Legal
Terms of Service
The services agreement for the Moneva platform: what governs the sandbox, what governs production, and how risk is allocated.
Last updated: 29 July 2026
These Terms of Service (the "Terms") govern access to and use of the Moneva platform. They apply in full to the sandbox and, until superseded by a signed services agreement and Order Form, to all other access Moneva grants. Where a signed services agreement exists, that agreement and its Order Form prevail over these Terms to the extent of any conflict. Registering an account or using the platform constitutes acceptance of these Terms.
1. Who we are
The Moneva platform is operated by MNVA Pay EDPK, a company incorporated in Bulgaria ("Moneva", "we"). Moneva is a software and technology company, not a bank or licensed payment institution. Moneva does not take deposits, hold customer funds, or custody digital assets. All regulated financial services are performed by licensed, regulated partners in each market.
2. Definitions
- "Agreement": these Terms together with any signed services agreement, Order Form, and the Data Processing Addendum (the "DPA").
- "API": Moneva's application programming interfaces, SDKs, documentation, and related developer tooling.
- "Customer", "you": the business entity that registers for a platform account.
- "End User": a customer of the Customer whose data or payments are processed through the platform.
- "Licensed Partners": the licensed, regulated financial institutions that perform the regulated services connected to the platform.
- "Order Form": a signed document naming the contracting entity, pricing, and production limits.
- "Sandbox": the test environment reached with test keys.
- "Services": the API, dashboard, hosted onboarding, webhooks, and related software operated by Moneva.
- "Customer Data": data submitted to the platform under the Customer's account, including End User data.
- "Confidential Information": non-public information disclosed under the Agreement that is marked confidential or would reasonably be understood to be confidential.
3. Eligibility and business verification
- Business use only. The platform is offered to businesses, not to consumers. The person accepting these Terms confirms they have authority to bind the Customer.
- Business verification (KYB). Live keys are issued only after business verification and an executed services agreement. You agree to provide accurate, complete information about your business, ownership, and representatives, and to keep it current.
- Sanctions screening, fail closed. Screening runs at onboarding and continuously thereafter. If verification cannot be completed, or screening returns a match that cannot be cleared, access is declined or suspended by default until the issue is resolved.
4. Account registration and team roles
- Accurate registration. Keep account and contact information accurate; the account contact email is where legally required notices are sent.
- Team roles. The dashboard supports role-based team access. You are responsible for who you invite, the permissions you grant, and everything done under your team's credentials.
- Credential security. Protect sign-in credentials and enable available security controls. Notify us promptly at ops@moneva.io if you suspect unauthorized access.
5. Sandbox, demo, and live environments
- Sandbox means sandbox. Test keys (
mk_test_) never move real money and never touch real banking rails. Sandbox data may be reset with notice. No uptime commitment applies to the sandbox. - Demo environments exist for demonstration only; demo data is illustrative and may be changed or removed at any time.
- Live environment. Live keys move real money through Licensed Partners and are issued only after business verification, an executed services agreement, and an executed DPA. Production availability commitments apply only where agreed in an Order Form.
6. The Services and the role of Licensed Partners
- What Moneva provides. A developer platform: API access, dashboard, hosted onboarding, documentation, SDKs, webhooks, and orchestration of regulated payment services. Moneva is the software layer.
- What Licensed Partners provide. Regulated services, including banking, FX, payout execution, and End User identity verification, are performed by licensed, regulated partner institutions in each market, under their own regulatory obligations. Partner terms may apply to End Users and are presented where required during onboarding.
- Non-custodial by design. End-user funds settle to accounts and wallets outside Moneva's control. Moneva never holds funds and never holds private keys.
- No advice. Nothing in the Services is investment, financial, legal, or tax advice.
7. Customer obligations
- Lawful use. Use the Services only in compliance with applicable law, including anti-money-laundering, sanctions, and export-control rules, and only within the scope of your verification.
- End-user terms and disclosures. You are responsible for your own product, your End Users, and your relationship with them. Present accurate terms and privacy notices to End Users, obtain the consents your product needs, and never misrepresent Moneva's role or the role of Licensed Partners.
- Accurate instructions. Payment and payout instructions submitted under your keys are treated as authorized by you. You are responsible for their accuracy, including beneficiary details.
- API and key security. Keep secret keys server-side, never in client code or repositories. Rotate a key immediately if you suspect exposure and tell us promptly. You are responsible for all activity under your keys until you notify us of a compromise.
- Integration hygiene. Use the API as documented, keep your integration on supported versions, and verify webhook signatures before acting on events.
- No prohibited industries. Comply with the acceptable-use rules in Section 8.
8. Acceptable use
Payments infrastructure carries legal obligations that flow down to every integrator. Building any of the following on the platform is prohibited:
- Sanctions and illegal activity. Serving sanctioned persons or jurisdictions, money laundering, terrorist financing, or any activity illegal where you or your users operate.
- Circumventing compliance. Splitting transactions to evade limits or reporting, obscuring the true originator or beneficiary of a payment, or onboarding users under false identities. Every paying end user must complete KYC through the platform.
- Undisclosed aggregation. Operating as a payment intermediary that pools or forwards funds for undisclosed third parties. Your customers must be your own end users.
- High-risk categories without written approval. Gambling, adult content, weapons and ammunition, narcotics and drug paraphernalia, debt collection, binary options, and multi-level marketing.
- Fraud and deception. Ponzi or pyramid schemes, fake invoicing, phishing, or products that misrepresent pricing, fees or the nature of the service to end users.
- Anonymity infrastructure. Mixers, tumblers, or services whose purpose is defeating financial-crime controls.
- Abuse of the platform itself. Probing or disrupting the Services, circumventing rate limits or usage restrictions, or reselling raw access to the API as such.
Prohibited-use screening happens at business verification and continuously on live traffic. Violations lead to key suspension; where the law requires it, activity is reported to the relevant authorities. If you are unsure whether your use case qualifies, ask first: ops@moneva.io.
9. Fees, invoicing, and taxes
- Fees. The sandbox is free. Production fees are set in the Order Form or agreed pricing schedule and may include per-transfer fees, FX spreads, and platform fees.
- Invoicing. Invoiced amounts are due within the period stated on the invoice. Undisputed amounts that remain unpaid may accrue interest at the statutory rate and may lead to suspension under Section 24.
- Taxes. Fees exclude taxes. You bear all taxes on your use of the Services except taxes on Moneva's income. Withholding, where required, is grossed up so Moneva receives the invoiced amount.
10. Intellectual property and license
- Moneva's rights. Moneva and its licensors retain all rights in the Services, the API, the documentation, and the Moneva brand. No rights are granted except those stated here.
- Your license. During the term, Moneva grants you a limited, non-exclusive, non-transferable license to access the API and documentation to build and operate your integration.
- Restrictions. No reverse engineering except where the law permits it notwithstanding this clause, no copying of the Services, and no use of the Moneva brand outside Section 13.
- Your data. You retain all rights in Customer Data. You grant Moneva the license needed to process Customer Data to provide the Services, meet legal obligations, and secure the platform, as described in the Privacy Policy and the DPA.
11. Feedback
If you send suggestions or feedback about the Services, Moneva may use them without restriction or obligation. Feedback never includes Customer Data.
12. Confidentiality
- Mutual duty. Each party protects the other's Confidential Information with at least reasonable care, uses it only to perform the Agreement, and shares it only with personnel and advisers who need it and are bound to confidentiality.
- Exceptions. Information that is public without breach, already lawfully known, independently developed, or lawfully received from a third party is not Confidential Information.
- Compelled disclosure. A party may disclose Confidential Information where legally required, giving prior notice where lawful.
- Survival. These duties survive for three years after termination, and for trade secrets as long as they remain trade secrets. The named subprocessor register provided under the DPA is Confidential Information.
13. Publicity
Neither party may use the other's name, logo, or the existence of the relationship in public materials without the other's prior written consent.
14. Data protection
The Privacy Policy describes how the platform processes personal data and the parties' controller and processor roles. For End User personal data, Moneva acts as your processor under the DPA, which is executed at production onboarding. Live keys are not released, and no production personal data may be submitted, before the DPA is in force.
15. Third-party services
Your product may combine the Services with third-party services you choose. Those services are governed by their own terms, and Moneva is not responsible for them. Regulated services performed by Licensed Partners are governed by the partner terms presented during onboarding.
16. Service changes and availability
- Evolution. Moneva may improve and modify the Services. We use reasonable efforts to avoid breaking API changes and to give advance notice when they are unavoidable.
- Availability. No service level is promised unless agreed in an Order Form. Maintenance windows and incidents are communicated through the platform's status channels.
17. Beta features
Features identified as beta, preview, or early access are provided as is, may change or be withdrawn at any time, carry no support or availability commitment, and are excluded from any warranties in this Agreement. Use them at your own risk and treat non-public beta functionality as Confidential Information.
18. Assumption of risk
- Settlement infrastructure. The Services orchestrate settlement over public blockchain networks and over stablecoins issued by third parties. The Customer acknowledges the inherent characteristics of that infrastructure, including the irreversibility of settled transactions, network congestion and variable network fees, protocol changes, forks and other protocol-level events, validator and node behaviour, dependencies on third-party smart contracts, and the possibility that a stablecoin issuer suspends issuance or redemption or that a stablecoin loses its peg.
- Acceptance of risk. The Customer accepts these risks for itself and for its End Users, is solely responsible for assessing them against its own product, and is solely responsible for the disclosures its End Users need.
- Non-custodial. The Customer and its End Users control their own accounts, wallets, and keys. Loss of a key or wallet means loss of access to the assets it controls. Moneva has no ability to freeze, recover, or reverse assets it never holds.
19. Warranties and disclaimers
- Authority. Each party warrants that it is validly existing and has the authority to enter into the Agreement. This is the only warranty Moneva gives.
- As is, as available. To the maximum extent permitted by law, the Services are provided strictly as is and as available, with all faults. Moneva disclaims all other warranties, conditions, and representations, whether express, implied, or statutory, including merchantability, fitness for a particular purpose, non-infringement, and any warranty that the Services will be uninterrupted, timely, secure, or error-free.
- No outcome warranted. Moneva does not warrant that any transfer, payout, conversion, or other transaction initiated through the Services will be executed, will complete within any particular time, or will produce any particular outcome.
- Third parties. Moneva makes no warranty of any kind for services performed by Licensed Partners, for other third-party services, for banking or payout networks, or for blockchain networks, or for the accuracy of rates and data sourced from any of them.
20. Exclusions of liability
To the maximum extent permitted by law and subject to Section 22, Moneva is not liable for any loss or damage, however the claim is framed, arising from or connected with:
- acts, omissions, delays, or insolvency of Licensed Partners, or of the banking, card, or payout networks they use;
- blockchain and network events, including congestion, forks, protocol changes or failures, smart-contract behaviour, and validator or node behaviour;
- events affecting a stablecoin or its issuer, including suspension of issuance or redemption and loss of peg;
- the Customer's instructions, data errors, or incorrect or incomplete beneficiary details;
- the Customer's product and services, and its End Users;
- suspension or termination of access taken for compliance, sanctions, fraud-prevention, security, or other legal reasons, including under Section 24;
- sanctions, orders, or regulatory actions of any authority;
- third-party services, software, and infrastructure, and their outages;
- force majeure events described in Section 26;
- loss of, or loss of access to, the Customer's or an End User's keys, wallets, or accounts, which, the Services being non-custodial, Moneva never holds.
21. Limitation of liability and exclusive remedy
- Excluded damages. To the maximum extent permitted by law, Moneva is not liable for indirect, incidental, special, consequential, punitive, or exemplary damages, or for lost profits, lost revenue, lost business or goodwill, loss of data, or the cost of substitute services, however arising, under any theory of liability, whether contract, tort including negligence, strict liability, or otherwise, and even if Moneva was advised of the possibility of such damages.
- Aggregate cap. To the maximum extent permitted by law, Moneva's total aggregate liability under or in connection with the Agreement, for all claims combined and under any theory of liability, is capped at EUR 1,000 (one thousand euro). Solely if a court of competent jurisdiction holds that flat cap unenforceable in a given case, Moneva's total aggregate liability for that case is instead capped at the total fees actually paid by the Customer to Moneva in the three (3) months preceding the event giving rise to the claim. Solely if that cap is also held unenforceable in that case, Moneva's total aggregate liability for that case is capped at the lowest amount to which liability may lawfully be limited under applicable law. Each fallback cap in this sequence applies only for the case in which, and only to the extent that, every preceding cap has been held unenforceable. Where no fees have ever been paid, including sandbox, demo, and free-period use, Moneva's total aggregate liability is capped at EUR 100. A higher cap applies only where expressly agreed in an Order Form.
- Sole and exclusive remedy. For any defect, failure, or non-performance of the Services, the Customer's sole and exclusive remedy is, at Moneva's election, re-performance of the affected Service or a refund of the fee actually paid for the affected transfer.
- Claims window. To the extent permitted by applicable law, any claim arising out of or in connection with the Agreement must be brought within twelve (12) months of the event giving rise to it, failing which the claim is permanently barred.
- Basis of the bargain. The fees reflect this allocation of risk between the parties, and Moneva would not provide the Services on these commercial terms without it. The parties, each acting as a commercial undertaking, have expressly negotiated and accepted this allocation of risk in view of the level of the fees charged for the Services. The Customer's payment obligations are not limited by this section.
22. Mandatory carve-outs
Nothing in the Agreement excludes or limits liability for intent (umisal) or gross negligence (gruba nebrezhnost) within the meaning of Article 94 of the Bulgarian Obligations and Contracts Act, for death or personal injury, for fraud, or for any other liability that cannot be excluded or limited under applicable law. If any exclusion or limitation in Sections 18 through 21 is held invalid or unenforceable, it applies to the maximum extent applicable law permits, except that the aggregate cap in Section 21 is replaced in accordance with the fallback sequence stated in that section, and the remainder of the Agreement stays in force.
23. Indemnification
- By the Customer. The Customer will defend, indemnify, and hold harmless Moneva and its officers, directors, employees, and contractors against all third-party claims, demands, losses, damages, fines, penalties, and costs, including reasonable legal fees, arising from or connected with: the Customer's product and services and their operation; its End Users and its relationship with them; the instructions, data, and beneficiary details submitted under its account; its breach of the Agreement; its violation of applicable law, including sanctions, anti-money-laundering, and data-protection rules; and taxes on its business.
- By Moneva. Moneva will defend and indemnify the Customer against third-party claims that the unmodified Services, as provided by Moneva and used as permitted by the Agreement, infringe the third party's intellectual property rights. Moneva's sole obligations and the Customer's exclusive remedies for such a claim are, at Moneva's election: procuring the right to continue use, modifying or replacing the affected Services so they no longer infringe, or terminating the affected Services and refunding prepaid unused fees. This indemnity is subject to the aggregate cap in Section 21 and does not cover claims arising from combinations with products not provided by Moneva, modifications not made by Moneva, or use in breach of the Agreement.
- Procedure. The indemnified party gives prompt notice, the indemnifying party controls the defense and settlement, and no settlement that imposes obligations on the indemnified party is made without its consent. The indemnified party cooperates reasonably and may join with its own counsel at its own cost.
24. Suspension
- Immediate suspension. Moneva may suspend keys or accounts immediately, without prior notice, where required for compliance, sanctions, fraud prevention, or security, where a Licensed Partner or a competent authority requires it, or where continued access creates legal risk or material harm to the platform or others.
- Suspension with notice. For other breaches, including non-payment, Moneva gives notice and a reasonable cure period before suspending.
- Restoration. Suspension is lifted promptly once the ground for it is resolved. Subject to Section 22, Moneva is not liable for losses arising from suspension under this section.
25. Term and termination
- Term. These Terms apply from first use of the platform until terminated. Signed agreements state their own term in the Order Form.
- Termination for convenience. You may stop using the sandbox at any time. Either party may terminate these Terms for convenience on thirty days' written notice unless an Order Form says otherwise.
- Termination for cause. Either party may terminate if the other materially breaches and does not cure within thirty days of notice. Moneva may terminate immediately for a violation of Section 8, for a fail-closed event under Section 3 that cannot be resolved, or if the Customer becomes insolvent.
- Effect. On termination, keys are revoked and outstanding fees become due. For thirty days after termination, Moneva will make Customer Data available for export through the API, after which data is deleted or anonymized on the schedule in the Privacy Policy, subject to the financial-record retention duties described there.
- Survival. Sections 9 through 14 and 18 through 31 survive termination, together with any accrued rights.
26. Force majeure
Neither party is liable for delay or failure caused by events beyond its reasonable control, including natural disasters, epidemics, war, terrorism, civil unrest, labor disputes, governmental or regulatory action, changes in law or sanctions, power, internet, or telecommunication failures, cyber attacks and denial-of-service events, acts, omissions, or failures of banking, payment, or financial-market infrastructure, and outages, congestion, forks, or other failures of blockchain networks. Payment obligations for Services already delivered are not excused. The affected party notifies the other and resumes performance as soon as reasonably possible.
27. Governing law, venue, and collective claims
These Terms are governed by the laws of Bulgaria, excluding its conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods. The competent courts of Sofia, Bulgaria have exclusive jurisdiction over disputes arising from these Terms, without prejudice to mandatory rules that provide otherwise. To the extent permitted by applicable law, each party may bring claims against the other only in its individual capacity, and not as a claimant or member in any class, collective, consolidated, or representative proceeding.
28. Changes to these Terms
We may update these Terms. Material changes are announced on this page, under the Last updated date above, and notified to the account contact with reasonable advance notice before they take effect. If you do not agree to a change, stop using the platform before the change takes effect; continued use constitutes acceptance. Signed agreements change only as they themselves provide.
29. Notices
Notices to Moneva go to ops@moneva.io. Notices to you go to the account contact email or the dashboard and are deemed given when sent. Keep the account contact current.
30. Assignment
You may not assign the Agreement without Moneva's prior written consent, not to be unreasonably withheld. Moneva may assign the Agreement to an affiliate or in connection with a merger, reorganization, or sale of assets, with notice to you. Any other attempted assignment is void.
31. General provisions
- Entire agreement. The Agreement is the entire agreement between the parties about the Services and supersedes prior discussions. In case of conflict, the order of precedence is: Order Form, signed services agreement, DPA, these Terms.
- Severability. If a provision is unenforceable, it is limited or removed to the minimum extent necessary and the rest remains in force.
- No waiver. Failure to enforce a provision is not a waiver of it; waivers are effective only in writing.
- Relationship. The parties are independent contractors. Nothing creates a partnership, joint venture, agency, or fiduciary relationship.
- No third-party beneficiaries, except the parties indemnified under Section 23.
- Export and sanctions. Each party complies with applicable export-control and sanctions laws.
- Language. These Terms are drafted in English; translations are for convenience only.
- Headings are for convenience and do not affect interpretation.