Terms of Service

These Terms of Service govern your access to and use of CertiLayer's dashboard, API, SDKs, and related services ("the Service"). By creating an account or integrating the SDK, you agree to these terms on behalf of yourself and, if applicable, the organization you represent.

CertiLayer provides passive behavioral verification — detecting likely-bot traffic from likely-human traffic using behavioral signals — delivered via API, SDKs, and a dashboard for configuration and analytics. The Service is provided on the plan tiers and session limits described at /pricing, which we may update from time to time with reasonable notice.

CertiLayer is a decision-support signal, not a guarantee. A Human Confidence Score is a probabilistic assessment, not a certification — you're responsible for how your own systems act on that score.

You're responsible for maintaining the confidentiality of your account credentials and API keys, and for all activity that occurs under them. Notify us immediately at [email protected] if you suspect a key has been compromised — we'll help you rotate it.

You must be at least 18 years old, or the age of majority in your jurisdiction, to create an account.

You may not use the Service to process traffic you don't have a lawful basis to process, to build a competing behavioral-detection product by reverse-engineering our models or SDKs, to exceed your plan's rate limits through automated workarounds, or to circumvent CertiLayer's own detection of your usage patterns.

We reserve the right to suspend accounts that materially violate this section, with notice where practical.

Paid plans are billed by Paddle.com, our Merchant of Record, on the cycle you select (monthly or annual). See /refund-policy for the full refund and cancellation terms. Prices may change with 30 days' notice for existing subscribers.

Our handling of behavioral signal data and account data is described in full at /privacy. For customers processing EU personal data through the Service, our Data Processing Addendum at /dpa applies and is incorporated into these terms.

We aim for high availability but the Service is provided "as is" without warranty of uninterrupted operation, except where a specific uptime SLA has been contractually agreed (available on Enterprise plans — see /enterprise). Check /status for current system status.

To the maximum extent permitted by law, CertiLayer's total liability for any claim arising from the Service is limited to the amount you paid us in the 12 months preceding the claim. We're not liable for indirect, incidental, or consequential damages, including lost profits or lost data.

You may cancel your account at any time (see /refund-policy). We may suspend or terminate accounts for material breach of these terms, non-payment, or fraudulent/abusive use, with notice where reasonably possible.

We'll update the date below when these terms materially change, and notify active account holders by email for significant changes.

Questions about these terms: [email protected].