Terms of Service

1. Who we are

HeldFor (“HeldFor”, “we”, “us”) is operated by .

HeldFor is not affiliated with, endorsed by or sponsored by X Corp. (Twitter), pump.fun, Solana Foundation, or any person whose X account appears on the site. “X” is a trademark of X Corp.; we use it only to describe which accounts the service works with.

2. Agreement

These terms apply when you use the website, its APIs, or transactions it prepares for you. By connecting a wallet, signing a message or transaction prepared by HeldFor, or logging in with X, you accept these terms, the Privacy Policy, the Risk Disclosure and the Opt-out Policy. If you don’t agree, don’t use HeldFor. These terms apply to anything you do through our website, APIs or server.

3. What HeldFor is

HeldFor is a website and a custodial service on the Solana blockchain. It offers two ways to create a “bag”: tokens of a coin transferred to HeldFor’s custody wallet and held there for one X account.

• Launch a coin (/launch): in one transaction, you create a new coin on pump.fun, buy 0.1%–20% of its supply (default 2%) on pump.fun’s bonding curve (the “dev buy”), transfer exactly those tokens to HeldFor’s custody wallet for the X account you chose, and set pump.fun’s creator-fee sharing to 80% for you and 20% for HeldFor. Either all of this happens or none of it does.
• Lock tokens of an existing coin (/lock): if you hold tokens of a pump.fun coin, you can lock some of them (at least 0.1% and at most 20% of the supply per lock) for an X account, paying a flat lock fee.

The owner of that X account (the “recipient”) can, at any time, log in with X and either claim the bag (it is paid out to a wallet they choose, linearly over 30 days) or burn it (destroy it permanently). HeldFor releases it to nobody else.

We are not a crypto-asset exchange, broker, launchpad operator or market maker. We do not issue, sell, promote or price any coin. Coins are created by their deployers on pump.fun and trade on pump.fun and other third-party venues.

4. HeldFor holds the bags (custody)

• We never hold your private keys and never ask for them. Every transaction you send is signed in your own wallet.
• Bags are held in HeldFor’s custody wallet (address on /docs) and released only to the verified X owner: to the wallet the recipient chose (as it vests) or into a burn. No smart contract enforces this; you rely on HeldFor and on the security of the custody key. If that key were lost or stolen, bags could be lost.
• Locking is irreversible. The deployer or locker can never get a bag back.
• Our relayer wallet pays network fees for recipients so claiming is free for them. If it is unavailable, withdrawals and burns wait until it is topped up.
• Embedded wallets created on the claim page are provided by Privy, a third party. We never see or hold their keys.

5. Devnet and mainnet

HeldFor may run on Solana devnet (a test network) or mainnet (the real network). The site shows which network it uses on /docs. Devnet tokens and devnet SOL have no value, test X accounts on devnet are fake, and devnet data may be reset at any time. Nothing done on devnet carries over to mainnet. On mainnet, everything you sign uses real SOL and is final.

6. Who may use HeldFor

• You must be at least 18 years old and able to enter into a binding contract.
• You may not use HeldFor if you are located in, resident in, or organised under the laws of a restricted jurisdiction, or if you are on a sanctions list (EU, UN, UK, US OFAC, Latvian national lists). Restricted jurisdictions: .
• You must not use a VPN or other tool to get around a block. We may block access from some locations.
• You use HeldFor for yourself, or for a company you are authorised to bind.

7. Launching a coin

• You are the creator of the coin on pump.fun and solely responsible for it: its name, ticker, image, description and anything you say about it.
• The site adds a line to the description, e.g. “2% held for @handle via HeldFor”. This states a fact about the lock. You must not change its meaning or suggest that the person behind the X account knows about, endorses or promotes your coin.
• The dev buy happens on pump.fun’s bonding curve at pump.fun’s prices and fees. The site shows an estimate before you sign; the transaction spends at most the shown amount plus a 1% margin, and fails otherwise.
• The bag cannot be undone. You keep no claim to it.
• Your image, name, ticker and description are uploaded to public storage (pump.fun’s IPFS service or our own hosting) and written to the blockchain. They are public and generally permanent.

8. Locking tokens of an existing coin

• You may lock only tokens you own. The coin must be a pump.fun coin whose tokens can’t be frozen and whose supply can’t be increased.
• You can lock the same coin several times and for several accounts. Each lock is its own bag.
• A coin counts as “held for” an account only once the lock is confirmed on chain. If the creator of the coin shares fees with the HeldFor treasury on pump.fun, that is their own choice on pump.fun; we have no say over it.

9. X accounts and the people behind them

• Anyone can lock a bag for any public X account that exists, isn’t suspended and hasn’t opted out. The person behind it doesn’t have to agree first.
• A bag held for someone is not a gift from us, not a promise that it has or will have any value, and not an endorsement by that person.
• We identify accounts by their numeric X user id, not their handle. If a handle changes, the bag stays with the account. If an account is deleted, suspended or lost, the bag may never be claimed.
• Our receipt bot posts public updates about bags on X. It only @mentions people who allowed it; otherwise it writes the handle without the @. It never posts about opted-out accounts.

10. Claiming or burning a bag

• To claim, you log in with X. Our server checks that your X user id matches the bag before it starts vesting, withdraws or burns anything.
• Vest: the bag is paid to the wallet you choose, linearly over 30 days (the period stored with the bag when it was locked). You press Withdraw whenever you want to receive what has vested so far. The destination can’t be changed later, so check it.
• Burn: the whole bag is destroyed permanently. This is public and can’t be undone.
• During the first weeks after mainnet launch, claims of bags above a set value may be held for a short manual review before vesting starts. We tell you if that happens. Review only checks that the claim is genuine; it never changes who the bag belongs to.
• Receiving tokens may be taxable for you.
• If someone else gets into your X account, they can claim your bags. Protect your X account (strong password, two-factor authentication).

11. Opting out

Anyone can block all future bags for their X account and burn existing ones. It is free and permanent. See the Opt-out Policy.

12. Fees

Fees are paid on chain and are non-refundable once a transaction succeeds.

13. What you have to trust

HeldFor is custodial. You have to trust the following, and you accept these risks:

• HeldFor and its custody key. One key controls the custody wallet that holds every bag. Whoever controls it can move every bag. HeldFor keeps it offline except on its server, logs every transfer, and reconciles the wallet against its ledger continuously.
• X. Claims depend on X’s login. If X changes or ends its API, logins can stop working until we adapt.

Details: trust model and audit status.

14. Prohibited use

• Harassing, threatening, defaming or doxxing anyone; targeting minors; hate speech; sexual content involving minors; content glorifying violence.
• Impersonating any person or brand, or suggesting endorsement that doesn’t exist.
• Fraud, market manipulation, wash trading, pump-and-dump schemes, insider trading, misleading promotion, or rug pulls.
• Money laundering, terrorist financing, sanctions evasion, or any other unlawful activity.
• Infringing intellectual property or personality rights (names, images, logos you have no right to use).
• Attacking, overloading or reverse-engineering the service beyond what our security policy allows; getting around rate limits, blocks or caps.
• Using HeldFor to spam people on X or elsewhere.

15. Your content

You keep all rights to the name, ticker, image and description you upload. You give us a worldwide, free, non-exclusive licence to store, display and share them as part of the service (coin pages, share cards, receipts), for as long as the coin is shown. You confirm you have the rights to upload them.

16. Moderation and notices

We can hide coins, profiles, images or descriptions from the website, stop the bot from posting about them, and refuse to prepare transactions, if they break these terms or the law, or on a valid request from a person concerned. We cannot change, delete or move anything on chain. To report content: .

17. No advice

Nothing on HeldFor is investment, financial, legal or tax advice, or an offer or recommendation to buy or sell anything. Prices, market caps and bag values are estimates from public data and can be wrong or delayed. Memecoins can lose all their value. Read the Risk Disclosure.

18. Third-party services

HeldFor relies on Solana, pump.fun, X, Privy, wallet providers, RPC providers (Helius) and hosting providers. Their terms apply to your use of them, and we are not responsible for their availability, changes or actions.

19. Disclaimers and limitation of liability

HeldFor is provided “as is” and “as available”. To the extent the law allows, we are not liable for: losses from market movements; the value of any coin or bag; bugs in the vault program or in third-party programs; a compromise of the verifier key, the upgrade authority or your X account; outages or changes of Solana, pump.fun, X or other third parties; transactions you sign; or indirect or consequential losses.

Our total liability to you is limited to the fees you paid us in the 12 months before the claim, or EUR 100, whichever is higher. Nothing in these terms limits liability for intent or gross negligence, for death or personal injury, or any other liability that cannot be limited under Latvian or EU law.

20. Indemnity

If you are not a consumer, you will compensate us for third-party claims caused by your coin, your content or your breach of these terms.

21. Consumers in the EU

If you are a consumer, nothing in these terms takes away the rights you have under mandatory EU or Latvian consumer law.

• Right of withdrawal. On-chain transactions are executed immediately at your request and cannot be reversed.
• Complaints. Write to us first (contact below); we answer within 30 days. You may also contact the Consumer Rights Protection Centre of Latvia (Patērētāju tiesību aizsardzības centrs, ptac.gov.lv).

22. Governing law and disputes

23. Changes

We may change these terms, for example when the law or the service changes. We announce material changes on the website at least 30 days before they take effect. Changes never affect bags already locked: their rules are fixed in the vault program. If you keep using HeldFor after a change takes effect, the new terms apply.

24. Contact

. Security reports: see audit status and security.txt.