Terms of Use

Acceptance of terms

By registering an account, subscribing to a plan, or using the LightOTP API, you confirm that you have read, understood, and agree to these Terms of Use. If you are using the Service on behalf of a company, you confirm that you have authority to bind that company.

The service

LightOTP provides an API for sending WhatsApp One-Time Passwords and related transactional messages through Meta's WhatsApp Business Platform. Features, pricing, and plan details are described on lightotp.com and in our documentation. We may evolve the Service over time.

Eligibility and account

You may use the Service only if:

• You are at least 18 years old and have legal capacity to enter into a binding contract.
• You are using the Service for business or professional purposes. LightOTP is not intended for personal consumer use.
• The information you provide during registration is accurate and kept up to date.
• You are not barred from using the Service under applicable law or any sanctions regime that we are subject to.
• You are responsible for all activity that happens under your account, including the actions of team members you invite.

Acceptable use

When you use the Service, you must:

• Comply with the WhatsApp Business Messaging Policy and all other Meta policies that apply to the WhatsApp Business Platform.
• Only send OTPs and related transactional messages to recipients who have requested them.
• Follow applicable telecommunications, consumer-protection, privacy, and anti-spam laws in every country you send messages to.

You must not:

• Use the Service to send promotional, marketing, or otherwise unsolicited content under the guise of OTPs.
• Send phishing, fraudulent, misleading, or otherwise illegal content.
• Attempt to circumvent rate limits, security measures, or access controls.
• Reverse-engineer, resell, or repackage the Service without our written permission.
• Use the Service in a way that could damage, disable, overburden, or impair our infrastructure.

API keys and security

API keys are confidential credentials. You are responsible for generating, storing, and rotating them securely. Any action taken using your API key is attributed to your account, so keep keys out of public code repositories, client-side apps, and shared logs. If you suspect a key has been exposed, rotate it from the dashboard immediately and contact us.

Plans, credits, and payment

LightOTP operates on a credit-based, annual subscription model:

• You choose a plan from the pricing page, which grants you a set number of messages (credits) for a one-year term.
• Each message deducts credits based on the destination country and the sender-name type (our name or your brand).
• Payment is processed manually — after you confirm an order, our team contacts you via WhatsApp or email to arrange payment and activate your plan.
• Prices shown on the pricing page apply to the current billing cycle and may change for future cycles. We will notify you before any renewal.

No refunds

All fees are non-refundable. Unused credits expire at the end of the subscription year and are not pro-rated on cancellation. Because LightOTP is a business-to-business service, the 14-day consumer cooling-off period under German and EU consumer law does not apply.

Service availability

We work hard to keep the Service available and reliable, but we do not commit to a specific service level unless we have agreed one with you in a separate written agreement. Delivery of messages depends on Meta's WhatsApp infrastructure and on downstream mobile networks, which are outside our control.

Third-party services

The Service relies on Meta's WhatsApp Business Platform. Your use of WhatsApp messaging through our API is also subject to Meta's applicable terms and policies. You are responsible for making sure your use complies with them.

Intellectual property

We retain all rights, title, and interest in and to the LightOTP platform, software, documentation, branding, and related materials. You retain ownership of the content and message templates that you upload. You grant us a limited, non-exclusive licence to process that content solely as needed to operate the Service.

Data processing

When you submit end-user phone numbers for OTP delivery, you act as the data controller for that data and LightOTP acts as a data processor on your behalf. That processing is governed by our Data Processing Agreement (DPA), which we will make available on request. Our own handling of your account, billing, and website data is described in the Privacy Policy.

Limitation of liability

To the fullest extent permitted by law, our aggregate liability to you for any claim arising out of or related to the Service is capped at the total fees you paid us in the 12 months before the event that gave rise to the claim. We are not liable for indirect, incidental, consequential, special, or punitive damages, or for lost profits, lost revenue, or lost data. Nothing in these Terms limits liability that cannot be limited under mandatory German law, including liability for willful intent, gross negligence, or personal injury.

Indemnification

You will defend, indemnify, and hold us harmless from any third-party claim arising out of your use of the Service in breach of these Terms, including claims related to the content of messages you send or your violation of applicable law.

Termination

You may stop using the Service at any time. We may suspend or terminate your account if you materially breach these Terms or if we are required to do so by law or by a third-party platform we depend on (for example, Meta). Termination does not entitle you to a refund. Sections that by their nature should survive termination — including intellectual property, limitation of liability, indemnification, and governing law — will survive.

Changes to these terms

We may update these Terms from time to time. When we make material changes, we will update the "Last updated" date and, for active customers, notify you by email. Your continued use of the Service after the effective date of the change constitutes acceptance.

Governing law and jurisdiction

These Terms are governed by the laws of the Federal Republic of Germany, excluding conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods. The exclusive place of jurisdiction for any dispute arising out of or relating to these Terms is the court competent for our registered office in 03253 Doberlug-Kirchhain, Germany, to the extent permitted by law.

Contact us

For any question about these Terms, contact us at: