Terms of Service

1. Product Description

Candide Labs ("Candide," "we," "us," "our") provides blockchain infrastructure for building and operating smart accounts on Ethereum and EVM-compatible networks. Our services include:

• Bundler: Software infrastructure that processes UserOperations for ERC-4337 smart accounts across supported networks.
• InstaGas (Paymaster): Backend infrastructure and smart contracts for sponsoring or facilitating payment of Ethereum transaction fees, including gas policy management and ERC-20 token paymaster functionality.
• AbstractionKit: An open-source SDK for building smart accounts on Safe infrastructure.
• Dashboard: A web-based platform for developers to manage API keys, gas policies, team members, and usage.
• Forwarding Address: Infrastructure that gives your users deterministic deposit addresses and relays funds sent to them to a destination account on a supported network.
• Account Recovery Service: A managed service for recovering Safe accounts through guardians, including email and SMS verification with Candide as a guardian, recovery alerts, and gas-sponsored recovery transactions.
• Safe OpenSig: A verification instrument for institutional Safe signers. It provides local transaction intent reconstruction and audit capabilities before hardware signing. Safe OpenSig is not a wallet, a custodian, or a replacement for the Safe Web UI.

2. Company Information

Name: Candide Labs

SIREN: 919 472 480

Contact Email: team@candidelabs.com

Address: 37 Rue Gazan, Paris, 75014 France

3. Target Audience

Candide services are designed for software companies, developers, and enterprises building on Ethereum and EVM-compatible blockchains. By using our services, you represent that you are using them for business or development purposes.

4. Plans and Pricing

4.1 Plans and Fees

Candide offers Starter (free), Launch, Grow and Enterprise plans. Each plan's price, included usage, per-operation fees and features are listed on our pricing page. The price that applies to your subscription is the one shown on your invoices. Candide may change prices, included usage, per-operation fees or features, but a change that affects an existing subscription takes effect only after 30 days' written notice.

Enterprise plans are priced individually. Where an Enterprise order form or contract conflicts with these Terms, the order form or contract governs.

4.2 Annual Plans

Annual subscriptions to the Launch and Grow plans receive a discount equivalent to 2 months free. Annual plans are billed upfront for the full 12-month period.

4.3 Refund Policy

• Monthly plans: Cancel anytime. No refund for the current billing period.
• Annual plans (first 30 days): Full refund if you are not satisfied, no questions asked.
• Annual plans (months 1-6): No refunds or cancellations. Remaining balance may be applied as credit toward an upgrade to a higher plan.
• Annual plans (after 6 months): Pro-rated refund for remaining unused months, or credit toward a higher plan. No cancellation fees.
• Enterprise plans: Governed by individual contract terms.
• Cancellation after a change to these Terms: If you cancel because of a material change under section 15, unused prepaid fees are refunded pro rata.

4.4 Free Plan Limits

The Starter plan includes a limited number of mainnet UserOperations, as listed on our pricing page. When you reach that limit, mainnet access will be paused. Testnet access continues without limits. Upgrade to a paid plan to restore mainnet access.

4.5 Plan Allowances

Each paid plan includes a monthly allowance of UserOperations and a request rate, as listed on our pricing page. Once you reach either, further requests may be rejected until your allowance resets at the start of your next billing cycle, or until you upgrade.

4.6 Payment and Taxes

Paid plans are billed in advance through our payment provider. If a payment fails, we will notify you, and we may suspend paid features if it remains unpaid 7 days after that notice.

Prices are final. Candide does not currently charge VAT. If your jurisdiction requires you to account for VAT or similar taxes on your purchase yourself, for example under a reverse-charge mechanism, you are responsible for doing so.

5. Gas Sponsorship and Token Paymaster

5.1 Gas Pricing

Candide charges zero markup on gas costs. Gas is passed through at cost. A flat per-UserOperation service fee applies after included free operations are consumed, as specified for your plan on our pricing page or in your Enterprise contract.

5.2 Token Paymaster

When using the ERC-20 token paymaster, exchange rates between tokens and gas are not guaranteed and are determined based on current gas prices and token prices at the time of transaction execution. Candide is not liable for rate fluctuations.

5.3 Gas Policy Deposits

Funds deposited into InstaGas gas policies are used to sponsor UserOperations on your behalf. Deposited funds are non-refundable once consumed by sponsored transactions. Unused deposits may be withdrawn subject to the terms of your gas policy configuration.

6. Service Level Agreements (SLA)

6.1 SLA by Plan

An uptime SLA is included only with Enterprise plans: 99.9% uptime, or as specified in your contract. Starter, Launch and Grow plans do not include an SLA.

6.2 Definitions

Uptime is calculated monthly as: ((Total minutes in month - Downtime minutes) / Total minutes in month) x 100.

Downtime means periods where the Candide API is unavailable or returns errors for more than 5 consecutive minutes, excluding scheduled maintenance and blockchain network outages or degradation (e.g., chain halts, network congestion, RPC provider failures) which are outside Candide's control.

Scheduled maintenance windows will be communicated at least 48 hours in advance and do not count toward downtime.

6.3 Service Credits

If Candide fails to meet the applicable SLA in a given month, service credits apply as follows:

• 99.0% - 99.89% uptime achieved: 10% service credit
• 95.0% - 98.99% uptime achieved: 25% service credit
• Below 95% uptime achieved: 50% service credit

Service credits are applied to the next billing cycle and do not exceed 50% of the monthly fee. Credits must be requested within 30 days of the incident. Service credits are the sole and exclusive remedy for SLA breaches.

6.4 Enterprise SLA

Enterprise customers may negotiate custom SLA terms, including financial penalties, as part of their individual contract.

7. Fair Use and Acceptable Use

7.1 Fair Use

All plans are subject to fair use. Candide reserves the right to throttle or suspend access if usage patterns indicate abuse, including but not limited to:

• Sustained API requests exceeding the rate limits of your plan
• Submitting malformed, spam, or intentionally failing UserOperations
• Using Candide infrastructure to perform denial-of-service attacks on any network
• Attempting to circumvent rate limits, usage caps, or plan restrictions
• Reselling Candide API access to third parties without written authorization

7.2 Enforcement

Candide may, at its sole discretion, throttle, suspend, or terminate accounts that violate these terms. Where possible, we will provide 7 days' written notice before suspension, except in cases of imminent harm or legal obligation.

7.3 Sanctions and Lawful Use

Candide is established in the European Union and must comply with EU sanctions law. You confirm that you, and anyone controlling your account, are not subject to EU or UN sanctions, and that you will not use Candide's hosted services to breach sanctions or other applicable law. Candide may suspend access where the law requires it.

Candide does not monitor the end users of your application. You are responsible for your application's own compliance, and gas policies let you set the rules for what you sponsor. These obligations apply to Candide's hosted services. Candide's open-source software is available under its own licenses.

8. Safe OpenSig

8.1 Purpose

Safe OpenSig is a verification instrument for institutional Safe signers. It locally reconstructs and audits transaction intent before hardware signing.

8.2 Local-First Verification

Transaction verification and Merkle proof validation are performed locally on the user's device. If you use Candide's nodes for simulation, the transaction data needed to simulate it is sent to those nodes; Candide does not log IP addresses, request headers, or timestamps for these requests. If you use your own node, no transaction data is sent to Candide.

The mobile app can send anonymous usage events if you opt in under Settings. It is off by default, and these events never include addresses, transaction hashes, calldata, or amounts.

8.3 Third-Party Data

Safe OpenSig interacts with third-party RPC providers (e.g., Alchemy) to verify blockchain state. Candide is not responsible for the uptime, accuracy, or data integrity of these third-party providers.

8.4 No Liability for Financial Loss

Safe OpenSig's transaction preview is provided for informational purposes only. Users are solely responsible for verifying the final payload on their hardware device before signing. Candide is not liable for losses resulting from blind signing, malicious UI injections, compromised hardware, or discrepancies in third-party interfaces.

8.5 Not a Financial Service

Safe OpenSig is not a wallet, custodian, exchange, or financial advisor. It does not hold, transmit, or have access to user funds at any time.

9. Intellectual Property and Trademarks

Candide's proprietary software is owned by Candide. Open-source components are licensed under their respective open-source licenses.

The Candide name, logo, and branding are trademarks of Candide.

Trademark attribution: Safe is a trademark of the Safe Ecosystem Foundation. Ledger, Nano S, Nano X, and Nano Plus are trademarks of Ledger SAS. Safe OpenSig is an independent verification instrument and is not affiliated with, sponsored by, or endorsed by Safe or Ledger.

10. Data Protection and Privacy

10.1 Data We Collect

Candide collects and processes the following personal data for billing and account management purposes:

• Name
• Email address
• Billing address
• Payment information (processed by our third-party payment provider)

10.2 API and Usage Data

We collect API usage data (request counts, error rates, response times) for billing, analytics, and service improvement. This data is associated with your API key, not with individual end-users of your application.

10.3 GDPR Compliance

As a company based in France, Candide complies with the General Data Protection Regulation (EU 2016/679). You have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to processing of your data

To exercise these rights, contact team@candidelabs.com. We will respond within 30 days.

10.4 Data Retention

Account and billing data is retained for the duration of your subscription and for 24 months after cancellation for legal and accounting purposes. API usage logs are retained for 90 days. You may request earlier deletion of non-required data.

10.5 Sub-Processors

Candide uses third-party services for payment processing, email, and infrastructure hosting. A list of sub-processors and a data processing agreement (DPA) are available upon request. See also our Privacy Policy.

11. Limitations and Disclaimers

11.1 As-Is Basis

Candide services are provided on an "as-is" and "as-available" basis. While critical smart contract components are audited, software may contain vulnerabilities. Candide does not warrant uninterrupted, error-free, or completely secure operation of its services.

11.2 Blockchain Risks

You acknowledge the inherent risks of blockchain technology, including but not limited to: network congestion, gas price volatility, smart contract vulnerabilities, consensus failures, and chain reorganizations. Candide is not liable for losses caused by blockchain network behavior.

11.3 Limitation of Liability

To the maximum extent permitted by applicable law, Candide's total liability for any claim arising from these Terms or use of our services shall not exceed the fees paid by you in the 12 months preceding the claim. Candide shall not be liable for indirect, incidental, consequential, or punitive damages.

11.4 SLA Remedies

Service credits as described in Section 6.3 are the sole and exclusive remedy for service availability failures.

11.5 Indemnification

You will defend and indemnify Candide against third-party claims arising from your application, your end users' use of it, or your breach of these Terms or applicable law.

12. Add-On Services

Account Recovery Service, Forwarding Address, Allowance Module, and other add-on services are governed by their own separate terms provided at the time of purchase. In case of conflict between these Terms and add-on terms, the add-on terms prevail for the specific add-on service.

13. Account Responsibilities

You are responsible for maintaining the confidentiality of your API keys and account credentials.

You are responsible for all activity under your account.

You must notify Candide immediately if you suspect unauthorized access to your account.

Candide is not liable for losses caused by compromised API keys or credentials.

14. Termination

You may cancel your subscription at any time, subject to section 4.3. Candide may suspend or terminate your account under sections 4.6, 7.2 and 7.3.

When your account ends, your API keys stop working at the end of your paid period. Any unused balance in your gas policies remains yours, and Candide will refund it on request. Account and billing data is retained as described in section 10.4.

Smart accounts deployed onchain are not affected. They stay under the control of their owners, and can be used with any compatible infrastructure.

15. Modifications to Terms

Candide may update these Terms at any time. We will provide 30 days' written notice for material changes. Continued use of our services after the notice period constitutes acceptance of the updated Terms. If you do not agree with the changes, you may cancel your subscription.

16. Governing Law and Disputes

These Terms are governed by the laws of France. Any disputes arising from these Terms shall be subject to the exclusive jurisdiction of the courts of Paris, France.

17. Contact

For questions about these Terms, contact us at team@candidelabs.com.