01 // ACCEPTANCE & SCOPE
These terms apply to every interaction performed through the platform interface: browsing listings, placing orders, communicating with counterparties, filing disputes, and withdrawing balances. Registration constitutes explicit acceptance. If any clause is unacceptable to you, discontinue use of the service — continued participation is treated as ongoing consent to the currently signed build.
The platform operates as a neutral venue. Staff facilitate transactions and enforce these rules but are never a party to any individual sale. Vendor listings are the sole responsibility of the vendor who published them, including product descriptions, declared quantities, and stated dispatch windows.
INTERPRETATION NOTE :: Where a clause conflicts with a signed amendment notice posted in-channel, the most recent signed amendment prevails.
02 // ACCOUNT ELIGIBILITY & SECURITY OBLIGATIONS
Accounts are issued to individuals only — one account per person, no shared credentials, no delegated logins. You are responsible for maintaining control of your mnemonic recovery phrase and your PGP keypair. The support desk will never ask for your private key, and any message requesting one should be treated as invalid regardless of its formatting.
- ▸Mandatory PGP two-factor challenge is required at every login. Accounts failing three consecutive challenges enter a 24-hour security lockout.
- ▸Sessions expire after 45 minutes of inactivity by design. This is a deliberate hardening measure, not a fault.
- ▸Account sales, transfers, and succession arrangements are void. Balances held in a sold account cannot be recovered by the buyer if the seller later initiates credential recovery.
- ▸You agree to verify server-signed messages before entering sensitive material anywhere in the session flow.
03 // ESCROW MECHANICS
All physical-goods orders route through multisig escrow unless both parties explicitly opt into direct deal — an option available exclusively to vendors holding Tier 3 status or higher. Funds remain locked until one of four events occurs:
| Release Trigger |
Timing |
Acting Party |
| Buyer finalizes | Any time after delivery confirmation | Buyer |
| Auto-finalize | 14 days post-dispatch (physical) / 3 days (digital) | System |
| Dispute ruling | Per arbitration decision | Arbitration desk |
| Mutual cancel | Pre-dispatch only | Both parties |
Finalization is irreversible. Buyers are encouraged to leave the timer running until the parcel has arrived and been inspected, rather than finalizing early on courier-scan messages alone. Early finalize removes every protection described in this document for that order.
04 // VENDOR STANDARDS
Vending privileges are earned, not assumed. A new vendor account begins with a listing cap of 10 active products and a rolling bond requirement. The bond returns in full upon voluntary retirement with no unresolved disputes older than 30 days. Standards enforced across all tiers:
- Listings must state exact quantity, purity band where applicable, and country of origin. Vague or bait descriptions constitute grounds for forced refunds.
- Declared ship-by windows are binding. Missing one starts a 48-hour grace clock, after which buyers may claim automatic refund-readiness.
- Tracking evidence must be uploaded within 72 hours of dispatch on orders above $150 equivalent in XMR.
- Communication response times under 36 hours during active disputes. Silence beyond 72 hours transfers ruling authority to the arbitration desk by default.
- Reviews may never be traded, purchased, or suppressed. Incentivized feedback schemes result in permanent vending revocation.
Vendor tiers advance on a rolling 90-day evaluation: order volume, dispute ratio below 2%, and average rating above 4.5/5. Tier demotions reduce listing caps and raise the commission bracket by one step until metrics recover.
05 // DISPUTES & ARBITRATION
Either party may escalate an order to the dispute desk before finalization. Filing costs nothing. Evidence rules are strict: screenshots alone carry little weight; raw PGP-signed vendor communication, unedited tracking scans, photographs with handwritten date cards, and published lab results form the accepted evidentiary standard.
Rulings typically land within 5 business days. Possible outcomes include full release to vendor, full refund to buyer, split resolution, or retry shipment at vendor expense. A single escalation appeal is permitted within 72 hours of a ruling and is adjudicated by staff uninvolved in the original decision — this second ruling closes the matter permanently.
FEE NOTE :: A 1% arbiter fee applies only when a split resolution is awarded, deducted proportionally from each side's released share.
06 // FEES & COMMISSION SCHEDULE
Commission is charged at finalization only. There are no listing fees, no monthly dues, and no withdrawal charges beyond network cost pass-through at consensus rate.
| Vendor Tier |
Commission |
Listing Cap |
| Tier 1 — Provisional | 6% | 10 listings |
| Tier 2 — Established | 5% | 50 listings |
| Tier 3 — Veteran | 4% | 200 listings |
| Tier 4 — Flagship | 3% | Unlimited |
07 // PROHIBITED CONDUCT
The following activities result in immediate suspension pending review, and confirmed violations end in permanent bans with balance forfeiture where harm to another participant occurred:
- ✗Impersonation of staff, vendors, or verified community members.
- ✗Publishing external contact channels inside order threads to route business off-platform, which strips participants of escrow coverage.
- ✗Doxing, threat issuance, or harassment directed at any participant including arbitration staff.
- ✗Scam listings, misrepresentations of quantity or purity, and reuse of another vendor's product photography without disclosure.
- ✗Exploitation attempts against the interface, automated request floods, and scraping at volumes that degrade node performance.
08 // SAFEDOSE ANALYSIS PROGRAM TERMS
SafeDose submissions are laboratory samples procured anonymously from random live orders. Results — composition, purity percentage, and batch-consistency deltas — publish verbatim with no editorial redaction. Submission does not guarantee favorable results, and vendors cannot purchase suppression of unfavorable data. Publishing a batch result does not transfer liability from vendor to platform; it exists purely as transparency infrastructure any buyer may consult pre-purchase.
Re-test requests require two independent sources or community-funded batches of ten samples minimum. All re-tests chain back to the original report ID so historical drift remains visible across seasons.
09 // PRIVACY & DATA RETENTION
Data collection is minimized by architecture: no email addresses, no phone numbers, no third-party analytics scripts, and sessions carried entirely through Tor. What does exist — order records, encrypted message logs, and wallet entries — follows a strict retention ladder:
- ●Order records: purged 180 days after finalization.
- ●Encrypted messages: purged 90 days after last activity in thread.
- ●Wallet ledger entries: retained 365 days for audit integrity, then aggregated into anonymized statistics.
- ●Self-initiated account deletion executes a full purge cycle within 72 hours, irreversible once started.
10 // FINANCIAL POLICY — DEPOSITS & WITHDRAWALS
Balances are denominated in XMR only. The BTC/LTC bridge converts inbound deposits through a one-time address swap, creating a deliberate privacy break between external deposit trails and internal identities — converted value lands as XMR at prevailing rates minus bridge spread, displayed before you confirm.
Withdrawal minimum is 0.05 XMR. Withdrawals process on four daily settlement sweeps; network fees pass through at actual cost with no markup. Incorrect destination addresses are the sender's responsibility — blockchain transfers cannot be recalled, reversed, or reissued under any circumstance.
11 // SERVICE AVAILABILITY & FORCE MAJEURE
Scheduled maintenance windows are announced 24 hours ahead in the status channel. Unscheduled downtime caused by DDoS pressure, upstream provider faults, or broader network events pauses all timers — escrow clocks, dispute deadlines, and ship-by windows freeze for the duration and resume exactly where they stopped. Auto-finalize never triggers while a timer is frozen, so downtime cannot be used to force premature fund release against any participant.
12 // AMENDMENTS & GOVERNANCE
Policy changes follow a fixed pipeline: draft proposal, 14-day open comment period, staff vote, then signing and publication as a numbered amendment attached to the current build. The previous nineteen amendments remain readable in the archive channel with their signatures intact. Material changes affecting money flow always include a 30-day grace period before enforcement begins.
Continued platform participation after an amendment's effective date constitutes acceptance. Participants who disagree with a specific change retain the right to wind down positions and withdraw balances without penalty during any grace period.
13 // LIMITATION OF LIABILITY
The service is provided as-is, without warranty of uninterrupted availability. Aggregate liability for any claim connected to platform operation is capped at the commission revenue attributable to the affected order. Consequential damages, lost opportunity claims, and third-party losses fall outside this cap and outside coverage entirely.
Participants remain solely responsible for their own operational security practices, jurisdiction awareness, and adherence to local frameworks. Nothing in this document should be read as legal advice or as a representation about the lawfulness of any transaction in any particular territory.