Terms of Service

1. Who we are and how these Terms apply

VexoraGate (the Service) is operated by the VexoraGate team (we, us, our). The Service is available at vexoragate.com and its subdomains (including the dashboard, the merchant API at api.vexoragate.com, the hosted payment pages at pay.vexoragate.com), through our Telegram bot and Mini App, and through any other channel we operate under the VexoraGate name.

By creating an account, by using the API, or by otherwise using the Service you accept these Terms, our Privacy Policy, our AML & Sanctions Policy, our Acceptable Use Policy, our Cookie Policy and the fees published on our Fees & limits page, which together form the agreement between you and us. If you do not agree, do not use the Service.

If you use the Service on behalf of a company or another organisation, you confirm that you are authorised to accept these Terms on its behalf, and “you” then also means that organisation.

2. Definitions

• Account — your VexoraGate user account, protected by your email, password and two-factor authentication (2FA).
• Personal wallet — the balances of your Account intended for personal, non-commercial use.
• Merchant and business balance — a business profile you create inside your Account to accept payments from your own customers, and the balances credited to it.
• Supported asset — a virtual asset and network combination we currently support: USDT on Tron (TRC20), USDT on BNB Smart Chain (BEP20) and TRX on Tron. The list may change; the current list is always shown on the deposit page and the Fees & limits page.
• Deposit — a blockchain transfer of a Supported asset to an address we generated for you or for your Merchant.
• Withdrawal — a transfer you request from your Personal wallet to an external address. Payout — a transfer a Merchant requests from its business balance to an external address, including refunds.
• Invoice — a payment request created by a Merchant (in the dashboard or through the API) and paid by a Payer on a hosted payment page. Static wallet — a permanent deposit address assigned by a Merchant to one of its customers or orders.
• Payer — a person who pays an Invoice or sends funds to a Static wallet. Payers are customers of the Merchant, not of VexoraGate, unless they also hold an Account.
• API — our merchant programming interface, including webhooks (signed callbacks we send to a Merchant’s server).
• Business day — a day other than a Saturday, Sunday or public holiday.

3. Eligibility

To use the Service you must be at least 18 years old (or the age of majority where you live, if higher) and have full legal capacity to enter into a binding contract.

You may not use the Service if you are subject to sanctions administered by the United Nations, the European Union, the United Kingdom, the United States or any other authority that applies to us, if you are owned or controlled by such a person, or if you act on their behalf. You may not use the Service from, or for the benefit of anyone located in, a country or territory where its use is prohibited by law. It is your responsibility to make sure that using the Service is lawful where you live.

One natural person may hold one Account. A business may create several Merchants inside one Account. Accounts are personal: you may not sell, rent, lend or transfer your Account or give anyone else access to it.

We may refuse to open an Account, or close an Account, if we reasonably believe that these eligibility rules are not met.

4. Your Account and its security

You register with an email address and a password. You must confirm your email address before deposit addresses are issued to you, and you must enable two-factor authentication (2FA) with an authenticator app before you can request withdrawals or generate merchant API keys.

You are responsible for keeping your password, your 2FA device and its backup, your email account and your API keys confidential and secure. Anyone who logs in with your credentials, or uses your API keys, is treated as acting on your behalf. We will never ask you for your password or 2FA code — not by email, not in Telegram, not by phone.

To protect you, we apply automatic security locks: for example, withdrawals are blocked for 24 hours after a password change, a password reset or re-enabling 2FA, and payouts are blocked for 24 hours after a new payout API key is generated. We notify you of new logins and of security changes.

Tell us immediately at [email protected] if you suspect that your Account, email or API keys have been compromised. Until we have been told and have had a reasonable opportunity to act, we are not responsible for operations made with your valid credentials.

Keep your email address up to date: it is our main channel for confirmations and legal notices.

5. No identity verification at sign-up; information requests

VexoraGate does not require identity verification (KYC) to open or use an Account: we do not ask for identity documents, selfies or proof of address at sign-up. Merchants go through a moderation of their project (website, what they sell and how), which is a review of the business, not an identity check.

This does not mean that the Service is anonymous or may be used without rules. Blockchain transactions are public, and we keep records of activity on your Account as described in the Privacy Policy. Like any payment service, we apply the risk-based measures described in our AML & Sanctions Policy.

In specific cases — for example when funds appear to be linked to fraud, theft, ransomware, sanctions or another crime, when we receive a lawful request from an authority, or when a Merchant’s activity does not match its moderation — we may ask you for information about the origin of funds, the purpose of a transaction or the nature of your business. If you do not provide it, or if it does not resolve our concerns, we may take the measures listed in section 18.

If a law that applies to us in the future requires identity verification for some or all users, we will announce it on the website in advance where possible and explain what it means for existing Accounts.

6. Personal wallet and business use

The Personal wallet is for your own, personal use: receiving, holding and sending Supported assets for yourself. You must not use the Personal wallet to accept payments from customers of a business, to collect funds for third parties, or to operate any commercial service.

To accept payments from customers you must create a Merchant, pass moderation and use the business features (Invoices, hosted payment pages, Static wallets, Payouts and the API). Business balances and personal balances are kept separately; you can move funds between them instantly with the transfer feature, subject to the transfer fee published on the Fees & limits page.

If we see that a Personal wallet is used commercially, we may ask you to move that activity to a Merchant and may limit the Personal wallet until you do.

7. Custody: how your balance is held

VexoraGate is a custodial service. The balance shown in your Account is our record of what we owe you in a given Supported asset. It is kept in an internal double-entry ledger whose entries are never edited or deleted; corrections are made only with new, balancing entries.

Customer funds are held in wallets controlled by us. Our web servers hold only public keys (xpub) used to generate deposit addresses — the private keys that can move funds are kept offline and are never stored on internet-facing servers. Most customer funds are kept in cold storage; a limited working balance is used to pay out withdrawals. Every hour we compare the total we owe our users with our on-chain reserves, and we pause withdrawals if a mismatch is detected.

Balances do not earn interest, are not deposits with a bank, and are not covered by any deposit-guarantee or investor-compensation scheme. We do not lend, stake or invest customer funds. Funds of different users may be held together in the same blockchain addresses (omnibus wallets); your entitlement is defined by the ledger.

We are not a bank, an exchange or an investment firm, and nothing on the Service is financial, investment, legal or tax advice.

8. Deposits

Send only the Supported asset shown on the deposit page, on the network shown, to the address shown. Each address belongs to one network: for example, a Tron address accepts USDT-TRC20 and TRX, a BNB Smart Chain address accepts USDT-BEP20 only.

A deposit is credited after the network has confirmed it: Tron deposits once the transaction is confirmed (solidified) by the Tron network, BNB Smart Chain deposits after the number of block confirmations shown in the app (currently 15). Times shown on the website are typical, not guaranteed; network congestion or outages of a network or of our data providers can delay crediting.

Each Supported asset has a minimum deposit amount published on the Fees & limits page. Deposits below the minimum are not credited automatically.

Wrong network, wrong token, wrong address. Assets sent on a different network, unsupported tokens (including tokens sent to a contract instead of your address), NFTs, and deposits sent to an address that was not issued to you may not be credited and may be permanently lost. We are not obliged to recover them. Where it is technically possible, safe and economically reasonable, we may try to recover such assets at your request, at our discretion, and we may charge the costs of doing so; we do not guarantee any result.

We may refuse to credit, or may hold, a deposit that we reasonably believe comes from fraud, theft, a sanctioned address or other illegal activity (see section 18).

If a deposit is credited to you by mistake (for example because of a technical error or a blockchain reorganisation), you must return it, and we may correct your balance accordingly.

9. Withdrawals

To withdraw, you enter the recipient address and amount, confirm with your 2FA code and then confirm again with the link we send to your email (valid for 30 minutes). Before you confirm, we show the network fee and the amount the recipient will receive.

Manual review. Every withdrawal is reviewed by our team before it is sent. Most withdrawals are processed within a few hours on Business days; reviews can take longer at night, at weekends, during periods of high demand, network problems, or when we need more information from you. Once sent, the transaction hash appears in your history, and we verify the result on chain.

Withdrawals are subject to minimum amounts, fixed network fees per asset and a rolling 24-hour limit per user, all published on the Fees & limits page, and to a limit on the number of open requests. You can cancel a request while it is still waiting for review. A rejected or cancelled withdrawal is returned to your balance in full.

You are responsible for the address. Check the address and network carefully. We cannot withdraw to VexoraGate deposit addresses. Blockchain transactions are irreversible: if you send to a wrong, mistyped or compromised address, or to an address on the wrong network, the funds cannot be recovered by us.

We may delay, limit or refuse a withdrawal if it fails our security or compliance checks, if your Account is frozen or locked, if withdrawals are paused for maintenance or because of a reconciliation mismatch, or if the law requires it. We will tell you when a withdrawal is rejected and, where we are allowed to, why.

10. Merchant accounts and merchant obligations

You can create a Merchant from your Account by telling us its name, website and what it sells. Every new Merchant is reviewed (moderation) before API keys and payments are enabled. We may approve, reject or later freeze a Merchant, in particular if the information given is incomplete or untrue, if the website is not reachable, or if the business falls under our Acceptable Use Policy restrictions. Moderation is a review of the business, not an endorsement of it.

As a Merchant you confirm and agree that:

• you sell only lawful goods and services, accurately described, and you have all licences and permissions required for your business in every place where you offer it;
• you are solely responsible to your customers for the goods and services you sell, their delivery, quality, refunds, warranties and customer support; we are not a party to your sales;
• you clearly show your customers the price, the currency they will pay in, your refund policy and your contact details;
• you are responsible for your own taxes, accounting and regulatory reporting, including any VAT or sales tax;
• you will keep the information about your Merchant (website, description, callback URLs) accurate and tell us before you materially change your business;
• you will not accept payments for a third party or for another business (no payment aggregation or resale of the Service) without our written consent;
• you comply with the data protection laws that apply to the personal data of your customers.

We may ask a Merchant for additional information about its business, ownership, customers or a specific transaction at any time, and we may suspend payments while we wait for it.

11. Payment processing: invoices, payment pages and static wallets

An Invoice has an amount and currency (for example USD, USDT or TRX), a lifetime and, optionally, an order ID, callback URLs and other parameters described in the API documentation. The hosted payment page shows the Payer the exact amount, the network and the address, and updates automatically. If the Invoice is in USD, the amount in the chosen asset is calculated at the exchange rate shown when the payment method is selected.

An Invoice is paid when the full amount (within any accuracy tolerance the Merchant has set) is confirmed on chain before the Invoice expires. Underpayments, overpayments and late payments are handled as described in the API documentation and shown with their own statuses (for example “wrong_amount”, “paid_over”). Funds received after expiry are still credited to the Merchant, who is responsible for settling them with the Payer.

Payments to Static wallets are credited to the business balance in any amount above the minimum and reported by webhook.

When a payment is credited, our processing fee is deducted as described in section 12 and the net amount is credited to the business balance. Payers who make a mistake (wrong network, wrong amount, expired invoice) must contact the Merchant; we may assist the Merchant but we are not responsible to Payers for the Merchant’s goods or services.

12. Fees

Our fees are published on the Fees & limits page, which always shows the current values. In particular:

• a processing fee — a percentage of each payment received by a Merchant (Invoices and Static wallets). Some Merchants may have an individual rate agreed with us, shown in their dashboard. A Merchant can choose to pass all or part of the processing fee on to the Payer (the “subtract” setting), in which case the Payer pays it on top of the amount;
• a fixed network fee per asset for withdrawals from the Personal wallet;
• a payout fee (fixed and/or a percentage) for Merchant payouts and refunds;
• a transfer fee, if any, for moving funds between business and personal balances.

Deposits to the Personal wallet are free. There are no setup fees and no monthly fees. Network fees we pay to send blockchain transactions are included in the fixed withdrawal and payout fees — you do not pay extra gas.

The fee for each operation is shown before you confirm it, and the fee shown at the moment of confirmation applies. We may change fees at any time; changes apply only to operations confirmed (or, for incoming payments, Invoices created) after the change. For a change to the processing fee that applies to existing Merchants, we will give at least 7 days’ notice by email or in the dashboard, unless the change is in your favour.

Fees are deducted from the amount received or from your balance in the same asset. We may deduct amounts you owe us (for example fees, or amounts credited by mistake) from your balances.

13. Irreversibility, refunds and disputes

Blockchain transactions cannot be reversed. There are no chargebacks in crypto payments: once a payment is confirmed on chain, neither the Payer, the Merchant nor we can cancel it.

Refunds to Payers are made by the Merchant, using the refund or payout features, to an address provided by the Payer. Refunds are subject to the payout fee and to our review like any other payout. We do not decide disputes between Merchants and their customers and we are not obliged to refund Payers on a Merchant’s behalf.

If you believe an operation in your Account is wrong, tell us within 30 days at [email protected] with the transaction hash and details. We will investigate using our ledger and the blockchain, and correct any error we made.

14. Payouts and transfers for Merchants

Merchants can send payouts — one at a time or as a mass payout from a list — from their business balance, through the dashboard or the API. Every payout is reviewed and sent manually by our team, just like personal withdrawals, and is subject to the payout fee, minimum amount and the rolling 24-hour payout limit per Merchant published on the Fees & limits page.

A payout request is final once it has been sent on chain. Until then it can be rejected by us (for example for security or compliance reasons), in which case the amount is returned to the business balance.

Transfers between your business balance and your Personal wallet are instant ledger operations and do not touch the blockchain.

15. API, webhooks and integrations

We grant approved Merchants a limited, non-exclusive, non-transferable, revocable right to use the API to integrate the Service into their own websites, bots and apps, in accordance with the API documentation. The API is designed to be drop-in compatible with widely used crypto payment APIs, so existing integrations can often be switched by changing the base URL and keys; compatibility is provided on a best-effort basis and some features are not available or behave differently, as documented.

Payment and payout API keys are shown only once and are stored encrypted. You can restrict each key to a list of IP addresses. Keep keys secret and rotate them if they may have leaked; anything done with your keys is treated as done by you.

We send webhooks to the URLs you configure, signed with your key. You must verify the signature before trusting a webhook, and you should treat the status returned by the API (or shown in the dashboard) as authoritative. We retry failed deliveries for a limited time; we are not responsible for losses caused by a callback endpoint that is unreachable or does not verify signatures.

You must not overload or probe the API, bypass rate limits, scrape the Service, or use the API to test stolen cards, keys or credentials. We apply rate limits per Merchant and may change the API with reasonable notice, except where an immediate change is needed for security or to comply with the law.

16. Telegram bot and Mini App

You may link your Account to a Telegram account to receive notifications and to use the VexoraGate Mini App inside Telegram. Linking is optional and can be removed at any time in your security settings or with the bot’s /unlink command.

The Mini App gives access to your Account with the same protections as the website: withdrawals always require your 2FA code and email confirmation; the bot itself never accepts withdrawal requests. Telegram is a third-party service governed by its own terms and privacy policy; we are not responsible for its availability or for messages sent by accounts impersonating us. Our official bot is the one linked from vexoragate.com.

17. Prohibited use

You must not use the Service for any illegal purpose or in any way that could harm us, other users or third parties. The detailed list of prohibited activities and restricted or prohibited businesses is in our Acceptable Use Policy, which is part of these Terms. It includes, among others: money laundering and terrorist financing; proceeds of fraud, theft, hacking, ransomware or scams; sanctions evasion; child sexual abuse material; illegal drugs and weapons; unlicensed gambling or financial services where a licence is required; and pyramid or Ponzi schemes.

18. Compliance, restrictions and frozen funds

We may, at our reasonable discretion and to the extent permitted by law, take one or more of the following measures if we reasonably suspect that you breach these Terms, that your Account or a transaction is linked to fraud, stolen funds, sanctions, a court order or other illegal activity, if we are required to by law or by an authority, or to protect you, other users or the Service:

• delay, refuse or reverse (in our ledger) a deposit, payment, withdrawal, payout or transfer;
• request information as described in section 5;
• limit features, lower limits, freeze a Merchant or freeze the whole Account;
• hold the affected funds for as long as reasonably necessary to complete our review, or for as long as an authority or court requires;
• return funds to their source where that is lawful and technically possible;
• report the activity to, and cooperate with, competent authorities;
• terminate the Account under section 26.

Where we are allowed to, we will tell you about the measure and the reason. We will release funds that are not subject to a legal restriction once our concerns are resolved. We are not liable for losses resulting from measures taken in good faith under this section.

19. Your security responsibilities

Use a unique, strong password and an authenticator app for 2FA, keep your devices and email secure, and always check that you are on vexoragate.com before logging in. Be careful of phishing: we never ask for your password, 2FA code or recovery codes and never ask you to “verify” your wallet by sending funds.

We are not responsible for losses caused by malware on your devices, a compromised email account, sharing your credentials, or following instructions from people who impersonate us.

20. Availability, maintenance and blockchain events

We aim to keep the Service available at all times but do not guarantee uninterrupted or error-free operation. We may suspend all or part of the Service for maintenance, upgrades, security reasons or when a blockchain network, our infrastructure providers or our data providers are unavailable.

We do not control blockchain networks. Network congestion, changes to fees, protocol upgrades, forks, reorganisations, attacks, token contract changes (including freezes or blacklisting by a token issuer such as Tether) or the discontinuation of a network or token may affect deposits, withdrawals and balances. In the event of a fork we may decide, in our discretion, whether to support the new chain. If a Supported asset is discontinued, we will give reasonable notice where possible so that you can withdraw it.

21. Intellectual property

The Service, its software, design, texts, logos and the VexoraGate name are owned by us or our licensors. You receive only the limited rights to use the Service described in these Terms. You may not copy, modify, reverse-engineer or create derivative works of the Service except as allowed by law or by an open-source licence for a specific component.

VexoraGate is an independent service. Coin and network names and logos belong to their respective owners.

If you send us feedback or suggestions, we may use them without any obligation to you.

22. Privacy

We process personal data as described in our Privacy Policy. We collect the minimum data needed to run and secure the Service and we do not sell personal data.

23. Disclaimers and risks

The Service is provided “as is” and “as available”. To the extent permitted by law, we disclaim all warranties, express or implied, including fitness for a particular purpose and non-infringement.

Virtual assets carry significant risks. The value of TRX can change sharply; stablecoins such as USDT are issued by third parties and may lose their peg, be frozen by their issuer or be restricted by regulators. Exchange rates shown for USD-denominated Invoices are indicative and come from third-party sources. You use virtual assets at your own risk and you are responsible for deciding whether they are suitable for you.

24. Limitation of liability

Nothing in these Terms limits liability that cannot be limited by law, such as liability for fraud or for death or personal injury caused by negligence.

Subject to that, we are not liable for: indirect or consequential losses; loss of profits, revenue, business, goodwill or data; losses caused by your errors (such as a wrong address or network), by compromise of your credentials or devices, by third parties (including blockchain networks, token issuers, Telegram, hosting or data providers), by events beyond our reasonable control, or by measures taken under section 18.

Our total liability to you for all claims arising out of or related to the Service in any 12-month period is limited to the greater of (a) the fees you paid us in the 12 months before the event giving rise to the claim and (b) 100 USDT. This limit does not apply to our obligation to pay out your balance to which you are entitled under our ledger, subject to these Terms.

25. Indemnity

You agree to compensate us and our staff for losses, damages, fines, costs and reasonable legal fees resulting from claims by third parties (including your customers and authorities) arising from your breach of these Terms or of the law, your goods or services, or your misuse of the Service.

26. Suspension, termination and closing your Account

You may close your Account at any time by contacting [email protected] from your Account email. Before closing, withdraw your balances (or tell us an address on a Supported network to which we should send them); open Invoices and pending operations will be completed or cancelled first. Records we must keep by law are retained as described in the Privacy Policy.

We may suspend or terminate your Account or a Merchant: with 30 days’ notice for any reason; or immediately if you materially breach these Terms, if we must do so by law, or in the cases described in section 18.

After termination, and subject to section 18 and any legal restriction, we will return your remaining balance to an address you provide on a Supported network, minus the applicable withdrawal or payout fees. If you do not provide an address within a reasonable period despite our reminders, we will keep the balance recorded in your name and pay it out when you ask, subject to applicable law on unclaimed property.

Sections that by their nature should survive termination (including fees owed, irreversibility, intellectual property, disclaimers, limitation of liability, indemnity and governing law) continue to apply.

27. Changes to these Terms

We may update these Terms, for example to reflect new features, legal requirements or changes in how we operate. The date at the top shows when they were last changed. For material changes that are not in your favour we will give at least 14 days’ notice by email or in the dashboard before they take effect, unless a shorter period is required for legal or security reasons. If you do not agree with a change, you may close your Account before it takes effect; continuing to use the Service afterwards means you accept the updated Terms.

28. Governing law and disputes

These Terms and any dispute arising from them are governed by the law applicable to the operator of the Service, without regard to conflict-of-law rules. Mandatory consumer-protection rules of the country where you live continue to apply if they give you more protection.

Before starting formal proceedings, please contact us at [email protected] so that we can try to resolve the dispute informally within 30 days. If it is not resolved, the dispute may be brought before the competent courts, unless mandatory law gives you the right to sue in your own country.

29. General provisions

If any provision of these Terms is found invalid, the rest remains in force. Our failure to enforce a right is not a waiver. You may not transfer your rights under these Terms without our consent; we may transfer them to an affiliate or to a successor of our business with notice to you. These Terms are the entire agreement between you and us about the Service.

These Terms may be published in several languages. The English version is the binding version; translations are provided for convenience.

30. Contact

Support: [email protected] (write from your Account email so that we can confirm it is you). Telegram support: @vexoracard_support. Legal notices and requests from authorities: [email protected].