Terms of Service
Clear rules. No surprises.

1. Agreement

These Terms of Service (the "Terms") are a legally binding agreement between you and NCLAY Compute, Inc., a Delaware corporation doing business as GoXylo ("GoXylo," "we," "our," or "us"). By creating an account, paying for a subscription, or otherwise using the Service, you agree to these Terms and to our Privacy Policy. If you are agreeing on behalf of a company, you represent that you have authority to bind that company, and "you" means both you and the company.

2. Definitions

• Service: the goxylo.com website, the GoXylo multi-tenant platform, the tenant workspace we provision at .goxylo.com, XyloChat and embedded AI features, our APIs, and any related software or documentation.
• Workspace: the isolated tenant instance (database, subdomain, apps, settings) we provision for your organization.
• Account: the login identity you or an authorized user holds inside a Workspace or on goxylo.com.
• Administrator: a user account in a Workspace with admin privileges — typically the person who signed up.
• Your Content: the data you or your users upload, create, import, or transmit through the Service — including customer records, messages, files, website pages, invoices, and anything else the Service stores on your behalf.
• Your Customers: the people you interact with through your Workspace (for example, the recipients of your invoices, the subscribers to your mailing list, the customers who buy from your online store).

3. Eligibility

To use the Service you must be at least 18 years old (or the age of majority in your jurisdiction), able to form a binding contract, and not barred from receiving software or online services under the laws of the United States or any other applicable jurisdiction. The Service is not available to anyone previously suspended or removed from the Service unless we reinstate them in writing.

4. The Service we provide

GoXylo is a hosted business operations platform combining website building, CRM, invoicing, e-commerce, email marketing, scheduling, and similar tools, plus optional AI features. The specific features available to you depend on your subscription plan.

GoXylo is a software platform, not a professional services firm. Nothing we (or the AI features) produce or display constitutes legal, accounting, tax, financial, medical, safety, compliance, or regulatory advice. You are responsible for your own business decisions and for complying with laws that apply to you, your Workspace, and Your Customers.

We may add, remove, modify, or relocate features over time. We will give reasonable notice before a material reduction to features on your current plan. Experimental or "beta" features may be labeled as such and are provided as-is with no guarantee of stability or continued availability.

5. Accounts and security

You are responsible for keeping your credentials confidential and for everything that happens under your Account. If you believe an Account has been compromised, notify us immediately at [email protected]. We may require multi-factor authentication, password rotation, or other security controls for admin-level access. We are not liable for losses that result from your failure to maintain Account security.

Administrators can add or remove other users in their Workspace and assign them roles. The Administrator is responsible for managing those permissions and for their users' acts and omissions.

6. Subscriptions, billing, and payment

6.1 Plans and pricing

Current plans and prices are published on our pricing page. We currently offer Core ($159 / month) and Prime ($329 / month), each billed monthly in USD, with unlimited users. Both plans include the full 18-app catalog; Prime additionally includes our AI features (XyloChat, Apps Concierge, AI-powered drafts and insights). Plan inclusions may change; the version of the pricing page at the time of your subscription (or renewal) governs that billing period.

6.2 Promotional pricing

Any promotional pricing offered from time to time applies only to the stated promotional period and customer cohort. After the promotional period ends, your subscription renews at the then-current standard rate unless you cancel before the renewal date. Promotions may not be combined unless we explicitly allow it. Earlier promotions (such as the historical "$1 First Month" offer that ran during our early-access period) are no longer available to new customers; if you signed up under a prior promotion, the terms of that promotion as published at the time of signup continue to govern that promotional period.

6.3 Auto-renewal and cancellation

Your subscription renews automatically at the end of each billing period. You authorize us (and Stripe on our behalf) to charge your payment method for each renewal. You can cancel at any time from your account settings or by emailing [email protected]. Cancellation stops future renewals; you retain access through the end of your current paid period.

6.4 Refunds

All fees are non-refundable, including for partial months, unused features, and tenants suspended or terminated under Section 13. If a payment is disputed through a chargeback after service has been delivered, we may suspend or terminate the Account and pursue collection.

6.5 Price changes and taxes

We may change pricing at any time with at least 30 days' notice before the change takes effect on your Account. You are responsible for all applicable taxes, withholdings, and duties (excluding taxes based on our net income).

6.6 Failed payments and suspension

If a payment fails, we will retry through Stripe's standard dunning flow and may pause Service access for the Workspace. If the balance remains unpaid after a reasonable grace period, we may terminate the Account and delete the Workspace under Section 13.

7. Taking payments from your customers (Stripe Connect)

If you use GoXylo to accept payments from Your Customers (for example, online-store checkout, invoice payment links, or subscription billing), you do so through Stripe Connect. The following apply:

• You must complete Stripe's own onboarding and agree to Stripe's Connected Account Agreement and Services Agreement. Stripe may require identity verification, business documentation, and bank account details.
• You — not GoXylo — are the merchant of record for transactions with Your Customers. Stripe holds funds in your connected account and pays them out to you according to Stripe's schedule. Tax collection, remittance, refunds, and chargebacks for those transactions are your responsibility.
• GoXylo may collect a platform fee (also called an application fee) on each transaction as disclosed on the pricing page or in your admin settings. We will clearly label any such fee.
• Your use of Stripe Connect is governed by Stripe's own terms, which control over these Terms to the extent they conflict on Stripe-specific matters.
• If Stripe suspends or terminates your connected account, your ability to take payments through the Service will stop immediately. We are not responsible for Stripe's decisions about your connected account.

8. Your Content

8.1 Ownership

You keep ownership of Your Content. We do not claim any ownership interest in Your Content.

8.2 License to us

You grant us a worldwide, non-exclusive, royalty-free license to host, store, copy, transmit, process, display, and create back-ups of Your Content solely to (a) operate, improve, and secure the Service for you, (b) respond to your support requests, and (c) comply with legal obligations. This license ends when you delete the content or close your Account, except for residual copies retained per Section 8 of the Privacy Policy or required by law.

8.3 Your representations and duties

You represent and warrant that:

• you own Your Content or have the right to use it on the Service;
• Your Content and your use of the Service do not violate any third-party right (including copyright, trademark, trade secret, privacy, publicity, or contract) or applicable law;
• you have obtained all consents required under applicable privacy and marketing laws (such as CAN-SPAM, GDPR, TCPA, CASL, and state-level equivalents) before using Your Customers' data for marketing or automated communications;
• you will not submit content that is unlawful, defamatory, obscene, or that contains malware, personally identifiable government IDs or payment card numbers, or protected health information unless we have explicitly agreed to support that use case in writing.

8.4 Outbound messaging

If you use the Service to send email, SMS, calls, or other electronic communications to Your Customers, you are the sender under applicable law and are solely responsible for compliance: consent, suppression lists, opt-out handling, sender identification, and content. We may suspend sending features if abuse or deliverability-harming behavior is detected.

9. AI features and output

XyloChat and other AI features produce output based on large language models operated by third parties. AI output:

• may be inaccurate, incomplete, biased, or out of date;
• is not legal, financial, medical, tax, compliance, or safety advice;
• is your responsibility to review before sending, publishing, or relying on.

You must not use AI features to generate content that violates Section 10 (Acceptable Use) — including content that infringes IP, impersonates a real person without authorization, harasses, defrauds, or is used to make automated decisions with significant legal or financial effect on individuals without human review.

10. Acceptable use

You agree not to, and not to allow anyone else to:

• use the Service in violation of any law, regulation, or third-party right;
• send spam, phishing messages, or unsolicited bulk communications;
• use the Service to operate a cryptocurrency exchange, unlicensed financial service, illegal gambling, adult content site, or any business that is illegal where it operates or where its customers are;
• upload or distribute malware, viruses, worms, or any other harmful code;
• probe, scan, or test the vulnerability of the Service; attempt to evade security features; or access parts of the Service you are not authorized to access;
• interfere with or disrupt the Service, overload it with automated traffic, or scrape it beyond the limits of any documented API;
• reverse-engineer, decompile, or disassemble the Service, except to the extent that applicable law permits;
• resell, sublicense, time-share, or operate a service bureau based on the Service without our written agreement;
• remove or alter our copyright notices, trademarks, or attributions;
• use the Service to harass, defame, or infringe the rights of any person;
• use the Service in a way that violates Stripe's, Cloudflare's, or any sub-processor's acceptable use policies.

We may investigate suspected violations and cooperate with law enforcement where appropriate. Violations may lead to warning, suspension, termination, or legal action.

11. Intellectual property

11.1 Our IP

The Service, including its source code, look and feel, design, logos, trademarks (including "GoXylo" and "XyloChat"), and documentation, is owned by GoXylo or its licensors and protected by US and international intellectual property laws. Nothing in these Terms transfers any of our IP to you except the limited license in Section 11.2.

11.2 License to you

During your subscription, and subject to your compliance with these Terms, we grant you a non-exclusive, non-transferable, non-sublicensable, revocable license to access and use the Service for your internal business purposes.

11.3 Trademarks

You may not use our names, logos, or trademarks without our prior written permission, except to truthfully identify GoXylo as your platform provider.

11.4 Feedback

If you send us feedback, suggestions, or ideas ("Feedback"), you grant us a perpetual, worldwide, royalty-free license to use Feedback for any purpose without compensation or attribution.

11.5 Third-party components

The Service incorporates and depends on third-party software, including Odoo Community. Your use of the Service is subject to the applicable open-source or proprietary licenses of those components. Nothing in these Terms grants you additional rights in them.

11.6 DMCA / copyright claims

If you believe content on the Service infringes your copyright, send a notice under 17 U.S.C. § 512 to [email protected]. Include: identification of the copyrighted work, identification of the allegedly infringing material (with URL), your contact information, a statement of good-faith belief, a statement under penalty of perjury that your claim is accurate, and your physical or electronic signature. We may remove content and, for repeat infringers, terminate Accounts.

12. Uptime and support

We aim for high availability but do not commit to a specific uptime SLA. The Service may be unavailable during maintenance, emergency repairs, third-party outages (Stripe, Cloudflare, Hetzner, AI providers), or events outside our reasonable control. Support is provided on best-effort basis during US business days. Paid plans may include specific support response targets as published on the pricing page.

13. Suspension and termination

13.1 Termination by you

You may cancel your subscription from account settings or by emailing [email protected]. You can also request immediate Workspace deletion by emailing [email protected].

13.2 Suspension and termination by us

We may suspend or terminate your Account or Workspace, in whole or in part, for any of the following reasons:

• breach of these Terms, the Privacy Policy, or an applicable Stripe agreement;
• non-payment of fees after reasonable notice;
• legally required action (for example, a court order);
• conduct we reasonably believe is fraudulent, abusive, or a threat to the Service, other users, or third parties;
• extended inactivity on a non-paid Account.

13.3 Effect of termination

On termination, your license to use the Service ends and access will be disabled. We will retain Your Content for 30 days after termination so you can request an export or reactivate, after which we delete it (subject to the retention carve-outs in our Privacy Policy). If termination is for your breach, we may delete the Workspace immediately. Sections that by their nature should survive (fees owed, IP, disclaimers, limits of liability, indemnification, dispute resolution, governing law, and this sentence) survive.

14. Third-party services and integrations

The Service links to and integrates with third-party services (Stripe, Cloudflare, Google Workspace, Microsoft 365, AI providers, domain registrars, and others). We are not responsible for third-party services, their availability, or their handling of your data. Your use of a third-party service is subject to its own terms. If a third-party service changes or ceases, we may disable the corresponding integration.

15. Data ownership and portability

During your subscription you can export Your Content through the Service's standard export tools. On request, we will reasonably cooperate to export Your Content in a machine-readable format within the 30-day retention window after termination. Backups we maintain for our operational purposes are not a replacement for your own backups — you are responsible for keeping your own copies of anything you cannot afford to lose.

16. Disclaimer of warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITH ALL FAULTS, AND WITHOUT WARRANTY OF ANY KIND. TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES — EXPRESS, IMPLIED, OR STATUTORY — INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, AND ANY WARRANTY ARISING OUT OF COURSE OF DEALING OR TRADE USAGE.

WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, SECURE, TIMELY, OR FREE OF HARMFUL COMPONENTS; THAT DEFECTS WILL BE CORRECTED; THAT STORED DATA WILL BE PRESERVED WITHOUT LOSS; OR THAT AI-GENERATED OUTPUT WILL BE ACCURATE OR SUITABLE FOR YOUR PURPOSE.

17. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT WILL GOXYLO OR ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, AFFILIATES, OR LICENSORS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES; FOR LOST PROFITS, LOST REVENUE, LOST SAVINGS, LOST GOODWILL, LOST DATA, BUSINESS INTERRUPTION, OR COST OF SUBSTITUTE SERVICES; OR FOR ANY DAMAGES ARISING FROM THIRD-PARTY SERVICES OR FROM AI OUTPUT, REGARDLESS OF THE LEGAL THEORY (CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY, OR OTHERWISE), EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

OUR TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE WILL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU ACTUALLY PAID TO GOXYLO IN THE 12 MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM, OR (B) ONE HUNDRED U.S. DOLLARS ($100).

Some jurisdictions do not allow the exclusion or limitation of certain damages; if those laws apply to you, some of the above may not apply, and our liability in that event will be limited to the smallest amount permitted by law.

18. Indemnification

You will defend, indemnify, and hold harmless GoXylo and its officers, directors, employees, agents, affiliates, and licensors from and against any third-party claim, demand, action, loss, liability, damage, cost, or expense (including reasonable attorneys' fees) arising out of or relating to:

• your use of the Service, including Your Content;
• your breach of these Terms or violation of applicable law;
• your violation of any third-party right (including intellectual property, privacy, publicity, or contract);
• your interactions with Your Customers, including any disputes over goods, services, refunds, or tax collection;
• your use of AI features or reliance on AI output;
• any electronic message you send using the Service.

We will notify you of any claim subject to indemnification, give you reasonable control of the defense (as long as you defend diligently and do not settle without our consent, which we will not unreasonably withhold), and reasonably cooperate with the defense at your expense.

19. Dispute resolution, arbitration, and class-action waiver

19.1 Informal resolution first

Before filing any formal claim, you must email [email protected] with a brief description of the dispute, the relief you want, and your contact information. We will try to resolve the dispute informally within 30 days.

19.2 Binding individual arbitration

If informal resolution fails, you and GoXylo agree to resolve all disputes by final, binding, individual arbitration administered by the American Arbitration Association ("AAA") under its Consumer Arbitration Rules (for consumer users) or Commercial Arbitration Rules (for business users). Arbitration will be conducted in Wilmington, Delaware, or, for US consumers, in the federal judicial district where you live (by telephone / video unless the arbitrator orders otherwise). The arbitrator's decision is binding and enforceable in any court of competent jurisdiction. The Federal Arbitration Act governs the interpretation and enforcement of this arbitration provision.

19.3 Class-action waiver

YOU AND GOXYLO EACH WAIVE THE RIGHT TO A JURY TRIAL AND TO PARTICIPATE IN A CLASS ACTION, CLASS-WIDE ARBITRATION, OR PRIVATE ATTORNEY-GENERAL ACTION. Claims may be brought only in an individual capacity. If this class-action waiver is found unenforceable in a specific case, then the rest of Section 19 is severable and that case will proceed in court under Section 20.

19.4 Exceptions

Either party may (a) bring an individual claim in small-claims court, or (b) seek injunctive or other equitable relief in court to protect intellectual property or confidential information. Those exceptions do not waive the rest of Section 19.

19.5 Opt-out of arbitration

You can opt out of the arbitration agreement in Sections 19.2 and 19.3 by sending an email to [email protected] within 30 days of first accepting these Terms, with the subject line "Arbitration Opt-Out" and your full name and the email on your GoXylo Account. If you opt out, disputes will be resolved in court under Section 20.

19.6 Fees

AAA fees are allocated under the applicable AAA rules. If the arbitrator determines your claim is not frivolous, we will pay arbitration filing and administration fees for consumer disputes to the extent required by law.

20. Governing law and venue

These Terms are governed by the laws of the State of Delaware, without regard to its conflict-of-law principles, except that the Federal Arbitration Act governs Section 19. For any dispute not subject to arbitration, the exclusive venue is the state and federal courts located in New Castle County, Delaware, and you consent to personal jurisdiction there.

21. Export controls and sanctions

You represent that you are not located in, and are not a resident or national of, any country or on any list that is subject to US trade sanctions (such as the US Treasury OFAC SDN list). You agree not to use the Service in violation of US export control or sanctions laws.

22. Changes to these Terms

We may update these Terms from time to time. The current version always lives at goxylo.com/terms-of-service with the "Last updated" date at the top. For material changes, we will give you at least 14 days' notice by email or in-product banner. Your continued use of the Service after the effective date of a change is your acceptance of the updated Terms. If you do not agree, your only remedy is to stop using the Service and cancel your subscription.

23. General

• Entire agreement. These Terms, the Privacy Policy, and any order forms or plan terms linked from the pricing page are the entire agreement between you and us regarding the Service and supersede any prior agreements on that subject.
• Severability. If any part of these Terms is found unenforceable, the rest remains in effect.
• No waiver. A party's failure to enforce a right is not a waiver of that right.
• Assignment. You may not assign these Terms without our prior written consent. We may assign these Terms (for example, in connection with a merger or acquisition) by notice to you.
• Force majeure. Neither party is liable for failure or delay caused by events outside its reasonable control, including internet or telecommunications failures, cloud-provider outages, labor disputes, pandemic, war, terrorism, or governmental action.
• Relationship. You and GoXylo are independent contractors. These Terms do not create a partnership, joint venture, agency, or employment relationship.
• No third-party beneficiaries. These Terms do not confer rights on anyone other than you and us.
• Notices. We may give you notice by email to the address on your Account or by a conspicuous post in the Service. Notices to us go to [email protected] and to NCLAY Compute, Inc., 5820 S Lewis St, Littleton, CO 80127.
• Headings. Section headings are for convenience and are not binding.
• English controls. If we provide a translation, the English version controls in case of conflict.

24. Contact

• Legal and contract questions: [email protected]
• Privacy questions: [email protected]
• Support: [email protected]
• Mailing address: NCLAY Compute, Inc., 5820 S Lewis St, Littleton, CO 80127, USA

25. Xy AI service credits

Xy is the credit you spend on AI features in GoXylo — XyloChat, the Apps Concierge, AI-powered drafts and insights, and any new AI feature we add later. You get Xy with your subscription, top it up if you want more, and use it as you go. Here's the deal.

25.1 Xy is an AI usage credit, not an investment

You buy Xy to use AI on GoXylo. That's it. It works like a coffee-shop reward or a prepaid phone card. Xy is not a stock, not a coin you can speculate on, and not a bank deposit. We don't promise it'll go up in value. Don't buy Xy hoping to flip it later for a profit — that's not what it's for, and we don't market it that way.

25.2 You can't trade Xy back for cash

We don't buy Xy back from you. There is no way to swap unused Xy for US dollars or any other currency. If we show a "USD value" anywhere on the page, that's so you can see how much AI you're getting for the price — it is not a buy-back offer or a refund.

25.3 You can move Xy out to your own wallet (optional)

If you want, we'll let you withdraw your Xy out of GoXylo and into a digital wallet that you control. The wallet stores your Xy as an on-chain token (technically an ERC-20 token on the Base network — but you don't need to know what that means to use it). It's the same Xy, just stored in a different place. You can send it back to GoXylo any time and your account balance goes right back up. The whole point is portability; the wallet doesn't make your Xy more valuable, less valuable, or different. We can pause, restrict, or end this withdraw feature at any time.

25.4 Where Xy isn't available

Some places have special rules for crypto-like products. The Xy wallet, on-chain transfer, and cross-chain features are not available to:

• Residents of New York — the state's BitLicense regime imposes requirements we don't currently meet.
• Residents of California — we're navigating California's evolving Digital Financial Assets Law before opening up Xy wallet features there.
• Residents of EU and EEA member states — we're waiting on MiCA (Markets in Crypto-Assets) clarifications before opening up Xy wallet features in those jurisdictions.
• Anyone in a US-sanctioned country, and anyone on a US sanctions list (including OFAC SDN).

If you live in one of the excluded jurisdictions, you can still use GoXylo's core subscription Service — only the optional Xy wallet, on-chain withdrawal, and cross-chain transfer features are gated. The AI features inside your workspace continue to work normally (we credit usage internally without the on-chain layer). You're responsible for following the laws where you live; if your jurisdiction status changes, tell us.

25.5 We screen wallets before sending

Before we send Xy to a wallet address, we run the address through US sanctions databases. If the wallet is flagged, we can't send to it, and we may have to unwind a transfer if we discover an issue afterwards. This isn't a choice — US law requires it.

25.6 If we cancel your account, we may cancel unused Xy

If we have to terminate your account for cause (fraud, chargebacks, or breaking these Terms — see Section 13), we can also cancel any unused Xy on your balance, with no refund. We won't do this for normal cancellations or routine subscription pauses.

25.7 Xy purchases are final

You pay, you get the Xy. No refunds for unused Xy or cancelled subscriptions. (Same as our refund rule in Section 6.4.)

25.8 If you withdraw to a wallet, that wallet is yours to manage

If you move Xy out as an on-chain token, the wallet belongs to you. We use a service called Openfort that secures your private key with hardware-backed Trusted Execution Environments — neither GoXylo nor Openfort can move your tokens without your authentication. If you completely lose access to your wallet — lost device and lost recovery method — neither GoXylo nor Openfort can recover the Xy. Save your recovery options when prompted.

25.9 The SEC framework we're following

On March 17, 2026 the US Securities and Exchange Commission (SEC) announced a new framework called Regulation Crypto Assets. The framework defines four kinds of crypto product that are not securities: digital commodities, digital collectibles, digital tools, and payment stablecoins. The framework also includes a "Startup Exemption" that lets small token projects raise up to $5 million over four years in exchange for publishing a public white-paper-style disclosure.

We believe Xy is a service credit and falls under the "digital tools" category — not a security. Xy is a prepaid right to consume our AI service, the same way an Uber gift card is a prepaid right to a ride.

If any part of Xy is ever treated as a security under the SEC's framework, we plan to follow the Startup Exemption rules. That means publishing a public white paper that explains what Xy is, what we use the money for, and what risks you take by holding it; filing the required notices with the SEC; and staying within the $5 million / 4-year offering cap. We'll publish that white paper at goxylo.com/legal/xy-disclosure as soon as the SEC finalizes the rule. If anything in this section changes, we'll update it and tell you.

25.10 Sending Xy between supported chains

Once your Xy is in your own wallet (Section 25.3 / 25.8), you can send it from one supported network to another — for example, from Base to Ethereum. We use a service called LayerZero V2 to make this happen. The Xy on the sending chain gets burned, the same amount of Xy gets minted on the receiving chain, and the total Xy across all chains stays the same. It's still your same Xy — same name, same symbol, same use inside GoXylo. We can pause, restrict, or end this cross-chain feature at any time.

25.11 Which chains we support today

At launch, Xy is available on:

• Base (the Coinbase L2 network)
• Ethereum mainnet

We may add more chains, remove chains, or temporarily disconnect a chain if it has a security problem. Check your wallet page for the current list. All the rules in 25.4 still apply — if your jurisdiction is excluded from Xy, the cross-chain feature is also excluded.

25.12 You pay the gas

Sending Xy from one chain to another costs a small network fee, paid in the native currency of the sending chain (so ETH if you're sending from Ethereum or Base). You pay the gas, not us. Your wallet shows you the fee before you confirm. Gas prices change from minute to minute and we don't control them.

25.13 The cross-chain delivery network

LayerZero is a messaging network that uses multiple independent validators to verify that a send on one chain actually happened before allowing the matching mint on the destination chain. We use a multi-validator security policy on mainnet so no single validator can fake or block a transfer. That said, cross-chain bridges are a relatively new technology and have, historically, been the target of high-profile hacks across the industry. By using the cross-chain feature you accept the risk that smart-contract bugs, validator failures, or new attack techniques could result in lost or delayed Xy. If a hack hits the LayerZero protocol itself, we may not be able to recover your tokens.

25.14 We can't reverse a cross-chain send

The contracts that make this work are immutable — once deployed, neither GoXylo nor anyone else can rewrite them. That means we cannot reverse, cancel, or refund an individual cross-chain transfer once you confirm it in your wallet. The only emergency tool we have is a global pause on the contract, which stops all transfers until we unpause. We'll only use it for incidents like a confirmed protocol exploit or a sanctions emergency. Double-check the address and amount before you confirm.

25.15 You hold the keys

To bridge Xy across chains you have to use your own wallet keys (Section 25.8). GoXylo does not custody your tokens during the cross-chain flow. We can't sign a transaction for you, can't recover a lost key, and can't move tokens out of your wallet on your behalf.

25.16 You're not on a sanctions list

By using the cross-chain feature you confirm that you, your wallet, and any wallet you send to are not located in a sanctioned country and are not on the OFAC SDN list, the EU consolidated sanctions list, the UK HMT list, or any other applicable sanctions list. We also screen wallet addresses (Section 25.5). If we detect a match — yours or the recipient's — we can refuse the send, freeze further activity, and report the incident as required by US law.

25.17 Reporting and large transfers

US users: if and when the IRS digital-asset broker rules (1099-DA) apply to GoXylo, we will report covered Xy activity in line with those rules. You're responsible for your own tax position and for keeping your own records of cross-chain sends. For transfers of $1,000 USD-equivalent or more, our payment processor or a chain partner may require us to collect sender-and-receiver information under the FinCEN / FATF "Travel Rule." If that's required and you don't provide the information, the transfer will be cancelled.

25.18 We are not a custodian, exchange, or money transmitter

To be clear: GoXylo issues Xy as a service credit (Section 25.1, 25.9). When you move your Xy across chains, we are not acting as your bank, your broker, your custodian, your money transmitter, or your fiduciary. We have no special duty to you in connection with cross-chain activity beyond what these Terms say. The Xy you hold across all supported chains continues to be a digital tool under the SEC's Regulation Crypto Assets framework — same Xy, same legal classification, just movable to wherever you want to keep it.