Terms of Use

These Terms of Use (the “Terms”) govern your access to and use of the Myaza Trust platform, including our identity-verification APIs, SDKs, dashboard, documentation, and any related services (together, the “Services”). Myaza Trust is operated by Myaza (“Myaza”, “we”, “us”, or “our”).

By creating an account, generating an API key, or otherwise using the Services, you agree to be bound by these Terms and by our Privacy Policy. If you are entering into these Terms on behalf of a company or other legal entity, you represent that you have authority to bind that entity, and “you” and “Customer” refer to that entity. If you do not agree to these Terms, you must not use the Services.

• “Services” means the Myaza Trust APIs, SDKs, dashboard, and related tools used to perform identity and business verification, sanctions and adverse-media screening, ongoing monitoring, and related compliance and reporting functions.
• “Customer”(or “you”) means the organisation or individual that registers for and uses the Services.
• “End User” means an individual whose identity or activity the Customer submits to the Services, including, for business verification, the directors, beneficial owners, and authorised representatives of a business.
• “Verification” means a request to confirm the identity or attributes of an End User or business against government databases or other authoritative sources, and includes related screening and monitoring where enabled.
• “Personal Data”has the meaning given in the Nigeria Data Protection Act, 2023 (the “NDPA”) and our Privacy Policy.

You must be at least 18 years old and capable of forming a binding contract to use the Services. You agree to provide accurate, current, and complete information when registering and to keep it up to date. We may require business-verification information (such as corporate registration documents and details of beneficial owners) before activating certain features.

You are responsible for all activity that occurs under your account and for maintaining the confidentiality of your login credentials. You must notify us promptly at security@myaza.co if you suspect any unauthorised use of your account.

We issue API keys and other credentials so you can access the Services. API keys are secret. You must keep them confidential, must not embed production keys in client-side or public code, and must not share, sell, or transfer them to any third party.

You are responsible for all use of the Services made through your credentials, whether or not authorised by you. We may rotate, suspend, or revoke any credential if we reasonably believe it has been compromised or is being used in breach of these Terms.

Subject to your compliance with these Terms, Myaza grants you a limited, non-exclusive, non-transferable, non-sublicensable, and revocable licence to access and use the Services, including our APIs and SDKs, solely to integrate identity verification into your own applications during the term of these Terms.

You must not, and must not permit any third party to:

• copy, modify, translate, or create derivative works of the Services except as expressly permitted;
• reverse engineer, decompile, or attempt to derive the source code of any part of the Services, except to the extent this restriction is prohibited by law;
• resell, rent, sublicense, or provide the Services to third parties as a standalone product;
• circumvent rate limits, usage quotas, or any security or authentication mechanism; or
• remove or obscure any proprietary notices in the Services or documentation.

When you submit an End User’s information for Verification, you act as the data controller for that data and Myaza acts as a data processor on your instructions. You are responsible for your relationship with your End Users and for complying with all applicable data-protection and KYC/AML laws.

You represent and warrant that, before submitting any Verification, you:

• have obtained the End User’s freely given, specific, and informed consent to collect their Personal Data (including biometric data, where applicable) and to share it with Myaza and our verification partners for the purpose of identity verification;
• have a valid lawful basis under the NDPA (and any other applicable law) for the processing you request;
• where you submit business (KYB) information, have the necessary basis to submit Personal Data about the business’s directors, beneficial owners, and authorised representatives;
• where you use screening or ongoing monitoring, have a valid basis to submit the relevant Personal Data and transaction or activity records for those purposes;
• present a clear consent notice and, where we provide one, use our consent template or an equivalent; and
• submit only data that is accurate and that you are lawfully entitled to submit.

You bear full responsibility and liability for any Verification carried out without a valid lawful basis or the required consent.

Where you enable them, the Services include sanctions, PEP, and adverse-media screening, ongoing transaction and activity monitoring, and tools to help you prepare regulatory reports such as suspicious-activity or suspicious-transaction reports. These features are decision-support tools. Screening and monitoring results, scores, and alerts are indicative only and depend on the data you and third-party sources supply.

You remain solely responsible for your own regulatory obligations, including how you adjudicate matches and alerts and whether and when you file any report with your competent Financial Intelligence Unit or regulator. Unless we agree otherwise in writing, we do not make filings on your behalf, and we do not warrant that screening or monitoring will identify every relevant match, sanctioned party, or suspicious activity.

You must use the Services lawfully and only for legitimate identity verification, KYC, KYB, and anti-fraud purposes. You must not use the Services:

• to verify any individual without a lawful basis and the required consent;
• for unlawful surveillance, profiling, discrimination, or any purpose that infringes the rights of a data subject;
• to harvest, scrape, or build a database of Personal Data beyond what is necessary for a specific Verification;
• to transmit malware, conduct security testing without our written permission, or interfere with the integrity or performance of the Services;
• to submit false, stolen, or fraudulently obtained identity information; or
• in violation of any applicable law, regulation, or third-party right.

Use of the Services is billed against your organisation’s wallet balance or an agreed plan. You agree to fund your wallet in advance and to pay all fees for verification, screening, monitoring, and other usage incurred under your account. Prices are as published in your dashboard or in a separate order, and we may update pricing on reasonable notice.

Except where required by law, fees and wallet top-ups are non-refundable, including for Verifications that return a “not found” or negative result, since the verification work is still performed. Outstanding balances may lead to suspension of the Services.

We use commercially reasonable efforts to keep the Services available and to provide support, but the Services are provided on an “as available” basis. We do not guarantee uninterrupted access and may perform maintenance, impose rate limits, or modify features. Any specific uptime or support commitments apply only if set out in a separate written service-level agreement.

The Services, including all software, APIs, SDKs, documentation, and the Myaza name and logos, are owned by Myaza or its licensors and are protected by intellectual-property laws. These Terms grant you no rights other than the limited licence above. If you provide feedback or suggestions, you grant us a perpetual, royalty-free licence to use them to improve the Services.

Each party may receive confidential information from the other in connection with the Services. The receiving party will protect such information using at least reasonable care, use it only to perform under these Terms, and not disclose it to third parties except as permitted by these Terms or required by law.

Our collection and use of Personal Data is described in our Privacy Policy, which forms part of these Terms. Where we process Personal Data on your behalf as a processor, that processing is also governed by a Data Processing Agreement (available on request), which sets out our respective obligations under the NDPA and, where relevant, the EU/UK GDPR.

The Services are provided “as is” and “as available” without warranties of any kind, whether express, implied, or statutory, including any implied warranties of merchantability, fitness for a particular purpose, accuracy, or non-infringement. Verification results depend on data supplied by you and by third-party and government sources; we do not warrant that any result is complete, accurate, or up to date, and you remain responsible for your own KYC/AML decisions.

To the maximum extent permitted by law, neither party will be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of profits, revenue, data, or goodwill, arising out of or relating to the Services.

Each party’s total aggregate liability arising out of or relating to these Terms will not exceed the total fees you paid to us for the Services in the twelve (12) months immediately preceding the event giving rise to the claim. Nothing in these Terms limits liability that cannot be limited under applicable law.

You will indemnify and hold harmless Myaza and its officers, employees, and agents from and against any claims, damages, losses, and expenses (including reasonable legal fees) arising out of or related to your use of the Services, your submission of End-User data without a lawful basis or required consent, your breach of these Terms, or your violation of any law or third-party right.

You represent that you and your End Users are not subject to applicable sanctions and that you will not use the Services in violation of any anti-money-laundering, counter-terrorism-financing, sanctions, or export-control laws. We may suspend or terminate access where we reasonably believe such laws have been or may be breached.

You may stop using the Services at any time. We may suspend or terminate your access, in whole or in part, if you breach these Terms, fail to pay fees, use the Services unlawfully, or where we are required to do so by law or by a regulator. Where practical and lawful, we will give you notice.

On termination, your licence to use the Services ends. Sections relating to fees due, intellectual property, confidentiality, disclaimers, limitation of liability, indemnification, and governing law survive termination.

We may update these Terms from time to time. If we make material changes, we will provide reasonable notice, for example by email or through the dashboard. Your continued use of the Services after the changes take effect constitutes acceptance of the updated Terms.

These Terms are governed by the laws of the Federal Republic of Nigeria. The parties will first attempt to resolve any dispute amicably through good-faith negotiation. Failing that, the dispute will be referred to mediation at the Lagos Multi-Door Courthouse or to arbitration seated in Lagos under the Arbitration and Mediation Act, 2023. The courts of Lagos State will have jurisdiction over any matter not subject to arbitration.

These Terms, together with the Privacy Policy and any order or Data Processing Agreement, are the entire agreement between you and Myaza regarding the Services. If any provision is held unenforceable, the remaining provisions remain in effect. Our failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; we may assign them to an affiliate or successor. Neither party is liable for delays caused by events beyond its reasonable control.

Questions about these Terms can be sent to legal@myaza.co.