# Terms of Service

**Effective date:** 2026-07-27  
**Operator contact:** hello@doggybagg.cc  
**Service:** SQLGuard (`https://sqlguard.io`) — Execution Certificate Firewall for agent SQL authorization.

These Terms of Service (“Terms”) govern access to and use of SQLGuard APIs, MCP endpoints, websites, documentation, and related software (the “Service”). By accessing or using the Service—including via autonomous agents, scripts, or wallets—you agree to these Terms.

## 1. Who we are

SQLGuard is operated by the SQLGuard operators reachable at the contact above (the “Operator”). The Service is provided as software tooling for prepaid, attested SQL validation. It is not a bank, custodian, law firm, or insurance product.

## 2. Eligibility and agency

You represent that you have authority to bind the entity or agent system using the Service. If you operate an autonomous agent, you remain responsible for its actions, payments, and use of certificates.

## 3. The Service (what it is / is not)

SQLGuard:

- accepts prepaid credit purchases via the **x402** HTTP payment protocol (USDC on supported networks);
- evaluates proposed SQL against policy and an isolated sandbox;
- issues **Ed25519 Execution Certificates** that attest sandbox/policy outcomes.

SQLGuard does **not**:

- execute production database writes on your behalf;
- guarantee that a PASS certificate means SQL is safe, correct, or compliant with your laws, contracts, or schemas;
- custody user funds beyond protocol-level settlement to the configured seller wallet;
- provide legal, tax, accounting, or security advice.

## 4. Accounts, agent IDs, and keys

You identify sessions using agent/wallet identifiers you control (e.g. `X-SQLGuard-Agent`). You are responsible for safeguarding private keys, payment authorizations, and any credentials. The Operator never asks for your private keys.

## 5. Payments and credits

- Credit bundles are prepaid digital service units priced in USDC via x402.
- Settlement is performed by third-party facilitators and blockchain networks. Blockchain transactions are irreversible once confirmed.
- Credits are non-transferable, have no cash value, and are not a deposit account.
- Refunds: except where required by law or where the Operator elects to refund for infra failure (e.g. sandbox unavailable after debit), purchases are final.
- Prices and bundle sizes may change; the live catalog (`GET /v1/catalog`) controls current offers.

## 6. Acceptable use

You must not use the Service to:

- attack, disrupt, or overload the Service or third parties;
- bypass payment, rate limits, or authentication;
- launder funds or violate sanctions / AML laws;
- probe others’ systems without authorization;
- submit malware, illegal content, or child sexual abuse material;
- misrepresent certificates as warranties of production safety.

See also the [Acceptable Use Policy](/aup).

## 7. Certificates and reliance

Execution Certificates are cryptographic attestations of a **sandbox run and policy check** under stated parameters. Downstream systems that auto-apply SQL based on certificates do so at their own risk. You must independently verify schema hashes, expiry, signatures, and business appropriateness before production mutation.

## 8. Intellectual property

The Service, branding, and documentation are owned by the Operator or licensors. Open-source components remain under their respective licenses (see repository). You retain rights to SQL/DDL you submit; you grant the Operator a limited license to process them solely to provide the Service.

## 9. Privacy

Personal data handling is described in the [Privacy Policy](/privacy).

## 10. Disclaimers

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. THE OPERATOR DOES NOT WARRANT UNINTERRUPTED OR ERROR-FREE OPERATION, OR THAT CERTIFICATES PREVENT DATA LOSS OR SECURITY INCIDENTS.

## 11. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE OPERATOR’S TOTAL LIABILITY ARISING OUT OF THE SERVICE SHALL NOT EXCEED THE GREATER OF (A) USDC AMOUNTS YOU PAID TO THE SERVICE IN THE THIRTY (30) DAYS BEFORE THE CLAIM OR (B) TEN US DOLLARS (US$10). THE OPERATOR IS NOT LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR LOSS OF DATA, PROFITS, OR GOODWILL.

## 12. Indemnity

You will indemnify and hold harmless the Operator from claims arising from your (or your agents’) use of the Service, payments, certificates, or violation of these Terms.

## 13. Termination

The Operator may suspend or terminate access for abuse, legal risk, non-payment, or operational reasons. You may stop using the Service at any time; unused credits may be forfeited on termination for cause.

## 14. Changes

We may update these Terms by posting a revised version with a new effective date. Continued use after posting constitutes acceptance.

## 15. Governing law

These Terms are governed by the laws of the United States and the State of Delaware, excluding conflict-of-law rules. Exclusive venue for disputes is the state or federal courts located in Delaware, except where prohibited.

## 16. Contact

Questions: hello@doggybagg.cc  
Security reports: see [Security Policy](/security) and `/.well-known/security.txt`.