Smufye Agent — Terms of Service (FIRST DRAFT)

IMPORTANT — READ THIS FIRST. This is a strong first draft prepared as part of an internal design review. It has NOT been reviewed by a licensed attorney and is NOT legal advice. Smufye Agent / RodwellHQ must have a licensed attorney review, finalize, and approve these Terms before they are relied on, published, or treated as binding.

Last updated: September 26, 2026

These Terms of Service ("Terms") govern your access to and use of the Smufye Agent website at agentsmufye.com, its API at api.agentsmufye.com, the live demonstration on the site, and any related services (collectively, the "Service"). The Service is operated by RodwellHQ, the parent company of Smufye Agent ("RodwellHQ," "we," "us," or "our").

By accessing or using the Service, you will be subject to these Terms once they are finalized. These Terms are currently a draft and are NOT yet binding. A licensed attorney must review, finalize, and approve them before they take effect. When published in final form, your continued use of the Service will constitute agreement to the final Terms. If you do not agree, do not use the Service. If you use the Service on behalf of a company or other organization, you represent that you have authority to bind that entity to these Terms.

1. What the Service does

Smufye Agent issues cryptographically signed digital credentials ("passports") for AI agents. A passport is a standard ES256 JSON Web Token (JWT) that binds an agent name and identifier to our signature. Anyone can verify a passport through our API or, using our published public key, independently.

What a passport is not. A Smufye Agent passport proves only that the credential was issued by our signing key. It does not verify, vet, endorse, or guarantee the real-world identity of the person or organization operating the agent, the safety or honesty of the agent, or the truth of any claim the agent makes. We do not perform background checks, identity verification, or know-your-customer (KYC) screening on agent operators. Do not rely on a passport as proof of who is behind an agent.

2. Eligibility and accounts

• You must be at least 13 years old to use the Service. If you are under 18,

you may use the Service only with the involvement of a parent or guardian.

• Issuing passports currently requires no account, signup, or API key. We may

introduce accounts, API keys, and authentication requirements at any time, and continued use after such changes constitutes acceptance.

• You are responsible for all activity that occurs through your use of the

Service, including passports issued for agents you register.

3. Free live demo

The "live demo" on the site calls the production API and issues working passports that are recorded in our audit log:

• Demo passports expire 24 hours after issuance and are marked as

demonstration credentials (demo: true). They are real signed passports for that 24-hour window and can be copied and reused outside the demo until they expire.

• Anything you enter as an agent name (including text that is unlawful,

offensive, infringing, or misleading) is stored and may be publicly visible through the API's verification and identity endpoints.

• The demo's on-screen "audit trail" is an illustration only; the authoritative

record is the server-side audit log described in Section 4.

• We may rate-limit, throttle, or disable the demo at any time without notice.

4. Audit log

Every passport issuance, verification, and revocation is written to an audit log with a timestamp. Audit-log entries are retained as described in our Privacy Policy and are used to operate the Service, investigate abuse, and respond to lawful requests. The log is maintained by us on our infrastructure; it is not a third-party-certified or independently audited system, and we make no claim that it satisfies any specific regulation on your behalf (see Section 11).

5. Acceptable use

You agree not to use the Service to:

• issue passports with names or metadata that are unlawful, fraudulent,

defamatory, harassing, hateful, pornographic, or infringing on anyone's intellectual property or privacy rights;

• issue passports that impersonate another person, company, brand, or

organization — including names that suggest affiliation with, endorsement by, or official status from any third party (for example, names combining a well-known brand with "support," "official," "security," or "team");

• misrepresent what a passport means, including claiming or implying that

Smufye Agent or RodwellHQ verifies, endorses, or guarantees your agent or its operator;

• use passports to facilitate fraud, phishing, spam, malware, unlawful

surveillance, or any other unlawful activity;

• attempt to forge passports, compromise our signing keys, probe or defeat

rate limits, scrape the API abusively, or disrupt the Service;

• revoke passports you do not own or have no right to revoke;
• use the Service in a way that violates any applicable law, including export

controls and sanctions laws.

We may, in our sole discretion and without prior notice, refuse to issue, suspend, revoke, or delete any passport or agent record that violates these Terms or that we believe poses a legal, safety, or reputational risk.

6. Fees and billing

Pricing displayed on the site (including per-verification pricing and monthly plans) is our current plan and is subject to change. Billing is not yet wired up: the API is currently free while we finish building billing infrastructure. When paid billing launches, we will publish payment terms, and continued use of paid features will constitute agreement to those terms. "Unlimited" tiers are subject to our fair-use policy (the exact monthly verification limit for each tier will be published before billing starts): use that is excessive, abusive, or far outside normal patterns for the tier may be throttled, suspended, or moved to a custom plan.

7. Intellectual property

• The Service, the Smufye Agent name and logo, and all site content, software,

and documentation are owned by RodwellHQ or its licensors and are protected by intellectual property laws. These Terms grant you no rights in them except the limited right to use the Service as provided.

• You retain ownership of the agent names and metadata you submit. By

submitting them, you grant us a worldwide, royalty-free license to store, reproduce, and display them as necessary to operate the Service (including in verification responses and the audit log).

• Our public signing key is published for independent verification; it may be

used solely to verify Smufye Agent passports.

8. No service-level agreement

The Service is provided on a best-effort basis. We do not guarantee any level of uptime, availability, response time, or performance, and we may modify, suspend, or discontinue any part of the Service at any time without notice or liability. Passports are standard ES256 JWTs; you may cache our public key and verify signatures independently of our API's availability.

9. Warranty disclaimer

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT, AND ANY WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE, THAT PASSPORTS WILL BE ACCEPTED BY ANY THIRD PARTY, OR THAT THE SERVICE WILL SATISFY ANY REGULATORY OBLIGATION.

10. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, RODWELLHQ AND ITS OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL, ARISING FROM OR RELATED TO YOUR USE OF OR INABILITY TO USE THE SERVICE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

OUR TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING FROM OR RELATED TO THE SERVICE WILL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU PAID TO US FOR THE SERVICE IN THE TWELVE (12) MONTHS BEFORE THE CLAIM AROSE, OR (B) ONE HUNDRED U.S. DOLLARS (US $100). Some jurisdictions do not allow the exclusion of certain warranties or limitations of liability; in those jurisdictions our liability is limited to the greatest extent permitted by law.

11. No regulatory advice or compliance guarantee

Any statements on the site about regulations (for example, the EU AI Act) are general information only, not legal advice. We do not guarantee that using the Service satisfies any law, regulation, or standard applicable to you, including logging, record-keeping, or high-risk AI system obligations. You are solely responsible for determining and meeting your own legal and compliance obligations.

12. Indemnification

You agree to indemnify, defend, and hold harmless RodwellHQ and its officers, directors, employees, and agents from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from (a) your use of the Service, (b) the agent names, metadata, or content you submit, (c) your agents' actions, or (d) your violation of these Terms or any applicable law.

13. Termination and suspension

We may suspend or terminate your access to the Service, revoke passports, or delete agent records at any time, with or without notice, for any reason, including violation of these Terms, suspected abuse, or legal requirements. Sections 7 through 16 survive termination.

14. Changes to the Terms

We may update these Terms from time to time. We will post the revised Terms on the site with a new "Last updated" date. Material changes will be announced on the site; your continued use of the Service after the effective date constitutes acceptance of the revised Terms.

15. Governing law and disputes

[PLACEHOLDER — to be confirmed with counsel.] These Terms are governed by the laws of the State of North Carolina, without regard to its conflict-of- law principles. Any dispute arising from or related to these Terms or the Service will be resolved exclusively in the state or federal courts located in North Carolina, and you consent to their jurisdiction and venue. (North Carolina is proposed because RodwellHQ's principal operations are U.S.-based and the owner resides there; counsel should confirm the appropriate forum.)

16. General

These Terms constitute the entire agreement between you and RodwellHQ regarding the Service. If any provision is found unenforceable, the remaining provisions remain in effect. Our failure to enforce a provision is not a waiver. You may not assign these Terms without our written consent; we may assign them in connection with a merger, acquisition, or sale of assets. All notices must be in writing and sent to the contact address below.

17. Contact

Questions about these Terms: [legal contact email — to be added], RodwellHQ, [mailing address — to be added].