Effective date: 30 July 2026

These terms and conditions (the “Terms”) form an agreement between you and Oxiti Ltd and govern access to and use of the Actoki website, customer workspace, application programming interfaces (APIs), protected maps, credits, documentation, support and related services (together, the “Service”). Actoki is the service name and is not a separate company or contracting entity. Actoki is a software service developed, owned and operated by Oxiti Ltd. Registered in England and Wales · Company number 15228422 · Registered office: 5 Canon Court, Institute Street, Bolton, England, BL1 1PZ. In these Terms, “we”, “us” and “our” mean Oxiti Ltd.

1. Agreement and authority

By creating an account, accepting an invitation, purchasing credits, using a key or accessing the Service, you agree to these Terms. If you use the Service for an organisation, you confirm that you have authority to bind it. In that case, "you" includes that organisation and its authorised users.

If you are a consumer, mandatory consumer rights remain unaffected. Some provisions that refer specifically to business customers will not limit rights that cannot legally be excluded.

2. The Service

The Actoki service provides a common platform for services that may include maps, email and domain verification, business and registry information, travel and geographic data, documents, communications, security, conversion and developer utilities. The enabled catalogue, endpoint documentation, prices, limits and maturity can change over time.

We may improve, replace, suspend or withdraw a feature. We will use reasonable efforts to give advance notice of a material adverse change where practical, but urgent security, legal, supplier or operational changes may take effect immediately.

3. Accounts and team members

• Provide accurate information and keep it current.
• Keep credentials confidential, use two-factor authentication and promptly report suspected compromise.
• Account owners control invitations, roles and permissions and are responsible for authorised team members.
• A person may belong to more than one account and may have different account roles in each.
• You must not share a personal login. Use team invitations for each person who needs access.

You are responsible for activity performed through your account or keys unless it results directly from Oxiti Ltd's breach of these Terms or legal duties.

4. Server keys and map publishable keys

Server keys are secret credentials for trusted server-to-server use. Do not place them in browser JavaScript, public repositories, mobile binaries, URLs, screenshots or client-side code. Use separate named keys, narrow scopes, expiry, rate limits and IP/CIDR allow-lists where possible.

Publishable keys are used only for protected map embeds and are expected to be visible in the browser. They do not authenticate general Actoki APIs. Their protection depends on the associated map ID, approved HTTPS origins, entitlements, short-lived tile tokens and usage limits.

We may reject, rate-limit, suspend or revoke a key that is expired, outside its allowed network or scope, compromised, abusive or creating a material security risk. Automated suspicious-activity controls can contain an individual key while leaving other account keys active.

5. Permitted use

You may use the Service to build and operate lawful applications in accordance with these Terms, the documentation, purchased entitlements and applicable law. You must ensure that your notices, consents, contracts and lawful bases cover data you submit and how you use the results.

6. Prohibited use

You must not, and must not help another person to:

• Use the Service unlawfully, fraudulently, deceptively or to infringe another person's rights.
• Send malware, harmful code, spam or abusive communications.
• Attempt unauthorised access, bypass authentication, origin controls, rate limits, credits, entitlements or security monitoring.
• Probe, scan or test vulnerabilities without prior written authorisation.
• Use one account, key, identity or network to evade a suspension or limit.
• Overload, disrupt, reverse engineer or interfere with the Service except where law expressly permits and cannot be excluded.
• Resell raw access, data or provider content where the relevant plan, documentation, licence or upstream terms do not permit it.
• Submit special-category, criminal-offence, payment-card, health or similarly sensitive personal data unless the endpoint is expressly approved for it and appropriate safeguards and agreements are in place.
• Use outputs as the sole basis for decisions that produce legal or similarly significant effects on a person without appropriate human review, validation and lawful authority.
• Use maps, travel, identity, risk or data outputs in safety-critical, emergency, navigation-of-life, medical, legal or financial contexts where an error could cause material harm.

7. Customer data and instructions

You retain rights in data you submit. You grant Oxiti Ltd the limited rights needed to host, transmit, transform and process it to provide, secure and support the Service. You are responsible for having all permissions and lawful bases needed to submit the data and instruct the processing.

Oxiti Ltd may act as your processor for personal data submitted to certain APIs. The Privacy notice, documentation and any agreed data-processing addendum describe relevant processing. You must not ask Oxiti Ltd to process data in a way that breaches law or third-party rights.

8. Service outputs and upstream providers

Some outputs are calculated, generated, cached or obtained from public, open-source or commercial providers. Data can be incomplete, delayed, inaccurate or unavailable. You must test, validate and apply professional judgement before relying on an output.

Upstream licences, attribution rules and acceptable-use limits may apply. You must preserve required attribution and comply with restrictions identified in the documentation. We are not responsible for an upstream provider's independent act or omission, but we will use reasonable care in selecting and integrating providers.

9. Protected maps

Each protected map can have its own publishable key, public ID, approved origins, style, region and limits. You must use accurate HTTPS origins, protect authorised websites from compromise and not remove required map or data attribution. Wildcard origins increase risk and should be used only where genuinely necessary.

Map tiles and geographic information are not guaranteed to be complete, current or suitable for navigation, emergency response, land ownership, legal boundaries or safety-critical decisions.

10. Prices, credits, VAT and payment

Oxiti Ltd is the supplier and invoice issuer for direct purchases of the Service. Prices are shown as tax-inclusive, tax-exclusive or with no tax collected according to the checkout display, your location and status, the type of service and our active tax registrations. Taxes can include UK VAT, EU VAT, GST or US state and local sales taxes. You must provide accurate billing location, customer type and tax-identification information. A valid business tax ID may result in reverse-charge or other business-to-business treatment where the law permits.

Credits are account units used to meter eligible requests. The applicable endpoint charge is shown in the catalogue or documentation and is deducted when the service records billable use. Promotional or free credits may have different conditions from purchased credits and may be changed or withdrawn for future periods.

Stripe provides payment-processing and tax-calculation technology, but Stripe is not the supplier of the Service and does not replace Oxiti Ltd as the contracting party unless checkout expressly identifies a different merchant of record. A payment can remain pending until Stripe confirms it. Refunds may be full or partial and are completed only when confirmed by the payment provider. A refund can reverse associated credits and related tax. If credits have already been used, the account may become negative and access may be blocked until the balance is resolved.

Unless required by law or expressly agreed, credits are not cash, are not transferable between unrelated accounts and are not refundable merely because you choose not to use them. This does not affect rights that cannot legally be excluded.

11. Suspension, blocking and termination

We may suspend a key, user, account or service immediately where reasonably necessary to address security, abuse, non-payment, a negative balance, legal risk, prohibited use or material breach. Where appropriate, we will explain the reason and provide a route to review.

An account with a negative balance may be automatically blocked. The system can schedule deletion or anonymisation after 90 days. Resolving the balance or a successful review may prevent deletion. We may retain invoices, payment, refund, tax, security and audit records where law or legitimate business needs require it.

You may stop using the Service and request closure through support or applicable account controls. Outstanding charges and provisions intended to survive continue after termination.

12. Support access and impersonation

For a recorded support reason, an authorised super administrator may temporarily access the customer experience as a selected account user and may perform actions needed to reproduce or resolve the issue. The customer portal does not display that internal support session. Oxiti Ltd records the real administrator, effective user, account, reason, time and actions in protected audit logs.

Support access does not reveal the user's password, existing secret keys or Stripe secrets. Legal acceptance and other actions may carry additional safeguards even during support access.

13. Security responsibilities

Oxiti Ltd uses reasonable technical and organisational measures designed for the nature of the Service. You must configure the Service securely, keep software and dependencies updated, restrict keys, monitor usage and promptly rotate exposed credentials. Tell us at support@actoki.com if you suspect an incident.

14. Intellectual property

Oxiti Ltd owns the Actoki service, software and branding, or uses relevant materials under licence. We and our licensors retain rights in the Service, documentation and provider materials, excluding your data and third-party material. We grant you a limited, non-exclusive, non-transferable, revocable right to use the Service during the account relationship in accordance with these Terms.

Feedback may be used to improve Actoki without restriction or payment, provided we do not publicly identify you without permission.

15. Confidentiality

Each party must protect non-public information received from the other and use it only for the relationship, except where disclosure is authorised or legally required. This does not cover information already lawfully known, independently developed or public through no breach.

16. Availability and warranties

We aim to provide a reliable Service but do not promise uninterrupted or error-free operation unless a separate service-level agreement says otherwise. Maintenance, attacks, internet conditions, provider outages and events outside reasonable control can affect availability.

To the extent permitted by law, the Service and outputs are provided on an "as available" basis. We do not warrant that an output is complete, current or suitable for a particular purpose that has not been expressly agreed.

17. Liability

Nothing in these Terms excludes or limits liability where it would be unlawful, including liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or mandatory consumer rights.

For a business customer, neither party is liable for indirect or consequential loss, loss of profit, revenue, business, anticipated savings or goodwill, except where such exclusion is prohibited. Subject to the previous paragraph, Oxiti Ltd’s aggregate liability arising from the Service in a 12-month period will not exceed the greater of £100 and the fees paid or payable by the affected account in that period. A separate signed agreement may set a different cap.

You remain responsible for your application, customer relationships, use of outputs, instructions, data and compliance. The limitations reflect the credit-based pricing and the ability to insure and control risk.

18. Indemnity for business customers

If you use the Service in business, you will reimburse Oxiti Ltd for third-party claims, losses and reasonable costs arising from your unlawful data, prohibited use, infringement of rights or material breach, except to the extent caused by Oxiti Ltd.

19. Changes to these Terms

We publish changes as a new version with an effective date and summary. Material changes can require acceptance at the next sign-in. Continued use after acceptance or the stated effective date constitutes agreement to the updated Terms, subject to mandatory law. If you do not agree, stop using the Service and contact support about closure and any applicable balance.

20. General

• You may not assign the agreement without our consent, except as part of a genuine corporate reorganisation or sale with notice. We may assign it to an affiliate or successor that can perform it.
• Failure to enforce a provision is not a waiver.
• If a provision is invalid, it will be adjusted or removed only to the minimum extent needed; the remainder continues.
• These Terms, the order or checkout information, documentation and any signed addendum form the agreement and replace earlier discussions about the same subject.
• No person other than the parties has a right to enforce these Terms unless expressly stated.

21. Governing law and disputes

These Terms are governed by the law of England and Wales. If you are a business, the courts of England and Wales have exclusive jurisdiction. If you are a consumer, mandatory rules may allow you to bring proceedings in the part of the United Kingdom or other country where you live.

Please contact support@actoki.com first so we can try to resolve a concern promptly.

22. Contact

Oxiti Ltd · operator of the Actoki service · Registered in England and Wales · Company number 15228422 · Registered office: 5 Canon Court, Institute Street, Bolton, England, BL1 1PZ · support@actoki.com.