Merchant Terms of Service

Last updated: 5 April 2026

1. Overview

These Merchant Terms govern the relationship between Authentifactor Ltd ("Platform Provider") and businesses ("Merchants" or "Tenants") who use the Authentifactor multi-tenant commerce platform to operate their online storefronts.

2. Service Description

Authentifactor provides Merchants with:

• Hosted, branded e-commerce storefront
• Custom domain with SSL
• Product catalogue and inventory management
• Order processing and fulfilment tools
• Payment processing integration (Stripe, Paystack)
• Admin dashboard with analytics
• SEO tools and sitemap generation
• Usage-based billing transparency

3. Billing Structure

Merchants are billed monthly with three components:

1. Base Retainer — Fixed monthly fee (Basic £49, Standard £99, Premium £199) covering platform maintenance, security updates, and support.
2. Hosting Usage (Vercel) — Variable cost based on actual frontend infrastructure usage: build minutes, serverless invocations, bandwidth, edge requests.
3. Backend Usage (Google Cloud) — Variable cost based on actual backend infrastructure usage: Cloud Run compute, Firestore operations, Cloud Storage.

Usage costs are computed transparently and visible in the Merchant admin dashboard at /admin/billing.

4. Merchant Obligations

• Comply with all applicable laws (consumer protection, advertising standards, product safety)
• Provide accurate product descriptions and pricing
• Fulfil orders in a timely manner
• Handle customer complaints and returns per your own published policies
• Maintain a published Privacy Policy and Terms of Sale on your storefront
• Not sell prohibited, illegal, or counterfeit goods
• Not engage in fraudulent transactions

5. Data Processing

Authentifactor acts as a Data Processor for Merchant customer data. Merchants act as Data Controllers for their customers.

• We process customer data solely to provide the Platform services
• We do not use Merchant customer data for our own marketing
• We implement appropriate technical and organisational security measures
• We will assist Merchants in responding to Data Subject Access Requests
• We notify Merchants of data breaches affecting their customer data within 24 hours

6. Intellectual Property

• Merchants retain full ownership of their content, branding, products, and customer relationships
• Authentifactor retains ownership of the Platform software, infrastructure, and design system
• Merchants grant Authentifactor a limited licence to host and display their content

7. Availability & SLA

8. Termination

• Either party may terminate with 30 days written notice
• Authentifactor may suspend for non-payment after 14 days past due
• Upon termination, Merchants receive a 30-day data export window
• After the export window, all Merchant data is permanently deleted

9. Limitation of Liability

Authentifactor's total liability is limited to the fees paid by the Merchant in the preceding 12 months. We are not liable for indirect, consequential, or punitive damages, lost profits, or third-party claims.

10. Governing Law

These Terms are governed by the laws of England and Wales.

11. Contact

Authentifactor Ltd
Email: legal@authentifactor.com