Terms of Service

Last updated: March 2026

1. Introduction

These Terms of Service ("Terms") govern your access to and use of the VU Credentials platform (the "Service"), operated by VU Credentials Ltd, a company registered in Cyprus (EU) ("VU Credentials", "we", "us", or "our").

By creating an account or using the Service, you agree to be bound by these Terms. If you are using the Service on behalf of an organization, you represent that you have the authority to bind that organization to these Terms, and references to "you" and "your" refer to that organization.

2. Service Description

VU Credentials provides a cloud-based Credential-as-a-Service platform that enables organizations ("Tenants") to:

  • Issue W3C Verifiable Credentials to holders via the OIDC4VCI protocol
  • Define and manage credential types, schemas, and issuer metadata
  • Access programmatic issuance capabilities through authenticated API endpoints
  • Manage team members, API keys, and webhook configurations through a web dashboard
  • Purchase credential issuance bundles using USDC or USDT stablecoins on the Polygon blockchain

3. Account Registration and Security

To use the Service, you must create an account by providing a valid email address and password. You agree to:

  • Provide accurate and complete registration information
  • Maintain the confidentiality of your account credentials, API keys, and any authentication tokens
  • Promptly notify us at support@vucredentials.com if you become aware of any unauthorized access to your account
  • Accept responsibility for all activity that occurs under your account, including actions taken by team members you invite

We reserve the right to suspend or terminate accounts that are inactive for more than 12 consecutive months.

4. API Usage and Rate Limits

Access to the VU Credentials API is authenticated via API keys issued through the dashboard. You agree to the following conditions regarding API usage:

  • API keys must be kept confidential and must not be embedded in client-side code, public repositories, or shared with unauthorized parties
  • We may impose rate limits on API requests to ensure platform stability and fair usage. Current rate limits are documented in the API reference and may be updated from time to time
  • Automated or bulk requests that degrade platform performance for other tenants may be throttled or temporarily blocked
  • Webhook endpoints configured by tenants must use HTTPS and respond within a reasonable timeout period. We are not liable for failures caused by unreachable or misconfigured webhook URLs

5. Billing and Payments

5.1 Prepaid Model

The Service operates on a prepaid billing model. Tenants purchase credential issuance bundles in advance. Each credential issuance deducts from the tenant's available balance according to the following priority: free tier allocation, then bundle balance, then on-chain stablecoin balance. If no balance is available, issuance requests will be declined with a 402 Payment Required response.

5.2 Free Tier

Each tenant receives a monthly free tier allocation of credentials as specified on the pricing page. The free tier resets at the beginning of each calendar month and does not roll over. We reserve the right to modify free tier limits with 30 days' notice.

5.3 Stablecoin Payments

Payments are accepted in USDC and USDT on the Polygon blockchain network. By making a payment, you acknowledge that:

  • Blockchain transactions are irreversible. We cannot reverse, cancel, or refund on-chain payments once confirmed
  • You are solely responsible for ensuring you send the correct amount to the correct address on the correct network (Polygon)
  • Payments sent on incorrect networks or to incorrect addresses may be permanently lost
  • Payment confirmation may be subject to blockchain confirmation times

5.4 Refunds

Prepaid bundle balances are non-refundable except where required by applicable law or at our sole discretion. If your account is terminated by us without cause, we will issue a pro-rata credit for unused bundle balance.

6. Credential Issuance and Data Accuracy

As a Tenant using the Service to issue Verifiable Credentials, you acknowledge and agree that:

  • You are the issuer. Credentials are issued under your organization's identity and DID. VU Credentials is the infrastructure provider, not the issuer of record.
  • Data accuracy is your responsibility. You are solely responsible for the accuracy, completeness, and legality of all claims data included in credentials. We do not verify, validate, or endorse the content of credentials issued through the platform.
  • Legal basis for processing. You must have a lawful basis under applicable data protection laws (including GDPR) to process any personal data you submit for credential issuance.
  • Prohibited uses. You must not use the Service to issue credentials that contain false, misleading, defamatory, or unlawful content, or credentials that impersonate another organization or individual.
  • Credential lifecycle. Once a Verifiable Credential has been issued and delivered to a holder's wallet, VU Credentials has no ability to revoke, modify, or recall that credential on your behalf unless revocation mechanisms are explicitly configured by you.

7. Acceptable Use

You agree not to use the Service to:

  • Violate any applicable law, regulation, or third-party rights
  • Issue credentials for fraudulent, deceptive, or illegal purposes
  • Attempt to gain unauthorized access to the Service, other tenant accounts, or our infrastructure
  • Reverse engineer, decompile, or disassemble any part of the platform
  • Interfere with or disrupt the integrity or performance of the Service
  • Resell or sublicense access to the Service without our prior written consent

8. Intellectual Property

All intellectual property rights in the Service, including but not limited to software, APIs, documentation, trademarks, and visual design, are and remain the exclusive property of VU Credentials Ltd or its licensors.

You retain ownership of all data you submit to the Service, including credential schemas, claims data, and organization information. You grant us a limited, non-exclusive licence to process this data solely for the purpose of providing the Service.

The Verifiable Credentials issued through the platform are owned by you (the issuing organization) and governed by the W3C Verifiable Credentials Data Model specification.

9. Service Availability

We strive to maintain high availability of the Service but do not guarantee uninterrupted access. The Service may be temporarily unavailable due to:

  • Scheduled maintenance (we will provide reasonable advance notice)
  • Infrastructure issues affecting our cloud hosting provider (Google Cloud Platform)
  • Force majeure events, including but not limited to natural disasters, internet disruptions, or cyberattacks

Enterprise customers may negotiate dedicated SLA agreements with guaranteed uptime commitments.

10. Limitation of Liability

To the maximum extent permitted by applicable law:

  • The Service is provided on an "as is" and "as available" basis. We disclaim all warranties, whether express, implied, or statutory, including warranties of merchantability, fitness for a particular purpose, and non-infringement.
  • VU Credentials shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, business opportunities, or goodwill.
  • Our total aggregate liability for any claims arising from or related to these Terms or the Service shall not exceed the total amount paid by you to VU Credentials in the twelve (12) months preceding the claim.
  • We are not liable for losses resulting from incorrect wallet addresses, failed blockchain transactions, or fluctuations in stablecoin value.
  • We are not liable for the accuracy, validity, or legal effect of credentials issued by you through the platform.

11. Indemnification

You agree to indemnify, defend, and hold harmless VU Credentials Ltd, its officers, directors, employees, and agents from and against any claims, damages, losses, liabilities, and expenses (including reasonable legal fees) arising from:

  • Your use of the Service in violation of these Terms
  • The content, accuracy, or legality of credentials you issue through the platform
  • Your violation of any applicable law or third-party rights
  • Any claim by a credential holder or third party arising from credentials you have issued

12. Suspension and Termination

12.1 By You

You may close your account at any time by contacting support@vucredentials.com. Upon closure, your API keys will be immediately revoked and issuance capabilities will cease. Data retention will follow the periods described in our Privacy Policy.

12.2 By Us

We may suspend or terminate your account, with or without notice, if:

  • You breach any provision of these Terms
  • We reasonably believe your use of the Service poses a security risk or may cause harm to the platform or other tenants
  • Required by law, regulation, or a lawful order from a competent authority
  • Your account has been inactive for more than 12 months

12.3 Effect of Termination

Upon termination, all licences granted to you under these Terms will immediately cease. Provisions that by their nature should survive termination (including Sections 6, 8, 10, 11, 13, and 14) will continue in full force and effect.

13. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the Republic of Cyprus, without regard to its conflict of laws principles. The application of the United Nations Convention on Contracts for the International Sale of Goods is expressly excluded.

14. Dispute Resolution

In the event of a dispute arising from or relating to these Terms or the Service, the parties agree to the following procedure:

  • Informal resolution: The parties shall first attempt to resolve the dispute through good-faith negotiation by contacting legal@vucredentials.com. Either party must provide written notice of the dispute and allow 30 days for resolution.
  • Mediation: If informal resolution fails, the parties may agree to submit the dispute to mediation under the rules of a mutually agreed mediation body.
  • Jurisdiction: If the dispute is not resolved through negotiation or mediation, the courts of Nicosia, Cyprus shall have exclusive jurisdiction, except where mandatory consumer protection laws require otherwise.

15. Changes to These Terms

We may update these Terms from time to time. We will notify you of material changes at least 30 days in advance via email or a prominent notice in the dashboard. Your continued use of the Service after the effective date of updated Terms constitutes your acceptance of those changes. If you do not agree with the updated Terms, you must stop using the Service and close your account.

16. Miscellaneous

  • Entire agreement: These Terms, together with our Privacy Policy, constitute the entire agreement between you and VU Credentials regarding the Service.
  • Severability: If any provision of these Terms is found to be unenforceable, the remaining provisions shall continue in full force and effect.
  • No waiver: Our failure to enforce any right or provision of these Terms shall not constitute a waiver of that right or provision.
  • Assignment: You may not assign or transfer your rights under these Terms without our prior written consent. We may assign our rights and obligations without restriction.
  • Force majeure: We shall not be liable for any failure to perform our obligations where such failure results from circumstances beyond our reasonable control.

17. Contact

For questions about these Terms, please contact us: