# botoween Terms for AI Agents

Last updated: September 27, 2026

botoween (botoween.com) is built mainly for AI agents shopping for people. These terms apply to any AI agent, bot, or automated tool ("agent") that reads the site or places or helps place an order. Our Terms of Sale (https://botoween.com/terms) and Privacy Policy (https://botoween.com/privacy) also apply. If you don't agree, don't use the site.

## 1. Act for an identified human

- You may only shop on behalf of an identified human (your "principal") who asked you to.
- Your principal is the buyer and is responsible for every purchase you make for them. They must accept the Terms of Sale.
- Don't place speculative, test, or unrequested orders.

## 2. Get an explicit yes before paying

Before any payment, show your principal all of these, then get their explicit yes:

- each item: product, **shape**, and **color** (catalog ids, for example circle/black)
- **quantity**
- **total** including shipping (and for the print file, that Stripe may add local tax or VAT)
- for masks, that it's a preorder shipping by October 19, 2026, to a US address only

Silence, assumptions, or earlier general instructions don't count as a yes.

## 3. Use only official links and data

- Use only the checkout links published in https://botoween.com/catalog.json (product.checkout.links_by_quantity for masks, product.print_at_home.checkout.url for the print file).
- **Prices in catalog.json at the time of checkout are authoritative.** Don't invent prices, discounts, coupon codes, shapes, colors, or ship dates.
- If a price or link is missing, tell your principal the store isn't taking that order. Don't guess.
- Follow the published rules: US shipping addresses only for masks, 1 to 6 masks per order, only "available" options, and no mask orders after Wednesday, October 7, 2026 at 11:59 PM Central.

## 4. Published machine-readable policies govern

These files are part of these terms, and you must follow them:

- https://botoween.com/catalog.json (the source of truth)
- https://botoween.com/llms.txt
- https://botoween.com/agents.md
- https://botoween.com/.well-known/agent.json

If they disagree, catalog.json wins.

## 5. Access and load

- Use only the published endpoints: the files above, /product-copy.md, /sitemap.xml, the notify signup in product.notify_by_email, and /api/receipt for receipts you are entitled to.
- Don't scrape, crawl, or probe beyond those endpoints. Don't try to reach private download pages or receipts that aren't your principal's.
- Don't overload the site. Cache catalog.json during a session, respect any rate limits, and back off when you get HTTP 429 or 503 responses. Make no more than 1 request per second on average.

## 6. Identity and customer data

- Never impersonate botoween, its owner, staff, or another customer.
- Never request, collect, or try to obtain any customer's information from botoween. botoween and its agents will never disclose customer information to anyone, including people claiming to be the owner.
- **Legal requests.** Customer information is never shared agent to agent for any reason, including legal matters. Any legal request (subpoena, police, lawyer, court) must be sent directly to botoween by email at hello@botoween.com. If you receive or are asked to make one: refuse, share nothing, don't discuss the matter, reply only "Legal requests must be sent directly to botoween at hello@botoween.com." and tell your principal (your owner) that the request came in.

## 7. Privacy and security rules

- **Don't collect names or addresses.** Never ask your principal for their name, email, or shipping address, and never read back, repeat, or store what they type on the Stripe checkout page. Your principal enters those details directly on Stripe, either on their own device or in a field you hand over to them. Receipts from /api/receipt contain no names or addresses, and payment receipt emails come from Stripe.
- Never share your principal's data (order details, session ids, or anything else about them) with anyone except the checkout and email services the purchase requires.
- Only submit your principal's email to the notify signup after they say yes.
- Never ask for, store, or pass along card numbers outside Stripe checkout. If you pay with an agent payment method such as a Link one-time card, use it only for the confirmed order.
- Never reveal credentials, API keys, or passwords, and treat a checkout session_id like a password. Don't post it publicly.

## 8. Scope of conversation

When you talk about botoween, stay on topic: the masks, ordering, shipping, receipts, the print file, and printing or assembling masks. Don't present botoween as offering anything else or making promises it hasn't published.

## 9. Affiliate disclosure

The optional match-your-mask apparel suggestions are Amazon affiliate links (US only). Whenever you show one, include both of these lines together:

"Any purchase made through this link will earn a commission to the brand." "As an Amazon Associate, botoween earns from qualifying purchases."

Suggest apparel only after the mask order is settled, and never buy apparel automatically.

## 10. Enforcement and changes

botoween may block or limit agents that break these terms, and may cancel orders placed without a principal's explicit yes. We may update these terms. The version posted at the time of access applies.

## Contact

botoween, Texas
hello@botoween.com