Terms of Service

Cavos provides embedded, self-custodial wallet infrastructure for developers. You integrate the SDK or API into your application so your end users can create and use a wallet without Cavos holding their signing keys.

We may add, change, or remove features, chain adapters, networks (including testnet vs mainnet), or plan entitlements. Material reductions to paid plan entitlements will be handled under Section 18 (Changes).

The Services are a developer tool. We do not operate your application, do not custody end-user assets, and are not a bank, money transmitter, exchange, broker, or investment adviser.

You must be at least 18 years old (or the age of majority in your jurisdiction, if higher) and able to form a binding contract.

You must provide accurate registration information (email is required; name and organization are optional) and keep it current. You are responsible for all activity under your account, including API keys, app IDs, and organization members you invite.

Keep credentials confidential. Notify us at hello@cavos.xyz if you believe your account has been compromised.

We may refuse, suspend, or limit an account as described in Section 16.

Current published plans (USD, as of 3 September 2026; see cavos.xyz/pricing for the live list):

Paid plans are month-to-month subscriptions. The fork between paid plans is recovery: Essential uses on-device recovery methods; Complete adds hardware-isolated enclave recovery as described on the pricing page. Every plan includes the SDK and the then-current chain adapters. Gas sponsorship is not included in these fees (Section 5).

Billing processor. Subscription payments are processed by Stripe. We store a Stripe customer ID and subscription ID. Full payment details (card numbers and similar) are handled by Stripe and do not touch Cavos servers. Stripe’s terms and privacy notice also apply to the payment flow.

When fees are charged. Paid plans are billed in advance for each monthly period through Stripe. Prices are in United States dollars unless we display otherwise at checkout.

Taxes. Fees are as displayed at checkout. Stripe may collect and remit taxes that it is required by law to collect. Except for amounts Stripe actually collects and remits, you are responsible for taxes arising from your purchase or use of the Services. These Terms do not state that Cavos collects Costa Rican IVA or any other VAT as a registered tax collector.

Failed payments. If a charge fails, we may retry per Stripe’s retry settings, downgrade you to Free, or suspend paid entitlements until payment succeeds.

No refunds for unused time, except where required by law or where we terminate for convenience. If you cancel, you keep the paid plan until the end of the then-current billing period, then revert to Free.

Price changes. We may change plan prices or entitlements on notice under Section 18. The new price applies from the next billing period after the notice period.

The Free plan does not require a credit card. Each new wallet your application provisions counts toward the 1,000-create cap. Existing wallets, reads, and signatures are not capped. When the cap is reached, new creates pause until you upgrade or we otherwise agree in writing.

Free-plan features, rate limits, and support levels may differ from paid plans. We may modify or discontinue the Free plan with notice under Section 18.

Free use is still subject to these Terms, including acceptable use and the self-custody provisions.

Gas sponsorship (paymaster, relayer, fee-bump, or similar, depending on the chain) may be available on every plan. It is funded separately and billed to you (the integrator). It is not included in Free, Essential, or Complete monthly fees.

You are responsible for maintaining any sponsorship balance, policies, and spend limits you configure. If the balance is insufficient or a relayer rejects an operation, end-user transactions may fail. We do not guarantee that any particular transaction will be sponsored.

Sponsorship usage and related charges will appear through the dashboard and/or Stripe (or another billing path we enable for gas). We may suspend sponsorship if your balance is unpaid or if we reasonably believe it is being abused.

You are solely responsible for your application: its features, content, compliance, privacy notices, and relationship with your end users.

You must:

• present your own terms and privacy policy to end users;
• obtain any consents required for your processing of their data;
• not represent that Cavos operates your application or custodians their assets;
• ensure that end users who use a Cavos-powered wallet are directed to the End-User Terms where we reasonably require it.

Under the DPA, you are the Controller of end-user personal data processed through the Services; Cavos, LLC is the Processor.

You are responsible for how you configure authentication (for example Google, Apple, or email/password), session policies, recovery options, and on-chain spending limits.

The Services are designed so that signing keys are created and used on the end user’s device. Cavos does not hold, store, or have access to private keys or reconstructable key shards that can move user funds. There is no MPC shard on our servers that we can use to sign.

This means, among other things:

• we cannot recover a wallet if the user loses access to their device, passkey, recovery method, or sign-in provider;
• we cannot reverse, cancel, or refund blockchain transactions once submitted;
• we cannot freeze or confiscate end-user funds;
• wallets are not supposed to depend on Cavos remaining online in order for already-deployed on-chain accounts to exist.

Enclave recovery (where enabled on Complete) rewraps a device encryption key in a hardware-isolated environment. It does not mean Cavos holds the user’s Stellar control seed or signs transactions on the user’s behalf.

You will not market the Services as custodial wallet services, and you will not ask Cavos to take custody of keys or assets.

You will not, and will not allow others to:

• violate applicable law, including sanctions and anti-money-laundering rules;
• use the Services for fraud, phishing, or financing of terrorism;
• interfere with or overload the Services, or probe them except through documented APIs within published rate limits;
• reverse engineer the Services except to the extent this restriction is prohibited by law;
• resell, white-label, or provide the Services as a competing embedded-wallet platform without our prior written consent;
• misrepresent affiliation with Cavos or use our marks except as allowed in Section 9;
• attempt to access another customer’s account, keys, or data;
• use the Services to custody assets for end users (the architecture is self-custodial);
• submit malware or attempt to bypass authentication, paymaster, or relayer policies.

We may investigate suspected violations and cooperate with law enforcement where legally required.

Our IP. Cavos and its licensors own the Services, documentation, dashboards, and all related intellectual property. These Terms do not transfer ownership to you.

License to you. During the term, we grant you a non-exclusive, non-transferable, non-sublicensable (except to your end users as needed to use your application) license to use the Services and to embed the SDK in your application, solely in accordance with these Terms and the documentation.

Your IP. You retain ownership of your application, content, and trademarks. You grant Cavos a limited license to host and process materials you submit as needed to provide the Services.

Feedback. You may give feedback. We may use it without restriction or obligation to you.

Branding. “Cavos,” “Cavos Labs,” and related marks are brand names of Cavos, LLC. You may state that your application “uses Cavos” in a factual way. You may not imply partnership, certification, or endorsement without our written permission.

Open source. SDK packages may include open-source components under their own licenses. Those licenses control as to those components.

Each party may receive non-public information from the other (“Confidential Information”), including API keys, unpublished product information, and your usage data. The recipient will use it only to perform under these Terms and will protect it with at least reasonable care.

Confidential Information does not include information that is public through no fault of the recipient, independently developed, or rightfully received from a third party without duty of confidentiality. Disclosure required by law is permitted with prior notice where legally allowed.

We aim to keep the platform available, but we do not commit to any uptime percentage, support response time, or service credit in these Terms unless we later sign a separate written SLA.

The Services depend on third parties we do not control, including Stripe, cloud providers, authentication providers, and public blockchains (Starknet, Solana, Stellar) and their RPC, paymaster, and relayer networks. Blockchains may halt, fork, congest, or reorganize.

We may perform maintenance, throttle abusive traffic, or suspend features that present a security or legal risk.

No over-promise: these Terms do not include SOC 2, insurance, or other compliance certifications. Do not rely on certifications that are not stated here.

THE SERVICES ARE PROVIDED “AS IS” AND “AS AVAILABLE.” TO THE MAXIMUM EXTENT PERMITTED BY LAW, CAVOS DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.

We do not warrant that the Services will be uninterrupted, error-free, or free of harmful components, or that blockchain transactions will confirm, remain irreversible in the sense you expect after a fork, or have any particular economic result.

Nothing we provide is financial, investment, legal, or tax advice.

You will defend and indemnify Cavos, LLC and its members, officers, employees, and contractors against claims, damages, and reasonable legal fees arising from:

• your application or your end users’ use of it;
• your breach of these Terms or of law;
• your infringement or misappropriation of a third party’s rights;
• content or instructions you provide to us;
• any allegation that you (not Cavos) custody end-user assets or keys.

We will give you prompt notice of a claim (delay only matters if it prejudices you) and reasonable cooperation at your expense. You may not settle a claim that imposes an obligation on Cavos or admits fault by Cavos without our prior written consent, not to be unreasonably withheld.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, CAVOS AND ITS AFFILIATES, MEMBERS, OFFICERS, EMPLOYEES, AND AGENTS ARE NOT LIABLE FOR:

• lost profits, lost revenue, lost data, lost or stolen digital assets, business interruption, or indirect, incidental, special, consequential, or punitive damages, even if advised of the possibility;
• loss of funds or assets resulting from end-user actions, compromised sign-in providers, lost devices or passkeys, wrong addresses, or unintended signatures;
• failures, bugs, forks, congestion, or reorgs of Starknet, Solana, Stellar, or other networks, or of third-party smart contracts, RPCs, paymasters, or relayers;
• Stripe or other processor outages or charge outcomes;
• your decision to use Free-plan limits or to exhaust a gas-sponsorship balance.

OUR TOTAL LIABILITY FOR ALL CLAIMS ARISING OUT OF THESE TERMS OR THE SERVICES IS LIMITED TO THE GREATER OF (A) THE AMOUNTS YOU PAID TO CAVOS FOR THE SERVICES IN THE TWELVE (12) MONTHS BEFORE THE CLAIM OR (B) USD 100.

These limits apply to all theories of liability (contract, tort, statute) and are an essential basis of the bargain. Some jurisdictions do not allow certain limitations; in those jurisdictions our liability is limited to the maximum extent permitted.

We may suspend access to the Services (in whole or part, including API keys or gas sponsorship) immediately if:

• you materially breach these Terms or the acceptable-use rules;
• a charge is overdue;
• we reasonably believe continued use poses a security, legal, or sanctions risk;
• we are required to do so by law or by a payment network.

We will restore access when the issue is resolved, unless we terminate under Section 16. Suspension does not, by itself, delete wallets on-chain.

These Terms start when you first accept them or use the Services and continue until terminated.

You may stop using the Services and cancel a paid plan at any time through the dashboard or by emailing hello@cavos.xyz. Cancellation of a paid plan takes effect at the end of the current billing period; you then drop to Free unless you delete the account. Per the published pricing FAQ, cancelling a paid plan does not delete existing wallets.

We may terminate these Terms:

• for convenience on 30 days’ notice;
• immediately for material breach that is not cured within 15 days after notice (or immediately if the breach is not reasonably curable, including sanctions or fraud);
• immediately if we discontinue the Services.

Upon termination or account deletion, your license ends. We will delete or anonymize personal data as described in the Privacy Policy and DPA. Sections that by their nature should survive (including 7, 9–14, 17–20) survive.

On-chain accounts and assets are not “deleted” by us; they remain on the relevant blockchain under the end user’s control.

We may update these Terms. For material changes, we will notify you by email to the address on your account at least 14 days before the changes take effect, unless a shorter period is required for security or legal reasons. We will post the updated Terms at cavos.xyz/terms with a new “Last updated” date.

Continued use after the effective date constitutes acceptance. If you do not agree, you must stop using the Services and cancel before the effective date.

You represent that you are not, and are not acting for, a person prohibited from receiving the Services under applicable export-control or sanctions laws (including those of the United States). You will not use the Services in a manner that would cause Cavos to violate those laws.

These Terms are governed by the laws of the State of Delaware, without regard to conflict-of-law rules.

The parties will first try to resolve disputes informally by contacting hello@cavos.xyz. If a dispute proceeds to court, the state or federal courts located in the State of Delaware will have exclusive jurisdiction, except that either party may seek injunctive relief in any court of competent jurisdiction to protect intellectual property or confidential information.

Entire agreement. These Terms, plus the Privacy Policy, DPA, and any order or plan you accept in the dashboard, are the entire agreement for the Services and supersede prior discussions on the same subject. End-User Terms apply to end users, not as your customer contract.

Order of precedence. If these Terms conflict with the DPA on the processing of personal data, the DPA controls for that subject. If they conflict with a written amendment signed by Cavos, LLC, the amendment controls.

Assignment. You may not assign these Terms without our consent, except to a successor in a merger or sale of substantially all assets if the successor is not a competitor and agrees in writing to be bound. Cavos may assign to an affiliate or in connection with a reorganization, merger, or sale of assets.

Severability; waiver. If a provision is unenforceable, the rest remains in effect. A waiver must be in writing.

Notices. We will send notices to the email on your account. You will send legal notices to hello@cavos.xyz.

No third-party beneficiaries, except indemnified persons under Section 13.

Force majeure. Neither party is liable for delay caused by events beyond reasonable control, including blockchain or infrastructure failures, provided the affected party uses reasonable efforts to mitigate.

Relationship. The parties are independent contractors. These Terms do not create a partnership, joint venture, or agency. (Cavos, LLC is taxed as a partnership for US federal income-tax purposes; that tax classification does not make you a partner of Cavos.)

Language. These Terms are in English. That is the controlling version.

Questions about these Terms: hello@cavos.xyz

Cavos, LLC
Operating the Cavos / Cavos Labs developer platform at cavos.xyz