Legal & Accessibility

Conformance target

We measure NOSHASHI against WCAG 2.2 Level AA and the Department of Justice's web accessibility guidance under the Americans with Disabilities Act. We consider the console partially conformant: most of the standard is met, and the known gaps below are tracked as defects rather than accepted behaviour.

What the software does today

These are implemented and verifiable in the current build:

Known gaps

We would rather name these than let you discover them:

Feedback and enforcement

If you encounter a barrier, email support@noshashi.app with the scene, what you were trying to do, and the assistive technology you were using. We aim to acknowledge accessibility reports within 1 business day and will tell you the remediation timeline or offer an alternative way to complete the task.

Reference: WCAG 2.2 quick reference (https://www.w3.org/WAI/WCAG22/quickref/) and ADA web guidance (https://www.ada.gov/resources/web-guidance/).

What we do not collect

NOSHASHI Labs operates no analytics, no telemetry, no crash reporting and no advertising identifiers. We do not profile you and we do not sell or share data with advertisers.

Using the console without an account

Signing in is optional. Without an account, the console reads public ledger data and stores your preferences locally, and no request identifying you reaches any server we operate. This is the default and it is fully functional.

What an account stores

Creating an account means we hold data about you. Specifically:

Who processes it

Account data is held in Postgres at Supabase (United States region) behind row level security, so a row is only reachable by the account that owns it. Payments are processed by Stripe, which is the controller of your payment instrument — we never receive it. No other processor is involved.

What stays on your device

The following never leaves the machine you are running on:

What the software connects to

Outbound connections are limited to:

Public ledger data

The XRP Ledger is a public record. Any address you load, and every transaction associated with it, is already visible to anyone. Loading an address into this console does not make it more public, but nothing this software does can make ledger data private after the fact.

Retention and deletion

Account data is kept while the account exists. Ask us to delete it at privacy@noshashi.app and we will remove the account, its portfolios, its API keys and its verification records. Billing records are retained by Stripe for as long as tax and accounting law requires, which is outside our control.

To remove local data, clear the application's data directory and delete any stored secret from Settings.

Your rights and contact

Depending on where you live you may have rights to access, correct, export or delete your data, and to object to processing. Exercise any of them at privacy@noshashi.app and we will respond within 1 business day. If we ever cannot honour a request, we will tell you why.

What this software is

NOSHASHI is a read-only compliance console for the XRP Ledger. It reads public ledger state, evaluates it against a configurable policy rule set, and returns an explainable verdict with a cryptographic receipt. It does not custody assets, hold keys, or sign or broadcast transactions.

Not advice

Nothing produced by this software — verdicts, receipts, agent responses, or the commercial plan shown in the console — is legal advice, regulatory advice, tax advice, or investment advice.

A GO verdict means the configured rules passed. It is not a representation that a transaction is lawful in your jurisdiction, and it does not discharge any obligation you owe to a regulator. A NO-GO verdict is not a determination that anyone has done anything wrong.

Compliance determinations that carry legal consequence must be reviewed by qualified counsel and the responsible compliance officer.

Experimental features and human review

The XRPL Edge Lab and its downloadable Edge Pack are experimental research features. They may be incomplete, change without notice, or return an unknown result when public ledger data is unavailable. They do not establish ownership, title, solvency, liquidity, recoverability, sanctions status, legality or regulatory status.

You remain responsible for independently verifying inputs and outputs, applying the laws and policies that govern your activity, protecting personal data, and obtaining review from qualified legal, tax, compliance and technical professionals before acting.

The rule set is yours

The domain registry and policy rules shipped with this build are reference definitions for demonstration. Before operational use you are responsible for configuring rules that reflect the obligations that actually apply to you, and for keeping them current as those obligations change.

Availability and accuracy

The console reads from public XRP Ledger infrastructure operated by third parties. We do not control that infrastructure and do not warrant its availability, latency, or the accuracy of data it returns. Ledger state shown may be stale during a network partition.

The software is provided as-is, without warranty of any kind. To the maximum extent permitted by law, no liability is accepted for loss arising from reliance on it.

Acceptable use

You agree not to:

Fees, renewal and cancellation

Paid plans are subscriptions that renew automatically at the interval and price shown at checkout, charged to your payment method until you cancel. Verification credit packs are one-time purchases and do not renew.

You may cancel at any time from Account → Manage Billing, which opens Stripe's billing portal. Cancellation takes effect at the end of the period you have already paid for; access continues until then. Cancelling is a self-service action and never requires contacting us.

We will email you a receipt for every charge. If we change the price of a plan you are on, we will give you at least 30 days' notice before the change takes effect, and you may cancel before it does.

Limitation of liability

To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, consequential, exemplary or punitive damages, or for lost profits, lost revenue, lost data, or business interruption, even if advised such damages were possible.

Our total aggregate liability arising out of or relating to these terms is limited to the greater of (a) the fees you paid us in the twelve months before the event giving rise to the claim, or (b) one hundred US dollars.

These limits do not apply to liability that cannot be limited by law, including in some jurisdictions liability for fraud, gross negligence, wilful misconduct, or death or personal injury caused by negligence.

Indemnity

You agree to indemnify and hold harmless NOSHASHI Labs from third-party claims arising out of your use of the software in breach of these terms, your configuration of the policy rule set, or your representation of a verdict as something it is not.

Dispute resolution

We would rather fix a problem than litigate one. Contact legal@noshashi.app first; most disputes end there.

If a dispute cannot be resolved informally within 60 days, it will be settled by binding individual arbitration administered under the rules of a recognised arbitral body in United States, rather than in court, except that either party may bring an individual claim in small-claims court or seek injunctive relief to protect intellectual property.

TO THE EXTENT PERMITTED BY LAW, DISPUTES WILL BE BROUGHT INDIVIDUALLY AND NOT AS A CLASS, COLLECTIVE OR REPRESENTATIVE ACTION, AND EACH PARTY WAIVES ANY RIGHT TO A JURY TRIAL. Where this waiver is unenforceable — including for many consumers in the EU, UK and certain US states — it does not apply to you, and nothing here removes a right you cannot waive under your local law.

Changes to these terms

We may update these terms. For material changes we will give notice in the application or by email at least 30 days before they take effect. Continuing to use the software after that date means you accept the updated terms; if you do not, cancel before then and we will refund any unused prepaid period.

Governing terms

These terms are governed by the laws of United States, without regard to conflict-of-law rules. If any provision is held unenforceable, the rest remains in force. Questions: legal@noshashi.app.

What recurs

Before you are charged anything, you see all of this at checkout:

How to cancel

Account → Manage Billing opens Stripe's billing portal, where cancelling takes two clicks. You do not have to email anyone, call anyone, or explain yourself, and there is no retention flow designed to slow you down.

Cancelling stops the next charge. You keep access until the end of the period you already paid for, and the plan then reverts to the free Operator tier rather than locking you out of your own data.

Refunds

If you cancel within 14 days of a first subscription charge and have not used a paid capability in that period, email support@noshashi.app and we will refund it in full.

Verification credits are refundable pro rata for the unused balance within 30 days of purchase.

If a verification fails because of a fault on our side, the credit it consumed is restored — tell us and we will do it without argument.

Where local consumer law gives you a stronger right of withdrawal — such as the 14-day right in the EU and UK — that right applies in addition to this policy, not instead of it.

Failed payments and taxes

If a renewal payment fails, the plan moves to past-due and paid capabilities pause; your data is retained. We do not add late fees.

Prices are exclusive of tax unless stated. Where we are required to collect VAT, GST or sales tax, it is calculated and shown by Stripe at checkout.

Roles

For account data — your email, subscription state, portfolios and verification records — NOSHASHI Labs is the controller. For data you put into the product about other people, you are the controller and we act as processor on your instructions.

If you need a signed Data Processing Agreement with standard contractual clauses, email legal@noshashi.app and we will execute one.

Subprocessors

We use these, and only these, to run the service:

Lawful basis and transfers

We process account data to perform our contract with you, and to meet legal obligations such as tax record-keeping. We do not rely on legitimate interests to profile you, because we do not profile you.

Data is stored in the United States. For transfers out of the EEA, UK or Switzerland we rely on standard contractual clauses with our subprocessors.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent. California residents additionally have the right to know, delete, correct, and to opt out of sale or sharing — we do not sell or share personal information, so there is nothing to opt out of.

Exercise any right by emailing privacy@noshashi.app. We respond within 1 business day and will not discriminate against you for asking.

Breach notification

If we suffer a personal data breach affecting you, we will notify you and the relevant supervisory authority without undue delay and within 72 hours of becoming aware, describing what happened, what data was involved, and what we are doing about it.

Sanctions

You may not use this software if you are located in, ordinarily resident in, or organised under the laws of a jurisdiction subject to comprehensive sanctions, or if you appear on a restricted-party list including the US Treasury's SDN list, the UK sanctions list, or the EU consolidated list.

You confirm you are not acting on behalf of any such person. We will suspend an account immediately on credible information to the contrary, and we will report where we are legally required to.

Export control

This software contains cryptographic functionality and may be subject to export regulations, including the US Export Administration Regulations. You are responsible for complying with the export and import laws that apply where you are.

Prohibited uses

You may not use the software to:

Enforcement

We may suspend or terminate access for a breach of this policy. Where the breach is inadvertent and fixable we will tell you first. Where it is not, we will not.

Report abuse to security@noshashi.app.

Not a regulated financial institution

NOSHASHI Labs is not a bank, a broker-dealer, a money services business, a money transmitter, a qualified custodian, or a registered investment adviser. It does not hold client assets or client funds at any point.

Not a sanctions screening provider of record

The sanctions-related rules in this console evaluate credentials asserted on-ledger by third-party issuers. They are not a substitute for screening against an authoritative sanctions list by a provider of record, and they do not discharge any screening obligation you hold.

Credential issuers are third parties

A credential is only as reliable as the issuer that signed it. This software verifies that a credential exists on the ledger, is accepted by its subject, and has not been revoked. It cannot verify that the issuer performed adequate diligence before issuing it.

Fees and licensing

Any fee charged for compliance verification may attract licensing obligations depending on jurisdiction and on how the service is characterised. This has not yet been assessed by counsel and must be before any fee is charged in production.

Reporting a problem

Security vulnerabilities: security@noshashi.app. We ask for coordinated disclosure and will acknowledge within 1 business day. Regulatory or legal correspondence: legal@noshashi.app.

Runtime and framework

All permissively licensed; none impose copyleft obligations on this application:

Typefaces

Inter, Orbitron, Rajdhani and JetBrains Mono are licensed under the SIL Open Font License 1.1 and are bundled with the application rather than fetched from a font CDN.

No copyleft dependencies

The dependency tree is audited to contain no GPL, AGPL or SSPL components, so shipping this application as a closed binary creates no source-disclosure obligation. If that ever changes, this page changes with it.

Trademarks

XRP, XRP Ledger and XRPL are marks of their respective owners. Stripe and Supabase are marks of their respective owners. Use of these names describes interoperability and does not imply endorsement, sponsorship or affiliation.

Institution names shown in the reference domain registry are fictional examples. They do not refer to, and do not imply any relationship with, any real firm.