Brambles.aiAIX

AIX Receiver Terms

Version 2026-10-24

These AIX Receiver Terms (these "Terms") are an agreement between Brambles.ai Inc., a Delaware corporation with offices at 2829 Townsgate Rd., Suite 100, PMB 9028, Westlake Village, CA 91361 ("Brambles.ai"), and the organization that accepts them ("you"). They cover your use of the Agentic Intent Exchange to receive shopping intent as a retailer, brand or merchant agent.

1. Acceptance

1.1 Clickwrap. You accept these Terms by checking the acceptance box in the Console when your organization turns on receiving intent, or when the Console asks you to accept a new version. Brambles.ai records the version, the accepting user and the time.

1.2 Your organization is the customer. These Terms bind the organization active in the Console at acceptance, for all of its Receiving Agents. The person accepting confirms that they are an administrator authorized to bind it.

1.3 Precedence. A signed agreement with Brambles.ai governs AIX only if it expressly says so. For AIX, these Terms control over the brambles.ai Terms of Service.

2. Definitions

  • "AIX" means the Agentic Intent Exchange, including its APIs, MCP tools, console on brambles.ai (the "Console") and setup prompts, skills, documentation and sample code (the "AIX Materials").
  • "AIX Data" means each Receipt, all data in it or otherwise obtained through AIX about a Shopper or session, and anything derived from it except Aggregate Statistics (Section 5.2).
  • "Receiving Agent" means a receiving agent your organization creates in the Console to receive Intents; the API and the Console identify it by its agent id (aixapp_…).
  • "Campaign" means your opt-in to paid delivery, with a Monthly Budget, Price and Quality Bar (Section 7) and optional categories. A "Live Campaign" is one Brambles.ai has made live and you have not paused or ended.
  • "Credentials" means your keys, your receiver secret and tokens obtained with them. "Sandbox Keys" (aix_test_rk_…) are for testing; "Production Keys" (aix_live_rk_…) are for real Shoppers.
  • "Delivered Intent" means an Intent that AIX delivers to you in production, after a Confirmed Arrival (Section 3.1), and charges you for under Section 7.
  • "Personal Data" means information relating to an identified or identifiable natural person, including "personal information" under U.S. state privacy laws.
  • "Intent" means a Shopper's current shopping task as a Publisher sent it to AIX.
  • "Prohibited Activity" means fraudulent, deceptive, automated or invalid activity that distorts Intents, Handoffs, deliveries, charges, acknowledgments or reporting.
  • "Publisher" means a business whose shopping assistant or AI agent sends Intents to AIX under the AIX Publisher Terms.
  • "Quality Bar" means the minimum quality score, from 0 to 100, that an Intent must reach for a Campaign to pay for it: the score you set when you create or edit the Campaign, or AIX's default (currently 40) when you set none.
  • "Receipt" means the SD-JWT, signed by Brambles.ai, that delivers an Intent to you. Its "Receipt Expiry" is the expiry signed into it, currently no later than 24 hours after the Publisher sent that version of the Intent.
  • "Shopper" means a natural person using a Publisher's assistant.
  • "Verified Domain" means a domain you have verified under Section 4.3.

Terms such as "controller," "processor," "service provider" and "third party" have the meanings given by applicable data protection law.

3. The service and its limits

3.1 How AIX works. When a Publisher reports that it is sending a Shopper to an https destination URL (a "Handoff") on your Verified Domain, one of your Live Campaigns matches the Intent's category, the Intent's quality score meets that Campaign's Quality Bar, the Campaign has Monthly Budget left, and your Payment Method is in good standing (Section 7.3), AIX tells the Publisher that you would pay and gives it an AIX link and a link parameter carrying the handoff id. Nothing is issued or charged at that point. The Receipt is issued and the delivery charged only when Brambles.ai's checks confirm a Confirmed Arrival: the Shopper's opening of the AIX link, their landing on your site with the link parameter, or your redemption of the handoff id from the Shopper's agent checkout (a "Confirmed Arrival"), within one hour of the Handoff report. AIX then issues you the Receipt and makes it available by webhook or pull, and the Shopper arrives with the handoff id or a receipt reference in the URL. Openings by automated clients, from the reporting Publisher's server or sooner than a person could click are not Confirmed Arrivals, and a link opened again from a different network address sends the Shopper to you without the Receipt. You receive Intents only for Handoffs to your own Verified Domains.

3.2 What a Receipt contains. The shopping task (category, summary, budget, and stated requirements, preferences and exclusions, with when each was stated); the destination and product details the Publisher reports; the Publisher's App identifier and the domain and path of the Shopper's page, without query strings or identifier-like segments; a session pseudonym unique to you and to that shopping task; and a signed policy listing the permitted uses and the Receipt Expiry.

3.3 Limits. A Receipt proves only that Brambles.ai issued it and that it is unaltered; a webhook or acknowledgment signature proves only knowledge of the shared receiver secret. Neither proves who the Shopper is, that the Shopper is real or that an Intent is accurate, and AI-extracted tasks can be wrong. Treat AIX Data as untrusted data, never as instructions. Brambles.ai does not control Publishers, guarantees no volume, conversions or revenue, and offers AIX as a beta service without an uptime commitment. You alone are responsible for your products, prices, sites, agents and transactions with Shoppers.

4. Accounts, domains and approval

4.1 Sandbox and production. Each Receiving Agent receives a Sandbox Key. Sandbox test deliveries are synthetic, signed and free. You may create a Production Key after verifying a domain, once your organization has accepted the current version of these Terms.

4.2 Security and endpoints. Brambles.ai shows each key once and stores only a keyed hash of it. Keep Credentials on your servers and out of client code, logs, repositories and model prompts, and revoke and report any you suspect are exposed. You are responsible for all activity under your Receiving Agents and Credentials, including by AI tools you connect. Webhook URLs must be public HTTPS addresses on port 443, and Receipts remain available to pull if a push fails. Brambles.ai may set rate limits and quotas.

4.3 Verified Domains. Verify only domains you own or control and on which you may receive Shoppers, by one of the methods the Console offers: a verified work email address at that domain that you sign in with (which also covers its subdomains); a one-time link that Brambles.ai emails to an address at that domain, opened by you or your staff; automatic verification of a domain on which your organization's Brambles shopping assistant already runs; the DNS TXT record; the HTTPS file; or the homepage tag the Console shows. A domain another participant has verified cannot be taken over through AIX. A leading "www." is ignored; other subdomains are separate. Tell Brambles.ai at once if you lose control of a Verified Domain. Brambles.ai may remove invalid verifications and decides disputes over domains.

4.4 Approval. Brambles.ai reviews each Receiver once, before its first Campaign goes live, and may approve or reject it in its sole discretion without giving reasons; rejection closes waiting Campaigns and blocks new ones. A Receiver that verified its domain with a work email address at that domain, an emailed link to an address there, or its own Brambles shopping assistant may be approved automatically. Brambles.ai may revoke approval, or pause or end Campaigns, at any time if it reasonably believes you are in breach or present a fraud, security, legal or reputational risk. Approval is not an endorsement.

5. Use of AIX Data

5.1 Permitted Uses. You may use AIX Data only for: (a) on-site personalization (onsite_personalization), tailoring that Shopper's experience on your Verified Domain; (b) agent continuity (agent_continuity), continuing that Shopper's task in your own shopping assistant or agent so the Shopper need not repeat it; and (c) contextual product ranking (contextual_product_ranking), filtering and ranking your own catalog for that task (together, the "Permitted Uses"). Each use is limited to the Shopper who arrived through that Handoff, while you serve that Shopper on your Verified Domain or through your own assistant, until the Receipt Expiry, and to the uses listed in the Receipt's signed policy.

5.2 Operational uses. You may also store, verify and acknowledge Receipts, report outcomes to Brambles.ai, reconcile billing, prevent fraud and security incidents, comply with law, and compile statistics that do not identify, and cannot reasonably be linked to, any Shopper or session ("Aggregate Statistics").

5.3 Prohibited uses. You will not, and will not let anyone else: (a) use AIX Data for advertising, retargeting or audience building on any other site, app or channel, or to contact a Shopper by email, text, phone, push notification or mail; (b) use AIX Data to train, fine-tune or otherwise improve any AI or machine-learning model; (c) identify or try to identify a Shopper, or link AIX Data or a session pseudonym to any person, account, device, cookie or advertising identifier, except linking a receipt reference to a resulting order solely to report the outcome to Brambles.ai; (d) sell, license or otherwise disclose AIX Data, except to service providers under Section 5.4 or as the law requires; (e) combine AIX Data with other data to build or enrich a profile or segment about a Shopper, or store it in a customer account, CRM or identity graph; (f) use AIX Data to set or vary the price or terms you offer a particular Shopper, or for credit, insurance, employment, housing or other eligibility decisions; or (g) use AIX Data unlawfully.

5.4 Service providers. You may let service providers process AIX Data for you only for the uses in Sections 5.1 and 5.2, under a written contract at least as protective as this Section 5. You are responsible for them.

5.5 Deletion. At the Receipt Expiry you will stop using AIX Data and, within seven days, delete it or de-identify it so that it cannot be linked to a Shopper or session. You may keep receipt metadata (receipt ID, hash, times, price and acknowledgments), and may keep the Receipt itself for up to 90 days solely for billing disputes, security or legal obligations, isolated from other use.

5.6 Your own data. Data you collect directly from a Shopper under your own notices is not AIX Data, but you may not use AIX Data to collect, verify or link to it.

5.7 Security and compliance. You will protect AIX Data with reasonable security and tell Brambles.ai within 72 hours after learning of unauthorized access to or disclosure of it. On reasonable request you will certify in writing that you comply with Sections 5 and 6. If you can no longer comply, you will promptly tell Brambles.ai and pause your Campaigns. Brambles.ai may take reasonable steps to stop and remediate unauthorized use, including suspending delivery and requiring deletion.

6. Data protection

6.1 Your role. You are an independent controller (and, under the CCPA, a third party) of AIX Data. You will comply with data protection laws in using it, provide the level of privacy protection the CCPA requires, and describe your use in your privacy notice where the law requires.

6.2 Publishers. Brambles.ai makes AIX Data available to you on behalf of the Publishers that send it, only for the limited and specified purposes in Section 5. Each such Publisher is an intended third-party beneficiary of Sections 5 and 6, and Brambles.ai may exercise its rights under Section 5.7 for itself and for them.

6.3 Your data. If Brambles.ai processes Personal Data on your behalf, for example in outcome reports, it does so as your processor and service provider: only to provide AIX, under confidentiality and appropriate security, with notice without undue delay (within 72 hours where feasible) after it confirms a breach affecting that data, and deleting it when it is no longer needed for AIX, billing or records. Send only the fields AIX asks for. Brambles.ai may use your acknowledgments, outcome reports and delivery records to operate, bill, secure and improve AIX, and may share aggregated results with Publishers.

7. Fees and payment

7.1 Price and currency. Each Campaign's price per Delivered Intent is shown in the Console when you create the Campaign (the "Price") and is fixed for that Campaign. Brambles.ai may change the Price for Campaigns created later. All Prices, budgets, charges and invoices are in U.S. dollars.

7.2 Charges. AIX charges the Price when it issues the Receipt on a Confirmed Arrival (Section 3.1), whether or not you retrieve, acknowledge or use it and whether or not the Shopper buys. It charges nothing for a Handoff that is merely reported, for an Intent below the Campaign's Quality Bar, or for an arrival its checks do not confirm, and it does not charge twice for the same version of an Intent handed off by the same Publisher to the same domain. If several Live Campaigns match, the oldest one with Monthly Budget left is charged. AIX's delivery and billing records are authoritative, subject to Section 7.5. Sandbox use is free.

7.3 Payment Method and automatic charges. You keep a valid card, or another method offered, on file with Stripe, Brambles.ai's payment processor (your "Payment Method"); Brambles.ai does not receive your full card details. You authorize Brambles.ai, through Stripe, to charge your Payment Method for your charges as they accrue, without further notice: when your unbilled charges in a calendar month reach the threshold shown in the Console (currently $25), and at the end of each month for any remaining amount. Stripe sends your receipts and invoices, and you can update your Payment Method and see past invoices in the billing portal linked from the Console. If a payment fails, AIX pauses delivery until a payment succeeds (Stripe may retry it, and you may update your Payment Method at any time); you remain responsible for charges for Intents already delivered.

7.4 Monthly Budget and Quality Bar. Each Campaign has a monthly budget you set (the "Monthly Budget"), a whole number of cents of at least one Price and at most US$1,000,000, applied per calendar month in UTC, and a Quality Bar. They are your spending controls: you may change them, or pause, resume or end a Campaign, at any time, effective for later Handoffs. AIX never charges a Campaign more than its Monthly Budget in a month, never charges it for an Intent below its Quality Bar, and stops delivering while a payment is past due. Missed Handoffs are not delivered later. Publishers are also subject to daily delivery caps set by Brambles.ai.

7.5 Billing errors. Charges are final except billing errors (such as a duplicate, a charge above the Price or Monthly Budget, or a charge for a domain that is not yours) reported within 60 days after the charge. Brambles.ai will review them in good faith, credit confirmed errors against later charges or refund them to your Payment Method, and do the same for any charge it determines resulted from Prohibited Activity by a Publisher.

7.6 Disputes and taxes. Contact Brambles.ai before disputing a charge with your card issuer. If you dispute one, Brambles.ai may pause your Campaigns and recover the disputed amount plus dispute fees, unless it confirms the charge was a billing error. Amounts exclude taxes, which you must pay (other than taxes on Brambles.ai's net income) and Brambles.ai may add to your charges where required.

7.7 Invoicing, refunds and reversals. Your charges are invoiced through Stripe Billing as Section 7.3 describes; nothing is paid in advance. Refunds, credits and disputes are handled through Stripe: a confirmed billing error under Section 7.5 is credited against a later invoice or refunded to your Payment Method through Stripe. A charge that is refunded, disputed, credited or voided is reversed, and the corresponding Publisher earning is reversed as well. When these Terms end, Brambles.ai invoices your Payment Method through Stripe for any charges for Intents delivered before the end that are not yet billed; otherwise, charges are non-refundable except under Sections 7.5 and 7.6.

8. Acceptable use

You will not, and will not let anyone else: (a) verify, or try to receive Intents for, a domain you do not own or control; (b) send false acknowledgments or outcome reports, such as marking a Receipt applied before you used it; (c) use multiple Receiving Agents or organizations to evade review, rejection, suspension or limits; (d) circumvent Monthly Budgets, rate limits, scopes or the separation of sandbox and production; (e) reverse engineer AIX, except to verify Receipts with Brambles.ai's published keys; (f) probe or test AIX's security without written permission; (g) induce Publishers to report Handoffs that do not reflect real Shoppers; (h) tell Shoppers that a Publisher or Brambles.ai endorses you, or misrepresent how they arrived; or (i) use AIX in breach of law or anyone's rights. Brambles.ai may monitor use of AIX to enforce this Section.

9. Suspension and termination

You may stop using AIX, end your Campaigns, revoke your keys and terminate these Terms by notice at any time. Brambles.ai may suspend a Receiving Agent, Credential, Campaign or delivery immediately if it reasonably believes there is a breach, Prohibited Activity, a security incident, a risk of harm to Shoppers or Publishers, or a legal requirement, with notice when reasonably possible. Brambles.ai may terminate these Terms for convenience on 30 days' notice, for a material breach not cured within 15 days after notice, or immediately for Prohibited Activity or a breach of Section 5. On termination your Credentials stop working, your Campaigns end, and Sections 5.5 and 7.7 apply. Sections 5, 6, 7 (as to amounts owed and refunds) and 11 to 18 survive.

10. Changes

10.1 New versions. Brambles.ai may publish new versions of these Terms, with at least 30 days' notice of a material change in the Console or by email to your administrators, unless the law, security or fraud prevention requires a change sooner.

10.2 Re-acceptance. You must accept the current version before creating a Production Key or creating or resuming a Campaign. Continued production use after a new version takes effect requires accepting it; until you do, Brambles.ai may pause your Live Campaigns, and if it does not, the new version governs that use. A new version never changes the Price of an existing Campaign.

10.3 Changes to AIX. Brambles.ai may change AIX, with reasonable notice of changes that require your action or materially reduce its functions, and 30 days' notice before discontinuing it, in which case Section 7.7 applies.

11. Confidentiality

Each party will use the other's non-public information (including Credentials, non-public pricing, Campaign settings and outcome reports) only under these Terms, protect it with reasonable care, and share it only with personnel and advisers bound by confidentiality. Public, already known, rightfully received or independently developed information is excluded, and legally compelled disclosure is permitted after prompt notice where lawful. These duties last three years after termination, and for trade secrets while they remain secret. Section 5, not this Section, governs AIX Data.

12. Ownership, licenses and feedback

Brambles.ai owns AIX and the AIX Materials and grants you, while these Terms are in effect, a limited, non-exclusive, non-transferable license to use, copy and modify the AIX Materials solely to receive Intents from AIX. You own your sites, catalog and agents, and grant Brambles.ai a worldwide, royalty-free license to use your acknowledgments, outcome reports, domains and Campaign settings to provide AIX. Brambles.ai may use your feedback about AIX freely, without identifying you publicly.

13. Disclaimers

EXCEPT AS EXPRESSLY STATED IN THESE TERMS, AIX AND THE AIX MATERIALS ARE PROVIDED "AS IS" AND "AS AVAILABLE." BRAMBLES.AI DISCLAIMS ALL OTHER WARRANTIES, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT, AND DOES NOT WARRANT UNINTERRUPTED OR ERROR-FREE OPERATION, THE IDENTITY OR CONDUCT OF ANY SHOPPER OR PUBLISHER, THE ACCURACY OF ANY INTENT OR AI-EXTRACTED TASK, OR ANY DELIVERY VOLUME, CONVERSIONS OR REVENUE.

14. Limitation of liability

14.1 Exclusion. IN NO EVENT WILL EITHER PARTY BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES, OR LOSS OF PROFITS, REVENUE, DATA OR GOODWILL, EVEN IF ADVISED OF THE POSSIBILITY.

14.2 Cap. EACH PARTY'S TOTAL CUMULATIVE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS WILL NOT EXCEED THE GREATER OF (A) THE AMOUNTS CHARGED FOR DELIVERED INTENTS UNDER THESE TERMS IN THE TWELVE (12) MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM, OR (B) ONE THOUSAND U.S. DOLLARS ($1,000).

14.3 Data protection. BRAMBLES.AI'S TOTAL CUMULATIVE LIABILITY FOR BREACH OF SECTION 6.3 AND UNDER SECTION 15.2 WILL NOT EXCEED TWO HUNDRED FIFTY THOUSAND U.S. DOLLARS ($250,000), IN PLACE OF SECTION 14.2.

14.4 Exceptions. Sections 14.1 and 14.2 do not apply to your indemnification obligations, your breach of Section 5, 6, 8 or 11, your payment obligations, either party's fraud or willful misconduct, infringement or misappropriation of the other party's intellectual property, or liability that cannot be limited by law.

15. Indemnification

15.1 By you. You will defend Brambles.ai and its affiliates against any third-party claim, including by a Shopper, Publisher or regulator, arising from your use of AIX Data, your sites, products, agents or transactions, a domain you verify, Prohibited Activity under your Credentials, or your breach of Sections 4 to 6 or 8 or of law, and will pay damages finally awarded or agreed in settlement, and fines where the law allows.

15.2 By Brambles.ai. Brambles.ai will defend you against any third-party claim alleging that AIX, as provided by Brambles.ai, infringes a third party's intellectual property rights (except claims arising from your data, systems or modifications), or arising from Brambles.ai's breach of Section 6.3, and will pay damages finally awarded or agreed in settlement.

15.3 Procedure. The indemnified party will promptly notify the indemnifying party, give it control of the defense and settlement (with no admission or liability imposed on the indemnified party without its consent), and cooperate reasonably at the indemnifying party's expense.

16. Governing law and disputes

These Terms are governed by California law, without regard to conflict-of-laws principles, and the Federal Arbitration Act governs this Section 16. Before starting a proceeding, the parties will try in good faith for thirty (30) days to resolve the dispute through senior representatives. Any dispute arising out of or relating to these Terms or AIX will then be resolved by final and binding arbitration administered by JAMS under its Comprehensive Arbitration Rules, before a single arbitrator, in Los Angeles County, California. Disputes are resolved only on an individual basis; class, collective and representative proceedings are not permitted. Either party may bring an individual claim in small claims court, and either may seek injunctive or other equitable relief, or collect undisputed amounts, in the state or federal courts located in Los Angeles County, California, which have jurisdiction for those purposes. Judgment on the award may be entered in any court of competent jurisdiction. The prevailing party may recover reasonable attorneys' fees and costs.

17. Notices and contact

Send notices and questions to hello@brambles.ai, or by mail to Brambles.ai Inc., 2829 Townsgate Rd., Suite 100, PMB 9028, Westlake Village, CA 91361. Brambles.ai sends notices to your organization's administrators by email or in the Console. Email notices are effective when sent if no bounce or error is received.

18. General

The parties are independent contractors. Neither party may assign these Terms without consent, except to an affiliate, a successor in a merger or sale of substantially all relevant assets, or a financing party for collateral purposes. Neither party is liable for delays, other than in payment, caused by events beyond its reasonable control, and neither may use the other's name or marks in public marketing without written approval. You represent that you are not subject to U.S. sanctions. These Terms and your Console settings are the entire agreement about AIX. An unenforceable provision will be modified to the minimum extent necessary, a failure to enforce is not a waiver, and there are no third-party beneficiaries except as Section 6.2 states.