Terms & Conditions

By accessing or using the PayKard platform, APIs, dashboard, or any related services (collectively, the "Services"), you agree to be bound by these Terms & Conditions. If you are using the Services on behalf of an organization, you represent that you have authority to bind that organization.

If you do not agree with any part of these Terms, you must not access or use the Services.

• "PayKard" refers to the company operating the orchestration platform.
• "Merchant" means any business entity using the Services.
• "Gateway" means any third-party payment processor, acquirer, or alternative payment method connected through PayKard.
• "Token Vault" means the secure credential storage service provided by PayKard.

PayKard grants you a limited, non-exclusive, non-transferable right to access and use the Services for your internal business purposes, subject to these Terms and any applicable order form or service agreement.

You are responsible for ensuring your integration complies with applicable laws, card scheme rules, and the terms of each connected Gateway.

You must provide accurate registration information and keep your API keys, credentials, and access tokens confidential. You are responsible for all activity that occurs under your account.

Notify us immediately at the security contact below if you suspect unauthorized access or a compromise of your credentials.

Fees for the Services are set out in your pricing schedule or order form. Unless stated otherwise, fees are exclusive of applicable taxes and are invoiced in accordance with the agreed billing cycle.

Settlement timelines and processing fees applied by third-party Gateways are governed by your agreements with those providers and are outside PayKard's control.

You agree not to:

• Use the Services for unlawful, fraudulent, or prohibited business activities.
• Attempt to reverse-engineer, disrupt, or gain unauthorized access to the platform.
• Process transactions that violate card scheme rules or sanctions regulations.
• Exceed documented rate limits or abuse sandbox environments.

All rights, title, and interest in the Services, including software, SDKs, documentation, and trademarks, remain the exclusive property of PayKard and its licensors. You retain ownership of your data and the payment credentials you store in the Token Vault.

We process personal and payment data in accordance with our Privacy Policy and applicable data protection laws. PayKard maintains PCI-DSS v4.0 Level 1, ISO 27001, and SOC 2 Type II controls to safeguard the information entrusted to us.

To the maximum extent permitted by law, PayKard shall not be liable for indirect, incidental, special, or consequential damages, including loss of revenue or profits. Our aggregate liability shall not exceed the fees paid by you in the twelve (12) months preceding the claim.

Either party may terminate the agreement according to the notice period in your service agreement. Upon termination, you retain the right to export your tokenized credentials and transaction data under our Zero Lock-In commitment.

These Terms are governed by the laws of the jurisdiction specified in your service agreement. We may update these Terms from time to time; material changes will be communicated through the dashboard or by email prior to taking effect.