[H]Hashentic

Terms of Service

Version 2026-11.2 · effective

These Terms of Service govern the use of the Hashentic platform, including the admin panel, the verification pages, the mobile and desktop applications, the APIs and the Hashentic app for Shopify (together, the "Service"). The Service is provided by XORDEX VENTURES Sp. z o.o., Szafarnia 11/F8, 80-755 Gdańsk, Poland, KRS 0001192338, NIP 5833546866 ("Hashentic", "we"). The Service is intended for businesses only. By activating an account, installing our apps or using the Service you accept these Terms on behalf of your business ("Customer", "you").

1. The Service

Hashentic lets brands issue unique QR codes and NFC tags for their products, verify them, show a branded verification page to consumers and see scan analytics and counterfeit alerts. The features and limits available to you depend on your plan.

We may improve and change the Service. We will not remove a core feature of a paid plan during a paid period without notice and, where the change is material, a pro-rata refund of prepaid amounts for that feature.

2. Accounts and access

You are responsible for the accuracy of the information you provide, for the people you give access to and for keeping credentials, application tokens and API keys confidential. Notify us without delay at [email protected] if you suspect unauthorised access.

You may not use the Service to make claims about products you do not have the right to authenticate, to mislead consumers, to process data unlawfully or to interfere with the Service or other customers.

3. Trial and Free plan

A new account may start with a 30-day trial with the features and limits shown when you activate it. Each business is entitled to one trial. When the trial ends, the account moves to the Free plan unless you choose a paid plan; nothing is charged automatically.

Codes and tags you have already issued keep verifying on every plan, including Free.

A Free account hosted by us in which nobody has signed in and no QR codes or NFC tags have been issued for 6 months may be archived. We notify the account's e-mail address at least 1 month before; signing in during that month keeps the account active. In an archived account, codes and tags already issued keep verifying, and we restore the account on request to [email protected].

4. Plans, limits and prepaid packs

Paid plans are billed in advance for each billing period, either directly by Hashentic or, for the Shopify app, by Shopify through its billing system. Prices are shown before you confirm and exclude VAT where VAT applies.

Plans billed directly by Hashentic run for a monthly or annual period paid in advance. Before a period ends we send the invoice for the next one, which you pay by bank transfer to our company account; the plan continues for the next period once your payment arrives. To order a plan or a pack, contact our sales team at [email protected] or send a request from the admin panel; the order is confirmed by our invoice. You can cancel at any time by telling us or by not paying the next invoice; the plan then ends with the paid period. When a paid period ends without payment for the next one, the account moves to the Free plan, and a later payment restores the plan for the period paid. Fees already paid are not refunded, except where the law requires it or as stated in section 1. We announce price changes at least 30 days in advance; they apply from your next billing period, and you may cancel before then.

Each plan includes monthly amounts, for example QR codes, NFC tag writes and scans with analytics. Writing more QR codes or NFC tags than your monthly amount requires a prepaid pack; there is no post-paid overage. Verifications are never blocked; above your scan analytics amount, paid enrichment such as geolocation may be skipped.

Prepaid packs are one-time purchases, are used after the monthly included amount, are valid for 12 months until the end of the month of expiry and are used in order of expiry. Unused pack amounts are not refunded, except where the law requires it or as stated in section 1.

When you upgrade, the new limits apply at once. When you downgrade or a paid plan ends, the new limits apply from that moment. Packs you have bought stay valid on any plan other than a trial, including Free, until they are used up or expire. Packs for AI, AI answers and workflow runs are used only while your plan includes the module they top up.

5. Shopify app

If you use the Hashentic app for Shopify, Shopify Inc. processes the charges for plans and packs, and Shopify's terms apply to the billing relationship in addition to these Terms. Subscription changes made in Shopify are reflected in your Hashentic account. Plans billed through Shopify renew automatically every 30 days on Shopify's billing cycle and are changed or cancelled in the app through Shopify's billing; when you cancel or uninstall the app, the paid plan ends at once and the account moves to the Free plan.

If you uninstall the app, we keep your Hashentic account on the Free plan so that codes on products you have already sold keep verifying. When Shopify asks us to erase shop data, we remove the Shopify identifiers linked to your account.

6. Your data and data processing

You own the product data, content and branding you put into the Service ("Customer Data") and grant us the right to use it only to provide, secure and support the Service.

Where we process personal data on your behalf, you are the controller and we are your processor, and this section is our data processing agreement under Article 28 GDPR. It covers scan and verification records (IP address, device and browser, approximate location, time), what people enter in forms and AI questions on your verification pages, your staff accounts and, for the Shopify app, Shopify order, line item, product and variant IDs and order numbers. The people concerned are consumers who scan or ask about your products, your customers and your staff. We process this data only to provide the Service, for as long as you use it, and only on your instructions as given by these Terms and your settings in the Service. You are responsible for having a legal basis and for informing the people concerned. Our own processing as a controller, including your account data, is described in the Privacy Policy.

Our staff with access to the data are bound by confidentiality. We protect the data with HTTPS connections to the Service, encryption of access tokens and keys, a separate database for each workspace, firewalls, role-based access and backups. We help you answer requests from the people concerned and meet your obligations on security, breach notification and impact assessments, notify you without undue delay after becoming aware of a personal data breach affecting your data, and make available the information needed to demonstrate compliance, including for audits agreed in advance.

By default, IP addresses of scans are anonymised after 365 days and AI questions and answers are deleted after 180 days; you can change both periods in your settings. For the Shopify app, uninstalling the app and Shopify's shop/redact and customers/redact requests are handled as described in the Privacy Policy.

You authorise these sub-processors: OVH SAS, with servers in the EU (hosting of the Service and the Shopify app); Cloudflare, Inc. (DNS, content delivery and network protection); ipregistry, EU endpoint (approximate location and IP reputation of scans); OpenAI (AI features of the Service); and Google Workspace, Google Ireland Ltd. (emails sent by the Service). Each is bound by data protection obligations equivalent to these. We inform you in advance of a new sub-processor, and you may object or cancel. Transfers outside the EEA rely on an adequacy decision, such as the EU-U.S. Data Privacy Framework, or on Standard Contractual Clauses.

You can export your data while your account is active. After the account is closed we delete Customer Data within the periods set out in the Privacy Policy, except where we must keep it by law.

7. Tags and physical products

You are responsible for the physical tags, labels and their application to your products, and for choosing tag types suitable for your use. NFC tags without cryptographic protection can be copied and do not prove authenticity. A verification result confirms that a code or tag is valid in your account; it is not a guarantee of the condition or origin of the product beyond that.

8. On-premises deployments

With an on-premises licence you run the Service on infrastructure you control. You are responsible for that infrastructure, its security, backups and availability, and for the data stored on it. Section 6 applies only to the data that reaches our services, such as licence and usage reports, approximate location lookups of scans, AI requests and support requests.

On-premises licences are annual and paid in advance. The software checks its licence with our licence server and reports usage counts at least once a day, so it needs an outbound internet connection to that server. If the licence server cannot be reached for more than 24 hours, the software may stop working, including verification, until the connection is restored, unless an offline licence is agreed in writing for a licence bought directly from Hashentic.

While your licence is active, we provide updates and support for the two most recent releases. You install updates within a reasonable time; we may require an update to fix a security issue or to stay compatible with the licence server.

When an on-premises licence ends without renewal, the installation moves to the Free plan limits so that codes already issued keep verifying. If we stop providing the Service, we will tell you at least 6 months in advance and, for licences bought directly from Hashentic, provide a licence that works without the licence server: on your plan for the rest of your paid period and on the Free plan limits after that, without an end date.

9. Partners and resellers

If you obtained the Service through a Hashentic partner or reseller, your contract, prices, billing and support are with that partner, and the partner's terms apply. These Terms apply to you only where the partner's terms refer to them, and Hashentic is not responsible to you for the partner's own services.

Where a partner hosts the Service on its own infrastructure, the partner is responsible for hosting, security, availability and the processing of personal data on that infrastructure. Data that the installation sends to our services, such as licence and usage reports, approximate location lookups of scans and AI requests, is processed by us and the sub-processors listed in section 6.

Partners and resellers work with Hashentic under a separate partner agreement. To become a partner, contact [email protected].

10. Availability and support

We aim for high availability but do not guarantee uninterrupted operation unless a service level is agreed in writing. We may carry out maintenance, preferably outside business hours, and will inform you of planned downtime that affects verification pages.

Support is provided by e-mail at [email protected]. Response times depend on your plan.

11. Intellectual property

The Service, its software and documentation remain the property of Hashentic and its licensors. You receive a non-exclusive, non-transferable right to use the Service for your business during your subscription.

12. Suspension and termination

You may stop using the Service at any time. We may suspend access if you breach these Terms, if payment fails or if your use endangers the Service or others, and we will tell you why. Verification of codes already issued continues where it is lawful and technically possible.

13. Liability

Nothing in these Terms limits liability that cannot be limited by law, including for intentional damage. Otherwise our total liability for any claim related to the Service is limited to the fees you paid for the Service in the 12 months before the event, and we are not liable for lost profits or indirect damage.

14. Changes to these Terms

We may update these Terms. We will notify you of material changes at least 30 days in advance by e-mail or in the Service. If you do not agree, you may cancel before the changes take effect.

15. Governing law and contact

These Terms are governed by the laws of Poland. Disputes are resolved by the courts competent for our registered office in Gdańsk, unless mandatory law provides otherwise.

Questions about these Terms: [email protected].