Terms of Service

1. These terms

These terms govern access to and use of the Zanyara identity-verification platform (the "Service") by business customers ("you", "client"). By creating an account, signing an order form that references these terms, or using the Service, you agree to them. If you use the Service on behalf of a company, you confirm you are authorised to bind it.

2. The Service

Zanyara provides identity-verification capabilities including document verification, biometric face matching and liveness detection, sanctions/PEP/adverse-media screening, device intelligence, data-source corroboration, and human review and QA workflows, accessible via SDKs (Web, iOS, Android), a REST API, webhooks, and an operator console. Features may evolve; we will not materially degrade core functionality during a subscription term.

3. Accounts and acceptable use

• Keep credentials and API keys confidential; you are responsible for activity under your account.
• Use the Service only for lawful identity verification of people who have been informed of, and where required consented to, the processing.
• Do not use the Service to unlawfully discriminate, to surveil, or to verify anyone without a legitimate purpose.
• Do not attempt to probe, overload, or reverse-engineer the Service, or use it to build a competing dataset.

4. Your responsibilities as controller

For applicant verification data you are the data controller and Zanyara is your processor. You are responsible for establishing a lawful basis for each check, for your own privacy notices, and for decisions you take based on verification results. Where biometric processing requires explicit consent, the Service captures that consent in the verification flow, but confirming its sufficiency in your jurisdiction is your responsibility.

5. Verification results

Verification results are decision support, not legal advice and not a guarantee of a person's identity or status. Results reflect the evidence available to the Service at the time of the check (document quality, data-source coverage, screening-list content). Regulatory obligations, including any duty to make your own risk assessment, remain yours.

6. Fees and billing

The Service is billed per completed check and per ancillary usage (for example SMS delivery) at the rates in your rate card or order form, invoiced in arrears. Invoices are payable within 30 days. We may suspend the Service for accounts with materially overdue balances after reasonable notice.

7. Data protection

Each party will comply with applicable data-protection law (including, where applicable, the EU GDPR, UK GDPR, POPIA, the CCPA/CPRA and other regional privacy laws). Our processing of applicant data is governed by our data-processing terms, including the subprocessors listed in the Privacy Policy (Google Cloud Platform, SMSPortal, OpenSanctions data). We provide configurable retention with automated purge, right-to-erasure APIs, and audit trails to support your compliance obligations.

8. Intellectual property

Zanyara retains all rights in the Service, SDKs, and documentation. You retain all rights in your data and your applicants' data. You grant us the rights needed to operate the Service, including generating aggregated, non-identifying operational statistics to run and improve it.

9. Confidentiality

Each party will protect the other's confidential information with at least reasonable care and use it only to perform under these terms, subject to disclosures required by law.

10. Availability and support

We operate the Service with commercially reasonable skill and care and target high availability, with maintenance windows notified in advance where practicable. Support is provided by email at hello@zanyara.com; any committed service levels are set out in your order form.

11. Liability

Nothing in these terms excludes liability that cannot be excluded by law. Otherwise, neither party is liable for indirect or consequential loss, and each party's aggregate liability in any 12-month period is capped at the fees paid for the Service in that period. The Service is one input to your decisions; we are not liable for the decisions you take based on verification results.

12. Termination

Either party may terminate for material breach not cured within 30 days of notice. On termination we delete or return applicant data in line with the agreed retention settings and our data-processing terms, retaining only what law requires.

13. General

These terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction. If any provision is unenforceable, the remainder stands. We may update these terms with reasonable notice; continued use after the effective date is acceptance.

14. Contact

Zanyara Ltd · hello@zanyara.com (general) · privacy@zanyara.com (privacy and data requests).