Terms
Last updated 2 October 2026
Short, because they cover a website and a sandbox rather than a live payments service. What governs that is said in the first section.
Last updated 2 October 2026
Short, because they cover a website and a sandbox rather than a live payments service. What governs that is said in the first section.
This website, the documentation on it, and the sandbox environment. They are the terms on which you may read and test.
They do not govern live payment processing, because we are not doing any. When we are authorised to process live payments, the agreement that governs that is a separate signed contract between us and your business, with commercial terms, service levels, liability and termination in it. A web page is not that document and we will not pretend it is one.
Test as hard as you like, including deliberately breaking things. Rehearsing failures is the point of a sandbox and we have written a page encouraging it.
Two limits. Do not use the sandbox to attack somebody else, and do not put real personal data into it: it is a test environment, the data in it is test data, and we would rather not be holding a real customer's identity documents because somebody was experimenting.
We may rate-limit or suspend sandbox access that is degrading the service for others. If that happens we will tell you why.
Keep your credentials to yourself, and keep your API keys off the client side. A key in a browser is a key you have published. Anything done with your credentials is treated as done by you, which is the normal rule and the reason the previous sentence matters.
Tell us promptly if you think a credential has leaked. Rotating a key takes seconds, and we would much rather do it early.
The site, the documentation, the design and the software remain ours. You may read, quote and link to the documentation freely, including in your own internal material. You may use the code samples on this site in your own project without asking.
Your data stays yours. Your transaction records, your customer records and anything you upload belong to your business, and you can export them at any time.
Photography on this site is credited on the credits page and is used under its own licence, which is not ours to pass on.
The sandbox and this site are provided as they are. There is no service level attached to either, because attaching one to a pre-launch test environment would be a promise with nothing behind it.
The sandbox depends on Safaricom's sandbox, which has its own availability and is not ours to guarantee. We think running against the real one is worth that, and the reasoning is on the sandbox page.
To the extent the law permits, we are not liable for loss arising from your use of this website or the sandbox. Neither contains real money and neither is sold to you.
Nothing here limits liability that cannot be limited by law, including for death or personal injury caused by negligence, or for fraud.
When there is a live service, liability for it will be dealt with properly in the signed agreement rather than disclaimed on a web page.
We may change these terms, and the date at the top says when we last did. Material changes that affect people already testing with us will be told to them rather than quietly posted.
You can stop using the site and the sandbox whenever you like. We may suspend access that is abusive or unlawful, and we will say why when we do.
These terms are governed by the laws of Kenya, and the courts of Kenya have jurisdiction over any dispute arising from them.
Send the list. We would rather answer twenty specific questions now than find at contract stage that one of them was the one that mattered.