Terms of Service

1. Agreement

These Terms of Service (the "Terms") form a binding agreement between you and Universal Identity Protocol ("UIP," "we," "us") governing your access to and use of the UIP customer dashboard at uip.digital, the UIP API at api.uip.digital, and any related documentation and services (collectively, the "Service").

By creating a UIP account, integrating the UIP API, or otherwise using the Service, you agree to these Terms. If you are using the Service on behalf of a business, you represent that you have authority to bind that business to these Terms, and "you" means both you and the business.

These Terms include the Privacy Policy, the sub-processor list, and, for business customers, the Data Processing Addendum.

2. The Service

UIP provides a developer platform for composing government-attested workflows — identity, signatures, consent, and other primitives — across the digital wallets your end users already carry (Apple Wallet, Google Wallet, EUDI national wallets, and others). The Service includes:

The UIP customer dashboard (account management, API keys, audit logs, billing)
The UIP API and webhooks
Wallet-orchestration logic across Apple Wallet, Google Wallet, EUDI, and other supported credential ecosystems
The UIP audit format and verification surface

3. Eligibility & accounts

You must be at least 18 years old, or the age of digital consent in your jurisdiction, whichever is higher.
You must provide accurate information and keep it up to date.
You are responsible for safeguarding your account credentials. Sign-in is handled by Firebase Authentication; we recommend enabling multi-factor authentication on your Google or GitHub account if you sign in via OAuth. You must notify us promptly at [email protected] of any suspected compromise.
Businesses must register with verified legal identity and an authorized natural-person account owner. The owner's wallet-verified identity binds all actions taken on behalf of the business.

4. License & intellectual property

UIP grants you a limited, non-exclusive, non-transferable, revocable license to access and use the Service in accordance with these Terms. The Service, including all software, API designs, audit-format specifications, and documentation, is and remains the property of UIP and its licensors. No rights are granted by implication.

You retain ownership of the data you submit to the Service. You grant UIP a worldwide, royalty-free license to process that data solely to provide and improve the Service in accordance with the Privacy Policy and, for business customers, the DPA.

5. Acceptable use

You agree not to, and not to permit any third party to:

Misrepresent identity: create accounts using another person's identity or false information; impersonate UIP, a business, or another user
Defraud or coerce: use the Service to commit fraud, phishing, coercion, or any deceptive practice; use signing flows to obtain consent to documents the signer would not knowingly sign
Spam: use the messaging or notification surfaces to send unsolicited bulk communications, including SMS or push abuse
Bypass security: probe, scan, or test the vulnerability of the Service except via a coordinated disclosure with [email protected]; reverse engineer; circumvent rate limits or licensing controls
Resell or re-host: resell the Service, white-label it without a written reseller agreement, or use it to build a competing product
Use it for prohibited content or conduct: CSAM, terrorism, harassment, or anything otherwise illegal in your or our jurisdiction
Train ML models: use data obtained through the Service to train machine-learning models, including face- or document-recognition models
Violate sanctions: use the Service if you are subject to sanctions issued by the US (OFAC), EU, UK, or UN, or located in a comprehensively-sanctioned jurisdiction

6. API usage

API keys are confidential and must be stored securely server-side. Do not embed keys in browser, mobile, or other client-side code.
You must respect documented rate limits. We may throttle, suspend, or revoke keys that exceed limits or generate abusive traffic.
You must implement webhook verification using the documented signing scheme. Do not act on unsigned webhooks.
You must use the production environment only for legitimate, customer-facing flows. Use the staging environment for testing.
You must notify us promptly of any API behavior that could indicate compromise, drift, or abuse.

7. Fees & billing

Where applicable, fees, billing terms, payment methods, refund rules, and tax handling are described in your separate order form or on our pricing page. Fees are non-refundable except as required by law or expressly stated otherwise. We may change pricing prospectively with at least 30 days' notice.

8. Traceability & enforcement

Every business is registered with verified identity. Every signature, message, and consume event produced through the Service is cryptographically tied to a registered business and to the natural-person account owner whose UIP identity authorized it. This creates an audit chain that cannot be repudiated.

If we identify a violation, we may, at our discretion and depending on severity, do one or more of: contact you, throttle your usage, suspend your API keys, suspend the offending business, terminate your account, withhold or revoke verifiable credentials we have issued, or cooperate with law enforcement under valid legal process.

We will, where lawful and practical, give you notice and an opportunity to cure before terminating for a curable breach.

9. Suspension, termination & offboarding

You may close your account at any time via the in-app delete-account flow or by contacting [email protected].
We may suspend or terminate your access for breach of these Terms, for legal reasons, or to protect the Service or its users.
On termination, your access ceases immediately. We will delete your personal data as set out in the Privacy Policy, subject to legal-retention obligations. Audit records of past signed events remain in the form required for relying parties to verify those signatures.
Sections that by their nature should survive termination (IP, indemnification, disclaimers, limitations of liability, dispute resolution) will survive.

10. Changes to the Service or these Terms

We may change the Service to fix bugs, improve security, add features, or comply with law. We will provide reasonable notice of material adverse changes affecting paid customers.

We may update these Terms from time to time. The "Last updated" date at the top of the page reflects the most recent change. Material changes will be announced in-app and via email where we have a contact for you, with at least 30 days' notice before they take effect. Continued use of the Service after the effective date constitutes acceptance.

11. Warranty disclaimer

The Service is provided "as is" and "as available" without warranties of any kind, whether express, implied, statutory, or otherwise, including warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy of data, or uninterrupted operation, to the maximum extent permitted by law. Some jurisdictions do not allow exclusion of certain warranties; in those jurisdictions, the exclusions apply only to the extent permitted.

12. Limitation of liability

To the maximum extent permitted by law, neither party will be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, lost revenue, lost business opportunities, or loss of goodwill, arising from or related to the Service, even if advised of the possibility of such damages.

Each party's aggregate liability for all claims arising out of or related to these Terms or the Service will not exceed the greater of (a) the fees you paid to UIP in the 12 months immediately preceding the event giving rise to liability, or (b) one hundred US dollars (USD 100).

The limitations in this Section 12 do not apply to: a party's willful misconduct or gross negligence; a party's indemnification obligations; or any liability that cannot be limited by law (including consumer-protection rights where applicable).

13. Indemnification

You will defend, indemnify, and hold UIP and its officers, employees, and agents harmless from and against any third-party claims, damages, liabilities, and reasonable attorneys' fees arising out of or related to: (a) your use of the Service in violation of these Terms; (b) your content or any data you submit to the Service; or (c) your violation of any law or third-party right.

We will notify you promptly of any indemnified claim, give you reasonable control of the defense, and provide reasonable cooperation. You may not settle any claim that admits fault on our behalf or imposes any non-monetary obligation on us without our prior written consent.

14. Confidentiality

Each party may receive confidential information of the other (including API keys, security practices, roadmap, pricing). The receiving party will use such information only to perform under these Terms and will protect it with at least the care it uses for its own confidential information, and not less than reasonable care. Personal data is governed by the Privacy Policy and DPA, not this section.

15. Force majeure

Neither party is liable for any failure or delay in performance caused by circumstances beyond its reasonable control, including acts of God, war, sanctions, internet or cloud-provider outages, denial-of-service attacks, or government action. The affected party will use commercially reasonable efforts to mitigate.

16. Governing law & dispute resolution

The exact governing law and venue will be confirmed at general availability and reflected here. Until then, the following defaults apply:

These Terms are governed by the laws of the State of Delaware, United States, without regard to conflict-of-laws principles. The federal and state courts located in Wilmington, Delaware, have exclusive jurisdiction, except that either party may seek injunctive relief in any court of competent jurisdiction to protect intellectual property or confidentiality rights.

Consumers in the EEA, UK, and Switzerland: nothing in this section deprives you of the protection of the mandatory laws of your country of residence, including the right to bring proceedings in your local courts.

To the extent permitted by law, you and UIP each waive any right to a jury trial and any right to participate in a class, consolidated, or representative action against the other.

17. General

Entire agreement. These Terms, together with the Privacy Policy and (for business customers) the DPA and any signed order form, are the entire agreement between the parties and supersede all prior agreements on the subject.
Severability. If any provision is held unenforceable, the remaining provisions remain in full effect.
No waiver. A party's failure to enforce a provision is not a waiver of the right to enforce it later.
Assignment. You may not assign these Terms without our prior written consent. We may assign these Terms to an affiliate or in connection with a merger, acquisition, or sale of substantially all assets.
Independent contractors. The parties are independent contractors. No partnership, agency, or employment relationship is created.
Notices. We may send notices via in-app message, email to the address on your account, or posting on uip.digital. You may send notices to [email protected].