Terms of service

1. The agreement

These terms, together with any order form, our data processing addendum, the privacy policy and the documentation, form the agreement between Speedily Services Limited (“Speedily”, “we”, “us”) and the organisation using Speedmap (“Customer”, “you”). If an order form conflicts with these terms, the order form prevails for that order.

2. Definitions

• Service: the Speedmap API, dashboard, MCP server (Speedmap Connect), SDKs, documentation and related services.
• Check: a single verification, signal or lookup request processed by the Service.
• Billed check: a live Check that the Service completes and returns a result for.
• Data subject: an individual whose personal data is processed in a Check.
• Providers: the third-party channels through which Checks run, including Speedily’s licensed NIMC access and the Nigeria Inter-Bank Settlement System (NIBSS).
• Purpose code: one of the permitted purposes prescribed for NIN validation, which must accompany each identity Check.

3. Accounts and eligibility

The Service is for businesses, public bodies and other organisations, not for personal or household use. You must give accurate information when you register and keep it up to date. You are responsible for the people you invite to your organisation, the roles you assign them and everything done under your account.

4. Sandbox and live access

Sandbox access is free and uses test data only. You must not submit real personal data in sandbox. Live access requires a successful review of your organisation and use case (“go-live”). We decide which products, methods and response tiers to enable based on that review, your licence type and Provider rules. For example, NIMC restricts raw NIN verification to financial institutions and government agencies. We may request further information, and may change entitlements where your use case or Provider rules change.

Products marked as preview are available in sandbox only, and we make no commitment about when or whether they become available live.

5. Permitted use

You may use the Service only to verify identities, businesses and accounts for lawful purposes connected with your business. For every Check you must:

• have a lawful basis under the Nigeria Data Protection Act 2023 and any sector rules that apply to you;
• declare the purpose code that truly reflects why you are running it;
• obtain and, where the Service requires, attest to or evidence the data subject’s consent before you submit the Check, and keep records of that consent;
• give data subjects a privacy notice that explains the Check;
• use the results only for the declared purpose, and keep them secure.

6. Prohibited use

You must not, and must not allow anyone else to:

• misdeclare a purpose code, attest to consent you have not obtained, or run Checks on people without a lawful basis;
• attempt to discover a NIN, BVN or other identifier from other data, or otherwise use the Service for reverse lookup, profiling, surveillance or tracking individuals;
• resell, sublicense or provide the Service or its results to third parties as a standalone verification service, unless agreed in an order form;
• use the Service to discriminate unlawfully, harass anyone, or for any illegal purpose;
• submit real personal data in sandbox, or test against real identities without authority;
• interfere with the Service, probe it without authorisation, exceed rate limits deliberately or circumvent security or entitlement controls;
• reverse engineer the Service except as the law expressly permits;
• expose secret API keys in client-side code, public repositories or AI prompts.

7. Speedmap Connect (MCP)

Speedmap Connect lets AI assistants and agents you configure call the Service with your API key. Checks made through Connect are your Checks: the same rules on purpose, consent, billing and audit apply. Connect returns assertions only by design. You are responsible for the AI tools you connect, the people who can use them, and confirming consent before an assistant runs a Check. For volume, use bulk jobs rather than placing lists of identifiers into a conversation.

8. Data protection

For personal data processed in Checks you request, you are the controller and we are your processor, and the data processing addendum applies. We will process that data only on your documented instructions, keep it confidential and secure, assist you with data subject requests and breach obligations, and delete or return it at the end of the agreement, subject to legal retention requirements. You confirm that your instructions comply with the law. Each party will comply with the Nigeria Data Protection Act 2023 and the GAID.

9. Fees, wallet and billing

• Live usage is paid from a prepaid naira wallet. Prices published on our website are indicative; your applicable prices are those in your order form or, if none, those shown in the dashboard when the Check is made.
• Only Billed checks are charged. Checks that fail validation, are blocked for missing consent, or fail because of a Provider error or timeout are not charged. Retries with the same idempotency key are not charged twice.
• If your wallet balance is insufficient, live Checks may be declined until you top up.
• Prices exclude value added tax and other applicable taxes, which will be added where required.
• We may change list prices with at least 30 days’ notice. Changes do not affect prices fixed in an order form for its term.
• Wallet balances are not refundable except as stated in an order form, on termination by us without cause, or where the law requires.

10. API keys and security

Keep your secret keys and dashboard credentials confidential and use them only server-side. You are responsible for activity under your keys until you revoke them. Tell us promptly at security@speedmap.ng if you suspect a key or account is compromised. We maintain the security measures described on our Security page.

11. Providers and availability

Checks depend on Providers we do not control. Provider records may be incomplete, out of date or unavailable, and Providers may change their rules, prices or access. We will use reasonable efforts to keep the Service available and to route around Provider issues where an alternative path exists, but we do not guarantee uninterrupted availability or the accuracy of Provider records. Any service levels apply only where set out in an order form.

12. Intellectual property

We own the Service and all related intellectual property. We grant you a non-exclusive, non-transferable right to use the Service during the agreement in line with these terms. You own your data. You grant us the rights we need to provide the Service, and to use aggregated, de-identified usage data to operate and improve it. Feedback you give us may be used without obligation.

13. Confidentiality

Each party will protect the other’s confidential information with at least reasonable care, use it only for the agreement, and disclose it only to people who need to know it and are bound by similar obligations, or where the law requires.

14. Warranties and disclaimers

We will provide the Service with reasonable skill and care, substantially as described in the documentation. A verification result reflects the Provider record at the time of the Check; it is an input to your decision, not a guarantee of a person’s identity, honesty or creditworthiness. Fraud signals are indicators, not determinations. Except as stated in these terms, and to the extent the law allows, the Service is provided “as is” and we disclaim all other warranties.

15. Limitation of liability

To the extent the law allows, neither party is liable for indirect or consequential loss, or for loss of profit, revenue, goodwill or data, and each party’s total liability under the agreement in any 12-month period is limited to the fees you paid in that period. These limits do not apply to your payment obligations, your indemnity, breach of confidentiality, or liability that cannot be limited by law.

16. Indemnity

You will indemnify us against third-party claims, regulatory penalties and losses arising from your breach of sections 5 to 8, including Checks run without a lawful basis, misdeclared purpose codes or consent you did not obtain.

17. Suspension and termination

You may stop using the Service and close your account at any time. We may suspend access immediately where needed to protect data subjects, the Service or Providers, where required by a Provider or regulator, or where we reasonably suspect a breach of sections 5 or 6. Either party may terminate for material breach not remedied within 30 days of notice. On termination your right to use the Service ends, outstanding fees become due, and we handle your data as set out in section 8.

18. Governing law and disputes

These terms are governed by the laws of the Federal Republic of Nigeria. The parties will first try to resolve any dispute through good-faith negotiation between senior representatives. A dispute not resolved within 30 days will be referred to arbitration under the Arbitration and Mediation Act 2023, seated in Lagos, before a sole arbitrator, in English. Either party may seek urgent injunctive relief from a court of competent jurisdiction.

19. General

We may update these terms; for material changes we will give at least 30 days’ notice by email or in the dashboard, and continued use after that date means you accept them. Neither party is liable for delays caused by events beyond its reasonable control. You may not assign the agreement without our consent. If any provision is unenforceable, the rest remains in effect. Notices to us should be sent to sales@speedmap.ng, with a copy to privacy@speedmap.ng for data protection matters.