Terms of Service
1. The service
Open Commerce Online (“the platform”) provides software services for payment orchestration: invoice/intent lifecycle management, gateway integration, blockchain reconciliation, webhook delivery, and reporting (“the Control Plane”). The platform is not a money transmitter, payment processor, custodian, or exchange.
2. Non-custodial terms
- The platform never holds, controls, or transmits customer or merchant funds.
- Crypto payments settle to addresses derived from the merchant’s extended public keys. The merchant is solely responsible for safeguarding the corresponding private keys; loss of merchant keys is not recoverable by the platform.
- Fiat payments settle through the merchant’s own accounts at third-party providers (e.g. Stripe, PayPal) under those providers’ terms.
See also the non-custodial policy.
3. Accounts and API keys
- Merchants are responsible for actions taken with their API keys and for rotating keys on suspected compromise.
- Scoped keys must be used per the documentation; admin-scoped keys must not be embedded in client-side code.
4. Fees
Fees are described on the public pricing section of the sales site. Fees are for software services only and are not transaction processing fees. Usage fees are computed from settled invoices recorded by the Control Plane.
5. Marketplace adapters
Third-party gateway adapters are provided by their sellers. The platform certifies adapters against a published contract but does not warrant seller services. Revenue share and seller obligations are governed by the [Marketplace Seller Agreement].
6. Prohibited use
Sanctioned jurisdictions and persons [counsel: OFAC screening approach]; unlawful goods; use of the platform to evade provider terms.
7. Compliance responsibilities
The merchant is the seller of record and solely responsible for its own tax, KYC/AML (where applicable to the merchant’s business), consumer-protection, and licensing obligations. The platform provides records and exports to assist.
8. Availability, support, liability
[Standard SaaS SLA, limitation of liability capped at fees paid, no indirect damages, indemnities — counsel to draft.]
9. Data
PII minimization; merchant data is tenant-isolated; subprocessors listed on the subprocessors page. On termination, merchants may export orders, intents, and events; xpubs are deleted on request after a retention window of [N days]. See Privacy.
