Terms of Service

Effective 17 September 2026 · Version 1.0 · Provider: Dieng — HTL

These Terms of Service govern your access to and use of X-Trust, the Human Trust Layer, operated by Dieng — HTL. By purchasing a credit pack, or by calling the Service with an API key, you agree to these Terms.

1. About these Terms

The Service is operated by Dieng — HTL (Human Trust Layer), an independent software vendor based in Côte d'Ivoire. Contact: diengamine.htl@gmail.com.

These Terms apply together with our Privacy Policy and Refund Policy. Where a separate written agreement signed by both parties covers the same subject, that agreement prevails.

2. Eligibility

You must be at least 18 years old, have legal capacity to contract, and not be located in or subject to an embargo or sanctions regime that prohibits us from providing the Service to you. If you use the Service for an organisation, you confirm you are authorised to bind that organisation.

3. The Service

X-Trust is a server-side verification layer. Your backend sends a request to our endpoint with the signals it can legitimately observe about the session. The Service evaluates those signals and, when the configured threshold is met, returns a signed HTTP header proving that a human was present in the loop. The header is signed with HMAC-SHA256 over a canonical string of the response fields, using a shared secret assigned to your API key. You validate the signature on your own infrastructure.

What the Service is: a signal you can use to reduce automated abuse, scripted traffic and bot-driven actions in your own product. What the Service is not: an identity, age, KYC, AML, sanctions or background verification service. It does not tell you who a person is.

4. API keys and account security

• An API key is issued after a completed purchase. We display it once at issuance and store only a hash of the secret.
• Keys and signing secrets are credentials. Keep them confidential, store them server-side, and never publish them in client-side code or public repositories.
• Use one key per environment. Do not share keys between unrelated applications.
• If you believe a key is exposed, stop using it and email us immediately at diengamine.htl@gmail.com.
• We may rate-limit, rotate or revoke credentials where we reasonably believe they are exposed, shared, abused or used unlawfully.

5. Acceptable use

You agree not to do any of the following, and not to permit anyone else to do them through your key:

• Use the Service in breach of applicable law, regulation or the rights of others.
• Attempt to defeat, spoof, emulate or resell a way around the human-presence check.
• Probe, scrape or reverse-engineer the scoring logic or signature scheme.
• Resell, sublicense or provide the Service to third parties as your own without our written agreement.
• Use the Service for spam, credential stuffing, account takeover, or any attack on third-party systems.
• Circumvent rate limits, billing meters, access controls or our security measures.

6. No high-stakes reliance

Human-presence scoring is probabilistic. False positives and false negatives occur. You agree that:

• You will not use a verification result as the sole basis for any decision that produces legal or similarly significant effects on an individual, including credit, employment, housing, insurance, healthcare, education or immigration.
• You will keep human review available for consequential decisions.
• You will not present a verification result as an identity confirmation or a government attestation.
• You remain responsible for your own risk decisions and for compliance with rules that apply to your business.

7. Fees and payment

• The Service is sold as prepaid, pay-as-you-go credit packs. There is no recurring subscription and no auto-renewal.
• A verification event is billable when the Service returns a decision for a request made with valid credentials. Requests rejected for invalid credentials or that fail because of an error on our side are not billable.
• All prices are displayed and charged in US dollars (USD), excluding applicable taxes calculated at checkout.
• Payments are handled by Paddle.com Market Ltd., which acts as Merchant of Record for every order. Paddle is the seller shown on your statement, issues your invoice, handles tax and processes refunds. Your card details are given to Paddle, never to us.
• We may change prices for future purchases. A change never reprices credits you have already bought.
• Credits do not expire while the Service is generally available. If we permanently discontinue the Service, we refund unused balances per the Refund Policy.
• If a payment is reversed, charged back or found fraudulent, we may suspend the associated keys until resolved.

8. Refunds

Refunds are governed by our Refund Policy: full refund within 14 days if your API key was never used; case-by-case review if it was, always honouring rights you have under mandatory consumer law.

9. Data and privacy

X-Trust is designed on a Zero PII, Zero KYC principle. We store the buyer email used at checkout and anonymized verification events consisting of a score and a cryptographic hash. We do not collect names, addresses, identity documents, biometrics or end-user identities. Full detail is in the Privacy Policy.

10. Intellectual property

• We own and retain all rights in the Service, including the scoring logic, thresholds, signature scheme, APIs, documentation, software and the "X-Trust" and "Human Trust Layer" names and logos.
• You receive a limited, non-exclusive, non-transferable, revocable licence to call the Service for your internal business purposes while you hold sufficient credits and these Terms are in force.
• You keep all rights in your own content and systems. Feedback you send us may be used to improve the Service without obligation.

11. Availability and support

We use commercially reasonable efforts to keep the Service available. Unless a separate written agreement says otherwise, we do not commit to a service level, uptime percentage or recovery time objective. For breaking changes to a documented API, we aim to give at least 30 days' notice. Support is provided by email at diengamine.htl@gmail.com on a commercially reasonable efforts basis.

12. Third-party services

The Service depends on third parties, including Paddle (payments, invoicing, tax, fraud screening) and hosting, network and email providers. Those services are governed by their own terms. We are not responsible for the acts of third parties, but we choose providers carefully and remain responsible for the parts of the Service we control.

13. Suspension and termination

You may stop using the Service at any time. We may suspend or terminate your access, with notice where practicable, if you materially breach these Terms, if payment is reversed or fraudulent, or if required by law. If we terminate for convenience rather than breach, we refund the unused balance pro rata. Sections on data, IP, disclaimers, liability, indemnity, governing law and general provisions survive termination.

14. Disclaimers

To the maximum extent permitted by applicable law, the Service is provided "as is" and "as available". We disclaim all implied warranties, including merchantability, fitness for a particular purpose and non-infringement. We do not warrant that the Service will be uninterrupted or error-free, or that any given request will be classified as human or non-human. Nothing here excludes warranty, right or remedy that cannot lawfully be excluded.

15. Limitation of liability

To the maximum extent permitted by applicable law, neither party is liable for indirect, incidental, special or consequential losses, or for lost profits, revenue, data or business opportunity. Our total aggregate liability is limited to the greater of (a) the total amount you paid in the 12 months before the event giving rise to the claim, and (b) USD 100. These limits do not apply to fraud, wilful misconduct, gross negligence, or liability that cannot be limited by law.

16. Indemnity

You will indemnify and hold harmless Dieng — HTL against third-party claims and reasonable costs arising from your use of the Service in breach of these Terms, your unlawful use of the Service, or your representations to your own end users about what a verification result means.

17. Governing law and jurisdiction

These Terms are governed by the laws of the Republic of Côte d'Ivoire, excluding conflict-of-laws rules. Subject to the paragraph below, the courts of Abidjan have exclusive jurisdiction. Before proceedings, the parties will attempt in good faith to resolve the dispute through written negotiation for at least 30 days.

If you are a consumer, nothing in this section deprives you of the protection of the mandatory consumer laws of your country of residence or of your right to bring proceedings before your local courts.

18. Changes to these Terms

We may update these Terms. The current version is always published on this page with a new effective date. For material changes, we will give reasonable notice, and where required by law at least 14 days before they take effect. Continued use of the Service after the effective date means you accept the updated Terms.

19. General

These Terms, together with the Privacy Policy, Refund Policy and any separate written agreement, are the entire agreement between us on this subject. If a provision is found unenforceable, the rest remains in force. Our failure to enforce a provision is not a waiver. You may not assign these Terms without our written consent. Neither party is liable for events beyond its reasonable control. The parties are independent contractors. The English version of these Terms prevails over any translation, except where mandatory local law provides otherwise.

20. Contact

Questions about these Terms, API keys, billing, security or compliance:

Dieng — HTL (Human Trust Layer)
Email: diengamine.htl@gmail.com
Country: Côte d'Ivoire

For payment, invoice, tax or refund questions, you may also contact Paddle.com Market Ltd. as Merchant of Record, quoting the transaction reference in your receipt.