X’s new terms put you on the hook for its AI agents

Why it matters

X is using one consumer contract to assign agent risk to users and extend dispute protections across a group that now includes SpaceXAI, Cursor and SpaceX.

X is drawing the liability map for its agentic products before explaining what those products will do. Under revised terms taking effect October 9th, users bear responsibility for autonomous actions performed through X's services, while X retains a broad liability cap and extends key dispute protections across a corporate group that now includes major AI and aerospace businesses.

The two halves of the contract move risk in the same direction. Users become responsible for prompts, outputs, information and actions generated through autonomous features, including compliance with laws and X policies. X and covered affiliates, meanwhile, benefit from a Texas forum requirement, individual arbitration when that forum is unavailable, class-action and jury waivers, shortened filing periods and limits on available remedies.

The terms update, published September 9th, gives users 30 days before the revisions take effect. Continued use after October 9th counts as acceptance, according to the social platform. The contractual alternative is to deactivate the account and stop using the covered services.

The agent exists in the contract before it exists in the product

The most consequential addition appears in the section governing user content. The revised terms make users responsible for their use of any feature that performs autonomous actions, along with the inputs, prompts, outputs and information created or obtained through the service.

Users must also ensure that actions taken autonomously on their behalf comply with applicable laws, regulations and X policies. The contract does not identify a particular autonomous feature, define the tasks it might perform or explain how much control a user would retain over an action once initiated.

That absence is the point of the provision's breadth. X is establishing a general allocation of responsibility that can cover agentic features without rewriting the contract for each product. If an automated tool acts for a user, X's stated position is that the resulting legal and policy obligations remain with the user.

The language resembles the consumer terms used by SpaceXAI, the AI business behind Grok. Those terms describe agentic actions that can include browsing the web, executing code, sending communications, modifying files, calling tools and interacting with third-party services. SpaceXAI likewise assigns responsibility for those actions to the user.

X's agreement pairs that responsibility with a broad limitation of its own exposure. Under the US-oriented terms, the aggregate liability of X and related entities is capped at the greater of $100 or the amount the user paid for the relevant services during the previous six months, wherever such limits are permitted by law.

The contract does not determine how a court would allocate responsibility after a specific agent failure. It does, however, establish the position X intends to invoke: users own the consequences of autonomous activity, while the company limits both its potential liability and the procedures available for challenging it.

The legal perimeter is catching up with the corporate rollup

The revised terms also name SpaceXAI, the AI coding company Cursor and SpaceX entities when extending dispute, forum and class-action provisions to US corporate affiliates. Those businesses are designated as third-party beneficiaries, allowing them to invoke the covered protections in qualifying disputes.

That language follows a rapid consolidation of the group during 2026. SpaceX disclosed in February that it had acquired xAI as the foundation of its AI segment. Cursor said on August 14th that SpaceX had completed its acquisition of the coding company after an earlier model-training partnership with SpaceXAI.

X's contract now creates a wider legal perimeter around that structure. Claims involving X services could be governed not only by protections for X itself, but also by clauses written to benefit affiliated AI, coding and aerospace entities.

The terms say the governing-law, venue and arbitration provisions apply to pending and future disputes regardless of when the underlying conduct occurred. That language states the companies' contractual position; it does not guarantee that every provision will be enforced retroactively or in every jurisdiction. Enforceability will depend on the governing law and the court considering a particular dispute.

The dispute clauses narrow more than geography

For users outside the European Union, European Free Trade Association states and the United Kingdom, disputes must proceed under Texas law in federal or state courts covering Wichita County or Tarrant County. X already required covered users to litigate in Texas and already prohibited class, collective and representative actions.

The October revision adds a fallback if the specified venue cannot be enforced: binding arbitration administered by the American Arbitration Association. It also makes the jury-trial waiver explicit.

The result is a procedural funnel rather than a simple choice of courthouse. Claims are directed first to specified Texas courts. If that route is unavailable, disputes move to individual arbitration before a retired federal district or appellate judge. Proceedings are confidential unless disclosure is legally required, each side generally bears its own costs and attorneys' fees, and the arbitrator cannot issue injunctive relief. Appeal rights are waived to the maximum extent permitted by law.

The agreement also limits when users can sue. Federal claims must be brought within one year, while state claims must be initiated within two years and one day of the event underlying the dispute.

Taken together, the provisions seek to control the venue, format, timing and potential remedies for claims just as the autonomous-action clause expands what users are expected to answer for. The contract therefore does more than prepare X for a new product category. It attempts to preassign the legal consequences of that category across an increasingly integrated corporate group.

Users in the EU, EFTA states and the UK remain under Irish law and Irish courts. X added language confirming that the choice of Irish law does not remove mandatory protections available under a user's home-country law. Jury and collective-action waivers apply there only where local law permits them.