Vegotron Platform — Terms of Service

Effective Date: June 21, 2026 Version: 3.0.20 — v1.0.976-Full-Monorepo-Index-Scan Jurisdiction: Dubai, United Arab Emirates Governing Law: UAE Federal Law No. 45 of 2021 (PDPL) · UAE Federal Law No. 34 of 2021 (Cybercrime Law) · Saudi Arabia PDPL (Royal Decree M/19, 1443H) · Egypt Personal Data Protection Law No. 151 of 2020 · Cairo Supreme Cybersecurity Council Standards · Dubai Electronic Security Center (DESC) · Abu Dhabi Security Industry Regulatory Agency (SIA) · National Cybersecurity Authority of Saudi Arabia (NCA) Essential Cybersecurity Controls (ECC-1:2018) · ISO/IEC 27001:2022 (Information Security) · ISO/IEC 27701:2019 (Privacy Information Management) · ISO/IEC 29100:2011 · EU GDPR (extraterritorial scope) · Apple App Store Review Guidelines · Google Play Developer Policy · Microsoft Store Policies

DUAL-AUDIENCE SUMMARY

Layer 1 — Enterprise & Engineering Specification

Integrators must not bypass acceptance gates, rate limits, or cryptographic session binding documented in the gateway contract.

Layer 2 — Plain Language for Users

By using Vegotron, you agree to play fair and respect others. In return, we promise a platform built for your freedom — not for selling your attention to advertisers.

• You own your voice: Your content remains yours; we license it only to operate the service you asked for.
• Clear rules: No illegal content, harassment, or attempts to break the platform. Violations can lead to suspension.
• Fair commerce: Marketplace purchases use secure ledger logic with rollback protection if something goes wrong.
• Need help? [email protected] for everyday issues · [email protected] for contract questions.

SOVEREIGN LEADERSHIP ACKNOWLEDGMENT PREAMBLE

> *In the name of progress, sovereignty, and the digital futures of our nations — this platform is dedicated.*

The Vegotron Platform was architected, engineered, and deployed in alignment with the transformative national visions of the following Heads of State and Sovereign Leaders of the Arab World, whose forward-thinking policies in digital economy, artificial intelligence, and cybersecurity have made platforms such as this both possible and necessary:

This platform is a product of the Arab world — built by Arab ingenuity, anchored in Arab sovereignty, and committed to serving Arab societies and global communities with military-grade security and uncompromising privacy protection.

FOUNDER EXECUTION CLAUSE

The entirety of the Vegotron-Core technological architecture — including its distributed sovereign mesh, Post-Quantum cryptographic stack, AI inference pipeline, and full-stack delivery ecosystem — was entirely conceived, architected, engineered, and executed by:

> Eng. Ahmed Ayman Saad Zaghloul Mahmoud > *Founder, Chief Architect, and Sole Owner — Vegotron L.L.C* > *Egyptian National · United Arab Emirates* > Contact: [email protected]

No third-party development firm, external engineering team, or AI-generated codebase contributed to the foundational architecture of Vegotron-Core. This represents an unprecedented individual achievement in sovereign technology engineering.

1. Identity & Acceptance

1.1 These Terms of Service ("Terms") constitute a binding legal agreement between you ("User," "you") and Vegotron® FZ-L.L.C ("Vegotron," "we," "us," "our"), a company registered in the Sharjah Free Zone (SPARK), United Arab Emirates.

1.2 By accessing, registering an account, or using the Vegotron Platform — including its applications, APIs, services, Command-Center, mobile clients, AI inference pipelines, spatial-computing experiences, marketplace, wallet, and node-hosting capabilities (collectively, the "Platform") — you irrevocably agree to these Terms.

1.3 Hard Acceptance Gate. Account creation and continued Platform access are programmatically blocked until explicit, informed, affirmative acceptance of these Terms is recorded and cryptographically signed against your device session via the Vegotron DID (W3C Decentralized Identifier) key pair. You may not circumvent, bypass, or waive this gate.

1.4 If you do not agree to any provision of these Terms, you must immediately cease using the Platform and contact [email protected] to request account termination.

2. Platform Description

Vegotron is a sovereign, privacy-first social media and communications platform engineered to structurally surpass the data practices of Meta, TikTok, X, Google, and Snapchat. The Platform provides:

3. Middle East & Africa Regional Compliance

3.1 Egypt — Personal Data Protection Law (PDPL No. 151/2020) & Supreme Cybersecurity Council

Vegotron operates in full compliance with Egypt's Personal Data Protection Law (PDPL), Law No. 151 of 2020, and associated executive regulations. This includes:

• Explicit data subject consent management with granular opt-in/opt-out controls.
• Data minimization principles: only data strictly necessary for service delivery is collected.
• Mandatory breach notification to the Egyptian Data Protection Center (EDPC) and affected data subjects within 72 hours of a confirmed breach.
• Adherence to Supreme Cybersecurity Council standards for critical information infrastructure protection.
• Cross-border data transfer restrictions respected; Egyptian user data is processed under equivalent or superior protection.

3.2 Saudi Arabia — NCA Essential Cybersecurity Controls (ECC-1:2018) & Saudi PDPL

Vegotron complies with Saudi Arabia's Personal Data Protection Law (PDPL, Royal Decree M/19, 1443H) and the National Cybersecurity Authority (NCA) Essential Cybersecurity Controls (ECC-1:2018), including:

• Application of NCA's 29 Essential Controls across identity management, data protection, network security, and incident response.
• Saudi data subjects' rights to access, correction, and deletion of personal data within 30 days of request.
• Mandatory Data Protection Officer (DPO) designation for operations touching Saudi personal data.
• No transfer of Saudi national personal data outside KSA without equivalent legal protection in the destination jurisdiction.
• Operational Technology (OT) security controls applied to all infrastructure components serving Saudi users.

3.3 United Arab Emirates — DESC, SIA, and Federal Data Protection Law

Vegotron's primary operational jurisdiction is the UAE. We comply with:

• Dubai Electronic Security Center (DESC) Cybersecurity Framework — all application, network, and data security controls are benchmarked to DESC standards.
• Security Industry Regulatory Agency (SIA) requirements for secure technology operations within the UAE.
• UAE Federal Law No. 45 of 2021 (PDPL) — lawful processing, data subject rights, DPO designation, and 72-hour breach notification obligations.
• UAE Federal Law No. 34 of 2021 (Cybercrime Law) — zero-tolerance enforcement against unauthorized system access, data exfiltration, and electronic fraud.
• Cloudflare Zero-Trust perimeter with UAE-edge PoP routing for users within the UAE.

3.4 ISO/IEC 27001:2022 — Information Security Management System

Vegotron's operational security posture is aligned with ISO/IEC 27001:2022 across all controls:

• A documented Information Security Management System (ISMS) governs all security operations.
• Risk assessment and treatment processes are executed quarterly and upon material changes.
• Physical, logical, and network access controls enforced across all infrastructure tiers.
• Supplier security assessments required for any third-party services touching Platform data.
• Internal audit cycle with defined remediation timelines for identified non-conformities.

3.5 ISO/IEC 27701:2019 — Privacy Information Management System

As an extension of ISO 27001, Vegotron applies ISO/IEC 27701:2019 (PIMS) — the international standard for privacy information management — governing:

• Personal Identifiable Information (PII) controller and processor obligations.
• Privacy impact assessments (PIAs) for all new features that process personal data.
• Data retention minimization schedules with automated enforcement.
• Contractual privacy protections for all third-party data processors.

4. Eligibility

4.1 You must be at least eighteen (18) years of age to use the Platform.

4.2 The Platform is not available to persons located in jurisdictions where use is prohibited by applicable law.

4.3 Corporate or enterprise accounts require a designated administrator and must comply with all applicable entity-level obligations under these Terms.

5. Account Security & Decentralized Identity

5.1 Your account is anchored to a W3C Decentralized Identifier (DID) (`did:vegotron:<hash>`) derived from an Ed25519 key pair generated on your device inside a Trusted Execution Environment (TEE) or Secure Enclave. You are solely responsible for safeguarding your private key.

5.2 Vegotron implements multi-factor authentication, Argon2id credential hashing, memory-wiped session tokens (zeroed via `defer security.Zero()`), and zero-trust network access controls.

5.3 You agree to immediately notify Vegotron at [email protected] upon any suspected unauthorized access.

5.4 Key rotation is self-service via Account Settings → Identity → Rotate Key. Upon rotation, all prior session tokens are immediately invalidated.

5.5 Accounts exhibiting automated, scripted, or botnet-driven access patterns will be immediately suspended.

6. Acceptable Use Policy

6.1 Prohibited Conduct. You agree not to use the Platform to:

• Violate any applicable local, national, or international law or regulation.
• Upload, transmit, or distribute malicious code, viruses, or software designed to harm or exfiltrate data.
• Engage in harassment, hate speech, defamation, incitement to violence, or any conduct prohibited under UAE, Egyptian, or Saudi Arabian Federal Law.
• Impersonate any person, organization, or entity.
• Conduct automated data harvesting, scraping, or bulk extraction without a separately executed written data licensing agreement.
• Circumvent or interfere with any security, rate-limiting, TEE attestation, or access-control feature.
• Engage in market manipulation, fraud, or deceptive commercial practice through the marketplace or wallet.
• Upload, store, or distribute child sexual abuse material (CSAM).
• Attempt to reverse-engineer, decompile, or disassemble Platform binary executables.
• Attempt to break out of WebAssembly sandbox boundaries or TEE isolation.

6.2 Enforcement. Violations may result in immediate permanent account suspension, reporting to relevant law enforcement authorities in UAE, KSA, Egypt, or other applicable jurisdictions, and civil or criminal legal action.

7. Content Ownership & Licensing

7.1 You retain full ownership of all original content you create and upload ("Your Content").

7.2 By posting Your Content, you grant Vegotron a limited, non-exclusive, royalty-free, worldwide, revocable license to store, display, reproduce, and distribute Your Content solely for the purpose of operating the Platform.

7.3 This license does not permit Vegotron to sell, sublicense, or use Your Content to train external AI models.

7.4 You represent and warrant that you have all necessary rights to grant the license in §7.2.

8. Intellectual Property of the Sovereign Core Engine

8.1 Proprietary Technology Stack

All technology, code, infrastructure, branding, trademarks, and proprietary AI architectures comprising the Platform are the exclusive intellectual property of Vegotron® FZ-L.L.C, architected and built in entirety by Eng. Ahmed Ayman Saad Zaghloul Mahmoud:

8.2 Nothing in these Terms grants you any right, title, or interest in Vegotron's proprietary assets.

8.3 Unauthorized reverse engineering or copying constitutes a criminal offense under applicable cybercrime laws.

9. Node Hosting Terms

9.1 Eligibility

Qualified operators may apply to host a sovereign mesh node under a separate Node Operator Agreement. Node Operators must pass technical certification, identity verification, and execute binding commitments to Vegotron's standards.

9.2 Node Operator Obligations

Node Operators agree to:

• Operate exclusively with Vegotron-issued signed binary distributions.
• Maintain TLS 1.3 and mTLS 1.3 enforcement for all gRPC inter-node channels.
• Apply security patches within 48 hours (Critical) or 14 days (High) of issuance.
• Immediately report any suspected compromise to [email protected].
• Never log, inspect, or extract encrypted mesh payloads.

9.3 Node Compromise Consequences

Vegotron may immediately revoke mTLS certificates, terminate the Node Operator Agreement, and pursue civil remedies for damages.

10. Anti-Scraping & Anti-Bot Policy

10.1 Any automated data collection, web scraping, API farming, or bulk extraction by any third party is strictly prohibited without a separately executed written data licensing agreement.

10.2 This prohibition applies to all AI model training companies, data brokers, and their agents.

10.3 Detected scraping attempts trigger Cloudflare WAF blacklisting, forensic capture, and civil litigation.

11. AI Sovereignty Clause

11.1 All AI inference runs on Vegotron's on-premises sovereign pipeline or the User's local device. No User data is transmitted to any third-party AI cloud API.

11.2 Users may request a full export of AI inference logs within 30 days, subject to 24-hour auto-deletion schedules.

11.3 User Sovereignty Hub (v1.0.963): Users may self-delete content across posts, media, music, streams, podcasts, and email via privacy.vegotron.com without contacting support. Sector deletes are irreversible after the 30-day account erasure window unless otherwise required by law.

12. Marketplace & Economic Features

12.1 All financial transactions are governed by a separate Merchant Agreement and applicable UAE payment and financial services laws.

12.2 Vegotron maintains an immutable double-entry audit ledger with SHA-256 integrity hashes. Users may request signed, timestamped ledger exports.

12.3 The SAGA Transaction architecture (`E_TRANSACTION_SAGA_COMPENSATED`) governs marketplace checkout flows with automatic compensated rollbacks.

12.4 Live virtual gifts (v1.0.943): Sending gifts during a live broadcast (`/api/v1/social/gift` with `room_id`) debits the sender wallet through the same double-entry ledger as marketplace purchases. Gift events are broadcast in real time to room participants via encrypted WebSocket/SSE (`live_room_gift`). Gifts are non-refundable once delivered except where applicable consumer-protection law requires reversal. Vegotron may cap gift velocity and amounts for fraud prevention.

13. Multi-Platform Store Compliance

14. Disclaimers & Limitation of Liability

14.1 The Platform is provided "AS IS" without warranties of any kind.

14.2 Vegotron shall not be liable for indirect, incidental, special, consequential, or punitive damages.

14.3 Total aggregate liability shall not exceed the greater of amounts paid in the preceding twelve months or AED 500.

15. Governing Law & Dispute Resolution

15.1 These Terms are governed by the laws of the Emirate of Dubai and the Federal Laws of the UAE.

15.2 Unresolved disputes shall be submitted to binding arbitration administered by the Dubai International Arbitration Centre (DIAC).

15.3 Vegotron may seek injunctive relief from any court of competent jurisdiction to protect intellectual property.

16. Termination

16.1 You may terminate your account at any time via Account Settings or [email protected].

16.2 Vegotron may suspend or terminate accounts immediately for Terms violations.

16.3 Upon termination, your Platform license ceases immediately. §§7, 8, 10, 12, 14, and 15 survive termination.

17. Modifications

Material changes will be communicated with at least 14 days' notice via the Platform notification system and by email. Continued use after the effective date constitutes acceptance.

18. Contact

Vegotron® FZ-L.L.C Sharjah Free Zone, United Arab Emirates +971 555 206 302 https://vegotron.com

*Vegotron® FZ-L.L.C · Sharjah, United Arab Emirates · +971 555 206 302* *Last reviewed: July 12, 2026 | v3.0.18 (v1.0.963-User-Sovereignty-Omnibus-Delete) | ISO/IEC 27001:2022 · ISO/IEC 27701:2019 · UAE PDPL · Saudi Arabia PDPL · Egypt PDPL No. 151/2020 · NCA ECC-1:2018 · DESC-compliant · SIA-compliant · GDPR-aligned · Apple App Store · Google Play · Microsoft Store*