Terms of Service

1. Description of Service

XRPay is a payment-orchestration, checkout, wallet, and off-ramp platform. Direct XRPL payments can settle to a merchant-configured wallet. Optional app-generated operational wallets and provider-backed collection, conversion, treasury, and payout routes have the custody and authorization characteristics described in these Terms. Services include:

• BigCommerce Private Integration — Connect eligible BigCommerce orders to XRPay's hosted, merchant-configured checkout and synchronize verified payment status
• Xaman xApp Off-Ramp — Convert XRPL tokens (XRP and trustline assets) to fiat USD, delivered to a linked US bank account via ACH through our regulated partner Bridge.xyz
• An in-store Point-of-Sale (POS) register accessible from a browser or tablet
• A Telegram Mini App storefront powered by your BigCommerce catalog
• A B2B wholesale marketplace for merchant-to-merchant inventory purchasing
• Automated tax ledger with IRS-compatible CSV export
• Multi-signature treasury management (optional)

2. BigCommerce Integration

The App connects to your BigCommerce store via OAuth 2.0 and the BigCommerce REST API. By installing the App you authorize Xbit Innovations LLC to:

• Read your store's order data, customer information, and product catalog
• Create and update orders on your behalf to reflect payment status
• Register a script tag on your storefront to display the XRPay checkout button
• Send webhooks to monitor order lifecycle events

You may revoke this authorization at any time by uninstalling the App from your BigCommerce control panel under Apps > My Apps. Uninstalling will disable all App functionality and trigger deletion of your store's data per our Privacy Policy retention schedule.

3. Wallet Models, Custody & Delegated Signing

Merchant-configured external wallets. When you provide an external XRPL wallet address for direct settlement, XRPay records the public address and verifies on-chain activity but does not require or store that external wallet's private key or seed phrase. You control that wallet and are responsible for its credentials and security.

App-generated operational wallets. If you enable an operational wallet generated by XRPay, Xbit Innovations LLC generates the wallet and stores its seed in encrypted form in an access-controlled database. The App may decrypt the seed in server memory to perform wallet setup or a transaction that you request or authorize, including trustline, settlement, refund, treasury, payout, or automated-sweep functions. This technical signing capability means the operational-wallet feature is not the same as using an external wallet whose private key is known only to you.

You retain ownership of an app-generated operational wallet and may export its seed through the administrator flow, which requires multi-factor authentication. You are responsible for securely backing up exported credentials. Disabling delegated auto-sweep authority disables that automation but does not by itself delete the encrypted seed or disable other wallet functions you have enabled. Contact support@xbitinnovations.com to request deletion of stored operational-wallet key material after you have exported or rotated the wallet and moved any assets you wish to retain. Deleting our copy does not rotate an XRPL credential or reverse an on-chain transaction.

Provider-backed routes. Card, bank, Mobile Money, collection, conversion, and fiat-payout features may be processed through third-party providers that receive, hold, convert, or transmit funds under their own terms and regulatory permissions. The applicable route and provider are shown during setup or transaction processing. XRPay does not represent that every available feature is end-to-end non-custodial.

Xbit Innovations LLC provides technology and does not issue RLUSD or operate the XRP Ledger. The legal or regulatory classification of a particular service may depend on the route, jurisdiction, and allocation of control among you, Xbit Innovations LLC, and the executing providers. Nothing in these Terms is a representation that pending legislation has been enacted or a substitute for a determination by the relevant regulator.

4. RLUSD Stablecoin & Settlement

Ripple USD (RLUSD) is a regulated US dollar-pegged stablecoin issued by Ripple Labs Inc. and subject to their own terms. XRPay facilitates settlement in RLUSD but does not issue, redeem, or guarantee the value of RLUSD. Exchange rates between fiat order amounts and RLUSD are sourced from third-party providers and locked for the duration of a payment session (typically 15–30 minutes). A spread of up to 0.5% may be applied. We do not guarantee any specific exchange rate.

4A. xApp Off-Ramp & Fiat Withdrawal

The Xaman xApp Off-Ramp allows users holding XRPL-native assets to withdraw funds to a linked US bank account in USD via ACH transfer. By using the off-ramp you acknowledge and agree that:

• Identity Verification (KYC) is required. You must complete Know Your Customer (KYC) verification through our regulated partner, Bridge.xyz, before initiating any withdrawal. This process collects your full legal name, date of birth, Social Security Number (SSN), address, and government-issued ID as required by US financial regulations.
• Bank linking is required. You must link a bank account via Plaid (US instant verification), IBAN (EU/international), or SWIFT wire details. By linking your bank, you authorize Xbit Innovations LLC and Bridge.xyz to initiate transfers to that account.
• Withdrawal fees. A service fee is applied to each off-ramp transaction and is disclosed in the app before you confirm the withdrawal. The current configured fee is up to 1.2% of the transaction value. Xbit Innovations LLC reserves the right to change its fee structure at any time without prior notice or individual user consent. The applicable fee for any given transaction is the fee displayed to you at the time you initiate that transaction. Continued use of the service constitutes acceptance of the then-current fee schedule.
• Settlement timing. ACH transfers (US) typically settle within 1–3 business days. IBAN/SWIFT transfers may take 1–5 business days depending on the destination country and bank. We do not guarantee specific settlement times.
• Minimum withdrawal amounts apply. The minimum withdrawal is 2 XRP (or equivalent value in XRPL trustline assets). Requests below this threshold will be rejected.
• On-chain transactions are irreversible. Once your XRPL assets are submitted for conversion, the on-chain step cannot be reversed. Ensure all details are correct before signing.
• Regulatory compliance. Off-ramp services are subject to US financial regulations including Bank Secrecy Act (BSA) and FinCEN requirements. Transactions may be subject to enhanced due diligence, holds, or reporting obligations. Prohibited activities include structuring, sanctions evasion, and any use that violates applicable law.
• Geographic availability. The fiat withdrawal service is available globally, subject to the supported countries and currencies of our settlement partner Bridge.xyz. Availability in specific jurisdictions may be limited by regulatory requirements.

Bridge.xyz is a licensed money services business and the regulated counterparty for all fiat settlement. By using the off-ramp you also agree to Bridge.xyz's Terms of Service and Privacy Policy, available at bridge.xyz/legal.

5. Transaction Finality

Transactions settled on the XRP Ledger are irreversible once confirmed on-chain. This is a fundamental property of distributed ledger technology and the basis for the App's finality rules for direct XRPL transfers. Direct XRPL transfers do not use the card-network chargeback process. Provider-backed methods may have separate dispute or reversal rules. Merchants are responsible for issuing refunds as separate outbound payments if applicable. XRPay is not liable for transactions sent to incorrect wallet addresses or for amounts other than displayed.

6. Merchant Responsibilities

• Maintain the security of external-wallet credentials and never submit an external wallet private key or seed phrase to XRPay
• For an app-generated operational wallet, export and securely back up the seed before requesting key deletion, rotating credentials, or discontinuing the wallet feature
• Verify your wallet address is correct and active before accepting live payments
• Comply with all applicable laws, including anti-money laundering (AML) and Know Your Customer (KYC) obligations in your jurisdiction
• Clearly communicate your refund and shipping policies to customers
• Ensure your use of the App does not violate BigCommerce's Acceptable Use Policy or Partner Program Agreement
• Report suspected unauthorized access to your store or wallet promptly to support@xbitinnovations.com

7. Data Collection & Privacy

To provide the Service, we collect and process the following categories of data from your BigCommerce store:

• Store Data: Store hash, access tokens, store name, and owner email
• Order Data: Order IDs, amounts, customer email, and shipping address (for order fulfillment sync)
• Transaction Data: XRPL transaction hashes, amounts, timestamps, and token types
• B2B & POS Data: Wholesale order details, POS employee names and PINs, and sales volumes

We do not sell your data to third parties. See our Privacy Policy for full details on retention, deletion, and data subject rights.

8. Third-Party Services

The App integrates with or depends on the following third-party services, each governed by their own terms:

• BigCommerce — storefront platform and API
• Ripple Labs / XRPL — blockchain infrastructure and RLUSD issuance
• Xaman (XUMM) — wallet authentication and transaction signing (xApp off-ramp host)
• Bridge.xyz — regulated fiat settlement, KYC/AML verification, and ACH bank transfer processing for the xApp off-ramp
• Plaid — bank account verification and linking for ACH withdrawals
• ChangeNOW — XRPL DEX liquidity and cross-asset swap routing for non-XRP trustline withdrawals
• Railway / PostgreSQL — cloud infrastructure and data storage
• Telegram — Mini App storefront delivery (if enabled)

Downtime or changes to these third-party services may affect App functionality. Xbit Innovations LLC is not responsible for third-party service interruptions.

9. Prohibited Uses

You agree not to use the App to:

• Facilitate money laundering, terrorist financing, sanctions evasion, or any other illegal activity
• Process transactions for goods or services prohibited by BigCommerce's Acceptable Use Policy
• Circumvent, disable, or tamper with any security or rate-limiting mechanisms
• Reverse-engineer, decompile, scrape, or copy any portion of the App
• Misrepresent your identity, store ownership, or association with Xbit Innovations LLC

10. Availability & Support

We target high availability but do not provide an uptime guarantee. The App depends on the XRP Ledger, BigCommerce APIs, and other third-party services outside our control. Scheduled maintenance will be communicated via the App dashboard where possible. Support is available at support@xbitinnovations.com with a target response time of 2 business days.

11. Limitation of Liability

To the maximum extent permitted by applicable law, Xbit Innovations LLC and its officers, employees, and agents shall not be liable for any indirect, incidental, special, consequential, or punitive damages — including loss of cryptocurrency, revenue, or data — arising from your use of or inability to use the App. Our total cumulative liability for any claim shall not exceed the fees paid by the Merchant to Xbit Innovations LLC in the twelve (12) months preceding the claim, or USD $100, whichever is greater.

12. Termination

Either party may terminate this agreement at any time. You may uninstall the App via your BigCommerce control panel. We reserve the right to suspend or terminate your access immediately for material breach of these Terms, illegal activity, or at our sole discretion with 7 days notice. Upon termination, your store data will be handled in accordance with our Privacy Policy retention schedule.

13. Changes to These Terms

We may update these Terms at any time. When we do, we will update the effective date above and post a notice in the App dashboard. Continued use of the App after the notice period constitutes acceptance of the revised Terms. For material changes, we will provide at least 14 days notice.

14. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the jurisdiction in which Xbit Innovations LLC is incorporated, without regard to its conflict of law provisions.

15. Contact

Questions about these Terms? Contact us at: support@xbitinnovations.com

Xbit Innovations LLC
Operator of XRPay