Terms and Conditions

These Terms and Conditions ("Agreement") constitute a legal agreement between you ("Developer", "You", or "Your") and Pocket Pass Digital, OPC. ("Company", "We", "Us", or "Our"), governing Your use of the DigiFI Open Banking API Accelerator platform, including the Developer Portal, APIs, documentation, and related services (collectively, the "Platform"). By registering for an account or using the Platform, You agree to be bound by this Agreement.

1. Definitions

1.1. "API" means the DigiFI Open Banking API Accelerator application programming interfaces, including all endpoints, SDKs, and related tools made available through the Platform.

1.2. "Organization" means the legal entity or business that You represent when registering on the Platform. Each Organization is the primary tenant and billing entity.

1.3. "Subscription Plan" means the service tier selected by Your Organization, which determines Your API access limits, available features, environment access, and pricing. Plans are published in two catalogues: the partner developer plans (Sandbox, Sandbox Plus, Enterprise) and the service provider plans (Provider Sandbox, Provider Certification, Provider Live, Provider Network). An Organization may only subscribe to plans in the catalogue for its own kind.

1.4. "Sandbox Environment" means the Platform environment served by provisioned test data, in which no live financial transaction is executed. "Production Environment" means the Platform environment integrated with live bank backend systems.

1.5. "Application" means the software application registered by You on the Platform to consume the APIs, identified by a unique Client ID.

1.6. "End User" means any individual or entity that interacts with Your Application.

1.7. "Service Provider" means a bank, electronic money institution or other regulated institution enrolled on the Platform to provide the underlying financial services. "Enrolment" means the application by which such an institution registers itself, comprising its legal entity details, regulatory authorisation, contacts, supporting evidence and signed declaration, and Our decision on it.

2. Account Registration and Eligibility

2.1. To use the Platform, You must register as a partner developer by providing accurate information including Your name, company details, email address, and role. You must be of legal age and authorized to act on behalf of Your Organization.

2.2. Upon registration, an Organization is automatically created for Your company, and You are designated as the Organization Owner. You are responsible for all activities conducted under Your Organization.

2.3. Your account requires email verification and activation by Our staff before You can access protected features of the Platform.

2.4. You agree to maintain the confidentiality of Your account credentials, API tokens, and Client IDs. You must promptly notify Us of any unauthorized access to Your account.

2.5. An institution registering as a Service Provider does so through the service provider sign-up rather than the partner developer sign-up. Its account is activated on confirmation of the applicant's email address; what is subject to Our review is the Enrolment, not the account. Until the Enrolment is approved, the Organization may complete and submit it but may not call the APIs or register Applications.

2.6. We may request further information in support of an Enrolment, refuse an Enrolment, or suspend an approved Service Provider where its authorisation lapses or is withdrawn, in each case stating Our reason. A refused institution may correct and resubmit its Enrolment.

3. API Services and Acceptable Use

3.1. The Platform provides RESTful Open Banking APIs covering account information, payment initiation, fund confirmation, card management, identity verification, notifications, and open data services.

3.2. You agree to use the APIs solely for lawful purposes and in compliance with all applicable laws, regulations, and industry standards, including anti-money laundering (AML) and data protection laws.

3.3. You shall not: (a) reverse engineer, decompile, or attempt to extract the source code of the APIs; (b) use the APIs to build a competing product or service; (c) exceed the rate limits or usage quotas of Your Subscription Plan; (d) share, resell, or sublicense API access to third parties without Our written consent; (e) transmit malicious code, spam, or fraudulent data through the APIs; or (f) attempt to circumvent any security measures, authentication mechanisms, or access controls.

3.4. You are responsible for ensuring that Your Applications comply with this Agreement and that Your End Users are informed of and comply with relevant terms.

4. Subscription Plans and Billing

4.1. The Platform offers three Subscription Plans to partner developers:

• Sandbox (Free): 1,000 API calls/month, up to 25 accounts and 2 applications, with 2 test customers provisioned per Application. Includes core API features. Sandbox Environment only. No payment required.
• Sandbox Plus ($79/month): 50,000 API calls/month, up to 250 accounts and 10 applications, with 8 test customers provisioned per Application. Includes all features: card management, scheduled payments, and bulk payments. Sandbox Environment only.
• Enterprise ($299/month): Unlimited API calls, accounts, and applications, with the full test-customer roster provisioned per Application. Includes all features, priority support, and access to the Production Environment.

4.1.1. Accounts provisioned as sandbox test data count towards the account limit of Your Subscription Plan. Where Your remaining account allowance is insufficient, a smaller dataset, or none, is provisioned.

4.1.2. The Platform offers four separate Subscription Plans to Service Providers. These plans are priced against the traffic an institution's own customers generate, and each carries every API feature, since an institution cannot certify a service it is not permitted to call:

• Provider Sandbox (Free): 5,000 API calls/month, up to 100 accounts and 5 applications, with 8 test customers provisioned per Application. Includes all API features. Sandbox Environment only. No payment required. Every enrolling institution starts on this plan.
• Provider Certification ($199/month): 50,000 API calls/month, up to 500 accounts and 15 applications, with the full test-customer roster provisioned per Application. Includes all API features. Sandbox Environment only. Intended for institutions running extended integration and certification against the Sandbox Environment, and available before Your Enrolment is approved.
• Provider Live ($499/month): 250,000 API calls/month, unlimited accounts and up to 25 applications, with the full test-customer roster provisioned per Application. Includes all API features and access to the Production Environment.
• Provider Network ($1499/month): Unlimited API calls, accounts, applications and transactions, with the full test-customer roster provisioned per Application. Includes all API features, access to the Production Environment, and priority support.

4.1.3. The two catalogues are not interchangeable. A partner developer Organization may not subscribe to a service provider plan, and a Service Provider Organization may not subscribe to a partner developer plan.

4.2. The Sandbox, Sandbox Plus, Provider Sandbox and Provider Certification plans grant access to the Sandbox Environment only. Access to the Production Environment is included with the Enterprise plan for partner developers, and with the Provider Live and Provider Network plans for Service Providers.

4.2.1. A Service Provider may subscribe to a plan granting Production Environment access only once its Enrolment has been approved. A Subscription Plan is not an authorisation, and We do not sell production access in advance of the review that grants it.

4.3. Integration of the Platform with Your own backend systems, in any environment, is not included in any Subscription Plan. Such integration is scoped, quoted, and contracted separately as an implementation project.

4.4. Paid Subscription Plans are billed monthly through PayPal. By subscribing to a paid plan, You authorize recurring monthly payments through Your PayPal account. All prices are in US Dollars (USD).

4.5. You may upgrade or downgrade Your Subscription Plan at any time via the Subscription dashboard. Plan changes take effect immediately. Downgrades may result in reduced access to features and lower usage limits.

4.6. Cancellation of a paid plan takes effect immediately. Your Organization will be automatically downgraded to the free plan of its own catalogue — Sandbox for a partner developer, Provider Sandbox for a Service Provider. No prorated refunds are provided for the remaining billing period.

4.7. We reserve the right to modify pricing with 30 days' prior notice. Continued use of the Platform after a price change constitutes acceptance of the new pricing.

4.8. A change to the published price of a Subscription Plan does not change the price of an existing subscription. Organizations already subscribed continue to be billed at the price in effect when they subscribed, until they choose to change plan.

4.9. Changing the Subscription Plan and maintaining billing details are restricted to the Owner and Administrators of Your Organization.

5. Usage Limits and Rate Limiting

5.1. Each Subscription Plan has defined limits on API calls per month, number of accounts, number of applications, and transactions per month. These limits are enforced automatically.

5.2. If Your Organization exceeds the API call limit for Your current plan, subsequent API requests will receive a 429 Too Many Requests response until the next billing period or until You upgrade Your plan.

5.3. Attempting to create resources (accounts, applications) beyond Your plan's limits will result in a 403 Forbidden response.

5.4. Feature-gated APIs (card management, scheduled payments, bulk payments) are only accessible on plans that include those features. Accessing restricted features returns a 403 Forbidden response with guidance to upgrade.

6. Application Registration and API Access

6.1. To access the APIs, You must register an Application through the Developer Portal. Each Application is subject to review and approval by Our staff.

6.1.1. Registering an Application provisions a set of fictional test customers and accounts for it in the Sandbox Environment, sized according to Your Subscription Plan. This data is provided for development and testing only, does not represent real persons or real funds, and may be edited or reset by the Owner and Administrators of Your Organization. Revoking an Application releases its test data.

6.2. Upon approval, Your Application receives a Client ID for use with token-based API authentication. Token credentials must be kept confidential and transmitted only over encrypted connections (HTTPS).

6.3. We reserve the right to revoke Application access at any time if You violate this Agreement, or for security or operational reasons. Revocation deletes the associated API Client and invalidates all active tokens.

6.4. The number of Applications You may register is limited by Your Subscription Plan.

6.5. Applications, accounts, sandbox test data, support tickets and billing records belong to Your Organization rather than to the individual member who created them. They are accessible to the members of Your Organization and are not accessible to any other Organization.

7. Data and Privacy

7.1. Your use of the Platform is also governed by Our Privacy Policy, which describes how We collect, use, and protect Your information.

7.2. You are responsible for the data You transmit through the APIs and must comply with all applicable data protection laws in Your jurisdiction, including obtaining necessary consents from Your End Users.

7.3. We process data within the scope necessary to provide the Platform services and enforce Subscription Plan limits. Organization-level usage data (API call counts, resource counts) is tracked for billing and enforcement purposes.

8. Intellectual Property

8.1. The Platform, APIs, documentation, and all related intellectual property are and remain the exclusive property of Pocket Pass Digital, OPC. This Agreement grants You a limited, non-exclusive, non-transferable, revocable license to use the APIs in accordance with Your Subscription Plan.

8.2. You retain ownership of Your Applications and any data You transmit through the APIs. By using the Platform, You grant Us a limited license to process Your data as necessary to operate the Platform.

8.3. You may not use Our trademarks, logos, or branding without prior written consent.

9. Service Availability and Support

9.1. We strive to maintain high availability of the Platform but do not guarantee uninterrupted service. Planned maintenance will be communicated in advance when practicable.

9.2. Support is provided through the Customer Support API and the Developer Portal. Enterprise plan subscribers receive priority support.

9.3. We may modify, update, or discontinue features of the Platform at any time. Material changes to the APIs will be communicated with reasonable advance notice.

10. Limitation of Liability

10.1. To the fullest extent permitted by law, Pocket Pass Digital shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, or business opportunities arising from Your use of the Platform.

10.2. Our total liability for any claim arising from this Agreement shall not exceed the amount You paid to Us in the twelve (12) months preceding the claim.

10.3. The Platform is provided "as is" and "as available" without warranties of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement.

10.4. We are not liable for the actions, errors, or omissions of third-party services integrated with the Platform, including PayPal payment processing.

11. Indemnification

11.1. You agree to indemnify, defend, and hold harmless Pocket Pass Digital, its officers, directors, employees, and agents from any claims, damages, losses, or expenses (including reasonable legal fees) arising from: (a) Your use of the Platform; (b) Your violation of this Agreement; (c) Your violation of applicable laws; or (d) any third-party claims related to Your Applications or End Users.

12. Termination

12.1. You may close Your account at any time by contacting Us. Active paid subscriptions should be cancelled via the Subscription dashboard before account closure.

12.2. We reserve the right to suspend or terminate Your access to the Platform at any time if You breach this Agreement, fail to pay applicable fees, or for security or legal reasons.

12.3. Upon termination: (a) Your API access is immediately revoked and all tokens are invalidated; (b) Your Organization data is retained for 90 days, after which it may be permanently deleted; (c) You remain liable for any outstanding fees.

13. Amendments

13.1. We reserve the right to modify this Agreement at any time. Material changes will be communicated via email to the address associated with Your account or through the Platform at least 30 days before taking effect.

13.2. Your continued use of the Platform after the effective date of any changes constitutes acceptance of the revised Agreement. If You do not agree with the changes, You must stop using the Platform and close Your account.

14. Governing Law and Dispute Resolution

14.1. This Agreement shall be governed by and construed in accordance with the laws of the Republic of the Philippines.

14.2. Any dispute arising out of or relating to this Agreement shall first be resolved through good-faith negotiation. If negotiation fails, disputes shall be resolved through binding arbitration administered in Metro Manila, Philippines, in accordance with the Alternative Dispute Resolution Act of 2004 (R.A. No. 9285).

By registering for an account or using the Platform, You acknowledge that You have read, understood, and agree to be bound by this Agreement.

Effective date: April 9, 2026.