Terms of Service

These terms are between you and the operator of xmr4ai (“the operator”, “we”). The operator is pseudonymous: no legal name, company registration, or business address is published, and no governing law or court is designated.

Two consequences follow, and you should weigh both before depositing. You are agreeing with a party you cannot identify or sue in a named forum. In the other direction, any mandatory consumer protection in the country where you live continues to apply on its own terms — nothing here waives a right that your local law does not allow to be waived.

The contact channel is the self-hosted portal at portal.xmr4ai.com. It accepts anonymous feedback and pseudonymous support from an xmr4ai account. The operator does not undertake to reply.

xmr4ai is a chat interface and a self-hosted, OpenAI-compatible AI gateway. Our gateway forwards your prompts to third-party language-model providers and returns their output. It is funded by depositing Monero (XMR), which is converted into prepaid USD credits.

It is not a bank, exchange, custodian, wallet service, or investment product. A deposit is a payment for credits, not money held on your behalf. Nothing in the service is financial advice.

You must be old enough to enter a binding agreement where you live, and you must not be barred from using the service by sanctions or by any law that applies to you. Whether your use of a privacy-preserving AI gateway is lawful where you are is your responsibility to determine, not ours.

An account is created in your browser. The Account ID is generated locally and the server receives only values derived from it — never the ID itself. That design has direct consequences for you:

• The Account ID is a bearer credential. Anyone who holds it controls the account, its conversation history, and its credit balance.
• There is no recovery and no reset. The operator cannot identify you, cannot verify that an account is yours, and cannot restore access. A lost Account ID is final.
• “Remember this device” stores your Account ID in this browser, wrapped by a key the browser will not export. It protects against someone reading the browser storage; it does not protect against someone using the browser.
• You are responsible for everything done with your account, including by anyone you give the Account ID to and by any API key you create.

5.1 Deposits. The app shows a Monero subaddress belonging to your account. Send only XMR, only on the Monero network, and only to an address the app is currently showing you. Any other asset, any other network, and any transfer made after your account is deleted is unrecoverable and is not credited. Deposits are credited after the number of confirmations shown in the deposit dialog. Each deposit must be at least 0.02 XMR in a single transaction. Smaller transfers are recorded for transparency but create no credits and cannot be combined to reach the minimum.

5.2 Conversion. At the moment a deposit is credited, its XMR amount is converted to USD credits using the most recent stored XMR/USD quote, and quotes older than ten minutes are refused rather than used. The resulting credit amount is fixed at that moment. Later movements in the XMR price do not change your balance in either direction, and that risk is yours.

5.3 What credits are. Credits are a prepaid entitlement to use this service. They are non-refundable, non-withdrawable, non-transferable, have no cash value, are not legal tender, are not a claim on any XMR held by the operator, and can be used for nothing except paying for usage of this service.

5.4 There is no way back. The service contains no mechanism that converts credits into XMR or any other asset, and the operator does not offer refunds — including for unused balances, accidental deposits, deposits larger than intended, change of mind, or dissatisfaction. Do not deposit funds you may need to recover.

5.5 Loss you accept. Your balance is destroyed, with no compensation, if you lose your Account ID or if the account is deleted — deletion removes the credit ledger along with everything else attached to the account.

5.6 Referral rewards. When enabled, a new account may accept one existing account’s referral code at signup. The referrer earns service credits equal to 5% of the USD credits issued for eligible external XMR deposits. The depositor keeps their full credit. Rewards are rounded down to micro-USD and issued immediately when the deposit is credited, up to $50 per referred account, including rewards already spent. There is no earning-window deadline, release hold, or shared program allocation limit. The final award may be partial at the customer cap. An operator pause stops new attribution and awards; already reserved rewards still release. Skipped and historical deposits are not rewarded retroactively. Rewards do not earn more rewards.

Referral rewards are non-transferable service credits with no cash value or withdrawal right and do not expire while the account exists. A reversed deposit cancels or reverses its reward, even after spending; a resulting deficit must be covered before further usage. Deleting either account cancels pending rewards and ends attribution. Issued rewards belonging to another account survive deletion of the referred account and become final when source records are deleted. Deleting the referrer destroys their remaining credits. Self-referrals and manipulation are prohibited. Eligibility and current program status are shown in Settings > Referrals.

5.6 Expiry. Credits do not expire for as long as the account exists.

5.7 If the service stops. The operator may discontinue the service at any time. Where circumstances allow, notice will be given in advance so that remaining credits can be spent. Credits still cannot be converted back to XMR, and any unspent balance may be lost.

Each request reserves an upper-bound amount from your balance before it is sent, then settles to the provider’s reported cost plus the operator’s markup once the response completes; the unused part of the reservation is released back to your balance. A request that fails is not charged.

Model prices come from the upstream provider and can change without notice. Prices shown in the model picker are indicative, not a quotation. Requests may be refused when your balance is insufficient, when a rate limit is reached, or when no provider endpoint meets the service’s data-retention requirements.

You agree not to use the service:

• for anything unlawful where you are, or to produce content whose creation or possession is unlawful there;
• to attack, overload, probe, or circumvent the service, its rate limits, its billing, or the providers behind it;
• to resell or front access in a way that hides these terms from the people actually using it.

The operator does not read your conversations and cannot, so enforcement is based on traffic patterns, billing behaviour, and reports — not on content.

Your conversations are encrypted in your browser for storage and synchronisation, but a prompt has to reach a model as readable text. Prompts and their context pass through our self-hosted AI gateway and are processed by upstream routing services and the selected model provider.

Routing is restricted to endpoints that declare zero data retention and no training on your data, and a request that cannot be routed that way is refused rather than downgraded. That is a policy guarantee enforced at the routing layer — it is not encryption, and it does not put the provider under these terms. See the Privacy Policy for what leaves this service.

The service is provided “as is” and “as available”, without warranties of any kind, to the fullest extent the law allows. There is no uptime commitment and no guarantee that any particular model stays available.

Model output is generated text. It can be confidently wrong. It is not legal, medical, financial, or professional advice, and you are responsible for checking anything you rely on.

The operator may suspend or terminate an account that breaches clause 7 or that puts the service or its providers at risk. Credits are not refunded on suspension or termination, consistent with clause 5.3.

You may stop using the service at any time, and delete your account from the account dialog. Deletion is permanent and cascades to every record attached to the account — encrypted history, deposit records, credit ledger, API keys, and sessions — and the local copy in that browser is erased with it. Any remaining credit balance is destroyed and is not refunded, as clause 5.5 states. Deposits sent to your subaddresses after deletion are unrecoverable.

To the fullest extent permitted by law, the operator is not liable for lost profits, lost data, lost or stolen Account IDs, movements in the price of XMR, the acts or output of third-party model providers, or any indirect or consequential loss.

Where liability cannot be excluded, it is limited in aggregate to the credits you actually spent on the service in the thirty days before the event giving rise to the claim. Nothing in this clause limits liability that the law does not permit to be limited.

These terms carry a version number and an effective date, both shown at the top of this page. A change of substance gets a new version. Continued use after a new version takes effect is acceptance of it.

Because credits are non-refundable, declining a new version means stopping use — it does not entitle you to a refund of an unspent balance. That is stated here rather than left to be discovered.