Terms of Service

Effective date: [DD Month 2026] · Last updated: [DD Month 2026]

These terms govern your use of authstamp.io, app.authstamp.io, verify.authstamp.io and related services (the “Services”), provided by [Company legal name] (“Authstamp”, “we”, “us”). By using the Services you agree to these terms. If you use them for an organisation, you confirm you have authority to bind that organisation.

1. Who the Services are for

• Issuers: organisations that issue documents and memberships through Authstamp, on a free or paid plan.
• Holders and members: people or organisations who receive documents or memberships from an issuer.
• Verifiers: anyone who checks a document or membership.

2. Accounts

You must give accurate information, keep your login details secure, and tell us promptly about any unauthorised use. You are responsible for activity on your account, including by team members you add. We may verify an issuer’s identity and registration before showing it as a verified issuer.

3. Issuer responsibilities

As an issuer, you are responsible for every document and membership you issue. You confirm that:

• you are entitled to issue it, and its contents are accurate and lawful;
• you have a lawful basis under the Data Protection Act, 2019 to share holders’ and members’ personal data with us, and you have given them any notice required;
• you choose an appropriate view policy for each document, and you accept that verifiers will see what that policy allows;
• you will revoke a document or update a membership promptly when it should no longer be relied on;
• only authorised people in your organisation can issue, sign or revoke on your behalf.

Authstamp does not check the truth of a document’s contents. We record and confirm what you issue.

4. Holders and members

Holders and members can receive, keep and share their documents and memberships free of charge. Do not alter a stamped document or present it as something it is not. Questions about a document’s contents, or a membership’s status, should go to the issuer.

5. Verifiers and what a result means

Single checks are free. Bulk checks and the API are paid features.

A result of genuine means the document or membership matches a record created by the named issuer and has not been revoked or expired. It does not guarantee that every statement in the document is true, that the issuer is entitled to make it, or that it suits your purpose. Use your own judgement and, where the stakes are high, other checks as well.

You must not use the verification service to collect personal data in bulk, guess codes, or get around an issuer’s view policy.

6. Plans, billing and payment

• Plans, prices and limits are shown on our pricing page or in a written quote. Prices are in Kenya Shillings and exclude VAT unless stated.
• Paid plans are billed monthly or yearly in advance and renew automatically until cancelled. Use above your plan’s limits is billed as overage at the rates for your plan.
• The Free plan has limits on volume and features and may change with notice.
• You can cancel at any time. Cancellation takes effect at the end of the current billing period. Fees already paid are not refunded, except where the law requires it or we agree in writing.
• If payment is overdue, we may move your account to the Free plan or limit issuing after a grace period. Documents already issued will continue to verify.
• We may change prices with at least 30 days’ notice. Changes apply from your next renewal.

7. Acceptable use

You must not:

• issue false, fraudulent or misleading documents, or impersonate another organisation;
• upload unlawful content, malware, or content you have no right to use;
• try to forge, copy, reuse or tamper with stamps, codes or signatures;
• attempt to access accounts, data or systems you are not authorised to use, or test their security without our written permission;
• overload, scrape or reverse engineer the Services, except where the law allows;
• use the Services in breach of any law, including data protection and anti-fraud laws.

8. Data protection

Our Privacy Policy explains how we handle personal data. For holder and member data an issuer gives us, the issuer is the data controller and Authstamp is its data processor. We process that data only to provide the Services and on the issuer’s instructions, keep it confidential and secure, and help the issuer respond to data subject requests and breaches. Issuers who need a separate data processing agreement can request one.

9. Intellectual property

We own the Services, including the software, the Authstamp name, logo, seal and design. You own the content you upload. You give us a licence to host, process and display your content only as needed to provide the Services, including showing it to verifiers as your view policy allows. If you send us feedback, we may use it without obligation to you.

10. In-house installations and API

In-house installations, enterprise plans and API access may be covered by a separate written agreement or licence. Where that agreement conflicts with these terms, the separate agreement applies.

11. Availability and changes

We work to keep the Services available and secure, but they may sometimes be interrupted for maintenance, updates or events outside our control. We may improve or change features. If we remove a significant feature from a paid plan, we will give reasonable notice.

12. Suspension and termination

We may suspend or close an account, or revoke access to the Services, if we reasonably believe it is being used for fraud, breaks these terms or the law, or puts others at risk. Where practical, we will tell you first and give you a chance to fix the problem. You may close your account at any time. After closure, we handle your data as described in the Privacy Policy. Sections that by their nature should continue, including payment, disclaimers, limitation of liability and governing law, survive termination.

13. Disclaimers

The Services are provided “as is” and “as available”. To the extent the law allows, we do not give warranties that the Services will be uninterrupted or error-free, or that verification results are suitable for any particular decision. Nothing in these terms limits rights you have under the Consumer Protection Act, 2012 or other law that cannot be excluded.

14. Limitation of liability

To the extent the law allows, Authstamp is not liable for indirect or consequential losses, lost profits or lost data, or for losses caused by documents an issuer created, by decisions a verifier made, or by events outside our reasonable control. Our total liability for any claim relating to the Services is limited to the fees you paid us in the 12 months before the claim, or KES [10,000] if you paid nothing.

15. Indemnity

Issuers will compensate Authstamp for claims and losses arising from documents or memberships they issue, data they provide without a lawful basis, or their breach of these terms.

16. Governing law and disputes

These terms are governed by the laws of Kenya. We will first try to resolve any dispute by good-faith discussion. If that fails within 30 days, the dispute will be decided by the courts of Kenya.

17. General

• We may update these terms. We will post the new version here with a new date and notify issuers of significant changes by email. Continuing to use the Services means you accept the updated terms.
• If any part of these terms is found unenforceable, the rest remains in effect.
• You may not transfer your account or these terms without our consent. We may transfer them as part of a merger or sale.
• Failure to enforce a term is not a waiver of it.

18. Contact

[Company legal name]
[Registered address], Kenya
Email: eric@authstamp.io