These terms are the agreement between you and the operator of veilnebu.la (“we”, “us”) governing your use of veilnebu.la (“the Service”). veilnebu.la is operated anonymously. There is no company behind it — no incorporation, no registration number, no registered office, no named officers — and none is waiting to be filled in later. The counterparty you deal with is simply the operator of the Service, identifiable only by the domain it runs on (veilnebu.la) and the keys it uses to sign API responses and webhooks, not by a filed legal name. Using any part of the Service means you accept these terms. If you are accepting on behalf of a company, you confirm you are authorised to bind it.
The acceptable-use policy, the AML and sanctions policy, the risk disclosure, the fee schedule and the refund and dispute policy form part of this agreement.
1. Eligibility
You must be at least 18 and legally capable of entering a contract where you live. You must not be a person or entity subject to sanctions, nor act on behalf of one. You must not use the Service where doing so is unlawful, and you are the one who has to determine whether that is the case — see §5.
2. Two products, one account
veilnebu.la is a self-custodial wallet and a payment gateway. They share an account and a design, but not a custody model, and the difference decides who bears which risk. Section 3 sets it out rather than leaving you to infer it from the marketing.
3. Who holds what
The wallet is non-custodial. Its keys and recovery phrase are generated on your device, sealed there behind your PIN, and never transmitted to us. We cannot move, freeze, recover or produce them — not for you, not for a support request, and not under a court order, because we never receive them. If you lose the recovery phrase, the funds are irrecoverable. Nothing in this agreement changes that, and no term of it can.
The gateway is custodial, and we will not pretend otherwise. A customer paying your invoice pays into a deposit address that we generate and control. On confirmation, the received amount is recorded against a platform hot-wallet account and your entitlement to it is booked as a balance we owe you — a claim against us, not keys in your possession. That balance stays with us until you withdraw it. During that period you carry our credit risk and our operational risk, and we can suspend a payout under §16 or §20.
We are not a bank, a broker, an exchange or a deposit-taking institution. Your gateway balance is not a deposit, is not insured, and is not covered by any government guarantee or investor-compensation scheme. Registrations and authorisations held by the operator: None held. We are not a regulated financial institution in any jurisdiction.
4. Accounts and credentials
A merchant account can be created with an email and a password, or anonymously with neither. For an anonymous account the session token issued at signup is the only credential that exists: we cannot reset it, cannot recognise you without it, and cannot restore access if you lose it, because we hold no fact about you to check. That is the trade you are making, and it is shown to you at the point you make it.
You are responsible for everything done through your account and with your credentials. API keys are confidential and must be treated as passwords; rotate them from the dashboard at the first suspicion of compromise, and tell us at [email protected].
5. No identity verification — and what that does not mean
We do not ask for identity documents, proof of address, selfies, source-of-funds statements or company papers, and we run no identity-verification process at all.
This is not an anonymity, privacy or transaction-mixing service. Blockchains are public; not attaching a name to a transaction is not the same as hiding it, and we make only the first claim.
Nor is it a waiver of anything that applies to you. You remain solely responsible for determining whether your activity requires a licence, a registration, your own customer-identification programme, tax reporting, or consumer-law compliance where you operate — and for complying with it. Our not asking is not our determination that you owe nothing.
We do screen blockchain addresses against sanctions data. What that covers, and the substantial things it does not, are set out in the AML and sanctions policy.
6. Acceptable use
The acceptable-use policy lists the prohibited activities and restricted jurisdictions in full and is binding. In summary, you may not use the Service to facilitate sanctioned transactions, money laundering, terrorist financing, fraud, mixing or tumbling, or any activity that requires a licence you do not hold. Breach is grounds for immediate suspension.
7. Your obligations as a merchant
- Your customers are yours. You are the seller. You owe your customers your own terms, your own refund policy, your own consumer-law compliance, and your own delivery of whatever they paid for. We are not a party to that contract and take on none of it.
- Disclose the payment method honestly — including that crypto payments are irreversible, which surcharge (if any) you are adding, and that the quoted rate holds only for the quote window.
- Handle your customers’ data lawfully. Where you pass us customer data through the API, you are the controller and we process it to run the Service for you.
- Do not misrepresent our role. You may not describe us as the seller, as a guarantor of your goods, or as regulated where we are not.
- Sandbox is not a demonstration of live processing. Do not present simulated results to your customers as real payments.
8. Operating modes
A project carries a sandbox or live designation and, separately, the deployment itself may or may not have on-chain broadcast enabled. Where broadcast is off, payouts and refunds complete against internal balances and carry a placeholder transaction reference beginning sandbox_ — no funds move on any chain. Treat a transaction reference in that form as simulated, always, regardless of what the surrounding UI says.
Where live broadcast is enabled, direct single payouts and direct refund calls are deliberately disabled in favour of the approved batch and operator workflows, which carry dual approval. Expect the endpoint to refuse rather than to behave differently.
9. Settlement, your balance and the risk reserve
A payment settles once the chain reaches the confirmation depth we apply for that network. Settlement splits the received amount across your payable balance, our fee, a network-fee reserve, and a risk reserve. Your balance therefore reflects the net, not the gross — you are never separately invoiced for fees.
The risk reserve is a small basis-point hold-back retained against reversals and losses. State it plainly: there is currently no automatic mechanism that releases the risk reserve back to you. It accrues and is shown as pending. Release is an operator action, and until one is defined you should plan on that portion being unavailable indefinitely. It also counts as a non-zero balance for the purposes of §15.
10. Fees
The authoritative fee schedule is the pricing page. Fees are charged in basis points on settled value, tiered per merchant, with an additional spread where the invoice currency differs from the settlement asset. Either you or your customer bears them depending on the fee mode you configure.
The network-fee component is a reserve, not a pass-through. It is a fixed per-asset figure applied in advance, subject to a profit-floor multiplier, and is not reconciled against the gas actually spent. Where the reserve exceeds the real cost we keep the difference; where it falls short we absorb it. We say this because “network fees are passed through at cost” would be untrue.
A fee quote is valid for a limited window and an invoice expires after its own, longer one. We reject quotes where the total fee would exceed a fixed proportion of the payment, so very small payments cannot be quoted at all.
11. Payouts
You withdraw your balance by requesting a payout to an address you specify. Payouts are debited from your available balance plus the network fee, are screened against sanctions data before creation, must satisfy any payout allowlist you have enabled on the project, and are subject to per-asset exposure caps. Batch payouts require two distinct approvers, and the creator of a batch cannot approve it.
A payout to an address you got wrong is not recoverable. See the risk disclosure, §4.
12. Refunds, disputes and the absence of chargebacks
Crypto rails have no issuer and no chargeback. Nobody can pull a confirmed payment back. Refunds are voluntary acts by you, funded from your balance, and the refund and dispute policy describes exactly what the system will and will not do — including that a refund can only go back to the address that paid, and that a dispute raised by your customer does not move money.
13. Webhooks and integration
Webhooks are signed and carry a replay window; verify the signature and enforce the window on your side. Deliveries are retried on failure and can arrive out of order or more than once, so your handler must be idempotent. Do not treat a webhook you have not verified as an instruction to release goods.
14. Availability and changes to the Service
We do not promise uninterrupted availability. We may add, change, deprecate or remove features, assets and networks. Where a change would break a working integration we will give reasonable notice through the dashboard and the changelog, except where a security or legal reason requires acting immediately.
15. Closing your account
You can delete your own account from the mobile app, or by calling DELETE /v1/me with the literal confirmation string DELETE. What actually happens, stated exactly:
- It is refused while any merchant you belong to holds a balance — available or pending, and the pending figure includes the risk reserve of §9. Withdraw first.
- It is refused if you are the sole owner of a merchant that still has other members. Transfer ownership first. A sole owner with no other members can delete.
- It requires your current password if your account has one. An anonymous account has none, so possession of the session token is the only credential checked.
- Your personal data is erased, not your history. Your email is replaced with a non-routable tombstone, your password hash is destroyed, your sessions are revoked, and your multi-factor and passkey credentials are deleted.
- Transaction and audit records are retained. They are no longer linked to an identifiable person. Financial-regulation record-keeping is the reason; see the Privacy Policy, §7.
- It is immediate and irreversible. There is no grace period and no undo.
- It closes your login, not the merchant. Projects, API keys and webhook endpoints are not deleted or revoked by this action. If you want the merchant shut down and its keys revoked, revoke the keys and disable the projects before deleting, or ask us at [email protected].
Deleting an account has no effect on your wallet. The wallet is on your device and its keys stay there, so the funds remain yours and remain recoverable from the recovery phrase in any compatible wallet. What does not survive without us is the convenience layer: balances, history and broadcast go through our API, so if that API is unavailable, this app cannot show or send until it is back. A custom RPC endpoint is planned and is not part of this version.
16. Suspension and termination
Either party may terminate on 30 days’ written notice. We may suspend or terminate immediately, without notice, where we reasonably believe there is a breach of §6, a sanctions or legal risk, a security compromise, or a risk of loss to us or to a third party. On termination you remain entitled to withdraw your available balance, subject to screening and to any lawful hold.
17. Intellectual property and feedback
We keep all rights in the Service, its software, and its brand; you keep all rights in your content and your data. You get a non-exclusive, revocable right to use the Service and its APIs while this agreement is in force. Feedback you send us we may use freely and without obligation.
18. Disclaimer
The Service is provided “AS IS” and “AS AVAILABLE”, without warranty of any kind, express or implied, including merchantability, fitness for a particular purpose, non-infringement, and uninterrupted or error-free operation. We do not warrant that screening will detect any given address, that a rate will be obtainable, or that a blockchain will confirm a transaction.
19. Limitation of liability
To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, consequential or punitive damages, nor for lost profits, revenue, goodwill or data. Our total aggregate liability arising out of or relating to this agreement is capped at the greater of (a) USD 100 and (b) the fees you paid us in the three months before the event giving rise to the claim.
We are not liable for loss caused by a recovery phrase you lost or disclosed, a transaction you sent to the wrong address or network, a blockchain reorganisation or outage, a third-party node, price or screening provider, or an act of your own customer. Nothing here limits liability for fraud, for death or personal injury caused by negligence, or for anything else that cannot be limited by law — and if you deal with us as a consumer, your non-excludable statutory rights are unaffected.
20. Indemnity
You will indemnify us against claims, losses and costs arising from your breach of this agreement or of the acceptable-use policy, from your use of the Service in breach of law, and from disputes between you and your customers.
21. Changes to these terms
We publish substantive changes on this page at least 30 days before they take effect, and email merchants who have given us an address. An anonymous account has no address to notify, so this page is the only notice you will get — check it. The effective date at the top of every page in this section is the one that governs. Continuing to use the Service after a change takes effect accepts it; if you do not accept it, stop using the Service and withdraw your balance.
22. Governing law and disputes
No national law is chosen as the governing law of these terms. There is no registered entity whose home jurisdiction would otherwise supply a default, and naming one anyway would assert a connection to it that does not exist. This does not disapply the mandatory consumer-protection rules of the country you live in — those apply regardless, wherever they cannot be excluded by agreement.
There is no designated court or arbitration forum, for the same reason. A dispute is handled directly: write to the contact address below and it will be looked at by a person, with a genuine attempt to resolve it before anything more formal. The address is [email protected]; give us 30 days to resolve it before anything more formal. Most things are resolvable that way and neither of us benefits from the alternative.
23. General
If a provision is unenforceable, the rest stands. Not enforcing a term is not a waiver of it. You may not assign this agreement without our consent; we may assign it as part of a transfer of the business. This agreement, with the policies listed at the top, is the entire agreement between us on its subject matter.
24. Contact
the operator of veilnebu.la
Registrations and authorisations held: None held.
[email protected]