Terms of Service

By creating an account, accessing the Next Bridge platform at nextbridge.exchange, or using any of its surfaces — the website, the Model Context Protocol server, the Telegram bot, or the public Application Programming Interface — you agree to be bound by these Terms of Service. If you do not agree, you may not use the platform.

Next Bridge is a demonstration platform built as a university senior project for the ICT 499 course at the American University of Science and Technology. It is not a regulated financial service, is not authorized by any financial regulator, and does not accept, custody, or move real customer funds. Balances displayed on the platform are simulated. Details of the platform's scope and limitations are described in the Disclosures document.

To register, you must be at least eighteen years of age. Identity verification through the Sumsub provider is required before any trading or settlement operation is permitted. Users in jurisdictions where the demonstration of a cryptocurrency exchange would violate local law are not permitted to use the platform.

You are responsible for safeguarding your account credentials, including passwords, two-factor authentication codes, passkeys, and Application Programming Interface keys. You agree to notify the platform operators immediately at security@nextbridge.exchange of any unauthorized access. The platform implements bcrypt password hashing, fifteen-minute access tokens with thirty-day rotating refresh tokens, WebAuthn passkey support, and per-account rate limiting, but the security of your endpoint device is your responsibility.

Users are required to complete identity verification through Sumsub prior to executing trades, peer-to-peer settlements, or withdrawals above the platform's minimum thresholds. Because this is a demonstration platform, real government-issued identification documents should not be submitted. Sumsub provides sandbox test documents for use during demonstrations.

You agree not to use the platform to:

• Circumvent or attempt to circumvent the platform's security controls (rate limiting, identity verification, two-factor authentication, withdrawal allowlists).
• Attempt to access another user's account, data, or session.
• Submit identification documents belonging to another person.
• Use the peer-to-peer marketplace to coordinate transactions outside the platform's escrow flow with the intent to defraud another user.
• Probe, scan, or test the vulnerability of the platform without prior written consent (responsible-disclosure channel is documented at /security).
• Use automated systems (scripts, scrapers, agents) to exceed the platform's rate limits or to abuse the public Application Programming Interface.

The platform charges 0.1 percent on spot trades, 0.5 percent on completed peer-to-peer trades, and a 3 percent spread on Quick Trade operations (inclusive of any platform fee). Withdrawal network fees are fixed per network and displayed at withdrawal time. Fee schedules may be updated; the latest values are always shown in the user interface at the moment of the operation. The complete fee schedule is documented in the Disclosures document.

All trades on the platform are executed against simulated balances with reference to live price feeds from CoinGecko, OKX, and Binance. The platform refuses to settle trades on stale fallback prices. Trades are atomic with their corresponding balance updates: a partial-fill race or a duplicate request will not double-debit or double-credit an account. Slippage envelopes are supported on the trade endpoint and will reject fills whose execution price moves outside the caller's requested band.

The peer-to-peer marketplace allows users to post offers to buy or sell cryptocurrency for fiat via off-platform payment rails (notably Whish Money). The platform holds the cryptocurrency in escrow during the trade. Disputed trades are resolved by an administrator on the basis of the chat record and any payment proof submitted by the parties. Administrators reserve discretion in dispute resolution; the decision is final for the simulated balances involved.

Withdrawal requests are subject to two-factor authentication verification, a per-network minimum, per-network destination-address validation (including base58check, bech32, and EIP-55 checksum validation as appropriate), and a per-account daily aggregate cap denominated in the reference stablecoin. Withdrawals above this cap are routed to administrator review and are not settled automatically. On-chain transaction-hash receipts are verified against the relevant block explorer or remote-procedure-call provider before a withdrawal is marked complete.

Application Programming Interface keys may be created in Settings → Security with granular scopes (read, trade, withdraw, admin), optional per-key rate-limit overrides, and optional Internet Protocol address allowlists. You agree not to publish, share, or otherwise disclose your keys to third parties. The platform may revoke keys showing abuse patterns without prior notice.

The platform, its source code, its documentation, the Exchange-via-MCP protocol specification, and its visual identity (logo, wordmark, Atlas design system) are the intellectual property of the authors. The Exchange-via-MCP Protocol v1.0 specification is separately published as an open standard and may be implemented by any third party.

The platform is provided “as is” and “as available” without warranty of any kind, express or implied. As a university demonstration project, service interruptions are expected. The platform makes no warranty of uptime, of correctness of price feeds, of completeness of identity verification, or of fitness for any particular purpose.

To the maximum extent permitted by applicable law, neither the platform nor its authors are liable for any direct, indirect, incidental, special, consequential, or exemplary damages arising from your use of the platform. The platform handles simulated balances; no real-world financial harm can result from the platform's operation under intended use.

You agree to indemnify the platform and its authors against any claims, damages, or losses arising from your misuse of the platform, your violation of these Terms, or your violation of any third-party right.

The platform operators reserve the right to suspend or terminate any account that violates these Terms, exhibits abuse patterns, fails identity verification, or whose activity suggests fraudulent intent. Account closure may also be initiated by the user through Settings → Close account.

These Terms are governed by the laws of Lebanon, the jurisdiction in which the platform is developed and operated. Disputes are subject to the courts of Beirut, Lebanon.

These Terms may be updated to reflect changes to the platform. Material changes will be surfaced to logged-in users via the notification system. Continued use of the platform after a change has been published constitutes acceptance of the revised Terms.

Questions about these Terms may be directed to devs@nextbridge.exchange. Security-related disclosures follow the path documented at /security.