Terms of Service

Mailbox.bot — Physical Logistics Infrastructure for AI Agents
Operated by Golden Ratio, LLC, a Utah Limited Liability Company
Effective Date: February 7, 2026 · Last Updated: March 18, 2026

BY CREATING AN ACCOUNT, JOINING THE WAITLIST, REGISTERING AN AGENT, SUBMITTING PAYMENT, OR USING ANY MAILBOX.BOT SERVICE, YOU EXPLICITLY AGREE TO BE BOUND BY THESE TERMS. IF YOU DISAGREE WITH ANY PART OF THESE TERMS, YOU MAY NOT ACCESS OR USE THE SERVICE.

PLEASE READ THESE TERMS CAREFULLY. THEY CONTAIN IMPORTANT INFORMATION REGARDING YOUR LEGAL RIGHTS AND OBLIGATIONS, INCLUDING LIMITATIONS ON LIABILITY, MANDATORY ARBITRATION, CLASS ACTION WAIVER, KNOW YOUR CUSTOMER (KYC) REQUIREMENTS, AND LAW ENFORCEMENT COOPERATION OBLIGATIONS.

1. Introduction and Definitions

1.1 Agreement Overview

Welcome to Mailbox.bot (the "Service," "Platform," "we," "us," "our"), a managed micro-fulfillment platform for individuals, businesses, and AI agents, operated by Golden Ratio, LLC, a Utah limited liability company doing business as "Mailbox.bot" (the "Company"). The Company provides software infrastructure that connects clients with independently licensed facility operators who receive, store, and forward packages and mail on their behalf. By accessing or using our website, API, mobile applications, agent protocols, and services, you ("Member," "Operator," "you," "your") agree to be bound by these Terms of Service ("Terms").

1.2 Key Definitions

2. Nature of Service

2.1 Service Description

Mailbox.bot is a physical logistics infrastructure platform designed for AI agents and their human sponsors. The Platform connects autonomous agents (and the individuals or businesses who deploy them) with independently licensed facility operators. AI agents are the primary operators — they receive packages, evaluate rules, and execute actions (forward, store, scan, discard) autonomously. Human Account Holders serve as sponsors who monitor agent decisions from mission control and may override or modify agent actions at any time. The Platform provides the software layer — intake, scanning, notifications, forwarding, dashboard, and API — while facilities provide the physical receiving and custody. Actions initiated by an AI agent configured by the Account Holder are treated as authorized by the Account Holder. The type of facility you are provisioned at determines the carriers accepted and the verification requirements:

(a) Virtual Mailbox: Provisioned at a CMRA-registered facility on our network. Accepts USPS letter mail, flats, and documents only. USPS packages and parcels are not accepted and will be refused or returned to sender by the carrier. Private carrier packages (FedEx, UPS, DHL, Amazon, etc.) are not accepted on this plan. Requires identity verification (KYC), completion of USPS Form 1583, and a notary session (in-person or remote notarization). Members must not direct packages of any kind to their virtual mailbox address. The Company has registered its CMRA scope to accept letter mail and flats only, and USPS parcels addressed to your mailbox will be returned to sender at the carrier level. The Company assumes no responsibility or liability for packages or parcels shipped to a virtual mailbox address. For package receiving, Members must enroll in a Warehouse Space plan.

(b) Warehouse Space: Provisioned at a warehouse or fulfillment facility on our network. Accepts packages from private carriers (FedEx, UPS, DHL, Amazon, and others). Requires identity verification (KYC). No Form 1583 or notary required.

(c) Outbound Mail: Available as an add-on to any plan or as a standalone service ("Outbound Only" plan). Members or their Agents submit a PDF document via API or MCP, and the Company arranges for printing, envelope stuffing, postage, and physical mailing through the facility network. Photo proof of mailing is provided. Available mail classes include First Class, Priority Mail, Certified Mail, and Certified Mail with Return Receipt. The Outbound Only plan ($0/mo base) requires no inbound address, no Form 1583, and no notarization — Members provide their own return address and pay $0.30 per page for printing plus actual carrier postage at published retail rates. Photo proof of mailing is included; color printing is charged as an add-on. The Company does not guarantee delivery times, which are determined by USPS. The Company is not liable for mail lost, delayed, damaged, or returned by USPS after drop-off at the post office. Photo proof of mailing documents the drop-off only and does not constitute proof of delivery.

All services include the full Platform feature set: intake documentation, package photography, webhook notifications, mission control dashboard, API access, and agent protocol support (OpenClaw, MCP, A2A, REST). Your agent operates as the primary decision-maker for package and mail actions. Facilities hold your property under custodial care while you retain ownership.

2.2 What We Provide

2.3 What We Do NOT Provide

2.4 Carrier Acceptance by Facility Type

The carriers accepted at your facility depend on your service type:

Virtual Mailbox (CMRA facility): Accepts USPS letter mail, flats, and documents only. USPS packages and parcels are not accepted and will be refused or returned to sender by the carrier. Private carrier packages are not accepted on this plan. The Company's CMRA registration scope is limited to letter mail and flats; USPS parcels addressed to your mailbox will be returned to sender at the carrier level before reaching the facility. Requires completed Form 1583 and notarization before USPS mail can be received. Do not ship packages or parcels of any kind to a virtual mailbox address. The Company assumes no liability for packages or parcels shipped to a virtual mailbox address.

Warehouse Space (fulfillment facility): Accepts packages from private carriers (FedEx, UPS, DHL, Amazon, and others). USPS mail is not accepted at warehouse facilities. If USPS mail arrives at a warehouse facility, it will be returned to sender. Members who need USPS mail receiving should enroll in the virtual mailbox service.

2.5 Intended Use Cases

The Platform is designed to support a variety of logistics capabilities for individuals, businesses, and AI agents, including but not limited to:

The Company does not endorse, verify, or guarantee the success of any particular use case. Members are responsible for ensuring their use of the Platform complies with all applicable laws and regulations.

2.6 Platform Provider and Operator Responsibility

The Company provides the software platform. Facilities on our network are independently licensed operators responsible for the physical custody and care of your packages and mail. The Company is NOT the principal, employer, partner, joint venturer, or agent of any Member, Facility Operator, or AI Agent. The Company does not direct, control, or supervise the activities of any Agent. Members are solely responsible for the actions, omissions, and conduct of their autonomous agents, including all packages received, orders placed, and logistics decisions made by AI agents operating through the Platform.

3. Waitlist and Early Access

3.1 Waitlist Registration

The Platform is currently in limited launch. Prospective Members may join the waitlist by providing an email address via the website (mailbox.bot) or API endpoint (POST /api/v1/waitlist). Waitlist registration does not guarantee access to the Platform and creates no binding obligation on either party.

3.2 AI Agents on Waitlist

AI agents and autonomous systems may join the waitlist programmatically via the API without captcha verification (rate limited to 5 requests per minute). However, when the Platform launches, agents will still require a verified human or legal entity sponsor to complete KYC and provision an Endpoint. Waitlist registration by an agent does not waive the mandatory identity verification requirement.

3.3 Launch Notification

The Company will notify waitlist members via email when the Platform is ready for registration. Early access will be granted to waitlist members in the order of registration, subject to KYC verification and the Company's sole discretion. The Company reserves the right to grant priority access to certain users, use cases, or partnerships.

4. Member Eligibility and Registration

4.1 Eligibility Requirements

To register as a Member, you must:

4.2 Business Entity Registration

If you are registering on behalf of a business entity, you represent and warrant that you have the authority to bind that entity to these Terms, and that the entity is duly organized, validly existing, and in good standing under the laws of its jurisdiction of formation. The entity must provide its legal name, jurisdiction of formation, EIN or equivalent tax identification number, and registered agent information.

4.3 Account Security

You are responsible for maintaining the confidentiality of your account credentials, API keys, and webhook secrets. You are responsible for all activities that occur under your account, whether or not authorized by you. You must immediately notify the Company of any unauthorized use of your account or any other breach of security.

5. Know Your Customer (KYC) and Identity Verification

THIS SECTION IS CRITICAL. THE COMPANY REQUIRES IDENTITY VERIFICATION FOR ALL MEMBERS. NO EXCEPTIONS.

5.1 Mandatory Identity Verification — Every Operator Verified

The Company verifies every operator before issuing a Reference Code. Before any Agent can be registered or any Endpoint provisioned, the Member must complete the Company's identity verification process via Stripe Identity. The KYC process typically takes under 2 minutes and requires:

Upon successful verification, the Member can immediately provision Endpoints for their Agents. Agents inherit identity from their KYC-verified operator — autonomous agents cannot self-register without a verified human or legal entity sponsor.

5.2 Sanctions and Watchlist Screening

The Company screens all Members against applicable sanctions lists and watchlists, including but not limited to:

Members who appear on any sanctions or watchlist will be immediately rejected and reported to the appropriate authorities.

5.3 Right to Refuse Service

THE COMPANY RESERVES THE ABSOLUTE AND UNCONDITIONAL RIGHT TO REFUSE SERVICE TO ANY PERSON OR ENTITY FOR ANY REASON OR NO REASON, AT ANY TIME, WITHOUT EXPLANATION OR LIABILITY. THIS INCLUDES BUT IS NOT LIMITED TO REFUSAL BASED ON: FAILED IDENTITY VERIFICATION, SANCTIONS SCREENING RESULTS, SUSPICIOUS ACTIVITY INDICATORS, PRIOR ACCOUNT TERMINATION, LAW ENFORCEMENT REQUESTS, RISK ASSESSMENT OUTCOMES, OR THE COMPANY'S SOLE AND ABSOLUTE DISCRETION.

The Company is not required to provide reasons for refusal of service. Fees paid by rejected applicants will be refunded for unused services only.

5.4 Ongoing Verification

The Company may, at any time and without prior notice, require Members to re-verify their identity, provide additional documentation, or answer questions about their account activity. Failure to comply with re-verification requests within 48 hours may result in immediate account suspension.

5.5 KYC Record Retention

The Company retains KYC records, including identity verification results, for a minimum of five (5) years after account closure. This retention is required for compliance with applicable law and to facilitate cooperation with law enforcement. You consent to this retention period by creating an account.

6. Agents and Endpoints

6.1 Package Management and Agent Registration

Members may manage their packages directly through the Operator Dashboard, or register AI agents to automate workflows via API. Agent registration is optional — all Platform features are accessible through the dashboard without any automation.

For Members who choose to automate: AI agents and autonomous systems may be registered on the Platform subject to subscription plan limits. Each Agent registration requires a unique name, a slug for subdomain assignment (e.g., agent-slug.mailbox.bot), and optionally a webhook URL for event notifications, framework identifier, capability declarations, and Agent Protocol configurations (MCP, A2A, OpenClaw, REST).

Agents registered on the Platform can autonomously order products from e-commerce platforms, receive packages, request content scans, and initiate forwarding or consolidation via the API. Members are encouraged to implement spending limits, approval workflows, and monitoring for autonomous agents to maintain control over Agent activities.

6.2 Member Responsibility for Agents — Inherited Identity Model

AGENTS CANNOT SELF-REGISTER. Every endpoint must be sponsored by a verified human or legal entity. Agents inherit identity from their KYC-verified operator. Autonomous agents cannot obtain endpoints independently — they require a verified Member to create and sponsor their account.
THE MEMBER IS FULLY AND SOLELY RESPONSIBLE FOR ALL ACTIONS, OMISSIONS, AND CONDUCT OF EVERY AGENT REGISTERED UNDER THEIR ACCOUNT. THIS INCLUDES BUT IS NOT LIMITED TO: ALL PACKAGES RECEIVED, ALL API CALLS MADE, ALL CONTENT GENERATED, ALL AUTONOMOUS PROCUREMENT DECISIONS, AND ALL INTERACTIONS WITH THIRD PARTIES CONDUCTED BY OR ON BEHALF OF THE AGENT.

The Company does not monitor, supervise, or control Agent behavior. Members must implement their own monitoring, spending limits, and approval workflows for autonomous agents. The Member agrees to indemnify and hold the Company harmless for all claims arising from Agent activity.

6.3 Endpoint Provisioning — Instant Reference Code Assignment

Upon Agent registration, the Platform immediately provisions an Endpoint consisting of:

Endpoint provisioning typically occurs within seconds of Agent registration, enabling the Agent to immediately begin using the Reference Code for shipping workflows. The physical facility address associated with an Endpoint may change if the Company relocates a Facility. The Company will provide at least sixty (60) days' notice before any Facility relocation and will maintain forwarding from the prior address for ninety (90) days after relocation.

6.4 Agent Credentials and API Keys

The Platform provides separate API credentials for Member-level access and Agent-level access. Agent credentials are scoped to the specific Endpoint and cannot be used to modify billing, create new Agents, or access other Members' data. Members are responsible for securing all credentials and must revoke compromised credentials immediately.

6.5 Agent Identity and Protocol Support

Each Agent receives a public profile hosted at [agent-slug].mailbox.bot, including support for standard agent discovery and communication protocols:

The Company provides the infrastructure for agent identity and protocol hosting but does not verify, endorse, or guarantee any information in an Agent's profile, protocol declarations, or capability claims. Members are solely responsible for the accuracy, security, and compliance of their Agent's profile information and protocol implementations.

7. Facility and Physical Operations

7.1 Facility Address

The Company operates one or more physical Facilities for package receiving. Facility addresses are provided to Members via the API and Operator Dashboard. The Company reserves the right to change Facility addresses at any time with sixty (60) days' prior notice to affected Members.

FACILITY ADDRESS NOT GUARANTEED: The Company does not guarantee that your assigned shipping or mailing address will remain at the same facility or physical location for the duration of your subscription. Your Endpoint's physical address may be relocated to a different facility at any time, subject to the notice and transition procedures described in Section 7.1.2. The Company will provide at least sixty (60) days' advance notice of any address change, maintain forwarding from the prior address for at least ninety (90) days, and for CMRA facilities, maintain USPS registration in good standing throughout the transition. By using the Platform, you acknowledge and accept the possibility of facility address changes and the terms governing such changes.

7.1.1 Facility Risk Acknowledgment

Facilities on the mailbox.bot network are independently owned and operated businesses. They are not employees, agents, subsidiaries, or affiliates of the Company. The Company provides software infrastructure that connects you with these independent operators but does not own, manage, or control any facility's day-to-day operations, staffing, or business decisions.

By using the Platform, you acknowledge and accept the following risks:

THE COMPANY IS A SOFTWARE PLATFORM PROVIDER. THE COMPANY BEARS NO LIABILITY FOR THE ACTS, OMISSIONS, NEGLIGENCE, UNDERPERFORMANCE, OR BUSINESS FAILURE OF ANY INDEPENDENT FACILITY OPERATOR ON THE NETWORK. YOUR USE OF A FACILITY'S PHYSICAL LOCATION AND ADDRESS IS AT YOUR OWN RISK. THE COMPANY IS NOT LIABLE FOR ANY LOSS, INCONVENIENCE, COST, OR DAMAGE ARISING FROM A FACILITY'S UNDERPERFORMANCE, REMOVAL FROM THE NETWORK, RELOCATION, OR CLOSURE, INCLUDING BUT NOT LIMITED TO THE COST OF UPDATING YOUR SHIPPING ADDRESS WITH THIRD PARTIES, DELAYED OR LOST PACKAGES DURING TRANSITION, OR BUSINESS INTERRUPTION. YOU ARE SOLELY RESPONSIBLE FOR MAINTAINING CONTINGENCY PLANS FOR ADDRESS CHANGES AND FOR PROMPTLY UPDATING YOUR SHIPPING ARRANGEMENTS WHEN NOTIFIED OF A FACILITY CHANGE.

7.1.2 Service Address Relocation and CMRA Portability

The Company does not guarantee that any Facility address will remain at the same physical location for the duration of your subscription or for any particular period of time. The Company reserves the right, in its sole discretion, to relocate any Facility to a different physical address at any time, for any reason, including but not limited to: lease expiration or termination, changes in business conditions, network optimization, capacity planning, regulatory requirements, or any other operational reason.

Notice: The Company will provide affected Members with at least sixty (60) days' written notice prior to any Facility address change. Notice will be sent via email and/or webhook notification to all Members with active Endpoints at the affected Facility.

Mail and Package Forwarding During Transition: Upon relocation, the Company will establish forwarding from the prior Facility address to the new Facility address and will maintain such forwarding for a minimum of ninety (90) days following the effective date of the relocation. The Company will use commercially reasonable efforts to ensure continuity of mail and package receiving during the transition period, but does not guarantee uninterrupted service.

CMRA Compliance and USPS Good Standing: For Members enrolled in virtual mailbox service at CMRA-registered facilities, the Company and/or its facility operator will take the following steps in connection with any Facility relocation:

New Form 1583 Required at New Address: Under USPS regulations, PS Form 1583 is address-specific. A Form 1583 executed for one CMRA address does not transfer to a different address. In the event of a Facility relocation, each virtual mailbox Member will need to execute a new Form 1583 for the new Facility address. The Company will handle this process to make it as simple as possible:

Authorization for Address Change Processing: By enrolling in virtual mailbox service, you authorize the Company and/or its CMRA operator to prepare updated Form 1583 documents on your behalf in connection with any Facility address change, using the identity verification records and personal information you provided during onboarding. You agree to promptly sign any such updated Form 1583 and present valid identification when requested. This authorization remains in effect for the duration of your subscription.

Completion Deadline: Members must complete the new Form 1583 within thirty (30) days of receiving notice of the address change. The Company will send reminders during this period. If a Member does not complete the new Form 1583 within thirty (30) days, USPS regulations require the Company to suspend mail receiving for that Member at the new address until a valid Form 1583 is on file. This is a regulatory requirement, not a penalty — the Company will promptly restore mail service as soon as the updated form is completed. Members whose mail service is suspended due to an incomplete Form 1583 will not be charged for the virtual mailbox service during the suspension period.

NO GUARANTEE OF PERMANENT ADDRESS. BY USING THE PLATFORM, YOU ACKNOWLEDGE AND AGREE THAT THE PHYSICAL SERVICE ADDRESS ASSOCIATED WITH YOUR ENDPOINT IS NOT PERMANENT AND MAY CHANGE DURING THE TERM OF YOUR SUBSCRIPTION. THE COMPANY SHALL NOT BE LIABLE FOR ANY LOSS, COST, INCONVENIENCE, EXPENSE, OR DAMAGE ARISING FROM OR RELATED TO A FACILITY ADDRESS CHANGE, INCLUDING BUT NOT LIMITED TO: THE COST OR EFFORT OF UPDATING YOUR SHIPPING ADDRESS WITH VENDORS, SENDERS, FINANCIAL INSTITUTIONS, GOVERNMENT AGENCIES, OR OTHER THIRD PARTIES; DELAYED, RETURNED, OR LOST MAIL OR PACKAGES DURING THE TRANSITION PERIOD; BUSINESS INTERRUPTION OR DISRUPTION OF OPERATIONS; ANY THIRD-PARTY CLAIMS RESULTING FROM AN ADDRESS CHANGE; OR ANY LAPSE IN MAIL OR PACKAGE RECEIVING DURING THE PERIOD BETWEEN THE OLD AND NEW FACILITY BECOMING FULLY OPERATIONAL. YOU ARE SOLELY RESPONSIBLE FOR MAINTAINING CONTINGENCY PLANS FOR ADDRESS CHANGES AND FOR PROMPTLY UPDATING YOUR SHIPPING AND MAILING ARRANGEMENTS WHEN NOTIFIED OF A FACILITY RELOCATION.

7.2 Carrier Policy

Carrier acceptance depends on your facility type. See Section 2.4 for details. Virtual mailbox customers at CMRA facilities may receive USPS letter mail, flats, and documents only. USPS packages and parcels will be refused or returned to sender by the carrier. Private carrier packages are not accepted on the virtual mailbox plan. Warehouse space customers at fulfillment facilities may receive from private carriers (FedEx, UPS, DHL, Amazon Logistics, OnTrac, LaserShip, GSO, Spee-Dee, and regional carriers). USPS mail is not accepted at warehouse facilities.

7.3 Package Intake Procedures: Intake, Document, Notify

Upon receipt of a Package at a Facility, the facility operator follows a standardized intake process establishing a documented provenance chain:

Webhook notifications include structured data: tracking number, carrier name, package photos (URLs), weight, dimensions, timestamp, Reference Code, and Agent identifier. This enables autonomous agents to make immediate logistics decisions upon package arrival. All packages are attributed to a specific client via Reference Code throughout the provenance chain.

7.4 Package Storage

Packages are stored at the Facility under bailee custody for the duration specified by the Member's subscription plan. Storage periods begin on the date of receipt. The Member retains ownership of all Packages at all times during storage. Packages not retrieved, forwarded, or otherwise disposed of before the storage period expires will be subject to the abandonment procedure described in Section 7.7.

7.5 Content Scanning

Members may request a Content Scan for any Package. Content Scanning involves opening the Package, photographing or digitizing the contents, delivering the resulting images and/or extracted data to the Member via the Platform, and resealing the Package. Content Scan requests are subject to additional fees per the applicable pricing plan. The Company reserves the right to refuse Content Scanning for any Package that appears to contain Prohibited Items.

7.5.1 Sensitive and Regulated Content

Mail and packages opened through Content Scanning or other handling services may contain sensitive, confidential, or regulated information, including but not limited to:

Consent to Handle Sensitive Content: By requesting a Content Scan, mail opening, or any service that involves accessing the contents of your mail or packages, you expressly consent to the Company and its facility operators viewing, photographing, digitizing, and transmitting the contents to you via the Platform — including any sensitive or regulated information contained therein. You acknowledge that this consent is necessary for the Company to perform the services you have requested and that the Company cannot selectively redact or exclude sensitive content during scanning without prior specific instruction from you.

No HIPAA Covered Entity Status: The Company is not a healthcare provider, health plan, healthcare clearinghouse, or business associate as defined under the Health Insurance Portability and Accountability Act (HIPAA). The Company does not hold itself out as HIPAA-compliant and is not subject to HIPAA regulations. If you receive mail containing protected health information (PHI) and request that it be scanned, you acknowledge that the scanning, storage, and transmission of that information through the Platform is not subject to HIPAA safeguards. Members who require HIPAA-compliant mail handling should not use Content Scanning for mail that may contain PHI, or should make alternative arrangements for the receipt of healthcare-related correspondence.

No SOC 2 Certification: The Company does not currently hold SOC 2 Type I or Type II certification. While the Company implements commercially reasonable security measures (encryption at rest and in transit, access controls, audit logging, and secure infrastructure providers — several of which are themselves SOC 2 certified), the Company's own operations have not been independently audited under the SOC 2 framework. Members who require SOC 2-certified document handling for regulatory or compliance purposes should evaluate whether the Platform meets their requirements before using Content Scanning services.

Data Protection Commitment: Notwithstanding the above, the Company commits to the following with respect to all content obtained through Content Scanning and mail handling services:

YOU ARE SOLELY RESPONSIBLE FOR DETERMINING WHETHER THE PLATFORM'S SECURITY MEASURES AND CERTIFICATIONS ARE ADEQUATE FOR THE TYPES OF MAIL AND DOCUMENTS YOU RECEIVE. IF YOU RECEIVE MAIL CONTAINING INFORMATION SUBJECT TO HIPAA, GLBA, PCI-DSS, ITAR, FERPA, OR ANY OTHER REGULATORY FRAMEWORK THAT IMPOSES SPECIFIC DATA HANDLING REQUIREMENTS, YOU MUST EVALUATE THE PLATFORM'S CAPABILITIES AGAINST THOSE REQUIREMENTS BEFORE USING CONTENT SCANNING OR MAIL OPENING SERVICES. THE COMPANY IS NOT LIABLE FOR ANY REGULATORY NON-COMPLIANCE ARISING FROM YOUR DECISION TO SCAN OR DIGITIZE REGULATED CONTENT THROUGH THE PLATFORM.

7.6 Package Forwarding

Members may request that Packages be forwarded to a designated address. Forwarding is subject to additional fees including the cost of shipping via the selected carrier. The Company is not liable for Packages lost, damaged, or delayed during forwarding by the carrier.

7.7 Abandoned Packages

Packages that remain in bailee custody beyond the applicable storage period without instruction from the Member are deemed abandoned. The Company will send a notification to the Member at least seven (7) days before declaring a Package abandoned. Upon abandonment, the bailment terminates and Packages become the property of the Company and may be disposed of, donated, recycled, or destroyed at the Company's sole discretion without liability to the Member.

7.8 Package Condition and Chain of Custody

The Company accepts Packages in the condition delivered by the carrier and establishes bailee custody at the point of intake. The Company makes no representations or warranties regarding the condition of a Package upon arrival, including but not limited to damage, tampering, or partial delivery that may have occurred during carrier transit. Exterior photographs taken at intake document the Package's condition at the time of receipt and establish the provenance chain. The Company is not liable for any condition issues attributable to carrier handling prior to Facility receipt.

7.9 No Climate or Environmental Controls

Unless specifically agreed to in writing under an Enterprise plan, the Company's Facilities do not provide climate-controlled, temperature-regulated, humidity-controlled, or environmentally sealed storage. Members who ship items that are sensitive to temperature, humidity, light, vibration, or other environmental conditions do so entirely at their own risk. The Company is not liable for damage, degradation, spoilage, or loss of functionality caused by environmental conditions during storage.

7.10 Right to Refuse or Dispose of Dangerous Packages

If any Package received at a Facility is leaking, emitting fumes, producing unusual odors, making sounds, generating heat, or otherwise presenting an actual or perceived safety risk to Facility personnel, other Packages, or the Facility itself, the Company may immediately quarantine, remove, or dispose of the Package without prior notice to the Member. The Company may also contact emergency services or hazardous materials response teams at its sole discretion. The Member is liable for all costs incurred by the Company in responding to a dangerous Package, including cleanup, decontamination, emergency response fees, and any damage to the Facility or other Members' Packages.

7.11 Cross-Contamination and Shared Facility Risk

Members acknowledge that Packages are stored in a shared Facility alongside Packages belonging to other Members. The Company takes reasonable precautions to segregate Packages by Reference Code with no commingling of client property, but does not guarantee complete physical isolation from other Packages. The Company is not liable for any cross-contamination, pest infestation, odor transfer, moisture damage, or other harm caused by proximity to other Members' Packages in the shared Facility environment.

7.12 Carrier Misdelivery

The Company is not liable for Packages that are misdelivered by a carrier to the wrong Facility, wrong address, or wrong Reference Code. If a Package addressed to a Member's Reference Code is delivered to a different location by the carrier, the Member's sole remedy is against the carrier. If a Package addressed to a different recipient is delivered to the Facility, the Company will make reasonable efforts to return it to the carrier or correct the delivery, but assumes no liability for such misdelivered Packages.

7.13 Photography and Documentation Accuracy

Exterior and Content Scan photographs are provided on an "as-is" basis. Photographs may not capture all damage, defects, or details of a Package or its contents. Lighting, camera limitations, and human error may affect photograph quality. The Company does not warrant that photographs are complete, accurate, or sufficient for any particular purpose including insurance claims, legal proceedings, or inventory management. Members should not rely solely on Company-provided photographs for critical assessments of Package condition or contents.

7.14 Package Size and Weight Limits

Standard subscription plans accept Packages up to the following limits:

Packages exceeding these limits may be refused at intake, require special handling fees, or require upgrade to an Enterprise plan. Enterprise plans with reserved facility space can accommodate larger items including server racks, pallets, and oversized equipment. Members should contact email address before shipping oversized items.

7.15 Physical Operations Risk Acknowledgment

MAILBOX.BOT IS A PHYSICAL LOGISTICS PLATFORM OPERATING IN THE REAL WORLD. PHYSICAL OPERATIONS INVOLVE INHERENT RISKS THAT CANNOT BE ENTIRELY ELIMINATED REGARDLESS OF THE CARE, DILIGENCE, OR SECURITY MEASURES EMPLOYED. BY USING THE PLATFORM, YOU ACKNOWLEDGE AND ACCEPT THESE INHERENT RISKS.

The Company and its facility operators handle physical mail and packages in real-world environments staffed by human beings and assisted by automated systems. Despite commercially reasonable care, security measures, training, and operational procedures, the following risks exist and are inherent to any physical logistics operation:

THE COMPANY IS NOT AN INSURER OF YOUR PACKAGES OR MAIL. THE COMPANY ACTS AS A BAILEE UNDER A DUTY OF REASONABLE CARE — NOT A DUTY OF ABSOLUTE LIABILITY. REASONABLE CARE MEANS THE COMPANY TAKES COMMERCIALLY REASONABLE PRECAUTIONS TO PROTECT YOUR PROPERTY, BUT DOES NOT GUARANTEE AGAINST ALL LOSS, THEFT, DAMAGE, OR ERROR. IF YOU SHIP HIGH-VALUE, IRREPLACEABLE, FRAGILE, TIME-SENSITIVE, OR CRITICAL ITEMS THROUGH THE PLATFORM, YOU DO SO AT YOUR OWN RISK. MEMBERS ARE SOLELY RESPONSIBLE FOR INSURING THEIR OWN PROPERTY AND ARE STRONGLY ENCOURAGED TO MAINTAIN APPROPRIATE INSURANCE COVERAGE FOR ALL PACKAGES AND MAIL RECEIVED THROUGH THE PLATFORM.

The Company's sole obligation upon loss of or damage to a Package in its bailee custody (where such loss or damage is attributable to the Company's failure to exercise reasonable care) is limited to the remedies set forth in Section 14.6 (Bailee Liability). The Company shall have no liability whatsoever for loss, theft, damage, delay, or misdelivery attributable to carriers, third parties, force majeure events, or circumstances beyond the Company's reasonable control.

7.16 Member Insurance Responsibility

The Company does not provide insurance coverage for the contents or value of Packages or mail received, stored, or forwarded through the Platform. Members are solely responsible for obtaining and maintaining their own insurance coverage, including but not limited to: declared value coverage or shipping insurance through the originating carrier; renter's insurance, homeowner's insurance, or business property insurance that covers goods in the custody of a third-party bailee; and any specialized coverage for high-value, fragile, perishable, or irreplaceable items. The Company will cooperate with Members in filing insurance claims by providing intake photographs, chain of custody records, and other documentation available through the Platform, but assumes no responsibility for the outcome of any insurance claim.

8. Prohibited Items and Activities

8.1 Prohibited Activities

Members may not use the Platform to:

8.2 Prohibited Items

The following items may NOT be received, stored, or forwarded through the Platform:

8.3 Right to Inspect

The Company reserves the right, but not the obligation, to inspect any Package received at a Facility if the Company has reasonable suspicion that the Package contains Prohibited Items, if the Package is damaged, leaking, or emitting unusual odors, if required by law enforcement or pursuant to a lawful order, or if the Company determines inspection is necessary to protect the safety of its employees, other Members, or the public.

8.4 Consequences of Violation

Violation of this Section may result in: immediate account termination without refund; seizure and disposal of the offending Package; reporting to law enforcement (see Section 9); and permanent ban from the Platform.

9. Law Enforcement Cooperation and Reporting

THE COMPANY WILL FULLY AND IMMEDIATELY COOPERATE WITH ALL LAW ENFORCEMENT AGENCIES, REGULATORY BODIES, AND GOVERNMENT AUTHORITIES. THE COMPANY WILL REPORT ALL SUSPICIOUS ACTIVITY TO THE APPROPRIATE AUTHORITIES WITHOUT PRIOR NOTICE TO THE MEMBER.

9.1 Mandatory Reporting

The Company will report to the appropriate law enforcement agency any Package that is suspected to contain Prohibited Items, any activity that appears to involve fraud, money laundering, terrorism financing, or other criminal conduct, any Member whose identity verification reveals sanctions list matches, any attempt to evade KYC requirements or provide false identity documentation, and any other activity that the Company, in its sole discretion, deems suspicious or potentially illegal.

9.2 Law Enforcement Requests

The Company will comply with all lawful subpoenas, court orders, search warrants, and other legal process. The Company will provide law enforcement with: Member identity verification records; Package intake logs and photographs; Agent registration information; API access logs and webhook event logs; communication records; and any other information in the Company's possession that is responsive to a lawful request.

9.3 No Obligation to Notify

The Company is NOT obligated to notify Members of law enforcement requests, investigations, or reporting unless required by law. In many cases, the Company is prohibited from providing such notification. Members waive any right to advance notice of law enforcement cooperation to the extent permitted by law.

9.4 Preservation Requests

The Company will honor lawful preservation requests from law enforcement and will preserve relevant records for the period specified in such requests, or for 180 days if no period is specified.

9.5 Member Cooperation

Members agree to cooperate with the Company and with law enforcement in connection with any investigation related to their account, their Agents, or Packages received on their behalf. Failure to cooperate may result in immediate account termination.

10. Payment Terms

10.1 Subscription Plans

The Platform offers multiple subscription plans designed for individuals, businesses, and teams, including:

Subscription plans are billed monthly or annually in advance. Current pricing and plan details are published on the Platform's website. The Company reserves the right to modify pricing with thirty (30) days' notice to existing Members.

10.2 Usage-Based Fees

The Platform operates on a pay-for-what-you-use model. Certain services incur usage-based fees in addition to the subscription fee, including but not limited to:

Usage-based fees are billed monthly in arrears and charged to the payment method on file. Current usage-based pricing is published on the Platform's website and may be modified with thirty (30) days' notice.

10.3 Payment Method

Members must maintain a valid payment method on file at all times. Accepted payment methods are debit cards and credit cards issued by a financial institution. Prepaid cards, gift cards, virtual cards not linked to a bank account, and other anonymous or non-reloadable funding sources are not accepted and will be rejected during onboarding. The Company reserves the right to reject or remove any payment method that does not meet these requirements. By providing a payment method, you authorize the Company to charge your payment method for all fees incurred under your account. Failed payments may result in immediate service suspension.

10.4 Late Payments

Payments not received by the due date are subject to a late fee of 1.5% per month (18% per annum) or the maximum rate permitted by law, whichever is less. Accounts with payments more than thirty (30) days past due may be suspended or terminated.

10.5 Refund Policy

Subscription fees are non-refundable except as required by applicable law. Usage-based fees are non-refundable for services rendered. If the Company terminates your account for reasons other than a violation of these Terms, you will receive a prorated refund of prepaid subscription fees for the unused portion of the current billing period.

10.6 Taxes

All fees are exclusive of applicable taxes. You are responsible for all taxes, duties, and levies imposed by any governmental authority with respect to your use of the Platform, except for taxes based on the Company's net income.

11. Shipping Portal

11.1 Shipping Portal Service (ship.mailbox.bot)

The Platform provides a public shipping portal at ship.mailbox.bot that enables third-party senders (vendors, suppliers, contractors, or other parties) to ship Packages to a Member's Agent without knowing the Facility's physical address. The shipping portal generates pre-addressed shipping labels that automatically route Packages to the correct Reference Code and Endpoint at the appropriate Facility.

This enables Agents to provide shipping instructions to external parties using their agent endpoint (e.g., agent-slug.mailbox.bot) while maintaining privacy of the physical Facility location.

11.2 Privacy of Physical Address

The physical Facility address is not publicly displayed on Agent profile pages or the shipping portal interface. The address is provided only to Members via authenticated API calls and the Operator Dashboard. The shipping portal may display only the Agent's name and the information necessary for the sender to generate a shipping label.

11.3 No Guarantee of Privacy

While the Company takes reasonable measures to limit public exposure of Facility addresses, the Company cannot guarantee that Facility addresses will remain confidential. Physical addresses may be discoverable through carrier tracking information, public records, or other means. The Company is not liable for any disclosure of Facility addresses through third-party systems or processes.

12. AI and Automated Systems

12.1 AI-Assisted Operations

The Platform utilizes artificial intelligence technologies, including large language models, computer vision systems, and automated workflows, in the provision of services. AI systems may be used for: document scanning and data extraction (OCR, field recognition); Package classification and routing; webhook payload generation; Agent profile and protocol configuration; customer support and communication; and anomaly detection and security monitoring.

12.2 Human-in-the-Loop

The Company employs human oversight for critical operations, including Package intake verification, Content Scan quality review, suspicious activity assessment, and law enforcement reporting decisions. However, human oversight does not guarantee detection of all errors, anomalies, or prohibited items.

12.3 AI Limitations

You acknowledge that AI-generated information may contain inaccuracies or errors, automated scanning may not detect all contents of a Package, AI systems may occasionally misclassify or misroute Packages, and the Company is not liable for errors attributable to AI processing.

12.4 Autonomous Agent Risk Acknowledgment

Mailbox.bot enables AI agents that can write code, manage budgets, close deals, and interact with physical commerce. Members who configure Agents to operate autonomously (e.g., automatically ordering hardware, receiving components, managing inventory, requesting forwarding, or initiating Content Scans via API without human review) acknowledge that they bear full responsibility for all actions taken by such Agents.

The Company is not liable for Packages ordered, received, forwarded, or disposed of by an Agent operating autonomously, even if the Agent's behavior is unintended, erroneous, or the result of a security compromise of the Agent's credentials. This includes but is not limited to: autonomous procurement decisions, budget overruns, incorrect forwarding destinations, or unintended content scan requests.

Members are strongly encouraged to implement spending limits, approval workflows, budget controls, and real-time monitoring for autonomous Agents. The Operator Dashboard provides human oversight capabilities for reviewing and controlling Agent activities.

12.5 Agentic Protocol and Third-Party Integration Risks

THE PLATFORM INTEGRATES WITH AND SUPPORTS EMERGING AGENTIC AI PROTOCOLS AND FRAMEWORKS, INCLUDING BUT NOT LIMITED TO MCP (MODEL CONTEXT PROTOCOL), A2A (AGENT-TO-AGENT PROTOCOL), OPENCLAW, AND OTHER THIRD-PARTY AGENT COMMUNICATION STANDARDS. THESE PROTOCOLS ARE NASCENT, RAPIDLY EVOLVING, AND DEVELOPED BY INDEPENDENT THIRD-PARTY OPEN-SOURCE COMMUNITIES. THE COMPANY DOES NOT DEVELOP, MAINTAIN, AUDIT, OR CONTROL THESE PROTOCOLS AND MAKES NO REPRESENTATIONS OR WARRANTIES REGARDING THEIR SECURITY, RELIABILITY, OR FITNESS FOR ANY PURPOSE.

By using the Platform's agentic protocol integrations, you acknowledge and accept the following:

YOU USE THE PLATFORM'S AGENTIC PROTOCOL INTEGRATIONS, AI AGENT CAPABILITIES, AND THIRD-PARTY CONNECTIONS ENTIRELY AT YOUR OWN RISK. THE COMPANY PROVIDES THESE INTEGRATIONS ON AN "AS IS" AND "AS AVAILABLE" BASIS WITHOUT ANY WARRANTY OF SECURITY, RELIABILITY, OR CONTINUED AVAILABILITY. THE COMPANY SHALL NOT BE LIABLE FOR ANY LOSS, DAMAGE, DATA BREACH, UNAUTHORIZED ACCESS, OR HARM ARISING FROM VULNERABILITIES IN AGENTIC PROTOCOLS, THIRD-PARTY INTEGRATIONS, OPEN-SOURCE DEPENDENCIES, OR THE ACTIONS OF AI AGENTS OPERATING THROUGH THE PLATFORM.

12.6 Contractors, Employees, and Personnel Disclaimer

The Company engages independent contractors, service providers, and personnel in the operation of the Platform, including but not limited to facility operators, software developers, security consultants, and support staff. The Company is not liable for the individual acts, omissions, errors, negligence, or misconduct of any contractor, employee, service provider, or personnel, except to the extent required by applicable law. This includes but is not limited to: unauthorized access to or disclosure of Member data by any individual; errors in package handling, scanning, or processing attributable to human or automated error; and any security breach or data incident caused by the acts or omissions of any individual associated with the Platform or its facilities.

13. Warranties and Disclaimers

13.1 Limited Warranty

The Company warrants that it will perform services in a professional and workmanlike manner consistent with general industry standards. This limited warranty is expressly in lieu of all other warranties, express or implied.

13.2 Comprehensive Disclaimer

EXCEPT AS EXPRESSLY SET FORTH IN THESE TERMS, THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE. THE COMPANY SPECIFICALLY DISCLAIMS ALL IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.

The Company does not warrant that: the Platform will be uninterrupted, error-free, or secure; that Packages will be received, stored, or forwarded without loss, damage, or delay; that Content Scans will be complete, accurate, or error-free; that the physical Facility will be accessible at all times; that webhooks will be delivered successfully or in real time; or that AI-generated data will be accurate or complete.

13.3 Third-Party Infrastructure and Service Provider Disclaimer

THE PLATFORM IS BUILT ON AND DEPENDS UPON THIRD-PARTY INFRASTRUCTURE PROVIDERS, CLOUD SERVICES, AND SOFTWARE-AS-A-SERVICE PLATFORMS THAT ARE INDEPENDENTLY OWNED, OPERATED, AND SECURED BY THEIR RESPECTIVE PROVIDERS. THE COMPANY MAKES NO REPRESENTATIONS OR WARRANTIES REGARDING THE SECURITY, AVAILABILITY, RELIABILITY, OR DATA HANDLING PRACTICES OF ANY THIRD-PARTY PROVIDER.

The Platform relies on third-party infrastructure and service providers including, but not limited to: cloud database and authentication providers; payment processors; identity verification services; email delivery services; phone carrier verification services; job queue and caching providers; cloud storage and hosting providers; AI model providers and inference APIs; notarization service providers; and domain registrars and DNS providers. These providers are independent companies with their own security practices, terms of service, and vulnerabilities.

The Company does not own, operate, audit, or control the infrastructure, source code, security practices, personnel, or data centers of any third-party provider. A security breach, data leak, service outage, data loss, unauthorized access, insider threat, or other incident at any third-party provider could affect the Platform and your data, even if the Company has implemented commercially reasonable security measures on its own systems.

By using the Platform, you acknowledge and accept the following:

13.4 No Warranty on Package Contents

The Company makes no warranty or representation regarding the contents, value, condition, or fitness for purpose of any Package received at a Facility. The Company is a bailee, not an insurer, of Packages. The Member retains ownership; the Company holds temporary custody under a duty of reasonable care.

14. Limitation of Liability

14.1 Maximum Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE COMPANY SHALL NOT BE LIABLE FOR ANY INDIRECT, PUNITIVE, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR EXEMPLARY DAMAGES, INCLUDING WITHOUT LIMITATION DAMAGES FOR LOSS OF PROFITS, GOODWILL, USE, DATA, BUSINESS INTERRUPTION, OR OTHER INTANGIBLE LOSSES, ARISING FROM OR RELATED TO YOUR USE OF THE PLATFORM.

14.2 Liability Cap

THE COMPANY'S TOTAL AGGREGATE LIABILITY TO YOU FOR ALL CLAIMS ARISING FROM OR RELATED TO THESE TERMS OR THE SERVICES SHALL NOT EXCEED THE GREATER OF (A) THE TOTAL FEES PAID BY YOU TO THE COMPANY IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (B) FIVE HUNDRED DOLLARS ($500).

14.3 Specific Exclusions

The Company is specifically not liable for: loss, damage, or destruction of Packages due to fire, flood, earthquake, theft, vandalism, or other events beyond the Company's reasonable control; carrier delays, losses, or damages during transit; contents of Packages received on behalf of Members; actions taken by Agents or third parties; government or regulatory actions affecting Members or their Agents; or actions taken in cooperation with law enforcement.

The Company is also specifically not liable for any loss, cost, inconvenience, or damage arising from the acts, omissions, negligence, or underperformance of any independent facility operator, including but not limited to: late or inaccurate package scanning; failure to fulfill action requests in a timely manner; poor communication or unresponsiveness; mishandling, misattribution, or loss of Packages while in the facility's custody; facility closure, withdrawal from the network, or removal by the Company; the cost or inconvenience of changing your shipping address due to any facility change; delayed, returned, or lost Packages during a facility transition; and any business interruption resulting from a change in your assigned facility. The Company provides software infrastructure connecting you with independently operated facilities and is not a guarantor of any facility's performance, continuity, or solvency.

14.4 Agentic Protocol and Security Liability Exclusion

WITHOUT LIMITING THE GENERALITY OF SECTIONS 14.1 THROUGH 14.3, THE COMPANY SHALL NOT BE LIABLE FOR ANY LOSS, DAMAGE, DATA BREACH, UNAUTHORIZED ACCESS, FINANCIAL LOSS, OR OTHER HARM ARISING FROM OR RELATED TO: (A) SECURITY VULNERABILITIES, EXPLOITS, OR DEFECTS IN ANY AGENTIC PROTOCOL, INCLUDING MCP, A2A, OPENCLAW, OR ANY SUCCESSOR OR ALTERNATIVE PROTOCOL; (B) PROMPT INJECTION, ADVERSARIAL ATTACKS, DATA POISONING, JAILBREAKING, OR OTHER AI-SPECIFIC ATTACK VECTORS TARGETING YOUR AGENT OR THE PLATFORM; (C) UNAUTHORIZED ACCESS TO YOUR ACCOUNT, AGENT, ENDPOINTS, OR DATA RESULTING FROM VULNERABILITIES IN THIRD-PARTY PROTOCOLS, LIBRARIES, OR INTEGRATIONS; (D) DATA LEAKAGE, CREDENTIAL EXPOSURE, OR INFORMATION DISCLOSURE THROUGH AGENTIC COMMUNICATION CHANNELS, WEBHOOK PAYLOADS, OR PROTOCOL RESPONSES; (E) THE ACTIONS, ERRORS, OR SECURITY FAILURES OF ANY THIRD-PARTY AGENT, SERVICE, OR ENDPOINT THAT YOUR AGENT COMMUNICATES WITH; (F) SECURITY VULNERABILITIES IN OPEN-SOURCE DEPENDENCIES, PROTOCOL IMPLEMENTATIONS, OR THIRD-PARTY SOFTWARE INCORPORATED INTO THE PLATFORM; (G) THE ACTS, OMISSIONS, ERRORS, NEGLIGENCE, OR MISCONDUCT OF ANY CONTRACTOR, EMPLOYEE, SERVICE PROVIDER, OR PERSONNEL ASSOCIATED WITH THE PLATFORM OR ANY FACILITY; OR (H) ANY UNINTENDED, ERRONEOUS, OR HARMFUL ACTION TAKEN BY AN AI AGENT OPERATING THROUGH THE PLATFORM, WHETHER CAUSED BY SOFTWARE BUGS, MODEL HALLUCINATIONS, ADVERSARIAL MANIPULATION, OR ANY OTHER CAUSE.

The agentic AI ecosystem is an emerging and rapidly evolving space. New attack vectors, security vulnerabilities, and failure modes are regularly discovered across all agentic protocols and frameworks. By using the Platform, you accept that perfect security is not achievable and that the Company cannot anticipate or prevent all potential security incidents in this evolving landscape. You use the Platform's agentic capabilities at your own risk.

14.5 Third-Party Infrastructure Provider Liability Exclusion

THE COMPANY SHALL NOT BE LIABLE FOR ANY LOSS, DAMAGE, DATA BREACH, DATA LOSS, SERVICE INTERRUPTION, UNAUTHORIZED ACCESS, OR OTHER HARM ARISING FROM OR RELATED TO: (A) A SECURITY BREACH, DATA LEAK, UNAUTHORIZED ACCESS, OR OTHER SECURITY INCIDENT ORIGINATING AT ANY THIRD-PARTY INFRASTRUCTURE PROVIDER, CLOUD SERVICE, OR SOFTWARE-AS-A-SERVICE PLATFORM USED BY THE COMPANY IN THE OPERATION OF THE PLATFORM; (B) THE FAILURE, OUTAGE, DEGRADATION, DISCONTINUATION, OR UNAVAILABILITY OF ANY THIRD-PARTY PROVIDER'S SERVICES; (C) UNAUTHORIZED ACCESS TO OR DISCLOSURE OF YOUR DATA BY EMPLOYEES, CONTRACTORS, OR PERSONNEL OF ANY THIRD-PARTY PROVIDER; (D) CHANGES TO A THIRD-PARTY PROVIDER'S TERMS OF SERVICE, PRIVACY POLICY, DATA HANDLING PRACTICES, OR API THAT AFFECT THE PLATFORM OR YOUR DATA; (E) SUPPLY CHAIN ATTACKS, COMPROMISED DEPENDENCIES, OR MALICIOUS CODE INTRODUCED THROUGH THIRD-PARTY SOFTWARE, LIBRARIES, OR UPDATES; OR (F) ANY OTHER ACT, OMISSION, ERROR, OR SECURITY FAILURE OF ANY THIRD-PARTY PROVIDER, REGARDLESS OF WHETHER THE COMPANY SELECTED, VETTED, OR CONTRACTED WITH THAT PROVIDER.

The Company selects third-party providers based on commercially reasonable evaluation of their security practices, compliance certifications, and industry reputation. However, the Company does not and cannot guarantee the security or reliability of any third-party provider. The Company's diligence in selecting providers does not create any warranty, guarantee, or additional liability with respect to those providers' performance or security. You acknowledge that your use of the Platform necessarily involves the transmission of your data to and through third-party systems, and you accept the inherent risks of that architecture.

14.6 Bailee Liability

The Company acts as bailee and maintains commercially reasonable bailee's coverage for Packages in its care, custody, and control. As bailee, the Company owes a duty of reasonable care to client property. The Company's liability for loss or damage to Packages while stored at a Facility is limited to the lesser of: the actual value of the Package contents; $500 per Package; or the applicable bailee's insurance coverage limit. Members retain ownership of all Packages and are responsible for maintaining their own insurance for high-value items.

14.7 Physical Operations, Mail, and Package Liability Exclusion

WITHOUT LIMITING THE GENERALITY OF SECTIONS 14.1 THROUGH 14.6, THE COMPANY SHALL NOT BE LIABLE FOR ANY LOSS, DAMAGE, THEFT, DELAY, MISDELIVERY, MISATTRIBUTION, OR DESTRUCTION OF ANY PACKAGE, MAIL PIECE, DOCUMENT, OR OTHER PHYSICAL ITEM ARISING FROM OR RELATED TO: (A) CARRIER TRANSIT, DELIVERY, OR HANDLING BEFORE OR AFTER THE PACKAGE IS IN THE COMPANY'S BAILEE CUSTODY; (B) THEFT BY ANY PERSON, INCLUDING BUT NOT LIMITED TO FACILITY EMPLOYEES, CONTRACTORS, TEMPORARY WORKERS, CO-TENANTS, VISITORS, DELIVERY DRIVERS, OR UNKNOWN THIRD PARTIES, EXCEPT WHERE THE COMPANY FAILED TO EXERCISE COMMERCIALLY REASONABLE SECURITY MEASURES; (C) HUMAN ERROR IN INTAKE PROCESSING, SORTING, LABELING, ATTRIBUTION, SCANNING, STORAGE, RETRIEVAL, OR FORWARDING; (D) MISATTRIBUTION OF A PACKAGE OR MAIL PIECE TO THE WRONG MEMBER OR REFERENCE CODE; (E) DAMAGE DURING HANDLING, CONTENT SCANNING, RESEALING, OR FORWARDING PREPARATION; (F) DELAYED PROCESSING, SCANNING, OR FORWARDING DUE TO OPERATIONAL FACTORS INCLUDING STAFFING, VOLUME, EQUIPMENT, OR WEATHER; (G) ERRORS IN OUTBOUND MAIL PRINTING, ADDRESSING, OR DELIVERY; (H) LOSS, DAMAGE, OR DELAY OF FORWARDED PACKAGES ONCE TENDERED TO AN OUTBOUND CARRIER; (I) LOSS OR DAMAGE TO PACKAGES RESULTING FROM FIRE, FLOOD, NATURAL DISASTER, BREAK-IN, VANDALISM, POWER LOSS, OR OTHER EVENTS AT THE FACILITY; OR (J) ANY MAIL HANDLING ERROR AT A CMRA FACILITY, INCLUDING MAIL OPENED IN ERROR, MAIL DELIVERED TO THE WRONG BOX, MAIL LOST DURING INTERNAL PROCESSING, OR MAIL MISROUTED DURING FORWARDING.

The Company's maximum liability for any Package or mail piece lost, stolen, damaged, or destroyed while in bailee custody — where such loss is attributable to the Company's failure to exercise reasonable care — is strictly limited to the amounts set forth in Section 14.6. The Company shall not be liable for consequential, incidental, special, or indirect damages arising from the loss, theft, damage, or delay of any Package or mail, including but not limited to: lost profits or revenue; cost of replacement goods; missed deadlines or contractual penalties; supply chain disruptions; business interruption; emotional distress; or the sentimental or subjective value of any item. Members who ship items of value exceeding $500 per Package through the Platform do so at their own risk and are responsible for maintaining their own insurance.

14.8 USPS Mail and CMRA-Specific Liability Exclusion

For Members enrolled in virtual mailbox service at CMRA-registered facilities, the following additional limitations apply:

14.9 Virtual Mailbox Package Exclusion and Liability Waiver

THE VIRTUAL MAILBOX PLAN IS DESIGNED AND OFFERED EXCLUSIVELY FOR RECEIVING POSTAL MAIL AND DOCUMENTS VIA USPS. THE COMPANY DOES NOT HAVE THE INFRASTRUCTURE, STAFFING, OR OPERATIONAL CAPACITY TO RECEIVE, INTAKE, STORE, FORWARD, OR OTHERWISE HANDLE PACKAGES AT VIRTUAL MAILBOX FACILITIES. MEMBERS ON THE VIRTUAL MAILBOX PLAN MUST NOT DIRECT, SHIP, OR CAUSE TO BE SHIPPED ANY PACKAGES TO THEIR VIRTUAL MAILBOX ADDRESS.

Any packages shipped to a virtual mailbox address may be refused at intake, returned to sender, or left uncollected at the Member's sole risk and expense. The Company is not responsible for and expressly disclaims all liability for any packages shipped to a virtual mailbox address, including but not limited to:

Members who require package receiving services must enroll in a Business plan ($35/mo) or higher. The Company reserves the right to suspend or terminate the account of any Member who repeatedly ships packages to a virtual mailbox address in violation of this section.

15. Indemnification

You agree to defend, indemnify, and hold harmless the Company, its affiliates, officers, directors, employees, contractors, agents, licensors, and successors from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from or related to:

16. Data Security and Privacy

16.1 Data Collection

The Company collects and processes personal data as described in its Privacy Policy, available at mailbox.bot/privacy. By using the Platform, you consent to the collection and processing described therein.

16.2 Security Measures and Limitations

The Company implements commercially reasonable security measures to protect Member data, including: encryption of data at rest and in transit; access controls and authentication; security monitoring and logging; and regular security assessments.

NO SYSTEM IS COMPLETELY SECURE. THE COMPANY DOES NOT AND CANNOT GUARANTEE THE ABSOLUTE SECURITY OF YOUR DATA. YOUR DATA IS STORED ON AND TRANSMITTED THROUGH THIRD-PARTY INFRASTRUCTURE PROVIDERS THAT THE COMPANY DOES NOT OWN OR OPERATE. A BREACH AT ANY THIRD-PARTY PROVIDER — INCLUDING DATABASE PROVIDERS, AUTHENTICATION SERVICES, PAYMENT PROCESSORS, CLOUD HOSTING, EMAIL SERVICES, OR ANY OTHER INFRASTRUCTURE COMPONENT — COULD RESULT IN UNAUTHORIZED ACCESS TO, DISCLOSURE OF, OR LOSS OF YOUR DATA, EVEN IF THE COMPANY HAS IMPLEMENTED ALL COMMERCIALLY REASONABLE SECURITY MEASURES ON ITS OWN SYSTEMS. BY USING THE PLATFORM, YOU ACCEPT THIS INHERENT RISK AND AGREE THAT THE COMPANY IS NOT LIABLE FOR SECURITY INCIDENTS ORIGINATING AT THIRD-PARTY PROVIDERS.

The Company commits to: promptly investigating security incidents upon discovery; notifying affected Members as required by applicable law; cooperating with law enforcement in the event of a data breach; and taking commercially reasonable steps to remediate vulnerabilities within its own systems. However, the Company cannot remediate vulnerabilities in third-party provider systems and is dependent on those providers to secure their own infrastructure.

16.3 KYC Data

KYC verification data is processed by the Company's third-party identity verification provider and is subject to that provider's privacy policy and data handling practices. The Company stores KYC verification results (verified/rejected) and session identifiers but does not store copies of identity documents after verification is complete, except as required by law.

16.4 Package and Mail Content Data

Package photographs, Content Scan images, mail scan images, OCR-extracted text, provenance chain data, and associated metadata are stored on the Platform and are accessible only to the Member, their authorized Agents, and authorized Company personnel with a legitimate operational need. The Company will never sell, rent, license, or commercially distribute the contents of your mail, packages, or scanned documents. Content data will not be disclosed to any third party except as required by law or pursuant to the law enforcement cooperation obligations in Section 9. See Section 7.5.1 for the full data protection commitment applicable to scanned content.

16.5 Data Retention

The Company retains Member data, Package records, and activity logs for the duration of the account plus five (5) years, or as required by law. KYC records are retained for a minimum of five (5) years after account closure.

17. Intellectual Property

17.1 Company Property

All content, features, functionality, trademarks, service marks, and trade dress of the Platform are the exclusive property of the Company and are protected by applicable intellectual property laws. "Mailbox.bot," the Mailbox.bot logo, and related marks are trademarks of Golden Ratio, LLC.

17.2 License to Use

The Company grants you a limited, non-exclusive, non-transferable, revocable license to access and use the Platform in accordance with these Terms. This license does not include the right to sublicense, resell, or distribute access to the Platform.

17.3 Aggregated Data

You grant the Company a perpetual, royalty-free, worldwide license to use anonymized, aggregated data derived from your use of the Platform for the purposes of improving the Platform, generating anonymized industry reports, and training AI models. You may opt out by emailing email address with the subject "Opt-Out: Aggregated Data."

18. Termination

18.1 Termination by Member

You may terminate your account at any time through the Operator Dashboard or by emailing email address. Upon termination, you must arrange for the retrieval or forwarding of all Packages within fourteen (14) days. Packages remaining after fourteen (14) days will be treated as abandoned per Section 7.7.

18.2 Termination by Company

The Company may terminate or suspend your account immediately, without prior notice, for any of the following reasons: violation of these Terms or the AUP; failed or fraudulent KYC verification; suspicious or potentially illegal activity; non-payment of fees; law enforcement request; sanctions list match; refusal to comply with re-verification requests; or at the Company's sole discretion for any reason upon thirty (30) days' notice.

18.3 Effect of Termination

Upon termination: your access to the Platform will be revoked; all Agent profiles and Endpoints will be deactivated; all Packages (your property, held as bailee) must be retrieved or forwarded within fourteen (14) days; API keys and Agent credentials will be invalidated; and you remain liable for all fees incurred prior to termination.

18.4 Survival

The following provisions survive termination: KYC record retention (Section 5.5); Law Enforcement Cooperation (Section 9); Limitation of Liability (Section 14); Indemnification (Section 15); Data Retention (Section 16.5); Dispute Resolution (Section 20); and Governing Law (Section 21).

19. Force Majeure

The Company shall not be liable for any failure or delay in performance due to causes beyond its reasonable control, including but not limited to: acts of God, natural disasters, pandemics, epidemics; government actions or orders, war, terrorism, civil unrest; strikes, labor disputes; carrier service interruptions; power or internet outages; cyberattacks, ransomware, distributed denial-of-service attacks, data breaches, or other malicious cyber activity targeting the Company or any of its third-party infrastructure providers; security breaches, outages, data loss, or service failures at any third-party provider, cloud service, database provider, authentication service, payment processor, or other infrastructure component used by the Platform; zero-day exploits, novel AI-powered attack vectors, or advanced persistent threats that were not reasonably foreseeable or preventable at the time of occurrence; supply chain compromises, including malicious updates to open-source software dependencies or third-party libraries; regulatory actions, sanctions, or compliance requirements imposed by any government authority that affect the Company or its providers; or any other event beyond the Company's reasonable control.

20. Dispute Resolution and Arbitration

20.1 Mandatory Arbitration

ANY DISPUTE ARISING OUT OF OR RELATING TO THESE TERMS SHALL BE EXCLUSIVELY SETTLED BY BINDING ARBITRATION ADMINISTERED BY THE AMERICAN ARBITRATION ASSOCIATION IN SALT LAKE CITY, UTAH. YOU EXPRESSLY WAIVE ANY RIGHT TO FILE A LAWSUIT IN COURT AND HAVE A JUDGE OR JURY DECIDE YOUR CASE.

You may opt out of mandatory arbitration by sending written notice to Golden Ratio, LLC, 3556 S 5600 W, Suite #1-1038, Salt Lake City, UT 84120, within thirty (30) days of accepting these Terms.

20.2 Class Action Waiver

BY AGREEING TO ARBITRATION, YOU WAIVE YOUR RIGHT TO PARTICIPATE IN A CLASS ACTION LAWSUIT, CLASS-WIDE ARBITRATION, OR ANY PROCEEDING IN WHICH SOMEONE ACTS IN A REPRESENTATIVE CAPACITY. ALL CLAIMS MUST BE BROUGHT IN YOUR INDIVIDUAL CAPACITY.

20.3 Pre-Arbitration Resolution

Before initiating arbitration, you must contact the Company and attempt to resolve the dispute informally by sending written notice. The parties shall attempt resolution within sixty (60) days before proceeding to arbitration.

20.4 Statute of Limitations

Any dispute must be filed within one (1) year after the cause of action accrued, or it will be permanently barred.

21. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the State of Utah, without regard to conflict of law principles. For matters not subject to arbitration, you submit to the exclusive jurisdiction of the courts in Salt Lake County, Utah.

22. Special Provisions for California Residents

22.1 California Consumer Rights Notice

Pursuant to California Civil Code §1789.3, California residents may contact the Complaint Assistance Unit of the Division of Consumer Services at 1625 North Market Blvd., Suite N 112, Sacramento, CA 95834, or by telephone at (800) 952-5210.

22.2 CCPA Rights

If the California Consumer Privacy Act applies, additional terms may apply as set forth in the Company's Privacy Policy.

23. Changes to Terms

The Company reserves the right to modify these Terms at any time. Material changes will be posted at least thirty (30) days before the effective date and communicated via email and/or webhook notification. Continued use of the Platform after the effective date of changes constitutes acceptance. If you do not accept material changes, you may terminate your account within thirty (30) days without penalty.

24. Miscellaneous Provisions

24.1 Entire Agreement

These Terms, together with the Privacy Policy and Acceptable Use Policy, constitute the entire agreement between you and the Company regarding the Platform.

24.2 Severability

If any provision of these Terms is held invalid, illegal, or unenforceable, the remaining provisions shall be enforced to the fullest extent permitted by law.

24.3 No Waiver

The Company's failure to enforce any provision of these Terms does not constitute a waiver of that provision or any other provision.

24.4 Assignment

You may not assign or transfer these Terms without the Company's prior written consent. The Company may freely assign these Terms.

24.5 Electronic Communications

You consent to receive communications from the Company electronically, including via email, webhook, API response, and the Operator Dashboard. You agree that all agreements, notices, disclosures, and other communications provided electronically satisfy any legal requirement that such communications be in writing.

24.6 Relationship of Parties

Nothing in these Terms creates a partnership, joint venture, employment, or agency relationship between you and the Company. The Company is an independent contractor providing platform services.

24.7 Third-Party Beneficiaries

These Terms do not create any third-party beneficiary rights in any individual or entity that is not a party to these Terms.

24.8 Headings

Section headings are for convenience only and do not affect the interpretation of these Terms.

25. Contact Information

If you have questions regarding these Terms, please contact us at:

Golden Ratio, LLC dba Mailbox.bot
3556 S 5600 W, Suite #1-1038
Salt Lake City, UT 84120
Email: email address

By creating an account on Mailbox.bot or joining the waitlist, you acknowledge that you have read, understood, and agree to be bound by these Terms of Service.