apiCEP.cloud Terms and Conditions

1. Acceptance of the Terms

These Terms and Conditions (the "Terms") govern access to and use of the services offered by apiCEP.cloud (the "Platform"), operated by Oscar Maya Cuellar (the "Provider"), with address in Cuauhtemoc, Chihuahua, Mexico.

By registering, generating an API Key, or making any use of the Platform, you fully accept these Terms. If you act on behalf of a legal entity, you represent that you have sufficient authority to bind such entity.

2. Service Description

apiCEP.cloud is a software-as-a-service (SaaS) platform that provides an API to:

• Extract, through optical character recognition (OCR), the data contained in images of SPEI transfer receipts.
• Query and validate in real time the corresponding Electronic Payment Receipt (CEP) in the Banco de México (Banxico) system.
• Return structured data in JSON format, including temporary download links for the CEP in XML and PDF formats.

The Provider does not guarantee continuous, uninterrupted, or error-free availability of the service, and may modify functionality at any time with reasonable prior notice.

3. Registration and Access Credentials

3.1 To access the API, the User must register on the Platform providing accurate, complete, and up-to-date information.

3.2 The generated API Key is personal and non-transferable. The User is solely responsible for its custody and confidentiality.

3.3 Any unauthorized use of the API Key must be reported immediately to the Provider via email at contacto@apicep.cloud. The Provider shall not be liable for losses arising from unauthorized use of credentials whose custody is the User's responsibility.

3.4 The Provider reserves the right to suspend or revoke credentials upon evidence of misuse, fraud, or breach of these Terms.

4. Plans, Pricing, and Billing

4.1 The Platform offers the following subscription plans, valid for 30 calendar days from the activation date:

4.2 Prices listed do not include the applicable Value Added Tax (VAT), unless expressly indicated otherwise at the time of charge.

4.3 Requests not used within the validity period are non-cumulative, non-refundable, and non-transferable to the next cycle.

4.4 The Provider may modify prices and plan conditions with at least 15 calendar days' prior notice. Changes will not affect active subscriptions until the start of the next renewal cycle.

4.5 In case of non-payment, access to the API may be suspended without further notice once the payment term has expired.

5. Permitted Use and Restrictions

5.1 The User agrees to use the Platform exclusively for legitimate and lawful purposes, including: validation of received payments, bank reconciliation, automation of internal processes, integration into billing systems, ERP, CRM, marketplaces, or proprietary chatbots.

5.2 The following is strictly prohibited:

• Using the Platform to commit, facilitate, or conceal financial fraud of any nature.
• Reverse engineering, decompiling, or attempting to extract the source code of the API.
• Reselling, sublicensing, or transferring access to the API to third parties without the Provider's written authorization.
• Intentionally exceeding the established rate limits or using automated mechanisms to circumvent such controls.
• Submitting false images or data with the purpose of altering validation results.
• Using the API in a way that overloads, damages, or interferes with the infrastructure of the Platform or of Banco de México.

5.3 Breach of any restriction in this section entitles the Provider to suspend or cancel access immediately and without refund, without prejudice to any applicable legal action.

6. Rate Limits and Availability

6.1 Each plan has a concurrent request limit and a quota reset period, reflected in the HTTP headers X-RateLimit-Limit, X-RateLimit-Remaining, and X-RateLimit-Reset of each response.

6.2 The Provider does not guarantee a specific availability level (SLA) on the free and entry plans. For high-availability needs, the User must contact the Provider to negotiate customized terms.

6.3 The Provider may perform scheduled maintenance with prior notice and emergency maintenance without prior notice when required by service security or stability.

7. Files and Data Retention

7.1 Files generated by the Platform (original images, CEP XML, and CEP PDF) are stored temporarily at storage.apicep.cloud and are automatically deleted 15 calendar days after their generation.

7.2 It is the User's sole responsibility to download and retain in their own systems the files required for audit, accounting, or regulatory compliance purposes within that period.

7.3 The Provider shall assume no liability for the loss of files once the retention period has elapsed.

8. Intellectual Property

8.1 The Platform, including its source code, OCR algorithms, design, documentation, trademarks, logos, and content, is the exclusive property of the Provider or its licensors, and is protected by the Federal Copyright Law and other applicable legislation.

8.2 Use of the Platform does not grant the User any ownership rights over the foregoing elements. A non-exclusive, non-transferable, revocable license is granted solely to access the API in accordance with these Terms.

8.3 Data processed by the User through the API (receipt images, transfer data) is the property of the User or its clients. The Provider acquires no rights over such data except those necessary to provide the service.

9. Personal Data Protection

9.1 The Provider processes personal data in accordance with the Federal Law on Protection of Personal Data Held by Private Parties and its applicable regulations, as well as the Privacy Notice available at https://www.apicep.cloud/privacidad.

9.2 Data the User processes through the API and that corresponds to third parties (beneficiary names, CLABEs, RFCs, etc.) is the User's responsibility as data controller before such data subjects. The Provider acts solely as data processor under the applicable provisions of the Law.

9.3 The User warrants having the necessary legal bases (consent, contractual relationship, or other) to process third-party data through the Platform, and releases the Provider from any liability arising from the breach of this obligation.

9.4 Data subjects may exercise their ARCO rights (Access, Rectification, Cancellation, and Opposition) through a request directed to privacidad@apicep.cloud.

10. Limitation of Liability

10.1 The Platform is provided "as is". The Provider does not guarantee that OCR or validation results are 100% accurate, complete, or error-free. Validation against Banxico depends on the availability of the Banco de México service, which is a third party outside the Provider's control.

10.2 The Provider shall not be liable for:

• Commercial or financial decisions made based on API results.
• Direct, indirect, incidental, special, or consequential damages arising from the use or inability to use the Platform.
• Interruptions, delays, or errors caused by third parties, including Banco de México, cloud providers, or telecommunications networks.
• Data loss arising from the expiration of the file retention period.

10.3 In no event shall the Provider's total accumulated liability to the User exceed the amount paid by the User in the calendar month in which the event giving rise to the claim occurred.

11. Modifications to the Service and to the Terms

11.1 The Provider may at any time modify the functionality, endpoints, response structure, or service plans, notifying the User at least 15 calendar days in advance via email or notice on the Platform, except in cases of force majeure or urgent security requirements.

11.2 Modifications to these Terms will be published at https://www.apicep.cloud/terminos with an indication of the update date. Continued use of the Platform after the effective date constitutes acceptance of the modified Terms.

12. Termination

12.1 The User may cancel their subscription at any time from their user panel. Cancellation takes effect at the end of the active billing cycle, with no right to a proportional refund unless expressly agreed.

12.2 The Provider may suspend or terminate the User's access immediately, with or without notice, upon:

• Breach of any provision of these Terms.
• Fraudulent or unlawful use of the service.
• Confirmed non-payment after expiration of the corresponding term.
• Decision to discontinue the Platform, with at least 30 calendar days' prior notice.

13. Independence of the Parties

The User and the Provider are independent parties. Nothing in these Terms creates an agency, partnership, franchise, representation, or employment relationship between the parties.

14. Force Majeure

The Provider shall not be liable for delays or failures arising from causes beyond its reasonable control, including but not limited to: failures in third-party services (Banco de México, cloud providers), natural disasters, acts of authority, cyberattacks, or Internet infrastructure outages.

15. Governing Law and Jurisdiction

These Terms are governed by the laws of the United Mexican States. For any dispute arising from their interpretation or performance, the parties expressly submit to the jurisdiction of the competent courts of the city of Cuauhtemoc, Chihuahua, waiving any other jurisdiction that may correspond to them by reason of their present or future domicile.

16. Contact

For any inquiry, clarification, or report related to these Terms:

• Email: contacto@apicep.cloud
• Website: https://www.apicep.cloud
• Privacy notice: https://www.apicep.cloud/privacidad