June 4, 2026
These Online Terms and Conditions form an integral part of the Payment Gateway Services Agreement or the Reseller Agreement, as defined in the relevant agreement, entered into between you, whether you are a Merchant or a Reseller or a Client, and us, Shift4 Technology Limited (“Shift4”) (each a “Party” and collectively the “Parties”) for the provision of the Services. Capitalized terms not defined herein shall have the meaning ascribed to them in the relevant agreement.
The following capitalised terms shall bear the meaning ascribed thereto:
“3D Secure” or “3DS” means any of the following: 3D Secure 2.0 Service and/or any later version of 3D Secure service (including any related software) developed by the Provider that could include any third party’s technologies, as per our sole discretion, following Card Scheme regulations and other regulations that mandate Card Holder authentication;
“3DS SDK" means the technological tool developed by us for mobile applications;
“Accepted Merchant” shall mean the Merchant of the Reseller which is receiving the Services and any other related services, by us;
“Additional Service/s” means the service and or product that is/are offered by us, as listed in the Agreement or which may be offered by us in the future, as will be notified to you from time to time, in addition to any other services chosen by you on the Effective day;
“Affiliates” means any entity that controls, is controlled by, or is under common control with a party, including its parents and subsidiaries;
“Agreement” means: (i) the Payment Gateway Services Agreement; OR the Reseller Agreement; OR the Merchant Processing Agreement (“MPA”), as may be applicable (ii) these Online Terms and Conditions (“OTC”), (iii) the online Data Processing Addendum (“DPA”), and (iv) any other guidelines, amendments, or notifications provided by us and as may be amended from time to time. All Addendums to this Agreement are an integral part of this Agreement. Any prior discussions, if not expressly covered by this Agreement are invalid;
“Applicable Law” means any laws, rules or regulations which are made by a public authority and are binding on and applicable to a Party. For you this may include such laws, rules, or regulations in both the country from which you offer your services and/or products and the country to which you provide such services and/or products;
“Business day” means any calendar day not including public holidays or weekends in Malta;
“Card” means any valid payment card issued under any Card Scheme;
“Card Schemes” means Visa and/or MasterCard or any other similar schemes;
“Card Scheme Rules” or “Association Rules” means all rules, by-laws, guidance, regulations, directions and other requirements (whether contractual or otherwise) imposed or adopted by any Card Scheme from time to time;
“Your Payment Services Partner” means any Party with whom you may have to conclude your own direct agreement in order to be able to receive the Services, as supported by us;
“Client Portal” means platform provided by us as part of our Services and/or any additional communications with us and/or opting for Additional Services;
“Confidential Information” means any data or information, oral or written, treated as confidential that relates to either Party’s (or, if either Party is bound to protect the confidentiality of any third party’s information, such third party’s) past, present, or future research, development or business activities, including any unannounced products and services, any information relating to services, developments, our Services Documentation (in whatever form or media provided), inventions, processes, plans, financial information, Transaction Data, revenue, Transaction volume, forecasts, projections, and the financial terms of the Agreement. The obligations in this clause shall not apply to the Disclosing Party’s Confidential Information, which: (i) entered the public domain through no breach of the Agreement or other wrongful act of the receiving party; (ii) was already known to the receiving party prior to the Effective Date of the Agreement, as established by documentary evidence; (iii) was rightfully received by the Receiving Party from a third party and without breach of any obligation of confidentiality of such third party to the owner of such information; (iv) is being or was developed independently from such Confidential Information, as is shown by competent evidence; or (v) we are required to disclose to third parties in order to provide the Services;
“Shift4” or “Shift4 Group” means Shift4 Technology Limited, Shift4 Limited, Shift4 Payments UK Limited, and any other Affiliates thereof;
“Data Protection Requirements” means the Data Privacy Compliance clause and any additional data protection requirements and provisions set out in the Reseller Agreement or any other applicable data protection regulations, such as (but not limited to) EU 2016/679;
“Effective Date” means the date that you sign the Agreement;
“End User/s” means any person that purchases any of your goods or services, whose information you will process via our API, during the course of your use of our Services. End User could mean a Data Subject as defined in the DPA;
“Force Majeure” means abnormal and unforeseeable circumstances beyond our control. Such circumstances might include, but are not limited to, natural calamities, accidents, fires, public disorders, walkouts, revolutions, hostilities, legislative acts, government orders and directives of the authorities, which directly or indirectly prohibit the types of business stipulated herein or otherwise render the performance of our obligations incompatible with other provisions of Applicable Law;
“Gateway Services” means a technical connectivity platform offered to you or to Reseller’s Accepted Merchants;
“Intellectual Property” means patents, inventions, know-how, proprietary knowledge, trade secrets and other confidential information, copyrights, database rights (including rights of extraction), design rights (registered or unregistered), copyright, trademarks, service marks, logos, internet domain names, business names, trade names, rights protecting goodwill and reputation, moral rights, all registrations or applications to register any of the aforesaid items, and all rights and forms of protection of a similar nature of any of the aforesaid items or having equivalent effect in any country or jurisdiction, rights in the nature of unfair competition rights and rights to sue for passing off;
“Issuer” means a member of the Card Schemes that enters into a contractual relationship with a cardholder for the issuance of one or more Cards;
“Log-in Details” means the usernames, passwords, keys and other codes provided to you by us, in order to access and use the Service;
“Merchant” means you as defined in the Agreement, a Reseller, or a merchant of the Reseller as defined in the Reseller Agreement and as may be applicable;
“MPI” means Merchant Plug-In;
“Primary Account Number” or “PAN” means the 14 -19 digit identifying number either embossed or printed found on a Card;
“Processing/Transaction Fee” means a fee that is charged for every gateway operation request including basic operations, referral operations and token operations ,and any other operations as described in our API link: epower.credorax.com, which may be amended from time to time.
“Our Payment Services Partner” means any and each payment service provider with whom we have our own direct agreements and technical integrations in place, enabling us to support the provision of certain services;
“Services” means Gateway Services and/or each of the services listed herein, and in the Payment Gateway Services Agreement, or in Schedule 1 of the Reseller Agreement, or in the Fee Section of your Agreement, as applicable, and as may be amended from time to time by us. To avoid any doubt, this Service is a technical service that supports the provision of payment services, without entering at any time into possession of the funds to be transferred, under Article 3(J) of the Payment Services Directive;
“Services Fee” means the fees that we charge you for the Services, as specified in Schedule 1 of the Agreement, or in Schedule 1 of the Reseller Agreement, or in the Fee Section of your Agreement, as applicable, and as may be amended from time to time, upon a written notification to you, or as agreed between the Parties;
"Reseller” means a party with whom we enter into a Reseller Agreement for the provision of our Services to Reseller’s merchants. Unless specified otherwise, reference to “you”, “your” means reference to Reseller;
“Seamless Token” means the unique digital identifier that replaces the PAN and is being stored electronically.
“Settlement” means the successful transfer of funds from an End User account to the Merchant’s account following a Transaction;
“Smart 3DS” means the technological engine developed by us to facilitate 3DS services provided to you;
“TPP” means third party services provider;
‘Transaction’ means any type of payment Transaction that relates to a purchase of your goods and/or services, whether the Transaction is approved or declined. A Transaction may refer, inter alia, to a purchase, a return, a refund, error, credit, adjustment;
2.1 Subject to the terms of the Agreement, and in exchange of your payment of the Fees, we shall provide you with our Services through integration with our API and online Client Portal, as detailed in the documentation provided to you or made available through the Client Portal (the “Documentation”) at: epower.credorax.com and https://docs.shift4.com/apis/payments-platform-rest/openapi, as may be applicable. We reserve the right to suspend or terminate our Services in case of outstanding delays in payment of the Fees.
2.2 We will provide you the details required for you to integrate with the API and Client Portal and to start using our Services. You must implement the integration in accordance with our Documentation, in order to use the Services. It is your sole responsibility to own the infrastructure necessary to use the Services.
2.3 We offer the following Services, which may be subject to additional terms as detailed.
I. GATEWAY CONNECTIVITY
a. We shall provide you with a PCI compliant technical gateway connectivity service enabling the secure submission, routing, and retrieval of electronic payment-related Transactions between your systems and our processing infrastructure (“Gateway Service”). The Gateway Service includes: (a) access to our API, message specifications, and authentication mechanisms; (b) validation, normalization, and routing of Transaction (including payment requests, tokenized credentials, authentication results and status updates) to the relevant systems; and (c) the transmission of responses generated by us or by third-party issuers, Card Schemes, or relevant network participants.
b. For clarity, the Gateway Service is a technical service and does not include: (i) the provision, operation or support of any financial payment acquiring, issuing, authorization, settlement or clearing services; (ii) the hosting, security, maintenance, or correct functioning of your systems, devices, or software; (iii) any guarantee of transaction approval, network availability, or performance of external payment networks, schemes, or financial institutions; or (iv) fraud-monitoring, KYC/KYB, transaction risk scoring or compliance-layer services. You remain solely responsible for the integration, transaction formatting, and compliance with applicable data, security and payment-scheme requirements.
c. You shall access the Gateway solely through the technical interfaces and authentication methods made available by us, according to our specifications.
d. You shall implement and maintain secure storage and use of all API keys, certificates or tokens and you may not probe, test, reverse-engineer, or interfere with the Gateway or related infrastructure.
e. You shall maintain industry-standard security controls to protect your connectivity to the Gateway, including but not limited to secure practices, monitoring for anomalous or malicious activity originating from your systems. You shall ensure that no sensitive payment data or personal data is stored, logged, or transmitted except as strictly required for the provision of your Services. You shall immediately notify us of any suspected compromise of credentials, unauthorized access, or security event that may affect the Gateway.
f. You shall use the Gateway in accordance with our operational procedures and shall not introduce any system changes, software updates, configuration modifications, or infrastructure migrations that may affect the Gateway integration without providing prior written notice and completing any testing or re-certification required by us.
II. ALTERNATIVE PAYMENT METHODS
a. We offer you connectivity to a variety of APMs which may be updated from time to time.
b. To enable smooth provision of APMs, we may adjust the content and interfaces of our Services to keep them up to date with market requirements and may use third parties’ technology and platform to process APMs. If such adjustments require you to make necessary changes in your software, interfaces or operating procedures, we will inform you as soon as reasonably practicable prior to the execution of such adjustments. You shall be responsible for your own costs with respect to such changes to its software, interfaces or operating procedures.
c. You acknowledge that for providing APM services you may be required to contract with TPPs, as may be required by TPPs.
d. It is in the best interests of both parties that we maintain a secure and stable environment; to that end, we may change the method of access to our Services at any time.
III. SMART ROUTING
a. A service that optimizes payment processing and minimizes declined Transactions.
b. You agree that we have full reasonable discretion to route Transactions to any third party, that may include any available Payment Services Partner of yours.
c. We will be held free of any claims and/or charges relating to reasonable application of the Smart Routing technology, in accordance with the stipulated above.
IV. PAYMENT PAGE SERVICES
a. The Payment Page Services enable Merchant to accept payment for its goods and/or services and shall consist of: (i) the “Form Hosted Payment Page”, a customizable payment page hosted and owned by us which is made available to you; or (ii) “Code Hosted Payment Page”, a programming code provided by us to you to implement on your payment page. You may select or change your selection of the relevant product in accordance with such procedures as The Provider may establish from time to time.
b. You shall adhere to our reasonable requirements for the provision of information or applying changes to your website with respect to the Payment Page Services within ten (10) Business Days. Any delay or non performance on your end may suspend or impact the provision of these Services.
c. For clarity, the Payment Page Service does not include:
(i) hosting or validating any non-payment content displayed by you (including product descriptions, pricing, legal notices, consents, or marketing materials);
(ii) responsibility for your compliance with consumer protection, e-commerce, strong customer authentication, or regulatory obligations applicable to your business or your end users;
(iii) any guarantee of Transaction approval, payment method availability, issuer response times, or performance of third-party payment networks; or
(iv) fraud monitoring, risk scoring, KYC/KYB, Transaction screening, or chargeback management.
d. You remain solely responsible for:
– embedding and configuring the Payment Page Service;
– ensuring that all content provided to us for display is accurate, lawful, and compliant with applicable payment-scheme and regulatory requirements;
– obtaining all necessary consents and disclosures from end users; and
– ensuring that your website, application, and user flows comply with applicable laws and industry rules.
V. PAYMENT LINK SERVICES
a. The Payment Links Services enable Merchant to accept payment for its goods and/or services via a dedicated, secure URL sent to a cardholder via Short Message Service (“SMS”) or e-mail, without the requirement of a hosted e-commerce platform or website.
VI. SMART GUARD
a. The following capitalized terms shall apply for this Service:
“Accepted” means a determination made by us, on the basis of the analysis carried out on Transactions submitted, that a Transaction is not likely to be fraudulent and shall therefore be accepted and processed;|
“Declined” means a determination made by us, on the basis of the analysis carried out on Transactions submitted is likely to be fraudulent and shall therefore be declined;
“Set of Rules” shall mean a set of rules established by you or by us or by your TPP, according to the specifications provided by you, in a dedicated self service portal for the purpose of predicting a likelihood of fraudulent activity and as may be amended from time to time by you.
“Smart Guard/Smart Guard Plus Services” shall mean a fraud scoring service and additional related services, which are based on an analysis of Transactions according to a machine learning engine, and/or establishment of a Set of Rules, for the purpose of determining the Transaction in question as Accepted or Declined. The services include and are not limited to:
i. threshold management;
ii. Set of Rules management;
iii. advanced control and customization options via API, including: (a) option to obtain fraud score only; (b) option to bypass Smart Guard Services; (c) option to set ad-hoc thresholds for Smart Guard Services;
iv. consultancy services in relation to the Smart Guard Services;
v. advanced analytics (under standard Smart Guard Services you will be provided with standard transaction reports)
b. The establishment and management of the Set of Rules shall be solely under your responsibility, and we are released from any accountability or liability in connection therewith or its results.
c. This is a Service for analyzing the possibility that a Transaction is fraudulent and as a result of that analysis, determine and rate the Transaction as Accepted or Declined. We may also provide Smart Guard Plus if you request this service in advance.
d. Parties acknowledge that (i) the determination as to whether a Transaction should be Accepted or Declined is valid only for the point in time at which the analysis is carried out, and that subsequent determinations may lead to a different result; (ii) changes in the underlying data such as but not limited to, establishing a Set of Rules or making changes thereto, on which the analysis and determination as to whether a Transaction is Approved or Declined may lead to outdated or inaccurate results.
VII. 3D SECURE SERVICES
a. You shall comply with the Card Schemes’ enrolment process and/or any other Card Scheme requirements relating to 3DS usage and/or with our Documentation, as may be amended from time to time by the Card Schemes and/or by us, and shall provide any required documentation, as may be requested by us.
b. We shall not be held liable in any form, in case that the Card Schemes decline your registration to the 3DS and/or your misuse of 3DS service.
c. In cases of any delay in payment of Fees and/or if the 3DS Service was suspended or terminated by us, for any other reason, you acknowledge and understand that you may be found liable for breach of Card Schemes mandates or any other regulatory obligations and we shall be released from any claims or liabilities.
d. Without derogating from any other conditions of this Agreement and to avoid any doubt, you acknowledge that 3DS Service is a proprietary software and technology developed by us and it shall not be copied or otherwise published or distributed or modified by you without prior written permission and consent.
e. Without derogating from any other conditions of this Agreement and to avoid any doubt, the you acknowledge that you shall comply with the regulatory obligations on Strong Customer Authentication and related Card Scheme mandates, and/or regulations. You shall indemnify us and hold us harmless from and against any and all damages, costs, losses and expenses (including reasonable attorneys’ fees) which are incurred by us as a result of or in connection to exemptions from Strong Customer Authentication requests filed on your behalf by us.
f. Smart 3DS may be based on a pre-defined algorithms and/or statistic models and/or other methods used to predict recommendations provided to you. You agree and confirm usage of AI models and provided recommendations, we make no representation and assume no responsibility for the accuracy of recommendation provided via AI or available through use of Smart 3DS. Smart 3DS is subject to any and all conditions stipulated in this Section V and in the Agreement.
g. 3DS SDK service is subject to any and all conditions stipulated in this Section V and in the Agreement.
VIII. ACCOUNT UPDATER
a. Account Updater means a service that enables storing and updating cardholder details for repeated use by the Merchant, usually requested by Merchant for processing recurring payments.
b. Account Updater shall be activated by you in compliance with the Card Scheme Rules and Applicable Laws, including laws on electronic documents and funds transfer, and you shall fulfil all technical requirements specified in the Documentation provided by us as may be amended from time to time.
c. You acknowledge that certain Schemes provide their separate solutions related to Account Updater subject to separate terms and conditions and fees as may be amended by Card Schemes from time to time. We may connect you to Schemes’ Account Updater solutions, while the enrollment with the Scheme shall be handled by us, or by another acquirer, based on the information provided by you. Your enrollment shall be subject to the relevant Scheme’s approval. You undertake to pay any fees as will be required by us and/or the Card Schemes.
d. You may use Account Updater data solely for the purpose of updating cardholder information in order to complete future pre-authorized transactions in accordance with the Card Scheme Rules and the Documentation and you shall not use Account Updater data for any other purpose, including in connection with the development of any other service or product.
IX. CHARGEBACK PREVENTION SERVICE
Chargeback Prevention is a service that enables you to reduce your level of chargebacks with the Card Schemes. The service is powered by Mastercard and Visa, each for its respective transactions.
a. Applicable General Terms for Chargeback Prevention Service
i. These terms are applicable for both the Mastercard and Visa chargeback transactions.
ii. The Chargeback Prevention Service allows the refund of the Transaction to the cardholder before it reaches Mastercard or Visa, resulting in reducing your or your merchant’s chargeback levels with the Card Schemes.
iii. You may not sell, re-sell, provide access, license the Chargeback Prevention Service to any third parties that are not you.
iv. You acknowledge that by requesting the Chargeback Prevention Service you assume liability to use or process any information and data received in connection with the chargebacks for the sole purpose of, and only to the extent necessary to receive the Chargeback Prevention Service.
v. You shall not (nor shall allow or enable any third party to: (a) decompile, disassemble, or otherwise reverse engineer the Service or third party code or attempt to reconstruct or discover any source code, underlying ideas, algorithms, file formats or programming interfaces of the services or third party code by any means whatsoever; (b) distribute, sell, sublicense, rent, lease or use the services, third party code (or any portion thereof) for time sharing, hosting, service provider or like purposes; (c) remove any product identification, proprietary, copyright trademark, service mark, or other notices contained in Service, or third party code.
vi. We provide the Chargeback Prevention Service via TPP powered by Mastercard or Visa. We assume no liability whatsoever for the provision and outcome of the Chargeback Prevention Service to you, its quality or proper functionality which may include but is not limited to, ACCEPTED chargebacks not being refunded, possible time-outs, or any other faults that may occur.
vii. You bear the responsibility to pay in full any additional fees which are not part of the Fees Schedule, fees that are charged by Visa or by Mastercard with respect to this service, and shall reimburse us upon request as may be required.
viii. If you are a Reseller, you shall maintain copies of all relevant Merchant data, records, including copies of your Merchant agreements and provide copies of such to us upon our reasonable written request but in no event, more than five (5) days after receipt of request for same. For purposes of this Agreement any such data or records shall include at a minimum: a) BIN, b) CAID c) MID, d) Merchant (by name); e) complete street address; f) customer service phone number; g) customer service email address; h) website URL; i) logo (128×128) pixel that cardholder would recognize); and j) unless prohibited by applicable law, the Fees charged to each Merchant, and any other reasonably necessary documentation to ensure Reseller’s compliance with this Service requirements and any applicable addenda. For avoidance of doubt, a violation of any portion of this clause may be considered a material breach of this Agreement.
b. Chargeback Prevention Service - Additional Terms by Mastercard
i. Chargeback Prevention by Mastercard is a service provided with respect to Mastercard chargeback transactions only.
ii. Under the service the Issuer notifies you or your Merchants of a raised chargeback before the chargeback reaches Mastercard, permitting you to refund the raised chargeback within 24 hours from the notification, avoiding the registration of the chargeback with Mastercard.
iii. This service is provided in accordance with the terms of use that may be found at www.ethoca.com/terms-of-use. By accepting this service, you accept and agree to undertake and act according to these terms of use.
c. Chargeback Prevention – Additional Terms by Visa
A. Rapid Dispute Resolution (“RDR”)
i. RDR by Visa is a service provided with respect to Visa chargeback transactions only. The service enables you, or your Merchants if you are a Reseller, to prevent and reduce the level of chargebacks with Visa by automatically refunding chargeback requests from cardholders and avoiding the registration of the chargebacks with Visa.
ii. To receive the service, you are required to pre-define a set of rules that enable the automatic refund of chargebacks, in accordance with the pre-defined rules.
iii. Chargeback requests that are meeting the pre-defined set of rules, will end as ACCEPT, resulting in automated credit of the cardholder through the your acquirer and subsequently avoiding the registration of the chargeback with Visa. Chargebacks requests that do not meet the pre-defined set of rules will end as DECLINED and will be routed to Visa chargeback process.
iv. The service is fully automated and there is no action for you to take in preventing the chargeback dispute to Visa once the rules are not met.
v. Change of pre-defined rule/s is done by a written notification to us. The changes will be implemented within fourteen (14) working days.
vi. No notifications will be sent to you whether a Chargeback request was ACCEPTED or DECLINED. You will receive access to the information via third party portal to review all the initiated chargebacks and their outcome.
vii. You are responsible to update us with current information, including any changes or additions to your descriptors and CAID.
viii. You hereby agree to make any enhancements necessary to your integration in order to continue to receive the Chargeback Prevention Service, within no less than forty-five (45) days from receiving notice. A failure to upgrade or enhance the integration following such notice, may result in errors in providing the Service and possibly the immediate termination of the rights provided.
ix. The fee shall be paid by you per chargeback dispute request, irrelevant to its outcome, whether it is ACCEPTED or DECLINED.
B. Cardholder Dispute Resolution Network (“CDRN”)
i. CDRN is a service that enables you, or your Merchants if you are a Reseller, to reduce your level of chargebacks with Visa. The CDRN service provides you chargeback notifications in the MyC Visa portal, before a chargeback is being raised to Visa, allowing you to react and avoid a dispute with Visa.
ii. You shall receive a username and a password to access the MyC Visa portal, which is non-transferrable, and you shall keep it secure. It is your sole responsibility to actively monitor and timely react to the notifications in the MyC portal. Any notification received in the portal will be subject to Fees, whether such notification was handled by you or not.
iii. All CDRN cases appearing on the MyC portal must be processed by you within seventy-two (72) hours from the time that they appear in MyC Portal. Cases not processed by you within this time frame will be automatically closed and no longer eligible for processing and shall be registered as a chargeback with Visa. Provided however that cases not processed shall bear the service fees.
iv. In case that you decide on refunding the card holder to avoid a dispute, it shall be your sole responsibility to report such refund in the MyC portal.
v. You shall update us with current information, including any changes or additions to your descriptor that enrolled to the service.
X. ‘STAND-IN’ SERVICE [‘ON BEHALF OF’]
a. ‘Stand-In’ is a service that enables us to respond and approve transactions for you on behalf of the issuing bank, or the Card Schemes, or any third party gateway (“Approvers”), ahead of the actual approval received from Approvers.
b. The service is designated to take effect in case of a timeout or no-response is received from Approver with respect to a processed Transaction. The Service enables the Transaction to be settled to you at a later time, upon the actual approval being received by either of the Approvers.
c. Should a Transaction end up as rejected or declined by either of the Approvers, you will not receive the funds of the Transaction amount, even though we have approved the Transaction.
d. To initiate the service, you are requested to define and cap in advance the amount for each processed Transaction and the amount of aggregated transactions under the service, that are processed within a 24-hour period, starting at 00:00 and ending at 23:59 (UTC). UPON RECEIVING THIS SERVICE, YOU UNDERSTAND AND AGREE THAT WE SHALL NOT BE HELD LIABLE FOR ANY CLAIM, LOSS, DEMAND, PENALTY OR ANY OTHER EXPENSE THAT MAY BE INCURRED TO YOU IN RELATION TO THE PROVISION OF THIS SERVICE, INCLUDING BUT NOT LIMITED TO INDIRECT OR CONSEQUENTIAL LOSS OR DAMAGE, LOSS OF PROFITS OR EARNINGS, PUNITIVE OR SPECIAL DAMAGES HOWEVER CAUSED, OR FOR ANY OTHER LOSS TO END CUSTOMERS OR OTHER THIRD PARTIES).
XI. RETRY [RESUBMISSION] OPTIMIZATION
a. The Retry Optimization service enables blocking Transactions at the gateway in case a Transaction is considered a resubmission of a final declined Transaction, in accordance with the Card Schemes rules and logic, subsequently preventing charges by the Card Schemes imposed due to the resubmission.
b. You understand that we assume no liability and make no warranties that resubmitted Transactions would be successfully blocked. Non blocked Transactions would incur the applicable Card Scheme charges, as per the Card Scheme rules.
XII. SEAMLESS TOKEN
a. The Seamless Token service enables processing payment Transactions without exposing the account details and information, or Primary Account Number. The Seamless Token service reduces the Card Scheme fees imposed on you for non-tokenized Transactions.
b. To receive the services, you must register with the Card Schemes. You authorize us to register you with the Card Schemes and keep you so registered during the period you receive the service. You shall be responsible to pay for the registration fees, as may be applicable, in addition to the fees payable to us for the service.
c. We shall enable the creation of the Seamless Token for Visa and Mastercard Cards via our API. The finalization of the Seamless Token shall be subject to the Card Scheme and Issuer approvals.
XIII. MOBILEPAY ONLINE
a. MobilePay Online service is a wallet owned by Vipps MobilePay, that allows you to accept payments (pay-ins) and process payouts to and from End-users utilizing a debit or credit card and a mobile device.
b. You shall be fully compliant with the specified requirements under this service which specifications can be found here: https://www.shift4.com/s4i-source-mobilepayonline
c. MobilePay will approve in advance any Merchant that wishes to accept MobilePay payments and payouts.
d. For payout Transactions, such Transactions will only be executed where they are directly linked to the corresponding pay-in transaction previously settled to you.
e. You shall bear full responsibility for your use of the MobilePay Online Services and shall indemnify us in full and upon request for any threatened or actual damage or loss suffered by us, as a result of your use or connectivity to MobilePay Online Services. We assume no responsibility and no liability for your use of MobilePay Online Services and the services are provided AS-IS at your own risk.
XIV. CARD PRESENT Gateway/Point of Sale [POS]
a. The service enables the processing of card present payment Transactions by providing:
i. gateway connectivity,
ii. a payment application, and
iii. support services.
b. The gateway allows for connectivity to local schemes, local payment methods and domestic acquirers, subject to our review of the request and approval.
c. Management activities. Any requested changes or management of gateway terminal configurations shall be executed by us upon your request.
d. Processing activity reports. Processing activity reports that include card present processing related information shall be provided from time to time by us.
e. Upgrades and Support. From time to time, we may make upgrades, patches, enhancements, or fixes for the product (“Upgrades”) and such Upgrades will become part of the applicable product.
f. You understand and acknowledge that this service is provided via third party provider and that third party provider’s Upgrades may cause temporary downtime and we shall not be held liable for such downtime.
g. We provide support to you subject to reasonable availability of third party providers’ resources. We shall use commercially reasonable efforts to pro-actively improve the reliability of the services or resolve incidents that arise from your interaction or malfunction of the services or services components.
XI. ACCOUNT NAME INQUIRY - VISA AND MASTERCARD
a. Visa Account Name Inquiry and Mastercard Name Validation Service (together “ANI”) are verification solutions that confirm whether the name provided by a cardholder matches the name held by their issuing bank. ANI may be used during card onboarding and pre-transaction checks and for Visa, may return one or more name-match results for you to use in your risk assessment and transaction review, and for Mastercard, a match result, to assist in your risk assessment and transaction review.
b. You shall use ANI only for legitimate onboarding, account verification, transaction-risk, and fraud-prevention purposes in connection with your services. You shall provide complete and accurate ANI request data, including, for Visa at least the cardholder’s last name and, where available, first and/or middle names, together with any other data required by us or applicable Visa requirements, for Mastercard, at least the cardholder’s first and last name, and where available, middle names, together with any other data required by us of applicable Mastercard requirements and shall obtain any cardholder consents required by Applicable Law. You shall use ANI together with your other fraud and verification controls and not as the sole basis for onboarding or approving a transaction. You acknowledge that the ANI does not perform anti-money laundering or sanctions screening, and you remain responsible for any such screening and other compliance obligations applicable to your business.
3.1 We shall provide to you, if you are current in payment of all fees owed to us and are otherwise not in default under the Agreement, the Services with the care and skill that can be expected of a leading and expert supplier of similar services and in accordance with applicable laws that apply to a technical service provider like us, including, without limitation, the Payment Card Industry Data Security Standard (“PCI DSS“) and the Documentation.
3.2 The Services and the Portal under the Agreement are provided ‘AS IS’ on an ‘as available’ basis, which you have been able to review prior to, and accepted by, entering into this Agreement. Furthermore, you acknowledge and agree that actions or omissions, including downtime, on the part of the Payment Services Provider, your Payment Services Providers and other third parties may reduce, in whole or in part, the availability or functionality of the Services, and we shall not be held liable for such reductions.
4.1 Notification: You shall give us ninety (90) calendar days advance written notice of any guidelines, instructions or mandates you receive from other legal entity which may have an impact on our Services. The Parties shall collaborate in good faith in order to implement any such requirements, subject to any fees as may be agreed in the Agreement or from time to time between the Parties. Notwithstanding the above, if we, in our discretion, determine that we cannot comply with such requirements using commercially reasonable efforts, we may terminate immediately the provision of the Services.
4.2 Data Privacy Compliance. In connection with the exercise of your rights and obligations under the Agreement (including, without limitation, any related to data privacy), you will comply, at your own expense, with all laws, policies, guidelines, regulations, ordinances, rules applicable to you, this Agreement, including, without limitation, GDPR, Payments Services Directives, including but not limited to the DIRECTIVE (EU) 2015/2366 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on payment services in the internal market, and Documentation and/or requirements of any kind, including with the Data Processing Addendum as stipulated at the following link: https://www.shift4.com/s4i-dpa.
4.3 We reserve the right to amend or modify the Documentation or any of the above-mentioned requirements at any time by a written notification to you. You shall not use our Service in any manner, or in furtherance of any activity that may cause us to be subject to investigation, prosecution, or legal action. If, at any time, we have reason to believe that you are copying, capturing or intercepting payment details, is otherwise in breach of PCI DSS or not or no longer PCI DSS compliant, or cannot provide proof of its PCI DSS compliance, we have the right to immediately suspend any of the Services, or immediately terminate this Agreement.
4.4 Reseller Agreement. To the extent that you are a partner contracting with us under a Reseller Agreement, you undertake to bind all your Merchants receiving the Services to the same contractual terms and obligations indicated in the Reseller Agreement, OTC and DPA, and any other schedules, addendums or documentation attached thereto, as case may be. You assume full responsibility and liability towards us for your Merchants’ use or misuse of the Services, which may cause breach of the Agreement, the OTC, DPA, and any other schedules, addendums or documentation, which results in damages to us and/or our TPPs and shall indemnify us in full for any such damages upon demand.
4.5 Payment Gateway Services Agreement or MPA. To the extent that you are contracting with us under the Payment Gateway Services Agreement or MPA, you are not permitted under any circumstances to sell, resell, license, enable or provide the Services to any third party. The Services under this Agreement are intended for the use of you only, and a breach of this clause may lead to your immediate termination. You shall bear full liability for any damages caused to us as a result and shall indemnify us in full for any damages upon demand.
4.6 Log-in Details. You will be provided with access credentials to access your account and use the Services. You shall restrict access to such credentials to employees as may be reasonably necessary consistent with the purposes of the Agreement and shall ensure that each such employee accessing and using the account is aware of and otherwise complies with all applicable provisions of this Agreement regarding such use and access. You are solely responsible for maintaining adequate security and control of any and all credentialsor any other codes that grant access to the Services. We shall be entitled to rely on information we receive from you and may assume that all such information was transmitted by or on behalf of you. You shall comply with all our recommendations and notices regarding the security of your credentials. You shall bear full liability for any damages caused to us as a result of a security infringement and shall indemnify us in full for any damages upon demand.
4.7 Except as expressly set forth in this Addendum and/or except as expressly authorized by us under or in relation to this Agreement, you or your Merchant shall not (and shall not permit any third party to), directly or indirectly: (i) reverse engineer, decompile, disassemble, or otherwise attempt to discover the source code, object code, or underlying structure, ideas, or algorithms of any aspect of the Services; (ii) modify, translate, or create derivative works based on any aspect of the Services; (iii) copy, rent, lease, distribute, pledge, assign, or otherwise transfer or encumber rights to any aspect of the Services; (iv) use any aspect of the Services for the benefit of a third party; (v) remove or otherwise alter any proprietary notices or labels from any aspect of the Services; (vi) use any aspect of the Services to build an application, product or service that is competitive with any product or service referred to in this Agreement; (vii) interfere or attempt to interfere with the proper working of aspect of the Services or any activities referred to in this Agreement; or (viii) bypass any measures the Provider or any third party solutions provider may use to prevent or restrict access to any aspect of the Services (or other accounts, computer systems or networks connected to any aspect of the Services); or (ix) use any aspect of the Services in a manner that violates Applicable Laws or regulations. Merchant is responsible for all of Merchant’s activity in connection with any aspect of the Services, including but not limited to transferring any personal data, or other protected information or data to us or any third party solutions provider. Merchant shall not use any aspect of the Services in a manner that violates any third party intellectual property, contractual or other proprietary rights.
5.1 A Transaction having the status ‘Authorised’ (“Authorised Transaction”) does not imply that the payment is guaranteed or that it is already due by the relevant Payment Services Partner to you.
5.2 Authorised Transactions may still appear to be fraudulent, as the card or payment instrument used for making the payment may appear to be expired, the subject of unauthorised use, not sufficiently funded, or as otherwise be detailed in the Card Scheme Rules, which may cause an Authorised Transaction to not result in Settlement (including the possibility of chargeback) by our Payment Services Partner to you.
5.3 You acknowledge and agree that (i) we do not have, and cannot provide, visibility of Settlement, and (ii) the risk that an Authorised Transaction eventually does not result in Settlement or that a Transaction already settled shall be reimbursed, is a commercial risk which shall be solely borne by you.
5.4 If you are under a Reseller Agreement you acknowledge and agree that we shall bear no risk with respect to the sale of products and/or services by you to your merchants, including, without limitation any risk associated with fraud or chargebacks in relation to a payment method.
5.5 You acknowledge and agree that we shall not be responsible for the operation of web sites, the availability or performance of the Internet, or for any damages or costs suffered or incurred as a result of any instructions given, actions taken or omissions made by you or other third parties, including without any limitation your Payment Services Partners.
5.6 You agree and acknowledge that we assume no liability in either contract, tort, negligence, statutory duty or otherwise (to the maximum extent permitted by applicable law) arising out of your uses and connection to TPPs and/or third parties’ APM processing and/or relating to any claim, charge, fees, fines or any similar obligations relating to TPP services provided to you. We and/or TPPs may disconnect you from any payment method that ceases to be provided by the relevant TPP or APMs Provider. We will not be liable for any failure of the TPP or APM Provider to effect payment in respect of a transaction including the remittance of any proceeds.
6.1 The applicable fees are detailed in Schedule 1 of the Agreement, or in the Fee Section of your Agreement, as applicable, and in any subsequent addendum or amendment.
6.2 Amendment to fees. The fees may be amended by us from time to time subject to a written notification of sixty (60) days, or sooner as may be agreed by both Parties in writing.
6.3 In the event that the information provided by you for the purpose of this Agreement ceases to be relevant or changes significantly after three (3) months following the Effective Date, we may immediately adjust the fees and will notify you of any such adjustment in writing.
6.4 You agree to pay for the Services either by bank transfer, subject to an issued monthly invoice by us, payable within thirty (30) days to our bank account or, the fees will be debited from the funds that are available under the acquiring agreement that you have with us. You authorize us to debit the Service fees from the settlement funds of the acquiring agreement.
6.5 Printed invoices or statements can be requested (additional costs may be charged by us). Fees and payments shall be due on the first day of the month.
6.6 Late Payment Fee Interest. If the owed amounts are not paid by you within thirty (30) days after the due date stipulated in our invoice, without prejudice to the other rights we may have under the Agreement, you will be subject to a late payment fee interest for a period beginning on the payment date and ending on the date that the amount due is paid in full. The amount of the interest owed to us shall be computed using an annual rate equal to 5% or as it may be amended from time to time by us. If you have not paid all amounts due before the last day of the month in which they were due, we reserve the right in our sole discretion to suspend the use of our Services.
6.7 Taxes. The fees described above are exclusive of all taxes. You agree to pay all applicable taxes other than tax assessed on our income. You agree that the payment of fees to us shall be made without deduction or withholding for any taxes. If you are required to withhold any taxes, the amount paid by you to us shall be increased to the extent necessary to yield to our (after withholding of such taxes) a net amount equal to the amount we would have received had no such withholding been made. You bear the ultimate responsibility for the proper payment of taxes applicable to your sale of your products or services.
6.8 Disputes of invoices. The Parties shall promptly investigate any disputed Fees under the Agreement. A dispute will not relieve you of your payment obligations herein. If an event of dispute is resolved in your favour, we will credit back to you any applicable overpayments made by you. All disputes must be made in good faith and in writing within thirty (30) days of the invoice date. Fees billed and invoiced shall be deemed accepted where written objections were not received by us within such thirty (30) day period.
7.1 All intellectual property rights in the Services and any part thereof, including any and all derivatives, changes and improvements thereof lie exclusively with us. You shall not attempt to infiltrate, hack, reverse engineer, decompile, or disassemble the Service or any part thereof for any purpose.
7.2 The Agreement does not transfer, and is not intended to transfer, to any Party any of the Intellectual Property Rights that any other Party owns at the Effective Date or any Intellectual Property Rights that are created, acquired or developed during the term of the Agreement. You shall not acquire any Intellectual Property Rights in the Services, or any data that may be made available to you under this Agreement. You consent for us to use or refer to any trademarks, logos, copyrighted materials, business names or other similar Intellectual Property Rights in any promotional materials or literature, agreements or on any website. You may revoke such consent at any time by written notification to us. On termination of the Agreement, each Party shall remove any reference to the other Parties from any promotional materials or literature, agreements or on any websites.
7.3 API, MPI, Portal, and Documentation License. Subject to the terms of the Agreement, we grant you a personal, limited, non-exclusive, non-transferable right to our API, MPI, Portal, and accompanying documentation for the following purposes:
7.3.1 install and use our API, MPI and Portal on as many computers as reasonably necessary (which are and shall be maintained in facilities owned, occupied, or leased you) to use the Services, and if you are a Reseller, for the purpose of selling products and/or services to End-Users;
7.3.2 use the accompanying Documentation solely for the purpose of using our API, MPI, Portal and Services.
7.4 Use of Trademarks. Each Party shall strictly comply with all standards with respect to the other Party’s trademarks contained herein or which may be furnished by such party from time to time. Further, neither Party shall create a combination mark consisting of one or more trademarks of the other Party. All uses of the other Party’s trademarks shall insure to the benefit of the Party owning such trademark. Except as otherwise provided herein, you shall not use, register or attempt to register any (a) of our trademarks or (b) marks or domain names that are confusingly similar to any of our trademarks or our domain(s). You shall not (a) use our trademarks except as expressly authorized in this Agreement; (b) take any actions inconsistent with our ownership of the our trademarks and any associated registrations, or attack the validity of our trademarks, its ownership thereof, or any of the terms of the Agreement; (c) use our trademarks in any manner that would indicate you are using our trademarks other than as a licensee of ours according to the Agreement; nor (d) assist any third party do any of the same.
8.1 A receiving party shall not use Confidential Information for purposes other than in direct relation with this Agreement. The receiving party shall hold the disclosing party’s Confidential Information in strict confidence, treat the disclosing party’s Confidential Information with at least the same degree of care as it would use in respect of its own confidential information of similar importance, but in any event a reasonable level of care. In particular, the receiving party shall not without the prior written consent of the disclosing party disclose, publish, disseminate or make accessible the disclosing party’s Confidential Information, in whole or in part, in any way or form, to third parties other than to its employees, subcontractors or agents who have a need-to-know in connection with the performance of the Receiving Party’s obligations under the Agreement.
8.2 In the event that Confidential Information is required to be disclosed by the receiving party by a court order or statutory duty, the receiving Party shall be allowed to do so, provided that it shall, without delay, inform the disclosing party in writing of receipt of such order or duty so that the disclosing party may seek protection against such order or duty.
8.3 Upon the first request of a disclosing party, the receiving party shall without delay (a) return all copies, samples and extracts of, and all other physical media containing, the disclosing party’s Confidential Information, and (b) delete or destroy and have deleted or destroyed all automated data containing the disclosing party’s Confidential Information.
9.1 Each Party undertakes that:
a. it is an entity validly existing and in good standing under the laws of the country it is formed and it is and shall remain in compliance throughout the Agreement with (i) all Applicable Laws in the jurisdictions in which it does business, including but not limited to privacy laws; and (ii) to the extent applicable, with PCI-DSS requirements.
b. it has all the requisite powers to execute and deliver this Agreement and to perform its obligations specified under this Agreement,
c. it has not and will not in connection with the activities contemplated by this Agreement and/or any other business transactions involving this Addendum, make any payment or transfer of value which has the purpose of effect of (A) public or commercial bribery or other unlawful or improper means of obtaining business; or (B) acceptance of or acquiescence in extortion, kickbacks, and (C) that it has in place appropriate internal controls to ensure compliance with this paragraph. You shall not undertake any action that may cause Parties to be in violation of any applicable anti-corruption law or regulation.
10.1 You undertake to use our Services according to the terms of the Agreement and relevant Documentation. You shall bear full liability for the breach of the Agreement or misuse of the Services as stipulated herein and shall indemnify us in full and on demand for any damage caused to us or the TPPs in connection with the Services.
10.2 We undertake to provide our services with due care and skill. In the event that you discover that any of our services are not being provided in conformity with our obligations as set forth in the Agreement, you shall report such non-conformity to us. We will, where the non-conformity can still be remedied, use our reasonable efforts to correct the non-conformity at no additional charge to you.
10.3 Our total liability for direct damages due to an attributable breach of our obligations under the Agreement or for an otherwise unlawful act, shall be limited per damage event to an amount equal to the total amount of our Service Fees paid by you during a 12 months period immediately preceding the date on which the event which caused the liability took place. Direct damage shall include only: (i) the reasonable costs) a Party would face to obtain the result of the other Party’s proper performance under the Agreement, either from the other Party or from a third party, (ii) as demonstrated by a Party in assessing the cause of the damage and the amount of the damage and (iii) as demonstrated by a Party to mitigate the damage. In no event we shall be liable due to an attributable breach of our obligations or on the account of an unlawful act or otherwise for incidental, indirect, special, consequential or punitive damages, including any damages based on loss of profits or lost revenues, business interruption or loss of information, production failure, impairment of other goods or otherwise. We will only be liable for the costs referred to herein if the Agreement was not terminated by us for your breach of obligations under the Agreement.
10.4 None of the limitations and exclusions of liability set out in the Agreement are intended to limit or exclude: (i) the liability of a Party for gross negligence or willful misconduct; or (ii) your liability under the indemnities given by you in this Agreement.
11.1 You shall indemnify us and hold us harmless from and against all damages, costs, losses and expenses (including reasonable attorneys’ fees) which are brought against us by any third party as a result of or in connection with a breach or misuse or damage done by (i) you or your Merchants or your End User; (ii) or you and your Payment Service Partner; (iii) or any other alleged fault, act or omission which is attributable to you.
11.2 We shall indemnify and hold you harmless from and against direct damages, costs, losses and expenses (including reasonable attorneys’ fees) which are brought against the you due to: (i) an attributable breach of our obligations under the Agreement or otherwise for an unlawful act; or (ii) third party claims regarding our software and/or systems. This indemnification is subject to you immediately advising us upon a raise of a claim by any third party, which we shall be at liberty to address at our own discretion.
12.1 The term of the Agreement is for a period of two (2) years and shall be automatically renewed for additional periods of twelve (12) months. The Agreement may be terminated by any Party upon providing prior written notice of at least two (2) months.
12.2 Immediate Termination. A Party may terminate this Agreement with immediate effect by written notice, if the other Party: (i) materially breaches any of its obligations under the Agreement which remains uncured after thirty (30) day written notice thereof; (ii) is dissolved or liquidated, is declared bankrupt or otherwise the subject of suspension of payment or other insolvency proceedings, or if it must reasonably be expected to be unable to meet its obligations under the Agreement; or (iii) fails to comply with the Applicable Laws to which it is subject; or (iv) if the other Party or any of its representatives commits fraud or willful intentional misconduct.
12.3 We may terminate this Agreement with immediate effect due to immediate termination of the acquiring agreement, if applicable.
12.4 Suspension. Without any prejudice to any other legal remedies, we may suspend the provision of, in whole or in part the Services or may terminate the Agreement with immediate effect by written notice, if you: (i) have not submitted any transactions for a period longer than three (3) months; (ii) do not comply with its obligations under your direct agreement with the relevant Payment Services Partner or with the Relevant Payment Services Provider; (iii) instruct us to no longer support you in relation to such Relevant Payment Services Partner; (iv) do not have a contractual relation with the relevant Payment Services Partner nor with any of the other Provider Payment Services Partners; (v) if we receive a written notification obliging us to refrain from providing the Services from any legal authorities, inter alia, referring to your misconduct; or (vi) did not approve in writing an acceptance of Fees Amendments, as defined in the Services Agreement. In any such case, the fees owed to us and any other costs and expenses shall become payable at once.
12.5 Disconnection of our Services. You acknowledge that disconnection of Services may take up to fifteen (15) business days. You are liable for all charges until final disconnection of Services.
12.6 A Party may not assign or in any way transfer its rights or obligations under this Agreement without the prior written approval of the other Party.
12.7 You acknowledge and agree that during the term of this Agreement and after its termination or expiration for any reason whatsoever, you shall continue to bear liability for all transactions and all other amounts due or which may become due under this Agreement. This liability is not subject to any limitation of liability that may be expressed elsewhere in this Agreement.
13.1 In case of Force Majeure, the affected Party shall immediately give the other Party written notice of the Force Majeure event. The notification shall include details of the Force Majeure event together with evidence of its effect on the obligations of the affected Party, and any action the affected Party proposes to take to mitigate its effect.
13.2 As soon as practicable following the affected Party’s notification, the Parties shall consult with each other in good faith and use all reasonable endeavours to agree appropriate terms to mitigate the effects of the Force Majeure event and to facilitate the continued performance of this Agreement.
13.3 The Party prevented to fulfil its obligations shall not be required to remove any cause of Force Majeure or to replace or provide any alternative to the affected source of supply or the affected facility if that would require additional expenses or a departure from its normal practices, and the Agreement would be immediately terminated if it becomes unpractical to continue it.
14.1 Independent contractors. The Parties are independent contractors. No Party shall have any power or authority to assume on behalf of or in the name of the other Party any obligations or duties or to bind the other Party to any contract, deed or undertaking vis-à-vis any third party.
14.2 Promotional materials/press releases. Each Party acknowledges and agrees that the other Party may disclose the existence of the business relationship formed by the Agreement, including the name of the Party, for marketing purposes, including through media releases, public announcements, public disclosures, and promotional and marketing materials.
14.3 Severability. If any provision in the Agreement is found to be invalid or unenforceable in any respect in any jurisdiction the validity or enforceability of such provision shall not in any way be affected and the validity and enforceability of the remaining provisions shall not be affected, unless this Agreement reasonably fails in its essential purpose, and the Parties shall substitute such provision by a valid and enforceable provision approximating to the greatest extent possible the essential purpose of the invalid or unenforceable provision.
14.4 Waiver. Any waiver shall only have effect if it is specific and in writing. The failure of a Party to enforce any of the provisions of this Agreement shall in no event be considered a waiver of such provision. No waiver of a provision by a Party shall (a) preclude that Party from later enforcing any other provision of the Agreement; (b) operate as a waiver of any succeeding breach of the same provision of the Agreement.
14.5 Involvement of Third Parties. If you use the services of third parties you shall be responsible for all actions, errors, and/or omissions of the third party as if you had performed these acts or omissions yourself. You may not subcontract or otherwise delegate the performance of any of its obligations hereunder to any third party without our prior written consent.
14.6 Interim Remedies. Each party acknowledges and agrees that due to the unique nature of Intellectual Property, licenses, and Confidential Information, there can be no adequate remedy at law for any breach of its obligations hereunder, that any such breach may allow the breaching party or third parties to unfairly compete with the breached party resulting in irreparable harm to the breached party, and therefore, that upon any such breach or any threat thereof, the breached party shall be entitled to seek injunctive relief.
14.7 Existing obligations. Notwithstanding the expiry or termination of the Agreement, each Party shall procure the due and timely performance of all obligations assumed by it prior to such expiry or termination. Except in the event that the Agreement is terminated for breach of contract, no Party shall be required to make any payment for termination or expiration of the Agreement.
14.8 Continuing provisions. The sections and clauses of this Agreement relating to confidentiality, liability, indemnities, governing law, and other provisions that expressly or by their nature are intended to continue to have effect, shall survive termination or expiration of the Agreement.