Terms of Service

Last updated: September 28, 2021

From everyone at ZADA, thank you for joining the ZADA Network! We created the ZADA Network to enable a Digital ID ecosystem for millions of people to use every day, exchanging digital ids and certificates in a secure and private way. Because we might not know every one of our Network members personally, we have to put in place some Terms of Service to help keep the ship afloat.

When we say “ZADA”, “we”, “our”, or “us” in this document, we are referring to ZADA Solutions Pte Ltd.

When we say “Services”, we mean any product created and maintained by ZADA Solutions Pte Ltd. That includes Issuer Apps, Verifier Apps, Core API, Mobile Wallet App, ZADA Auth, etc, whether delivered within a web browser, desktop application, mobile application, or another format.

When we say “You” or “your”, we are referring to the people or organizations that are members of the ZADA Network and use one or more of our Services. 

We may update these Terms of Service in the future. Typically these changes have been to clarify some of these terms by linking to an expanded related policy. Whenever we make a significant change to our policies, we will also announce them on our ZADA blog.

When you use our Services, now or in the future, you are agreeing to the latest Terms of Service. That’s true for any of our existing and future products and all features that we add to our Services over time. There may be times where we do not exercise or enforce any right or provision of the Terms of Service; in doing so, we are not waiving that right or provision. These terms do contain a limitation of our liability.

If you violate any of the terms or engage in fraudulent or illegal activities or that suspension is necessary to protect ZADA, the ZADA Services or any third party from harm or damages, we may terminate or temporarily suspend your account. That’s a broad statement and it means you need to place a lot of trust in us. We do our best to deserve that trust by being open about who we are, how we work, and keeping an open door to your feedback.

Account Terms #

• You are responsible for maintaining the security of your account and password. ZADA cannot and will not be liable for any loss or damage from your failure to comply with this security obligation. We recommend users set up two-factor authentication for added security with ZADA Auth. In some of our Services, we may require it.
• You are responsible for all activity that occurs under your account. That includes others who either: (a) have access to your login credentials; or (b) have their own logins under your account.
• You must be a human. “Bots” or other automated methods are not permitted.

Being a Tenant #

• ZADA Network enables you to issue and verify Digital Credentials and Digital Proofs, and establish bilateral peer-to-peer connections with wallet holders on the ZADA Network.
• The credentials are sent directly on the established connection and are not recorded on the Digital Credential Anchor Network or otherwise publicly recorded.
• You are responsible for integration of ZADA Core into your Systems, Software, and workflows; and you must comply with the applicable interface specifications and other Documentation in running and integrating ZADA with its Customer Systems.
• ZADA is aligned with open standards including the Verifiable Credentials standard from the W3C and may be able to exchange credentials and proofs from third party vendors and ledgers, but at present are only other ZADA systems and ZADA’s mobile application and applications developed with ZADA’s Mobile SDK supported.

Issuance of Credentials #

• Each Credential has one Schema that specifies the required attributes and data needed, and in which format to ensure interoperability in the ecosystem. It is the responsibility of the issuer to ensure this data is input correctly and is true.
• Each issued credential is digitally signed by you and this signature together with DiD is created on the Digital Ledger so a verifier can verify who the issuer behind the credential is and if they accept the issuer.
• The credentials are sent directly on the established connection and are not recorded on the Digital Credential Anchor Network or otherwise publicly recorded.

Verification of Credentials #

• To verify a credential there is a Verification Policy to follow. This is to safeguard that no other data than the one agreed is requested from the Credential Holder.
• The data received from a Credential holder is received with consent directly from the Credential Holder and it is your responsibility to manage this data according to the local data privacy or data protection laws in your jurisdiction and your customer relationship, and we are not liable how you handle the received data.

Digital Credential Anchor Networks #

• The ZADA Services enable the creation, issuance, exchange, and verification of “Digital Credentials,” which are cryptographically-secured digital records containing information about a person, entity, or thing based on a pre-defined credential definition and digitally signed by their issuer. 
• The ZADA Services require the use of a third-party distributed ledger technology-based digital identity network (a “Digital Credential Anchor Network”) to immutably record certain Digital Credential-related information.
• You understand and agree that the functionality provided by the Digital Credential Anchor Network (i) is necessary to enable Customer to use the ZADA Services and (ii) is not part of the ZADA Services or provided by ZADA. ZADA has no responsibility or liability for the functionality provided by any Digital Credential Access Network.

Uptime, Security, and Privacy #

• Your use of the Services is at your sole risk. We provide these Services on an “as is” and “as available” basis. We do not offer service-level agreements but do take uptime of our applications seriously. 
• We reserve the right to temporarily disable your account if your usage significantly exceeds the average usage of other customers of the Services. Of course, we’ll reach out to the account owner before taking any action except in rare cases where the level of use may negatively impact the performance of the Service for other customers.
• We take many measures to protect and secure all data through backups, redundancies, and encryption. We also enforce encryption for data transmission on the public Internet. 
• We process data only for the purpose you signed up for, such as issuance or verification, and as described in these Terms of Service, Privacy policy, and other policies. We do not retain, use, disclose, or sell any of that information for any other commercial purposes. 
• To safeguard ZADA. We’ll look at logs and metadata as part of our work to ensure the security of your account and the Services as a whole.
• We use third party vendors and hosting partners to provide the necessary hardware, software, networking, storage, and related technology required to run the Services.
• Note that the credentials that are exchanged on ZADA Network are sent directly from Agent to Agent and are not recorded on the Digital Credential Anchor Network or otherwise publicly recorded. ZADA is also aligned with open standards including the Verifiable Credentials standard from the W3C.

Features and Bugs #

• We design our Services with care, based on our own experience and the experiences of customers who share their time and feedback. However, there is no such thing as a service that pleases everybody. We make no guarantees that our Services will meet your specific requirements or expectations.
• We also test all of our features extensively before shipping them. As with any software, our Services inevitably have some bugs. We track the bugs reported to us and work through priority ones, especially any related to security or privacy. Not all reported bugs will get fixed and we don’t guarantee completely error-free Services.

Services Adaptations and API Terms #

• We offer Application Program Interfaces (“API”s) for some of our Services. Any use of the API, including through a third-party product that accesses the Services, is bound by the terms of this agreement plus the following specific terms:
• You expressly understand and agree that we are not liable for any damages or losses resulting from your use of the API or third-party products that access data via the API.
• Abuse or excessively frequent requests to the Services via the API may result in the temporary or permanent suspension of your account’s access to the API. ZADA, in its sole discretion, will determine abuse or excessive usage of the API. If we need to suspend your account’s access, we will attempt to warn the account owner first. If your API usage could or has caused downtime, we may cut off access without prior notice.
• We are not liable or accountable for any third-party integrations with our Services.

Liability #

We mention liability throughout these Terms but to put it all in one section:

You expressly understand and agree that ZADA shall not be liable, in law or in equity, to you or to any third party for any direct, indirect, incidental, lost profits, special, consequential, punitive or exemplary damages, including, but not limited to, damages for loss of profits, goodwill, use, data or other intangible losses (even if ZADA has been advised of the possibility of such damages), resulting from: (i) the use or the inability to use the Services; (ii) the cost of procurement of substitute goods and services resulting from any goods, data, information or services purchased or obtained or messages received or transactions entered into through or from the Services; (iii) unauthorized access to or alteration of your transmissions or data; (iv) statements or conduct of any third party on the service; (v) or any other matter relating to this Terms of Service or the Services, whether as a breach of contract, tort (including negligence whether active or passive), or any other theory of liability.

In other words: choosing to use our Services does mean you are making a bet on us. If the bet does not work out, that’s on you, not us. We do our darnedest to be as safe a bet as possible through careful management of the business; investments in security, infrastructure, and talent; and in general giving a damn. If you choose to use our Services, thank you for betting on us.