Terms of Service

1. Service description

NotarAI is a compliance platform for AI-generated content disclosure. The Service provides:

• Scanning — detection of C2PA manifests and XMP metadata in uploaded files.
• Signing — embedding cryptographically signed C2PA manifests and XMP disclosure blocks into output files.
• Certificate PDFs — downloadable PDF audit certificates for each completed signing job.
• Public verification pages — permanent public records at /verify/:id containing certificate ID, AI declaration, and SHA-256 file fingerprint.
• REST API — programmatic access to scan and sign operations via bearer-token authenticated endpoints.

Supported file formats depend on your plan. Starter: JPEG, PNG, WebP, MP3, WAV. Business adds MP4, MOV, and M4A. Enterprise adds AVIF, HEIC, and SVG.

2. Accounts and subscriptions

You must create an account to use the Service beyond the free demo scan. Accounts require a valid email address. You are responsible for maintaining the confidentiality of your credentials and for all activity that occurs under your account.

Paid plans are available at three tiers — Starter (EUR 29/month), Business (EUR 99/month), and Enterprise (EUR 199/month) — each with a 14-day free trial. All plans are billed monthly in advance through Stripe. You will not be charged during the trial period. You will receive an automated email notification 3 days before your trial expires. After the trial, billing begins automatically unless you cancel before trial end; failure to cancel before day 14 constitutes express authorisation for the subscription charge, and no refund will be issued solely for failure to cancel in time. Prices are exclusive of VAT where applicable.

Enterprise organisations include 3 seats. Additional seats can be purchased at EUR 35 per seat per month. All seats within an organisation share the plan’s monthly quota.

You may cancel at any time from your account billing settings. Cancellation stops future renewals but does not refund the current billing period already charged. See our Refund Policy.

3. Usage limits and rate limits

Each plan includes a monthly quota of operations:

• Starter: 500 scans and 500 signs per month.
• Business: 2,000 scans and 2,000 signs per month.
• Enterprise: 12,000 scans and 12,000 signs per month.

Per-user spike guards apply across all plans: 60 scan requests and 30 sign requests on a rolling window, subject to concurrent request throttling, per user or API key. Requests that exceed these limits receive an HTTP 429 response. We reserve the right to dynamically adjust rate-limiting algorithms to preserve infrastructure stability. Monthly quotas reset on the calendar month boundary. Unused quota does not roll over.

4. API access and API keys

All paid plans include REST API access. Maximum active API keys per plan: Starter 1, Business 3, Enterprise 10. API keys are bearer tokens sent in the Authorization header. You are solely responsible for keeping your API keys confidential. Treat them as passwords. Keys compromised or suspected of unauthorised use must be rotated immediately from your account settings.

5. File storage and retention

NotarAI stores uploaded and generated files temporarily to support downloading, verification, and retry operations. The following retention windows apply:

• Original uploads— deleted approximately 15 minutes after successful signing.
• Abandoned or error job files— deleted approximately 72 hours after creation.
• Signed outputs and certificate PDFs— available for download for 7 days (Starter), 21 days (Business), or 45 days (Enterprise) from completion date.
• Storage caps— 5 GB (Starter), 25 GB (Business), 100 GB (Enterprise). New uploads may be rejected when your cap is reached.

Deletion is executed by hourly scheduled jobs; actual deletion may occur shortly after the stated deadline. You are responsible for downloading signed outputs and certificate PDFs before their retention window expires. NotarAI does not issue credits or refunds for files not downloaded before expiry.

Public verification pages (/verify/:id) are not subject to these windows and remain accessible permanently. They contain only the certificate ID, AI declaration, and SHA-256 fingerprint — no binary file content.

6. Intellectual property in uploaded content

You retain all rights in your content. NotarAI does not claim any ownership of files you upload or outputs generated from them.

By uploading a file you grant NotarAI a limited, non-exclusive, royalty-free, worldwide licence to process, store, and transform that file solely and exclusively for the purpose of providing the Service to you (scanning, signing, generating certificates, and creating verification records). This licence terminates when the relevant file is deleted per the retention schedule above.

We do not use your file content to train, fine-tune, or evaluate any machine learning model. We do not share, sell, or disclose your file content to third parties except as necessary to operate the Service (i.e. temporary processing on our infrastructure providers — see Privacy Policy section 6).

Your warranty regarding uploaded content: You represent and warrant that (a) you own or have all necessary rights, licences, consents, and permissions to upload each file and to grant the licence above; (b) uploading and processing the file does not infringe any third-party intellectual property right, privacy right, or other applicable law; and (c) the file does not contain unlawful content.

If you process files that contain personal data belonging to third parties (e.g. photos of identifiable individuals, documents with personal information), you are the data controller for that personal data and are responsible for having a lawful basis for its processing. NotarAI acts only as your data processor for that content.

7. Public verification records

Every completed signing job creates a permanent public record at notarai.io/verify/:id. This record is publicly accessible, searchable, and indexed by search engines. It contains the certificate ID, the AI declaration you configured, the signing timestamp, and the SHA-256 fingerprint of the signed file. It does not contain the signed file itself. Because these records consist solely of mathematical hashes and cryptographic tokens, they do not constitute personal data under the GDPR once the underlying asset is purged from active storage; accordingly, they fall outside the scope of standard erasure requests under GDPR Article 17.

By using the signing feature you acknowledge and consent to this public record being created. If you do not want a permanent public record associated with a file, do not use the signing feature for that file.

We may remove a public verification record if we receive a valid legal or regulatory request, or if we determine that the underlying signing job was created in violation of these Terms.

8. Acceptable use

You may use NotarAI only for lawful purposes and in accordance with these Terms. You must not:

• Upload files that infringe any third-party copyright, trademark, database right, or other intellectual property right.
• Upload files that contain unlawful content (including but not limited to content that is illegal under applicable Belgian or EU law).
• Use the Service to generate false, misleading, or deceptive disclosure statements.
• Attempt to reverse-engineer, decompile, or tamper with signing or verification mechanisms or cryptographic certificates.
• Circumvent, attempt to circumvent, or assist others in circumventing rate limits, quotas, or access controls.
• Share API keys or account credentials with unauthorised parties.
• Use the Service in a way that overburdens, disrupts, or impairs the platform or other users’ access to it.
• Use automated scripts or bots to access the Service outside of the documented API.
• Misrepresent the origin, authorship, or nature of content through the signing or verification features.

We reserve the right to suspend or permanently terminate accounts, without refund, that violate these restrictions. We may report unlawful activity to competent authorities.

9. Copyright and IP infringement notices

If you believe that content accessible through the Service infringes your copyright or other intellectual property rights, contact us at legal@notarai.io with the following information:

• Identification of the copyrighted work or IP right you claim is infringed.
• Identification of the specific content on the Service you claim infringes your right and sufficient information to locate it (e.g. a /verify/:id URL).
• Your contact information (name, address, email, telephone).
• A statement that you have a good-faith belief that the use is not authorised by the rights holder, its agent, or applicable law.
• A statement, under penalty of applicable law, that the information in your notice is accurate and that you are the rights holder or authorised to act on their behalf.

We will investigate and respond promptly. This process applies to public verification records only — file binaries are deleted per the retention schedule and are not accessible after expiry.

10. Compliance responsibility

NotarAI is a technical tool for embedding machine-readable disclosure into files. Legal compliance obligations — including but not limited to obligations under EU AI Act Article 50, national transposition laws, sector-specific regulations, or any other applicable law — remain solely your responsibility. NotarAI does not provide legal, regulatory, or compliance advice. Using the Service does not constitute legal advice and does not guarantee that your content or disclosure practices satisfy any specific regulatory obligation in your jurisdiction.

The accuracy, completeness, and correctness of any AI declaration you configure and embed using the Service is entirely your responsibility.

11. Service availability and modifications

We aim for high availability but do not guarantee uninterrupted access to the Service. Scheduled maintenance, infrastructure incidents, third-party service outages, or events beyond our control may cause temporary unavailability. We will communicate planned downtime where reasonably practicable.

We reserve the right to modify, suspend, or discontinue any part of the Service at any time. For material reductions in functionality of a paid plan, we will provide reasonable advance notice and a pro-rata credit or refund where applicable.

12. Disclaimer of warranties

The Service is provided “as is” and “as available” without warranties of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement. We do not warrant that (a) the Service will be error-free or uninterrupted; (b) any defects will be corrected; (c) the Service or infrastructure that delivers it are free from viruses or harmful components; or (d) results obtained from use of the Service will be accurate, reliable, or legally sufficient.

Nothing in this clause excludes implied warranties that cannot be excluded under applicable Belgian or EU law.

13. Limitation of liability

To the maximum extent permitted by applicable law:

• NotarAI’s total aggregate liability to you for all claims arising out of or relating to these Terms or the Service is limited to the total amount you paid to NotarAI in the 12 months immediately preceding the event giving rise to the claim, or EUR 500, whichever is greater.
• NotarAI is not liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, including but not limited to loss of revenue, loss of profits, loss of data, loss of business opportunity, or reputational damage, even if advised of the possibility of such damages.

Nothing in these Terms limits or excludes liability for death or personal injury caused by our negligence, fraud, or any other liability that cannot be limited under applicable Belgian or EU law.

14. Indemnification

You agree to indemnify, defend, and hold harmless NotarAI, its officers, employees, and agents from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising out of or relating to: (a) your use of the Service; (b) your violation of these Terms; (c) any content you upload, including any claim that such content infringes a third party’s intellectual property rights or other rights; or (d) your violation of any applicable law.

15. Changes to these Terms

We may update these Terms from time to time to reflect changes in the Service, applicable law, or our business practices. Material changes will be communicated by email and by a notice in the product at least 14 days before they take effect. Continued use of the Service after changes take effect constitutes acceptance of the updated Terms. If you do not accept material changes, you may cancel your subscription before the effective date.

16. Governing law and jurisdiction

These Terms are governed by and construed in accordance with the laws of Belgium, excluding its conflict-of-law rules. The United Nations Convention on Contracts for the International Sale of Goods (CISG) is expressly excluded.

Any dispute arising out of or in connection with these Terms that cannot be resolved amicably shall be subject to the exclusive jurisdiction of the competent courts of Belgium. Nothing in this clause prevents either party from seeking urgent interim relief in another jurisdiction.

17. Miscellaneous

• Entire agreement. These Terms, together with the Privacy Policy, Refund Policy, and Data Processing Agreement (DPA), constitute the entire agreement between you and NotarAI regarding the Service and supersede any prior agreements.
• Severability. If any provision of these Terms is held to be invalid or unenforceable, that provision will be modified to the minimum extent necessary and the remaining provisions will continue in full force.
• Waiver. Failure to enforce any provision of these Terms does not constitute a waiver of our right to enforce it later.
• Assignment. You may not assign or transfer your rights or obligations under these Terms without our prior written consent. We may assign our rights and obligations without restriction.
• Language. These Terms are drafted in English. In the event of any conflict between the English version and a translation, the English version prevails.

18. Contact

Operator: Arthur Temmerman, Belgium (VAT BE1031912625).

General enquiries: contact@notarai.io
Legal / IP notices: legal@notarai.io