Terms of Service

By creating an account, generating an API key, or otherwise accessing the Service, you represent that you have the authority to bind yourself or your organisation to these Terms. If you do not agree to these Terms, you must not use the Service.

These Terms apply to all users of the Service, including individuals, government agencies, financial institutions, and enterprise organisations ("operators"). Different usage tiers may have supplementary terms communicated at the time of account creation.

The Service is designed exclusively for reading, storing, and querying data from ECOWAS biometric identity cards for legitimate identity verification purposes. You agree to use the Service only for lawful purposes and in accordance with these Terms.

You must not use the Service to:

• Process identity data without the knowledge and consent of the individuals concerned, where required by law
• Attempt to circumvent authentication controls or gain unauthorised access to other operators' data
• Reverse engineer, decompile, or create derivative works from the Service software
• Use the Service in any way that violates the Ghana Data Protection Act 2012 (Act 843) or any applicable national law
• Resell or sublicense access to the Service without prior written permission

We reserve the right to suspend or terminate access for any operator found to be in violation of these terms, without prior notice.

Access to the DREWQ API is granted through API keys issued to registered operator accounts. You are responsible for:

• Maintaining the confidentiality of your API keys and not sharing them with unauthorised parties
• All activity that occurs under your API key, whether authorised by you or not
• Promptly notifying us of any suspected unauthorised use or compromise of your API key
• Rotating your API key immediately if you believe it has been compromised

API keys can be revoked, rotated, or scoped from the operator dashboard at any time. We may revoke an API key without notice if we detect suspicious or abusive usage patterns.

We impose rate limits on API requests to ensure fair usage and platform stability. Current rate limits are documented in the API Reference. Exceeding rate limits may result in temporary or permanent suspension.

As an operator using the Service to process citizen identity data, you are the data controller as defined under applicable data protection law. You are responsible for:

• Ensuring you have a lawful basis for processing the personal data of individuals whose cards you scan
• Informing individuals about how their data will be processed, where required by applicable law
• Complying with the Ghana Data Protection Act 2012 and all other applicable privacy and data protection regulations
• Responding to data subject rights requests (access, erasure, rectification) relating to data you have processed
• Not retaining citizen data beyond the period necessary for your stated purpose

We act as a data processor on your behalf. Our data processing obligations are governed by our Privacy Policy and, for enterprise operators, a Data Processing Agreement (DPA) available upon request.

The Service, including all software, APIs, documentation, design, and branding, is the exclusive property of DREWQ and is protected by applicable intellectual property laws.

Nothing in these Terms grants you ownership rights in the Service. Your use of the Service does not transfer any intellectual property rights to you.

You retain all rights to data you upload to or generate through the Service. You grant us a limited licence to process that data solely to the extent necessary to provide the Service.

DREWQ is an independent developer tool built to read and verify the ECOWAS biometric identity card (also known as the Ghana Card), which is issued by the National Identification Authority (NIA). DREWQ is not affiliated with, endorsed by, or sponsored by the Government of Ghana or the NIA.

To the maximum extent permitted by applicable law, DREWQ and its directors, employees, and contractors shall not be liable for:

• Any indirect, incidental, special, consequential, or punitive damages arising out of or relating to your use of the Service
• Loss of data, revenue, profits, goodwill, or business opportunities
• Damages resulting from unauthorized access to or use of our servers or the personal data stored therein
• Interruptions or cessation of the Service for any reason, including maintenance, upgrades, or events beyond our control

In jurisdictions that do not allow the exclusion of certain warranties or limitation of liability, our liability shall be limited to the maximum extent permitted by law.

The Service is provided "as is" and "as available" without warranties of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, or non-infringement.

We reserve the right to modify these Terms at any time. When we make material changes, we will notify you by:

• Posting a notice in the operator dashboard at least 30 days before changes take effect
• Sending an email notification to the address registered with your account
• Updating the "Last updated" date at the top of this page

Your continued use of the Service after changes take effect constitutes your acceptance of the revised Terms. If you do not agree to the revised Terms, you must stop using the Service and delete your account before the changes take effect.

These Terms are governed by and construed in accordance with the laws of the Republic of Ghana, without regard to its conflict of law provisions.

Any dispute arising out of or in connection with these Terms, including any question regarding their existence, validity, or termination, shall be subject to the exclusive jurisdiction of the courts of the Republic of Ghana.

For operators located outside Ghana, you agree to submit to the jurisdiction of Ghanaian courts for the resolution of any disputes relating to these Terms or your use of the Service.

If any provision of these Terms is found to be unenforceable or invalid under applicable law, that provision shall be modified to the minimum extent necessary to make it enforceable, and the remaining provisions shall continue in full force and effect.