Terms & Conditions
Contents
- 1. Acceptance of these terms
- 2. What PennyWall does
- 3. No guarantee of security
- 4. Accounts
- 5. API keys and your responsibilities
- 6. Spending limits
- 7. Acceptable use
- 8. Fees
- 9. Third-party services and payments
- 10. Intellectual property
- 11. Disclaimer of warranties
- 12. Limitation of liability
- 13. Indemnification
- 14. Termination
- 15. Changes to these terms
- 16. Governing law
- 17. Contact
1. Acceptance of these terms
These Terms & Conditions ("Terms") govern your access to and use of PennyWall, including our website, dashboard, and API (together, the "Service"). The Service is operated by Pingr Intelligence Limited ("Pingr Intelligence", "we", "us", or "our"), a company registered in Ireland.
By creating an account, generating an API key, or otherwise using the Service, you agree to be bound by these Terms. If you're using the Service on behalf of a company or other organisation, you're confirming that you have the authority to bind that organisation to these Terms, and "you" refers to both you and that organisation. If you don't agree to these Terms, don't use the Service.
2. What PennyWall does
PennyWall is a screening layer for payments made by AI agents, primarily agents using the x402 protocol or similar machine-to-machine payment mechanisms. When your agent submits a payment for review, PennyWall:
- Scans the payment details for patterns that resemble personal information, such as email addresses, phone numbers, card-like number sequences, and similar identifiers.
- Checks the payment against spending limits you've configured for your account.
- Returns a decision (allowed or blocked) along with a version of the payment description with detected patterns redacted.
- Records a log of the check, including whether anything was flagged, for your own review on the dashboard.
PennyWall does not initiate, hold, transmit, or settle payments itself. Your agent, or the systems you connect to PennyWall, remain responsible for actually making any payment. PennyWall's role is limited to evaluating a payment request and telling you what it found.
3. No guarantee of security
This is the most important section. Please read it carefully.
PennyWall is a risk-reduction tool. It is designed to catch common, recognisable patterns of personal information and to help you cap how much your agents can spend. It is not, and is not marketed as, a complete security solution, and it cannot make any of the following guarantees:
- We do not guarantee that your AI agents, accounts, API keys, servers, or any other part of your infrastructure will not be hacked, compromised, or accessed by unauthorised parties. Keeping your own systems and credentials secure is your responsibility, not ours.
- We do not guarantee that all personal information will be detected. Our scanning relies on pattern matching. It can miss information that doesn't match a known format, and it can occasionally flag things that aren't actually sensitive. It is a filter, not a certainty.
- We do not guarantee that no data will ever leak, be intercepted, or be exposed through channels PennyWall does not control, including the payment networks, blockchains, APIs, or third-party services your agents interact with.
- We do not guarantee that spending limits will prevent every form of financial loss, including losses caused by a compromised API key, a bug in your own code, a misconfigured limit, or a malicious actor who has otherwise obtained valid access to your account.
If your use case requires guaranteed, audited, or regulator-grade security or compliance controls, you should evaluate whether PennyWall, used alone, meets that bar before relying on it for that purpose.
4. Accounts
You need an account to use most of the Service. You agree to provide accurate information when you sign up, to keep your login credentials confidential, and to notify us promptly if you believe your account has been accessed without authorisation. You're responsible for all activity that happens under your account, whether or not you personally performed it, except to the extent caused by our own breach of these Terms.
We may suspend or terminate an account that we reasonably believe is being used fraudulently, abusively, or in violation of these Terms.
5. API keys and your responsibilities
API keys are how your agents authenticate to PennyWall. Anyone holding a valid key can make payment checks under your account and, if your own downstream systems trust PennyWall's response unconditionally, potentially trigger real payments. Accordingly:
- You're responsible for generating, storing, and rotating your API keys securely.
- You're responsible for revoking a key immediately if you believe it has been exposed or compromised.
- We store only a hash of your key, not the raw value, so we cannot recover a lost key for you, and we cannot tell you what a key was after it's been revoked.
- We are not responsible for actions taken using a valid API key, including actions taken by someone who obtained that key without your intention.
6. Spending limits
You can configure a daily spending limit and a maximum per-payment amount from your dashboard. These limits are enforced by PennyWall at the moment a payment check is made, based on the totals we've recorded for your account. They are a safety net you control, not a promise from us about what will happen to your funds. In particular:
- Limits apply to payments that are actually submitted to PennyWall for a check. A payment made outside of PennyWall's review process, or by a system that doesn't call PennyWall first, is not covered by your limits.
- You are solely responsible for setting limits appropriate to your own risk tolerance, and for reviewing your dashboard regularly.
- We are not liable for losses that occur because a limit was set too high, not set at all, or bypassed by a system outside our control.
7. Acceptable use
You agree not to use the Service to:
- Violate any applicable law or regulation, including sanctions, anti-money-laundering, and consumer protection laws.
- Facilitate fraud, money laundering, or payments for illegal goods or services.
- Attempt to gain unauthorised access to PennyWall's systems, other users' accounts or data, or interfere with the Service's normal operation.
- Reverse engineer, scrape, or resell the Service without our prior written consent.
- Submit payment data containing personal information belonging to someone else without a lawful basis for processing it.
We may suspend access if we reasonably believe your use of the Service violates this section.
8. Fees
PennyWall may currently be offered free of charge, in beta, or under a specific pricing plan disclosed to you at signup or on our pricing page. We may introduce, change, or remove pricing for the Service at any time. If we do, we'll give you reasonable notice before any change takes effect for your account, and continued use of the Service after a pricing change takes effect constitutes acceptance of the new pricing.
9. Third-party services and payments
PennyWall is designed to work alongside payment protocols and infrastructure we don't own or control, including the x402 protocol, blockchain networks, wallets, and third-party APIs your agents may call. We are not responsible for the availability, security, correctness, or conduct of any third-party service, and any transaction your agent ultimately completes is a matter between you and that third party.
10. Intellectual property
The Service, including its software, design, branding, and documentation, is owned by Pingr Intelligence Limited and protected by intellectual property laws. We grant you a limited, non-exclusive, non-transferable licence to use the Service in accordance with these Terms. You retain ownership of the data you submit to PennyWall (such as your agents' payment descriptions), and you grant us a licence to process that data solely to provide the Service to you.
11. Disclaimer of warranties
The Service is provided "as is" and "as available," without warranties of any kind, whether express, implied, or statutory, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Service will be uninterrupted, error-free, or completely secure, or that any PII detection will be accurate or complete.
12. Limitation of liability
To the maximum extent permitted by law, Pingr Intelligence Limited will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of profits, revenue, data, or funds, arising from or related to your use of the Service, even if we've been advised of the possibility of such damages. To the maximum extent permitted by law, our total liability to you for any claim arising from the Service will not exceed the greater of (a) the amount you paid us for the Service in the twelve months before the claim arose, or (b) €100.
Nothing in these Terms limits liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be excluded or limited under applicable law.
13. Indemnification
You agree to indemnify and hold Pingr Intelligence Limited harmless from any claims, damages, losses, or expenses (including reasonable legal fees) arising from your use of the Service, your violation of these Terms, or your violation of any law or the rights of a third party.
14. Termination
You may stop using the Service and delete your account at any time. We may suspend or terminate your access to the Service, with or without notice, if we reasonably believe you've violated these Terms, if required by law, or if we discontinue the Service. Sections of these Terms that by their nature should survive termination (including Sections 3, 11, 12, and 13) will continue to apply.
15. Changes to these terms
We may update these Terms from time to time. If we make material changes, we'll take reasonable steps to notify you, such as posting a notice on the Service or emailing the address on your account. Continuing to use the Service after a change takes effect means you accept the updated Terms.
16. Governing law
These Terms are governed by the laws of Ireland, without regard to its conflict-of-law principles. Any dispute arising from these Terms or the Service will be subject to the exclusive jurisdiction of the courts of Ireland.
17. Contact
Questions about these Terms can be sent by post to Pingr Intelligence Limited, County Laois, Ireland.