Terms of Service

These Terms of Service ("Terms") constitute a legally binding agreement between you ("User," "you," or "your") and Loofta ("Company," "we," "us," or "our") governing your access to and use of the Loofta Pay application, website, and all related services (collectively, the "Service") available at pay.loofta.xyz and related domains.

By creating an account, connecting a wallet, or otherwise accessing the Service, you confirm that you have read, understood, and agree to be bound by these Terms and our Privacy Policy. Your continued use of the Service constitutes ongoing acceptance of any updates to these Terms.

Loofta Pay is a non-custodial payment platform built on the Solana blockchain that enables users to:

• Send and receive USDC payments on Solana using shareable payment links, usernames, email addresses, or wallet addresses.
• Create reusable payment request links that can be shared with payers.
• Deposit supported tokens from other chains into your Loofta balance via third-party cross-chain protocols.
• Withdraw USDC to external Solana wallets or to other supported chains via third-party bridge protocols.
• View complete transaction history.
• Earn rewards through our loyalty and referral program.

The Service operates on the Solana mainnet. Certain features may be in beta, limited to invited users, or subject to additional restrictions as disclosed in the application.

To use the Service, you must:

• Be at least 18 years of age, or the age of majority in your jurisdiction if higher.
• Have the legal capacity to enter into a binding contract.
• Not be located in, organized under the laws of, or ordinarily resident in a jurisdiction subject to comprehensive sanctions administered by the U.S. Office of Foreign Assets Control (OFAC), including but not limited to Cuba, Iran, North Korea, Syria, Russia (as applicable), and the Crimea, Donetsk, and Luhansk regions.
• Not be designated on any U.S., EU, UN, or UK sanctions list.
• Not be using the Service on behalf of a person or entity that is ineligible.

By using the Service, you represent and warrant that you meet all eligibility requirements. We reserve the right to restrict access to the Service in any jurisdiction at our sole discretion.

Authentication and identity management for the Service is provided by Privy, Inc. ("Privy"). You may register and log in using your email address or your X (formerly Twitter) account. By logging in, you authorize Privy to create and manage an embedded Solana wallet on your behalf, and you agree to Privy's own terms of service and privacy policy.

You are responsible for maintaining the confidentiality of any credentials used to access your account and for all activities that occur under your account. You agree to notify us immediately at contact@loofta.xyz if you suspect any unauthorized use of your account.

We link your Privy user identifier to your Loofta profile and transaction history stored in our database. You may also connect an external Solana wallet (e.g., Phantom). You are solely responsible for the security and backup of any external wallet private keys.

We reserve the right to suspend or terminate your account if we determine, at our sole discretion, that you have violated these Terms, provided false information, or engaged in any prohibited activity.

Loofta Pay is a non-custodial service. We do not hold, control, or take custody of your funds, private keys, or digital assets at any time.

Your Solana wallet — whether an embedded wallet created and secured by Privy or an external wallet you connect — is controlled exclusively by you. Loofta facilitates transaction construction and submission on your behalf using keys that you authorize; we do not have the ability to move your funds without your explicit approval for each transaction.

As a consequence of our non-custodial architecture:

• We cannot reverse, cancel, or recover transactions once they are submitted to the Solana blockchain. Blockchain transactions are generally irreversible.
• If you lose access to your wallet credentials or seed phrase, we cannot recover your funds.
• We are not responsible for losses resulting from your own actions, errors, or failure to maintain secure access to your wallet.
• We are not a bank, payment processor, money transmitter, or financial institution. We do not provide deposit insurance (e.g., FDIC or SIPC coverage).

Loofta charges a platform fee on each payment transaction. The current fee structure is:

• A USDC fee of 10 basis points (0.10%) of the transaction amount.
• A network cost component of approximately 0.002 SOL (converted to USD equivalent at the time of the transaction) to cover on-chain transaction costs.

Fees are displayed to you before you confirm any transaction. We reserve the right to modify our fee structure at any time with reasonable notice. Continued use of the Service after a fee change constitutes acceptance of the new fee structure.

In addition to platform fees, Solana network fees ("gas fees") apply to all on-chain transactions. These are separate from, and not retained by, Loofta. Cross-chain deposit and withdrawal operations facilitated by third-party protocols may also incur their own fees, which are disclosed by those protocols at the time of the operation.

The primary token supported by the Service is USDC (USD Coin) on the Solana blockchain. By sending or receiving a payment through the Service, you agree that:

• You are initiating a real blockchain transaction that, once confirmed, is irreversible.
• You have verified all recipient details (address, username, or payment link) before confirming a transaction.
• You are responsible for ensuring that any recipient address or entity you are paying is lawful and that you are permitted to make the transfer.
• Payment links generated by you may be used by any person with access to the link. You are responsible for distributing your payment links only to intended recipients.

Cross-chain deposits: Deposits from other chains or tokens are facilitated by third-party protocols including Defuse Protocol and Near Intents. These operations are subject to the terms and conditions of those protocols. Loofta does not control cross-chain bridging infrastructure and is not responsible for delays, failures, or losses that occur within those third-party systems.

Withdrawals: USDC withdrawals to external Solana wallets are processed on-chain. Cross-chain withdrawals (beta) are routed through third-party bridge protocols. Withdrawal addresses are subject to compliance screening as described in Section 8.

To help prevent the use of the Service for money laundering, sanctions evasion, or other illegal purposes, we use third-party compliance services including Range Protocol to screen wallet addresses involved in transactions, particularly withdrawals.

By using the Service, you consent to the screening of wallet addresses you use in connection with the Service against sanctions lists, risk databases, and other compliance tools. We may, at our sole discretion and without prior notice, decline to process or block transactions involving addresses identified as high-risk or sanctioned.

We comply with applicable anti-money laundering (AML) and know-your-customer (KYC) regulations to the extent required by law. We reserve the right to request additional identity verification information from users if required by applicable law or our compliance obligations.

You agree not to use the Service to:

• Violate any applicable law, regulation, or treaty, including anti-money laundering laws, sanctions regulations, and counter-terrorism financing laws.
• Send or receive payments in connection with illegal activity, including fraud, trafficking, or the purchase or sale of illegal goods or services.
• Evade taxes or regulatory obligations.
• Engage in market manipulation, wash trading, or any form of price manipulation.
• Attempt to circumvent our compliance screening or access controls.
• Use the Service in a manner that could disable, overburden, or impair the Service or servers.
• Introduce malicious code, viruses, or other harmful components.
• Reverse engineer, decompile, or disassemble any part of the Service.
• Use automated scripts or bots to access the Service without our express written permission.
• Impersonate any person or entity or misrepresent your affiliation.

Violation of this section may result in immediate account termination, reporting to law enforcement, and/or civil or criminal liability.

Loofta may offer a rewards, loyalty, or referral program from time to time. Rewards are at our sole discretion, have no guaranteed monetary value, and may be modified, suspended, or terminated at any time without notice. Rewards cannot be redeemed for cash unless explicitly stated. We reserve the right to void rewards obtained through abuse, fraud, or violation of these Terms.

The Service integrates with or relies upon a number of third-party services, including but not limited to:

• Privy, Inc. — identity and embedded wallet management.
• Supabase — database and user data storage.
• Helius — Solana RPC infrastructure.
• Range Protocol — wallet address compliance screening.
• Defuse Protocol / Near Intents — cross-chain deposit and withdrawal routing.
• Vercel — frontend hosting and analytics.
• Cloudflare — bot protection and security (Turnstile).
• X (Twitter) — optional social login and integrations.

Your use of any third-party service is governed by that service's own terms and privacy policy. We are not responsible for the actions, data practices, or availability of any third-party service. The inclusion of third-party integrations does not constitute an endorsement of those services.

All content, branding, software, and technology comprising the Service — including but not limited to the Loofta name, logo, interface design, and source code — is the exclusive property of Loofta or its licensors and is protected by copyright, trademark, and other intellectual property laws.

We grant you a limited, non-exclusive, non-transferable, revocable license to access and use the Service solely for its intended purpose. You may not copy, modify, distribute, sell, or otherwise exploit any part of the Service without our express written permission.

No financial advice. Nothing on the Service constitutes financial, investment, legal, or tax advice. Cryptocurrency values are volatile and you may lose money. You are solely responsible for your own financial decisions.

As-is basis. The Service is provided "as is" and "as available" without warranty of any kind, whether express, implied, or statutory. We disclaim all warranties, including implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement.

We do not warrant that the Service will be uninterrupted, error-free, secure, or that defects will be corrected. Blockchain networks are inherently outside our control and we are not responsible for network congestion, forks, outages, or smart contract vulnerabilities.

Some jurisdictions do not allow the exclusion of implied warranties, so some of the above may not apply to you.

To the maximum extent permitted by applicable law, Loofta and its officers, directors, employees, agents, and licensors shall not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, including loss of profits, data, goodwill, funds, or other intangible losses, arising from or relating to your use of or inability to use the Service.

Our total cumulative liability to you for any claims arising out of or relating to the Service shall not exceed the greater of (a) the total fees paid by you to Loofta in the twelve (12) months preceding the claim, or (b) USD $100.

These limitations apply regardless of the legal theory on which the claim is based and even if we have been advised of the possibility of such damages. Some jurisdictions do not allow certain limitations of liability, so some of the above may not apply to you.

You agree to defend, indemnify, and hold harmless Loofta and its affiliates, officers, directors, employees, and agents from and against any claims, damages, obligations, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from: (a) your use of the Service; (b) your violation of these Terms; (c) your violation of any third-party rights; or (d) any claim that content you submitted caused damage to a third party.

You may stop using the Service at any time. We may suspend or terminate your access to the Service at any time, with or without cause, with or without notice, effective immediately.

Upon termination, your right to use the Service ceases immediately. Sections 5, 9, 12, 13, 14, 15, and 17 of these Terms survive termination. Because the Service is non-custodial, termination of your account does not affect your ability to access funds in your own wallet directly on-chain.

These Terms are governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to conflict of law principles. Any dispute arising from these Terms or the Service shall be resolved exclusively in the state or federal courts located in Delaware, and you consent to personal jurisdiction in those courts.

Informal resolution. Before filing any formal claim, you agree to try to resolve the dispute informally by contacting us at contact@loofta.xyz. We will try to resolve the dispute informally within 30 days.

We may update these Terms from time to time. When we make material changes, we will update the effective date at the top of this page and, where required by applicable law, notify you through the application or by email. Your continued use of the Service after any such changes constitutes your acceptance of the new Terms.

If you have any questions about these Terms, please contact us at: