Terms of service

These terms are the agreement between you and Kashif Shahzad, sole proprietor, trading as Oreoasis (Pakistan) for the use of Oreoasis. We've written them in plain words on purpose — if a clause reads like it's hiding something, email founders@oreoasis.com and we'll explain it or fix it.

Oreoasis is pre-launch. The free tier and the public verify pages run; paid checkout opens when Merchant-of-Record approval lands, and until then upgrading joins a waitlist.

What Oreoasis does

You sign an action in your own process with your own key and send it to us. We verify the signature, append the receipt to your tamper-evident chain, anchor the chain to a public transparency log, and publish a verify link anyone can open. That's the service. We don't audit your work, certify your business, or vouch for whether what your agent did was correct — we prove that a specific action was recorded, signed by your key, at a point in time nobody can move.

Your account

• You must be able to form a contract where you live, and you're responsible for everything done under your account.
• API keys are shown once and hashed at rest. Keep them secret; rotate them from the dashboard if they leak.
• Your signing key is yours. Receipts are signed before they reach us — we never need, and never ask for, your agent's private key.
• One account per organization. Don't share credentials across companies you don't control.

What you may not do

• Publish personal data, secrets, or unlawful content in a receipt payload. Receipts are public by design — hash it, don't paste it.
• Use receipts to impersonate someone else, or to claim work you didn't do.
• Attack the service: no probing other tenants' data, no attempts to forge or replay chain entries, no load that degrades the service for others. (Good-faith security research is welcome — see our security policy.)
• Resell raw ingest capacity as your own receipts service. Building a product on top of Oreoasis is fine and encouraged.

We can suspend an account that's doing one of these. If we do, we'll tell you why, and the receipts you already issued stay verifiable — see below.

Plans, payment, and the Merchant of Record

• Paid plans are sold through a Merchant of Record (Paddle, with Dodo Payments as a secondary rail). The MoR is the seller of record: they take the payment, charge the right VAT or sales tax, issue the invoice, and handle chargebacks. Your card statement will show them, not us.
• Plans are priced per warranted outcome, never per seat. Monthly plans renew monthly; annual plans renew annually. Cancel any time — access runs to the end of the period you paid for.
• Paid features are: history retention windows, per-receipt anchoring, evidence exports, and removing the "Verified via Oreoasis" footer. Nothing else keys off your plan.
• If we change prices, existing subscriptions keep their price until you change plan. Founding-customer pricing, where offered, is locked for the life of the subscription.

The promises we don't break

• Verification is free forever — for anyone, on any plan, including cancelled accounts. We will never put the public verify page, bundle, or verdict behind a payment.
• Verify links never die. A receipt you issue stays verifiable at its public link, permanently. Retention windows bound your authenticated access to your own history (API, dashboard, exports) — they never expire the public link.
• You can export everything, any time, in an open format that verifies offline with an open-source verifier we don't control.
• We never sell your data and we never use your receipt contents to train models.

These four are the product. If we ever break one, that's not a policy change — it's a broken promise, and you should say so in public.

Availability, and what we don't promise

There is no uptime SLA on the self-serve tiers today, and we won't pretend otherwise — we're a small operation and we'd rather under-claim. The architecture is deliberately built so an outage doesn't cost you your proof: receipts you've exported verify with no contact with us at all. The service is provided "as is", without warranties beyond those the law gives you and cannot exclude.

Liability

To the extent the law allows, our total liability for any claim is capped at what you paid us in the twelve months before it arose (which, on the free tier, is nothing). We're not liable for indirect or consequential loss. Nothing here limits liability for fraud, or for anything that can't lawfully be limited.

Ending it

You can close your account whenever you like — export first, and keep in mind your issued receipts stay publicly verifiable (that's the promise, and it applies after you leave). We can end an account for a breach of these terms, or with reasonable notice if we discontinue the service; in that case we refund the unused part of what you paid and we keep the verify links alive.

Changes, and the law that applies

If we change these terms materially, we'll email account holders before it takes effect. These terms are governed by the laws of Pakistan, with the courts of Islamabad having jurisdiction. Nothing in them removes a consumer right you hold where you live.

Related: Privacy · Refunds · Abuse & takedown · Trust