Terms of service
Updated 29 September 2026
Draft pending legal review. Items marked [COMPLETAR: …] must be filled in before publication.
This is a translation. In case of discrepancy, the Spanish version prevails.
1. Parties and acceptance
1.1. These terms govern the use of Constaia, a service provided by Add On Dev Solutions S.L., tax ID B22654610, with registered office at Calle Espronceda, nº 2, planta 1, puerta C, 21001 Huelva (Huelva), Spain ("Constaia", "we").
1.2. By creating an account, generating an API key or using the service, you accept these terms on your own behalf or on behalf of the organisation you represent ("customer", "you"). If you accept on behalf of an organisation, you represent that you have authority to bind it.
1.3. The service is intended for businesses, professionals, organisations and public bodies. It is not intended for consumers. [COMPLETAR: confirm whether consumers are accepted; if so, add pre-contractual information and the right of withdrawal]
1.4. A signed Enterprise contract prevails over these terms where it provides otherwise.
2. Description of the service
2.1. Constaia is an API to classify documents, extract their data and check whether they meet the conditions you specify (expected type, validity, age, holder, required fields, etc.). It returns a verdict (valid, invalid or review), reasons, confidence levels, extracted fields, checks and warnings.
2.2. The service includes the API (https://api.constaia.com/v1), the dashboard (https://app.constaia.com), the documentation and the SDKs and tools we publish. Some tools are marked as preliminary and may change without notice.
2.3. Service limits. Constaia is not a biometric identity verification (KYC) service, does not perform face matching and does not verify the authenticity of documents. A correct check digit or MRZ does not prove that a document is authentic. Verdicts, confidence scores and warnings are automatically generated indications that may contain errors. You decide what to do with each result and you are responsible for that decision.
3. Accounts and API keys
3.1. You must provide accurate data and keep it up to date. You are responsible for activity carried out with your account and your keys.
3.2. ck_live_… keys operate in live mode and consume credits. ck_test_… keys use a simulated provider, consume no credits and do not analyse real documents.
3.3. Keys are shown only once and we store them only as hashes. Keep them secret, do not include them in client-side code (browsers or apps) and revoke them from the dashboard if you suspect a leak. We are not liable for the use of leaked keys for reasons not attributable to us.
3.4. We may apply technical limits (for example, requests per second, file size and number of pages) described in the documentation.
4. Credits and pricing
4.1. The service is paid for with credits:
- 1 credit = 1 analysis of a document of up to 2 pages (an ID card front and back counts as 1 credit).
- +1 credit for every 2 additional pages.
classify= 0.2 credits.- Exports are included.
4.2. We do not charge for analyses that fail due to our error, or for those rejected for insufficient quality (low_quality) before OCR.
4.3. Free plan: 250 credits per month, renewed every month.
4.4. Credit packs (one-off payment):
| Pack | Price | Credits |
|---|---|---|
| Pack 1,000 | €30 | 1,000 |
| Pack 5,000 | €125 | 5,000 |
| Pack 25,000 | €500 | 25,000 |
| Pack 100,000 | €1,900 | 100,000 |
Pack credits expire 12 months after purchase. Prices exclude VAT, which will be added where applicable.
4.5. Enterprise plan: custom pricing, volume, SLA and terms, by contract.
4.6. Credits are not money, bear no interest and cannot be transferred to other accounts. [COMPLETAR: refund policy for unused packs]
4.7. We may change prices for future purchases with prior notice. Credits already purchased keep their conditions.
5. Payments
5.1. Payments are processed by Stripe. You enter card details directly in Stripe; we do not receive them.
5.2. Credits are added to your balance when Stripe confirms the payment. Invoices are issued automatically and are available in the dashboard.
6. Your data and documents
6.1. You are the controller of the personal data contained in the documents you send. We act as processor under the Data processing agreement (DPA), which forms part of these terms.
6.2. You must have a legal basis to process that data, inform data subjects and send only the documents needed for your purpose.
6.3. You choose retention with the options storage (none by default, temporary or persistent), ttl_hours and keep_results. With persistent, the file is kept until you delete it.
6.4. Constaia does not use documents or results to train models.
6.5. You keep all rights to your documents and results. You grant us only the permissions needed to provide the service.
7. Acceptable use
You may not use Constaia to:
- a) carry out unlawful activities or process documents without a legal basis;
- b) circumvent legal or regulatory controls, or create, alter or validate forged documents;
- c) surveil or track people, or build profiles not permitted by law;
- d) take decisions based solely on the automated results that produce legal effects on or significantly affect individuals, without the human involvement required by law (Art. 22 GDPR);
- e) present the results as proof of authenticity or identity;
- f) attack, overload, reverse-engineer or test the security of the service without written authorisation;
- g) resell the service without prior agreement
[COMPLETAR: confirm whether resale or integration into third-party products is allowed].
8. Availability and support
8.1. We provide the service with professional diligence but without a service level agreement (SLA), except under Enterprise contracts.
8.2. We may carry out maintenance, change infrastructure or AI providers within the EU (with the notices provided for in the DPA) and evolve the API. We will announce in advance any breaking changes to version v1.
9. Liability
9.1. The service is provided "as is". We do not guarantee that results are error-free or fit for a particular purpose.
9.2. We are not liable for decisions you take based on the results, or for loss of profit, loss of data or business, or indirect damages.
9.3. Our total liability on any ground is limited to the amount you paid us in the 12 months preceding the event giving rise to it. [COMPLETAR: confirm cap with legal counsel]
9.4. These limitations do not apply in cases of wilful misconduct or gross negligence, or where the law does not allow them.
9.5. You agree to hold us harmless from third-party claims arising from your breach of these terms or of data protection law in your capacity as controller.
10. Suspension and termination
10.1. You may stop using the service and close your account at any time [COMPLETAR: state how: from the dashboard or by email].
10.2. We may suspend or close an account or a key if you breach these terms, if there is a risk to the security of the service or third parties, or if required by law. Except in urgent cases, we will notify you first and give you the opportunity to remedy it.
10.3. On termination, we will delete or return data in accordance with the DPA. Unused credits are forfeited unless termination is due to our breach. [COMPLETAR: confirm]
11. Changes to the terms
We may amend these terms. We will notify you of significant changes at least 30 days in advance by email or in the dashboard. If you do not agree, you may close your account before they take effect.
12. Governing law and jurisdiction
These terms are governed by Spanish law. The parties submit to the courts of Huelva (Spain), unless the customer is a consumer, in which case the courts of the consumer's domicile shall have jurisdiction as provided by law.