Terms of Service

Oxialink is a cryptocurrency payment gateway. We generate deposit addresses, watch the relevant blockchains for incoming payments, credit settled payments to your account balance, and broadcast withdrawals to addresses you nominate. Supported coins, networks, fees and confirmation requirements are published on the site and readable from the API, and may change as networks evolve.

We are not a bank, an exchange, a custodian of fiat currency, or a money transmitter for national currencies. We do not convert crypto to or from national currency, and we never hold or move money in a bank account on your behalf. Balances held with us earn no interest and are not covered by any deposit insurance or investor protection scheme.

A sandbox environment is available for integration testing. It runs on public test networks. Coins there have no value, balances there are not withdrawable, and nothing in it carries any availability commitment.

You must be at least 18 years old, or the age of majority where you live, and you must have the authority to enter into these terms on behalf of any business you register for. You must provide an email address you actually control: it is how we reach you about your own money, and losing access to it can mean losing access to your account.

No identity documents are required to open an account. That is a deliberate design choice, not an absence of rules. Sections 3 and 4 still apply, and we may refuse, suspend or close an account where we are legally obliged to or where we have reasonable grounds under those sections.

You are responsible for everything done under your account. Keep your password, API keys and webhook secret confidential. Anyone holding your API key and secret can create invoices and request withdrawals as you; treat them as you would treat a password, rotate them if you suspect exposure, and prefer wallet-scoped keys in integrations so a leak exposes one wallet rather than the account.

You may not use Oxialink for, or to facilitate, any of the following. This list is not exhaustive, and we read it by substance rather than by label.

• Anything unlawful where you operate, where your customers are, or where we operate.
• Money laundering, terrorist financing, sanctions evasion, or handling the proceeds of crime.
• Fraud of any kind, including deceptive merchandising, fake stores, and phishing.
• Ponzi, pyramid, matrix, high-yield investment or other schemes that pay earlier participants from later ones.
• Mixing, tumbling, or any service whose purpose is to obscure the origin of funds.
• Ransomware, extortion, malware, stolen data or stolen credentials.
• Child sexual abuse material, human trafficking, or any non-consensual sexual content.
• Sale of weapons, explosives, controlled substances, or prescription medicines without lawful authority.
• Unlicensed gambling, or gambling offered into a jurisdiction where it is prohibited.
• Impersonating another business, or infringing someone else's trademark or copyright.
• Attempts to disrupt, overload, probe or gain unauthorised access to the service or to other users.

If you are unsure whether what you sell is acceptable, ask before you integrate rather than after. We would far rather answer the question early.

You may not use the service if you, your business, or its beneficial owners are subject to applicable sanctions, or if you are acting on behalf of someone who is. You are responsible for your own compliance with the law where you operate.

Where we are legally required to, we will act on a valid legal order, and we may restrict an account, withhold a withdrawal, or disclose information in order to comply. We will tell you when we do, unless we are prohibited from telling you.

Fees are published on the fees page and readable from the public API. They are deducted from the amount rather than added to it, and both the deposit and the withdrawal leg carry a fee: the network cost of accepting a payment is real, and so is the cost of sending one. Changes to fees are announced before they take effect and never applied retroactively to a payment already settled.

Each coin has a published minimum payment. Below it, moving the funds off the receiving address costs more in network fees than the payment is worth, so an invoice for less than the minimum is refused at creation rather than accepted and then quietly lost. A payment that arrives below the minimum anyway cannot be credited and cannot be returned.

Sending an asset to an address for a different asset or a different network usually destroys it. We cannot recover funds sent to the wrong network, to a contract address, or to an address we do not control. Check the network, every time.

A confirmed blockchain payment is final. Nobody can reverse it, which is the main reason to accept crypto and also the main thing you take on by accepting it. There are no chargebacks and no rolling reserve.

Because there is no reversal mechanism, refunds are yours to make. If you refund a customer you do it by sending crypto from your own balance, at whatever the rate is when you send it. We do not hold funds back to fund refunds and we are not a party to any dispute between you and your customer.

Payments settle on-chain into addresses we control and are credited to your balance. You may withdraw to an address you nominate at any time, subject to the published minimum and fee. We hold those balances to operate the service, not as an investment: they are not lent, staked on your behalf, or used to earn a yield for you, and no interest accrues.

Withdrawals are broadcast to the network you choose. Once broadcast, a transaction is outside our control, and an address you give us incorrectly cannot be corrected by us.

You sell to your customers; we do not. Your obligations to them under consumer law, distance selling rules, refund policy, delivery, and anything else are yours, and accepting payment through us changes none of them.

You are also responsible for telling your customers what they need to know: that crypto payments are final, what happens if they underpay, and how long you hold an order while an invoice is unpaid.

The API is rate limited per account by plan, and the limits are published. Do not attempt to circumvent them, and do not use the service in a way that degrades it for others. Automated retries should back off rather than hammer.

Additive changes to the API ship without notice. Anything that could break a working integration would be announced first, and the documented changelog records what moved.

The service is provided as is. We do not promise uninterrupted availability. Blockchain networks congest, node providers fail, and exchange rates come from third parties; where the underlying network or a provider is the cause, the outcome is outside our control.

To the maximum extent permitted by law, we are not liable for lost profits, lost revenue, lost business or indirect or consequential loss, and our total liability for any claim is limited to the fees you paid us in the three months before the event giving rise to it.

Nothing here excludes liability that cannot lawfully be excluded, including for fraud or for death or personal injury caused by negligence.

We take reports of security problems seriously and will not pursue anyone who reports one in good faith, acts in proportion, does not access or alter data belonging to others, and gives us a reasonable opportunity to fix it before publishing. Send reports to security@oxialink.com, or to support@oxialink.com with SECURITY in the subject line.

Testing against the sandbox is welcome. Testing that degrades the live service for other merchants is not, and automated scanning of the production API is not authorisation to exceed the rate limits.

You may close your account at any time; withdraw your balance first, because a closed account cannot be paid out to. We may suspend or close an account that breaches these terms, that we reasonably believe is being used for something in section 3, or where we are legally required to.

Where we suspend an account we will tell you why and what would resolve it, unless we are prohibited from doing so. Where a suspension is not the result of unlawful conduct, you keep the right to withdraw your balance.

We do not confiscate balances. An account with no sign-in and no activity for two years may be marked dormant, and we will attempt to contact you at your registered email before doing anything further. A dormant balance remains yours and remains withdrawable.

Taxes are yours. We do not withhold, report or file on your behalf, and the fact that no identity documents were required to open an account has no bearing on what you owe where you live. Records of every payment and withdrawal are available in your dashboard for exactly this purpose.

We may update these terms. Material changes will be announced on the site and by email to the address on your account at least 14 days before they take effect, except where a change is required immediately by law or to address a security risk. Continuing to use the service after a change takes effect means you accept it.

Write to support@oxialink.com first. Almost every dispute we see is a misunderstanding about one transaction, and those are resolved faster directly than through any formal process. We will tell you what we can see and what we cannot.

Where that does not settle it, these terms are governed by the law applicable at our place of establishment and by the courts competent there. Nothing in this section removes a protection that consumer law in your own country gives you and does not allow you to waive.

If any part of these terms is found unenforceable, the rest continues to apply. Our not enforcing a term on one occasion does not waive it. You may not transfer your account or your rights under these terms without our written consent; we may transfer ours as part of a merger, acquisition or sale of the business, on notice to you.

Neither party is liable for failure to perform caused by something genuinely beyond its reasonable control. These terms, together with the fee schedule and the documentation they refer to, are the whole agreement between us.

General and account questions: support@oxialink.com. Security reports: security@oxialink.com, or support@oxialink.com with SECURITY in the subject line.