Terms of Service

These Terms of Service ("Terms") form a binding agreement between Real Frame Sagl, Via alla Roggia 16, 6900 Lugano, Switzerland ("Real Frame", "we", "us") and the organization or person that creates an account or uses the service ("Customer", "you"). By creating an account, using an API key, or otherwise accessing the platform, you accept these Terms. If you accept on behalf of an organization, you represent that you are authorized to bind it.

These Terms cover the Real Frame test environment at app.realframe.ch, operated by Real Frame Sagl. The Service is offered for testing and evaluation only. It is not a production service.

• Platform / Service: the Real Frame dashboard, API, and related services for issuing and verifying Verifiable Credentials, provided at app.realframe.ch for testing and evaluation.
• Credential: a W3C Verifiable Credential issued or verified through the Service using OID4VCI / OID4VP.
• Credential Subject: the individual or entity that a Credential is about.
• API Key: the secret credential that authenticates your requests to the Service.
• Customer Data: data you submit to the Service, including credential schemas and Credential Subject data.

Real Frame provides infrastructure to issue Credentials ("Frame") and verify Credentials ("Gate") through a dashboard and API. The Service is the entry product: a dashboard and an API key that unlock issuance and verification. We may add, modify, or deprecate features over time, with notice for material changes that adversely affect you.

Alongside the self-serve Service, we may offer professional services such as done-for-you integration, onboarding, or configuration assistance. Any such engagement is scoped, priced, and delivered under a separate order form or statement of work. These Terms and the Privacy Policy continue to apply; if an order form conflicts with these Terms for that engagement, the order form controls for that engagement only.

The Service itself remains limited to testing and evaluation with synthetic or test data. Any processing of real personal data in an engagement requires a separate written agreement covering that processing. Deliverables are licensed to you for use with the Service; each party retains its pre-existing and background intellectual property. Professional services are not covered by any service-level commitment unless the order form states otherwise.

• You must provide accurate registration information and keep it up to date.
• You are responsible for all activity under your account and API keys. Keep your API keys secret. A key is shown in full only once; store it securely.
• Notify us immediately of any suspected compromise. You may rotate or revoke keys at any time from the dashboard.
• You must be at least 18 years old and legally able to enter into this agreement.

• Two plans are available: Early Access (CHF 0) and the Early Supporter contribution (CHF 10). Each is a one-time payment made through Stripe Checkout. There is no recurring billing and nothing renews automatically.
• Both plans give access to the same test environment for evaluation with synthetic or test data. The contribution supports development and does not add a service-level commitment or production use.
• Fees are exclusive of taxes; you are responsible for applicable taxes, including Swiss VAT where it applies.
• Except where required by law, payments already made are non-refundable.

You agree not to:

• issue Credentials containing false, misleading, or fraudulent claims, or that you are not authorized to attest;
• use the Service to violate any law, infringe rights, or facilitate identity fraud;
• attempt to breach, probe, or circumvent the security of the Service, or exceed your plan limits through abusive automation;
• reverse engineer, resell, or provide the Service to third parties except as expressly permitted;
• interfere with or disrupt the integrity or performance of the Service.

Some sectors that use the Service, such as age-restricted commerce, gaming and betting, or adult platforms, are subject to specific licensing and regulatory requirements. We do not prohibit these uses, but you are solely responsible for holding any required licenses and for complying with the laws applicable to your sector and jurisdiction.

The Service is for testing with synthetic or test data. If Credential Subject data is nonetheless processed when you issue or verify Credentials, you act as its controller and Real Frame acts as your processor, as described in our Privacy Policy. You represent and warrant that:

• you have a valid legal basis and any required consents to process Credential Subject data;
• the claims you attest in issued Credentials are accurate and that you are entitled to issue them;
• you will comply with applicable data protection law and provide required notices to your Credential Subjects.

You retain all rights in your Customer Data. You grant us a limited license to process it solely to provide and secure the Service.

We aim for high availability but do not guarantee uninterrupted service. Features identified as beta or early access are provided "as is", may change or be withdrawn, and are not covered by any service-level commitment. We may perform maintenance and will give notice of planned downtime where practicable.

Both plans, Early Access and the Early Supporter contribution, are provided for testing and evaluation only. You must use synthetic or test data and must not submit real personal data of any data subject on either plan. Because the Service is not intended for production use, our processor obligations and any liability do not extend to real personal data entered in breach of this restriction; you are solely responsible for such data.

The Service, including its software, design, and documentation, is and remains the property of Real Frame and its licensors. These Terms grant you a limited, non-exclusive, non-transferable right to use the Service while you have an account. All rights not expressly granted are reserved.

The Service interoperates with third-party systems such as wallets (for example EUDI-compatible wallets), trusted issuer registries, and our providers (Stripe, Supabase, Railway, Vercel). We are not responsible for third-party services, for a wallet's or verifier's acceptance of a credential, or for credentials once they are delivered to and controlled by an end user's wallet.

Each party may access non-public information of the other. The receiving party will protect such information with reasonable care, use it only to perform under these Terms, and not disclose it except to personnel and contractors bound by confidentiality, or as required by law.

Except as expressly stated, the Service is provided "as is" and "as available" without warranties of any kind, whether express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Service will be error-free or that any specific credential will be accepted by a given verifier or wallet.

To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data. Real Frame's aggregate liability arising out of or relating to the Service is limited to the fees you paid in the 12 months preceding the event giving rise to the claim. Nothing limits liability that cannot be excluded under mandatory Swiss law.

You will defend and indemnify Real Frame against third-party claims arising from your Customer Data, the Credentials you issue or verify, or your breach of these Terms or applicable law, except to the extent caused by Real Frame.

• These Terms apply while you have an account or use the Service.
• You may terminate by closing your account. We may suspend or terminate for material breach, non-payment, or unlawful use, with notice where reasonable.
• On termination, your right to use the Service ends. You may export your data before closure; after closure we delete or anonymize personal data as described in the Privacy Policy, subject to legal retention duties.

These Terms are governed by the laws of Switzerland, without regard to conflict-of-law rules. The exclusive place of jurisdiction is Lugano, Ticino, Switzerland, subject to any mandatory consumer protections that may apply to you.

• Entire agreement: these Terms, the Privacy Policy, and any order form constitute the entire agreement between us.
• Severability: if any provision is unenforceable, the rest remains in effect.
• Assignment: you may not assign these Terms without our consent; we may assign them in connection with a merger or sale.
• Force majeure: neither party is liable for delays caused by events beyond its reasonable control.
• Changes: we may update these Terms with notice; continued use after the effective date constitutes acceptance.

Questions about these Terms? Reach us through our contact page.