Terms of service

1. The service

apay provides a payment orchestration platform (API, checkout SDK, dashboard and webhooks) that connects merchants to third-party payment processors and partner banks. apay is not a bank, does not hold customer funds and does not itself provide payment services requiring a licence; those are provided by the partner named in your pilot agreement.

2. Sandbox

The sandbox processes simulated payments only. Do not enter real card data in the sandbox. Sandbox data may be reset without notice and is not backed by any service level.

3. Accounts and keys

You are responsible for keeping API keys and dashboard credentials confidential and for all activity under them. Publishable keys may be embedded in client code; secret keys must stay on your servers.

4. Acceptable use

You may not use apay for activities that are illegal in your jurisdiction or prohibited by the card schemes or the partner processor, including but not limited to the categories listed in the partner's merchant agreement.

5. Fees

Sandbox use is free. Live fees are set out in your pilot or platform agreement and in the processor's or partner bank's terms.

6. Data

See the privacy notice. Card data is handled by the checkout SDK and the vault; merchants must not send raw card numbers to their own servers unless they are PCI DSS certified for it.

7. Liability

To the extent permitted by law, apay's aggregate liability under these terms is limited to the fees paid by you to apay in the three months preceding the claim. apay is not liable for the acts of processors, banks or card schemes.

8. Changes

We may update these terms for the sandbox at any time by publishing a new version here. Pilot agreements take precedence over this page.