Terms and Conditions

1. Introduction

By accessing or using the ScopePay API, Dashboard, or any related services (collectively the "Service"), you agree to be bound by these Terms and Conditions. If you do not agree to these terms, do not use the Service.

ScopePay provides a secure M-Pesa STK Push integration platform that allows businesses to trigger payment prompts directly to their customers' phones. We act as an API aggregator, facilitating communication between your application and the Safaricom M-Pesa network.

2. Account Registration

• You must provide accurate, complete, and current information during registration.
• You are responsible for maintaining the confidentiality of your API keys and dashboard credentials.
• ScopePay reserves the right to suspend or terminate accounts that provide false information or engage in fraudulent activities.

3. Subscription & Billing

Subscriptions are billed monthly via M-Pesa. Failure to renew your subscription by the due date will result in:

• Immediate suspension of your linked accounts.
• Disabling of STK Push capabilities.
• Reactivation only upon successful payment of the outstanding amount.

4. Service Usage & Restrictions

You agree to use the API solely for lawful purposes and in compliance with Safaricom's M-Pesa policies. Prohibited uses include, but are not limited to:

• Processing payments for illegal goods or services.
• Phishing or social engineering activities.
• Attempting to bypass API rate limits or security measures.
• Reverse engineering the ScopePay platform.

5. Rate Limiting & Auto-Suspension

To protect the integrity of the M-Pesa network and your account reputation, ScopePay enforces automated safety mechanisms:

• Failed Attempts: If your account triggers 5 consecutive failed STK pushes (e.g., user cancels, insufficient funds, or network errors), your account will be automatically suspended.
• Warning System: A warning notification is sent to the registered admin email after 3 consecutive failures.
• Reactivation: Suspended accounts must be manually reviewed and reactivated by ScopePay support. You must demonstrate that the underlying issue (e.g., customer phone status, insufficient balance logic) has been resolved.

6. Data Privacy & Security

ScopePay takes data security seriously. We implement industry-standard encryption and security measures to protect your transaction data. However, you are responsible for:

• Securing your API keys and not sharing them publicly.
• Ensuring your callback/webhook endpoints use HTTPS.
• Complying with the Kenya Data Protection Act regarding the personal data of your customers.

We do not store sensitive M-Pesa PINs. All sensitive authentication happens securely between the user's phone and Safaricom.

7. Limitation of Liability

While we strive for 100% uptime, the Service is dependent on third-party networks (Safaricom). ScopePay is not liable for:

• Service interruptions caused by Safaricom M-Pesa downtime.
• Delays in STK Push delivery due to network congestion on the user's end.
• Financial losses resulting from your own software bugs or improper API integration.

In no event shall ScopePay's total liability exceed the amount paid by you for the Service in the preceding 12 months.

8. Governing Law

These terms are governed by the laws of the Republic of Kenya. Any disputes arising from the use of this Service shall be subject to the exclusive jurisdiction of the Kenyan courts.