Back to home

Terms of Service

Last updated: March 2026

1. Service Description

KYCBox provides an API-first identity verification platform (the "Service"). Our Service includes identity database verification, document OCR, face liveness detection, and sanctions screening APIs, accessible via RESTful endpoints at api.kycbox.ai.

These Terms of Service ("Terms") constitute a binding agreement between you ("Client," "you") and KYCBox ("we," "us"). By accessing or using our Service, you agree to be bound by these Terms.

2. Account and API Access

To use the Service, you must register for an account and obtain API credentials. You are responsible for maintaining the confidentiality of your API keys and account credentials. You must not share API keys with unauthorized parties or embed them in client-side code.

You are responsible for all activity that occurs under your account. You must notify us immediately at legal@kycbox.ai if you become aware of any unauthorized use of your credentials.

3. Acceptable Use

You agree to use the Service only for lawful purposes and in accordance with these Terms. You must not:

  • Use the Service to verify identities without proper consent from the data subject, as required by applicable law
  • Submit fraudulent, fabricated, or illegally obtained identity data
  • Attempt to reverse-engineer, decompile, or extract the underlying algorithms or models of the Service
  • Use the Service for surveillance, profiling, or any purpose that violates fundamental rights
  • Resell, sublicense, or redistribute API access without prior written agreement
  • Interfere with or disrupt the Service, servers, or networks connected to the Service
  • Circumvent rate limits, authentication mechanisms, or security controls

4. Rate Limits and API Usage

API usage is subject to rate limits based on your subscription plan. Default rate limits are specified in your API dashboard and may vary by endpoint. Exceeding rate limits will result in HTTP 429 responses.

We reserve the right to throttle or suspend API access if usage patterns indicate abuse, excessive load, or behavior that threatens platform stability. We will make reasonable efforts to notify you before taking such action except in cases of emergency.

5. Billing and Payment

KYCBox operates on a prepaid billing model. You purchase API credits in advance, and credits are consumed per successful API call. Credit pricing is based on your plan tier and the verification type.

  • Credits are non-refundable except where required by applicable law
  • Unused credits remain valid for 12 months from the date of purchase
  • We reserve the right to adjust pricing with 30 days' advance notice
  • Failed verifications (due to invalid input or client error) may still consume credits as specified in your plan terms
  • All prices are exclusive of applicable taxes (GST) unless stated otherwise

6. Service Level Agreement

We commit to maintaining 99.9% API uptime, measured monthly, excluding scheduled maintenance windows. Scheduled maintenance will be communicated at least 48 hours in advance via email and our status page.

In the event of an SLA breach, affected clients may request service credits proportional to the downtime period. SLA credits are capped at 30% of the monthly billing amount and are applied as API credits to your account.

The SLA does not apply to downtime caused by: (a) force majeure events, (b) client-side issues, (c) third-party government database outages outside our control, or (d) abuse or misuse of the Service.

7. Data Handling

You are the data fiduciary (controller) for any personal data submitted through our APIs. You are responsible for obtaining proper consent from data subjects and ensuring your use of the Service complies with applicable data protection laws, including the Digital Personal Data Protection Act, 2023.

We act as a data processor and process verification data solely for the purpose of fulfilling API requests. We do not retain identity documents or biometric data beyond the processing period. Our data handling practices are described in our Privacy Policy.

8. Intellectual Property

All intellectual property rights in the Service, including APIs, documentation, algorithms, models, and trademarks, are owned by KYCBox. These Terms do not grant you any rights to our intellectual property except the limited right to use the Service in accordance with these Terms.

You retain ownership of all data you submit through the Service. You grant us a limited, non-exclusive license to process your data solely for the purpose of providing the Service.

9. Limitation of Liability

To the maximum extent permitted by law, KYCBox's total aggregate liability under these Terms shall not exceed the amount you paid to us in the 12 months preceding the claim.

We are not liable for: (a) indirect, incidental, special, or consequential damages, (b) loss of revenue, profits, data, or business opportunities, (c) decisions made based on verification results, or (d) inaccuracies in data returned by third-party government databases.

Verification results are provided on an "as-is" basis. While we strive for accuracy, we do not guarantee that verification results are error-free. You are responsible for implementing appropriate review processes for high-stakes decisions.

10. Termination

Either party may terminate the agreement by providing 30 days' written notice. We may suspend or terminate your access immediately if you breach these Terms, engage in fraudulent activity, or fail to pay outstanding amounts.

Upon termination: (a) your API credentials will be deactivated, (b) unused prepaid credits will be forfeited unless otherwise agreed, and (c) provisions regarding data handling, intellectual property, limitation of liability, and dispute resolution will survive termination.

11. Governing Law and Dispute Resolution

These Terms are governed by and construed in accordance with the laws of India. Any disputes arising from or relating to these Terms shall be subject to the exclusive jurisdiction of the courts in Bengaluru, India.

Before initiating formal proceedings, both parties agree to attempt to resolve disputes through good-faith negotiation for a period of 30 days. If negotiation fails, disputes shall be resolved through binding arbitration in accordance with the Arbitration and Conciliation Act, 1996.

12. Modifications

We reserve the right to modify these Terms at any time. We will provide at least 30 days' notice of material changes via email or through your API dashboard. Continued use of the Service after the effective date of changes constitutes acceptance of the updated Terms.

13. Contact

For questions about these Terms, contact us at:

Email: legal@kycbox.ai

Company: KYCBox

Address: India