use only), if your use creates a security or legal risk for us or other customers, if payment is overdue, or if the law requires it. Where it's reasonable and lawful, we'll tell you first and give you a chance to fix the problem.

When your account closes, your right to use the Service ends. You can export your snapshots and data until closure; after that we delete Customer Content as described in our Privacy Policy. Sections that by their nature should survive (including fees owed, your content, our rights, confidentiality, disclaimers, liability, indemnity and disputes) do.

Disclaimers

To the extent the law allows, the Service is provided "as is" and "as available", without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, non-infringement, and that it will be uninterrupted or error-free.

In particular: virtual devices are not physical phones and don't reproduce every hardware feature, such as cellular radios, cameras, biometrics or secure elements. Malware may detect a virtual environment and behave differently. A clean test result doesn't mean an app has no vulnerabilities. You decide how to use what you learn.

Some places don't allow certain warranties to be excluded; there, these exclusions apply only as far as the law permits.

Limitation of liability

To the extent the law allows, neither AirOverflow nor its suppliers will be liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, data or goodwill, arising from or related to the Service or these Terms, even if told they were possible.

Our total liability for all claims arising from or related to the Service or these Terms is limited to the greater of (a) the amounts you paid us for the Service in the 12 months before the event giving rise to the claim, and (b) USD 100.

Nothing in these Terms limits liability that can't be limited by law, such as liability for fraud, or for death or personal injury caused by negligence.

Indemnity

You will defend and indemnify AirOverflow and its people against third-party claims, and the resulting losses, damages and reasonable legal costs, arising from your Customer Content, your breach of these Terms, or testing, interception or analysis you carried out without proper authorisation. We'll tell you promptly about any such claim and cooperate reasonably, at your expense.

Changes to these Terms

We may update these Terms as the Service changes. We'll post the new version here with a new date and, for material changes, tell account holders by email or in the console at least 30 days before they take effect, unless a change is needed sooner for legal or security reasons. If you keep using the Service after the changes take effect, you accept them; if you don't agree, stop using the Service and close your account.

Governing law and disputes

These Terms are governed by the laws of the country where AirOverflow is established, without regard to conflict-of-law rules, and its courts have exclusive jurisdiction over any dispute arising from them, unless your order form says otherwise. If you're a consumer, you also keep the protection of the mandatory laws of the country where you live and may bring claims in its courts. Before starting a claim, please contact us at privacy@tryorchard.dev so we can try to resolve it informally within 30 days.

General

  • Entire agreement. These Terms, the Privacy Policy and any order form are the whole agreement about the Service and replace earlier understandings about it.
  • Severability. If a court finds part of these Terms unenforceable, the rest still applies.
  • No waiver. Not enforcing a right now doesn't mean we give it up.
  • Assignment. You may not transfer these Terms without our written consent. We may transfer them as part of a merger, acquisition or sale of assets, with notice to you.
  • Force majeure. Neither of us is liable for delays or failures caused by events beyond reasonable control, other than payment obligations.
  • Notices. We'll send notices to your account email or show them in the console. Send notices to us at privacy@tryorchard.dev.
  • Independent parties. These Terms create no partnership, agency or employment relationship.

Contact

Questions about these Terms: privacy@tryorchard.dev.