Terms of Service

By accessing or using the Decode Hash API service (“Service”), operated by Cowdi Ltd, a private limited company registered in England and Wales (company number 16269890), you agree to be bound by these Terms of Service (“Terms”). If you are using the Service on behalf of an organisation, you represent and warrant that you have the authority to bind that organisation to these Terms.

If you do not agree to these Terms, you may not access or use the Service. Your continued use of the Service following the posting of any changes to these Terms constitutes acceptance of those changes.

Decode Hash provides a SaaS API that resolves SHA-256 phone number hashes to verified Kenyan phone numbers. The Service is designed for legitimate identity verification, fraud prevention, and phone intelligence use cases.

The Service is provided on an “as is” basis. While we strive for comprehensive coverage, we do not guarantee that every hash submitted will successfully resolve to a phone number. Resolution rates may vary depending on the hash type, data availability, and other factors.

To use the Service, you must:

• Create an account by providing accurate and complete registration information
• Maintain the accuracy of your account information at all times
• Be at least 18 years of age, or the age of majority in your jurisdiction

Upon registration, you will be issued one or more API keys to authenticate your requests. You are responsible for all activity that occurs under your account and API keys. You must notify us immediately if you become aware of any unauthorised use of your account.

You agree to use the Service only for lawful purposes and in accordance with these Terms. Specifically:

Violation of this policy may result in immediate suspension or termination of your account without notice.

Each plan includes specific rate limits and lookup quotas as described in the pricing table above. These limits are enforced automatically and are designed to ensure fair access and reliable performance for all users.

If you exceed your plan's rate limit, API requests will be throttled and may return HTTP 429 (Too Many Requests) responses. If you exceed your plan's lookup quota, requests will return HTTP 402 (Payment Required) and you will need to upgrade to a higher-tier plan.

We reserve the right to impose additional rate limits or suspend access if we detect usage patterns that are abusive, excessive, or inconsistent with normal API usage.

Your API keys are confidential credentials that grant access to the Service. You are solely responsible for:

• Keeping your API keys secure and not sharing them with unauthorised parties
• Storing API keys securely (e.g., using environment variables or secret management tools, and never committing them to public repositories)
• Rotating your API keys periodically and immediately if you suspect they have been compromised
• All activity that occurs using your API keys, whether or not authorised by you

Cowdi Ltd is not liable for any losses or damages arising from unauthorised use of your API keys due to your failure to maintain their security.

The Service, including its technology, algorithms, APIs, documentation, branding, and all related intellectual property, is and remains the exclusive property of Cowdi Ltd and its licensors.

Subject to your compliance with these Terms, we grant you a limited, non-exclusive, non-transferable, revocable licence to access and use the Service solely for your internal business purposes. This licence does not grant you any ownership rights in the Service or its underlying technology.

You retain ownership of any data you submit to or receive from the Service. However, you grant Cowdi Ltd a limited licence to process such data as necessary to provide the Service.

Your use of the Service is also governed by our Privacy Policy, which describes how we collect, use, and protect your information. By using the Service, you consent to the practices described in the Privacy Policy.

You are responsible for ensuring that your use of the Service complies with all applicable data protection laws, including the UK GDPR, the Kenya Data Protection Act 2019, and any other relevant data protection regulations in the jurisdictions where you operate.

You agree not to submit any data to the Service that you do not have the lawful right to process. For the purposes of data protection law, Cowdi Ltd is the data controller for your account and usage data, and acts as a data processor when processing lookup queries on your behalf.

We target 99.9% uptime for the Decode Hash API for paid plans (Starter, Pro, and Business). This target is a goal, not a guarantee, and does not constitute a binding service level agreement unless a separate SLA has been executed in writing.

The Free tier is provided without any uptime commitment. Availability for Free tier accounts may be limited during periods of high demand or maintenance.

We may perform scheduled maintenance that temporarily reduces availability. We will make commercially reasonable efforts to provide advance notice of planned maintenance via our status page or email.

Business plan customers may be eligible for a custom SLA with specific uptime guarantees and service credits. Contact us for details.

You agree to indemnify, defend, and hold harmless Cowdi Ltd, its directors, officers, employees, and agents from and against any and all claims, liabilities, damages, losses, costs, and expenses (including reasonable legal fees) arising out of or related to:

• Your use of the Service
• Your breach of these Terms
• Your violation of any applicable law or regulation, including data protection laws
• Any claim that your use of the Service infringes or violates the rights of any third party
• Unauthorised use of your API keys resulting from your failure to secure them

This indemnification obligation will survive the termination of your account and these Terms.

Our total aggregate liability to you for any claims arising from or related to these Terms or the Service shall not exceed the total fees paid by you to Cowdi Ltd during the twelve (12) months immediately preceding the event giving rise to such liability.

The Service is provided “as is” and “as available” without warranties of any kind, whether express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Service will be uninterrupted, error-free, or that all hashes will resolve successfully.

Nothing in these Terms excludes or limits our liability for death or personal injury caused by our negligence, fraud or fraudulent misrepresentation, or any other liability that cannot be excluded or limited by English law.

You may terminate your account at any time by cancelling your subscription through your account dashboard or by contacting our support team. Termination will take effect at the end of your current billing period for paid plans.

We reserve the right to suspend or terminate your account immediately, without prior notice, if:

• You breach any provision of these Terms
• You engage in any prohibited use as described in Section 4
• Your use of the Service poses a security risk or may adversely affect the Service or other users
• Required by law or a valid legal process

Upon termination, your right to access the Service will cease immediately, and any outstanding fees will become due. We may delete your account data within 30 days of termination, in accordance with our data retention policies. Sections 7 (API Key Security), 8 (Intellectual Property), 11 (Indemnification), 12 (Limitation of Liability), 17 (Governing Law), and this survival clause shall survive termination.

Neither party shall be liable for any failure or delay in performing its obligations under these Terms where such failure or delay results from circumstances beyond the reasonable control of the affected party, including but not limited to: natural disasters, acts of government, war or terrorism, pandemics, Internet or telecommunications failures, infrastructure outages, power failures, or denial-of-service attacks.

The affected party shall use reasonable efforts to mitigate the impact of such event and will promptly notify the other party when the force majeure event ceases.

We may update these Terms from time to time to reflect changes in our Service, legal requirements, or business practices. When we make material changes, we will:

• Update the “Effective date” at the top of this page
• Notify registered users via email at least 30 days before material changes take effect
• Post a prominent notice on our website or within the Service dashboard

Your continued use of the Service after the revised Terms take effect constitutes your acceptance of the changes. If you do not agree to the revised Terms, you must stop using the Service and terminate your account.

These Terms shall be governed by and construed in accordance with the laws of England and Wales.

Before initiating any formal legal proceedings, you agree to first attempt to resolve any dispute through good-faith negotiation by contacting us at the address provided in the Contact section below. If the dispute cannot be resolved through negotiation within 30 days, either party may submit the dispute to the exclusive jurisdiction of the courts of England and Wales.

Nothing in these Terms shall prevent either party from seeking injunctive or other equitable relief from any court of competent jurisdiction.

If you have any questions about these Terms, please contact us: