Terms and Conditions

01Parties, scope, and definitions

These Terms and Conditions ("Terms") govern access to Anthrogate, operated by Indigo Systems and Technology Consulting Inc. ("we," "us," or "our"). Our business correspondence address and contact details appear in Section 19.

A Business Customer is an organization that integrates or orders the Service. An End User is an individual whose information is the subject of a check. The Initiating Organization is the organization requesting that check. Verification Information includes check inputs, subscriber attributes, network/session information, and results relating or reasonably linkable to an End User.

Business-customer provisions expressly identified below apply only to Business Customers. They do not impose commercial payment, indemnity, or liability-cap obligations on an End User merely because that person is verified. Mandatory consumer and data-protection rights remain unaffected.

02Affirmative acceptance and document priority

These Terms become a contract with a party when that party affirmatively accepts them through a clearly labeled acceptance mechanism or signs an agreement incorporating them. Access to a public policy page, a buried link, or mere receipt of a verification result is not treated by us as affirmative acceptance.

A person accepting for a Business Customer must have authority to bind it. An End User's consent to a particular check is separate from a Business Customer's contract with us. Acceptance of these Terms is not blanket privacy consent.

A signed customer agreement controls conflicting commercial terms. A signed data-processing agreement controls conflicting processing instructions between its parties. Neither can remove an individual's mandatory rights or silently authorize handling inconsistent with the notice given to that individual. Changes to actual handling require the corresponding notices and permissions before they take effect.

03What the Service provides

The Service routes authorized requests to supported mobile operators or API providers and returns the result to the Initiating Organization. Enabled capabilities may include phone-number verification, SIM-change checks, and subscriber-attribute matching. Only features described in the agreed service scope and the relevant request journey are provided.

We provide verification signals. We do not operate a bank account, hold or transfer an End User's money through this Service, make a credit decision, or act as a general identity-record repository. A reference to CAMARA describes an API framework; it is not a claim of endorsement, certification, or a contractual relationship with CAMARA, GSMA, or every mobile operator.

There is no implied commitment to carrier coverage, a particular API version, a feature, response time, or service level beyond an express written agreement. Provider availability and the user's network or device context may affect whether a check can be completed.

04Eligibility and authority to request a check

A person accepting these Terms must be at least 18 and have reached the applicable age of majority. Business Customers must be lawfully organized and authorized to conduct the activities for which they use the Service. This offering is not for checks about minors.

A check must concern a number or information that the requester is legally authorized to verify for the disclosed purpose. Possession of a phone number, an API credential, or an existing customer relationship does not automatically authorize every use of subscriber information. Do not submit information obtained unlawfully or misrepresent your identity, role, or authority.

05Notice, consent, and processing responsibilities

Before initiating a check, the Business Customer must provide required notices, establish the applicable lawful basis, obtain any required consent or other authorization, and meet the relevant operator/API conditions. It must identify the check's purpose, the material data involved, the parties involved, and the consequences of declining where required.

Silent authentication is not an exemption from privacy or telecommunications requirements. Do not bypass a consent screen, mislabel the purpose of a request, request broader access than necessary, or reuse authorization for an incompatible check.

Required authorization and acceptance evidence must be maintained by the responsible party under the documented arrangement in the Privacy Policy and any applicable data-processing agreement. Our transient verification pipeline is not a consent-evidence archive. A Business Customer cannot require us to delete evidence that we are legally obliged to maintain, and we cannot avoid our own duties by assigning all responsibility to a customer.

Where required, the parties must enter into appropriate processing and transfer agreements before production use. These public Terms do not replace a complete data-processing agreement, subprocessor arrangement, or sector-specific agreement.

06Verification-only handling and retention

The complete scope, active-processing lifetime, provider responsibilities, administrative records, and narrow mandatory legal exceptions are stated in the Privacy Policy. Those limitations are part of this undertaking. We do not claim that no information is processed or that every independent recipient deletes its own records.

We do not sell Verification Information, retain a reusable identity profile, or use it for advertising, unrelated analytics, or model training. No submission grants us a broader data license. A Business Customer may not require routine verification logging, persistent result history, or payload backups while presenting the integration as this no-retention offering.

The Initiating Organization is responsible for lawfully managing the result it receives, including its own required retention and disclosures. Its possession of that result does not authorize us to keep a copy. After transient processing ends, we do not promise historical replay, result retrieval, or transaction reconstruction.

07Verification limits and financial use

Number verification: A successful result supports an association between a phone number and the authenticated network context. It is not independent proof of the natural person's identity, consent to a payment, or ownership of a bank account.

SIM-change checks: A reported change may be legitimate. No reported change does not establish that an account, device, or number is uncompromised. The scope and available history depend on the provider.

Subscriber matching: A match compares the supplied attributes with provider records. Those records can be incomplete, outdated, or associated with a family, employer, or other account holder. A match does not establish the accuracy of every identity claim.

Business Customers must assess these signals with appropriate independent controls. An unavailable, failed, inconclusive, or stale result must not be presented as a pass, a confirmed identity, or proof of fraud. A result must not be treated as standalone authorization for an irreversible financial action.

Business Customers remain responsible for their applicable identity-verification, anti-money-laundering, sanctions, consumer-protection, authentication, accessibility, adverse-action, and recordkeeping duties. They must provide review, correction, appeal, or alternative verification where legally required. A no-retention vendor policy does not eliminate a financial institution's own recordkeeping duties.

Any use that triggers consumer-reporting, creditworthiness, insurance, employment, or other regulated eligibility requirements needs the necessary legal assessment, permissions, and separate written approval before deployment. These Terms do not determine regulatory status or exempt either party from applicable law.

08Permitted use and prohibited conduct

Use the Service only for the authorized verification purpose and within the agreed limits. Do not use it for unauthorized background checks, number enumeration, stalking, surveillance, discriminatory screening, or gathering subscriber information about unrelated people.

Do not bypass authentication, consent, quotas, or provider restrictions; forge requests or results; distribute credentials; interfere with network services; introduce malicious code; or attempt to obtain information beyond the authorized scope. Do not build a marketing list, persistent identity graph, or training dataset from Service traffic.

Do not submit payment credentials, private messages, identity-document images, or other unsupported information. Testing with real personal information requires a lawful basis and appropriate safeguards. Good-faith security reports may be sent to the security contact, but these Terms do not authorize unapproved intrusive testing.

09Integration and security duties

Business Customers must protect API credentials, use encrypted connections and supported authorization flows, limit access, and prevent verification information from leaking into URLs, analytics, crash reports, or unauthorized logs in their own applications. They must bind results to the correct request and assess freshness and replay risks.

Each party is responsible for securing systems under its control and for meeting its own applicable incident-notification and cooperation obligations. Notify us promptly of suspected credential compromise or misuse affecting the Service without sending unnecessary personal information or secret values in ordinary email.

We may reject excessive, unauthorized, malformed, or unsafe requests. Such rejection is not a statement about the End User's trustworthiness. Security controls do not authorize uses or retention prohibited by the Privacy Policy.

10Operators and other third parties

Mobile operators and API providers control their own network availability and underlying records. Their relevant terms, permissions, and privacy notices must be presented through the applicable flow. A user may need an eligible subscription, compatible device, or supported network connection.

We are not responsible for a third party's independent conduct solely because the Service interacts with it. This does not exclude our responsibility for our own conduct, contractual commitments, selection or oversight duties, or providers acting on our behalf where applicable law assigns responsibility to us.

Neither a third-party failure nor an unavailable result should be converted into a false verification success. Any alternative verification path is subject to its own appropriate controls and disclosures.

11Fees and commercial terms

Business Customers only. Fees, usage limits, taxes, payment schedules, renewals, cancellation, and any service credits are governed by a separately accepted order or customer agreement. No price, recurring charge, or automatic renewal is created merely by publishing these Terms.

We do not impose a fee on an End User merely for being the subject of a check under a Business Customer's integration. Charges from an Initiating Organization or the user's mobile/data plan, if any, are governed by that party's agreement. Mandatory refund and cancellation rights are not waived.

12Intellectual property and confidentiality

We and our licensors retain rights in the Service's software, documentation, and branding. Subject to the applicable agreement, a Business Customer receives only the limited right needed to integrate and use the Service. Nothing transfers ownership of an individual's personal information or licenses it for unrelated purposes.

Business Customers only. Each party must protect non-public technical or business information identified as confidential, or reasonably understood to be confidential, and use it only for the relationship. Permitted disclosure is limited to authorized personnel, advisers, and providers who need it and are subject to appropriate duties, or disclosure required by law.

Confidentiality restrictions do not prevent lawful whistleblowing, regulator cooperation, exercising privacy or consumer rights, or reporting unlawful conduct. Information independently developed, rightfully received without a duty, or public without a breach is not confidential solely under this clause.

13Service commitments and disclaimers

We will provide the Service with reasonable care and skill, perform our express written commitments, and comply with obligations that applicable law places on us. The Privacy Policy's express handling commitments are not negated by this section.

Subject to those commitments and non-excludable rights, the Service is provided on an "as available" basis. We do not guarantee uninterrupted availability, error-free provider records, compatibility with every device, successful completion of every check, or the elimination of fraud. No result is a certification that a person or transaction is safe.

To the extent legally permitted, implied warranties not required by law and not expressly given in the agreement are excluded. Any exclusion is limited to what the applicable jurisdiction allows and does not exclude mandatory rights, remedies, or obligations.

14Liability and mandatory rights

Business Customers only. Subject to the exceptions below, neither party is liable to the other for indirect or consequential loss, or lost profits, revenue, or business opportunities, to the extent such exclusions are enforceable and the losses are not direct losses under applicable law.

Subject to the same exceptions, the aggregate liability cap between us and a Business Customer, including the amount, currency, relevant service, and measurement period, is: the greater of US$1,000 or the fees paid or payable by that Business Customer for the affected Anthrogate Service during the 12 months immediately before the first event giving rise to the claim. Related events are treated as a single event for this calculation. The cap is aggregate, not a separate cap for each verification request. A different cap in a signed customer agreement controls between its parties.

The exclusions and cap do not apply to fraud, fraudulent misrepresentation, willful misconduct, gross negligence, liabilities that cannot lawfully be limited, or a party's breach of its confidentiality or personal-data-protection obligations. They do not limit a regulator's powers or an individual's statutory remedies. Accrued undisputed payment obligations are not reduced by the cap.

End Users and consumers. The business-to-business monetary cap and loss exclusions above do not apply to you. Nothing in these Terms excludes or limits liability, compensation, or remedies that applicable consumer, privacy, or other mandatory law provides.

15Business-customer indemnity

Business Customers only. To the extent permitted by law, a Business Customer must indemnify us for third-party claims, reasonable defense costs, and damages to the extent caused by that customer's unlawful or unauthorized requests, material violation of the prohibited-use provisions, or submission of information without required rights or permissions.

This obligation does not cover the portion caused by our breach, negligence, unlawful processing, or misconduct, and is subject to applicable liability limits. We must give prompt notice, with relief for delay only to the extent it materially prejudices the defense, and reasonable cooperation at the customer's expense. The customer may control the defense using competent counsel. No settlement may admit fault by us, impose non-monetary obligations on us, or fail to release us without our prior reasonable consent.

No End User owes an indemnity under this section merely because a verification was requested about that person.

16Changes, suspension, and termination

We may update the Service to address security, law, supported-provider changes, or functionality. We provide reasonable advance notice of material changes to contracted services where practicable, and observe any stronger notice requirements in applicable law or an agreement. Urgent security or legal action may require earlier intervention.

We may limit or suspend affected access where reasonably necessary to stop unauthorized use, a material breach, a security threat, or unlawful processing. Where lawful and practicable, we provide the reason and an opportunity to remedy a remediable breach. Suspension does not excuse unrelated obligations or eliminate statutory remedies.

Customers may terminate as allowed by their agreement and applicable law. End Users may stop using a verification flow, subject to the Initiating Organization's lawful alternative procedures. Termination does not require us to recreate discarded records or permit us to retain data contrary to the Privacy Policy.

Material changes to these Terms are prospective and require the notice and affirmative acceptance that applicable law requires. Mere continued browsing of a public page is not treated as acceptance. Changes to privacy purposes, consent, or retention must separately meet the Privacy Policy and applicable law.

17Governing law and disputes

For Business Customers, and subject to any controlling signed agreement, these Terms are governed by the laws of the State of Illinois, United States, and applicable federal law, without applying conflict-of-laws rules to displace otherwise applicable mandatory law. Subject to mandatory jurisdiction rules, the agreed courts are the state courts in Cook County, Illinois, and, where federal subject-matter jurisdiction exists, the United States District Court for the Northern District of Illinois.

A consumer retains the protection of mandatory laws and access to competent courts available under applicable law, including applicable protections in the consumer's place of residence. These Terms do not impose mandatory arbitration, a class-action waiver, or a shortened statutory claim period.

Parties may try to resolve a dispute through the contact below, but doing so is not a condition for contacting a regulator, seeking urgent relief, or exercising a right where such a condition would be unlawful. Regulatory complaints and statutory privacy rights remain available.

18General provisions

If a provision is unenforceable, it is severed or narrowed only to the extent permitted by law without defeating the agreement's essential purpose. The remaining provisions continue to apply. A failure to enforce a provision on one occasion is not a waiver of future enforcement.

A Business Customer may not assign the agreement without our reasonable prior consent, except as permitted by a signed agreement. Any permitted successor must assume applicable obligations. An assignment, merger, or asset transfer does not expand permitted personal-data uses or weaken notices already provided.

Terms that reasonably need to survive termination, including accrued payment obligations, confidentiality, applicable liability provisions, and dispute provisions, survive to the extent lawful. Survival does not extend a personal-data retention period.

These Terms and the agreements they expressly incorporate state the parties' agreement for their subject matter. They do not exclude liability for fraudulent statements, override mandatory law, or cancel the public Privacy Policy's express commitments. No third-party enforcement right is created except as required by law or expressly agreed.

19Notices and contact

Formal notices must also follow any applicable signed agreement or mandatory service-of-process rules. Contact information is handled as described in the Privacy Policy's retention section.

20SMS Terms

Anthrogate is a product of Indigo Systems and Technology Consulting Inc., also known as IndigoConsulting. The customer-facing SMS sender is Anthrogate. This SMS program authenticates users into Anthrogate. The business-customer provisions elsewhere in this document continue to describe organizational integrations where applicable.

Users provide their mobile number and see the following disclosure before selecting Continue or Sign in in the intended verification flow:

Users request an SMS by selecting SMS verification, or SMS is triggered automatically when carrier verification fails after consent has been given. Vonage attempts SMS delivery first. Twilio is the planned backup provider and sends a code only if Vonage fails to deliver the SMS. Users enter the code in Anthrogate to complete verification. Email verification is available as an alternative.

Messages contain one-time authentication codes. Message frequency varies with verification requests. Message and data rates may apply.

Pre-launch status: the public consent walkthrough illustrates the intended flow using demonstration data. This website does not collect mobile numbers or send codes. Twilio fallback and STOP/HELP handling remain pending configuration.

Planned keyword support: once configured for launch, reply STOP to opt out of SMS and HELP for assistance. During this pre-launch period, contact info@indigoconsulting.com for support or withdrawal requests. Carrier-verification withdrawal and SMS withdrawal are separate choices.

Carrier verification consent

Carrier verification uses the following separate authorization:

Privacy and verification limits

Anthrogate deletes user verification information when the verification attempt completes or fails. The Privacy Policy describes active-processing limits, administrative records, provider responsibilities, and narrow legal exceptions. This SMS section supplements the existing provisions on consent, security, verification limits, and mandatory rights.

For assistance, contact info@indigoconsulting.com.