Terms of Service

Effective: 15 May 2026 Last updated: 18 May 2026

1. The deal

These Terms are the agreement between you and Praxa Lab, the Australian business that operates the Caputchin platform (praxalab.com). By creating an account or using our service, you accept them. If you're signing up for a company, you confirm you have authority to bind that company.

"We", "us", and "our" in these Terms mean Praxa Lab. "Caputchin" is the product.

2. Your account

You're responsible for your account: keep credentials safe, keep the contact email current, and don't share the account with people who aren't supposed to act on your behalf. Site keys and Personal Access Tokens are passwords for your site.

You need to be old enough to enter a contract in your jurisdiction.

3. What you get, what you pay

Caputchin is a CAPTCHA platform. What's included in each plan, and the rate limits per plan, is on our pricing page and in our public docs. Plans are USD. We bill monthly unless you choose annual billing.

The only ceiling on usage is the per-second rate limit set by your plan. There is no monthly request cap.

You agree to pay all fees on time. Late payment may result in suspension after a reasonable notice period. We don't refund the current billing period. If you cancel, your plan stays active until the period ends and doesn't auto-renew.

Tax may apply on top of stated prices depending on your jurisdiction.

4. Acceptable use

You must not:

Use Caputchin on sites distributing CSAM, malware, or content illegal in your or our jurisdiction.
Use it to evade your own legal obligations.
Try to bypass the rate limit, scrape internal endpoints, or otherwise interfere with the service.
Re-sell the service as if it were yours, or imply you operate Caputchin when you don't (see Trademark Guidelines).

If you embed our widget on a site directed at children (under 13 in the US, under 16 in most of the EU, or younger where local law sets a lower age), you are responsible for children's-privacy compliance on your site.

5. Data

We don't collect identifying data about your visitors. Details in our Privacy Policy.

What we hold about you as a customer is your email (the only personal identifier, no organization name, real name, or phone number), your site key configurations, audit logs of your own management actions, and a billing pointer to Stripe (we don't store card numbers). Sessions use a server-minted pseudonymous handle.

Hosted verification briefly transits visitor form submissions through our infrastructure to your destination; we don't store them. The DPA governs this relationship.

Subprocessors are listed at /legal/subprocessors. Account deletion is hard. There is no soft-delete.

6. Marketplace games

Games published to the marketplace are authored by third parties. We don't curate, audit, or endorse them. Games run inside a sandboxed iframe with an opaque origin, so a malicious game cannot read your site's data or your users' data.

If a marketplace game does something inappropriate, report it and we'll consider delisting.

7. Service availability and warranty

The service is provided as is, without warranty of any kind to the extent permitted by law.

If you're a consumer protected by the Australian Consumer Law, the EU Consumer Rights Directive, or another consumer-protection regime, statutory rights apply on top of these Terms, not despite them.

8. Liability

To the extent permitted by law, neither party is liable for indirect, incidental, special, consequential, or punitive damages. Our total liability to you in any 12-month period is limited to the fees you paid us in that period.

This cap does not apply to your obligation to pay fees, either party's breach of confidentiality, our willful misconduct or gross negligence, or claims that cannot be capped by law.

9. Termination

You can cancel anytime from the dashboard. Your plan stays active until the end of the current billing period.

We can suspend or terminate your account if you breach these Terms.

When an account ends, your data is hard-deleted. Apex plan downgrades trigger a 30-day data freeze before deletion as a reversal and export window.