Terms of Service

These Terms of Service ("Terms") are an agreement between MobileFirst Applications Private Limited ("FintegrationFS", "we", "us") and the business that registers for or uses the FintegrationFS platform ("Customer", "you"). By creating an account, creating an API key or using the APIs, you accept these Terms. If you accept on behalf of a company, you confirm you have authority to bind it.

If you and we sign a separate master agreement or order form, that document prevails over these Terms where they conflict.

• Platform: our website, dashboard, APIs, documentation and related tools.
• Services: the verification, data and document APIs listed in the catalogue.
• End User: an individual or entity whose details you submit to the Services.
• Credentials: the client ID, client secret and any other keys we issue to you.
• Sandbox: the test environment that returns mock data only. Production: the live environment that queries real sources.
• Rate Card: the per-call prices and slabs that apply to your account.

The Platform is for business use only. You must be at least 18 years old and able to enter a binding contract.

You must give accurate, current information when you register and when you complete company verification (KYB), and keep it up to date. You are responsible for everything done through your account and your Credentials.

Sandbox access is issued at registration and returns mock data only. No live data leaves the Platform in Sandbox.

Production access depends on completed KYB, a recorded contract and, for higher-risk APIs, an approval based on your declared use case, volumes and licences. We may decline, limit or condition access to any API at our reasonable discretion, including where a data source or regulator requires it.

We re-verify companies at least every 12 months and when your signatory, bank account or registered address changes. A lapsed verification can block new subscriptions. We give 30 days' notice before it affects live traffic.

A client secret is shown once, at creation or rotation. We store only a hash and cannot recover it. Keep Credentials confidential, store them in a secrets manager, never place them in client-side code or public repositories, and never share them outside your organisation.

You can regenerate your API key and secret at any time from the dashboard. Doing so invalidates the previous key and secret immediately, so update your systems straight away. You can revoke a key at any time, and it stops working immediately. Tell us without delay if you suspect a Credential has been exposed.

Calls made with your Credentials are treated as made by you, and you are responsible for them and for their cost.

You may use the Services only for lawful business purposes that you have disclosed to us. You must not:

• submit details of any person or entity without a lawful basis and the consent or notice that applicable law requires;
• use results to profile, track or harass any person, or for any purpose the End User has not been told about;
• resell, sublicense or provide the Services to third parties as a competing data service without our written permission;
• attempt to bypass rate limits, authentication or security controls, scrape the Platform, or probe it for vulnerabilities without our written consent;
• send malicious code or interfere with the Platform or other customers;
• use the Services in breach of any law, regulator direction or data-source rule that applies to you or to us.

For End User data you submit, you decide why and how it is processed. You are responsible for having a lawful basis for each verification, giving End Users the notice required by law, and obtaining and recording their consent where it is required. This includes the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and its rules, and sector directions that apply to you, such as those of the RBI, SEBI or IRDAI.

Aadhaar-based services are also subject to UIDAI rules. You must follow them, including purpose limits on use, masking of Aadhaar numbers, and limits on storing them. Do not store Aadhaar numbers, biometrics or OTPs unless you are legally permitted to.

Collect only the data a verification needs, and keep consent records for the period the law requires. On reasonable request, give us evidence that consent was obtained. We may suspend a verification or an account if you cannot.

For End User data, you are the party that decides the purpose and we act as your processor. We process it only to deliver the Services you request, to bill you, to secure the Platform, and to meet legal obligations. We do not sell it, use it for marketing, or use it to train models.

We use sub-processors, such as hosting, database, messaging and email providers, under written terms that require protection comparable to ours. We keep appropriate technical and organisational security measures, and we tell you without undue delay, and within 72 hours of confirming it, if a personal data breach affects your data.

Data we hold about your own account, staff and company is handled as set out in our Privacy Policy.

Production results come from government registries, bureaus and other third-party sources. Availability, speed and accuracy depend on those sources, and a source may change, fail or be unavailable without notice. We report what the source returns and do not guarantee that it is complete, current or error-free.

You are responsible for decisions you make using results, including onboarding, credit and compliance decisions. Results are not legal, financial or tax advice.

Fees follow your Rate Card. Public prices are shown in the catalogue. Each API you subscribe to carries a monthly access fee, shown in the catalogue, in addition to its per-call price. Other prices are agreed with our team. A call is billable when it returns a successful response from the source, and that includes a valid "record not found" result. The billable event for each API is stated in its documentation.

Usage is drawn from a prepaid wallet that our team credits after we receive your payment. When the balance is exhausted, production calls may be declined. Prices are shown in Indian rupees, and where we also show a US dollar price, the currency on your order or contract applies. Fees exclude GST and other applicable taxes, which you pay.

We may change prices by issuing a new Rate Card version. A change never alters a live subscription until you accept it. Fees for calls already made are not refundable. Raise any billing dispute within 30 days of the call.

We aim to keep the Platform available but do not promise uninterrupted service. Any uptime commitment or service credit applies only if it is written into a contract we have both signed. We may carry out maintenance and will give notice of planned downtime where practical.

We apply rate limits to protect the Platform and the sources behind it. The limits for your account are shown in your dashboard or contract.

Each party must keep the other's non-public information confidential, use it only to perform this agreement, and disclose it only to people who need it and are bound to confidentiality, or where the law requires. This does not apply to information that is public through no fault of the recipient or that the recipient already lawfully held.

We and our licensors own the Platform, the documentation and the FintegrationFS name and marks. We give you a limited, non-exclusive, non-transferable, revocable right to use the Platform for your business during the term. You must not copy, modify, reverse engineer or build a competing service from it.

You own the data you submit. You give us the right to process it as described in these Terms. If you send us feedback, we may use it freely without payment or attribution.

You can stop using the Services and close your account at any time. Closing does not cancel amounts you owe.

We may suspend or end your access immediately if you breach these Terms, if your use creates a security, legal or regulatory risk, if a data source or regulator requires it, or if your KYB lapses or fails. Where practical we tell you why and give you a chance to fix it.

After termination your Credentials stop working. We delete or anonymise your data on the schedule in our Privacy Policy, except where the law requires us to keep it. Terms that by their nature should continue, such as fees, confidentiality, liability and indemnity, survive.

Except as expressly stated in a signed contract, the Platform and Services are provided "as is" and "as available". To the extent the law allows, we disclaim all warranties, including merchantability, fitness for a particular purpose, accuracy and non-infringement.

To the extent the law allows, neither party is liable for indirect, incidental, special or consequential loss, or for loss of profit, revenue, goodwill or data.

Our total liability arising from these Terms is limited to the fees you paid us in the 12 months before the event that gave rise to the claim. These limits do not apply to liability that cannot be limited by law.

You will defend and compensate us against third-party claims, and related losses and reasonable costs, arising from your breach of these Terms, your failure to obtain required End User consent or to follow applicable law, or your misuse of the Services or Credentials.

We may update these Terms. For material changes we give at least 30 days' notice by email or in your dashboard before they apply to you. If you keep using the Services after the date, you accept the update. If you do not agree, stop using the Services before then.

These Terms are governed by the laws of India. The parties will first try to settle a dispute by good-faith discussion for 30 days. If it is not resolved, the courts at Ahmedabad, India have exclusive jurisdiction.

• Notices: we may send notices to the email on your account or in the dashboard. Send notices to us at the address below.
• Force majeure: neither party is liable for delay or failure caused by events beyond its reasonable control.
• Assignment: you may not transfer these Terms without our written consent. We may transfer them in a merger or sale of our business.
• Entire agreement: these Terms, the Privacy Policy and any signed order form are the whole agreement and replace earlier discussions.
• Severability and waiver: if a provision is unenforceable, the rest continues. Not enforcing a right is not a waiver of it.
• Relationship: the parties are independent. Nothing creates a partnership, agency or employment.

MobileFirst Applications Private Limited, A 1101-1104 Eastface, Ambli, Ahmedabad 380054. Email: nishant@mobilefirst.in.