AURA — Terms of Service

Status: DRAFT — interim terms pending counsel review (Davis Wright Tremaine, Week 5–6). Not legal advice. Standard Stripe-Atlas SaaS skeleton with AURA addenda merged at their marked insertion points. [LLC LEGAL NAME] is filled by Felix before public launch.

Last updated: Day 30 (interim draft)

1. Acceptance of Terms

By creating an account or using the AURA platform ("the Service") you agree to these Terms of Service. If you do not agree, do not use the Service. You must be of the age of majority in your jurisdiction to use the Service.

During the beta period, the AURA platform and all payment processing are operated by Meet Me In The Cloud, INC ("the Operator"), the legal entity of record. Upon formation of AURA Protocol Inc. (a Delaware C-Corporation, expected Week 5–6), this Agreement and all subscriptions, customer data, and payment relationships will be assigned to AURA Protocol Inc. Your continued use after that assignment constitutes acceptance of the assignment. We will provide notice by email before the transfer completes.

2. Accounts

You are responsible for the security of your account credentials and for all activity under your account. Provide accurate information and keep it current. Notify us immediately of any unauthorized use.

3. Acceptable Use

You may not use the Service to violate the rights of others, to submit identity material that is not your own, to attempt to circumvent security or access controls, or for any unlawful purpose.

ADDENDUM A — Biometric Identity Vault

A.1 What we collect. To create your AURA Identity Credential, you submit biometric samples (face image, voice sample, motion video). These are processed to derive non-reversible identity embeddings. Where supported, raw capture is processed on-device; the platform's design goal is that raw biometric media is never persisted in unencrypted form.

A.2 How it is stored. Derived samples and embeddings are encrypted at rest using AWS KMS-managed keys and stored in AWS S3 (region us-west-2). A content-addressed integrity receipt (hash + IPFS CID) is retained so you can verify your vault has not been altered. Encryption keys are not exportable by you and are not shared with third parties.

A.3 Your rights and consent. You represent that the biometrics you submit are your own, that you are of age of majority, and that you consent to the processing described here and in the Privacy Policy. You may request deletion of your biometric vault at any time (see Privacy Policy, Data Deletion). Deletion of vault material does not by itself burn or revoke an already-minted AURA Identity Credential (see Addendum B).

A.4 No biometric resale. We do not sell, license, or use your biometric data for advertising, model training for third parties, or any purpose other than operating the identity, detection, and enforcement features you have subscribed to.

ADDENDUM B — AURA Identity Credential (AIC) Custody

B.1 What the AIC is. The AURA Identity Credential is a non-transferable ("soulbound") token recorded on the Polygon blockchain that anchors your identity vault.

B.2 Custodial model. During the beta and until self-custody claim is available, the AIC is minted to and held in a custodial wallet controlled by the Operator on your behalf. You direct all permitted uses (licensing, detection, enforcement, succession) through the platform. Custodial holding does not transfer beneficial ownership of the credential to the Operator.

B.3 Self-custody claim. When the claim flow is released, you may move your AIC to a wallet you control. Once claimed, on-chain actions are irreversible and are your responsibility.

B.4 Irreversibility disclosure. Blockchain transactions cannot be reversed, rolled back, or refunded by us. Network (gas) conditions may delay minting. We are not liable for blockchain network failures, congestion, forks, or third-party wallet loss.

ADDENDUM C — Detection & Enforcement

C.1 Scope. As part of paid tiers, AURA scans publicly accessible internet sources for likely unauthorized uses of your likeness or voice and surfaces them to you for review.

C.2 Best-effort, not guarantee. Detection is automated, probabilistic, and best-effort. We do not guarantee that all unauthorized uses will be found, that flagged matches are infringing, or that any takedown or legal action will succeed. You are responsible for confirming each match before requesting enforcement action.

C.3 Enforcement actions. At your direction we may generate and send DMCA takedown notices and right-of-publicity demand letters. Submitting a takedown is a legal act with potential liability for misrepresentation; by directing one you confirm a good-faith belief that the use is unauthorized. AURA acts as your agent in transmitting notices and is not your attorney; nothing here is legal advice or creates an attorney–client relationship.

C.4 Right-of-publicity carve-outs. Enforcement is intended to support, and is bounded by, applicable right-of-publicity and digital-replica law including California AB 2602 and AB 1836, New York S.8420-A / Civil Rights Law §§ 50–51, and the Tennessee ELVIS Act. We do not pursue, and you must not direct us to pursue, uses that are protected (e.g., news, commentary, parody, satire, or other lawful fair use). We may decline any enforcement request.

ADDENDUM D — Subscriptions, Billing & Refunds

D.1 Plans. Paid access is offered as a recurring subscription (currently the $39/month Starter tier; Pro and Enterprise tiers available by invitation during beta). Prices are in USD and shown at checkout.

D.2 Auto-renewal. Subscriptions renew automatically each billing period until cancelled. By subscribing you authorize the Operator (via Stripe) to charge your payment method on each renewal.

D.3 Cancellation. You may cancel any time from the in-app billing page or the Stripe customer portal. Cancellation stops future renewals; access continues until the end of the current paid period.

D.4 Refund policy. Full refund within 14 days of your initial subscription start if you request it and have not minted an AIC or initiated an enforcement action in that window. After 14 days, or once an AIC is minted, fees are non-refundable except where required by law. Renewal charges are not refundable; cancel before renewal to avoid them.

D.5 Promotional codes. Founding-artist, beta, and investor promotional codes may grant discounted or free access for a fixed term. When a promotional term ends the subscription renews at the then-current standard price unless cancelled. Promo codes carry no cash value.

D.6 Taxes. Prices are exclusive of applicable taxes; you are responsible for taxes assessed on your subscription.

4. Intellectual Property

The Service, excluding your submitted content and identity material, is owned by the Operator and its licensors. You retain all rights in your own identity material; you grant the Operator a limited license to process it solely to provide the Service.

5. Disclaimers

The Service is provided "as is" and "as available" without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. Detection and enforcement outcomes are not guaranteed (Addendum C).

6. Limitation of Liability

To the maximum extent permitted by law, the Operator is not liable for indirect, incidental, special, consequential, or punitive damages, or for blockchain-network events described in Addendum B. Aggregate liability is limited to the amounts you paid in the twelve months preceding the claim.

ADDENDUM E — Governing Law & Dispute Resolution

E.1 Governing law. During beta this Agreement is governed by the laws of the State of California, without regard to conflict-of-laws rules. Upon assignment to AURA Protocol Inc., the governing law becomes the State of Delaware; the substantive terms otherwise remain in effect.

E.2 Arbitration. Any dispute arising out of or relating to this Agreement or the platform will be resolved by binding arbitration administered by JAMS in Los Angeles, California, before a single arbitrator, under the JAMS Comprehensive Arbitration Rules. Judgment on the award may be entered in any court of competent jurisdiction.

E.3 Class-action waiver. Disputes are resolved individually; you and the Operator waive any right to bring or participate in a class, collective, or representative action.

E.4 Small-claims & injunctive carve-out. Either party may bring an individual claim in small-claims court, and either party may seek injunctive relief in court to protect intellectual property or biometric data pending arbitration.

7. Changes

We may update these Terms. Material changes will be notified by email or in-app. Continued use after the effective date constitutes acceptance.

8. Contact

Operator of record: Meet Me In The Cloud, INC (legal entity name to be finalized as [LLC LEGAL NAME] before public launch). Questions: legal@joinauraprotocol.com.