The terms governing your use of CredFlare's identity verification and compliance platform, dashboard, and APIs.
These Terms of Service ("Terms") govern your access to and use of CredFlare's website, dashboard, APIs, and verification services (together, the "Services"). By creating an account, calling our APIs, or otherwise accessing the Services, you agree to these Terms on behalf of yourself and the organisation you represent.
If you do not agree to these Terms, do not use the Services.
To use most of the Services you must register an account and provide accurate organisation, billing, and contact information. You are responsible for keeping account credentials secure and for all activity under your account. Notify us promptly at security@credflare.net if you suspect unauthorised access.
You may grant access to additional users within your organisation through the dashboard. Each authorised user must abide by these Terms.
You may use the Services for the lawful, legitimate verification of identity, documents, and credentials, in compliance with applicable law and the verification profile you have configured. You may not use the Services to:
You are the data controller for the personal data you submit for verification, and you are responsible for obtaining the consent or other legal basis required by applicable law. CredFlare acts as your data processor under the Data Processing Addendum incorporated into these Terms.
You agree to provide verification subjects with clear, accurate notice of the verification, the categories of data processed, the legal basis, and their rights under applicable data-protection law.
Fees for the Services are set out in your order form, the pricing page, or the agreement we have signed with your organisation. Unless otherwise agreed, fees are charged monthly in arrears, due net thirty, and are non-refundable except where required by law.
Late payments accrue interest at the lower of 1.5% per month or the maximum rate permitted by law. We may suspend the Services for accounts more than thirty days past due, after providing reasonable notice.
CredFlare retains all rights, title, and interest in the Services, including the platform, models, dashboards, APIs, documentation, brand, and underlying technology. You receive a limited, non-exclusive, non-transferable licence to use the Services in accordance with these Terms during your subscription.
You retain all rights to the data you submit. You grant us a limited licence to process that data solely for the purpose of providing the Services. We do not train identity-verification models on customer data beyond what is necessary for the verification a subject consented to.
When the Services produce a Universal Verification Number ("UVN"), the UVN and its associated verification profile constitute customer content owned by you (or, where applicable, by the verification subject). You may share UVNs with downstream parties subject to the consent obtained from the verification subject and applicable law.
CredFlare maintains the UVN registry as a service. We will retain UVN records for the period required by the customer's compliance profile and applicable regulation.
We strive to maintain 99.9% uptime for production tier customers, measured monthly and excluding scheduled maintenance and force majeure events. The applicable Service Level Agreement and any associated remedies are set out in your order form or master agreement.
The Services are provided "as is" and "as available". While we take reasonable care to ensure verification accuracy, we do not guarantee that any verification will detect every instance of fraud, document forgery, or impersonation. The Services are a tool to support your compliance program; they do not replace your responsibility to make compliance decisions and to apply human judgment where appropriate.
To the maximum extent permitted by law, we disclaim all implied warranties, including merchantability, fitness for a particular purpose, and non-infringement.
Except for breaches of confidentiality, infringement of intellectual property, or gross negligence:
You will indemnify and hold CredFlare harmless from claims arising out of your use of the Services in violation of these Terms, your handling of verification subject data outside the legal basis you have obtained, or your violation of applicable law.
CredFlare will indemnify you against claims that the Services, as provided by us and used in accordance with these Terms, infringe a third party's intellectual property rights, subject to the procedures and limits set out in your master agreement.
These Terms remain in effect for as long as you use the Services or have an outstanding balance with us. Either party may terminate for material breach not cured within thirty days of written notice. We may suspend the Services immediately if your use poses a security risk, violates law, or threatens the integrity of the platform.
On termination, your right to use the Services ends. We will provide a reasonable export of your data and verification records on request, after which we will delete or return them in accordance with our retention schedule and applicable law.
Each party agrees to keep the other's confidential information confidential, to use it only for the purpose of these Terms, and to protect it with at least the same care it uses for its own confidential information. The obligations survive termination for five years.
We may modify the Services from time to time, including adding features, deprecating endpoints, and adjusting performance characteristics. We will provide reasonable advance notice of material changes that affect your integration, typically at least sixty days.
We may also update these Terms. Material changes will be communicated by email and posted at the top of this page, with a notice period appropriate to the change. Continued use of the Services after the effective date constitutes acceptance of the updated Terms.
These Terms are governed by the laws of the jurisdiction stated in your master agreement. If no master agreement applies, the laws of the Federal Republic of Nigeria govern, without regard to conflict-of-laws principles.
The parties will attempt to resolve disputes through good-faith negotiation. If negotiation fails, disputes will be resolved by arbitration under the rules of the agreed arbitration body, with judgment enforceable in any court of competent jurisdiction.
Neither party is liable for failure to perform caused by events beyond its reasonable control, including natural disasters, war, terrorism, civil unrest, government action, internet or telecommunications failures, or labour disputes, provided the affected party gives prompt notice and takes reasonable steps to mitigate.
Questions about these Terms: legal@credflare.net.