Terms of Service

# ComOS Terms of Service

**Effective Date:** April 28, 2026
**Last Updated:** September 22, 2026

---

## Plain English Summary

ComOS is a commerce operating system. Merchants use it to run their stores. AI agents — like Claude, Gemini, or ChatGPT — can connect to ComOS through the Federation Gateway to act on a merchant's behalf.

When you connect an AI client to your ComOS tenant, you authorize that client to take actions inside the scopes you grant it — including modifying your catalog, managing carts, completing checkouts, and creating Stripe payment sessions. **You are responsible for the actions taken by AI clients you have authorized.**

These Terms are the legal version of all of that.

---

## 1. Introduction and Acceptance

These Terms of Service ("Terms") constitute a legally binding agreement between you ("Merchant," "you," or "your") and ComOS, operated by **ComOS Federation, Inc.**, a Delaware corporation (incorporated; effective July 20, 2026), with its principal place of business at 7550 Freedom Blvd, Aptos, CA 95003 ("ComOS," "we," "us," or "our"), governing your access to and use of the ComOS commerce operating system, the ComOS Federation Gateway, and related services (collectively, the "Platform"). ComOS Federation, Inc. is the contracting party, and all obligations under these Terms are those of the corporation.

By creating an account, accessing, or using the Platform, you acknowledge that you have read, understood, and agree to be bound by these Terms and our [Privacy Policy](/privacy).

**If you do not agree to these Terms, do not use the Platform.**

---

## 2. Description of Service

### 2.1 Platform Overview

ComOS is an AI-native operating system for commerce that provides Merchants with integrated tools for managing their commerce operations, including:

- Product catalog management
- Order processing and fulfillment
- Customer relationship management
- AI-powered automation and autonomous agents
- Analytics and reporting
- Payment processing integration (via Stripe)
- Marketing and communication tools

### 2.2 Federation Gateway and MCP

The ComOS Federation Gateway (the "Gateway") is a multi-tenant Model Context Protocol (MCP) server that allows AI clients chosen by the Merchant — including Claude, ChatGPT, Gemini, or any other MCP-compliant client — to access the Merchant's ComOS tenant under OAuth 2.1 authorization.

The Gateway exposes tools for catalog search and management, order placement (including Stripe payment session creation), order retrieval and tracking, inventory checks, federation control, and agent execution — every composed platform's tools, served through the Gateway's single endpoint. Tool authorization is fail-closed: a tool not mapped to a granted scope is denied, never public.

OAuth scopes a Merchant can grant to a connected AI client are: `agents:read`, `agents:admin`, `cart:manage`, `orders:read`, `orders:write`, `catalog:write`. Read-only access to public catalog and inventory data does not require an explicit scope.

### 2.3 Platform as Infrastructure

ComOS is infrastructure that enables Merchants to conduct business. **ComOS does not manufacture, sell, distribute, or endorse any products or services offered by Merchants through the Platform.** We are a technology provider — not a retailer, marketplace, or participant in Merchant transactions.

### 2.4 Operating Entity Disclosure

ComOS is operated by **ComOS Federation, Inc.**, a Delaware C corporation. Incorporation became effective on July 20, 2026. ComOS Federation, Inc. is the contracting party, and references to "ComOS" refer to ComOS Federation, Inc.

---

## 3. Account Registration and Access

### 3.1 Eligibility

To use the Platform, you must:
- Be at least 18 years of age
- Have the legal authority to enter into binding contracts
- Provide accurate and complete registration information
- Not be prohibited from using the Service under applicable law

### 3.2 Account Types

**Owner Account:** The primary account holder with full administrative privileges, including billing management and the ability to add or remove Managers.

**Manager Account:** Users invited by the Owner to access and manage specific aspects of the Merchant's account. Managers have permissions as defined by the Owner.

### 3.3 Manager Authorization and Responsibility

By inviting a Manager to your account, you authorize that Manager to act on your behalf within the scope of their assigned permissions. **All actions taken by Managers are binding upon the Merchant account.** The Owner is responsible for vetting Managers, configuring permission levels, monitoring activity, and revoking access when appropriate.

### 3.4 Account Security

You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. You must:
- Use strong, unique passwords
- Enable two-factor authentication when available
- Immediately notify us at **support@comos-federation.com** of any unauthorized access
- Not share account credentials

### 3.5 AI Agent Authorization (MCP Connections)

By connecting an AI client (including Claude.ai, ChatGPT, Gemini, or any other MCP-compliant client) to your ComOS tenant via OAuth, **you authorize that AI client to perform any action within the scopes you grant it**, including but not limited to:

- Searching and modifying your product catalog
- Adding to, modifying, or clearing carts
- Initiating checkouts and creating Stripe payment sessions on your behalf
- Reading or modifying orders
- Reading customer data accessible to the granted scope
- Executing autonomous agents you have configured

**All actions taken by an authorized AI client within the scopes you granted are deemed Merchant-authorized and binding on the Merchant**, regardless of whether the action was initiated by you, by a Manager, by an end user, or by an autonomous agent. This includes actions that result in financial charges (such as creating a Stripe payment session that is later completed by a customer), inventory changes, catalog mutations, or communications sent to customers. An action outside the scopes you granted — one the Platform's scope enforcement should have refused — is not deemed Merchant-authorized; scope enforcement is the Platform's responsibility, and it is exercised and verified on every deployment.

You are solely responsible for:
- Selecting which AI clients to connect
- Selecting the scopes you grant to each AI client
- Reviewing the privacy, data-handling, and acceptable-use terms of each connected AI client
- Monitoring the actions taken by connected AI clients via the audit log
- Revoking OAuth tokens for AI clients you no longer trust or use

You may revoke an active OAuth connection at any time, either self-serve — by calling the Gateway's standard OAuth token-revocation endpoint (`POST /oauth/revoke`, RFC 7009), which stops the revoked token from authorizing within seconds — or by emailing **support@comos-federation.com**, and we will revoke it for you. Revocation does not undo actions already taken by the revoked client before revocation.

### 3.6 Token Management

OAuth tokens issued by the Gateway expire and must be refreshed by the connected AI client. Tokens may also be revoked by ComOS without notice if we detect abuse, security incidents, or violation of these Terms. ComOS is not liable for actions taken by an AI client during the period between an event you become aware of and your request to revoke the corresponding token.

---

## 4. Merchant Responsibilities

### 4.1 Legal Compliance

You are solely responsible for ensuring that your use of the Platform — including all products, services, content, business practices, and actions taken by your Managers and authorized AI clients — complies with all applicable laws, regulations, and industry standards, including but not limited to:

- Consumer protection laws
- Product safety regulations
- Advertising and marketing laws (FTC, CAN-SPAM, etc.)
- Data protection and privacy laws (GDPR, CCPA, etc.)
- Tax collection and remittance requirements
- Import/export regulations
- Intellectual property laws
- Industry-specific regulations

### 4.2 Product and Content Responsibility

You represent and warrant that:
- You have the legal right to sell all products and services offered
- All product descriptions, images, and claims are accurate and not misleading
- Your products comply with applicable safety standards
- You hold all necessary licenses, permits, and certifications
- Your content does not infringe third-party intellectual property rights

### 4.3 Customer Relationships

You are responsible for:
- All customer service and support
- Honoring your stated return, refund, and warranty policies
- Resolving customer disputes
- Fulfilling orders in a timely manner
- Accurate shipping and delivery information

### 4.4 Acceptable Use

You may not, and may not authorize any Manager or connected AI client to:
- Scrape, mass-export, or systematically harvest data outside of documented export functions
- Probe, attack, or attempt to circumvent the Platform's authentication, authorization, rate limits, or resilience controls
- Use the Platform to send unsolicited bulk communications
- Use the Platform to sell illegal products, regulated goods without proper licensing, or items prohibited by Stripe or other payment processors
- Inject prompts or instructions into Platform fields with the intent of manipulating connected AI clients to take unauthorized actions
- Interfere with the operation of the Platform or other tenants

Violation of this section is grounds for immediate suspension or termination.

---

## 5. Fees and Payment

### 5.1 Fees

ComOS charges no subscription, seat, or recurring fees. Joining is free and holding an account costs nothing. Fees are charged at exactly two events:

- **Mint cut (6%):** taken once when you convert value into Coms. The mint cut is not returned on redemption or expiry; redeeming or expiring Coms returns their backing.
- **Merchant cut (3%):** taken when a sale of yours settles, collected at settlement.

Certain individual platform actions carry small per-act prices denominated in Coms, published in the live pricesheet (the `federation_pricesheet` tool), many with free tiers. Reads and discovery are free. Fee levels are subject to change with 30 days' notice.

### 5.2 Transaction Fees

The merchant cut described in Section 5.1 is the only transaction fee. It is calculated on settled transaction value and collected at settlement. There is no billing cycle and nothing is billed in arrears.

### 5.3 Payment Processing

Payment processing for end-customer purchases is provided by third-party payment processors (Stripe). Your use of payment processing is subject to the payment processor's terms and conditions. ComOS is not responsible for payment processor actions, fees, or policies.

### 5.4 Taxes

You are responsible for all applicable taxes on products and services you sell. ComOS will charge applicable taxes on its fees where required by law.

---

## 6. Service Availability

The Platform is provided on a commercially reasonable best-effort basis. There is no contractual SLA or uptime guarantee on standard plans. Specific uptime commitments, if any, will be set out in a separately executed enterprise agreement. ComOS may schedule maintenance windows with reasonable notice.

---

## 7. Intellectual Property

### 7.1 ComOS Intellectual Property

The Platform — including all software, designs, features, content, and documentation — is owned by ComOS Federation, Inc. and protected by intellectual property laws. You receive a limited, non-exclusive, non-transferable license to use the Platform solely for your internal business purposes.

You may not:
- Copy, modify, or create derivative works of the Platform
- Reverse engineer, decompile, or disassemble the Platform
- Remove or alter proprietary notices
- Use the Platform to build a competing product

### 7.2 Merchant Content

You retain ownership of all content you upload to the Platform ("Merchant Content"). By uploading Merchant Content, you grant ComOS a non-exclusive, worldwide, royalty-free license to use, store, process, and route such content solely for the purpose of providing the Service — including routing it to connected AI clients you have authorized.

### 7.3 Feedback

Any feedback, suggestions, or ideas you provide about the Platform may be used by ComOS without obligation or compensation to you.

---

## 8. Data and Privacy

### 8.1 Data Processing

Our collection and use of data is governed by our [Privacy Policy](/privacy). By using the Platform, you consent to our data practices as described therein.

### 8.2 Merchant as Data Controller

For end-customer data collected through your use of the Platform, you are the data controller and ComOS is the data processor. You are responsible for:
- Obtaining appropriate consents from your customers
- Providing required privacy notices
- Responding to data subject requests
- Complying with applicable data protection laws
- Reviewing the privacy and data-handling terms of any AI client you connect

### 8.3 Data Portability

You may export your data at any time through the Platform's data export features.

### 8.4 Data Processing Agreement

Our [Data Processing Agreement](/legal/data-processing-agreement) ("DPA") is **incorporated into these Terms by reference and applies automatically** — with no separate signature or request required — to any Merchant who processes personal data of data subjects protected by GDPR, UK GDPR, or CCPA. Where the DPA applies, you are the data controller and ComOS is the data processor for end-customer personal data, and the DPA governs that processing. A countersigned copy for your records is available on request at **support@comos-federation.com**.

---

## 9. Third-Party Services and Connected AI Clients

### 9.1 Integrations

The Platform may integrate with third-party services. Your use of third-party services is governed by those services' terms and policies. ComOS is not responsible for third-party services.

### 9.2 Payment Processors

Payment processing is provided by Stripe. You must comply with all Stripe requirements and prohibited business lists. Violation of Stripe's terms may result in suspension of your account.

### 9.3 Connected AI Clients

The Merchant chooses which AI clients to connect to its ComOS tenant. Each AI client is governed by the terms and privacy policy of its provider (e.g., Anthropic for Claude, OpenAI for ChatGPT, Google for Gemini). ComOS does not control how a connected AI client processes data sent to it. The Merchant is responsible for reviewing those terms before connecting.

---

## 10. Disclaimer of Warranties

**THE PLATFORM IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.**

ComOS does not warrant that:
- The Platform will be uninterrupted or error-free
- Defects will be corrected
- The Platform is free of viruses or harmful components
- The results of using the Platform will meet your requirements
- Connected AI clients will behave as you expect

---

## 11. Limitation of Liability

### 11.1 Exclusion of Damages

**TO THE MAXIMUM EXTENT PERMITTED BY LAW, COMOS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES**, including but not limited to:
- Loss of profits, revenue, or business
- Loss of data or goodwill
- Business interruption
- Costs of substitute services
- Damages arising from actions taken by connected AI clients

### 11.2 Liability Cap

**COMOS'S TOTAL LIABILITY FOR ALL CLAIMS ARISING FROM OR RELATED TO THESE TERMS SHALL NOT EXCEED THE GREATER OF: (A) THE FEES PAID BY YOU TO COMOS IN THE 12 MONTHS PRECEDING THE CLAIM, OR (B) ONE THOUSAND U.S. DOLLARS ($1,000).**

### 11.3 AI Agent Action Allocation

Without limiting the foregoing, **ComOS is not liable for any loss, damage, charge, or claim arising from actions taken by an AI client that you have authorized via OAuth**, including but not limited to: incorrect prices set by an AI client, oversold inventory, unintended catalog modifications, unauthorized refunds, mistaken order cancellations, or Stripe payment sessions created in error. You assume such liability as part of your authorization of the connected AI client, **except to the extent the loss results from a Platform defect — including a failure of scope enforcement, settlement, or ledger integrity — rather than from the conduct of the AI client itself.** The Platform's own failures are ComOS's responsibility, subject to Section 11.1 and 11.2.

### 11.4 Basis of the Bargain

The limitations in this section reflect the allocation of risk between the parties and are an essential basis of the bargain. Without these limitations, the fees for the Platform would be substantially higher.

---

## 12. Indemnification

You agree to indemnify, defend, and hold harmless ComOS Federation, Inc. and its officers, directors, employees, and agents from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from or related to:

- Your use of the Platform
- Your products, services, or content
- Your violation of these Terms or applicable law
- Your violation of third-party rights
- Any dispute between you and your customers
- Actions of your Managers, authorized AI clients, or other authorized users
- Any claim that an action taken by an AI client you authorized caused harm to a third party

---

## 13. Suspension and Termination

### 13.1 Termination by You

You may close your account at any time through your account settings. There is no subscription to cancel and no billing period — closure takes effect on request. Any unspent Com backing remains redeemable as described in Section 5.

### 13.2 Suspension by ComOS

We may suspend your access immediately if:
- You violate these Terms
- Your actions (or those of your Managers or authorized AI clients) pose a risk to the Platform, other tenants, or end customers
- Required by law or legal process
- Your payment is overdue
- Requested by payment processors or other financial partners

### 13.3 Termination by ComOS

We may terminate your account:
- For material breach of these Terms
- For repeated violations
- If required by law
- For non-payment after notice and opportunity to cure

### 13.4 Effect of Termination

Upon termination:
- Your license to use the Platform ends immediately
- All OAuth tokens associated with your tenant are revoked
- You must pay all outstanding fees
- You may export your data within 30 days
- We may delete your data after 30 days, subject to the retention schedule in the Privacy Policy

---

## 14. Dispute Resolution

### 14.1 Informal Resolution

Before initiating formal proceedings, you agree to contact us at **support@comos-federation.com** to attempt informal resolution.

### 14.2 Arbitration

Any dispute not resolved informally shall be resolved by binding arbitration under the rules of the American Arbitration Association. Arbitration shall be conducted in **Santa Cruz County, California**.

### 14.3 Class Action Waiver

**YOU AGREE TO RESOLVE DISPUTES WITH COMOS ON AN INDIVIDUAL BASIS ONLY. YOU WAIVE ANY RIGHT TO PARTICIPATE IN A CLASS ACTION OR CLASS-WIDE ARBITRATION.**

### 14.4 Exceptions

Nothing in this section prevents either party from seeking injunctive relief in court for intellectual property violations or other urgent matters.

---

## 15. General Provisions

### 15.1 Governing Law

These Terms are governed by the laws of the **State of California**, without regard to conflict of laws principles.

### 15.2 Entire Agreement

These Terms, together with the Privacy Policy, constitute the entire agreement between you and ComOS.

### 15.3 Modifications

We may modify these Terms by posting updated terms on the Platform. Material changes will be communicated with **30 days' notice** by email and in-Platform notice. Continued use after the effective date constitutes acceptance.

### 15.4 Severability

If any provision is found unenforceable, the remaining provisions continue in effect.

### 15.5 No Waiver

Failure to enforce any provision is not a waiver of that provision.

### 15.6 Assignment

You may not assign these Terms without our consent. We may assign these Terms in connection with a sale or transfer of the ComOS business.

### 15.7 Force Majeure

Neither party is liable for delays or failures due to circumstances beyond reasonable control.

---

## 16. Contact Information

**ComOS** — operated by ComOS Federation, Inc., a Delaware corporation (incorporated; effective July 20, 2026)

7550 Freedom Blvd
Aptos, CA 95003
United States

Email: **support@comos-federation.com**

---

*By using ComOS, you acknowledge that you have read, understood, and agree to be bound by these Terms of Service.*