Legal
In short
- Software and API. Neccessory LLC provides software that estimates heart rate, breathing and related readings from a video of a face, delivered as an API and SDKs.
- Orders through Paddle. Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders.
- Prepaid tokens. Cloud measurements are paid from a prepaid token balance. You buy token packs at the prices on the pricing page. Failed measurements and test keys are not charged.
- 30-day refund. Any token pack can be refunded in full within 30 days of purchase. See the Refund policy.
- Wellness use only. Not a medical device and not medical advice. Do not use the results to diagnose, treat or make decisions about anyone's health.
- No decisions about people. Do not use the service to make decisions about people or to sort them into categories, and never use emotion or gaze for hiring, evaluating employees or in education.
- One person per organization. An organization has a single account. There are no members, roles or invitations.
Who we are and when these terms apply
These terms are an agreement between Neccessory LLC ("Neccessory", "we", "us") and the organization that creates an account in the Neccessory console or uses a Neccessory API key or SDK ("you").
You accept these terms when you create an organization in the console and tick the box that refers to them, or when you use an API key or SDK, whichever happens first. If you accept them for a company, you confirm that you are allowed to bind that company.
The Privacy policy and the Refund policy are part of these terms.
Orders and payment through Paddle
Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders.
Paddle runs the checkout, takes the payment, issues the receipt and invoice, charges any sales tax or VAT and processes refunds. When you buy a token pack, Paddle's buyer terms apply to the purchase in addition to these terms. Questions about a charge can go to Paddle or to us.
What the service is
Neccessory is software delivered as an API and SDKs. It analyzes a short video of a person's face and returns estimates of heart rate, heart rate variability, breathing rate, a stress index and signal quality. Blood pressure, blood oxygen saturation (SpO₂), emotion and gaze are experimental estimates and are marked as beta in the results.
The service consists of:
- Cloud API: measurement computed on our servers from a live camera stream or from a recorded video you upload. A cloud key is available as soon as you register.
- Web SDK: a browser library that measures in the cloud or on the device. Provided on request.
- iOS SDK: a native library that measures on the device. A pre-release version is provided on request.
- On-device mode: measurement inside the user's browser or app. Available after we approve an application in the console.
- Console and documentation: keys, balance, spend, measurements, webhooks, a Playground to try a measurement, and developer documentation.
You build the screen, the instructions and the consent flow in your own product. The SDKs do not include a ready-made measurement screen.
Wellness use only, not medical advice
The results are estimates for wellness and information purposes. Neccessory is not a medical device and has not been cleared or approved by any regulator. The service does not provide medical advice, diagnosis or treatment.
Do not use the results to diagnose, treat, prevent or monitor any disease, in emergencies, for continuous patient monitoring, or to make any decision about a person's health. Blood pressure and SpO₂ are experimental and may be inaccurate. Anyone with a health concern should see a qualified professional.
We do not publish accuracy figures and make no promise that a result matches a medical instrument. Lighting, movement, camera, skin tone and other conditions affect the estimates, and a measurement may return no result.
The flag that says a result was computed on Neccessory servers only tells you where the numbers were computed. It does not confirm who was in front of the camera, that they were a live person, or that the video was recorded at that moment.
Your organization, account and keys
- An organization has exactly one account, held by one person. You cannot invite colleagues or add members or roles.
- You are responsible for keeping your password, API key secrets and webhook secrets safe and for everything done with them. A key secret is shown once. We store only a hash of it, so we cannot show it again; if it is lost, rotate the key.
- Keys that begin with nk_test_ are test keys. They return a synthetic result, do not process real people and do not spend tokens.
- For each key you can set limits: requests per minute, seconds of video per month, a monthly spend cap and the metric sets the key may request. When a limit is reached, further requests with that key are refused until the limit allows them again.
- Do not put a key secret inside an app or a web page. Your server creates a short-lived pass for each measurement, as described in the documentation.
Tokens and token packs
Cloud measurements are paid from a prepaid balance of tokens held by your organization. The current rates, the pack sizes and their prices are on the pricing page and are shown to you before checkout.
- What a token pays for. A cloud measurement costs tokens for each second of video processed, plus a fixed amount for each optional metric set that was actually computed. Heart rate, breathing, stress and signal quality are included in the per-second rate.
- When tokens are spent. Tokens are spent only when a cloud measurement completes with a result. A measurement that fails, is stopped or times out is not charged, and a metric set that could not be computed is not charged.
- What is not charged. Test keys and on-device measurements do not spend tokens.
- Balance and spend caps. Before a cloud measurement starts we check your balance and the monthly spend cap of the key. A single measurement can take the balance slightly below zero; the next one is refused until you top up.
- Buying tokens. You buy token packs in the console. Paddle takes the payment, and the tokens are added to your balance once Paddle confirms it.
- Welcome grant. A new organization receives a welcome grant of tokens, shown on the pricing page. It has no cash value and cannot be refunded or transferred.
- Where tokens can be used. Tokens can only be used for measurements in the Neccessory service and cannot be exchanged for money, except through a refund under the Refund policy.
- Price changes. We may change rates and pack prices by publishing them on the pricing page. A change applies from the moment it is published.
Refunds
Every token pack can be refunded in full within 30 days of purchase, without conditions. Refunds are processed by Paddle to the original payment method. The details are in the Refund policy. Statutory rights of consumers in the EU, EEA and UK are not limited.
Your obligations to the people you measure
- Measure a person only with their knowledge and consent. A cloud measurement starts only when your request confirms that consent was given. Obtaining that consent, and being able to show it later, is your responsibility.
- Tell people truthfully how their data is handled. If you use cloud mode, do not say that processing is local: face images are sent to Neccessory for processing, and the result is stored.
- Send us a user reference only as an opaque identifier. Do not put names, email addresses or other personal details in it.
- Upload a recorded video only with the consent of the person in it.
- Show the results as wellness estimates, together with the disclaimer and the beta label where the documentation asks for them.
- If your users are in Russia, contact us before connecting cloud mode.
Acceptable use
You may not use the service, or let anyone else use it:
- to make automated decisions about people, or to categorize or rank people, on the basis of a result;
- to use emotion or gaze in hiring, to evaluate, monitor or rank employees, or in education, including proctoring and assessing students;
- for insurance underwriting, risk scoring, pricing or any decision about an insurance policy;
- for medical diagnosis, treatment or monitoring of patients, or in emergencies;
- to present a result as proof of a person's identity or of their being a live person;
- to identify people from face images or results, or to build identity templates;
- to measure people covertly or without their consent;
- to break the law, including data protection and consumer protection law;
- to get around keys, request signing, limits, spend caps or the protection of on-device models, or to overload the service;
- to copy, decompile or reverse engineer the closed parts of the service. Open-source components remain under their own licenses.
Results and data
You control the measurement results stored for your organization. You can view, export in CSV and JSON and delete them in the console. We process them only to provide the service, as described in the Privacy policy.
For measurements of your users, you decide why and how people are measured, and we process their data on your behalf.
Availability and changes to the service
We work to keep the service available, but we do not commit to a specific level of availability. The public status page shows whether the API and cloud processing are working.
Beta features may change or be removed. We may change or discontinue other parts of the service.
Open-source components
Parts of the SDKs are built on open-source software, including a browser measurement engine released under the MIT License, and the face tracker the SDK loads from a public CDN. Those components are governed by their own licenses, which take precedence over these terms for those components.
Suspension, termination and deleting your organization
- You can stop using the service at any time and delete your organization in the console. Its keys stop working at once and running cloud jobs are stopped. After 30 days its measurements, logs, jobs, webhooks, balance history and keys are permanently deleted and any remaining balance is forfeited. You can cancel the deletion during those 30 days.
- Deleting your organization does not take away your right to a refund of a token pack bought within the last 30 days. Request it before or after deletion as described in the Refund policy.
- We may suspend or close an organization that breaks these terms, in particular the acceptable use rules, or where the law requires it. Where the law and the situation allow, we will tell you the reason first and give you a chance to fix it.
Liability
- The service provides estimates and is offered as it is. We do not guarantee that a result is accurate, complete or available for every measurement.
- You are responsible for how you and your users use the results. We are not liable for decisions made on the basis of a result, or for indirect losses such as lost profit, lost revenue, lost data or damage to reputation.
- Our total liability to you for all claims is limited to the amount you paid for token packs in the 12 months before the claim arose.
- Nothing in these terms limits liability that cannot be limited by law, such as liability for fraud or for death or personal injury caused by negligence, or the statutory rights of consumers.
Changes to these terms
We may update these terms. The new version is published on this page with a new date. If you keep using the service after the new version takes effect, it applies to you. If you do not agree with it, stop using the service; your right to refunds under the Refund policy is not affected.
Contact
Neccessory LLC. For questions about these terms, write to support@neccessory.com.