
Terms of Service
Last Updated: Sep 8, 2025
Preamble: Introduction and Binding Agreement
These Terms of Service (hereinafter referred to as the “Terms” or the “Agreement”) constitute a legally binding agreement between you (referred to herein as “you,” “your,” or “User”) and RockSolid Vaults, a company incorporated under the laws of the Cayman Islands with company number 424521 (referred to herein as the “Company,” “we,” “us,” or “our”).
This Agreement governs your access to and use of the website located https://rocksolid.network, any related mobile or web applications, the underlying smart contracts, application programming interfaces (APIs), and all associated content, functionalities, and services made available by the Company (collectively, the “Services”). The Services provide, among other things, an interface to a protocol comprised of various smart contract-based 'Vaults'. These Vaults are designed to tokenize, control, operate, and execute predefined strategies that may interact with various third-party decentralized finance protocols.
BY ACCESSING, CONNECTING A DIGITAL WALLET TO, DEPOSITING OR WITHDRAWING ASSETS, EXECUTING ANY TRANSACTION, MINTING OR TRANSFERRING RECEIPT TOKENS, OR OTHERWISE INTERACTING WITH THE SERVICES OR THE PROTOCOL IN ANY MANNER, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND UNCONDITIONALLY AGREE TO BE BOUND BY THE ENTIRETY OF THESE TERMS, INCLUDING ANY AND ALL DOCUMENTS, POLICIES, AND RISK DISCLOSURES INCORPORATED HEREIN BY REFERENCE, INCLUDING OUR PRIVACY POLICY, WHICH EXPLAINS HOW WE COLLECT AND USE YOUR INFORMATION, AVAILABLE BELOW. IF YOU DO NOT AGREE TO THESE TERMS, YOU ARE PROHIBITED FROM ACCESSING OR USING THE SERVICES.
For the purpose of clarity and to prevent ambiguity, the following terms shall have the meanings ascribed to them below:
"Vaults": Refers to the specific smart contract-based products accessible through the Services that tokenize, control, operate, and execute automated, predefined Vault strategies with deposited digital assets.
"Strategist": Refers to a third-party service provider to the Company who is responsible for the design, creation, execution, monitoring, and ongoing logic of a specific Vault strategy.
"Infrastructure Provider": Refers to the independent, third-party entity or decentralized network that provides the underlying blockchain, computational, smart contract, or data-provisioning infrastructure upon which the Vaults and the broader Protocol operate.
"Receipt Token": Refers to a transferable cryptographic token minted to a User upon depositing digital assets into a Vault. The Receipt Token serves as a claim on a proportional share of the digital assets held within that specific Vault and may be provided for such underlying assets subject to the conditions of the Protocol. The value of a Receipt Token is not guaranteed and is subject to market and protocol-related risks, including the risk of de-pegging from the underlying assets.
"Non-Custodial": Describes the technical and operational framework of the Services, wherein the User retains exclusive and sole control over their private cryptographic keys and, consequently, their digital assets at all times. The Company does not have the ability to access, control, transfer, or reverse User transactions or funds; except for deployment to predefined strategies.
"Protocol": Refers to the complete set of smart contracts, rules, standards, and procedures that govern the operation of the Vaults, including the interaction between Users, Vaults, and Receipt Tokens.
“Sanctioned Person”: Any person listed or owned/controlled (≥50%) by persons on OFAC, HMT, EU, UN, or other applicable lists.
Acceptance and Modification of Terms
Your access to and use of the Services is expressly conditioned on your acceptance of these Terms. Any interaction with the Protocol, including but not limited to connecting a digital wallet, depositing or withdrawing assets, executing any transaction, minting or transferring Receipt Tokens, or otherwise interacting with the Protocol in any manner, constitutes your full, unconditional, and legally binding acceptance of this Agreement in its then-current form.
We reserve the right, in our sole and absolute discretion, to amend, revise, or update these Terms at any time. All modifications will be effective immediately upon being posted on our website or within the application interface. We will update the “Last Updated” date at the beginning of this Agreement to reflect the date of such changes.
The responsibility to review these Terms periodically for any updates or changes rests solely with you. The Company is under no obligation to provide individual notice of such modifications. Your continued use of the Services following the posting of any revised Terms shall constitute your conclusive acceptance of and agreement to be bound by such changes. If you do not agree with any modification to these Terms, you must immediately cease all access and use of the Services.
Eligibility and User Representations
The Services are intended solely for users who meet specific eligibility criteria. By accessing or using the Services, you represent, warrant, and covenant that:
You are at least 18 years of age or the age of legal majority in your jurisdiction, whichever is greater, and you have the full right, power, and authority to enter into and comply with the obligations of this Agreement.
You are not a citizen or resident of, nor are you located in, any jurisdiction where your access to or use of the Services would be illegal or otherwise violate any applicable law. This includes, but is not limited to, any state, country, or territory designated as a "Restricted Jurisdiction." A "Restricted Jurisdiction" is defined as any jurisdiction subject to comprehensive economic sanctions administered by the Office of Foreign Assets Control (OFAC), the Financial Action Task Force (FATF), the United Nations, or other relevant authorities, as well as any jurisdiction where the use of decentralized finance protocols or cryptographic assets is prohibited or requires specific licensing that the Company does not hold.
You represent that you are not a resident of, located in, or accessing the Services from any of the following jurisdictions: Australia, Canada, Singapore, United States (and its territories), United Kingdom, Belarus, Burundi, Crimea & Sevastopol, Cuba, Democratic Republic of Congo, Iran, Iraq, Libya, Myanmar, North Korea, Somalia, Sudan, Syria, Venezuela, and Zimbabwe.
You represent that you are not using a VPN/proxy to access the Services
The burden of compliance with local laws and regulations rests exclusively with you. You are solely responsible for determining whether your use of the Services is compliant with all applicable laws, regulations, and reporting requirements in your jurisdiction of residence and citizenship. The Company makes no representation or warranty regarding the legality of the Services in any specific jurisdiction and does not guarantee its availability or legality universally.
Furthermore, you represent and warrant that:
You are not, and are not acting on behalf of, any person or entity that is a specially designated national, blocked person, or otherwise subject to any sanctions or embargoes administered by any applicable governmental authority ("Restricted Person").
You are not, and are not acting on behalf of, any person or entity that is resident of a “Restricted Jurisdiction”
You will not use the Services for any illegal, fraudulent, or malicious purpose, including but not limited to money laundering, terrorist financing, or violating any applicable anti-corruption laws.
Any and all information you may provide to the Company in connection with any compliance or verification process will be true, accurate, and complete.
The Services
Overview of the Vaults Protocol
The core of the Services is an interface to a Protocol that facilitates access to Vaults. These Vaults are autonomous smart contracts that provide controls, recordkeeping, and tokenization of specific Vault strategies which may interact with various third-party decentralized finance protocols. Users can interact with these Vaults by depositing digital assets. Upon a successful deposit, the Protocol mints and issues a corresponding amount of a unique Receipt Token to the User. This Receipt Token serves as a claim on a proportional share of the digital assets held within that specific Vault and can typically be provided for the underlying assets, subject to the mechanics and conditions of the Protocol (including but not limited to withdrawal waiting periods). Withdrawals are processed by contract logic and are returned only to the original depositor’s wallet address (subject to batching/queue mechanics).
3.2 Non-Custodial Nature and User Control
The Services are, at all times, strictly non-custodial. This is a critical architectural feature of the Protocol. This means that you, the User, retain sole and exclusive control over your digital wallet and the private keys required to authorize transactions. At no point does the Company, its developers, affiliates, or any other third party take custody, possession, or control of your digital assets. The smart contracts are designed to be permissionless systems that you interact with directly from your own wallet.
Users deposit and withdraw directly with the smart contracts from self-custodied wallets. We do not hold private keys or unilaterally move user assets. Certain administrative controls operate on a multi-signature basis among independent parties and do not allow the Company alone to transfer user assets.
This non-custodial framework places the commensurate and non-delegable responsibility for security and control squarely on you, the User. You are solely responsible for safeguarding your private keys, passwords, and seed phrases; the loss of these credentials will result in the permanent and irreversible loss of your assets. You hold the sole authority to initiate, review, approve, and sign all transactions from your personal wallet. You are responsible for performing your own due diligence and accepting the risks associated with any selected Vault strategy. It is your duty to actively monitor your own Vault positions and the performance of the associated Receipt Tokens on all platforms where they may be used.
The Company's responsibility is limited to providing a functional interface and the underlying smart contracts that execute transactions as initiated and signed by the user. The Company never takes custody of your private keys and so has no technical ability to perform transactions on your behalf, including reversing transactions or recovering lost funds. The Company has no unilateral ability access funds. Certain administrative actions require multi-signature approval among independent parties and do not allow the Company alone to transfer user assets.
Certain Vault contracts include administrative controls (including emergency pause, blocklist, and upgrade authority via a multisig). These controls cannot be exercised unilaterally by the Company (though they may be done so in combination with a third-party 'Strategist' and/or a security council via a multisig). These controls may be exercised without prior notice to mitigate security, regulatory, or sanctions risk. Exceptional sanctions freezes may be invoked only under a written policy, with multi-sig, legal sign-off, auditable logs, and prompt escalation to authorities; this is not day-to-day safekeeping”
Issuance of Liquid Receipt Tokens
The Receipt Token you receive upon depositing assets serves as a verifiable, on-chain representation of your proportional beneficial interest within a Vault. These tokens are designed to be transferable, allowing you to use them in other compatible decentralized finance protocols.
It is crucial to understand that Receipt Tokens, by themselves, do not represent any equity, ownership, profit-sharing, or governance rights in the Company entity itself. They are functionally distinct from governance tokens that may grant voting power over a protocol's future. The sole function of a Receipt Token is to represent your beneficial interest in the assets within its corresponding Vault.
Role of Strategists
The Vault strategies executed by the Vaults are designed and managed by third-party Strategists who are service providers to the Company. The Company's role is to provide a platform or interface that may present these strategies to Users. The Company does not create, guarantee, or assume any responsibility for the performance, logic, security, or outcome of any strategy developed by a Strategist. Your decision to deposit assets into a Vault constitutes a direct interaction with the strategy logic created by that third party, and you do so at your own sole risk.
Reliance on Third-Party Infrastructure and Services
The functionality, availability, and security of the Services are fundamentally dependent on underlying infrastructure and services provided by third parties, over which the Company has no control. This includes, but is not limited to:
The specific blockchain network (e.g., Ethereum) on which the Protocol is deployed.
Decentralized oracle services that provide external data to the smart contracts. The Protocol may rely on such oracles to maintain the value representation of assets. There are inherent risks associated with oracles, including the potential for technical failures, manipulation, or the provision of inaccurate data, which could adversely affect the operation of the Vaults.
Any other third-party protocols or smart contracts with which the Vaults may interact as part of a Vault strategy.
The underlying vault contracts are provided by the Infrastructure Provider and have been audited by independent firms. We did not author or deploy new smart-contract code beyond configuration. Third-party audit reports are provided ‘as is’ and do not guarantee safety. The audit reports for the Infrastructure Provider may be found at https://docs.lagoon.finance/resources/audits.
The Company is not liable for any failures, disruptions, or vulnerabilities of this third-party infrastructure. This includes but is not limited to events such as blockchain forks, 51% attacks, network congestion, oracle failures, or bugs in the underlying blockchain's client software. By using the Services, you acknowledge and accept that the Protocol's performance is contingent upon these external dependencies.
6. Third-Party Incentives
1. Informational only. From time to time, we may display information about potential third-party token incentives (for example, protocol, ecosystem or partner “airdrops”) that may be available in connection with use of a vault. Any such information is provided for your convenience only.
2. Separate from APY. Third-party incentives (if any) are separate from and in addition to any variable APY displayed for a vault. They are not part of your return from RockSolid and are not guaranteed.
3. No guarantee / no entitlement. Eligibility for, timing of, method of calculation of, and allocations under any third-party incentive are determined solely by the third-party protocol or issuer. RockSolid does not guarantee that you will receive any incentive, any specific amount, or any specific token, and does not control snapshot dates, allowlists, vesting, or distributions.
4. Administration & delivery. Incentives (if any) are administered and delivered by the third party, not by RockSolid. You may be required to claim tokens directly from the third party, interact with its smart contracts or user interface, satisfy KYC/eligibility checks, or accept its separate terms. RockSolid does not act as your agent or custodian to claim, hold, or dispose of any such tokens unless we expressly agree in a separate written agreement.
5. Program changes. Third-party incentive programs may be modified, suspended, or terminated at any time without notice. Lists or badges indicating potential eligibility (e.g., “may be eligible”) are indicative only and may become inaccurate due to protocol changes, parameter updates, or your activity.
6. Data & privacy. To verify eligibility, we (or the third party) may use your public blockchain address and on-chain activity. We will not share your personal information with a third-party incentive provider except as described in our Privacy Policy or as required by law.
7. Taxes. You are solely responsible for any taxes that may arise from receipt or disposition of third-party tokens, including reporting, withholding, and payment. RockSolid does not provide tax advice.
8. Risk disclosures. Tokens received (if any) may be volatile, illiquid, restricted, or subject to vesting/lock-ups, smart-contract bugs, or protocol governance changes. Network fees may apply. You may lose some or all value.
9. No advice / no endorsement. References to third-party incentives do not constitute investment advice or an endorsement of any protocol, token, or strategy. You should do your own research and consult your own advisers.
10. Jurisdictional limits. Incentives may be unavailable or restricted based on your location or applicable law. You represent that you are not in a Restricted Jurisdiction and will comply with all applicable laws and third-party terms.
11. Liability limitation. To the maximum extent permitted by law, RockSolid is not liable for any loss, missed eligibility, forfeited tokens, program changes, or errors in third-party data relating to incentives.
Comprehensive Risk Disclosures
THE FOLLOWING SECTION CONTAINS A DETAILED, THOUGH NOT EXHAUSTIVE, DISCLOSURE OF THE SIGNIFICANT RISKS ASSOCIATED WITH USING THE SERVICES. YOU ARE STRONGLY URGED TO READ AND UNDERSTAND THESE RISKS THOROUGHLY BEFORE INTERACTING WITH THE PROTOCOL. YOUR USE OF THE SERVICES IS AT YOUR SOLE RISK. THE COMPANY WILL NOT BE LIABLE FOR ANY LOSSES INCURRED AS A RESULT OF THESE RISKS.
No Financial Advice, No Fiduciary, No RIA, No Broker-Dealer, No Custody
All information, data, and content provided through the Services are for informational purposes only and should not be construed as investment advice, financial advice, trading advice, or a recommendation or solicitation to buy, sell, hold, or otherwise transact in any digital asset or to engage with the Services in any way. The Company is a technology provider, not a financial advisor or any of type of person providing advisory services. You should not make any financial or other decisions based on the information presented through the Services without conducting your own independent due diligence and consulting with a qualified professional financial advisor.
We are not your broker, intermediary, agent, advisor, or fiduciary. We do not provide investment advice, do not solicit transactions, and do not take custody of user assets. No communication or information provided by us shall be considered a recommendation or advice.
No Insurance of Deposit Protection
Digital assets are not legal tender and are not covered by deposit, investor-protection, or insurance schemes (including FDIC, FSCS, CIPF).
Inherent Risks of Cryptographic Assets
The digital assets you may deposit into the Vaults are subject to inherent risks common to the cryptocurrency market. These include, but are not limited to, extreme price volatility, where the value of assets can fluctuate dramatically and unpredictably, potentially resulting in a total loss of your principal. The market is also susceptible to manipulation, irrational sentiment, and a general lack of the regulatory oversight and investor protections found in traditional financial markets.
Smart Contract and Protocol Risk
The Services and the underlying Protocol are based on complex, open-source smart contract and application code, both developed by the Company and/or by third parties. While security audits and best practices may be implemented, there is an inherent risk of bugs, vulnerabilities, flaws, or exploits within any smart contract code. Such vulnerabilities could be exploited by malicious actors, potentially leading to a partial or total loss of all assets held within the Protocol's smart contracts or any third-party smart contracts with which the Vaults interact. You acknowledge that this risk is a persistent and significant threat in the DeFi ecosystem.
Risks Associated with Non-Custodial Services
As detailed in Section 3.2, the non-custodial nature of the Services places the full burden of security on you. The primary risks include:
Loss of Private Keys: If you lose your private keys or the seed phrase used to recover your wallet, you will permanently and irreversibly lose access to your funds. There is no central authority or support service that can help you recover them.
User Error: Any mistake made by you, such as sending assets to an incorrect blockchain address or interacting with a malicious contract, is irreversible. The Company cannot undo or reverse such transactions.
Phishing and Social Engineering: You are a target for sophisticated phishing attacks, scams, and other forms of social engineering designed to trick you into revealing your private keys or authorizing malicious transactions. You must remain vigilant against such threats.
Strategy and Vault-Specific Risks
Each Vault executes specific strategies, and each strategy carries its own unique set of risks. There is no guarantee of any returns, rewards, or yield. Any projected returns are estimates and not guaranteed. These risks may include, but are not limited to:
Underlying Protocol Risk: Vault strategies may interact with or deploy assets to various external third-party protocols. By using a Vault, you are exposed to the risks of all such underlying protocols, including smart contract failures, exploits, or economic instability of those protocols.
Liquidation Risk: Strategies that employ leverage or borrowing are subject to liquidation risk, where a sudden drop in the value of collateral could lead to its forced sale and a significant loss of principal.
Impermanent Loss: Strategies that involve providing liquidity to decentralized exchanges are subject to the risk of impermanent loss.
Slashing Penalties: Strategies that involve staking assets are subject to slashing penalties, where a portion of the staked assets can be forfeited.
Strategy Failure: A strategy may be poorly designed, underperform, may be subject to asset loss, or may fail entirely due to flawed logic or unforeseen market conditions.
Withdrawal Waiting Period: Withdrawals from Vaults are not instant, and are subject to minimum waiting periods. These minimum waiting periods will be displayed on the Company website or app. The actual waiting periods may end up being significantly longer depending on the liquidity of the underlying strategies or operational delays.
Unstaking / Exit Queue: Some strategies may utilize staking, liquid staking tokens, or related functions. These strategies may have extended unstaking times or queues to exit these positions. The Company does not control these waiting periods. Withdrawals from a Vault may be delayed due to these waiting periods.
Airdrops, Forks, Unsupported Assets: We have no obligation to support any airdrop, fork, token migration, or unsupported asset sent to a Vault. Assets sent to incorrect chains or contract addresses may be irrecoverable.
MEV, Network, and Congestion Risks: Transactions may be re-ordered, front-run, delayed, censored, fail, or be included on adverse terms due to MEV, mempool dynamics, base-fee spikes, or chain congestion. Gas fees are non-refundable.
Conflicts of Interest & Strategist Disclosures: third-party Strategists and their affiliates may hold positions in assets referenced by a Vault, earn fees from third-party protocols, or participate in governance. No duty to avoid conflicts is assumed, and no best-execution obligation is undertaken.
APR/APY Figures: Any such figures displayed on the Company website or app are illustrative only, do not constitute a promise of a given APR/APY, and are non-binding.
No Obligation to Maintain or Support: We may, as necessary or required in conjunction with certain third-parties, modify, discontinue, or remove a certain feature, strategy, or Vault at any time. We have no obligation to provide support, updates, or to continue operating the Service.
Receipt Token Risks
The Receipt Tokens issued by the Protocol introduce an additional layer of specific risks:
De-Pegging Risk: While a Receipt Token represents a beneficial interest in underlying assets, its market price on secondary markets is determined by supply and demand. There is a significant risk that the Receipt Token could trade at a discount to the net asset value of the underlying assets (a "de-peg"). This can be caused by a lack of liquidity, a sudden loss of confidence in the Protocol or its strategies, or broader market panic.
Liquidity Risk: The Company does not guarantee that a liquid or efficient market will exist for any Receipt Token. You may find it difficult or impossible to sell your Receipt Tokens at your desired price, or at all, particularly during times of market stress.
Oracle Risk: We make no representation as to the accuracy, timeliness, or continuity of any price feed or data source. You assume all risk of inaccurate data, stale updates, manipulation, or outages.
Composability and Contagion Risk: A core feature of Receipt Tokens is their ability to be used in other DeFi protocols ("composability"). When you use your Receipt Token in any external protocol, you are exposed to the full spectrum of risks of that external protocol. A failure or exploit in that third-party protocol could result in the total loss of your Receipt Token. The Company's responsibility for the Receipt Token ends at the boundary of its own smart contracts.
Regulatory and Legal Risks
The legal and regulatory framework governing decentralized finance and digital assets is highly uncertain, subject to change, and varies significantly across jurisdictions. Future laws, regulations, or judicial interpretations could adversely affect the operation of the Protocol, restrict your ability to access or use the Services, or change the tax treatment of your transactions.
Third-Party Risks
As stated previously, you bear the full risk of failure, negligence, or malicious action on the part of the Strategists and the third-party Infrastructure Providers. You also bear the full risk of failure, negligence or malicious action on the part of any other third-parties who may, from time to time, be involved in certain aspects of the Services. The Company does not control or guarantee the performance of these third parties.
User Conduct and Responsibilities
Responsibility for Wallet Security
You are solely and entirely responsible for all activities that occur under your digital wallet address when interacting with the Services. You are responsible for implementing all reasonable and appropriate measures for securing the wallet, private key(s), password(s), seed phrase(s), and any other credentials you use to access the Services.
Compliance with Laws and Taxation
You agree to use the Services only for lawful purposes and in a manner that does not violate the rights of, or restrict or inhibit the use and enjoyment of the Services by, any third party. You are solely responsible for ensuring that your use of the Services is in compliance with all laws, rules, and regulations applicable to you.
Furthermore, you are solely responsible for determining the tax implications of your transactions and use of the Services. This includes determining what, if any, taxes apply to your depositing of assets, receipt of yield, minting and disposal of Receipt Tokens, and any other transactions. It is your sole responsibility to report and remit the correct tax to the appropriate tax authority. The Company does not provide tax advice and has no obligation to report on your behalf.
Prohibited Activities
In connection with your use of the Services, you agree that you will not, directly or indirectly, nor allow any third party to:
Engage in any activity that is unlawful, fraudulent, deceptive, or harmful.
Attempt to compromise the security or integrity of the Services, including by deploying viruses, launching denial-of-service attacks, or attempting to bypass any security measures.
Use any automated means, such as robots, spiders, or scrapers, to access the Services for any purpose, including monitoring or copying any of the material on the website, without our prior written consent.
Engage in any activity that could disable, overburden, damage, or impair the functioning of the Services.
Impersonate or attempt to impersonate the Company, another User, or any other person or entity.
Use the Services to engage in any form of market manipulation.
Violate the intellectual property rights of the Company or any third party.
Use the Services in violation of applicable export control or sanctions laws or for prohibited end-uses. Mixers/tumblers, knowingly obfuscating proceeds of crime, ransomware flows, sanctioned addresses, and privacy-enhancing technologies used to evade sanctions are prohibited.
Right to Restrict Access
Notwithstanding any other provision of these Terms, the Company reserves the right, in its sole and absolute discretion, without notice and for any reason, to suspend, terminate, or otherwise restrict your access to the Services. This may include, but is not limited to, blocking wallet addresses from interacting with the Protocol or blocking the provision of Receipt Tokens for the underlying assets if the Company determines, in its sole judgment, that such addresses are associated with a breach of these Terms, illicit activities, sanctions violations, or pose an unacceptable level of risk to the Company or the Protocol. You agree that the Company will not be liable to you or to any third party for any such suspension, termination, or restriction of access.
Certain contracts may be upgradeable or subject to emergency pause by a multisig or admin key. Upgrades or pauses may change functionality, including fee parameters or withdrawal mechanics, and may be executed without prior notice. For the avoidance of doubt, these controls cannot be exercised unilaterally by the Company (though they may be done so in combination with the Strategist and/or a security council via a multisig). Exceptional sanctions freezes may be invoked only under a written policy, with multi-sig including a neutral co-signer, legal sign-off, auditable logs, and prompt escalation to authorities; this is not day-to-day safekeeping”
Fees and Protocol Revenue
Your use of the Services may be subject to certain fees.
Protocol Fees: The Protocol may charge fees on the rewards generated by the Vaults, such as services fees, rewards fees, or withdrawal fees. The specific fee structure for each Vault will be displayed on the Service's interface. These fees are automatically deducted by the smart contracts at each NAV update.
Blockchain Transaction Fees ("Gas Fees"): All interactions with the Protocol require transactions on the underlying blockchain network. You are solely responsible for paying the transaction fees (i.e., "gas fees") associated with your activities. Gas fees associated with deployment of deposited assets into strategies are paid out of the vault assets. The Company has no control over the amount of gas fees.
No Refunds: All fees processed by the Protocol, including both Protocol fees and gas fees, are non-refundable, final, and irreversible.
Fee Changes: The Company retains the right to change the fees charged (including for the avoidance of doubt, the amount of the particular fees charged) at any time with such change(s)being effective upon us providing thirty (30) days' notice to you. The 'notice' contemplated in the preceding sentence will be provided on the Service's interface – which will display the relevant fee change(s).
Intellectual Property Rights
You acknowledge and agree that the Company (or, as applicable, its licensors) owns all legal right, title and interest in and to all elements of the Services, and all intellectual property rights therein (including, without limitation, all designs, systems, methods, information, computer code, software, services, website design, "look and feel", organization, compilation of the content, code, data and database, functionality, audio, video, text, photographs, graphics, and all other elements of the Services (collectively, the "Materials")). You acknowledge that the Materials are protected by copyright, trade dress, patent, and trademark laws, international conventions, other relevant intellectual property and proprietary rights, and applicable laws. All Materials are the intellectual property of the Company or its licensors, and all trademarks, service marks, copyrights, and trade names associated with the Services or otherwise contained in the Materials are proprietary to the Company or its licensors.
We grant you a limited, non-exclusive, non-transferable, non-sublicensable, and revocable license to access and use the Services for your personal, non-commercial use, strictly in accordance with these Terms. This license does not grant you any rights to our intellectual property except as expressly stated. You agree not to, and not to permit any third party to, copy, modify, create derivative works of, reverse engineer, decompile, or otherwise attempt to extract the source code of the Services or any part thereof.
Regulatory Considerations
The Company makes no representation that the Services, the Protocol, the Vaults, or the Receipt Tokens are compliant with the laws of any jurisdiction. You are solely responsible for compliance with all laws applicable to you. The Company does not represent that any Receipt Token constitutes a security or any other regulated financial instrument. However, the legal and regulatory treatment of digital assets is uncertain and may change. If a competent authority determines that a Receipt Token constitutes a security or regulated instrument in your jurisdiction, you agree to immediately cease all use of such Receipt Token and the Services.
Disclaimers, Limitation of Liability, and Indemnification
"AS IS" and "AS AVAILABLE" Disclaimer
TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, THE SERVICES AND ANY INFORMATION OR MATERIALS PROVIDED THEREIN ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS, WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED. THE COMPANY AND ITS AFFILIATES AND LICENSORS EXPRESSLY DISCLAIM ALL WARRANTIES, WHETHER EXPRESS, IMPLIED OR STATUTORY, REGARDING THE SERVICES, INCLUDING WITHOUT LIMITATION ANY WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, SECURITY, ACCURACY AND NON-INFRINGEMENT.
THE COMPANY DOES NOT REPRESENT OR WARRANT THAT THE SERVICES OR ANY INFORMATION CONTAINED THEREIN WILL BE ACCURATE, COMPLETE, RELIABLE, CURRENT, ERROR-FREE, SECURE, OR UNINTERRUPTED. WE DO NOT GUARANTEE THAT ANY DEFECTS WILL BE CORRECTED OR THAT THE SERVICES ARE FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS. YOU ASSUME FULL RESPONSIBILITY AND RISK OF LOSS RESULTING FROM YOUR USE OF THE SERVICES.
Limitation of Liability
TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, YOU UNDERSTAND AND AGREE THAT IN NO EVENT SHALL THE COMPANY, ITS DIRECTORS, EMPLOYEES, AFFILIATES, AGENTS, DEVELOPERS, OR LICENSORS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUES, USE, GOODWILL, OR DATA, WHETHER INCURRED DIRECTLY OR INDIRECTLY, OR ANY OTHER INTANGIBLE LOSSES, HOWEVER ARISING, THAT RESULT FROM:
(A) YOUR ACCESS TO, USE OF, OR INABILITY TO ACCESS OR USE THE SERVICES;
(B) ANY CONDUCT, PERFORMANCE, OR CONTENT OF ANY THIRD PARTY, INCLUDING BUT NOT LIMITED TO STRATEGISTS, INFRASTRUCTURE PROVIDERS, OR OTHER USERS;
(C) ANY SMART CONTRACT BUGS, HACKS, EXPLOITS, OR OTHER SECURITY FAILURES;
(D) ANY VOLATILITY OR LOSS IN VALUE OF YOUR DIGITAL ASSETS OR RECEIPT TOKENS (INCLUDING THOSE DUE TO ORACLE FAILURES, LOSS FROM MEV/SANDWICH ATTACKS, SLASHING, LIQUIDATION, DE-PEGS, IMPERMANENT LOSS, POOR PERFORMANCE OR CAPITAL LOSS OF THE UNDERLYING STRATEGY);
(E) UNAUTHORIZED ACCESS, USE, OR ALTERATION OF YOUR TRANSACTIONS OR DATA; OR
(F) ANY OTHER MATTER RELATING TO THE SERVICES.
THIS LIMITATION OF LIABILITY APPLIES REGARDLESS OF THE LEGAL THEORY ON WHICH THE CLAIM IS BASED, WHETHER CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, OR OTHERWISE, EVEN IF THE COMPANY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
IN NO EVENT SHALL THE AGGREGATE LIABILITY OF THE COMPANY, ITS AFFILIATES, AND LICENSORS ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICES EXCEED THE GREATER OF (A) ONE HUNDRED U.S. DOLLARS (USD $100) OR (B) THE AGGREGATE AMOUNT OF FEES YOU ACTUALLY PAID TO US UNDER THESE TERMS IN THE THREE (3) MONTH PERIOD PRECEDING THE DATE THE CLAIM AROSE.
SOME JURISDICTIONS DO NOT ALLOW CERTAIN WARRANTY DISCLAIMERS OR LIMITATIONS ON LIABILITY. ONLY DISCLAIMERS OR LIMITATIONS THAT ARE LAWFUL IN THE APPLICABLE JURISDICTION WILL APPLY TO YOU AND OUR LIABILITY WILL BE LIMITED TO THE MAXIMUM EXTENT PERMITTED BY LAW.
Indemnification
You agree to defend, indemnify, and hold harmless the Company and its officers, directors, employees, affiliates, agents, and licensors from and against any and all claims, damages, obligations, losses, liabilities, costs, debts, and expenses (including but not limited to attorney's fees) arising from: (i) your use of, access to, or activities in connection with the Services; (ii) your violation of any term of this Agreement; (iii) your violation of any applicable law, rule, or regulation, or the rights of any third party; (iv) any content or information you submit, post, or transmit through the Services; or (v) any other party's access and use of the Services with your wallet or credentials.
Third-Party Services, Integrations and Links
The Services may contain links to third-party websites, applications, or services, and may allow for integrations with other protocols or platforms that are not owned or controlled by the Company (collectively, "Third-Party Services"). You acknowledge and agree that we are not responsible for the availability of any Third-Party Services, and that we do not endorse any advertising, products or other materials on or made available from any Third-Party Services. Your use of any Third-Party Service is at your own risk, and you are subject to the terms and conditions and privacy policies of that third party. You expressly relieve the Company from any and all liability arising from your use of any Third-Party Service.
Limited Access
The Company reserves the right to offer the Services, or certain features of the Services, on a limited basis. This may include, but is not limited to, private access, "beta" testing periods, or access restricted to a select group of users. All provisions of these Terms shall apply with full force and effect to any user granted such limited access. The Company makes no guarantees about the future availability of any features offered during a limited access period.
General Provisions
Governing Law
This Agreement and any dispute or claim arising out of or in connection with it or its subject matter or formation shall be governed by and construed in accordance with the laws of the Cayman Islands, without regard to conflict of law provisions.
Electronic Records & Signatures; Records as Evidence
You consent to electronic records and signatures, and authorize us to record your wallet address and signed acknowledgments (including hashes of then-current Terms/Policies) for compliance and evidentiary purposes. You consent to electronic records and signatures, and authorize us to record your wallet address and signed acknowledgments (including hashes of then-current Terms/Policies) for compliance and evidentiary purposes.
Dispute Resolution and Arbitration
ANY DISPUTE, CLAIM, OR CONTROVERSY ARISING OUT OF OR RELATING TO THIS AGREEMENT OR THE BREACH, TERMINATION, ENFORCEMENT, INTERPRETATION, OR VALIDITY THEREOF, SHALL BE DETERMINED BY BINDING ARBITRATION. THE ARBITRATION SHALL BE SEATED IN THE CAYMAN ISLANDS AND ADMINISTERED PURSUANT TO THE UNCITRAL ARBITRATION RULES IN EFFECT AT THE TIME OF THE ARBITRATION. THE TRIBUNAL SHALL CONSIST OF ONE ARBITRATOR. THE LANGUAGE OF THE ARBITRATION SHALL BE ENGLISH. JUDGMENT ON THE AWARD MAY BE ENTERED IN ANY COURT HAVING JURISDICTION. THIS CLAUSE SHALL NOT PRECLUDE PARTIES FROM SEEKING PROVISIONAL REMEDIES IN AID OF ARBITRATION FROM A COURT OF APPROPRIATE JURISDICTION.
YOU AGREE THAT ANY AND ALL DISPUTES MUST BE BROUGHT IN YOUR INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR REPRESENTATIVE PROCEEDING. YOU EXPRESSLY WAIVE YOUR RIGHT TO FILE A CLASS ACTION OR SEEK RELIEF ON A CLASS BASIS.
Force Majeure
Except as set out otherwise, we will be not liable for any loss caused directly or indirectly from circumstances not within our control, including but not limited to acts of God, government restrictions, exchange or market rulings, actions affecting securities, clearing or commodity exchanges including suspensions of trading or extensions of trading hours, dealing cut-off times and holidays, acts of civil or military authority, national emergencies, natural disasters, wars, riots or acts of terrorism, industrial disputes, acts or regulations of any governmental or supranational bodies and authorities or the failure or malfunction of any telecommunication or computer service.
Entire Agreement, Severability, No Waiver and Survival
Entire Agreement: These Terms, together with any policies or documents incorporated by reference, constitute the entire agreement between you and the Company regarding the Services and supersede all prior and contemporaneous understandings, agreements, representations, and warranties, both written and oral.
Severability: If any provision of this Agreement is held to be invalid, illegal, or unenforceable by a court of competent jurisdiction, such provision will be modified to the minimum extent necessary to make it enforceable, and the remaining provisions will continue in full force and effect.
No Waiver: The failure of the Company to exercise or enforce any right or provision of this Agreement will not constitute a waiver of such right or provision. Any waiver of any provision of this Agreement will be effective only if in writing and signed by the Company.
Survival: The following sections shall survive termination of the Terms: Section 2 (Eligibility and User Representation); Section 5 (User Conduct and Responsibilities); Section 7 (Intellectual Property Rights); Section 9 (Disclaimers, Limitation on Liability and Indemnification); Section 12.1 (Governing Law); and Section 12.2 (Dispute Resolution and Arbitration).
Assignment
You may not assign or transfer any of your rights or obligations under this Agreement without our prior written consent. The Company may assign or transfer any or all of its rights under this Agreement, in whole or in part, without restriction.
Grievance Redressal
Should you have any grievances regarding the Services, you may contact our Grievance Redressal Officer. Please direct all correspondence to legal@rocksolid.network. Providing a point of contact does not constitute a commitment to any specific resolution or timeline.
Contact Information
If you have any questions about these Terms of Service, please contact us at legal@rocksolid.network.
Privacy Policy
Last Updated: September 8, 2025
Preamble
Your privacy is important to us. RockSolid Vaults, a company incorporated under the laws of the Cayman Islands with company number 424521 (referred to herein as the “Company,” “we,” “us,” or “our”) takes the privacy of your information seriously. This global privacy notice (“Policy”) explains how we collect, use, disclose, and safeguard your Personal Data in the course of our business, including through our website at https://rocksolid.network, and our mobile or web-based applications (collectively, the “Services”).
This Policy is in addition to, and does not relieve, remove, or replace, our rights and responsibilities under any applicable data protection laws (“Applicable Data Protection Laws”). In case of a conflict between a provision of Applicable Data Protection Laws and a provision of this Policy, the former shall take precedence.
Please read this Policy carefully before using our Services. References in this Policy to “you,” “your,” or “User” are references to individuals whose Personal Data the Company collects and processes. Your use of the Services signifies your voluntary and express acceptance of this Policy and our Terms of Service, available at https://rocksolid.network/terms. If you do not agree with all the terms of this Policy, please do not use the Services.
1. Who is the Controller for the Personal Data Processed?
A “Controller” is a person or organization who alone or jointly determines the purposes for which, and the manner in which, any Personal Data is, or is likely to be, processed. This Policy is issued on behalf of the Company as the Controller. Unless we notify you otherwise, the Company is the Controller for your Personal Data.
2. Personal Data We Collect
We collect, use, store, and transfer different kinds of Personal Data about you. Due to the non-custodial nature of our Services, this collection is limited. We have provided below the categories of Personal Data we may collect:
Contact Information: Includes your email address or other contact details if you voluntarily provide them to us, for example, by contacting our support channels or during our onboarding of you.
Transaction Data: Includes publicly available information from the blockchain, such as your public wallet address, transaction hashes, and details of your interactions with the Protocol.
Technical Data: Includes technical information collected automatically when you use our Services, such as your Internet Protocol (IP) address, browser type and version, device identifiers, operating system, and usage patterns (e.g., pages visited, features used, and time spent on the Services).
Cookie Data: Information collected via cookies and similar tracking technologies as detailed in Section 8 of this Policy.
Voluntary Data (KYC/AML Information): In specific circumstances, such as for institutional onboarding, participation in certain community programs, or where required by applicable law, we may need to collect identity verification information. This may include your full name, government-issued identification documents, proof of address, and other data necessary to conduct Know-Your-Customer (KYC) and Anti-Money Laundering (AML) checks. This data is only collected with your explicit consent and where legally necessary.
Blockchain Compliance Data: Where required for regulatory compliance or risk management, we may process data derived from the screening of your public wallet address against public blocklists and sanctions lists (such as OFAC) using third-party compliance tools. This is done to monitor for associations with illicit activities or sanctioned entities.
Feedback / Correspondence Information: Including your comments, suggestions, correspondence, feedback or other input information shared with us regarding the Services or our products and services.
Other Data: We may collect other Personal Data that you provide to us which is not specifically listed in this Policy, but which we will use in accordance with this Policy or as otherwise disclosed at the time of collection.
3. How We Use Your Personal Data
We will only use your Personal Data when the law allows us to. Most commonly, we will use your Personal Data in the following circumstances: where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; where we need to perform the contract we are about to enter into or have entered into with you (our Terms of Service); or where we need to comply with a legal or regulatory obligation.
The table below details the ways we plan to use your Personal Data, and which of the legal bases we rely on to do so.
How We Collect Your DataType of Personal DataPurpose of CollectionLegal Basis for ProcessingInformation collected automatically when you use our Services.Technical Data, Cookie DataTo provide, operate, and maintain our Services; to deliver relevant content to you; to measure and analyze the effectiveness of our Services; to improve and personalize your experience; and for security and fraud prevention.Legitimate Interests: (providing a functional and secure service, identifying ways to grow our business).Information collected when you connect your wallet to the Services.Transaction Data (Public Wallet Address)To enable you to interact with the Protocol, including the Vaults, and to display your on-chain activity through our interface.Performance of a Contract: (to provide the Services as described in our Terms of Service).Information collected when you contact us directly (e.g., for support).Contact Information, and any other data you voluntarily provide.To respond to your inquiries, provide customer support, and communicate with you.Legitimate Interests: (providing customer support and managing our relationship with you).Information you provide for specific programs or compliance checks.Voluntary Data (KYC/AML Information)To conduct identity verification, comply with legal and regulatory requirements (such as AML laws), and facilitate access to specific programs.Legal Obligation; Performance of a Contract.Information processed for compliance screening.Blockchain Compliance DataTo conduct risk assessments and comply with sanctions and anti-fraud regulations by screening wallet addresses against public blocklists.Legal Obligation; Legitimate Interests: (preventing illicit activities and protecting the integrity of the Services).
Information collected via electronic ToS acceptance
E-records & signatures for risk/ToS acceptanc. Collected directly from you when you tick the box and sign in the Interface; automatically via the Interface (deriving country from IP and logging timestamp/user-agent); and from the public blockchain when you submit a transaction (tx hash)
To administer the Service and record clear consent / assent; to meet sanctions/geo-restriction controls; to prevent fraud/abuse; and to establish, exercise, or defend legal claims via an auditable acceptance trail
Compliance with legal obligations (e.g., sanctions laws) (Art. 6(1)(c)); Legitimate interests: platform integrity, fraud prevention, and evidentiary record-keeping (Art. 6(1)(f))
4. Disclosure and Transfer of Your Personal Data
We do not sell your Personal Data. We may share your Personal Data with third parties if we believe that sharing it is in accordance with, or required by, any contractual relationship, applicable law, regulation, or legal process.
A. Recipients
We may share Personal Data with the following persons or in the following circumstances:
Third-Party Service Providers: We share information with vendors and service providers who perform services on our behalf. For example, such service providers include (but are not limited to):
Website Hosting: Our website is hosted on Framer, our documentation is hosted on Gitbook and our blog is hosted on Ghost.
Analytics Providers: We use Google Analytics to help us analyze the use of our Services.
Wallet Infrastructure Providers: We use ThirdWeb to facilitate wallet connections and RPC calls.
Smart Contract Infrastructure Providers: We use smart contracts developed by Lagoon.
Strategy Managers: We partner with Tulipa to oversee DeFi strategies
Application Infrastructure: We use Cloudflare to secure and host our applications and 0x to power the integrated swaps
Community Management: We use Discord, X and LinkedIn for communicating with our community.
Legal Authorities: We may disclose your information to legal authorities, courts, or other governmental bodies to the extent we are obliged to do so by law, or to enforce our legal rights and prevent fraud.
Corporate Restructuring: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your Personal Data may be transferred as part of that transaction. We will take steps to ensure that the receiving entity agrees to privacy terms at least as protective as this Policy, but we cannot guarantee that the acquiring party or the merged entity will have the same privacy practices.
We require any third party to whom we disclose Personal Data to respect the confidentiality and security of your Personal Data and to treat it in accordance with Applicable Data Protection Laws. We do not allow such recipients to use your Personal Data for their own purposes and only permit them to process it for specified purposes and in accordance with our instructions.
B. International Transfers
Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ. Whenever we transfer your Personal Data out of jurisdictions like the European Economic Area (EEA), we ensure a similar degree of protection is afforded to it by ensuring appropriate safeguards are implemented, such as using specific contracts approved by relevant authorities which give Personal Data the same protection it has within that jurisdiction.
5. Cookies and Tracking Technologies
Our Services use Cookies to enable, optimize, and analyze site operations, as well as to provide a personalized experience. Cookies are small text files stored on your device's browser. They allow our Services to access or store information from your browser about you, your settings, or your device.
We distinguish the following categories of Cookies:
Strictly Necessary Cookies: Essential for the Services to function. They are typically set in response to actions you take, such as connecting a wallet.
Preferences Cookies: Used to remember your settings and preferences to provide a more personalized experience.
Analytics Cookies: Allow us to count visits, understand traffic sources, and measure the performance of our Services.
You can adjust your Cookie preferences at any time through your browser settings. Please be aware that blocking certain Cookies may impact the functionality of the Services.
A. Third-Party Cookies
Framer: Our website is hosted on Framer, which may set essential cookies for site functionality. For more information, please review the Framer Cookie Policy.
Google Analytics: We use Google Analytics to understand user behavior. For more information, please review the Google Privacy Policy.
ThirdWeb: Our application uses ThirdWeb for wallet connections, which may use cookies or local storage to manage your session. For more information, please review the(https://thirdweb.com/privacy-policy/).
B. Cookie Details
NameProviderPurposeType_ga, _ga_*Google AnalyticsUsed to generate statistical data on how visitors use the website and to count page views.AnalyticsVariousFramerEssential for website functionality and performance.Strictly NecessaryVariousThirdWebManages secure wallet connection sessions.Strictly Necessary
6. Data Retention
We retain your Personal Data only for as long as necessary to fulfill the purposes for which we collected it, or for other essential purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements. Our retention periods are determined by the type of data and our legal obligations.
On-Chain Data: Transaction data and other information stored on public blockchains is immutable and will persist indefinitely. We have no control over this data.
Compliance Records: Where we collect KYC/AML data to comply with legal obligations, such records may be retained for up to five (5) years after the end of the user relationship, or as otherwise required by applicable law.
Technical and Analytics Data: Log files and analytics data are retained for shorter periods (typically up to 24 months) and are anonymized or deleted once they are no longer needed for security or service improvement purposes.
Records of consent and risk acknowledgments: Where we collect data including signatures, hashes, wallet address, country, timestamps, and related transaction IDs, such records are retained for at least 7 years (or longer if required to comply with law or to establish, exercise, or defend legal claims).
7. Data Security
We are committed to protecting the security of your Personal Data. We use reasonable security practices, including technical and organizational measures, to safeguard your Personal Data as required under Applicable Data Protection Laws. These measures are designed to deal with any suspected data breach. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee its absolute security.
8. Rights of Data Subjects
Under certain circumstances, you have rights under Applicable Data Protection Laws in relation to your Personal Data. You may have the right to:
Request access to your Personal Data (commonly known as a "data subject access request") including requesting a copy of the Personal Data we have collected about you.
Request correction of the Personal Data that we hold about you.
Request erasure of your Personal Data. This enables you to ask us to delete or remove Personal Data where there is no good reason for us continuing to process it.
Object to processing of your Personal Data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground.
Request the restriction of processing of your Personal Data.
Request the transfer of your Personal Data to you or to a third party.
Withdraw consent at any time where we are relying on consent to process your Personal Data.
You will not have to pay a fee to access your Personal Data (or to exercise any of the other rights mentioned above). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. We may need to request specific information from you to help us confirm your identity. This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it.
9. Minors’ Data
The Services are not intended for individuals under the age of 18 (“Minors”), and we do not knowingly collect Personal Data from Minors. If you are a Minor, please immediately stop using the Services.
10. Third-Party Links
Our Services may include links to third-party websites, plug-ins, and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. We encourage you to read the privacy policy of every website you visit.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Policy periodically to be informed of how we process your Personal Data.
12. Contact Us & Grievance Redressal
If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, or if you wish to exercise your rights, you can contact our Grievance Officer:
Email: legal@rocksolid.network
We would appreciate the chance to deal with your concerns in the first instance.
13. Definitions
Applicable Data Protection Laws: Means the EU’s General Data Protection Regulation (“GDPR”), the Cayman Islands Data Protection Act (as revised) and any other applicable laws relating to data privacy and information security.
Controller: A natural or legal person which, alone or jointly with others, determines the purposes and means of processing Personal Data.
Personal Data: Any information relating to an identified or identifiable natural person. It does not include data where the identity has been removed (anonymous data).
User: The natural person who accesses the Services.