These Terms set out the conditions for Your use of AyeFace services, including the AI features and Facial Recognition Payment service. AyeFace allows You to initiate payments to participating Merchants using facial recognition, through payment methods linked to Your AyeFace Account — including bank or e-money accounts via DuitNow ID, credit or debit cards, regional e-wallets, and other alternatives as may be introduced.

While AyeFace facilitates payments and personalisation, all payment processing is conducted by the respective merchant acquirers connecting to authorised financial institutions, card issuers, or e-wallet providers. AyeFace does not itself hold, receive, or transfer funds. We are not a bank, e-money issuer, or payment institution.

You may register at user.ayeface.com/register. To register, You must complete a facial capture process and set a PIN for verification. By completing registration, You confirm that You are at least 18 years old and capable of entering into a binding contract.

You may link a payment method including: a credit or debit card; a bank or e-money account via DuitNow ID; or a supported e-wallet account. By linking a payment method, You consent to Us securely storing Your payment details in encrypted form, solely to facilitate future payments. Full card or bank credentials are not stored directly — we rely on tokenisation provided by licensed payment processors.

Once a payment is confirmed via AyeFace, it is considered final and irrevocable, except in cases of fraud, unauthorised use, or error. Such cases are subject to investigation by the relevant financial institution.

Through the User Portal, You may manage payment methods (add, update, remove), suspend or revoke consent, set payment limits, enable/disable PIN verification, manage notification preferences, view and track eligible rewards, and obtain referral codes.

We will notify You 7 days before Your payment method consent expires. If expired, a new consent must be submitted. You can view transaction history including ID, timestamp, and merchant info. For disputes, contact complaints@aye-ai.org with the transaction ID.

You must take reasonable precautions to keep login credentials confidential. You are responsible for all account activity until You notify Us of any unauthorised use.

By making Your first payment at a merchant using AyeFace, You consent to automatic enrollment into that merchant's membership program (if enabled), in accordance with the merchant's terms. AyeFace does not guarantee membership benefits.

No personal information other than Your store activity (purchases, points earned, rewards redeemed) is shared with merchants. You may receive promotional messages facilitated by AyeFace without merchants accessing Your personal data directly. You may opt out at any time by emailing complaints@aye-ai.org.

AyeFace may also create its own rewards programmes, which may be changed, edited, or removed at AyeFace's discretion.

When You register, Your facial features are captured and converted into a unique, tokenised template using secure encryption. This biometric data is processed solely for recognition, authentication, and personalisation within AyeFace.

AI features may include personalised prompts, menu recommendations, targeted marketing, and contextual suggestions based on Your preferences and purchase behaviour. AI is not used to initiate, authorise, or complete payments — all payment transactions require explicit action by You.

We employ Presentation Attack Detection (PAD) and anti-spoofing measures consistent with ISO/IEC 30107 standards. AyeFace does not perform automated decision-making producing legal or significant effects without human oversight.

You acknowledge that AI and biometric technologies are probabilistic and may not always be accurate. Performance may be affected by environmental factors such as lighting or device quality.

You may initiate a refund request by contacting the relevant merchant directly with the transaction ID. Refunds will only be processed once approved by the merchant and returned to Your original payment method.

For erroneous or unauthorised payments, initiate a dispute directly with Your financial institution or payment provider. AyeFace Support (complaints@aye-ai.org) may assist in investigation but is not a payment processor and cannot directly refund amounts.

Where a wrongful transaction is confirmed as caused solely by a proven AyeFace system malfunction, We will facilitate a refund through the relevant payment processor. Your full cooperation with investigation is required.

To the fullest extent permitted by law, We shall not be liable for losses arising from: Your use of AyeFace services; errors or delays in payment processing by financial institutions; accuracy of biometric verification or AI outputs; unauthorised account access due to Your failure to safeguard credentials; or service interruption, except where caused by Our proven gross negligence or wilful misconduct.

You agree to indemnify Us against claims arising from Your breach of these Terms, unauthorised use of AyeFace, or violation of third-party rights. Nothing in these Terms limits liability for death or personal injury caused by Our gross negligence or fraud.

Contact Us: complaints@aye-ai.org
We will acknowledge complaints within seven (7) working days and provide a substantive response within one (1) calendar month. This does not affect Your rights to escalate to relevant supervisory authorities.

Amendments: We may amend these Terms with at least thirty (30) days' prior notice via email, the AyeFace portal, or Our official website. Continued use after the effective date constitutes acceptance.

Governing Law: These Terms are governed by the laws of Malaysia. You submit to the exclusive jurisdiction of the courts of Malaysia, without prejudice to mandatory consumer protection laws of Your country of residence.

International Data Transfers: EU Standard Contractual Clauses (SCCs) apply automatically for cross-border transfers subject to EU/UK data protection regulations. See: commission.europa.eu/standard-contractual-clauses

Severability, No Waiver, Entire Agreement: Standard provisions apply. In the event of conflict between these Terms and the Privacy Policy regarding personal data, the Privacy Policy shall prevail.