Policies & terms.

Terms of Service

Last updated: May 2026

1. Acceptance

By accessing or using the ZapRemit API and related services ("Services"), you ("Partner") agree to be bound by these Terms of Service ("Terms"). If you are entering into these Terms on behalf of a company or other legal entity, you represent that you have authority to bind that entity. If you do not agree to these Terms, do not use the Services.

2. Services

ZapRemit provides an API that enables Partners to initiate cross-border payment payouts via the Bitcoin Lightning Network to supported destination corridors. Services are provided to businesses only and are not available to consumers directly. The specific corridors, payout methods, and features available to a Partner are defined in the applicable service agreement.

3. Eligibility and Licensing

Partners must:

• Be a duly incorporated legal entity in good standing;
• Hold all applicable money transmission licenses, payment institution authorizations, or equivalent regulatory approvals required to operate in their jurisdiction(s);
• Maintain a compliant KYC/AML program covering their end users; and
• Not be subject to applicable sanctions programs.

ZapRemit reserves the right to verify eligibility and to suspend or terminate access if a Partner fails to maintain these requirements.

4. API Use and Acceptable Use

Partners may use the Services solely for legitimate business payment purposes as described in their service agreement. Partners must not:

• Use the Services to process transactions on behalf of unlicensed third parties;
• Circumvent applicable transaction limits, sanctions screens, or compliance controls;
• Attempt to reverse-engineer, decompile, or extract source code from the API;
• Use the Services in connection with illegal gambling, weapons, or other prohibited categories; or
• Resell or sublicense API access without prior written consent.

5. Fees and Payment

Fees are as set out in the Partner's service agreement. ZapRemit earns a margin on foreign exchange conversion applied to each transaction, plus any per-transaction processing fees agreed in writing. All fees are non-refundable except as required by law or as expressly stated in the service agreement.

6. Intellectual Property

ZapRemit retains all rights, title, and interest in the Services, including the API, documentation, and underlying technology. Partners retain ownership of their own data. Partners are granted a limited, non-exclusive, non-transferable license to access and use the API solely for the purposes set out in these Terms.

7. Confidentiality

Each party agrees to keep confidential the other party's non-public business information disclosed in connection with the Services, and not to disclose it to third parties without prior written consent, except as required by law.

8. Limitation of Liability

To the maximum extent permitted by applicable law, ZapRemit's aggregate liability to a Partner for any claim arising out of or relating to these Terms or the Services shall not exceed the fees paid by that Partner in the three months preceding the claim. ZapRemit shall not be liable for any indirect, consequential, incidental, or punitive damages, including lost profits or loss of data, even if advised of the possibility of such damages.

9. Termination

Either party may terminate the service agreement on written notice as specified therein. ZapRemit may suspend or terminate API access immediately if a Partner breaches these Terms, fails to maintain required licenses, or if continued access presents a compliance or legal risk. Upon termination, Sections 6, 7, 8, and 10 survive.

10. Governing Law

These Terms are governed by the laws of [Jurisdiction], without regard to conflict of law principles. Any disputes shall be resolved by binding arbitration in [City], except that either party may seek injunctive or other equitable relief in any court of competent jurisdiction.

Privacy Policy

Last updated: May 2026

1. Scope

This Privacy Policy describes how ZapRemit collects, uses, and protects information in connection with the Services. It applies to Partner companies and their authorized representatives. ZapRemit acts as a data processor for transaction data submitted via the API; Partners are responsible for their own end-user privacy obligations.

2. Information We Collect

We collect:

• Account information — business name, contact details, authorized user names and email addresses;
• API usage data — request logs, timestamps, IP addresses, and error events;
• Transaction metadata — amount, currency, corridor, and status of payouts initiated via the API (not end-user personal data beyond what is required for payout execution); and
• Communications — emails and messages sent to ZapRemit support or business contacts.

3. How We Use Information

• To provide, operate, and improve the Services;
• To comply with applicable laws, including AML/KYC obligations;
• To detect and prevent fraud, abuse, and security incidents;
• To communicate with Partners about the Services, including product updates and billing; and
• To resolve disputes and enforce our agreements.

4. Data Sharing

We do not sell Partner data. We share information only:

• With downstream payment partners and local payout networks as necessary to execute transactions;
• With infrastructure providers (cloud hosting, monitoring) under appropriate data processing agreements;
• With regulators or law enforcement where required by applicable law; and
• In connection with a merger, acquisition, or sale of assets, with appropriate notice.

5. Data Retention

We retain transaction records for a minimum of five years to satisfy AML record-keeping requirements. Account and API usage data is retained for the duration of the service relationship plus three years, or as required by law.

6. Security

We implement industry-standard technical and organizational measures to protect data, including encryption in transit and at rest, access controls, and regular security reviews. No system is completely secure; Partners should report any suspected security incidents to [email protected] immediately.

7. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete personal data we hold about you, or to object to certain processing. To exercise these rights, contact [email protected]. We will respond within 30 days.

8. Contact

For privacy questions or concerns: [email protected].

AML / KYC Policy

Last updated: May 2026

Overview

ZapRemit is committed to preventing the use of its Services for money laundering, terrorist financing, sanctions evasion, or any other financial crime. This policy outlines our approach and the obligations we place on Partner platforms.

1. Partner KYC Obligations

ZapRemit does not onboard end consumers directly. Partners are responsible for conducting Know Your Customer (KYC) due diligence on their own users in accordance with applicable law. Partners must:

• Verify the identity of users initiating or receiving payments above applicable thresholds;
• Apply a risk-based approach to customer due diligence;
• Conduct enhanced due diligence for higher-risk customers or transactions; and
• Maintain KYC records and make them available to ZapRemit upon request for compliance purposes.

2. Sanctions Compliance

ZapRemit screens all transactions and counterparties against applicable sanctions lists, including those maintained by OFAC (US), HM Treasury (UK), the EU, and the UN. Partners must not knowingly submit transactions involving sanctioned individuals, entities, or jurisdictions. ZapRemit will block or reverse any transaction identified as potentially sanctions-violating and may report such activity to relevant authorities.

3. Transaction Monitoring

ZapRemit monitors transaction activity for patterns indicative of money laundering, fraud, or other financial crime, including:

• Unusual transaction volumes or frequencies inconsistent with stated business purpose;
• Structuring or layering patterns;
• High-risk corridor concentrations; and
• Rapid cycling of funds.

ZapRemit reserves the right to request additional information about any transaction, to delay or block suspicious transactions, and to terminate access to Partners whose transaction patterns present unacceptable risk.

4. Suspicious Activity Reporting

Where required by applicable law, ZapRemit files suspicious activity reports (SARs) or equivalent reports with relevant financial intelligence units. Partners must promptly notify ZapRemit of any suspicious activity they identify relating to transactions processed via the API, and must not tip off customers that a SAR has been or may be filed.

5. Prohibited Activities

The following are prohibited on the ZapRemit platform:

• Money laundering or any activity designed to conceal the origin of funds;
• Terrorist financing;
• Sanctions evasion;
• Human trafficking or exploitation;
• Transactions related to illegal weapons, narcotics, or other prohibited goods; and
• Unlicensed money services business activity.

6. Record Keeping

ZapRemit retains transaction records, screening results, and compliance documentation for a minimum of five years in accordance with applicable AML record-keeping requirements. Partners must maintain equivalent records for their own customer due diligence files.

7. Training and Governance

ZapRemit maintains an internal AML compliance program with designated compliance personnel, regular staff training, and periodic independent review. Partners are expected to maintain equivalent internal controls appropriate to their business and risk profile.

8. Contact

Compliance inquiries, SAR-related questions, or concerns about potential financial crime: [email protected]