Terms of Service

These Terms of Service ("Terms") are an agreement between the business you represent and HYNX LTD, a company registered in England and Wales (company number 10514108) with its registered office at 128 City Road, London, United Kingdom, EC1V 2NX. They cover the webknx website at https://webknx.com, the customer dashboard, the management API and every API we operate.

At a glance

This summary helps you find your way around. The full Terms below are what apply.

Topic	In short
Who can use webknx	Businesses only. You must be 18 or over and able to bind your business. Consumer rights do not apply
What you pay	Credits per successful request, at published prices. Monthly plans renew automatically until you cancel
Refunds	Ask within 15 days of a payment. After that, payments are non-refundable
Your data	You own your content. We do not keep the content of API requests or use it to train models. We process personal data for you under the data processing terms below
Service levels	No uptime guarantee unless agreed in writing. Status and incidents are published at /status
Liability	Capped at the fees you paid in the previous 12 months (minimum £100). Losses that cannot be limited by law are excluded from the cap
Ending the agreement	Cancel or delete your account at any time. We can terminate immediately for serious breach, and on 14 days' notice without cause
Law	England and Wales

Definitions

• "webknx", "we", "us": HYNX LTD.
• "you", "Customer": the business that accepts these Terms. This includes its users acting for it.
• "Service": the website, the dashboard, the management API, every API we operate, and the documentation.
• "Workspace": the account space in which you hold API keys, team members, roles, usage, credits, subscriptions and invoices.
• "Credits": the units used to pay for API requests, as described in Credits, plans and payment.
• "Your content": the data you send to the Service and the output it returns to you.
• "Documentation": the guides and API reference published at /docs.
• "Data protection law": the UK GDPR, the Data Protection Act 2018 and PECR. Where it applies, it also includes the EU GDPR.

Accepting these Terms

You accept these Terms by ticking the box when you create an account. If you are added to a workspace, you accept them by accepting the invitation. You also accept them by using the Service.

We record the date you accepted and which version you accepted. These Terms are in English. Each version is published on this page with its "last updated" date, and you can print or save it from your browser. Earlier versions are available on request.

Business use only

The Service is for businesses only. By accepting these Terms you confirm that:

• you are using the Service for your trade, business, craft or profession, and not as a consumer;
• you are at least 18 years old;
• you have authority to bind the business you represent. If you sign up as an individual (for example, a sole trader), you accept these Terms as a business.

The Service is not offered to consumers. Consumer protection rights do not apply, including the Consumer Rights Act 2015 and the 14-day cancellation right under the Consumer Contracts Regulations 2013.

The Service

The Service gives your applications access to the APIs listed in our catalog, using one API key, one credit balance and one bill. While you comply with these Terms, we give you a non-exclusive, non-transferable, non-sublicensable right to use the Service for your business, including within applications you provide to your own customers.

Usage limits. Each API key and workspace is rate limited:

Profile	Per API key / minute	Per workspace / minute
standard	120	600
heavy	30	120

Each API also has request-size and option limits, published in its documentation. Requests above a limit are rejected and not charged. If you need higher limits, contact us.

Changes to the Service. We improve the Service continually and may add, change or remove features. We will not make a change that materially reduces the core functionality of an API you pay for without at least 30 days' notice. If a change like that materially disadvantages you, you may end your subscription before it takes effect and receive a pro rata refund of the unused period and any unspent prepaid credits. APIs are versioned. Breaking changes and deprecations follow our versioning policy and are announced in the changelog.

Accounts and workspaces

• You must give accurate registration details, verify your email address and keep your password secure. You are responsible for everything done through your account.
• The workspace owner is responsible for the workspace, including the people they invite and the roles they assign.
• Registering creates one workspace, which you own. You can join other workspaces by invitation, but you cannot create more. If you delete a workspace, its API keys stop working, its members lose access and any remaining credits are forfeited. It cannot be replaced.
• Accounts are personal to the individual user and must not be shared.

API keys

Each API key has a public app key and a secret. The secret is shown once. We store only a non-reversible verifier, so we cannot recover the secret for you.

• Keep secrets confidential. Keep them out of client-side code, public repositories and logs. Referrer restrictions and CORS do not replace keeping the secret secret.
• Revoke or rotate any key you believe has been exposed. You are responsible for requests made with your keys before you revoke them, and they are charged as normal.
• Give each key only the role and permissions it needs.

Acceptable use

You must not, and must not let anyone else:

• break the law, infringe anyone's rights, or use the Service to send spam, malware, phishing or fraudulent content (for example, QR codes that point to phishing pages);
• send special category data, criminal offence data or children's personal data in API requests, unless the request needs it and you have a lawful basis to process it;
• probe, scan or test the security of the Service, or bypass authentication, permissions, rate limits or credit accounting, unless we have agreed to it in writing;
• copy, modify, reverse engineer or decompile the Service, except as the law allows;
• scrape the website or documentation, or use the Service to build a competing product;
• overload the Service or interfere with other customers, including by deliberately exceeding rate limits;
• resell or re-expose raw access to the Service as a substitute for it, other than as part of your own application;
• share an account or API key outside its workspace, or register extra accounts to obtain extra free credits.

Suspension. We may rate limit, suspend or revoke keys, workspaces or accounts that break these rules or put the Service, our customers or third parties at risk. Where it is reasonable, we will tell you first and give you a chance to fix the problem. We will restore access once it is fixed.

Credits, plans and payment

Requests are paid for with credits. Each operation has a price, published on our pricing page, in the documentation and through the management API. Our current plans are:

Plan	Price	Credits	Lifecycle
Free	$0/month	1,000 credits	Resets every calendar month
Pro	$20/month	20,000 credits	Renews each billing period; unused credits expire
Business	$50/month	100,000 credits	Renews each billing period; unused credits expire
Enterprise	$200/month	1,000,000 credits	Renews each billing period; unused credits expire
Prepaid credits	$10 one-off	1,000 credits	Never expires

• Balances. A workspace can hold free monthly, subscription and prepaid credits:
  • Free monthly credits reset every calendar month.
  • Subscription credits are granted for each billing period and expire at the end of it.
  • Prepaid credits do not expire.
• Consumption order. Credits are used in the order Free monthly → Subscription → Prepaid. Within each type, the credits that expire soonest are used first.
• What is charged. Only successful requests are charged. If a request fails validation, authentication, rate limiting or processing, the credits reserved for it are released. When your credits run out, requests are rejected until you add more. We never charge you for overage automatically.
• Payment. Our payment provider, Stripe, processes all payments by card or the other methods shown at checkout. Prices are in the currency shown at checkout and exclude VAT and other applicable taxes, which appear on the invoice. You are responsible for any taxes due. Credits are granted only when Stripe confirms payment.
• Subscriptions run monthly and renew automatically at the end of each billing period until cancelled.
  • You can change plan at any time from Dashboard → Billing. The change takes effect immediately, and Stripe prorates the price.
  • You can cancel at any time from the same page. Cancellation takes effect at the end of the current period.
• Late payment. If a payment fails, the subscription becomes past due while Stripe retries. We may stop granting subscription credits until it is paid. For any amount we invoice that is not paid on time, we may charge interest under the Late Payment of Commercial Debts (Interest) Act 1998 and suspend the Service until it is paid.
• Price changes. We may change prices or plans. A change to the plan you are subscribed to takes effect from your next billing period, and we will give you at least 30 days' notice. New operation prices apply to requests made after they are published.
• No cash value. Credits are not money. They cannot be transferred between workspaces or exchanged for cash.

Refunds

You may ask for a refund within 15 days of a payment by emailing [email protected].

• Prepaid credit packs. We refund the unspent credits from that purchase, pro rata, and remove them from your prepaid balance. Credits already used are not refunded.
• Subscription payments. We refund the payment less the value of any subscription credits already used in that period, and the period's remaining allocation is removed. Your plan then ends.

After 15 days, payments are non-refundable. The exceptions are set out in The Service, Warranties and Suspension and termination, plus any refund the law requires. Every refund is recorded in your credit transaction history, and past ledger entries are never edited. Full details are in Billing and credits.

Marketplace customers

You may use our APIs through RapidAPI, ClankerBay or another marketplace. If you do, your subscription, billing, payment and refund relationship is with that marketplace, under its terms, and that traffic does not use workspace credits. These Terms still govern your use of our APIs.

Support and service levels

• Support. Email [email protected]. We respond during UK business hours (Monday to Friday, 09:00–17:30, excluding bank holidays) and aim to reply within two business days. Security reports and outages are prioritised.
• Status and incidents. Live service health is published on our status page. We post significant incidents there and email affected workspace owners when an incident affects their data.
• Maintenance. Where possible, we carry out planned maintenance without downtime. If downtime is needed, we announce it in advance on the status page.
• Service levels. We aim for high availability but do not promise a particular uptime or that the Service will be uninterrupted or error-free. A service level agreement applies only if we have signed one with you.

Your content and data

• Ownership. You keep all rights in your content. You give us a non-exclusive licence to process it only as needed to provide, secure and support the Service for you.
• No retention of request content. We do not keep the content of API requests after the response is returned. We do not use your content, or any data in your workspace, to train models.
• Your responsibility. You are responsible for having the right to send your content and for what it contains.
• Export. At any time, you can download your invoices and retrieve your usage records, credit transactions, members, roles and API key details through the dashboard and the management API.
• Aggregated data. We may use aggregated, de-identified usage statistics to operate and improve the Service. This never includes your content.

Data processing

This section applies when your content or your workspace contains personal data and you are the controller of that data. In that case, we process it as your processor. It forms the contract between us under Article 28 of the UK GDPR, and of the EU GDPR where that applies.

• Subject matter, duration, nature and purpose. We process personal data to provide the Service, for as long as you use it.
  • API request content is processed in memory only to generate the response.
  • Workspace data (team members, invitations, API keys, usage) is stored to run your workspace.
• Types of data and data subjects. Whatever personal data you include in API requests, for example names, emails or URLs encoded in a QR code, about the people your application serves. Also the names and email addresses of your team members and invitees.
• Your obligations and rights. As controller, you are responsible for having a lawful basis for the processing and for giving individuals the privacy information they need. You have the rights set out in this section.
• Instructions. We process personal data only on your documented instructions, including for international transfers. These Terms, the documentation and your configuration of the Service are those instructions. The law may require us to process it in other ways; if so, we will tell you first unless the law forbids it. We will tell you immediately if we believe an instruction breaks data protection law.
• Confidentiality. Everyone we authorise to process the data is bound by a duty of confidentiality.
• Security. We maintain the technical and organisational measures described in our Privacy Policy, as Article 32 requires.
• Sub-processors. You give us general written authorisation to use the sub-processors listed in the Privacy Policy. We will give at least 30 days' notice of a new sub-processor by updating that list and emailing workspace owners. You may object on reasonable data protection grounds; if we cannot address the objection, you may terminate the affected Service and receive a pro rata refund. We impose the same data protection obligations on each sub-processor and remain liable to you for its performance.
• International transfers. We transfer personal data outside the UK only as described in the Privacy Policy, under adequacy regulations or appropriate safeguards.
• Assistance. We will help you, taking into account the nature of the processing and the information available to us, to:
  • respond to requests from individuals exercising their rights;
  • keep the data secure;
  • notify personal data breaches to the ICO and to the people affected;
  • carry out data protection impact assessments and consult the ICO.
• Breaches. We will tell you without undue delay after becoming aware of a personal data breach affecting your data, with the information you need to meet your own reporting duties.
• End of processing. When the Service ends, at your choice we will either return the personal data we process for you (through the export routes above) or delete it. We will delete it within 30 days of your request, and remaining backups are overwritten within a further 14 days. The exception is data UK law requires us to keep.
• Audits. We will make available all the information needed to show compliance with Article 28. We will allow for and contribute to audits, including inspections, by you or an auditor you appoint, on reasonable notice and subject to confidentiality.

For account, billing and security data, we are an independent controller. Our Privacy Policy describes that processing.

Confidentiality

Each party will keep confidential any non-public information the other discloses that is marked as confidential or would reasonably be understood to be confidential. That includes API keys, pricing that is not published, security information and product plans. Each party will use it only to perform these Terms, protect it with reasonable care, and share it only with staff, advisers and sub-processors who need it and are bound by similar duties.

This does not apply to information that is or becomes public without fault, was already known, is independently developed, or must be disclosed by law. A party disclosing information by law will give the other notice where it lawfully can. These obligations apply while these Terms are in force. After they end, only API keys, credentials and security information must be kept confidential.

Intellectual property

• Ours. We and our licensors own the Service, the software, the documentation, the website and the webknx brand. Except for the rights in these Terms, no rights are transferred to you.
• Yours. You own your content and your own applications. Output generated for you by an API, such as a QR code image, is yours to use.
• Feedback. If you give us suggestions or feedback, we may use them without restriction or payment.
• Open source. The Service uses open-source software and fonts under their own licences, such as the MIT licence and the SIL Open Font License. Nothing in these Terms restricts your rights under those licences.

Third-party services

The Service relies on third parties, including our hosting, email and payment providers (listed in the Privacy Policy). You may also choose to use the Service through a marketplace. Payments you make through Stripe are also subject to Stripe's terms, and marketplace use is subject to that marketplace's terms. We are responsible for our sub-processors as set out above. We are not responsible for third-party services you choose to use that are not part of the Service.

Suspension and termination

• By you. You can stop using the Service at any time. You can cancel your subscription from Dashboard → Billing and delete your account from Settings → Profile.
• By us, for cause. We may suspend or terminate your access immediately for any of the following:
  • serious misuse or a security risk;
  • non-payment;
  • a requirement of the law;
  • your insolvency. For any other material breach that can be put right, we will give you 48 hours' notice by email to put it right. If you do not, we may terminate immediately.
• By us, for convenience. We may terminate these Terms on 14 days' notice.
• Effect of termination.
  • Your API keys stop working and your right to use the Service ends.
  • Unused subscription and free credits lapse.
  • Unused prepaid credits also lapse, unless we terminated for convenience or you ended the subscription under a right to do so in these Terms. In those cases, we refund their unspent value.
• Exit. Before your access ends, export what you need using the routes in Your content and data. Once these Terms end, we handle personal data as described in Data processing. We keep invoices, payment records and the credit ledger for as long as UK law requires.
• Survival. Clauses that by their nature should continue after termination do so. These include fees owed, confidentiality of credentials and security information, intellectual property, data processing until the data is deleted or returned, limitation of liability, indemnities, and governing law.

Warranties and disclaimers

• Our warranty. We will provide the Service with reasonable skill and care, and each API will perform materially as described in its documentation. If it does not, tell us and we will use reasonable efforts to fix it. If we cannot fix it within a reasonable time, you may end your subscription and receive a pro rata refund of the unused period and any unspent prepaid credits. This, together with your rights under the limitation of liability below, is your remedy for breach of this warranty.
• Your warranty. You warrant that you have the rights and lawful basis needed for your content, and that your use of the Service complies with the law and these Terms.
• Disclaimer. Except as these Terms expressly state, and to the extent the law allows, we exclude all other terms, warranties and conditions, including those implied by statute or common law about satisfactory quality and fitness for a particular purpose. Before you rely on any output, such as a generated QR code, you are responsible for checking that it is correct and fit for your purpose.

Limitation of liability

Nothing in these Terms limits or excludes liability for:

• death or personal injury caused by negligence;
• fraud or fraudulent misrepresentation;
• anything else that cannot be limited or excluded under the law of England and Wales.

Subject to that:

• Excluded losses. Neither party is liable, whether in contract, tort (including negligence), breach of statutory duty or otherwise, for any:
  • loss of profits, revenue, business, contracts, anticipated savings or goodwill;
  • indirect or consequential loss.
• Data. We are not liable for loss or corruption of data except to the extent caused by our breach of Data processing or our security obligations.
• Cap. Each party's total liability arising out of or in connection with these Terms and the Service is limited to the greater of:
  • the fees you paid us in the 12 months before the event giving rise to the claim; and
  • £100.
• Outside the cap. The cap does not apply to your obligation to pay fees, or to your indemnity below.

We have set these limits because the fees reflect them, and because each party is best placed to insure its own risks. We believe they are reasonable under the Unfair Contract Terms Act 1977.

Indemnities

• By you. You will indemnify us against third-party claims, and the reasonable costs of defending them, to the extent they arise from your content, your use of the Service in breach of these Terms, or your breach of data protection law.
• By us. We will indemnify you against third-party claims that your use of the Service, as provided by us and in line with these Terms, infringes that third party's UK intellectual property rights. This does not apply to claims caused by your content, by combining the Service with things we did not provide, or by modifications we did not make. If a claim is made or likely, we may obtain the right for you to continue, modify the Service so it no longer infringes, or end the affected Service and refund prepaid fees for it.
• Conditions. The indemnified party must promptly notify the other of the claim, let it control the defence and settlement, give reasonable help at its cost, and not admit liability without its consent.

Changes to these Terms

We may update these Terms. We will publish the new version here with a new "last updated" date and keep a record of previous versions. For material changes, we will email workspace owners at least 30 days before they take effect. If you keep using the Service after that date, the new Terms apply. If you do not agree, you can cancel before the change takes effect and receive a pro rata refund of the unused period and any unspent prepaid credits.

Disputes and governing law

• Talk to us first. If a dispute arises, email [email protected] with the details. Senior representatives of both parties will try in good faith to resolve it within 30 days. If they cannot, either party may propose mediation, which will go ahead only if both agree.
• Courts. These Terms, and any dispute or claim arising from them (including non-contractual disputes), are governed by the law of England and Wales. The courts of England and Wales have exclusive jurisdiction.
• Urgent relief. Nothing in this section stops either party from seeking urgent court relief to protect its intellectual property, confidential information or security.

General

• Notices. We send notices to the email address of the workspace owner, or post them in the dashboard. You send notices to [email protected]. An email notice is received when it is sent, unless the sender gets a delivery failure.
• Events beyond our control. Neither party is liable for delay or failure caused by events beyond its reasonable control, such as a failure of the internet or public networks, or a major provider outage. Payment obligations are not affected. If an event like this lasts more than 30 days, either party may terminate on written notice.
• Assignment and subcontracting. You may not transfer these Terms without our consent. We may transfer them to a successor to our business, and we may use subcontractors and sub-processors. We remain responsible for their work.
• Relationship. The parties are independent contractors.
• Severability. If any part of these Terms is unenforceable, the rest remains in effect.
• Waiver. Failing or delaying to enforce a term is not a waiver.
• Third parties. No one other than you and us has any right to enforce these Terms under the Contracts (Rights of Third Parties) Act 1999.
• Entire agreement. These Terms, any signed order form or service level agreement, and the Privacy Policy are the whole agreement between us about the Service. If they conflict, a signed order form or service level agreement takes precedence over these Terms.

Contact and company details

HYNX LTD, a company registered in England and Wales (company number 10514108) with its registered office at 128 City Road, London, United Kingdom, EC1V 2NX. For questions about these Terms, email [email protected].