Terms of service.

Welcome to ToTóo (the "Service"). These Terms of Service (these "Terms") are a legal agreement between you ("you" or "User") and ToTóo ("Company," "we," "us," or "our").

By accessing or using the Service, you agree to be bound by these Terms. If you do not agree to these Terms, you may not access or use the Service.

If you are using the Service on behalf of an organization (such as your employer), you represent and warrant that you have the authority to bind that organization to these Terms, and "you" and "User" will refer to that organization.

"Account" means your registered account for accessing and using the Service.

"Content" means any text, data, information, software, graphics, photographs, videos, audio, or other materials.

"Service" means the ToTóo identity verification platform, including all features, functionality, and content provided at https://totoo.id and through mobile applications, APIs, and other interfaces.

"User Content" means any Content that you upload, submit, post, transmit, or otherwise make available through the Service.

"Intellectual Property Rights" means all patent rights, copyright rights, trademark rights, trade secret rights, and any other intellectual property rights recognized in any country or jurisdiction in the world.

You must be at least 18 years old to use the Service. By using the Service, you represent and warrant that you meet this age requirement.

You must have the legal capacity to enter into a binding contract. If you do not have such capacity, you may not use the Service.

You must comply with all applicable laws and regulations in your use of the Service.

The Service is not available in countries subject to U.S. export restrictions or sanctions, including Cuba, Iran, North Korea, Syria, and the Crimea region of Ukraine.

To access certain features of the Service, you must create an Account by providing your full name, email address, and a password.

You agree to provide accurate, current, and complete information during registration and to update such information to keep it accurate, current, and complete.

You are responsible for safeguarding your Account credentials, your device, and any authentication factors (including biometric credentials) registered to your Account. You are liable for all activity that occurs under your Account.

Notify us immediately at security@totoo.id if you suspect any unauthorised access to your Account.

We reserve the right to suspend or terminate your Account if any information you provide is inaccurate, false, or incomplete.

We offer free and paid subscription plans. Current pricing is available at https://totoo.id/pricing.

We may offer a free trial period for certain plans. At the end of the free trial, your Account will automatically convert to a paid subscription unless you cancel before the trial period ends.

Paid subscriptions are billed in advance on a monthly or annual basis (as selected by you). Your subscription will automatically renew at the end of each billing cycle unless you cancel before the renewal date.

By providing a payment method, you authorise us to charge the applicable fees to that payment method.

All fees are non-refundable except as required by law. If you cancel your subscription, you will continue to have access to the Service until the end of your current billing cycle.

We reserve the right to change our pricing at any time. Price changes will take effect at the start of your next billing cycle after we provide you with at least 30 days' notice.

All fees are exclusive of taxes. You are responsible for paying all applicable taxes, including sales tax, VAT, GST, and other indirect taxes.

Subject to your compliance with these Terms, we grant you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to access and use the Service for your personal or internal business identity verification purposes.

You may not: (a) copy, modify, or create derivative works of the Service; (b) reverse engineer, decompile, or attempt to derive the source code of the Service; (c) rent, lease, lend, sell, sublicense, or distribute the Service; (d) use the Service to build a competitive product or service; (e) remove or alter any proprietary notices; (f) use the Service in any manner that violates applicable laws or regulations.

The Service may integrate with third-party services (e.g., Supabase, Vercel). Your use of such third-party services is governed by their respective terms and privacy policies.

You retain all ownership rights in the content you upload or submit through the Service ("User Content"), including identity documents and personal data.

By uploading User Content, you grant us a worldwide, non-exclusive, royalty-free license to use, store, and process your User Content solely as necessary to provide and improve the Service and to comply with legal obligations.

This license terminates when you delete your User Content from the Service, except that deletion may not be immediate due to technical or operational limitations (e.g., backups), and we may retain User Content as required by law or to resolve disputes.

You represent and warrant that you have all rights necessary to grant the foregoing license and that your User Content does not infringe any third-party rights.

Encrypted documents you upload remain encrypted with device-bound keys. We have no technical ability to decrypt them.

You are solely responsible for backing up your User Content. We are not responsible for any loss or corruption of User Content.

The Service, including all Content (other than User Content), features, functionality, software, text, graphics, logos, and trademarks, is owned by ToTóo or its licensors and is protected by intellectual property laws.

ToTóo, the ToTóo logo, and other Company marks are trademarks of ToTóo. You may not use our trademarks without our prior written consent.

If you provide us with feedback, suggestions, or ideas about the Service ("Feedback"), you grant us an unlimited, irrevocable, perpetual, royalty-free license to use, modify, and incorporate such Feedback into the Service without any obligation to you.

You may not use the Service to:

Violate any local, state, national, or international law or regulation.

Harass, threaten, intimidate, or abuse other users.

Impersonate any individual or entity, or misrepresent your affiliation with any person.

Send spam, phishing emails, or unsolicited commercial messages.

Attempt to gain unauthorised access to the Service or other users' Accounts.

Upload or transmit viruses, malware, or other harmful code.

Use automated tools (bots, scrapers, crawlers) without our permission.

Use the Service in connection with money laundering, sanctions evasion, terrorist financing, or other illegal activities.

If you violate this Acceptable Use Policy, we may issue a warning, suspend or terminate your Account, remove violating Content, or report violations to law enforcement.

The Service allows you to verify or be verified by other users using FIDO2/WebAuthn biometric authentication and, optionally, identity document uploads.

Verification confirms the identity of the person at the time of verification based on the information and methods used. It does not guarantee future behaviour, ongoing identity, or trustworthiness.

You are solely responsible for the accuracy of the information you provide during registration and verification.

We do not guarantee that verification will be accepted by any third party or that it satisfies any particular legal or regulatory requirement.

You may terminate your Account at any time by following the in-app instructions or contacting hello@totoo.id.

We may suspend or terminate your Account at any time, with or without notice, if: (a) you violate these Terms; (b) you fail to pay applicable fees; (c) we are required to do so by law; or (d) we discontinue the Service (with 30 days' notice).

Upon termination, your license to use the Service immediately ends, and we may delete your Account and User Content.

The following sections will survive termination: User Content license, Intellectual Property, Disclaimer of Warranties, Limitation of Liability, Indemnification, Dispute Resolution, and General Provisions.

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT ANY WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED.

TO THE FULLEST EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, SECURE, OR FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS.

WE DO NOT GUARANTEE UPTIME OR AVAILABILITY, DATA SECURITY OR BACKUP, OR COMPATIBILITY WITH THIRD-PARTY SERVICES.

USE OF THE SERVICE IS AT YOUR OWN RISK.

TO THE FULLEST EXTENT PERMITTED BY LAW, OUR TOTAL LIABILITY TO YOU FOR ANY CLAIMS ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICE SHALL NOT EXCEED THE GREATER OF: (A) THE TOTAL AMOUNT YOU PAID TO US IN THE 3 MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO LIABILITY; OR (B) US$100.

TO THE FULLEST EXTENT PERMITTED BY LAW, WE SHALL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOSS OF PROFITS, REVENUE, DATA, OR BUSINESS OPPORTUNITIES, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Some jurisdictions do not allow the exclusion of certain warranties or the limitation of liability for incidental or consequential damages. In such jurisdictions, our liability will be limited to the fullest extent permitted by law.

You agree to indemnify, defend, and hold harmless ToTóo and its affiliates, officers, directors, employees, agents, and representatives from and against any and all claims, liabilities, damages, losses, costs, and expenses (including reasonable attorneys' fees) arising out of or related to: (a) your use of the Service; (b) your violation of these Terms; (c) your violation of any rights of another party, including Intellectual Property Rights; (d) your User Content; or (e) your violation of any applicable laws or regulations.

We reserve the right to assume the exclusive defence and control of any matter subject to indemnification by you, in which case you will cooperate with us in asserting any available defences.

Before filing a claim, you agree to contact us at hello@totoo.id and attempt to resolve the dispute informally. If the dispute is not resolved within 30 days, either party may proceed as set out below.

Any dispute, claim, or controversy arising out of or relating to these Terms or the Service shall be resolved by binding arbitration, rather than in court, except that you may assert claims in small claims court if your claims qualify, and either party may seek injunctive or equitable relief in court to prevent infringement of Intellectual Property Rights.

YOU AND COMPANY AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN YOUR OR ITS INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS, COLLECTIVE, REPRESENTATIVE, OR MULTI-PARTY ACTION.

You have the right to opt out of the arbitration provision and class action waiver. To opt out, you must notify us in writing at hello@totoo.id within 30 days of first accepting these Terms, stating your full name, email address, and that you wish to opt out of arbitration.

These Terms shall be governed by and construed in accordance with the laws of the jurisdiction in which ToTóo is incorporated, without regard to its conflict of laws principles.

If you are a consumer in the European Union, you may also bring proceedings in the courts of your place of residence and benefit from mandatory consumer protection laws of your country.

We respect the Intellectual Property Rights of others and expect our users to do the same. In accordance with the Digital Millennium Copyright Act (DMCA), we will respond to notices of alleged copyright infringement that comply with the DMCA and other applicable laws.

If you believe that your copyrighted work has been copied in a way that constitutes copyright infringement and is accessible through the Service, please notify our DMCA Agent at security@totoo.id with the following information: (a) your physical or electronic signature; (b) a description of the copyrighted work claimed to have been infringed; (c) a description of where the infringing material is located on the Service; (d) your contact information; (e) a statement of good faith belief that the use is not authorised; and (f) a statement, made under penalty of perjury, that the information in your notice is accurate.

We will terminate the Accounts of users who are repeat infringers of copyright in accordance with the DMCA.

Our Privacy Policy (https://totoo.id/privacy) explains how we collect, use, and share your personal information. By using the Service, you agree to our Privacy Policy.

We implement reasonable security measures to protect your data, but we cannot guarantee absolute security. See Section 12 (Disclaimer of Warranties) for details.

If you are located in the European Economic Area, UK, or Switzerland, or if you process personal data of individuals in those regions through the Service, additional protections described in our Privacy Policy apply.

We may modify these Terms at any time. If we make material changes, we will notify you by posting the updated Terms with a new "Last Updated" date and by sending you an email notification.

Material changes will take effect 30 days after we provide notice. Non-material changes (e.g., clarifications, formatting) will take effect immediately upon posting.

Your continued use of the Service after the effective date of the updated Terms constitutes your acceptance of the changes. If you do not agree to the updated Terms, you must stop using the Service and cancel your Account.

Entire agreement: these Terms, together with our Privacy Policy and Cookie Policy, constitute the entire agreement between you and ToTóo regarding the Service.

Assignment: you may not assign these Terms without our prior written consent. We may assign these Terms in connection with a merger, acquisition, or sale of assets.

Severability: if any provision of these Terms is held to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.

Waiver: no waiver of any provision of these Terms shall be effective unless in writing and signed by us. No waiver of any breach shall constitute a waiver of any other breach.

Force majeure: we shall not be liable for any delay or failure to perform due to causes beyond our reasonable control, including acts of God, natural disasters, war, terrorism, labour disputes, government actions, or interruptions in internet or telecommunications services.

Notices: we may provide notices to you via email or by posting on the Service. Notices to us must be sent to hello@totoo.id.

Export compliance: you agree to comply with all applicable export control laws and regulations, including U.S. export restrictions.

Relationship: nothing in these Terms creates a partnership, joint venture, agency, employment, or fiduciary relationship between you and ToTóo.