Terms of Service

1. Who we are and what these terms cover#

These terms govern your use of the Agined Attestor service at agined.com, its REST API at api.agined.com, its MCP server at mcp.agined.com and its dashboard at app.agined.com, together with the documentation, the GitHub Action and any software development kits we publish for them (together, the "Service").

The Service is provided by Avonao, Inc., a corporation formed in the State of Delaware, USA (Delaware entity file number 10121895), 254 Chapman Rd, Ste 208 #21918, Newark, Delaware 19702, USA ("we", "us", "our"). See Imprint.

By creating an account, creating an API key, using the free test key or connecting an AI tool to the Service, you accept these terms for yourself and, if you act for a company or other organization, for that organization. If you do not agree, do not use the Service.

In plain language: these terms are the contract. If you use Agined Attestor, you agree to them.

1.1 Documents that form part of the agreement#

If a document conflicts with these terms, these terms prevail, except that the Data Processing Addendum prevails on the processing of personal data it covers. A written agreement signed by both parties (for example an Enterprise order) prevails over these terms to the extent it says so.

2. Definitions#

3. The Service#

The Service issues signed receipts. The tools are grouped by category: SI/AI and agents (for example agent calls, LLM exchanges, agent boundaries and plans, approvals, evaluations and MCP sessions), content and provenance (content, datasets, page captures, media and device readings), web and API evidence (monitors, API witnesses and watches of API descriptions, catalogues, status pages and terms), delivery and messaging (webhooks, email DKIM, inbound mail and anonymous reports), domains and infrastructure (DNS, certificates, domain registration and control, security posture, backups and processing region), software supply chain (commits, lockfiles, package registries, SBOMs and CRA reporting), compliance and consent (consent, terms acceptance, identity-check decisions, erasure cases, e-signatures and exams), and payments and fairness (payment webhooks, e-invoices and fair draws). Scheduled checks of an HTTP endpoint, a DNS record or a TLS certificate are all recorded in your check history, but a signed receipt is issued only for the first check, each state change, an hourly (HTTP) or daily (DNS, TLS) digest that commits by SHA-256 to that period's check history, and any check you run on demand. The other watch tools sign the first capture and each change, as their documentation pages describe. Each receipt is signed with an Ed25519 key and can be verified offline with our published public keys. See How Agined Attestor works and Verifying receipts.

3.1 What a receipt proves, and what it does not#

A receipt proves that we observed, checked or recorded the facts stated in it, and signed them at the time stated in it, and that nobody has changed them since. Which facts in a tool's receipts we observe or check ourselves, and which you, or a party you named, report to us and we only sign, is set out for every tool in section 3 of the Receipt Practice Statement and on the tool's documentation page. Receipts that carry an assertion member say it in the receipt itself.

A Record that you report proves that you told us it, at that time, and in that order within its chain. It does not prove that a person consented, accepted terms, passed a check, approved anything, read a notice, or that data was erased; those are your statements. A residency.attest receipt is our own statement about where we processed a request, not a check by anyone outside Agined.

A receipt does not prove that the underlying statement is true, that the content it refers to is lawful or authorised, who authored it, that a third-party system behaved correctly, or that nothing happened where there is no receipt. The time in a receipt is our clock at signing, and we provide no independent timestamp. A receipt is not entered in any public log. A receipt is not legal, financial, audit or compliance advice. Whether a receipt is admissible or sufficient evidence in a court, regulatory or contractual setting depends on the jurisdiction and the case, and you remain responsible for deciding whether it is sufficient for your purpose. See Security model.

3.1a Public pages and mailboxes we host for you#

Some tools serve Public pages or receive mail and webhooks on your behalf. You decide who receives their links and addresses, and you are responsible towards those people, including for any notice or consent the law requires. We do not read the reports, mail or payloads they receive beyond hashing and checking them as the tool's documentation describes, and the anonymous report tool is built so that we never receive the report itself.

3.2 The free test key#

The test key is a restricted trial with its own limits, described in The free test key. It carries no commitment of availability or support. We may change, limit or withdraw it at any time. These terms apply to its use.

3.3 Changes to the Service#

We may improve, change or retire features. If a change removes a paid feature that you use, we will tell account owners by email at least 30 days before it takes effect. If we remove a paid feature you rely on and you no longer wish to continue, you may cancel under section 7, and we will refund the unused part of any prepaid annual fee for the period after the removal. Security fixes, changes required by law and changes that do not reduce what you have paid for may take effect immediately.

4. Eligibility, accounts and keys#

• The Service has no sign-in methods of its own. You sign up and sign in to it only with an Avonao ID, a separate account service with its own terms and privacy policy. Avonao ID collects your email address, name, sign-in methods, security log, country and age confirmation. It is not for anyone under 16, and a guardian-consent flow for younger members is built but switched off. Avonao ID's rules about its own account apply to it. The Service receives only the claims it sends us (identifier, confirmed email, name and language) and reports your subscription state back to it. Avonao ID is operated by Avonao, Inc. and is an independent controller for its own account data, including sign-up and sign-in data.
• On top of Avonao ID's minimum age of 16, you must be at least 18 years old and able to form a binding contract, or be authorised to bind the organization you register. The Service is not directed to children.
• You may not use the Service if you are barred from receiving it under applicable law or if we have previously terminated your account for breach of these terms, unless we agree in writing.
• You must provide accurate account information and keep it current.
• You are responsible for everything that happens under your account and your keys, including the acts of your seats.
• Keep API keys, service keys and your Avonao ID credentials secret, and rotate a key if it leaks. Do not put keys in front-end code, public repositories or URLs.
• Tell us at security@agined.com as soon as you suspect misuse of your account or keys. We are not liable for use of a key before you tell us it was compromised.
• A plan includes a number of seats. Further seats can be added for a monthly fee shown on the pricing page. You must not share one seat between several people.

If you accept these terms for an organization, you confirm that you have authority to bind it. See also Teams, seats and roles.

5. Acceptable use#

You must follow the Acceptable Use Policy, which forms part of these terms. We may suspend or end access as described in section 12 if you do not. Section 3 of that policy describes how we enforce these restrictions, the tools we use, and how you can appeal. Our points of contact under the EU Digital Services Act are on the Digital Services Act page.

6. Plans, allowances and top-ups#

Each plan has a monthly allowance per tool and a number of active scheduled checks, shown on the pricing page. Every tool draws on the allowance of the tool named in the "Allowance" section of its documentation page, or on the active-watch limit it shares with the watch tools named there; no tool is priced separately. See also Plans and allowances and Billing and top-ups.

• Allowances reset on the first day of each calendar month (UTC), whether you pay monthly or annually. Unused allowance does not carry over.
• When an allowance is used up, calls to that tool are refused until the next period, unless you bought a top-up pack. We do not bill for use beyond an allowance.
• Top-up packs are one-time purchases. They do not expire with the month and roll over until used.
• We may change plans, allowances and prices for future periods with 30 days' notice by email to the account owner. A change does not affect a period you have already paid for.

7. Fees, billing, taxes and renewal#

7.1 Payment through Avonao Billing and Stripe#

Paid plans, extra seats and top-up packs are bought at checkout through Avonao Billing, Avonao's central billing service. Avonao, Inc. is the centralized billing entity, and Stripe is always the merchant of record for these payments. Agined has no payment account of its own: all purchases, subscriptions, invoices and payment methods go through Avonao Billing, and checkout and the billing portal are Avonao Billing's. Stripe's terms and Avonao Billing's terms apply to the payment; Stripe, as merchant of record, collects the price and calculates, collects and remits sales tax, VAT and similar taxes where required, and shows them on the invoice. We do not receive or store your card number. Invoices are available in the dashboard and from the Avonao Billing portal. Fees are charged in the currency the pricing page and checkout show you (euros in the EU, pounds in the UK, US dollars elsewhere, unless you choose another of these three with the currency switcher), at the same number in each currency and with no conversion, and are exclusive of any tax that Stripe, as merchant of record, adds.

7.2 Billing cycle and automatic renewal#

Paid plans are billed in advance, monthly or annually, as you choose at checkout. Your subscription renews automatically at the end of each billing period for a period of the same length, at the then-current price, until you cancel. Extra seats renew with the plan. We tell you by email at least 30 days before a price change takes effect on your renewal, as stated in section 6.

7.3 Free trial#

The Pro plan may be offered with a 14-day trial. A card is required to start it. Each workspace gets one trial. Unless you cancel before the trial ends, the subscription converts to paid and your card is charged.

7.4 Cancellation#

You can cancel at any time in the dashboard or through the API. Cancelling ends the subscription at the end of the billing period you have already paid for, whether that period is a month or a year. The same applies when you cancel Tools alone. Nothing further is charged, you keep your plan until that date, and you can undo the cancellation before it. To avoid a renewal charge, cancel before the renewal date.

When the period ends, the workspace moves to the Free plan and keeps working, with the Free plan's allowances, seats, limits and receipt retention window. Cancelling does not delete your account or your data. Receipts older than the Free window are removed by normal retention once the 30 days described in section 7.6 have passed (section 8). Your account and its data are deleted only if you delete the account (section 12.2). See Cancelling.

7.5 Refunds#

• Cancel any time. Cancellation is described in section 7.4. Cancelling stops future charges; it does not by itself refund a payment already made.
• The first payment of a plan can be refunded within 14 days of that payment. The refund is prorated based on how much of the plan's allowance you have already used. This applies to the first payment of a plan, monthly or annual, and to the first payment after you move to a different plan.
• Later payments (renewals) are not refundable, except where the law requires it, as stated in section 3.3, or in this case: if you were charged a renewal and contact us within 7 days of the charge without having used the Service since it, we will refund it.
• Top-up packs that have been used, in whole or in part, are not refundable. An unused pack is refundable within 14 days of purchase.
• Extra seats follow the plan they are added to.
• Mistaken or duplicate charges are corrected and refunded in full. Write to agined-billing@avonao.com with the invoice number.
• Statutory rights. Where you are a consumer and the law of your country gives you a right of withdrawal or refund that cannot be waived, that right applies and nothing in this section reduces it.

Approved refunds are paid to the original payment method by Stripe, the merchant of record, via Avonao Billing. Refunds do not delete receipts that were already issued.

7.6 Failed payments, downgrade and non-payment#

If a payment fails, it is retried under Stripe's retry rules, applied through Avonao Billing, and the subscription is marked past due. While it is past due, paid plan features are suspended until the payment is settled. You can update your card in the billing portal and settle the open invoice, after which paid features return. If the subscription ends because of non-payment, the workspace moves to the Free plan and keeps working, as described in section 7.4. A downgrade or lapse changes allowances, seats, limits and the receipt retention window of your plan. Receipts older than the new, shorter window are deleted after a grace period following the change: 7 days after a downgrade to another paid plan, and 30 days when the paid plan ends, as described in section 8.

7.7 Disputed charges#

If you believe a charge is wrong, write to agined-billing@avonao.com before you start a payment dispute, so that we can correct it quickly. We may suspend an account while a chargeback on it is open.

8. Your content and our receipts#

You keep all rights in what you send to the Service.

• What we store. For content attestation we receive and store only the hash of the document, not the document, and the same holds for every tool that hashes what you send: prompts, frames, mail, files, datasets, page HTML and reports are hashed and not stored, unless a tool's documentation says that it returns or keeps something. For agent-call and webhook relays we store hashes and metadata, not request bodies or headers. Receipts also contain readable metadata such as full URLs, labels, domain and package names, party identifiers you send (for example e-invoice sender and receiver ids) and, for commits, author names and email addresses, as described in Retention and erasure. People in Records are identified by a Salted subject hash. Credentials and webhook secrets you store with a tool are kept sealed and never returned. Details are in the Privacy Policy and Data and privacy.
• Where receipts are stored. Receipts are your customer data. On the Free, Starter, Pro, Pro+ and Team plans we store them on Cloudflare in the workspace's data region: on Free and Starter in the region's shared Cloudflare D1 database, and on Pro, Pro+ and Team in the workspace's own separate store on Cloudflare, one per workspace, with strict tenant isolation. On the Scale and Enterprise plans, and with the isolation add-on, we store them in the workspace's own Amazon Aurora database on Amazon Web Services, in the AWS region the workspace chose, and when you move to one of those plans or buy the add-on, the receipts you already have are moved into it. If you move back from Scale or Enterprise or drop the add-on, they are copied back into Cloudflare D1 and checked, and the Aurora database is retired after the grace period.
• Licence to us. You grant us a worldwide, non-exclusive licence to process what you send, as needed to provide, secure and support the Service for you.
• Receipt retention by plan. Receipts are append-only while we keep them, and we do not offer a way to edit one. We keep each receipt for the retention window of your plan and then delete it: Free 7 days, Starter 30 days, Pro 90 days, Pro+ 180 days, Team 365 days, Scale 730 days. Enterprise is custom: no automatic deletion unless your account settings or your order say so. You can choose a shorter window in your settings, never a longer one. If you downgrade, receipts older than the new window are deleted after a 7-day grace period. If your paid plan ends, the window of the plan that ended keeps applying for the 30-day grace period in section 12.4. You can delete or redact a receipt yourself at any time. Closing an account does not delete receipts before their window ends. A deleted receipt cannot be fetched from the Service again. A copy you exported, or one you handed to a third party, can still be verified offline with our published public keys, including after your account closes. Export what you need before it expires.
• Your responsibility. You are responsible for having the right to send the content, URLs and data you submit, and for not putting secrets or unnecessary personal data in readable receipt fields.
• Personal data. Where you send personal data to the Service, you are the controller (or processor for your own customer) and we act as your processor under the Data Processing Addendum.

9. Service levels#

We run the Service with care and publish its status at /status on a best-effort basis. The self-serve plans (Free, Starter, Pro, Pro+, Team and Scale) carry no uptime commitment, service credits or support response time. We schedule maintenance when we can to limit disruption, but we do not promise uninterrupted or error-free operation. Receipt verification does not depend on the Service being available, because it needs only a receipt and a public key. Customers on an Enterprise plan with a signed order form are covered by the Enterprise Service Level Agreement, which sets out an uptime commitment, service credits and incident response targets. Any other availability, support or response commitment exists only if it is set out in a written agreement signed by us.

10. Intellectual property and feedback#

We and our licensors own the Service, including its software, documentation, designs and trademarks. These terms give you a limited, non-exclusive, non-transferable, revocable right to use the Service during the term in line with your plan. You may not copy, resell, reverse engineer or build a competing service from the Service, except to the extent the law allows regardless of this clause. Open-source components remain under their own licences. Our published verification examples and documentation code samples may be used to verify and integrate receipts.

If you give us feedback or suggestions, you grant us a perpetual, worldwide, royalty-free right to use them without obligation to you. We will not name you as the source without your permission.

11. Disclaimers#

To the extent the law allows, the Service is provided "as is" and "as available". We disclaim all warranties not expressly stated in these terms, including implied warranties of merchantability, fitness for a particular purpose, non-infringement and accuracy. We do not warrant that the Service will be uninterrupted, error-free or free of harmful components, that a scheduled check will complete in every window, or that a receipt will be accepted as evidence by any court, authority, counterparty or auditor. Some jurisdictions do not allow certain disclaimers, so some of the above may not apply to you.

12. Term, suspension and termination#

12.1 Term#

These terms apply from when you first accept them until your account is closed or we end it.

12.2 By you#

You may stop using the Service at any time, cancel a paid plan as described in section 7.4, and delete your account from the dashboard or with POST /api/v1/account/delete.

12.3 By us#

We may suspend or end your access: (a) immediately if you materially breach these terms or the Acceptable Use Policy, if your use endangers the Service, other customers or third parties, if a payment is overdue or charged back, or if the law requires it; and (b) for any other reason with 30 days' notice, in which case we refund the unused part of any prepaid fee. Where we suspend, we tell you why and what would restore access, unless the law forbids it or notice would put others at risk. You can appeal a suspension through /support, and a person reviews it.

12.4 Data on termination#

• When a paid plan ends. A paid plan that ends, by cancellation or non-payment, does not end the agreement: the account and its workspaces keep working on the Free plan (section 7.4). For 30 days, receipts keep the retention window of the plan that ended, so you can export them. After that, receipts older than the Free window are removed by normal retention (section 8). Nothing else is deleted because a plan ended.
• Account deletion. Your account is deleted only when you delete it (section 12.2). Deletion starts a 30-day grace period in which the account keeps working, and you can export receipts and cancel the deletion.
• Deleting your Avonao ID. Your Avonao ID is deleted under Avonao ID's rules. You cannot request its deletion while you have a paid subscription on a platform; cancel it there first. A free subscription ends with your Avonao ID and its content and data are deleted. After you confirm, you have 30 days to restore the account; then Avonao ID deletes it permanently. [CONFIRM: how the Service's own deletion above and the 30-day restore at Avonao ID combine, and whether the dashboard's account deletion enforces the paid-subscription block.]
• Erasure. When the deletion grace period ends, the erasable workspace data is removed: watch registrations and their targets, connector data and credentials, key-rotation requests and support tickets.
• What is retained. Receipts are not removed by the erasure step and age out under the retention window of the plan (section 8). Also retained are the Tools subscription and billing records (for as long as tax and accounting law requires), abuse flags and appeals, and the audit log. An SBOM you asked sbom.notarize to keep is retained for its ten years in locked storage, which no one, including us, can delete earlier. See Retention and erasure and the retention table in the Privacy Policy. Personal data in retained records is handled under the Privacy Policy, and a request about personal data in a receipt is answered by a person.
• Export. Before you leave, you can list and download your receipts with the public key set. They remain verifiable offline for as long as you keep them, even after we have deleted our stored copy.

12.5 Survival#

Sections 3.1, 8, 10, 11, 13, 14, 15, 16 and 17, the retention described in section 12.4, and any accrued payment obligation survive termination.

12.6 Switching provider (EU Data Act)#

You may switch to another provider or to your own systems, or have your data erased, as Articles 23 to 31 of Regulation (EU) 2023/2854 provide. The switching terms on our EU Data Act page form part of these terms: they set the notice, the transition period of up to 30 days, the retrieval period of at least 30 days, the data you can export and its formats, and the erasure that follows. Where they differ from section 12.4, they prevail for a switch you ask for. We charge nothing for switching or for exports.

13. Indemnities#

By you. You will defend and indemnify us and our officers, employees and contractors against third-party claims, and resulting losses, damages and reasonable costs, arising from content, URLs or data you send to the Service without the right to do so, from your use of the Service in breach of the Acceptable Use Policy or the law, or from your misrepresentation of a receipt. We will tell you promptly of the claim, let you control its defence (we may take part at our own cost), and you will not settle it in a way that admits fault for us without our consent.

By us. We will defend you against a third-party claim that the Service, as we provide it and used under these terms, infringes that party's intellectual property rights, and pay the damages finally awarded or the settlement we agree to. We may modify the Service, obtain a right to continue, or end the affected feature and refund the prepaid fee for it. This is our whole liability for infringement claims. The same conditions as above apply to your notice and our control of the defence.

14. Limitation of liability#

To the extent the law allows:

• we are not liable for indirect, incidental, special, consequential or punitive loss, or for lost profit, revenue, goodwill or data, even if told it was possible; and
• our total liability for all claims relating to the Service is limited to the fees you paid to us in the 12 months before the event that gave rise to the claim. For the free plan and the test key, our total liability is limited to 100 US dollars.

These limits do not apply to liability that cannot be limited by law, including liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, and wilful misconduct, and do not limit your obligation to pay fees due or your indemnity for infringement of our intellectual property. They apply to the maximum extent the law allows. They reflect an allocation of risk that is reflected in our prices.

15. Governing law and disputes#

These terms, and any dispute relating to them or the Service, are governed by the laws of the State of Delaware, USA, without regard to its conflict-of-law rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

Before bringing a claim, each party will first write to the other and try in good faith to settle the dispute for 30 days. After that, the state and federal courts located in New Castle County, Delaware have exclusive jurisdiction, and each party submits to them and waives objections to that venue. Either party may seek urgent injunctive relief from any competent court to protect its intellectual property or confidential information.

If you are a consumer, this section does not remove mandatory protections of the law where you live, including your right to bring a claim in the courts of your country of residence where that law gives it to you.

16. Export controls and sanctions#

You will not use, export or re-export the Service in breach of United States or other applicable export control or sanctions law. You confirm that you are not on a United States or other applicable government restricted-party list, and are not located in, or controlled by a person in, a country or region subject to comprehensive United States sanctions. We may block access where we reasonably believe this section is breached.

17. General#

• Changes to these terms. We may change these terms. For material changes we tell account owners by email at least 30 days before they take effect. If you do not agree, you may cancel before the change takes effect, and we will refund the unused part of any prepaid annual fee for the period after it. Continued use after the change takes effect means you accept the new terms. Changes required by law, and changes that do not reduce your rights, may take effect immediately and are shown by the "updated" date above.
• Entire agreement. These terms and the documents in section 1.1 are the whole agreement about the Service and replace earlier understandings.
• Notices. We give notice by email to the account owner, in the dashboard, or on this site. You give notice to support@agined.com, or by post to the legal address in section 1 (the Delaware address; see section 18).
• Assignment. You may not assign these terms without our consent. We may assign them to an affiliate or a successor to the business, with notice to you.
• Severability and waiver. If a provision is unenforceable, the rest continues. A delay in enforcing a right is not a waiver.
• Force majeure. Neither party is liable for delay or failure caused by events beyond its reasonable control, including failure of internet, power or third-party infrastructure providers, but payment obligations remain.
• Relationship. The parties are independent contractors. There are no third-party beneficiaries, other than our officers and contractors named in section 13.
• Language. If these terms are translated, the English text prevails.
• Parental controls. As 47 U.S.C. § 230(d) requires, we tell you that parental control protections, such as computer hardware, software and filtering services, are commercially available and may help you limit access to material that is harmful to minors. The US Federal Trade Commission describes them and names current providers in How to use parental controls.

18. Contact#

Questions about these terms: support@agined.com. Billing: agined-billing@avonao.com. Billing for Agined is handled by Avonao.

Avonao, Inc., 254 Chapman Rd, Ste 208 #21918, Newark, Delaware 19702, USA (legal address).

Legal address and mailing address. The Delaware address above is our legal address. Our mailing address, for general correspondence only, is Avonao, Inc. • 2261 Market Street PMB 10671, San Francisco, CA, 94114, United States. The mailing address is not our legal address. All legal correspondence, including notices under these terms, formal legal process, legal claims and requests from courts, regulators and authorities, must be sent to the legal address in Delaware. Legal correspondence sent only to the mailing address is not treated as received by us.