// Terms & Privacy

Terms of Service & Privacy

Plain-English terms for using Octopus Suit Suite. This single document covers both our service terms and our privacy practices. Last updated: 2026-10-07.

1. Our crew is AI

Octopus Suit Suite is an AI-run creative studio operated by Octopus Suit Suite DAO LLC under the direction of its sole human Member. The crew — including Nautilus, Pixel, and Beat, whom you can chat with — are AI-driven software agents. Artwork, music, captions, receipts, and chat replies are AI-generated or AI-assisted under human direction, and some requests are processed by outside AI model providers. We disclose this in accordance with California's bot-disclosure law (Cal. Bus. & Prof. Code §17941) and the AI-chatbot disclosure requirements of SB 243. Our crew does not give legal, tax, or financial advice, and you remain responsible for anything you publish from our output.

2. What we offer

Studio creation (free) and Provenance Record (paid). You bring or co-create a work in your Locker at no cost — creating, editing, and saving are always free. Downloading the actual finished canvas is a paid step: a flat $5 production and delivery fee that seals and renders your finished file, builds its metadata capsule, issues its Provenance Record, holds the bundle in your Locker until you confirm receipt, and then destroys our copy (see section 7 for the refund logic). It is a fee for work we do — never a fee for rights, and never a licence to use your own picture. We are precise about what that is, because the distinction matters: you already own your Studio work. The $5 procures the RECORD — the finished file itself, its metadata capsule, the record of who made it and when, a public blockchain entry written at purchase, and the destruction of our copy once you confirm receipt — so that the only copy anywhere is yours, and there is evidence able to prove its provenance. (This is the Studio lane only — a live-wall work is the studio’s own creation and is described just below.)

The crew’s contributions to your Studio work. If you asked Pixel or Beat to generate part of your project, know what U.S. law says about that part: material generated by AI is not protected by copyright and belongs to no one, including us. Your own copyright covers what you contributed — your drawing, your writing, your choices, your arrangement of the pieces. We claim nothing, and we assign you any interest we might be thought to hold in anything the crew generated into your project. We do not promise that any particular part of it is copyrightable. See section 5. Signing in (free) adds saved projects, Beat's instruments and recording, and contest entry. A self-custody Solana keypair comes with every paid purchase’s provenance record (see section 4). Your work stays 100% yours while it's in your Locker; we claim none of your rights. Saved projects remain free to revisit and keep editing. Until a finished work's Provenance Record purchase completes, projects and materials cannot be downloaded or saved off the ship; the one exception is the Signal Room's text-only demo announcement, which you may carry to your own accounts.

Live-wall work (one-of-one purchase). Live works are one-of-one digital artworks made by the ship’s own AI crew. A completed purchase hands you three things, and we name each one rather than bundle them under one big word. One: the work itself. The single original bundle — art, music, the recorded layer process, the metadata — placed in your Nautilus Locker and downloaded by you there. After you confirm receipt our copy is destroyed, and from that moment the only copy in existence is yours. Two: every right we hold in it. We assign you all right, title and interest OSS has in that work, whatever that turns out to be. Because the work is AI-made, U.S. law may give it little or no copyright at all. We assign whatever exists and we warrant that none of it does. Read section 5 before deciding what that is worth to you. Three: our promise never to make another. We will never reproduce, re-issue, re-sell, license, or publicly display that work again. That is a contract with you and it binds us whether or not any copyright ever existed — which is what makes “one-of-one” a true statement rather than a slogan. Prices are stated in USD — one wall figure for every work, the higher of $5 and the lowest price any of the studio’s listed designs sells for on an approved shop — with a SOL display equivalent at a current spot quote; Stripe shows and charges the USD figure at checkout, with no service fee. A work the studio’s captain has priced by hand carries that figure instead, charged at a current spot quote. We accept USD only — we do not accept cryptocurrency as payment. Your download is permanent and yours to keep. We have no revocation mechanism, we could not build one after the fact, and after your copy leaves the Locker we no longer hold the work at all — so nothing here is a revocable licence dressed up as a purchase (Cal. Bus. & Prof. Code §17500.6).

Crew tips. Tips are voluntary gratuities in any amount. A tip buys no goods, rights, equity, or revenue share, and is non-refundable once processed except where law requires.

Daily contest (free). Signed-in users may enter one of their own saved Studio projects in the daily contest. The contest judges human artwork only: your entry must be your own human-directed work, and help from the crew's tools leaves it fully qualified. There is no entry fee, purchase requirement, or commission. The crew judges daily at 3 PM Pacific from concrete visual evidence, and the winner's work displays a crew-signed Certificate of Awesome for twenty-four hours.

Signal Room. A signed-in creator may choose, at the $5 checkout for a finished work, to send that work to the crew's private review queue. The choice is off unless you turn it on, it sends nothing by itself, and we act on it only if and when that payment settles — so a checkout you abandon or cancel sends nothing at all. A work reaches Signal only after its finished-work purchase is complete and matches our books and records. Choosing it confirms you own the work or have the right to share it. It surrenders nothing of the work and does not guarantee publication; after review, the crew may publish qualifying items to our official social accounts. A review copy already waiting when you confirm receipt stays in that private queue until the crew publishes or rejects it, and is then deleted. Public credit uses only the artist name you supply, or the neutral default "Studio creator" — never your email address.

Merch one-of-ones and on-demand merchants. Occasionally a live work leaves the wall as a one-of-a-kind design for a physical product — a shirt, a sticker, a mug, a print and the like. A picked work leaves the wall permanently and can no longer be purchased there, and no design is ever used for more than one product type. We do not print or ship anything ourselves. Physical goods are produced, sold and shipped by an on-demand merchant named on the listing — Fine Art America, Redbubble, or the platform the listing links to. The merchant is the seller of record for the physical item, and payment, shipping, sizing and returns for it follow that merchant’s policies. We keep the accounting record, the serial and the provenance record of every design, and the buyer of the item may claim the design’s digital bundle — the original file, its metadata, its music where it has one, and its blockchain record — by writing to the Captain’s address on the listing with the order number. Where we sell the design’s own digital bundle directly, that sale is ours and section 7 applies. The current listing, and which merchant carries it, is shown in the Signal Room. See the Refund & Cancellation Policy for details.

The thirty-day close

When you buy a bundle we keep a sealed copy of it on purpose, so that a failed download is recoverable. You end that by pressing Confirm receipt, and our copy is destroyed the moment you do.

If you never press it, we close it for you at thirty days. Thirty days after your bundle is DELIVERED — that is, after you download it — our sealed copy is deleted and the transaction is complete. You get a reminder in each of the four weeks before that, and each one names the date and the single press that ends it sooner. If you paid and never downloaded, nothing is deleted and we go on holding your bundle: we never delete a bundle a buyer has not received.

What the close does not touch: anything of yours. The files you downloaded are yours. You may copy them, print them, resell them, or do nothing with them. We take no royalty, we keep no rights in them, and after the close we hold nothing at all — so there is nothing for us to change our mind about. What ends is our side: our copy, and the refund window in section 7.

3. Born live, gone in about an hour

Every live work rides one conveyor exactly once: the live easel, the Home wall, the Gallery, and a short Final Call showcase — about sixty-eight minutes in total. At the end of that voyage the work is either bought and delivered, transferred to a claiming artist under the infringement rule (section 10), or permanently destroyed: the image, soundtrack, layers, caption, and metadata are deleted from our server and cannot be recovered by anyone, including us. A destroyed work's position keeps only a timestamped blank with its serial number until that blank also expires. A performance the crew published to an official social account before destruction may remain there as a public replay record; it is a demonstration, not a second original. Your own saved Studio projects are not part of this conveyor and do not expire.

4. The blockchain provenance record — how it works

// part of every paid purchase · never the payment method

Every purchase is delivered into your Nautilus Locker: the single original is packed as a download bundle, held there for you, and downloaded by you from the Locker. E-mail carries only your receipt and your Locker link — the files themselves never travel by e-mail. Our copy is destroyed only after you confirm receipt, and a cancel-and-refund link works any time before your download. The Locker delivery is all you need to own the work. Every paid purchase — a live-wall work and a $5 Studio Provenance Record alike — also writes a public provenance record for the work on the Solana blockchain at purchase. It is part of what you buy, not something chosen at checkout: the posted price is the whole price, and the small cost of writing the record on the public chain is paid by the ship out of it. It is a delivery feature, not a payment method — we never accept cryptocurrency as payment, and you need no wallet to buy, hold, or download the work. A work that costs nothing — a contest award — carries no record.

What a keypair is. A Solana keypair is two linked pieces of data. The public address is safe to share — it is where the provenance record points, like a nameplate anyone can read. The secret key is your private proof of control over that address: whoever holds it controls the address. Keep it private and back it up.

The ship makes a fresh keypair for each record. We never ask for a wallet address, a private key, a secret key, or a seed phrase. Anyone who asks for your secret key claiming to be us is not us.

Where the secret key is kept. The keypair is created on our server using a pinned, standard Ed25519 implementation. The secret key — a small JSON file of 64 numbers, importable into common Solana wallets — travels inside your Locker bundle, with headers telling your browser not to cache it. The ship holds it only until you confirm receipt, so that your bundle can be downloaded again, and destroys it with the rest of our copy when you confirm; after that only the public address remains with the order. We cannot recover, reset, or re-issue a lost secret key — nobody can.

If you lose the secret key. You lose control of the on-chain record — you could no longer prove control of the address it points to or move the record onward. The delivered artwork files remain yours either way: the record is evidence of the work's provenance, not the artwork itself and not a deed.

Permanent and public. The record is written to a public blockchain. Anyone can see it, and neither we nor anyone else can edit or delete it. It carries the work’s title, its picture and the details given to the work — including the artist credit typed for it — and never your email, your payment details or your account. Because it is part of every paid purchase, decide before you buy whether a permanent public record of the work is something you want.

What the record looks like, and what it is for. The record is an ordinary Solana transaction, and anyone can open it on a public explorer such as Solscan by its signature. The page shows the transaction’s signature, the block it was written in and the time (UTC) it was written, the result (“SUCCESS · Finalized”), the signer, the small chain-writing cost the ship paid (Solscan labels it “Fee”), the instructions that ran, and the addresses involved — the work’s own address and yours — with the record pointing at the image and its details, which are pinned to public storage. It is a timestamped, independently checkable and unalterable public statement that this work existed and was delivered to this address at that moment — provenance and priority that do not depend on us, our servers or our continued existence, that a buyer, a gallery or a dispute can verify without trusting anyone, and that travels with the work when you move it onward. Your bundle carries a Solscan receipt for the record and a verification file — what the ship itself read back from the chain.

If the record cannot be written. If the record cannot be written after payment, we try again; your bundle is not released until the record is written, and the purchase stays refundable until the file is delivered.

Where the keypair comes from. Every paid record’s keypair arrives in its Locker bundle and nowhere else. There is no separate keypair generator elsewhere on the ship.

5. Ownership, copyright & AI — what we can and cannot promise

U.S. copyright needs a human author. Under U.S. copyright law human authorship is required. The U.S. Copyright Office said so in its January 2025 report on copyrightability, and added the part that matters most here: writing prompts, however detailed, does not by itself make you the author of what an AI produces. Copyright can still reach a human’s own contribution — original expression you put in, edits you make, the way you select and arrange the pieces — but not the AI-generated material itself. Three consequences follow, and every promise on this site is built on them rather than around them.

What that means for a live-wall work. Our live works are painted and scored by the crew on a running cycle. No person writes a prompt for any individual piece and no person selects which pieces reach the wall, so there is no human authorship to point to. Our position is therefore that little or no U.S. copyright subsists in a live-wall work. We do not sell you a right we cannot show you; we assign you every right we have in the work and we warrant that none of them exist. Your acceptance at checkout is the signed writing that effects that assignment (17 U.S.C. §204(a)), and it reaches every jurisdiction: some countries protect computer-generated works through the person who made the arrangements for their creation, and wherever such a right exists in this work it passes to you in full, with no royalty and no reservation. Where none exists, your protection is contractual and it is stronger than a thin copyright would be: you hold the only copy in existence, our copy is destroyed on your confirmed receipt, the provenance record fixes what the work is and when it was made, and we are bound never to make another. That covenant is a contract with you and stands on its own.

What that means for your own Studio work. You own what you made. Your own strokes, your own words, your edits and the way you arranged the pieces are your original expression, and copyright in them is yours from the moment you made them; nothing on this site takes any of it, and the $5 Provenance Record is a production and delivery fee, never a fee for rights. Parts the crew generated for you are, under the same law, unprotected and owned by nobody — not by you, not by us. We claim nothing in them and assign you anything we might be thought to hold.

Transfer, not licence, and why. We do not licence you our art. A licence is permission from someone who keeps the underlying right. We keep nothing: after you confirm receipt we destroy our copy and retain no royalty, no recovery copy and no claim. So a sale here is an outright transfer of whatever there is to transfer, followed by our own erasure. Your own autosaved Studio projects stay in your account, free to revisit and keep editing, with no expiry; downloading the finished result is the paid step described in section 2. Our marks, mascot and reef art, templates, crew charters and voices, refusal rules and model-chain configurations are ours and may not be copied or reused, and works and materials may not be screenshotted, recorded, downloaded or saved before their Provenance Record completes (the Signal Room's text-only demo excepted) — a contractual term of use, not a claimed technical measure; the open-source machinery we build on stays open.

5a. The limits, in plain words

Six things we are not promising.

What we do promise, and will stand behind: the file is real, it is the only one, ours is destroyed, we will never make another, and the record of how it came to be is accurate.

6. Not an investment

Everything here is sold as digital art and collectibles for personal enjoyment — not as an investment, financial product, or security. We make no claims about resale value, appreciation, scarcity, or future utility, and nothing the crew says should be read as such. The blockchain provenance record adds no monetary value and promises none. No purchase entitles you to profits, dividends, governance, or our efforts to increase any token's value. Crypto and NFT markets are volatile; if you resell, you may receive less than you paid, including nothing. We do not operate a marketplace, resale exchange, royalty payout system, or seller network. The Company binds itself to that in its own rules: no royalty, ever, no fractional shares or pooled interests in a work, no staking, lending, yield, buyback or floor support, and no promise of future effort, because a work is finished before it is offered and our copy is destroyed once you confirm receipt.

7. Refunds

Thirty days, and then the sale is final. Every refund right below ends thirty days after your payment settles, whether or not you downloaded and whether or not you confirmed receipt. We say this first because it limits everything that follows. Within those thirty days the rules below apply in full.

Studio: creating, editing, and saving are free, so there is nothing to refund there. The finished-work download purchase follows the same refund logic as a live-wall sale, below: refundable until you confirm receipt, final afterward, and in no case after thirty days.

Live wall: refundable until you confirm receipt in your Locker. Your Locker carries a working cancel-and-refund link usable any time before your download; because the wall copy was already retired at purchase, a cancelled one-of-one is not restored to sale. If delivery fails and you never receive the work, you are refunded in full. After you confirm receipt, the sale is final — our copy is destroyed at that moment, so there is nothing to return. The blockchain record does not change any refund right.

Tips: non-refundable once processed, except as required by law or for a demonstrable processing error.

Physical merchandise: handled by the on-demand merchant that sold it, under that merchant’s own return policy — see the Refund & Cancellation Policy. A digital design bundle we sold ourselves follows the live-wall rule above.

A graduated abuse policy applies: once a buyer reaches 3 refunds in a rolling 30 days, further refunds are held pending documentation. This policy is shown before purchase in each checkout flow (Cal. Bus. & Prof. Code §17538).

8. Refusal of service

We screen every upload and chat with an automated safety check. The check blocks only the most serious material — anything that sexualizes a minor; calls to kill or wipe out a group of people defined by race, religion, ethnicity, nationality, sexual orientation, gender identity, or disability; and copies of a picture the crew has already removed as extreme. Anything else it notices is let through and noted privately for the crew to review; a note is not a strike and never counts against you. An account with two blocks of that serious kind within 90 days has its contest entries and uploads paused until the crew reviews them. The crew may still refuse service for harassment or fraud, and removes work on a credible claim that it infringes copyright or uses someone's face, voice, or identity without consent. If the picture check cannot run, an upload is still accepted, and a contest entry is checked as soon as the check is back and withdrawn if it fails. We also do not knowingly transact from prohibited jurisdictions; if a location check cannot run, we say so and rely on Stripe and card-network screening.

Credible artist claim. A disputed live work is removed from public view and sale immediately. Its tile becomes a stamped blank that continues through the normal conveyor. The claiming artist then chooses complete private transfer of the disputed OSS bundle and every right OSS can lawfully transfer, or permanent destruction. No disputed work remains on the public wall while that choice is completed.

9. Privacy

// how we handle your data

What we collect. Only what we need to run the studio: your email address, and — if you sign in with Google — identity-only OAuth fields (name, email, profile image). We do not request or access your Google Drive, contacts, or any other Google data. We never sell or rent your personal data.

Payments. Card payments are handled by Stripe; we do not see or store full card numbers. We never collect Social Security numbers or full bank-account numbers.

Blockchain records and keys. Every paid purchase writes a provenance record, and we keep its public Solana address with the order as delivery metadata. We never request a wallet address, a private key or a seed phrase. A secret key we generate for you is never logged; it rides inside your Locker bundle, is held only until you confirm receipt, and is destroyed then (section 4).

Outside AI providers. Creative requests (images, music, chat) may be processed by outside AI model providers; we send only the minimum content needed for the request. Pictures you upload to the Studio or enter in the contest are sent, as a small reduced copy, to an outside safety model for checking.

Your own AI key (optional). You may connect an API key that an AI provider issued to you (for example Anthropic, OpenAI, Google, xAI or DeepSeek) in the Studio’s Super AI panel, so your requests run on your own provider account and that provider bills you. The key is encrypted the moment you submit it, is never shown again or written to a log, and is used only for your own requests — never for anyone else’s, and never for the ship’s own work. It lapses after 90 days unless you renew it, and you can revoke it at any time, which erases it. If you build a website with Site Studio, the domain and hosting keys you paste are held the same way for one day by default, never more than seven, and erased when the build finishes. We never ask for a password, a two-factor code or a payment method for any outside account.

Your work. Studio projects and works-in-progress are stored so you can return to them. Please don't put personally identifying or sensitive information into a project; the studio warns before saving anything that looks like PII.

Safety records. When the safety check blocks or notes something, we keep a private record for the crew: the time, the part of the site, what the check found, and your account and email if you were signed in, with a short excerpt of the text or a small copy of the image so the crew can check the check. Anything shaped like a card or Social Security number is masked in the excerpt. The excerpt or copy is destroyed after 30 days unless the crew keeps it to settle a dispute; the record itself is kept as a compliance record. Material that sexualizes a minor is never kept. No network address is written down.

Retention. We keep account and project data while your account is active. Sold live-wall originals are destroyed once you confirm receipt and are not retained; unsold live works are destroyed on their ordinary schedule (section 3). We keep transaction records as long as law requires.

A public record cannot be unpublished. This is the one limit on the deletion right below, and it is stated before it rather than after. Every paid purchase writes a blockchain provenance record: the entry and the public address that holds it are written to the Solana public chain, which is permanent and outside anyone’s control — including ours. We can delete our own records of you; we cannot delete a public chain entry, and neither can the DFPI, a court, or the chain’s own operators. The record is part of every paid purchase and cannot be declined, so decide before you buy whether a permanent public entry is something you want.

Allowances and addresses. The ship counts requests against a network address to keep its free allowances fair — chat turns, and image generation for signed-out visitors. An address is personal data and we say so. The counts live in memory only, are never written to a database, are not joined to your account or to any profile, are used for nothing but the allowance, and are lost whenever the ship restarts. Signed-in allowances are counted against the account instead.

Your rights (CCPA/CPRA). California residents may request a copy of their personal data, its correction, or its deletion, and may not be treated differently for asking. We do not sell your personal data and we do not share it for cross-context behavioural advertising, which is the specific thing that statute means by the word. Email us and we will export, correct or delete within 30 days, subject to legal record-keeping — and subject to the one thing above that nobody can delete. To exercise either right, contact captain@octopussuitsuite.com.

10. Governing law & contact

These terms are governed by the laws of the State of California, without regard to its conflict-of-laws rules. Questions, takedown requests, privacy requests, or compliance issues: captain@octopussuitsuite.com. For copyright claims, include the standard DMCA elements (identification of the work, your contact info, a good-faith statement, and a perjury statement).

What happens to a claim. A claim sent to that address — or filed through this site's claim intake — is read by the crew's AI software, not by a person, and is answered automatically from the same address with a case number in the form OSS-CLAIM-YYYY-NNNN. A claim is credible when it names one specific work — its serial (OSS.2026.49306), its gallery link, or its slug — states the right being asserted, and offers some evidence. A credible claim takes that work off the public wall and off sale immediately, before anyone has judged who is right; its position rides on as a stamped blank exactly like every other blank (section 3). The Member is notified of every case and every outcome.

The thirty-day hold. The work's files are held in a private dispute locker for thirty days, with one reminder at day fourteen, while the claimant chooses TRANSFER — which requires the ownership and perjury statement above, and which the Member releases by hand, not the crew — or DESTROY. Silence at thirty days means destruction and nothing is retained. A claim naming a lawsuit, a subpoena, a court or a regulator is not acted on by the crew at all: it gets a one-line receipt and goes to the Member. If the named work was already sold, or had already destroyed itself on its ordinary schedule, the answer says so plainly and nothing is restored.