Terms of service

1. About these terms

These terms are an agreement between Passionate Talents B.V., Graan voor Visch 19905, 2132 WR Hoofddorp, the Netherlands (KvK 92791360, "we", "us") and the business that creates a RightDoor account ("you", the customer). They apply to the RightDoor API, the dashboard and everything else we offer under the RightDoor name (together, "the service").

You accept these terms when you create an account or use an API key. If you accept them for a company, you confirm that you may bind that company.

The data processing agreement is part of these terms. The privacy policy explains how we handle our own data about you. If you have a signed Enterprise contract, section 21 explains which document wins.

2. Who may use RightDoor

RightDoor is for businesses: developers, agencies, web shops and other companies that handle shipping addresses. It is not meant for consumers. If you use it as a consumer anyway, the rights that consumer law gives you and that can't be excluded stay intact; nothing in these terms takes them away.

3. Your account and API keys

• Give correct details when you sign up and keep them up to date, especially your email address: we send security and billing notices there.
• Keep your password and two-factor codes to yourself. Two-factor authentication is required before you create or rotate a live API key and before you change your plan or your spend setting.
• API keys are secret and belong to your account. Send them only in the Authorization header from your own servers. Don't put them in URLs, browser code, apps or public repositories, and don't share them with other businesses.
• The full key is shown once, when you create it. You can have at most two active keys per environment, so you can rotate a key without downtime.
• If a key leaks, revoke it in the dashboard and tell us at support@rightdoor.eu. A revoked key stops working within 60 seconds.
• You are responsible for all use of the service under your account and keys, until you revoke a leaked key.

4. What the service does

RightDoor looks up and validates postal addresses in the Netherlands and Belgium. You use it through the REST API at api.rightdoor.eu and manage your account, keys and billing in the dashboard at app.rightdoor.eu. The documentation at api.rightdoor.eu/docs describes the endpoints and responses.

Access for AI agents (MCP) and a Shopify app may be offered later. If and when we offer them, these terms apply to them too, plus any extra terms we publish for them.

We improve the service over time and may change or remove features. If a change materially reduces what you pay for, we tell you by email at least 30 days ahead and you may cancel before it takes effect.

5. Verdicts are advice

The API tells you whether an address matches the official registers and how confident it is. That is advice. You decide what your checkout or back office does with it, and you are responsible for that decision.

The registers can be incomplete or behind reality, for example for new buildings. A real address can be missing, and an address that matches can still be undeliverable. We don't guarantee that every verdict is correct.

Your integration must fail open: if RightDoor is slow, returns an error or is unavailable, accept the address and check it later. We recommend a timeout of 1.5 seconds in checkout and 5 seconds in back-office processes.

6. Data sources and their licences

• Netherlands: Kadaster BAG (Basisregistratie Adressen en Gebouwen), published as public domain.
• Belgium: BeST Address from FPS BOSA, licensed under CC BY 4.0.

If you show or pass on Belgian address data from our responses, keep this attribution with it: "Contains BeST Address data from FPS BOSA, licensed under CC BY 4.0." Belgian responses carry it in the meta.attribution field.

RightDoor is not an official body and is not endorsed by Kadaster, FPS BOSA or any carrier. Carrier names such as PostNL, bpost, DHL and Sendcloud appear only as formats our output fits. Every response names the dataset version it was checked against; we don't promise how often the data is refreshed.

7. Availability and support

We work to keep RightDoor fast and available, but we don't guarantee uptime. A service level agreement (SLA) is available only in an Enterprise contract. Current availability is shown on the status page.

We may interrupt the service for maintenance, security fixes or reasons outside our control. We keep planned interruptions short and announce them on the status page when we can.

Support is by email at support@rightdoor.eu, on working days.

8. Plans, verifications and limits

The current prices are also on the pricing page. Enterprise terms are agreed in a separate contract.

What counts as one verification:

• one lookup or one validation, whatever the result (valid, corrected, ambiguous or invalid), including answers from our cache;
• in a batch, each item;
• suggestions sent with the same session id, together with the first validation with that session id within 10 minutes, count as one;
• suggestions without a session id count as one per 10 calls per day.

Errors on our side, requests we reject (for example because of a rate limit or a missing key) and calls with test keys never count.

Test keys are free on every plan and give the same answers as live keys, limited to 100 calls a day and 10 a minute. They are for building and testing an integration, not for production traffic.

Quotas. The included verifications are per billing period: for paid plans the monthly period of your subscription, for the free Developer plan the calendar month (UTC). When you reach the included amount, the Developer plan stops until the next period. Paid plans also stop, unless you turn on pay-as-you-go in the dashboard; it is off by default. When the service stops for a quota, the API answers with the code QUOTA_EXCEEDED and a link to upgrade. We email you at 80% and 100% of your included verifications.

Rate limits protect the service. If you send requests faster than your plan allows, the API answers with status 429 and tells you when to retry.

9. Billing, payment and taxes

• Stripe bills paid plans monthly in advance, from the day you subscribe. Pay-as-you-go verifications are billed at the end of the period in which you used them.
• Prices are in euros and exclude VAT. We add VAT where it is due. EU businesses with a valid VAT ID are reverse-charged. You are responsible for giving a correct VAT ID.
• You can pay by card, Apple Pay, Google Pay or Link. Invoices are available in the dashboard and by email.
• Our usage counts are the basis for billing. You can see them in the dashboard. If you think a count is wrong, tell us within 30 days of the invoice.
• If a payment fails, Stripe retries it and we email you. Your paid plan keeps working for 7 days. After that your account gets the limits of the free Developer plan until the open invoice is paid. We never delete your API keys because of a failed payment.

10. Plan changes, cancellation and refunds

• Upgrades apply at once. You pay the difference for the rest of the period (prorated).
• Downgrades and cancellations take effect at the end of the current billing period. Until then you keep your current plan.
• After a cancellation your account moves to the free Developer plan. Your account and keys stay until you delete the account.
• We don't refund partial periods, except where the law requires it or these terms say so.
• We announce price changes by email at least 30 days in advance. A new price never applies to a period that has already started. If you don't agree, you can cancel before the new price applies.

11. Acceptable use

Use RightDoor to check and complete the addresses your business handles. Don't:

• extract or enumerate the address data in bulk, for example by walking postcode ranges or rebuilding a register through the API;
• resell or share raw API access, or offer it as your own address API, unless we agreed to that in writing;
• use the service to identify, track or profile individuals;
• try to get around rate limits, quotas, authentication or other protections, for example by spreading traffic over several accounts;
• send personal data you have no legal basis to send, or special categories of personal data;
• probe, overload or attack the service, or use it for anything unlawful.

The register data is open, and you can get it from Kadaster and FPS BOSA directly. The API is not a way to download it.

12. Suspension and termination

We may suspend API keys or your account if you break these terms, if your use puts the service or other customers at risk, if your keys appear to be compromised, or if the law requires it. Where we can, we tell you first and give you a reasonable chance to fix the problem. We lift a suspension once the reason is gone.

You can cancel your plan in the dashboard at any time (see section 10). To close your account entirely, cancel your plan first, then delete the account on the Account page of the dashboard. A cancelled plan still runs until the end of its billing period, with its last invoice as usual.

We may end the agreement at once if you seriously or repeatedly break these terms, and otherwise with 30 days' notice by email. If we end it without a breach on your side, we refund what you paid in advance for the time after it ends.

When the agreement ends, your access ends, fees already due stay due, and we delete your data as the privacy policy describes. The sections on intellectual property, confidentiality, liability, indemnity and law keep applying.

13. Intellectual property

• The service, its software, documentation and the RightDoor name and brand belong to us or our licensors. While the agreement lasts, you may use the service as these terms describe. That right is not exclusive and you can't transfer it.
• The register data keeps its own licence (see section 6).
• Your data stays yours. You let us process it only to provide the service. You may keep and use the results we return in your own business, for example the corrected address on an order, within the limits of section 11.
• If you send us feedback or ideas, we may use them without any obligation to you.

14. Confidentiality

Each of us keeps the other's non-public information confidential and uses it only for this agreement: for example your API keys and usage, and our security details and any terms agreed for you alone. This doesn't apply to information that is public, that the other party already had or developed on its own, or that the law or a court requires to be disclosed.

15. Personal data

When you send addresses of your customers to the API, you are the controller and we are your processor. The data processing agreement sets out how we handle that data. You make sure you have a legal basis to send it and that your own privacy notice tells your customers about it. Our own processing of your account data is described in the privacy policy.

16. Warranties

We provide the service with reasonable care and skill. Beyond that, and as far as the law allows, we provide it as it is: we don't promise that it is uninterrupted or error-free, that the register data is complete or current, or that it fits a particular purpose.

17. Liability

• Our total liability under this agreement is limited to the fees you paid us in the 12 months before the event that caused the damage. On the free Developer plan it is limited to €100.
• We are not liable for indirect or consequential loss, such as lost profit, lost sales, lost orders, missed savings or damage to reputation.
• Because verdicts are advice (section 5), we are not liable for what your checkout or back office decides based on them.
• These limits don't apply to damage caused by our intent or gross negligence, or where the law doesn't allow liability to be limited.
• Report any claim to us in writing as soon as you can, and at the latest within 12 months after you learned of the damage.

18. Indemnity

You indemnify us against claims from third parties, including authorities, that result from your misuse of the service, your breach of section 11, or personal data you sent us without a legal basis. We tell you promptly about such a claim and let you take part in the defence.

19. Events outside our control

Neither of us is liable for failing to perform because of events outside reasonable control, such as outages of hosting or network providers, attacks, government measures or natural disasters. If such an event stops the service for more than 30 days, either of us may end the agreement.

20. Changes to these terms

We may update these terms. We email you about material changes at least 30 days before they take effect. If you don't agree, you can cancel before then. Small changes, such as clarifications, apply when we publish them. The date at the top shows the latest version.

21. General

• Order of precedence: a signed Enterprise contract comes first, then the data processing agreement for anything about personal data, then these terms, then the documentation.
• Your own purchase or general terms don't apply, even if you refer to them.
• You may transfer this agreement only with our written consent. We may transfer it to a company that takes over RightDoor, and we will tell you.
• If a provision is invalid, the rest stays in force and the invalid part is replaced by a valid one that comes closest to its purpose.
• We send notices to the email address of your account. You send notices to support@rightdoor.eu.

22. Law and disputes

Dutch law applies. The United Nations Convention on Contracts for the International Sale of Goods (CISG) does not. Disputes go to the competent court of the Rechtbank Noord-Holland, location Haarlem, unless mandatory law gives another court jurisdiction. We'd rather solve a problem together first: email support@rightdoor.eu.

23. Contact

Passionate Talents B.V., Graan voor Visch 19905, 2132 WR Hoofddorp, the Netherlands. KvK 92791360. VAT NL866173882B01. Support: support@rightdoor.eu. General: contact@rightdoor.eu.