OneTrueTag Terms of Service

Version: [[VERSION]] · Effective date: [[EFFECTIVE_DATE]] · Last updated: 2026-10-14 (draft)

These Terms are a contract between [[ENTITY_NAME]], a [[ENTITYLEGALFORM]] registered under number [[REGISTRATION_NUMBER]] with its registered address at [[ADDRESS]] ("OneTrueTag", "we", "us"), and the business that opens an account ("Customer", "you").

1. Definitions

1.1 Service: the OneTrueTag platform, including the brand panel, the customer-facing pages reached by scanning a code ("Scan Pages"), the chat bots run for you, the public API, the MCP server, and related support.

1.2 Account: your business account on the Service (a "team"). An Account can hold one or more Brands.

1.3 Member: a person you invite to your Account. Each active Member or open invitation uses one Seat.

1.4 End Customer: a person who scans one of your codes, fills in a form on a Scan Page, writes to one of your chat bots, or creates a customer account to follow their requests.

1.5 Customer Data: personal data about End Customers that the Service processes for you, and any other content you or End Customers put into the Service for your Account.

1.6 Code: a unique serial and its QR code that we issue for one unit of your product, and the brand and SKU QR codes you generate.

1.7 Plan: the subscription level you choose (Free, Pilot, Growth, Scale or Enterprise) as described on our pricing page and in the brand panel's Billing page.

1.8 Third-Party Service: a service not run by us that you connect to the Service, such as Telegram, Meta's WhatsApp Business Platform, Shopify, WooCommerce, Amazon Selling Partner API, Salla, Zid, Trendyol, HubSpot, Salesforce, GoHighLevel, an AI provider (Anthropic Claude, OpenAI, Google Gemini, Chatbase, Voiceflow, Botpress or your own endpoint), or an AI client that you connect to our MCP server.

2. Who may use the Service

2.1 The Service is for businesses only. By accepting these Terms you confirm that you act for a business, that you are authorised to bind it, and that the business is not a consumer.

2.2 You must give accurate sign-up details and keep them current.

2.3 You may not use the Service if you are subject to sanctions that prohibit us from dealing with you, or if we have previously closed your account for a breach of these Terms.

3. The Service

3.1 The Service lets you issue a unique Code for each unit of your products and lets End Customers use that Code to: check that a unit is genuine (including basic duplicate detection), read product guides and FAQ, register and activate a warranty, open a support ticket, request a repair (RMA), ask your AI assistant, and reach your chat bots on Telegram or WhatsApp. It also gives you a customer list, customer messages, reports and analytics, store sync, CRM push, a public API and an MCP server, each as included in your Plan.

3.2 Features marked "coming soon" are not part of the Service and are not included in any price until they are released.

3.3 We may change the Service. We will not remove a feature that is included in your paid Plan during a period you have already paid for without giving you at least 30 days' notice and, if the removal materially reduces the Service, the right to cancel and receive a pro-rata refund of prepaid fees for the remaining period.

4. Accounts, Members and Seats

4.1 The person who creates the Account is its owner. The owner and Members with the right permissions can invite Members, assign roles and suspend or remove Members.

4.2 The number of Seats is limited by your Plan. Each Seat is for one named person; log-ins may not be shared.

4.3 You are responsible for everything done through your Account, by your Members, and through API keys or MCP connections created by your Members. Keep passwords, two-factor devices, recovery codes, API keys and tokens secret. Tell us at [[SECURITY_EMAIL]] without delay if you suspect unauthorised access.

4.4 Removing a Member ends their access to your Account. It does not delete the Member's own login, which they control.

5. Plans, fees and payment

5.1 Plans. The Plans, prices and limits are those shown on our pricing page and on the Billing page when you subscribe. The Free Plan costs nothing and has no time limit. Codes and scans are not charged per unit on any paid Plan.

5.2 Paddle as merchant of record. Paid Plans are sold through Paddle (Paddle.com Market Limited and its affiliates), which acts as the merchant of record and reseller. Your purchase is made from Paddle, under Paddle's buyer terms, and Paddle charges the price, collects and remits taxes, and issues invoices. We never receive your full card details.

5.3 Billing cycle. Paid Plans are billed in advance, monthly or annually, and renew automatically at the end of each period until cancelled. Prices are in US dollars and exclude taxes, which Paddle adds at checkout.

5.4 Trial. Pilot, Growth and Scale may be started with a 14-day trial. A trial requires a payment card and converts to a paid subscription, charged automatically, when it ends unless you cancel before. We send a reminder by email 3 days before the first charge. One trial is allowed per Account and per person; we may refuse a trial where we reasonably believe this rule is being avoided. During a trial these limits apply whatever the Plan: up to 1,000 Codes issued per month; bulk messages to up to 200 people per day and 1,000 people in the whole trial; one custom domain; 1 GB of storage. The limits lift with the first payment.

5.5 Refund after the first charge. If you ask us within 48 hours of the first charge that follows a trial, we will arrange a full refund of that charge without asking for a reason. Otherwise, fees are non-refundable except where these Terms or mandatory law say otherwise.

5.6 Founder discount. We may, at our sole discretion, grant a discount to some early accounts (the "founder" discount). Its amount, length and conditions (for example agreement to a case study or periodic feedback calls) are those we state when we grant it. A discount is not transferable, has no cash value and ends if the subscription ends.

5.7 Changes to Plans or prices. We may change Plans and prices. A price increase applies to your subscription from your next renewal after at least 30 days' notice. If you do not accept it, you may cancel before it applies.

5.8 Upgrades and downgrades. Upgrades take effect immediately, with the difference charged pro rata by Paddle. Downgrades take effect at the end of the current billing period. If your use exceeds a lower Plan's limits, the excess becomes read-only; nothing is deleted because of a downgrade alone.

5.9 Late payment. If a payment fails and is not resolved, your paid subscription ends and Section 13 applies.

5.10 Enterprise. Enterprise is sold under a separate order form, which prevails over these Terms where they conflict.

6. Fair use

6.1 The Free Plan allows up to 1,000 Codes issued per month. A monthly paid Plan allows up to 50,000 Codes issued in its first month; after that, and on annual Plans, issuing Codes is unlimited, subject to this Section.

6.2 "Unlimited" means without a fixed numeric cap for normal business use of the Service for your own products. It does not permit use that degrades the Service for others, such as automated issuing of Codes that are not for real product units, or traffic designed to test or overload our systems.

6.3 Rate limits apply to the panel, the Scan Pages, the API and the MCP server as described in our documentation. We may apply reasonable additional technical limits to protect the Service.

7. Your responsibilities

7.1 Lawful use and the Acceptable Use Policy. You must use the Service in compliance with applicable law and our Acceptable Use Policy, which forms part of these Terms.

7.2 Your role as controller. For Customer Data you are the controller (in Turkey, the "veri sorumlusu") and we are your processor. The Data Processing Agreement forms part of these Terms. You are responsible for:

(a) having a lawful basis for collecting and using Customer Data, and giving End Customers the information the law requires, including your own privacy notice (set it in the brand settings so it is linked on the Scan Pages and forms);

(b) the custom questions you add to forms, and not asking for special category or sensitive data unless the law allows it and you have the required consent or other basis;

(c) answering End Customers' requests to exercise their rights, including requests made through the request feature on the Scan Pages, within the period the law sets;

(d) any registration, notification or representative duty that applies to you as a controller (for example VERBIS in Turkey).

7.3 Messaging and consent. You may send news or offers only to End Customers who have given the consent required by law. The Service records consent and withdrawal, sends news only to people recorded as having agreed, and adds an unsubscribe option. If you choose the setting under which starting a chat with your bot counts as agreement, you are responsible for confirming that this setting is lawful in the countries where your End Customers are. You must honour every withdrawal and must not import contact lists for messaging through the Service.

7.4 Messaging-provider costs. WhatsApp runs through your own WhatsApp Business account on Meta's platform (or another provider we allow). Meta or that provider charges you directly for messages, including template messages outside WhatsApp's 24-hour service window, under its own terms. We do not sell message credits and are not responsible for those charges, for template approval decisions, or for a provider suspending your account or number.

7.5 Accuracy of authenticity claims. The Service tells an End Customer whether a scanned Code is one we issued for your Account and whether the unit was checked before. It does not inspect the physical product. You are responsible for: applying each Code only to the genuine unit it was issued for; keeping unused Codes and print files secure; and every statement you make to End Customers about authenticity, warranty, recalls, repairs or product safety. You must not present a Code as proof of authenticity for goods you did not make or are not authorised to sell.

7.6 Your brand names and reserved addresses. A Brand's address on our domain is verify.onetruetag.com/{slug}. Slugs of well-known brands and our own words are reserved. If your Brand name matches a reserved slug, you receive a suffixed address until you prove to us that you own or are authorised to use the name. We may reassign a slug that we reasonably believe was registered to impersonate another brand. Printed Codes keep working on the address they were printed with.

7.7 Your content. You are responsible for the content you upload or publish through the Service (brand pages, guides, FAQ, messages, AI assistant settings) and must have the rights needed to use it.

8. Third-Party Services

8.1 When you connect a Third-Party Service, you authorise us to exchange data with it on your behalf as described in our documentation (for example, to send End Customer messages through your Telegram bot, to read your products from your store, to push customer records to your CRM, or to send an End Customer's question to your AI provider).

8.2 Your use of a Third-Party Service is governed by your agreement with its provider. That provider is not our sub-processor, and we are not responsible for its acts, availability, prices or changes. Credentials you give us for a Third-Party Service are stored encrypted and used only for the connection you set up. You can disconnect it at any time.

8.3 You are responsible for having a lawful basis, and any data processing agreement your law requires, for the data the Service sends to a Third-Party Service at your instruction, including End Customer messages sent to your AI provider.

9. API and MCP server

9.1 On the Plans that include them, you may use the public API and the MCP server under these Terms and the documentation. API keys and MCP connections act as the Member who created them, within that Member's permissions.

9.2 You must not share keys or tokens outside your organisation, exceed or work around rate limits, or use the API or MCP server to build a product that competes with the Service by reselling its functions.

9.3 We may change the API with reasonable notice. A breaking change is made under a new version, and we will give reasonable notice before an old version is withdrawn.

9.4 An AI client you connect to the MCP server is a Third-Party Service. Data it reads through the MCP server is processed by its provider under your agreement with that provider.

10. Availability and support

10.1 We aim to keep the Service available at all times but do not guarantee uninterrupted or error-free operation. There is no service level agreement except where an Enterprise order form includes one.

10.2 We may suspend parts of the Service for maintenance, security or legal reasons. We will give advance notice of planned maintenance where reasonably possible.

10.3 Support is provided through the channels included in your Plan (help center, email, priority email, chat).

11. Intellectual property

11.1 We own the Service, its software, design and documentation, and our names and logos. These Terms give you a non-exclusive, non-transferable right to use the Service during your subscription for your internal business purposes. No other right is granted.

11.2 You keep all rights in your content, your Brands and your Customer Data. You grant us a worldwide, non-exclusive licence to host, copy, process and display them only as needed to provide, secure and support the Service for you.

11.3 If you send us feedback or suggestions, we may use them without obligation to you.

11.4 We may show your Account's name and logo as a customer only with your consent, or as agreed in the conditions of a founder discount.

12. Confidentiality

12.1 Each party will keep the other's non-public business information confidential and use it only for the purpose of these Terms, with at least reasonable care. This does not apply to information that is public through no fault of the receiving party, already known to it, independently developed, or required to be disclosed by law (with notice to the other party where lawful).

13. Cancellation and what happens after

13.1 Cancelling. You can cancel a paid subscription at any time on the Billing page. Cancellation takes effect at the end of the current paid period. Cancelling during a trial ends the trial and the Account returns to the Free Plan.

13.2 Printed Codes keep resolving. After a paid subscription ends, every Code issued for your Account keeps resolving to at least the basic authenticity page, for as long as your Account exists.

13.3 Grace period. After a paid subscription ends there is a grace period of 3 months after a monthly Plan and 12 months after an annual Plan, counted from the end of the last paid period. During the grace period:

(a) the Scan Pages show the basic (Free) page, with the "Powered by OneTrueTag" badge;

(b) paid services (such as warranty registration, support tickets and repairs) stop accepting new requests, and your Members can read existing ones;

(d) a custom domain keeps working.

We notify the Members who manage billing by email and in the panel 30 days and 7 days before the grace period ends.

13.4 After the grace period.

(a) The Free Plan's retention applies: an End Customer with no scan, chat, registration, ticket or repair for more than 12 months is deleted with their contact details, chats, warranties, tickets, repairs and files, except an End Customer whose warranty is still running. Contact details left in scan reports older than that period are removed.

(b) Codes on a custom domain open on our address (verify.onetruetag.com/{slug}) and keep working.

13.5 Retention during a subscription. On Free and Pilot, the 12-month inactivity rule in Section 13.4(a) applies at all times. On Growth, Scale and Enterprise, Customer Data is kept while the Account exists, until you or an End Customer request deletion.

14. Deleting your Account

14.1 Only the Account owner can delete the Account, after confirming their password (and their two-step code, when two-step sign-in is on) and typing the Account's name. Deletion ends any subscription at once, with no further charge. If the payment provider cannot be reached to end it, the Account is not deleted and you can try again later.

14.2 Deletion is scheduled for 30 days later. During those 30 days Members can still sign in, but the Account can only be viewed; Scan Pages show only the authenticity check; chat bots offer no services; and API keys, MCP connections, webhooks, CRM pushes, store syncs and scheduled messages are suspended. The owner can undo the deletion during that time, which restores everything except the ended subscription (a Plan can be chosen again). All active Members are notified when deletion is scheduled or undone, and the owner receives a reminder 3 days before the end.

14.3 After 30 days we permanently delete the Account's data, including Customer Data, Brands, products, files and connections, except:

(a) invoices and billing records, which we and Paddle keep for the period tax and accounting law requires;

(b) a minimal record of the Account, its Brands' names and addresses, and its code batches (without product data), kept so that printed Codes show a neutral page stating that the brand no longer uses OneTrueTag, rather than an error that could be read as counterfeit, and so that no one else can take those addresses. A Code printed with a custom domain shows that page only while the domain still points to the Service; the same Code also resolves at our default address;

14.4 Members keep their own logins and any other Accounts they belong to.

14.5 Data in backups is deleted when those backups expire, within [[BACKUPRETENTIONDAYS]] days.

14.6 Before deleting, export what you need. The Service offers a customer export (CSV) on the Plans that include the Customers page, and report exports.

14.7 A Member can delete their own login at any time. This does not delete the Account or its data. The only active Full admin of an Account must make someone else Full admin first.

15. Suspension and termination by us

15.1 We may suspend your Account, or a part of it such as a chat bot or the API, immediately and with notice where possible, if: you materially breach these Terms or the Acceptable Use Policy; your use poses a security risk to the Service or others; we are required to by law or by a competent authority; or a payment remains unpaid.

15.2 We may terminate these Terms for a material breach that you do not remedy within 14 days of notice, or immediately for a serious breach of the Acceptable Use Policy or where the law requires.

15.3 If we terminate these Terms, Section 14.3 applies to your data, and printed Codes show the neutral page described in Section 14.3(b).

15.4 Sections that by their nature should survive termination survive it, including Sections 11, 12, 16, 17 and 19.

16. Warranties and disclaimers

16.1 Each party warrants that it has the authority to enter into these Terms.

16.2 We will provide the Service with reasonable skill and care. Except as stated in these Terms, and to the extent the law allows, the Service is provided "as is" and we give no other warranties, express or implied, including of fitness for a particular purpose. In particular, we do not warrant that the Service will detect every counterfeit, duplicate or misuse of a Code.

16.3 Answers given by your AI assistant come from your provider and your settings. We do not check them and are not responsible for their content.

17. Limitation of liability

17.1 Nothing in these Terms limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot be limited by law.

17.2 Subject to 17.1, neither party is liable for loss of profits, revenue, business, goodwill or anticipated savings, or for any indirect or consequential loss.

17.3 Subject to 17.1, each party's total liability arising from these Terms in any 12-month period is limited to the fees you paid for the Service in the 12 months before the event giving rise to the claim. For an Account on the Free Plan, our total liability is limited to USD 100.

17.4 The limits in 17.3 do not apply to your payment obligations or to your indemnity under Section 18.

18. Indemnity

18.1 You will defend and indemnify us against third-party claims, and the resulting losses, fines and reasonable costs, arising from: your content; your breach of the Acceptable Use Policy; messages you send through the Service without the consent the law requires; your authenticity, warranty or product claims; or your use of a Third-Party Service.

18.2 We will defend and indemnify you against third-party claims that the Service, as provided by us and used under these Terms, infringes that third party's intellectual property rights, and the resulting damages and reasonable costs. This does not apply to claims caused by your content, a Third-Party Service, or a modification or combination not made by us.

18.3 The indemnified party must notify the other promptly, let it control the defence, and cooperate reasonably.

19. Changes to these Terms

19.1 We may change these Terms. For a change that reduces your rights or increases your obligations we will give at least 30 days' notice by email and in the panel. If you do not agree, you may cancel before the change takes effect, and we will refund any prepaid fees for the remaining period. Other changes take effect when published.

19.2 The version you accepted, and earlier versions, are available at [[LEGALBASEURL]].

20. General

20.1 Governing law and disputes. These Terms are governed by [[GOVERNING_LAW]]. The courts (or arbitral seat) of [[VENUE]] have exclusive jurisdiction, except that either party may seek urgent relief in any competent court. Mandatory law of your country continues to apply where it cannot be excluded.

20.2 Notices. We send notices to the Account owner's email address and in the panel. You send notices to [[LEGAL_EMAIL]].

20.3 Assignment. You may not assign these Terms without our consent. We may assign them to an affiliate or to a successor of our business with notice to you.

20.4 Force majeure. Neither party is liable for failure caused by events beyond its reasonable control, other than payment obligations.

20.5 Entire agreement. These Terms, the Acceptable Use Policy, the Data Processing Agreement and any Enterprise order form are the entire agreement on their subject. If they conflict, the order of precedence is: an Enterprise order form, the Data Processing Agreement (for personal data), these Terms, the Acceptable Use Policy.

20.6 Language. These Terms are written in English. A translation is for convenience; the English text prevails unless mandatory law requires otherwise.

20.7 Severability and waiver. If a provision is held invalid, the rest remains in force. A failure to enforce a right is not a waiver.

20.8 Contact. [[ENTITYNAME]], [[ADDRESS]], [[LEGALEMAIL]].