Terms of Service

1. The service

Ipsis is an identity verification service offered as an API and a hosted capture page. It reads an identity document, checks what it reads against deterministic rules, runs a live movement check and compares the selfie with the document photo. It is operated by [a preencher], registration [a preencher], [a preencher].

2. Accounts and API keys

Accounts are for companies, not individuals. You receive a test key and, after accepting these terms and the data processing agreement, a live key. Keys are secrets for server to server use: never place them in a browser or a mobile app. You are responsible for every call made with your keys until you ask us to revoke them.

The free plan is limited to one account per company and per domain, under the conditions published on the pricing page.

3. Your responsibilities

You are the controller of the personal data of the people you verify. You decide why and when to verify someone, you inform them and you rely on a valid legal basis. The capture page collects a specific consent for biometric data that names your company before any image is taken.

You must not use Ipsis to search for people in a face database, to monitor people, to make decisions that discriminate on protected grounds, or for any purpose that is unlawful where you or the person are located.

4. What a result means

Each session returns approved, rejected or awaiting review, with the checks and reason codes behind it. A result is evidence and a recommendation, not a guarantee of identity. We do not consult government databases, we do not check physical security features of documents and a browser cannot reliably detect a virtual camera. Human review is the default; automatic approval is a setting you choose to turn on.

5. Prices and billing

Prices are those published on our pricing page for your plan and currency. A verification is billed once, when a session reaches its first result. Links that are never opened, expire or are abandoned, retries in the same session and repeated requests with the same X-Request-Id are not billed. Price changes are announced 60 days in advance and do not affect the current cycle.

6. Availability and support

We work to keep the service available but, unless an Enterprise contract says otherwise, no plan includes an availability commitment. Support response times published for each plan are targets. Features marked as soon are not part of the service until they are launched.

7. Data protection

The data processing agreement forms part of these terms and governs how we process personal data on your behalf, including sub-processors, international transfers, retention, deletion and incident notification.

8. Suspension and termination

You can stop using the service at any time. We may suspend access in case of unpaid invoices, misuse or a risk to the people being verified, with notice whenever the situation allows. On termination, images and personal data follow the retention you configured and can be deleted earlier through the API.

9. Liability

Limits of liability, exclusions and their amounts: [a preencher].

10. Governing law and contact

These terms are governed by the laws of [a preencher]. Questions about these terms: ipsis@tolky.to.