Terms and Conditions

1. These terms

These terms are the agreement between you and Identity Stack A/S, C. A. Olesens Gade 4, 9000 Aalborg, Denmark (CVR no. 42894389) ("Identity Stack", "we", "us") for your use of the BusinessID app.

Please read them before you create an account. By creating one you accept them, and you accept the purpose of the identity check described in section 6. If you do not accept them, do not install or use the app.

You can save or print these terms at any time from the app or from businessid.eu/terms-and-conditions, and we keep earlier versions available there. Our Privacy Policy forms part of this agreement and explains how we handle your personal data.

2. Who we are, and how to reach us

Identity Stack A/S, C. A. Olesens Gade 4, 9000 Aalborg, Denmark (CVR no. 42894389).

Support and general enquiries: support@businessid.eu
Privacy, data rights, security and compliance: compliance@businessid.eu

We reply in Danish and English.

3. Words we use

"BusinessID" or "the App" — the BusinessID application for iOS and Android and the services provided through it.
"Account" — your personal BusinessID account.
"PIN" — the personal code you choose to confirm actions in the App.
"Service Provider" — a business, organisation or public body that accepts BusinessID.
"Verification method" — how you prove your identity to us: a national electronic ID (in Denmark, MitID), a European Digital Identity wallet, or a passport or identity document read with your phone and matched against your face. The current list is in the App.
"Device" — the mobile phone on which you use the App.

4. What BusinessID does

We verify who you are once, and then let you prove that identity again and again. With BusinessID you can:

Register with a Service Provider.
Log in to a Service Provider's website or app.
Approve a transaction or a request.
Share specific verified information about yourself, and only what you choose to share.

You control every step. Before anything is sent, the App shows you who is asking and what they want. Nothing is shared until you approve it with your PIN or your device's biometric unlock.

5. Who can use BusinessID

You need:

A supported iOS or Android device that is not rooted or jailbroken.
A mobile phone number that is yours.
A verification method the App accepts.

You may hold only one account, and it must be in your own name.

5.1 If a school or organisation asks you to use BusinessID

Some schools, clubs and employers accept BusinessID as a way to log in. They are Service Providers like any other: they decide what they ask for and what they do with it, under their own terms. Using BusinessID with them gives them no access to your account, your other activity or your data beyond what you approve.

6. How we verify your identity

The purpose of the check is to establish that you are the person you say you are — so that Service Providers can rely on your BusinessID, and so that no one can use your identity but you. By starting the check you accept that purpose.

There are two routes. Before you begin, the App tells you what you will need and what will happen at each step.

6.1 With a national electronic ID or a wallet

You authenticate with your national electronic ID — in Denmark, MitID — or release the information we ask for from your European Digital Identity wallet. We receive your verified identity, and we never see your credentials. Nothing biometric happens on this route, and we ask only for what we need.

6.2 With a passport or identity document

You hold your document to your phone so we can read its chip, and you record a short live video of your face. We then:

Check the chip's electronic signature, to confirm the document is genuine and has not been altered.
Check that the document is valid and has not been reported lost or stolen.
Check that a real, live person is present — not a photograph, a mask or a recording.
Compare your face with the portrait stored on the chip.

The last two steps use biometric data and need your explicit consent, which the App asks for before the check starts. You can decline and use a national electronic ID or a wallet instead. The Privacy Policy explains what we do with the biometric material and how quickly we delete it.

A still photograph is not enough for this check, and neither is a document without a readable chip. That is deliberate: it is what makes the check strong enough to be relied on.

6.3 If the check does not succeed

You can try again, or use the other route. If you believe an automated check has got it wrong, you can ask us to have a person look at it — write to support@businessid.eu. We will tell you the outcome, and we will not refuse you an account on the basis of an automated decision alone.

We may decline to verify you, or reverse a verification, if the document is invalid, if the checks fail repeatedly, or if we reasonably suspect fraud.

7. Setting up your account

Setting up takes four steps:

Download the App from the App Store or Google Play.
Confirm your mobile phone number with a one-time code we send you by SMS.
Verify your identity, as described in section 6.
Choose a PIN and, if you want, turn on your device's face or fingerprint unlock.

Once this is done, your account is bound to that device by cryptographic keys held in your phone's secure hardware. That binding is what makes BusinessID secure — and it is why you have to enrol again if you change phone.

8. Your account is personal

Your account is yours and yours alone. You may not let anyone else use it — not a partner, not a family member, not a colleague, not even with your permission. Use it only to identify yourself, and only for accounts you have a legal right to access.

Your PIN is personal and confidential. No one has any right to ask for it — not a bank, not the police, not us. We will never ask you for your PIN.

9. Keeping your account safe

You are responsible for the security of your Device, your PIN and your account. You must:

Give accurate information, and use a genuine, valid identity document that is your own.
Choose a PIN that is not easy to guess, and not one you use elsewhere. Do not write it down or store it in your phone.
Enter your PIN where no one can see it.
Keep your Device locked, keep its software up to date and do not leave it unattended.
Not register anyone else's fingerprint or face on your Device if you use biometric unlock for BusinessID.
Not use BusinessID on a rooted or jailbroken Device.
Check what you are approving before you approve it. If a request looks wrong or you did not expect it, decline it.
Review your history in the App from time to time, and tell us about anything you do not recognise.
Tell us without delay if your Device is lost or stolen, if you think someone knows your PIN, or if your identity document is lost, stolen or cancelled.

10. Blocking and unblocking

You can block your account at any time, in the App or through the channels in section 2. Once blocked, it cannot be used until you unblock it.

Your account is blocked automatically if you enter an incorrect PIN three times in a row. To use BusinessID again, enrol again by repeating the steps in section 7.

If you forget your PIN, block your account and enrol again.

11. What BusinessID is not

BusinessID establishes who you are and confirms that it is you acting. That is all it does. In particular:

It says nothing about your authority to act for a company or another person, your creditworthiness, your qualifications or your entitlement to anything.
It does not create an electronic signature unless and until we tell you otherwise.
It may not be used for any unlawful purpose, or to identify anyone other than yourself.

Whether a Service Provider accepts you, and on what terms, is their decision and not ours.

12. Availability

We will use reasonable efforts to keep BusinessID available, but we cannot promise it will always work without interruption. It depends on your device, your internet connection, your verification method and services we do not control.

We may suspend the service for maintenance or updates, and without notice where there is a security risk or a suspicion of fraud. We will restore it as quickly as we reasonably can.

We do not control your verification method. Each national electronic ID scheme and each wallet is operated by its own provider under its own terms — in Denmark, MitID is operated under the Danish Agency for Digital Government. If your verification method is unavailable or returns incorrect data, take it up with that provider.

We may change the App's features. If we remove or materially change something you rely on, we will tell you in the App or by email at least 30 days beforehand, unless the change is needed for security or by law.

13. Suspending or closing your account

We may suspend or close your account, with notice where we reasonably can and without notice where we cannot, if:

We reasonably suspect fraud, misuse or unauthorised access.
You break these terms.
Your identity data turns out to be incorrect, or your identity document is reported lost, stolen, cancelled or invalid.
We are required to do so by law or by a competent authority, or the law does not allow us to offer BusinessID to you.
There is a serious technical or security reason.

We will tell you why, unless the law prevents us, and we will tell you how to put it right where it can be put right.

14. Price

BusinessID is free for you. Service Providers pay us. You pay your own costs for your device, your internet or mobile data connection, and any charges from your mobile operator.

15. Our liability

Nothing in these terms limits our liability for death or personal injury caused by our negligence, for fraud, or for anything else that cannot be limited under the law that applies to you — including your rights as a consumer, which these terms do not affect.

Subject to that, we are not liable for:

Loss caused by your Device, software, internet connection or mobile network failing.
The acts, omissions, services or data handling of Service Providers, verification method providers or other third parties.
Loss caused by you not following these terms, in particular section 9, or by you sharing your PIN or letting someone else use your account.
Events beyond our reasonable control, including outages at third parties, attacks that reasonable security measures could not prevent, or acts of authorities.
Indirect or consequential loss, loss of profit, loss of business, loss of data or loss of goodwill.

Where we are liable, our total liability to you is limited to EUR 200 for any one event and EUR 200 in aggregate in any twelve-month period.

BusinessID is provided "as is" and "as available". We do not warrant that it will be error-free.

16. Our records

We keep a log of what you do with BusinessID — the identity check, enrolment, logins, approvals, blocking and account closure — for 10 years. In a dispute, that log is evidence of what happened, without preventing you from producing evidence to the contrary. The Privacy Policy sets out what is in it, and the shorter periods that apply to biometric material.

17. Intellectual property

BusinessID, its software, design and name belong to Identity Stack or our licensors. We grant you a personal, non-transferable, non-exclusive licence to use the App for your own purposes for as long as this agreement lasts.

You may not copy, modify, reverse-engineer, decompile, rent, sell or create derivative works from the App, except where the law says you may despite this restriction.

18. How long this agreement lasts, and ending it

This agreement runs indefinitely.

You can end it at any time, without cost, by closing your account in the App or by contacting us. Deleting the App alone does not close your account.

We can end it by giving you one month's notice, or immediately in the circumstances described in section 13.

If we stop providing BusinessID altogether, we will give you at least three months' notice and tell you what happens to your records.

When the agreement ends, your licence to use the App ends with it. Sections 15, 16, 17 and 22 survive. Because the service starts as soon as you create your account, and it is free, the statutory right of withdrawal has no practical effect — but you can close your account at any time, as above.

19. Changes to these terms

We may change these terms. We will tell you in the App or by email at least 30 days before a change takes effect. If you do not accept the new terms, close your account before they take effect; continuing to use BusinessID means you accept them.

We may make changes with immediate effect where they are required by law or needed for security, and will tell you as soon as we can.

20. Complaints

Tell us first: support@businessid.eu. We acknowledge complaints within 5 working days and aim to resolve them within 30 days.

If we cannot resolve it, you can take it to:

The consumer dispute body in the EU or EEA country where you live, or the European Commission's online dispute resolution platform at ec.europa.eu/consumers/odr. In Denmark, the Center for Complaint Resolution, Nævnenes Hus, Toldboden 2, 8800 Viborg, www.naevneneshus.dk.
For complaints about your personal data, the data protection authority in your country, or the Danish Data Protection Agency (Datatilsynet) as our lead authority.
The courts, under section 22.

21. Privacy

We process your personal data as described in our Privacy Policy, available at businessid.eu/privacy-policy and in the App. It forms part of this agreement.

22. Law and courts

Danish law applies to this agreement, and disputes go to the Danish courts, with the City Court of Aalborg as the court of first instance.

If you are a consumer resident in another EU or EEA country, this does not deprive you of the protection of the mandatory consumer law of your own country, and you may also bring proceedings in the courts there.

23. General

If any part of these terms is found invalid, the rest continues to apply.

We may transfer our rights and obligations to another company, provided your rights are not reduced. You may not transfer yours.

Not enforcing a term does not mean we give it up.

These terms and the Privacy Policy are the whole agreement between us about BusinessID.