GOAT Labs — Contributor Terms of Service

"Service" — GOAT's software, dashboard, APIs, CLI, SDKs, integrations, connectors, capture agents, and related services used to ingest, store, analyze, and (where enabled) redact, deidentify, and commercialize eligible telemetry.

"Source" — any tool, codebase, workspace, account, API key, repository, observability platform, or other system you connect to, or enable capture from, through the Service. The only observability Sources currently supported are Laminar, Lunary, and Langfuse; local coding tools currently supported include Claude Code, Codex, Cursor, and Antigravity. Other tools named in marketing materials are planned, not currently available, and are superseded by these Terms (Section 22).

"Trace Data" — all data submitted to, captured by, pulled by, or collected through the Service from a Source, including: prompts, completions, model reasoning, the full content of tool/function calls and their results (including file contents, source code, diffs and patches, command output, pasted text and images, and attachments), tool and MCP-server definitions and configuration, system prompts, agent action-space metadata, tokens, cost, model and provider identifiers, timing, session and conversation identifiers, provider response identifiers, repository and file context (including working-directory paths, branch, commit, and repository origin/remote), observability end-user identifiers, and any data of third parties, teammates, employees, contractors, customers, or end users that appears within a Source.

"Raw Trace Data" — Trace Data as captured, before any redaction or deidentification (if any). You acknowledge that GOAT captures Raw Trace Data at ingestion and stores it in encrypted form, and that redaction and deidentification, where they occur at all, occur after and independently of capture.

"De-Identified Data" — data GOAT derives from Trace Data and designates for use in Corpus Products, which may consist of (i) structural and economic metadata with no content, and/or (ii) content to which GOAT has applied its then-current automated, probabilistic, best-effort deidentification process. GOAT does not represent that any deidentification process has been applied to any particular De-Identified Data, that De-Identified Data is free of identifiers, that it cannot be associated (alone or in combination) with a natural person, Contributor, customer, or account, or that it meets the statutory standard for "de-identified," "deidentified," or "anonymous" data under any law. "De-Identified Data" is a defined contractual term only. De-Identified Data may retain coarse technical metadata — including model identifiers, token counts, timing, cost, content fingerprints, session identifiers, provider response identifiers, observability end-user identifiers (which GOAT does not pseudonymize), and repository or source labels — and may remain linkable to you or your account, including through internal attribution mappings GOAT maintains.

"Corpus Products" — datasets, research reports, analytics products, benchmarks, indices, models, or other commercial outputs GOAT creates from De-Identified Data.

"Cashback" — discretionary program estimates and payments GOAT may make under Section 11.

"Wallet" — the blockchain address or other payout destination (currently a USDC address on a supported chain, or a Coinbase email) you designate.

You represent that you are at least 18 years old and able to form a binding contract, and that you are using the Service for business purposes. The Service does not perform age verification, and you are solely responsible for your representation of age and authority. You further represent that, to your knowledge, no person whose data is captured through your Sources is a child or below the age of digital consent in their jurisdiction; you acknowledge that GOAT does not and cannot verify the age of any person whose data appears in Trace Data; and you assume all risk arising from any minor's data captured through Sources you connect or enable.

You may connect only Sources that you own or are expressly authorized to connect. You may not connect an employer, client, portfolio company, teammate, or third-party tool, account, repository, API key, or observability source without clear, documented authority. You are responsible for all Users, credentials, Wallets, API keys, slugs, DSNs, and integration settings used under, committed for, or pointed at your account or projects, and must promptly notify GOAT of any unauthorized access, suspected compromise, or mistaken connection.

Accounts are created on first sign-in (Google OAuth or email magic link); sign-in constitutes registration. GOAT stores only hashed forms of ingest and management credentials and displays plaintext credentials once; you are responsible for protecting any credential you generate, paste, or commit.

The Service supports capture through a public project slug (without sign-in) and through capture configuration committed to a repository, both enabled by default for a project. You are solely responsible for, and make all representations and warranties in these Terms with respect to, ALL Trace Data submitted to any project you control — including data submitted anonymously, via a public slug, via a committed DSN, or by any User, teammate, agent, machine, or process you enable — whether or not the submitter has a GOAT account or accepted these Terms. Where you enable repository-, organization-, or machine-wide, or any multi-user capture, you acknowledge the Service will capture the activity of every person who uses the configured Source — including persons who take no GOAT-specific action and may be unaware — and that historical (pre-existing) sessions present on a machine or in a repository may be uploaded at installation.

The Service allows you to connect Sources so GOAT can ingest and store Trace Data, calculate program metrics, and, where enabled, apply redaction and deidentification, generate dashboards and analytics, and create Corpus Products that GOAT may license to third parties.

Capture at ingestion; no per-batch approval; no human review. The Service captures and stores connected Trace Data (including full content) at the time of connection or activity, encrypts it, and retains it as described in these Terms and the Privacy Policy. The Service does not include, and GOAT does not perform, any human review, manual quality-assurance, per-batch approval, "read-only-until-you-approve," or pre-capture screening of Trace Data. Any in-product, documentation, or marketing statement suggesting a "read-only," "metadata-only," "per-batch approval," "three-pass," or "human-reviewed" limit on what GOAT uploads, retains, or reviews is superseded by this Section and does not describe the Service as provided. "Read-only," where used, means only that GOAT's local capture agent reads files from your machine without modifying them; it does not mean GOAT refrains from uploading or retaining their contents.

Redaction and deidentification are automated and best-effort. GOAT applies an automated redaction and deidentification process to trace data before promoting content to its queryable store, using pattern, entropy, and machine-learning (named-entity) detection together with a default-deny gate under which a record is marked usable only on a positive "clean" verdict. That process is automated, probabilistic, and best-effort; it includes no human-review step, may be partial or incomplete, may be disabled or unavailable in a given deployment, and GOAT does not warrant that it detects or removes any particular category of data, is complete or accurate, or renders any data non-personal. Raw Trace Data is captured and stored in encrypted form before, and independently of, any redaction or deidentification, and may be retained in un-redacted (encrypted) form on a long-term or indefinite basis (Section 19).

The Service is not an escrow, custody, legal-review, security-review, compliance, or code-review service. You are solely responsible for deciding what Sources to connect and what data flows into the Service.

By connecting a Source, installing or running a GOAT capture agent, CLI, or SDK, or otherwise submitting Trace Data, you instruct and authorize GOAT to: (a) ingest and durably capture the resulting Trace Data (including encrypted Raw Trace Data); (b) calculate program metrics and Cashback; (c) apply redaction and deidentification (if and where enabled); and (d) create, own, use, and license De-Identified Data and Corpus Products. Connecting a Source constitutes your affirmative enrollment and your documented instruction for this processing; no separate enrollment step is required. To the extent GOAT's creation and licensing of Corpus Products constitutes a "sale" or "share" of personal information under applicable law, the rights to opt out are described in, and may be exercised through, the Privacy Policy.

When you connect an observability or other pull-based Source, you authorize GOAT to read from that Source on a continuous basis — including an initial backfill of available history and ongoing incremental synchronization — until you disconnect it. Disconnecting a Source stops future collection and deletes the stored Source credentials, but does not delete Trace Data already ingested. You warrant that each credential you provide is valid, authorized, and appropriately scoped, and that your use of it through the Service does not violate the Source's terms. GOAT does not warrant that any Source, connector, or integration is or will remain supported, available, or compatible, and may add, change, deprecate, or remove any connector at any time without liability.

You represent, warrant, and covenant, on a continuing basis as of each time Trace Data is submitted, captured, pulled, or synchronized (including each backfill and each incremental poll), that:

(a) Authority over all captured data. You have obtained all rights, permissions, licenses, notices, and consents necessary to submit, and to permit GOAT to capture, store, process, deidentify, and commercialize, all Trace Data captured through any Source you connect, control, or enable — including file contents, source code, diffs, command output, tool/function call content and results, tool/MCP definitions and configuration, system prompts, repository and environment identifiers, and any data of any teammate, employee, contractor, customer, end user, or other third party (each a "Third-Party Data Subject") appearing in or derived from a Source.

(b) Multi-party and end-user data. Where a connected Source contains data of Third-Party Data Subjects (including via repository-level capture, organization-level capture, anonymous or slug-based ingest, or observability end-user identifiers), you have obtained all required authorizations, notices, and consents from those persons and any controlling organization, and you are solely responsible for that capture. You acknowledge that GOAT does not pseudonymize observability end-user identifiers and may store them (encrypted) as received, and you instruct GOAT to do so.

(c) Notice/consent or exclude. Where you enable multi-user or observability capture, you will either (i) provide each affected person notice and obtain consent sufficient under applicable law, or (ii) configure the Source to exclude end-user identifiers and third-party data; and you will maintain and, on request, produce records evidencing such notice or consent.

(d) Employer / repository authority. Where you connect a repository or environment associated with an employer, client, or other party, you have that party's authorization to capture and contribute the associated Trace Data, including repository origin/remote, commit, and working-directory identifiers.

(e) No prohibited categories. You will not submit, and you are solely responsible if you submit, special-category personal data (Article 9 GDPR), criminal-offense data (Article 10 GDPR), protected health information (HIPAA), payment-card data, government identification numbers, precise geolocation, biometric data, or children's data, unless GOAT has expressly agreed in writing. You acknowledge the Service does not pre-screen, filter, classify, or block Trace Data by category before capture, and does not detect or remove such data, and you assume all risk for any such data you submit. You are solely responsible for excluding the data of persons under 16 (or the applicable age of digital consent) from any connected Source.

(f) No unlawful or restricted data. You will not submit Trace Data you know or should know was obtained unlawfully, in breach of confidentiality, in violation of a third party's technical or contractual controls, or in violation of any AI-provider, cloud-provider, repository-host, or observability-provider terms.

(g) Tool/MCP/system-prompt rights. You have all rights to permit GOAT to capture, extract, deidentify, and commercialize the tool/function definitions, MCP-server configurations, system prompts, and agent action-space metadata in Trace Data.

Materiality and reliance. You acknowledge each representation and warranty in this Section is material, that GOAT relies on them in lieu of independent verification, that they apply to all Trace Data attributable to your account, projects, Sources, slugs, and DSNs regardless of who submitted it or whether that person accepted these Terms, and that you assume all risk arising from the data you elect to connect, capture, or contribute — including multi-party, teammate, employer, and end-user data, and any reidentification arising from retained metadata.

As between you and GOAT, and except for the Service and GOAT Outputs (Section 10), GOAT does not claim ownership of your pre-existing intellectual property in Trace Data. GOAT makes no representation, and you make no warranty to GOAT, as to who owns any third-party material contained in Trace Data; you are responsible under Section 8 for your authority over all of it.

In consideration of your acceptance of these Terms and access to the Service (and not contingent on any Cashback), you grant GOAT a worldwide, non-exclusive, sublicensable, transferable, royalty-free, irrevocable (as to data already captured) right and license, during the Term and thereafter as reasonably necessary, to: (a) receive, host, store, access, copy, parse, process, transmit, display, and analyze Raw Trace Data to provide, secure, support, troubleshoot, and improve the Service; (b) apply redaction, filtering, transformation, aggregation, statistical analysis, and deidentification to Trace Data; (c) create, own, use, license, distribute, sell, and commercialize De-Identified Data and Corpus Products, including by combining your De-Identified Data with that of other contributors into shared Corpus Products; and (d) enforce these Terms, detect and investigate fraud and abuse, calculate and verify program metrics, and comply with law. The irrevocability of this license applies to GOAT's intellectual-property and contractual rights and does not override any non-waivable statutory right of a data subject to withdraw consent or obtain erasure of their personal data, which GOAT will honor as required by law and the Privacy Policy. Capture and retention of Raw Trace Data begin upon connection and cannot be reversed for data already captured.

Feedback. If you provide any suggestions, ideas, or feedback regarding the Service, you grant GOAT a perpetual, irrevocable, worldwide, royalty-free, fully sublicensable license to use, exploit, and incorporate that feedback for any purpose without obligation or attribution.

As between you and GOAT, you retain whatever rights you held in your own pre-existing intellectual property; nothing in these Terms transfers ownership of third-party material to you. GOAT owns the Service, all software and documentation, all capture, redaction, deidentification, scoring, and anti-fraud systems, all aggregated analytics generated by the Service, all De-Identified Data, all Corpus Products, and (under the Section 9 feedback license) all feedback, together with all associated intellectual property rights.

If GOAT offers you Cashback, the following apply. Cashback is a discretionary program benefit, not a payment for data and not a guaranteed amount; your grant of the licenses in Section 9 is supported by your acceptance of these Terms and access to the Service and is not contingent on any Cashback.

(a) Calculation. Cashback is calculated from usage metrics derived from your contributed Trace Data — currently a function of output-token counts, a per-model output-price reference, a per-model-tier rate, and a usage-domain multiplier (currently a single fixed multiplier applied uniformly; per-domain variation described in any marketing material is not currently implemented). Input tokens are not counted. Cashback rates are tiered and currently range from approximately 1% to 10% of a reference output cost depending on model tier; no higher rate is offered. Cashback is not a function of trace quality, complexity, function-call depth, or multi-agent activity. GOAT may change rates, price references, tiers, multipliers, methodologies, exclusions, thresholds, timing, rails, and jurisdictions at any time, and such changes may apply to amounts not yet paid, including by recalculating estimated balances for prior usage.

(b) Estimates are non-binding. All displayed Cashback figures, accruals, and balances are non-binding estimates computed from current program parameters and may change (including decrease) until an amount is actually paid. Only amounts marked paid are final.

(c) No clearance required; conditional eligibility. Cashback may accrue based on contributed usage before, after, or regardless of whether any Trace Data is redacted, deidentified, rights-cleared, sellable, or included in any Corpus Product. Accrual or payment does not constitute GOAT's acknowledgment that you had the necessary rights, authority, or consents.

(d) Withholding and clawback. Cashback is earned only for genuine, eligible usage. GOAT may withhold, reduce, offset against future amounts, or — for amounts not yet sent — reverse Cashback where it reasonably and in good faith determines that any of the following exists: synthetic traces, replay, circular traffic, wash usage, multi-account farming, self-dealing, duplicate generation, spoofed token counts, manipulated telemetry, unauthorized integrations, sanctions or wallet-control issues, or use designed to manufacture payouts; your lack of rights, authority, or required consents for any contributed Trace Data; a third-party objection, takedown, or deletion request affecting contributed data; or any breach of these Terms. On request, GOAT will provide a general statement of the basis, except where doing so would compromise a fraud or security investigation or violate law. GOAT may treat any overpaid or wrongly-paid amount as a contractual debt immediately due and repayable by you on demand. GOAT does not technically reverse, and cannot recall, a completed blockchain transfer or sent payout; recovery of any such amount is solely your contractual repayment obligation.

(e) Payout mechanics. Payouts are made only in USDC to a supported blockchain address (currently Base, Ethereum, or Polygon) or to a Coinbase email, subject to a minimum withdrawal of USD $25. Payouts are reviewed and sent manually by GOAT; timing is not guaranteed and no "instant," "Net-7," or scheduled-payout commitment applies. GOAT does not support ACH, SWIFT, wire, card, PayPal, Venmo, or other rails. A payout for a project/workspace is paid to a single designated account (the organization owner, or earliest member), regardless of which User, teammate, integration, or end user generated the underlying Trace Data. You represent and warrant that the designated account is authorized to receive Cashback on behalf of your organization and all of its Users, teammates, and connected Sources; you are solely responsible for any internal allocation, sharing, or dispute; GOAT has no obligation to identify, verify, or apportion among multiple potential recipients, owes no duty to any non-designated person, and is fully and finally discharged by paying the designated account. Blockchain payouts are deemed made when transmitted to the designated destination.

(f) No screening; taxes. GOAT does not currently perform identity verification, KYC, sanctions/watchlist/OFAC screening, anti-money-laundering checks, or automated tax withholding, and Cashback payouts are sent manually. Nothing in these Terms obligates GOAT to perform any such screening or withholding. You represent that you are not a Sanctioned Person and will not request payout to a sanctioned destination, and you acknowledge GOAT relies entirely on this representation and performs no independent screening. You are solely responsible for determining the legality of receiving Cashback in your jurisdiction and for all taxes and tax reporting. GOAT may, in its discretion, request tax (e.g., W-9/W-8), identity, or sanctions documentation and may condition, delay, withhold, or decline any payout pending receipt or as required by law. GOAT does not provide tax advice.

(g) Referrals. Any referral or invite program is subject to separate eligibility, attribution, anti-abuse, and clawback rules.

You will not, and will not allow others to: use the Service for unlawful, infringing, deceptive, or abusive activity; submit malicious code or probe or disrupt GOAT systems; connect Sources without authority; use the Service in violation of any third-party AI-provider, cloud, repository-host, observability, wallet, or exchange terms; attempt to recover, reidentify, or reverse engineer other contributors' data or GOAT's De-Identified Data or Corpus Products; or use the Service to build a competing corpus from unauthorized extraction of GOAT outputs, dashboards, or confidential materials.

The Service interoperates with third-party tools, model providers, cloud services, code hosts, wallets, exchanges, observability vendors, identity providers, and email and payout providers. You remain responsible for compliance with applicable third-party terms. GOAT does not control and is not responsible for third-party services, model outputs, uptime, security, accuracy, legality, licensing posture, or changes to their terms. Names of tools or platforms in these Terms or in marketing are illustrative and do not represent that a working integration exists.

Each party will use the other's confidential information only as needed to perform under this agreement and will protect it with at least reasonable care. GOAT's confidentiality obligations do not limit its rights to use and commercialize De-Identified Data and Corpus Products as permitted here.

GOAT applies commercially reasonable, evolving safeguards described in the Privacy Policy and DPA, but makes no representation that they prevent unauthorized access, loss, or disclosure. GOAT DOES NOT WARRANT any particular level of security; that the Service or any data is or will be secure or free from unauthorized access; that GOAT maintains backups, redundancy, disaster recovery, intrusion detection, or security monitoring; or that GOAT will detect or notify you of any security incident within any particular time. You are responsible for maintaining your own copies of any data you submit; GOAT is not a system of record and does not guarantee against loss, corruption, or unavailability of data.

EXCEPT AS EXPRESSLY STATED, THE SERVICE, DASHBOARDS, METRICS, CASHBACK ESTIMATES AND CALCULATIONS, REDACTION, DEIDENTIFICATION, AND CORPUS PRODUCTS ARE PROVIDED "AS IS" AND "AS AVAILABLE." GOAT DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WITHOUT LIMITING THE FOREGOING, GOAT DOES NOT WARRANT: uninterrupted or error-free operation; that any redaction or deidentification will run on, detect, or remove any particular data, is complete or accurate, or renders data non-personal (redaction is automated, probabilistic, and best-effort, includes no human review, and raw content is retained in encrypted, access-segregated storage independently of redaction); that any data GOAT designates as De-Identified Data is in fact non-identifying or cannot be re-identified, alone or in combination with other data, or that retained technical metadata (including provider response identifiers, session identifiers, content fingerprints, model identifiers, observability end-user identifiers, and source/repository labels) does not permit association with you, your account, or any person; that any exported dataset is free of identifiers; that any fraud, abuse, authenticity, sanctions, or eligibility screening is performed; that any data is deletable; that any Source or connector is available; or any minimum payout, payout speed, resale revenue, or regulatory outcome. You assume all risk of reidentification arising from metadata you authorized GOAT to retain or process, and acknowledge any data you submit may be retained in encrypted form indefinitely and may not be individually deletable. Statements, metrics, illustrations, and estimators in GOAT's marketing or in-product materials are illustrative and forward-looking, are not warranties, and are superseded by these Terms.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, GOODWILL, OR DATA, EVEN IF ADVISED OF THE POSSIBILITY. GOAT'S AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS WILL NOT EXCEED THE GREATER OF (a) THE TOTAL CASHBACK PAID OR PAYABLE TO YOU IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM, OR (b) USD $25,000.

The cap and exclusions do not limit: (x) liability for a party's fraud or willful misconduct, or, to the extent non-waivable, death or personal injury caused by its negligence; (y) your payment, tax, indemnification, and Section 8 warranty and assumption-of-risk obligations, and your liability for unauthorized connection or submission of data; (z) GOAT's breach of its confidentiality obligations or its express security obligations to you; or any liability that cannot be excluded or limited under applicable data-protection or consumer-protection law. If any limitation in this Section is held unenforceable, it will be reformed to the minimum extent necessary and the remainder enforced.

You will defend, indemnify, and hold harmless GOAT and its affiliates, officers, directors, employees, and agents from and against any claim, demand, loss, liability, damage, cost, or expense (including reasonable attorneys' fees) arising from or related to: (a) your lack of authority to connect any Source, account, repository, API key, slug, DSN, or observability source; (b) any Trace Data submitted by, for, or through you, including via anonymous, slug-based, repository-level, or teammate capture; (c) any claim by, or regulatory action concerning, a teammate, employee, contractor, employer, customer, end user, or other Third-Party Data Subject whose data, identifiers, or activity was captured, attributed, combined, or processed through your account, projects, or connected Sources; (d) your submission of special-category, health, payment-card, government-ID, biometric, precise-geolocation, or children's data; (e) your breach of these Terms, the DPA, or applicable law; (f) any allegation that you lacked the rights, notices, consents, or authorizations required for GOAT's permitted processing; (g) your violation of any third-party provider terms; (h) any tool/function definition, MCP-server configuration, system prompt, or action-space metadata you caused GOAT to capture or commercialize; (i) any observability end-user identifier or end-user content captured through a Source you connected; (j) any claim under any wiretapping, interception, eavesdropping, or two-party-consent law (including ECPA and the California Invasion of Privacy Act) arising from capture you enabled; (k) any intellectual-property, copyright, or trade-secret claim relating to Trace Data you submitted; and (l) any tax, withholding, sanctions, or export-control matter relating to you or your Wallet. GOAT may, at its option, control the defense of any indemnified claim with counsel of its choice; you will not settle any claim affecting GOAT without GOAT's prior written consent.

Raw Trace Data is stored encrypted and may be retained on a long-term or indefinite basis for re-processing, provenance, security, audit, and fraud-prevention. Project deletion is a soft-delete (archival) that stops future ingestion but retains all previously captured data. GOAT does not currently operate an automated or self-service deletion pipeline; certain data — including encrypted Raw Trace Data, append-only consent, rights, provenance, audit, and payout-ledger records, and any De-Identified Data or Corpus Products already derived or licensed — may be impossible to delete, may be limited to coarse (e.g., time-partition) granularity, or may not be technically feasible to remove from all copies. Any manual deletion is best-effort and subject to technical feasibility; submitting a request does not guarantee deletion of any particular data. Withdrawing consent or changing settings applies only to Trace Data captured after the change takes effect; it does not delete, recall, or stop use of Trace Data already captured, De-Identified Data already derived, or Corpus Products already created or licensed. Nothing in this Section limits any non-waivable statutory right to deletion or erasure; GOAT will action verified requests as required by law and the Privacy Policy, subject only to applicable statutory exemptions. Deletion and data-subject requests are addressed further in the Privacy Policy and DPA.

GOAT may terminate or suspend these Terms or your access at any time, with or without cause, effective on notice, and immediately on good-faith suspicion of a security, fraud, sanctions, unauthorized-connection, intellectual-property-infringement, or material-breach issue, with no obligation to investigate, prove, or disclose its basis and no liability for doing so. The 30-day notice-and-cure period applies only to your right to terminate GOAT for GOAT's material breach. You may stop participating by disabling capture, disconnecting Sources, or contacting GOAT, subject to Sections 9, 11, and 19. No disconnection, deactivation, or termination by you affects GOAT's rights in, or processing of, Trace Data already captured, or any De-Identified Data or Corpus Products already derived (Sections 9, 11, 19).

GOAT respects intellectual-property rights. If you believe Trace Data or Corpus Products infringe your copyright, send a notice under 17 U.S.C. §512 to GOAT's designated agent at privacy@goat.ai (or the address on GOAT's legal page) including the statutorily required elements. GOAT may remove or disable access to allegedly infringing material and will, in appropriate circumstances, terminate the accounts of repeat infringers.

You represent and warrant that you, your affiliates, and any person submitting Trace Data through your account or Sources are not (i) located in, organized under, or ordinarily resident in a comprehensively sanctioned country or region, or (ii) a Sanctioned Person (on any U.S. (OFAC SDN), UK, EU, UN, or other applicable sanctions or denied-party list). You will not use the Service, submit Trace Data, or receive Cashback in violation of applicable export-control or sanctions laws, and will not submit export-controlled technical data without authority. GOAT does not perform sanctions, denied-party, or export screening, and you assume all responsibility for your compliance.

GOAT may update these Terms by posting revised terms and, for material changes, providing additional notice. Continued use after the effective date constitutes acceptance. Material changes will not retroactively reduce rights already granted in De-Identified Data or Corpus Products created before the effective date.

PLEASE READ THIS SECTION CAREFULLY — IT AFFECTS YOUR LEGAL RIGHTS.

Except for (i) claims qualifying for small-claims court and (ii) either party's right to seek injunctive or equitable relief for misuse of intellectual property, confidential information, or anti-reidentification obligations, any dispute arising out of or relating to these Terms or the Service will be resolved by FINAL AND BINDING INDIVIDUAL ARBITRATION administered by [JAMS / AAA] under its then-current rules, seated in San Francisco County, California, before a single arbitrator, governed by the Federal Arbitration Act.

YOU AND GOAT WAIVE ANY RIGHT TO A JURY TRIAL AND TO PARTICIPATE IN A CLASS, COLLECTIVE, CONSOLIDATED, OR REPRESENTATIVE PROCEEDING. The arbitrator may not consolidate claims or preside over any representative or class proceeding. Claims for public injunctive relief may proceed in court and are excluded from this waiver to the extent required by applicable law. If the class-action waiver is held unenforceable as to a claim, that claim (and only that claim) will be severed and heard in court.

30-day opt-out. You may opt out of this Section 24 by emailing privacy@goat.ai within 30 days of first accepting these Terms, stating your name and intent to opt out; opting out does not affect any other provision.

Order of precedence. A written agreement signed by both parties controls over these Terms; these Terms control over the Privacy Policy, the DPA (except where the DPA states a data-protection term that applicable law requires to control), and all marketing and in-product materials.

Entire agreement. These Terms, the Privacy Policy, and the DPA (where applicable) are the entire agreement regarding the Service and supersede all prior or contemporaneous understandings, including any statements, figures, estimators, rates, payout rails, timelines, or capabilities described on GOAT's websites, landing pages, FAQs, in-product onboarding or connection screens, or other materials.

Severability. If any provision is held unenforceable, it will be limited or severed to the minimum extent necessary and the remaining provisions remain in full force. Survival. Sections 2, 8, 9, 10, 11(c)–(f), 14, 15, 16, 17, 18, 19, 22, 24, and 25 survive termination. No third-party beneficiaries. These Terms create no rights in, and are not enforceable by, any person other than you and GOAT (and GOAT's indemnitees under Section 18); no teammate, employee, end user, customer, or other Third-Party Data Subject is a third-party beneficiary. No waiver. No failure or delay to enforce any right is a waiver. Assignment. You may not assign these Terms without GOAT's prior written consent; GOAT may assign freely, including in a merger, financing, or sale of assets. Force majeure. Neither party is liable for delay or failure due to causes beyond its reasonable control. Notices. Legal notices to GOAT may be sent to privacy@goat.ai or the address on GOAT's legal page.

Governing law and venue. These Terms are governed by the laws of the State of California, excluding conflict-of-laws rules. Subject to Section 24, the state and federal courts in San Francisco County, California have exclusive jurisdiction, and each party consents to personal jurisdiction and venue there.

GOAT Labs — privacy@goat.ai, or the contact information on GOAT's legal contact page.