XloudID Terms of Service and User Agreement

1. Acceptance of Terms, Severability, and Survival

By creating an XloudID, accessing, or using the authentication service, developer portal, or underlying infrastructure (collectively, the "Service") provided by XloudOne LLC ("we," "our," or "us"), you agree to be bound by these Terms of Service. If you do not agree to these terms, you must not create an account or use the Service.

Severability: If any provision of these Terms is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, the remaining provisions will remain in full force and effect.

Survival: Even if you terminate your account, permanently delete your vault, or cease using the Service, provisions regarding indemnification, arbitration, liability limitations, and acceptable use will survive the termination and remain legally binding.

2. Account Creation, Security, and Age Restrictions

Eligibility and Verifiable Consent: You must meet the minimum age of majority in your jurisdiction to independently create an XloudID. If you are under the legal age of majority, you may only create an XloudID if your parent or legal guardian provides Verifiable Parental Consent (VPC) in strict accordance with the Children’s Online Privacy Protection Act (COPPA) and applicable state laws.

High Privacy by Default: In compliance with 2026 Age-Appropriate Design Codes across multiple jurisdictions, accounts for underage users ("Child Accounts") are automatically provisioned with the highest possible privacy restrictions by default. Access to mature content categories, unchecked third-party API queries, and precise geolocation tracking are categorically blocked and disabled. Any IP address or device identifier locked to a Child Account remains restricted until the user reaches the legal age of majority.

Security Responsibility: You are solely responsible for maintaining the confidentiality of your account credentials, encryption keys, and multi-factor authentication methods. You must notify us immediately of any suspected unauthorized access.

3. Digital Sovereignty and Hybrid Decentralized Storage Vaults

Your Data, Your Property: You retain full, exclusive ownership of all personal data, identity attributes, and digital assets associated with your XloudID. XloudOne claims no ownership rights over your personal information. All encrypted data is exclusively stored within the XloudOne ecosystem.

Hybrid Decentralized Network: XloudOne utilizes a proprietary hybrid decentralization system. Your account operates as a dedicated, private storage vault on our network. This vault backs up and stores your encrypted items according to the exact parameters you configure.

Storage Limits and Cloaked Assets: Your dedicated vault is subject to technical capacity limits based on your account tier. If your vault reaches maximum capacity, any subsequently acquired items, data, or purchased digital assets will be immediately "cloaked." Cloaked assets are legally yours but will be rendered dormant, hidden, and technically inaccessible for use across the network. To uncloak items, you must permanently remove existing data to free up space or purchase additional vault storage capacity.

License to Operate: By using the Service, you grant XloudOne a limited, worldwide, non-exclusive mandate solely to process, encrypt, store, and route your authentication requests and data blobs as strictly necessary to operate the network, without granting us access to the underlying plaintext data.

4. Xognito Security Intelligence, Pattern Recognition, and Acceptable Use

While XloudOne is built on a zero-knowledge architecture that respects your privacy through encryption, we maintain an absolute zero-tolerance policy for illegal, fraudulent, and malicious activity.

Xognito Security: To protect the integrity of the XloudOne ecosystem, our servers utilize Xognito, our proprietary in-house security intelligence system. Xognito employs strict AI-driven pattern recognition, heuristics, and constant monitoring of network metadata, traffic velocity, and non-encrypted user submissions (such as government IDs uploaded for verification or public profile images) to identify unusual behavior, scams, or fraud.

Manual Review and Enforcement: If Xognito's threat detection algorithms flag suspicious, anomalous, or malicious activity, the associated metadata and account behavior are subjected to a manual server review by our dedicated security staff. XloudOne reserves the right to immediately block, restrict, freeze, or permanently remove your access to XloudID and the broader ecosystem at our sole discretion, without prior notice.

Zero-Tolerance for Illegal Content: The storage, distribution, or facilitation of disturbing, misleading, harmful, or illegal content—including but not limited to Child Sexual Abuse Material (CSAM), malware, or terroristic material—is strictly prohibited.

Mandatory Reporting: In strict compliance with 18 U.S.C. § 2258A and global equivalents, any detection of CSAM or child exploitation on the XloudOne network will result in an immediate, permanent account ban. The account will be preserved, and the activity will be immediately reported to the CyberTipline of the National Center for Missing and Exploited Children (NCMEC) and all appropriate federal and local law enforcement authorities. You will be permanently banned from creating future accounts.

5. Network Bandwidth and Resource Throttling

To ensure the stability, speed, and reliability of the hybrid decentralized network for all users, XloudOne reserves the right to monitor network resource consumption. We may throttle bandwidth, restrict specific features, temporarily suspend, or terminate accounts that engage in excessive resource consumption, API abuse, denial-of-service tactics, or malicious spamming of network nodes.

6. Developer License, API Restrictions, and End-User Liability

XloudOne provides robust developer tools for third parties to build upon the XloudID infrastructure. If you access the developer portal or utilize our APIs, you agree to the following:

Access and Revocation: Access to XloudOne developer APIs is granted on a limited, non-exclusive, revocable basis. We reserve the absolute right to rate-limit, suspend, or permanently revoke your API keys without notice for suspected abuse, poor security practices, or any violation of these Terms.

Prohibited Conduct: Developers are strictly prohibited from bypassing rate limits, attempting to reverse-engineer our zero-knowledge cryptographic protocols, scraping unencrypted user data, or utilizing the API to deploy malicious code, spyware, or unauthorized tracking mechanisms.

End-User Responsibility: Developers building on the XloudOne network must maintain their own legally compliant Terms of Service and Privacy Policy. You are solely responsible for obtaining legally valid consent from your end-users before requesting any identity attributes through the XloudID API. XloudOne assumes no liability for a third-party developer's mishandling, breach, or misuse of data once it has been legally authorized by the user and passed to the third-party application.

7. Payments, XloudPay, and Fiat Withdrawals

Third-Party Processing via Stripe: All financial transactions, subscription payments, and fiat withdrawals facilitated through XloudPay are processed, routed, and cleared entirely through our licensed third-party payment processor, Stripe. XloudOne does not process payments in-house, nor do we store your credit card information, bank routing details, or raw financial data on our internal databases. By conducting a transaction, you agree to Stripe’s Terms of Service.

Identity Verification (KYC/KYB/AML): Before any user, creator, or developer can withdraw fiat funds from the XloudOne network, they must complete strict Know Your Customer (KYC) or Know Your Business (KYB) verification through Stripe Connect. All payouts are continuously screened against international sanctions lists (e.g., OFAC) to comply with global Anti-Money Laundering (AML) laws. If a user matches a sanctions list, we are legally required to block the payout and freeze the account.

Holds, Reserves, and Clawbacks: To protect the network from financial fraud, XloudOne reserves the right to impose temporary hold periods on newly cleared funds. In the event of confirmed fraud, excessive chargebacks, or a failure to deliver promised utility, you authorize XloudOne and Stripe to freeze your payout balance, claw back funds, and issue refunds to affected users directly from your escrowed balance.

Tax Reporting: You are solely responsible for calculating and remitting applicable taxes on your network earnings. If your transaction volume meets state or federal reporting thresholds, Stripe or XloudOne will issue an IRS Form 1099-K. You must provide valid tax documentation (e.g., Form W-9) upon request. Failure to provide accurate tax documentation will result in immediate suspension of withdrawal capabilities and mandatory backup withholding.

8. HIPAA / Protected Health Information (PHI) Ban

XloudOne is a secure identity and utility network; it is not a HIPAA Business Associate. Users, medical providers, and developers are strictly prohibited from using XloudID, developer APIs, or XloudOne storage vaults to store, transmit, or manage Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act.

9. Third-Party Access and Revocation Disclaimer

Your XloudID serves as your sovereign identity passport to authorized third-party applications. You have absolute discretion over which services can verify your identity.

Revocation Limits: You may revoke a third-party application’s access via your XloudID dashboard at any time. However, you acknowledge that revoking access only prevents the third party from querying your vault for future data updates. XloudOne cannot forcefully delete data that is already in the possession of third-party servers. To delete existing data held by a third party, you must submit a formal deletion request directly to them in accordance with their respective privacy policies.

10. Zero-Knowledge Architecture & Key Loss Liability Waiver

XloudID is built from the ground up on a strict zero-knowledge architecture. XloudOne does not possess your private keys, master passwords, or raw recovery phrases. We are mathematically incapable of decrypting your vault.

Liability Waiver: You explicitly acknowledge and agree that if you lose your account credentials, passwords, or recovery methods, XloudOne cannot recover your data. You agree to hold XloudOne, its directors, employees, and affiliates completely harmless for any permanent loss of data, financial assets, digital utility, or account access resulting from misplaced, forgotten, or compromised credentials.

11. Digital Legacy and Account Inactivity

Digital Legacy: Because we cannot decrypt user vaults, XloudOne cannot grant family members, next of kin, or estate executors access to a deceased user's account—even with a valid death certificate or court order—without a predefined decentralized recovery key established by the user prior to their passing.

Account Inactivity: If an account remains entirely inactive (no logins, API pings, or authentications) for twenty-four (24) consecutive months, XloudOne reserves the right to terminate the account and permanently purge the vault to reclaim hybrid network capacity.

12. Limitation of Liability and Law Enforcement

Uptime and Execution Risk: The Service is provided on an "AS IS" and "AS AVAILABLE" basis. XloudOne does not guarantee 100% network uptime. We are not liable for any financial losses, missed trades, lost utility, or damages incurred because a user was temporarily unable to authenticate into third-party applications due to system maintenance, decentralized node outages, or network failure.

Law Enforcement: While XloudOne fully complies with valid, legally binding subpoenas and court orders, our zero-knowledge infrastructure physically prevents us from turning over plaintext user data. In the event of a valid legal request, we can only provide the encrypted data blobs and available metadata in our possession. XloudOne assumes no liability for the inability to decrypt user data on behalf of law enforcement or government agencies.

13. Dispute Resolution, Arbitration, and Class Action Waiver

Binding Arbitration: Any dispute, claim, or controversy arising out of or relating to these Terms or the breach thereof shall be settled by binding, individual arbitration administered by the American Arbitration Association.

Class Action Waiver: You explicitly waive your right to participate in any class-action lawsuit, class-wide arbitration, private attorney general action, or consolidated proceeding against XloudOne.

Governing Law: These Terms shall be governed by and construed in accordance with the laws of the State of North Carolina, without regard to conflict of law principles. XloudOne LLC is a Virginia limited liability company; for disputes under these Terms, you agree that North Carolina is our principal place of business and the appropriate framework for governing law, without limiting mandatory consumer protections in your home jurisdiction where applicable.