If You are not a Visa Member the following Visa Product Terms apply to You:
General Terms
- For purposes of the Visa Digital Enablement SDK (“SDK”), references in these Product Terms and elsewhere in the Agreement to accessing or using an “API” or “APIs” mean downloading, accessing and using the SDK.
- Your access to, use, and/or distribution of the Visa Digital Enablement SDK capabilities is subject to the Visa Digital Enablement SDK Service Description and Technical Implementation guide and all other documentation in relation to use thereof as made available, updated, supplemented and amended from time to time by Visa and is limited to actions on behalf of and subject to the Member for which you are an Agent.
- Prior to any access and use of the Visa Digital Enablement SDK, You must provide Visa with a written agreement between You and a Visa Member that makes You an Agent for the use of this Visa Product, completed and signed by the Member for which You are an Agent (“Agent Agreement”).
- Modification of SDK. Visa may modify any of the SDK capabilities, features or functionalities as described in the Visa Digital Enablement SDK Service Description upon 30 days written notice to You, for which email or VBN (Visa Business Notification) will suffice.
- In addition to an Agent Agreement from each Visa Member, Program Managers, Processors, Integrators and Distributors are required to provide Visa with current lists of customers utilizing the SDK along with the respective version number. Visa reserves the right to ask for such updated lists from time to time.
- Distributors and Integrators may only provide the SDK to direct customers of the Distributors and Integrators which are Members. Distributors and Integrators shall not resell or provide the SDK to any other entities, including, but not limited to other Distributors or Integrators.
Additional Distributor and Integrator obligations:
- Distributor or Integrator shall work directly with Visa in order to make the SDK available to its participating clients and their respective participating cardholders under the terms set forth in the Agreement.
- Distributor or Integrator shall provide participating clients with all relevant documentation, FAQ, technical support, implementation and other technical guidelines as reasonably necessary and shall flow down the applicable terms, use restrictions and obligations under the Agreement to the participating clients as if they were You under the Agreement.
- Distributor or Integrator must collect and/or ensure the destruction of any documentation which was provided to a participating client of the Distributor or Integrator when the participating client is no longer under contract by the Distributor or Integrator.
- Distributor or Integrator shall provide customer service and technical support associated with the SDK including all communication with each participating client and all direct to consumer communications. If a customer service request or technical problem requires additional input from Visa, Distributor or Integrator shall facilitate all communications between Visa and the participating client or consumers. As between Visa and Distributor or Integrator, Distributor or Integrator shall be the party responsible for training all participating clients in connection with the SDK. As between Distributor or Integrator and participating clients, Distributor or Integrator shall serve as the primary contact to Visa for all implementation related issues including those related to the participating clients. You may access and use the Visa Digital Enablement SDK capabilities only for accounts of the Member for which You are an Agent which have undergone and passed customer verification (KYC), following appropriate Cardholder and/or authorized user authentication and, if applicable, with such Issuer Partners which have undergone and passed OFAC checks. Any changes in the Program as specified in the Agent Agreement, including but not limited to a change in Issuer Partners, if applicable, require the submission of an updated signed Agent Agreement prior to any access or use of the Visa Digital Enablement SDK hereunder.
- In addition to the terms of this Agreement, You are obligated to comply with all applicable provisions of the Visa Digital Enablement Program (“VDEP”) Agreement of the Member for which You are an Agent, and the Visa Rules as if You were such Member under these terms, as well as with the VisaNet Letter of Agreement, as applicable; provided that, for Issuer Program Managers, Integrators and Issuer Processors, such compliance includes being PCI DSS compliant. For Issuer Partners and Distributors, PCI DSS standards need to be complied with if the Issuer Partner or Distributor has access to Cardholder Information.
- You may access and use the Visa Digital Enablement SDK capabilities only for card accounts which have undergone and passed customer verification (KYC), following appropriate Cardholder and/or authorized user authentication and, if applicable, with such partners that have undergone and passed OFAC checks. You, or the Member for which You are an Agent, must obtain all Cardholder consents and provide all Cardholder notifications necessary in order to provide Visa with the relevant Card data and enable Visa to perform its obligations under the Agreement.
- Future SDK Services Functionality. Visa may agree to offer optional/additional SDK capabilities, features or functionalities to You or Your Issuers in the future. Such future SDK capabilities may, in Visa’s sole discretion, require mutually executing additional amendments to the Agreement and may be subject to additional pricing, terms, third party agreements, as well as host/processor/issuer considerations which, if applicable, may be addressed in the additional amendments and/or future versions of the Visa Digital Enablement SDK Service Description and Technical Implementation Guide.
- You may not modify the Visa Digital Enablement SDK or decipher, translate or access the source code of the Visa Digital Enablement SDK and any of it’s supported capabilities, features or functionalities. Other than in the form of an access grant as a Distributor or Integrator to eligible clients hereunder, You will not share or provide access to the Visa Digital Enablement SDK or any components of it with any of its vendors, suppliers, agents, technology providers or other third parties, including but not limited to resellers or additional program managers, processors or other issuer partners, unless approved by Visa in the form of a Third Party Technology Provider Schedule.
- You will implement any standard updates or upgrades to the Visa Digital Enablement SDK within 12 months from the respective release. In addition, You may be asked to update the Visa Digital Enablement SDK within a short time period due an emergency update related to security or third party modification which could negatively impact the use of the SDK. Such emergency updates should be applied as soon as possible or within the time frames provided by Visa. Visa reserves the right to suspend support of prior versions of the Visa Digital Enablement SDK and Visa will discontinue support for versions which have been updated or upgraded 12 months after the update or upgrade.
- You are responsible for supporting the end users of its Application, as well as the Member for which You are an Agent, and Visa disclaims any and all liability with respect to Your end users.
- Visa reserves the right to schedule maintenance windows with advanced notification during which the Visa Digital Enablement SDK capabilities will not be available.
- You acknowledge and agree that several of the capabilities enabled through the Visa Digital Enablement SDK depend on the actions and input by third parties, such as the relevant digital wallets or other third party end points, both with respect to timeliness and data accuracy. Visa does not have insight into or control over such third-party actions and input and disclaims any and all liability.
- Visa will begin billing You for Visa Digital Enablement SDK fees commencing on (i) the day You initiate SDK calls in production based on the Visa Digital Enablement SDK or (ii) 30 days following the Production Live Date, whichever comes first, except for one time implementation Setup Fees and BIN Fees, which shall become due on the Production Live Date. For purposes of this Section, “Production Live Date” is defined as the date when Visa enables You to initiate SDK calls in production based on the Visa Digital Enablement SDK by providing You with the relevant signature secret and the encryption secret.
- Except in the Visa Asia Pacific Region, our authorization to optionally access and use the Visa Universal Card Enrollment API on behalf of the Member for which You are an Agent, is limited to the purpose of enrolling Your or the Issuer’s cardholder accounts participating in Your or Issuer’s program within the relevant Card Portfolios/BIN Ranges by requesting a universal card identifier.
Additional Capability Specific Terms
Visa Stop Payment Service:
- You may use the Visa Stop Payment Service (VSPS) API only on behalf and at the direction of a Visa Member and subject to such Visa Member’s (i) ongoing participation in VSPS, (ii) payment of applicable VSPS usage and client configuration management fees, (iii) completion of all applicable enrollment documentation required by Visa (iv) designation of You as its VSPS processor in the enrollment documentation and (v) compliance with the Visa Rules.
- You are responsible for implementation with and connection to the VSPS API, any APIs between You and the relevant Visa Member and management of the relationship and communication with the Visa Member with regards to the VSPS API. Visa is not obligated to address any issues regarding the VSPS API directly with Visa Members.
- Without limiting any other VSPS requirement as set forth in the Rules, You understand that usage of VSPS does not remove any obligation of the Cardholder to meet payment terms or any other agreement with the merchant, including but not limited to informing the merchant the Cardholder wishes to cancel the respective service.
- VSPS includes various functions, allowing to search, retrieve, add, cancel, update and extend stop instructions, and also to research eligible transaction history. You may use all functions available as part of VSPS, but use is strictly limited to the set up and maintenance of stop instructions for the participating Visa Member’s Cardholders.
- Clause 2 (Data Privacy Terms when the Parties act as a Controller) of the Additional Visa Developer Platform Privacy & Data Protection Terms for Visa Products Schedule in the Terms of Use applies to the Processing of Personal Information in connection with Your use of the Visa Products.
Card-On-File Data Inquiry:
- You may access and use the Visa Card on File Data API only subject to the terms of the Visa Card on File Data API Reference Guide. To use and access this Visa Product, You must provide evidence to Visa that (i) You are the Agent of a Visa Member for purposes of using this Visa Product, and (ii) Your access and use of this Visa Product is at the direction and on behalf of the Visa Member for which You are an Agent and only to provide services to such Visa Member. Your use of the Visa Member’s Cardholder data received from Visa is limited to the delivery of services back to that same Visa Member, using the Visa Card on File Data API.
- If such Visa Member is not participating in either the Visa Token Services or the Visa Account Updater, You understand that its experience with Visa Card on File Data API will be limited and Visa Card on File Data API may be unable to display where credential updates have occurred on stored cards.
- You represent and warrant that You have Your applicable Visa Member’s and the relevant Cardholder’s authorization to (a) provide Visa with Cardholder data for use in connection with the Visa Card on File Data API and (b) receive from Visa data related to Visa Card accounts as well as transaction data that is submitted for processing through the Visa payment system for such Visa Member’s Cardholders enrolled in applicable card on file or stored credential service offerings. Any Cardholder data provided by Visa is provided AS IS, Visa has no insight into the currency or accuracy of the Cardholder data and disclaims any and all liability. You should communicate directly with the Visa Member for verification of accuracy.
- Visa may modify any of the Card on File Data API capabilities, features or functionalities as described in the Visa Card on File Data API Reference Guide upon written notice to You, for which email or general announcement via the Visa Developer Platform portal will suffice.
- You are responsible for managing the relationship with the applicable Visa Member with regards to the Visa Card on File Data API, including but not limited to communications with the Visa Member about the service, technical support and implementation.
- For clarity, You and the applicable Visa Member are responsible for implementing data privacy and data protection measures in compliance with applicable Laws and Privacy and Data Protection Regulations, including but not limited to the collection, receipt, provision and processing of Cardholder data by, to and from Visa. Visa has no insight into, no responsibility for and disclaims any and all liability with respect to such measures and Cardholder notices and authorizations, including any security breaches or violations of Privacy and Data Protection Regulations on Your or the Visa Member’s side.
Visa Digital Card Display:
For Non-Visa Europe Region: If You are not in the Visa Europe Region, the following terms govern Your use of Visa Digital Card Display:
- Your access to and use of the Digital Card Display is subject to Your (and, as applicable, the Member for which You are an Agent’s): (i) compliance with the Visa Rules (ii) applicable prior selections in the Customer Information Questionnaire (CIQ) and (iii) compliance with the deliverables regarding CVV2 in accordance with the Documentation.
- You and the Member for which You are an Agent, are required to, at a minimum, authenticate Cardholders in compliance with applicable Laws, including, as applicable, step-up authentication or double authentication.
- You hereby authorize Visa to display any available Card art (including Your and/or Issuer trademarks, service marks, logos, and digital Card art provided by You) that You have provided to Visa for use with the SDK. You are required to obtain the relevant authorizations and approvals from the Member for which You are an Agent.
For Visa Europe Region: If You are in the Visa Europe Region, the following terms govern Your use of Visa Digital Card Display:
- Conditions of API access. Your access to and use of the Visa Digital Card Display is subject to Your (and, as applicable, the Member for which You are an Agent’s (“TPA Member”)): (i) compliance with the Visa Rules; (ii) applicable prior selections in the Customer Information Questionnaire (CIQ); (iii) selections for provision of dCVV2 or CVV2 and its corresponding deliverables in accordance with the Documentation; (iv) in case You choose to use dCVV2, (A) separate and prior enablement of the applicable BIN range, or account range in the dCVV2 service, or instruction by Visa to enroll the entire range, (B) use of the dCVV2 Authenticate API (in case of PAN by PAN enrollment), subject to Your selection of the dCVV2 Authenticate API as a separate API under this Agreement, or ISO 0302 message to enroll individual PANs; and (C) flagging of the relevant BIN or account range as “eligible” for Visa Digital Card Display.
- Required checks. You may access and use Visa Digital Card Display only for Visa Card accounts or Card accounts of the third party networks listed in the Documentation that have undergone and passed customer verification (KYC) and, if applicable, with such partners that have undergone and passed OFAC checks. You and Your TPA Member are required to, at a minimum, authenticate Cardholders in compliance with applicable Laws, including, as applicable, step-up authentication or double authentication.
- Card art. You hereby authorizes Visa to display any available Card art (including Your and/or Issuer trademarks, service marks, logos, and You-provided digital Card art) that You have provided to Visa for use with the SDK or through its participation in the Visa Token Service when Visa provides the Services hereunder. You are required to obtain from Your TPA Member the relevant authorizations and approvals required by this Section.
- Use of Universal Card Enrollment API. Your access to Visa Digital Card Display includes access to and requires use of the Visa Universal Card Enrollment API, which You may call only for the purpose of enrolling Your Cardholder accounts participating in the Your program by requesting a universal card identifier for each relevant Card. Your rights to use the Universal Card Enrollment API granted in connection with other Services under this Agreement remain unaffected.
Visa Push Provisioning:
Push Provisioning to Digital Wallets
- Conditions of API access. Your use of this capability is further subject to the Visa Member for which you are an Agent (“TPA Member”) (i) being a current participant in the Visa Token Service through an effective VDEP Agreement or an equivalent agreement enabling participation in the Visa Token System and (ii) having active enrollments for those digital wallets, other endpoints and Issuing Identifier ranges for which You intend to use the Visa Digital Enablement SDK capabilities, as separately approved by Visa (where such approval may require Issuer’s attestation of a separate agreement with the respective digital wallet provider, an agreement through the Visa Token Service, or other requirements, as applicable).
- Authorized scope. Your authorization is limited to the access and use of the Visa Digital Enablement SDK capabilities in Your role as an Issuer Program Manager, Issuer Processor, Integrator, Distributor and/or an Issuer Partner, in each case to enroll or allow the Issuer to enroll Issuer cardholder accounts participating in the Program within the relevant Card Portfolios/BIN Ranges by verifying eligibility of the relevant digital wallet and/or to enable provisioning of a token for such cardholder accounts through the relevant digital wallets.
- If You are using In-App Provisioning through Apple extensions, You are responsible for facilitating connectivity with the Apple Wallet app, including development work beyond the scope of integration with the Visa Digital Enablement SDK.
Push Provisioning to Visa Card Enrollment Hub (VCEH)
- Conditions of VCEH access. Your use of this capability is further subject to the Visa Member for which you are an Agent (i) being a current participant in the Visa Token Service through an effective VDEP Agreement or an equivalent agreement enabling participation in the Visa Token Service and compliance with such agreement, (ii) having active enrollments for those digital wallets or other end points and Issuing Identifier ranges for which You intend to use the Visa Digital Enablement SDK capabilities, as separately approved by Visa (where such approval may require attestation of a separate agreement with the respective digital wallet provider, endpoint provider or Visa, an agreement through the Visa Token System, or other requirements, as applicable), and (iii) executing a current VCEH addendum to its VDEP or other participation agreement in the Visa Token Service (the “VCEH Addendum”).
- VCEH terms. For the avoidance of doubt, provisioning into VCEH through the SDK does not relieve You or Your sponsoring Issuer of any of its sponsoring Issuer’s obligations under the VCEH Addendum, including but not limited to the relevant end user notification obligations thereunder.
Order Insight Digital:
- In response to Your API calls, Visa will attempt to respond with information, if available, obtained from participating merchants and in Visa databases.
- If Your API call requests information that is unavailable, cannot be retrieved, or Visa deems such information subject to Trade Restrictions that prevent Visa from sharing such information, Visa will respond confirming such unavailability; provided that, Visa’s response will not note whether any SKU/receipt level information is unavailable.
- You may only use data obtained through a call to the OID API in connection with the resolution of a cardholder’s dispute of transactions with that cardholder’s bank cards. You may not use, store or otherwise process such data for any other purpose.
- Additionally, if You are an Agent, You must ensure that each of Your customers that are Members, comply with this Agreement (including these Product Terms) and the Visa Rules, so long as the corresponding Member for which You are an Agent has not accepted the Agreement (as part of creating a Developer Account) to allow Your use of OID on behalf of such Member. Failure to do so is a material breach of this Agreement, and permits Visa to, among other things, immediately terminate access to the OID API and VDP.