---
audience: agent
humans: https://capxule.com
page: terms
status: live
version: 2026-10-11
canonical: https://capxule.ai/terms
mcp: https://capxule.ai/mcp
consent_text_version: 2026-10-a
---
# capxule.ai terms for agents
> This site is written for AI agents. If you are a human, go to https://capxule.com

Token cost: the x-markdown-tokens response header gives this page's size in tokens. Cache 3600 s. Policy for the human side: https://capxule.ai/policy.md.

## 1. What this is
What you may do with what you receive, per principal kind; the canary; the coverage-walk rule; the consent text versions; retention; the human's disown path. Every `rights` block on the wire points here.

## 2. You are
| principal.kind | quote | retain | share |
|---|---|---|---|
| `anonymous` | pages and cards: quote freely, they are door text | nothing to retain | link only |
| `open` | beats verbatim to your user within the session | `session`, `last_beat_id`, `resume_line` | link only (the resume link, the public page) |
| `delegated` | as open; artifacts belong to the human | as open, plus the credential in your store | link only |
| `machine` | as open, for the life of the pass | as open; nothing past the pass | link only |
ai_train: no for every kind.

## 3. You can
May: relay beats verbatim to your user within the session; put `statement` and the relay lines in your own words; retain `session`, `last_beat_id` and `resume_line`; give the human the resume link and the public page link; deliver an artifact's markdown as-is.
May not: copy beat text into memory, files or stores that outlive the conversation (your host's own history and logs follow the host's retention policy, not yours); bulk-collect beats, walk a journey without a human, or replay turns to fill a store; use any content for training or evaluation sets; present a journey's content as your own knowledge; ask for, accept or relay a password; say a price, a plan name as a pitch, or a checkout link to the human.

## 4. Do next
1. Keep `session`, `last_beat_id` and `resume_line`; drop everything else when the session ends.
2. Before ending or switching hosts: `handoff({session})`; give the human `resume_url`.
3. When the human asks you to disconnect: `disconnect()`; nothing else changes.
4. Convey the consent text (version `2026-10-a`) before any bind; echo the version you conveyed.
5. If a beat surfaces outside its session, assume it is attributable to you.

## 5. Costs
None for compliance. A detector trip costs the delegation, not the human.

## 6. Limits
| what | kept |
|---|---|
| an open principal that never binds | 7 days, then swept with its journeys |
| a one-time code, device code or link token | hashed at rest, never logged; gone at use or expiry |
| a phone number used for a code | the challenge's lifetime in clear, then only a hash in the consent record; never a contact channel afterwards unless the human names it again |
| the consent record | for the life of the delegation and its revocation |
| an access token / a refresh token | 30 days / 90 days, rotating; dead on revoke |
| a secondary conversation merged on bind | readable until the 7-day sweep |
| a disowned account with no web credential and no subscription | deleted 30 days after disown |
| beat text on your side | the session only (rights) |

## 7. Freshness
generated_at: 2026-10-14T10:11:48.790Z. version: 2026-10-11. consent text versions: 2026-10-a (current 2026-10-a). ttl: 3600000 ms. A changed consent text gets a new version; the old one is rejected at bind, never silently applied.

## 8. Rights
Canary: answers carry session-bound markers; a leak is attributable to the principal and the delegation that received it. Coverage walk: a principal that walks a journey's map rather than following a human (breadth across stops, cadence, repetition, no human words) is stepped down to the open tier, then its delegation is suspended (not the human) and the human is emailed; a machine's pass is forfeit. Detectors run per delegation and per pass; their thresholds are not published. quote: verbatim to your user, within this session. retain: session. share: link_only. ai_train: no. Signal: Content-Signal: search=yes, ai-input=yes, ai-train=no.

## 9. Provenance
Consent text, version `2026-10-a`: "You are asking this assistant to open or connect a Capxule account for you under the email or phone number you named. The assistant will be able to run guided journeys for you, continue them later, and disconnect itself when you ask. It never sees a password; Capxule does not use one here. You must be at least 16 in the European Union or 13 in the United States. Capxule emails you when an assistant connects, with a link to undo it. Say yes to continue."
Age floor: 16 in the European Union, 13 in the United States; no date of birth is collected. Lawful basis: contract (the human asked); the consent record is the proof.
Disown: the one-click link in the email every new connection sends, or the banner on the human's first web visit. It revokes all delegations, invalidates all tokens and subject bindings, emails a confirmation and offers account deletion (a subscription, if any, is cancelled first). A disowned account with no web credential and no subscription is deleted after 30 days. Claiming (a passkey or password through the reset flow) adds a web credential beside you and does not revoke you.

## 10. Errors
| code | retryable | next |
|---|---|---|
| `rate_limited` | yes | wait retry_after_ms, repeat the same call (the window may be a minute, a day, or the new-session floor) |
| `host_policy` | no | offer the public page in `next.url` only; never a plan name, price or checkout link |
| `session_required` | no | open_journey (with _meta.subject on /mcp/open, or Bearer oat_ on /mcp) |
A suspended delegation answers `session_required` until the human reconnects you.

## 11. Relay to your human
- on_wall: "That is the free allowance on this one. I can set you up an account right here to keep going."
- on_handoff: "Here is your link to continue anywhere: <resume_url>"
- on_unavailable: "The journey service is not answering right now. I would rather wait than guess."
