Terms and Conditions

Version dated 11 November 2026.

Provider and contact

Wallet Connectors is operated by WEB3 DIGITAL WALLET, a French simplified joint-stock company (SAS), SIREN 910 399 435, registered with the Chartres Trade and Companies Register, with its registered office at 112 rue des Tuileries, 28260 Saint-Ouen-Marchefroy, France. Contact: contact@talao.io.

Purpose of the service

Wallet Connectors enables organisations to integrate electronic attestation issuance and verification into their applications and services.

The verification offering is intended, in time, to cover all types of attestations presented from European Digital Identity Wallets (EUDI Wallets), together with person identification data (PID). This includes age and identity verification. The categories and features currently available are those described in the customer's offer and service description; future extensions are not deemed available today.

The issuance offering covers non-qualified electronic attestations of attributes (EAAs). The customer determines the information attested, its source, the conditions for issuance and its validity. Using the service does not give these attestations qualified status.

Verification and responsibilities

Wallet Connectors performs the authenticity, integrity and trust checks provided for the supported attestation type. The result concerns the presentation received and the checks performed at the time of verification.

The customer determines the purpose of the request, the necessary information, the applicable legal basis and the consequences for its service. The customer remains responsible for decisions about access, account creation or acceptance of a transaction. A successful check does not, by itself, establish compliance with all sector-specific obligations.

The dedicated age-verification journey requests only confirmation of the required threshold, currently “18 or over”, without requesting a name or date of birth. This proof does not identify a person by name.

Identity verification relies on the person identification data presented by the user. A pseudonymous sign-in identifier may be used for account continuity. It is not a guaranteed unique legal identifier and does not make the data anonymous.

Intermediary role and customer registration

When Wallet Connectors requests or verifies attributes on the customer's behalf within the EUDI framework, WEB3 DIGITAL WALLET acts as an intermediary. The customer remains the organisation for which the information is requested. The respective roles are identified as required by the applicable rules.

The customer completes registration with the competent register in the Member State where it is established and keeps its information up to date. Registering with Wallet Connectors does not replace regulatory registration. Practical arrangements depend on national facilities and applicable deadlines; the gradual deployment of registers is not a general exemption. These requirements derive from Article 5b of eIDAS and Implementing Regulation (EU) 2025/848, as amended by Implementing Regulation (EU) 2026/1730. [1–3]

Certificates and information for users

An access certificate allows a wallet to authenticate the organisation or intermediary contacting it. A registration certificate describes the customer's declared purposes and information requests. These separate functions are addressed by ETSI TS 119 411-8 and ETSI TS 119 475. [4–5]

Wallet Connectors provides for integration of customer registration information and certificates into requests sent to wallets, in accordance with applicable requirements. The ETSI TS 119 472-2 profile requires inclusion of a registration certificate where the organisation has one. [6] The customer supplies the necessary information and reports changes affecting its validity or declared purposes. Using an intermediary does not remove the customer's own obligations.

Regulatory developments

WEB3 DIGITAL WALLET undertakes to adapt the relevant service functions to the regulatory requirements applicable to them, in accordance with their application dates. It monitors developments in the EUDI framework and relevant standards and informs customers of necessary steps and changes.

The customer cooperates with these changes, including registration and certificates. Registration and certificate issuance remain the responsibility of the competent body. If a mandatory condition is not met, the customer is informed of the necessary measures and any suspension of the affected service. Referencing a standard is not a declaration of certification.

Access, security and use

The service is intended for organisations and persons authorised to act on their behalf. Anyone subscribing on behalf of an organisation confirms that they have the necessary authority. Customers provide accurate information and protect their access credentials. Unauthorised access or incidents must be reported promptly to contact@talao.io.

Customers must not use the service unlawfully, request excessive information, attempt unauthorised access or compromise service security or individuals' rights. They must not describe an attestation as qualified unless that status is established.

WEB3 DIGITAL WALLET implements appropriate measures to protect the service. Maintenance, incidents and dependencies on third-party services may affect availability. Any specific availability and support commitments are those of the agreed contract or offer.

Offers, pricing and payment

Features, usage limits and prices are communicated before subscription. Applicable taxes, payment arrangements and, for subscriptions, renewal and cancellation conditions are specified before order confirmation. Accepted specific conditions supplement these terms and prevail for their subject matter in the event of conflict. A future feature is not included in the subscribed offer without an express commitment.

Two commercial delivery models

Wallet Connectors offers two ways to access its hosted service:

1. Through the available plugins, connectors and other integrations. Customers follow the journey supported by the solution, within its available features and configurations. For paid offerings under this model, billing and payment are handled through Stripe, subject to any applicable distribution platform rules.
2. Through tailored API access. Customers may build an integration adapted to their needs within the scope agreed with WEB3 DIGITAL WALLET. Services, access conditions, usage limits and prices are set out in a quotation or specific agreement. Invoices are issued manually; payment follows the arrangements agreed with the customer and may take place outside Stripe.

In both cases, the amount, taxes, payment method, any recurring payment frequency and cancellation arrangements are communicated before confirmation. Using another payment method does not change the accepted offer conditions. Free offerings and platform-specific conditions remain unchanged.

Where Stripe is used, it acts as a payment service provider; WEB3 DIGITAL WALLET remains the service supplier and the contact for billing, cancellation and refund enquiries at contact@talao.io. Monthly subscriptions offered through Stripe renew automatically under the accepted offer; cancellation is available through the provided portal and takes effect at the end of the paid period. Stripe's privacy information applies to its own processing; its service terms for merchants do not replace the contract between the customer and WEB3 DIGITAL WALLET.

These provisions concern general offerings outside the Shopify app. The Shopify-specific rules below continue to apply regardless of payment methods available for other offerings.

Artificial intelligence connectors and assistants

The local MCP connector enables Claude Desktop, Codex or a compatible local-model application to request age proof. It supplies a minimal result and necessary temporary references without itself sending conversation history to a model provider. A local model does not make Wallet verification offline.

The remote MCP server intended for ChatGPT is a distinct journey: its OAuth authentication isolates accounts and is not age proof. Its description guarantees neither deployment nor validation in ChatGPT nor directory approval. Access arrangements depend on the service actually made available.

After explicit agreement, the Talao Events demo uses a conversation sent to OpenAI to suggest fictional events. It is neither the generic MCP connector nor a ticketing or booking service. The Privacy Policy explains its data, recipients, retention and limits.

The agent receives status and age_over_18=true only after success, without a name, date of birth, complete credential or OIDC token. Results may be linked to an account or conversation and are not necessarily anonymous. They do not establish that the Wallet holder authored the conversation or replace a server-side access decision.

Customers must consider the rules of their AI application and model provider. WEB3 DIGITAL WALLET's no-training commitment does not guarantee every provider's practices. This service remains intended for organisations and their authorised representatives: availability of a demo does not create a direct consumer contractual offering. AI integration does not change EUDI obligations or retention commitments.

Shopify app: specific terms and free offering

The EUDI Wallet Age Verification app, including the sign-in service use provided for its merchants under this offering, is currently free. Paid general Wallet Connectors offers do not constitute charges for this app.

Any future app charges will be disclosed and submitted for merchant acceptance under Shopify's rules. They will use Shopify App Pricing or the Shopify Billing API, unless Shopify expressly authorises an exception. External payment, including Stripe, is not requested as a substitute for these mechanisms for the app. [11]

The app-specific privacy notice and merchant data processing agreement, version 2026-10-30-v1, supplement these terms and prevail within their specific scope in the event of conflict. These terms replace neither the detailed agreement nor evidence of its acceptance. Updating this page does not retrospectively amend accepted texts.

Actions required after receipt of a Shopify compliance notification are completed within thirty days, subject to the erasure exception for legally required retention. The period starts on receipt, not case closure. It is separate from the general GDPR deadline and cleanup of request payloads thirty days after closure. [10]

Integrated human review is optional and requires express merchant activation as well as service availability. The merchant performs the review and gives a reasoned answer; the provider supplies the tool and tracking. An integrated alternative is not guaranteed in every store. Where automated decisions may have legal or significant effects, Shopify's required manual-processing safeguards must actually be provided; merchant responsibility does not release the provider from its own obligations. The Privacy Policy describes this journey. [9]

Personal data

The Privacy Policy describes processing and individuals' rights. Where WEB3 DIGITAL WALLET processes data on the customer's behalf, the parties govern this processing through an agreement meeting Article 28 GDPR, including instructions, confidentiality, security, service providers, assistance and the end of processing. [7]

Approving a presentation in a wallet does not remove the customer's duties to inform individuals and establish a legal basis. Information must not be used for purposes other than those authorised.

Intellectual property

The Talao Wallet Login for EUDI Wallet WordPress plugin is distributed under the GPL-2.0-or-later licence. Any fees apply to the hosted verification service and do not restrict the rights granted by that licence.

The Moodle plugins auth_eudiwallet and local_eudiissuer are distributed under the GPL-3.0-or-later licence. Any fees apply to the hosted service and do not restrict the rights granted by that licence.

Access does not transfer ownership of the platform, trademarks or WEB3 DIGITAL WALLET content. Customers receive the usage rights necessary for their subscribed offer. Separately licensed components remain subject to their own licence. Customers retain their rights in their data and content and must have the necessary permissions to use them.

Liability and third-party services

Each party is responsible for breaches of its obligations under applicable law. Customers are responsible for their own business purposes and decisions; WEB3 DIGITAL WALLET remains responsible for its obligations in providing the service.

Wallet providers, attestation issuers and customer platforms are responsible for their respective services. Third-party involvement does not release WEB3 DIGITAL WALLET from its own obligations. Nothing excludes liability that cannot lawfully be excluded. The effects of force majeure are assessed under French law.

Suspension and termination

Unlawful use, a security threat, non-payment or failure to meet a mandatory regulatory prerequisite may justify suspension of the affected service. Customers are informed of the reasons and required action, with appropriate notice where circumstances permit. Immediate action may be necessary for security or legal reasons.

Customers may request closure at contact@talao.io and cancel their subscription under the agreed subscription conditions. Before termination, they arrange with the provider for return of any necessary data. Closure does not erase information subject to a retention obligation or copies independently held by a customer application. Deletion and return are governed by the Privacy Policy and applicable agreement.

Changes and complaints

Material changes are communicated before they take effect, with notice appropriate to their significance, except for legal or security emergencies. The update date identifies the document version. Acceptance is obtained where the nature of the changes or applicable law requires it.

Complaints may be sent to contact@talao.io. The parties seek an amicable resolution. These terms are governed by French law; failing an amicable resolution, jurisdiction is determined under applicable rules.

References

1. Regulation (EU) 2024/1183 amending eIDAS, including Article 5b.
2. Implementing Regulation (EU) 2025/848, registration of wallet-relying parties, as amended.
3. Implementing Regulation (EU) 2026/1730, amending Regulation 2025/848.
4. ETSI TS 119 411-8 V1.1.1, EUDI wallet-relying party access certificates.
5. ETSI TS 119 475 V1.2.1, wallet-relying party registration information and certificates.
6. ETSI TS 119 472-2 V1.3.1, attestation and person identification data presentations.
7. General Data Protection Regulation, including Articles 5, 6, 12–22, 25, 28 and 32.

8. EDPB: final Guidelines 4/2019 on Article 25.

9. Shopify: protected customer data.

10. Shopify: compliance and rights requests.
11. Shopify: App Store billing requirements.