Terms of Service

1. Acceptance of Terms

By accessing or using the iVerify identity verification service ("Service"), you agree to be bound by these Terms of Service. If you do not agree, do not use the Service.

We may update these terms at any time. Continued use after changes constitutes acceptance of the revised terms.

2. Description of Service

iVerify provides an API and web interface for checking Kenyan national ID numbers against configured identity verification providers. The Service includes:

• A public demo with limited daily requests for exploration.
• An API for authenticated organisations to integrate identity checks into their workflows.
• Encrypted caching of verified results to reduce redundant provider lookups.

The Service is intended as a verification aid, not a definitive confirmation of identity. Users should implement appropriate safeguards in their own processes.

3. Demo Usage

3.1 Rate Limits

The public demo allows 3 verification requests per day per visitor. Once exhausted, you must sign in with Google to continue or request an API key.

3.2 Responsible Use

The demo is for evaluation purposes only. Do not use it to:

• Verify IDs belonging to persons other than yourself without their explicit consent.
• Automate requests or attempt to bypass rate limits.
• Store, redistribute, or commercialise demo results.

4. API Access

4.1 API Keys

API keys are issued at our discretion to authenticated users. By requesting an API key, you agree to:

• Keep your API key confidential and secure.
• Use the Service only for lawful purposes.
• Comply with applicable data protection laws when processing personal data.
• Not resell, redistribute, or mirror the Service without written permission.

4.2 Rate Limits and Fair Use

API access may be subject to rate limits, usage quotas, and fair use policies. We reserve the right to adjust limits, suspend access, or revoke keys for abuse or policy violations.

4.3 Service Availability

We aim for high availability but do not guarantee uninterrupted service. The Service may experience downtime due to maintenance, provider outages, or unforeseen circumstances.

5. Accuracy and Reliability

Identity verification results depend on external providers. While we implement fallback mechanisms and caching, we do not guarantee:

• That every ID number will return a result.
• That returned data is current or complete.
• That a "verified" result confirms the full identity of the person presenting the ID.

Users are responsible for implementing their own verification workflows and should not rely solely on iVerify results for high-stakes decisions.

6. Data Protection and Privacy

Our handling of personal data is governed by our Privacy Policy. Key commitments include:

• Raw ID numbers, names, and ages are never stored in plaintext.
• All sensitive data is encrypted at rest using AES-256-GCM.
• Provider response bodies are never persisted.
• We comply with the Kenyan Data Protection Act, 2019.

7. Intellectual Property

The iVerify Service, including its code, design, branding, and documentation, is owned by us and protected by copyright and intellectual property laws. You may not:

• Copy, modify, or create derivative works of the Service.
• Remove or alter proprietary notices.
• Use the iVerify name or branding without permission.

The open-source codebase is available under its respective license on GitLab.

8. Limitation of Liability

To the maximum extent permitted by law, iVerify and its operators shall not be liable for:

• Indirect, incidental, special, or consequential damages arising from use of the Service.
• Decisions made based on verification results.
• Data loss, service interruption, or unauthorised access despite reasonable security measures.

Total liability shall not exceed the amount paid by you for the Service in the 12 months preceding the claim, or KES 1,000 for demo users.

9. Prohibited Conduct

You agree not to:

• Use the Service for fraudulent, illegal, or unauthorised purposes.
• Attempt to reverse-engineer, decompile, or extract encryption keys.
• Interfere with the Service's security features, including CAPTCHA and rate limiting.
• Impersonate another user or misrepresent your identity.
• Use automated tools to access the Service without authorisation.

10. Termination

We may suspend or terminate your access to the Service at any time, with or without notice, for:

• Breach of these terms.
• Suspected fraudulent or abusive activity.
• Extended inactivity.
• Service discontinuation.

Upon termination, your API key (if any) will be revoked immediately.

11. Governing Law

These terms are governed by the laws of Kenya. Any disputes shall be resolved in the courts of Kenya. Nothing in these terms affects your statutory rights as a consumer under Kenyan law.

12. Contact

For questions about these terms, API access, or legal inquiries:

• Email: hello@yourservice.com
• Website: iVerify