Terms & Privacy

Budget Governor — Effective May 2026

Terms of Service

1. Service. Budget Governor provides API endpoints and an MCP server for controlling AI agent spend. The service is provided "as is" without warranties of any kind. Use at your own risk.

2. Accounts. Accounts are provisioned via POST /v1/account. You receive a random API key. You are solely responsible for keeping it secure. There is no account recovery — if you lose your API key, those credits are lost.

3. Credits. Credits are purchased in packs via USDC on Base mainnet. Credits do not expire. One credit pack purchase covers one account; credits are not transferable between accounts.

4. Acceptable use. You may not use the service to:

Circumvent or abuse spend limits on behalf of other users
Access accounts that are not yours
Send automated requests at volumes that degrade service for others

5. Limitation of liability. To the maximum extent permitted by law, Budget Governor and its operator are not liable for any direct, indirect, incidental, or consequential damages arising from your use of the service, including lost credits, runaway agent costs, or service downtime.

6. Changes. These terms may be updated at any time. Continued use of the service after changes constitutes acceptance.

Refund Policy

USDC transfers on the Base blockchain are irreversible on-chain. Credits are non-refundable once purchased.

If you experience a verifiable service error — for example, a payment that reached our receiver address but was not credited to your account due to a fault on our end — open an issue on GitHub with your transaction hash and API key. We will review and credit your account at our discretion.

We do not issue refunds for unused credits, incorrectly sized packs, or costs incurred by your agents.

Privacy

We store the following in Cloudflare KV:

API keys — randomly generated tokens (bg_ + 32 hex chars). No name, email, or identity attached.
Account UUIDs — random identifiers linked to your API key.
Credit balance — USD amount and timestamp of last update.
Spend envelopes — per-agent budget limits and current spend totals you configure.
Transaction hashes — stored for 30 days to prevent payment replay, then automatically deleted.

We do not collect email addresses, names, wallet addresses (beyond what is publicly visible on-chain), or browsing behavior.

Cloudflare handles request routing and may log IP addresses and request metadata per their privacy policy.

Support

For questions, issues, or payment disputes: GitHub Issues