Unisay

Terms of Service

Version 1.2.0 · Effective 29 August 2026

These Terms of Service (“Terms”) govern your use of the Unisay platform (“Service”) operated by AnnFar Global (Pvt) Ltd, a company incorporated in Sri Lanka and trading as “Unisay” (“Unisay”, “we”, “our”). By creating an account, accessing, or using the Service, you (“Vendor”, “you”) agree to be bound by these Terms, our Privacy Policy, and our Data Processing Agreement.

1. Acceptance of these Terms

You accept these Terms by clicking the acceptance checkbox at signup. The natural person clicking accept warrants that they have authority to bind the Vendor entity. Continuing to use the Service after a material update to these Terms is conditional on re-acceptance via the click-through prompt at next login.

2. Definitions

  • Vendor: the business entity that has registered an account with Unisay.
  • Vendor staff: a natural person authorised by the Vendor to access the Service.
  • Customer: the Vendor’s end-customer.
  • Service: the Unisay platform and all related software, APIs, and documentation.
  • Meta Channels: the Meta-operated communication surfaces Unisay integrates with — WhatsApp Business Platform, Instagram Direct (Instagram Platform), and Facebook Messenger (Messenger Platform) — together with their associated Graph APIs.
  • Vendor Meta Assets: the WhatsApp Business Account, phone-number ID, Facebook Page, Instagram Business account, and Catalog the Vendor has authorised Unisay to act on through the Meta Login for Business consent flow or the WhatsApp Embedded Signup widget.

3. The Service

Unisay provides a software-as-a-service platform for Meta-channel commerce. Features include but are not limited to: WhatsApp Business message handling, Instagram Direct message handling, Facebook Messenger handling, a unified multi-channel inbox, order management, customer relationship management (with operator-driven cross-channel identity merge), product catalogue and inventory, invoicing, courier coordination, and AI-assisted reply generation. Specific features available to a Vendor depend on the subscription plan in effect, the Login Configuration flow(s) the Vendor has completed, and the Vendor Meta Assets they have linked.

4. Account registration and security

You must provide accurate, current, and complete information during registration and keep it updated. You are responsible for: (a) maintaining the confidentiality of your credentials; (b) all activities under your account; (c) promptly notifying us of any unauthorised use; (d) ensuring each Vendor staff member who is added to your account accepts these Terms before accessing the Service (the click-through gate enforces this).

5. Acceptable use

You may not use the Service to offer or facilitate transactions in:

  • goods or services prohibited by Sri Lankan law;
  • controlled substances;
  • firearms, ammunition, or explosives, except by licensed dealers operating within the scope of their licence;
  • wildlife products restricted under the Fauna and Flora Protection Ordinance, 1937;
  • counterfeit, pirated, or trademark-infringing goods;
  • gambling or lotteries except as licensed;
  • goods or services subject to UN, US OFAC, EU, or UK sanctions or to applicable export controls;
  • deceptive financial schemes (including Ponzi or pyramid schemes);
  • illegal pornography or content depicting minors;
  • content that incites violence, terrorism, or racial or religious hatred.

You also may not:

  • transmit unsolicited bulk messages (“spam”) in violation of the Computer Crime Act, No. 24 of 2007 or your Customers’ opt-in choices on any Meta Channel. Specifically:
    • WhatsApp Business: marketing messages may be sent only after the Customer has (a) given you their phone number AND (b) given opt-in confirmation encompassing the categories of messages you intend to send (e.g. order updates, relevant offers, product recommendations). The 24-hour Customer Care Window gates free-text replies; outside the window, only Meta-approved templates may be used.
    • Instagram Direct: messages outside the 24-hour conversation window may be sent only under the HUMAN_AGENT tag and only when you have an open business reason to follow up. Recurring notifications (Subscription Messaging) require a separate user opt-in granted via Meta’s in-platform consent prompt — bulk-broadcasting outside that opt-in is prohibited.
    • Facebook Messenger: the 24-hour Customer Care Window applies; the HUMAN_AGENT tag extends it to 7 days for human-driven follow-up. Recurring Notifications and Notification Messaging permissions require the Customer’s explicit Messenger-side opt-in (one-time-notification token / recurring-notification token).
  • deploy a general-purpose AI chatbot or AI-model-distribution endpoint on any Meta Channel — Meta’s WhatsApp Business Solution Terms (effective 15 January 2026) prohibit this on WhatsApp; the equivalent restrictions on Instagram and Messenger permit only structured, purpose-limited bots for support, bookings, order tracking, notifications, and sales;
  • ignore or fail to honour Customer opt-out signals on any Meta Channel — including the “STOP” keyword on WhatsApp; Customer-initiated block, mute, or “Don’t allow” on Instagram Direct; and the equivalent block / opt-out / quick-reply-opt-out gestures on Facebook Messenger. Unisay’s consent layer auto-records opt-outs across all three channels; you are responsible for not overriding the suppression list;
  • harass, threaten, or defraud Customers via the Service;
  • attempt to circumvent our usage caps, white-label our infrastructure as your own product to third parties, or resell access to the Service without our prior written permission;
  • attempt to probe, scan, reverse-engineer, or otherwise compromise the security of the Service except in accordance with a coordinated disclosure procedure agreed with us in advance.

6. Vendor responsibilities and warranties

You warrant that:

  1. you have the legal right and capacity to enter these Terms;
  2. all information provided at registration is accurate and you will keep it current;
  3. where applicable to your business form, you have or will obtain valid registration under the Companies Act, No. 7 of 2007 or the Business Names Ordinance;
  4. you have valid, properly-onboarded Vendor Meta Assets that comply with all applicable Meta platform policies for the channels you connect — including, as applicable to your Surfaces:
    • WhatsApp: WhatsApp Business Solution Terms, WhatsApp Business Messaging Policy, WhatsApp Commerce Policy;
    • Instagram: Instagram Platform Terms, Instagram Platform Policy (including Messaging and Comment-Reply policies), Instagram Community Guidelines;
    • Messenger: Messenger Platform Policy, Pages Terms of Service, Messenger Platform Terms;
    • Cross-platform: Meta Platform Terms, Meta Data Use Policy, Meta Commerce Policies (where you operate a Catalog).
  5. you will comply with the Personal Data Protection Act, No. 9 of 2022 (as modified by the Amendment Act No. 22 of 2025); the Consumer Affairs Authority Act, No. 9 of 2003; the Computer Crime Act, No. 24 of 2007; the Inland Revenue Act, No. 24 of 2017; and all other Sri Lankan laws applicable to your business;
  6. product information you publish through the Service is accurate and not misleading;
  7. you will provide your Customers with a privacy notice meeting PDPA requirements with respect to their personal data, and will obtain any required lawful basis before providing that data to Unisay. Your privacy notice must disclose Unisay as a Processor and Meta (across the WhatsApp, Instagram, and Messenger surfaces you have connected) as a sub-processor.

You acknowledge that Unisay processes your Customers’ personal data as your processor; you remain the controller and are solely responsible for the lawful basis on which you collected that data, your privacy notice to your Customers, and your response to your Customers’ rights requests.

6A. Meta Tech Provider authorisation

By completing the “Connect Meta Business”, “Connect Messaging”, or WhatsApp Embedded Signup flow, you grant Unisay, in its capacity as a Meta Tech Provider acting on your behalf, the following authorisations with respect to the Vendor Meta Assets you select during the consent screen:

  • Token receipt and custody. To receive the long-lived user access token Meta issues at the conclusion of the OAuth code-exchange and to store that token, encrypted at rest under AES-256-GCM with the version prefix v1:, for the duration of the connection. Where the chosen flow returns per-Page access tokens via /me/accounts, to receive and store each Page access token under the same encryption scheme, keyed by the Page id you have chosen to link.
  • Automatic token refresh. To re-extend your long-lived user access token via the fb_exchange_token grant against Meta’s OAuth token endpoint on a daily cadence whenever the token is within 14 days of expiry, so the Service’s connection to your Vendor Meta Assets does not lapse without notice. You may revoke this authorisation at any time by clicking “Disconnect” in the Unisay Meta settings or by removing Unisay as a Tech Provider from your Meta Business Manager — both actions terminate Unisay’s ability to refresh.
  • Graph API actions. To call Meta’s Graph API, Send API, Subscribed- Apps API, and Catalog API on the Vendor Meta Assets you have linked, on your behalf, for the purposes of operating the Service — including reading inbound messages, sending outbound replies (including AI-assisted replies under your configured confidence dial), subscribing your WhatsApp Business Account to receive webhook events, and reading your Catalog or Page metadata for asset-picker and inventory-sync use cases.
  • Compliance instrumentation. To attach the appsecret_proof parameter (HMAC-SHA256 of your access token under our Meta App Secret) to every Graph API call, even when not strictly enforced by your Meta App settings, as a security-hardening measure; and to maintain the system-user token registered against our Meta App for fall-back service operations where your user token is unavailable.

These authorisations are limited to the Vendor Meta Assets you have explicitly selected in the consent screen and the linked-assets picker. Unisay will not act on Vendor Meta Assets you have not selected. The list of currently authorised assets and the most- recent token-refresh result are surfaced in real time at /settings/meta.

7. Intellectual property

Unisay and its licensors own all rights in the Service, including software, design, and trademarks. Subject to these Terms, we grant you a non-exclusive, non-transferable, non-sublicensable, revocable licence to access and use the Service for your business operations.

You retain all rights in content you upload to the Service (product images, descriptions, Customer data). You grant Unisay a worldwide, royalty-free licence to host, process, and transmit such content solely as needed to provide the Service to you.

Feedback you provide about the Service is non-confidential, and we may use it without obligation to you.

8. Fees, billing, and taxes

Fees for paid plans are billed monthly or annually in advance, in Sri Lankan Rupees (LKR), exclusive of any applicable VAT (which we will charge once Unisay is VAT-registered — see Privacy Policy §9). Fees are non-refundable except as expressly required by law or as stated in §14. Failure to pay within 14 days of the invoice date suspends the account; 60 days terminates it.

We may change fees on 30 days’ notice via the Unisay dashboard. Continued use after the notice period constitutes acceptance of the new fees.

9. Service availability

We provide the Service on a best-effort basis. We do not commit to a service level agreement (SLA) in v1 of these Terms.

Scheduled maintenance, network outages, sub-processor outages (including but not limited to Meta WhatsApp Business Platform, Instagram Platform, or Messenger Platform downtime; Meta App Secret rotations; Meta-side rate-limit throttling; Meta-initiated revocation of the Vendor’s assets or our Tech Provider status), and force majeure events may cause unavailability for which we are not liable beyond the remedies in §11.

10. Disclaimer of warranties

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE”, WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WITHOUT LIMITATION THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ANY WARRANTIES ARISING OUT OF COURSE OF DEALING OR USAGE OF TRADE. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE, OR THAT AI-GENERATED OUTPUTS WILL BE ACCURATE.

Sri Lankan-mandatory carve-outs. Nothing in this §10 excludes or restricts liability for: (i) death or personal injury caused by Unisay’s negligence; (ii) fraud or fraudulent misrepresentation by Unisay; or (iii) any other liability that cannot be excluded as a matter of mandatory Sri Lankan law, including the Unfair Contract Terms Act, No. 26 of 1997. The exclusions in this §10 are subject to the reasonableness test in section 10 of that Act.

11. Limitation of liability

(a) Exclusion of consequential damages. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL UNISAY, ITS AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, OR AGENTS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, INCLUDING WITHOUT LIMITATION LOSS OF PROFITS, REVENUE, GOODWILL, DATA, OR BUSINESS OPPORTUNITY, ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICE, REGARDLESS OF THE FORM OF ACTION (CONTRACT, TORT, STRICT LIABILITY, OR OTHERWISE) AND EVEN IF UNISAY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

(b) Aggregate cap. UNISAY’S TOTAL CUMULATIVE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS, ALL CAUSES OF ACTION COMBINED, SHALL NOT EXCEED THE GREATER OF: (i) THE AMOUNT OF FEES YOU ACTUALLY PAID TO UNISAY UNDER THE APPLICABLE PLAN IN THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO LIABILITY; OR (ii) LKR 25,000.

(c) Carve-outs. The exclusions in §11(a) and the cap in §11(b) do not apply to: (i) Unisay’s gross negligence, willful misconduct, or fraud; (ii) Unisay’s breach of confidentiality of personal data resulting from intentional acts; (iii) liability that cannot be limited as a matter of mandatory Sri Lankan law (including any non-waivable consumer-protection rights of natural-person customers, where applicable); (iv) the indemnity obligations in §12; (v) death or personal injury caused by Unisay’s negligence; and (vi) fraud or fraudulent misrepresentation by Unisay.

(d) Reasonableness recital under the UCT Act. The Parties acknowledge and agree that the limitations and exclusions in this §11 are subject to the reasonableness test in section 10 of the Unfair Contract Terms Act, No. 26 of 1997 of Sri Lanka. The Parties have specifically considered: (i) the fees payable under the chosen subscription plan, which reflect the absence of unlimited liability; (ii) the availability of insurance to either Party against the risks not assumed by Unisay; (iii) the standard of the Service measured against industry norms for SMB-priced SaaS; and (iv) the bargained-for allocation of risk in a freely negotiated commercial relationship between two business entities. On these grounds the Parties affirm that these limitations are fair and reasonable.

(e) Essential basis. The Parties acknowledge that the limitations and exclusions in this §11 form an essential basis of the bargain and that the fees would be substantially higher absent these limitations.

12. Indemnification

12.1 Vendor indemnity. You shall defend, indemnify, and hold harmless Unisay and its affiliates, officers, directors, employees, and agents from and against any third-party claims, losses, damages, liabilities, costs, and expenses (including reasonable legal fees) arising out of or related to: (a) your breach of §5 (Acceptable Use), §6 (Vendor Warranties), or §6A (Tech Provider Authorisation, including any breach of the Meta platform policies your Vendor Meta Assets are subject to); (b) your processing of your Customers’ personal data, including any failure to provide a privacy notice or to obtain a lawful basis; (c) the products or services you offer through the Service; (d) intellectual property claims relating to content you upload to the Service.

12.2 Unisay indemnity. Unisay shall defend you against third-party claims that the Service, as provided by Unisay and used by you in accordance with these Terms, infringes a Sri Lankan-registered patent, copyright, or trademark, and shall pay finally-awarded damages, subject to: (i) you giving us prompt written notice of the claim; (ii) you cooperating in defence; (iii) Unisay having sole control of defence and settlement; and (iv) Unisay’s right to modify or replace the Service to avoid infringement, or, failing that, to terminate the affected feature and refund pro-rata pre-paid fees as your exclusive remedy. Unisay’s indemnity is subject to the cap in §11(b).

13. Term and termination

These Terms are effective on your acceptance and continue until terminated. Either party may terminate for convenience on 30 days’ written notice via the Unisay dashboard or registered email. Either party may terminate for material breach if uncured after 14 days’ written notice. Unisay may suspend or terminate immediately for: (a) failure to pay fees beyond the §8 grace periods; (b) violation of §5 (Acceptable Use); (c) Meta-initiated revocation of your Vendor Meta Assets or revocation of Unisay’s Tech Provider status that materially impairs the Service for you; or (d) a risk of material harm to the Service, our other Vendors, or third parties.

14. Effect of termination; data export window

Upon termination:

  1. you may export your data via the Service for 30 calendar days following termination;
  2. thereafter, we will delete your data within 60 calendar days, except (i) backups subject to standard rotation, (ii) data we are legally required to retain (including the 5-year tax-record period under the Inland Revenue Act §123), and (iii) anonymised analytics that do not identify any data subject;
  3. your Meta access tokens and per-Page access tokens are cleared on termination; encrypted-at-rest backup snapshots containing them expire on the standard 30-day rotation;
  4. accrued fees are due and payable;
  5. §§7 (IP), 10 (Disclaimer), 11 (Limitation of Liability), 12 (Indemnification), 16 (Governing Law), 17 (Arbitration), and any provisions that by their nature should survive, survive termination.

15. Modifications to these Terms

We may revise these Terms by posting an updated version with a new version number and effective date. Material changes will require your re-acceptance via the click-through prompt at next login (you will retain access to the Service for 30 days during the re-acceptance window; continued use after the window without acceptance is grounds for suspension). Non-material changes (typographical corrections, clarifications) take effect on posting. The current version is accessible at all times at /terms with full version history at /legal/history/terms-of-service.

16. Governing law

These Terms are governed by the laws of the Democratic Socialist Republic of Sri Lanka, without regard to its conflict-of-laws rules.

17. Dispute resolution and arbitration

Any dispute, controversy, or claim arising out of or relating to these Terms, or the breach, termination, or invalidity thereof, shall be finally settled by arbitration administered by The ICLP Centre for Arbitration (Colombo) in accordance with its Rules of Arbitration in force at the time of commencement, by a sole arbitrator. The seat of arbitration shall be Colombo, Sri Lanka. The language of arbitration shall be English. The award shall be final and binding.

Notwithstanding the foregoing, either party may seek interim or injunctive relief in the courts of Colombo for breaches of confidentiality or intellectual property without first submitting to arbitration.

Class waiver. To the maximum extent permitted by Sri Lankan law, the Parties waive any right to participate in a class, collective, consolidated, or representative action. The Parties acknowledge that the Sri Lanka Arbitration Act, No. 11 of 1995 does not specifically address class arbitration and that there is no established judicial precedent on the enforceability of class waivers; if and to the extent a court of competent jurisdiction finds this waiver unenforceable, the remainder of this §17 (sole arbitrator, seat, language, finality) shall continue in full force.

18. Force majeure

Neither party is liable for failure to perform any obligation (other than payment) due to causes beyond its reasonable control, including acts of God, natural disaster, war, civil unrest, government action, pandemic, communications failure beyond the failing party’s network, or sub-processor outage. The affected party shall notify the other promptly and use reasonable efforts to resume performance.

19. Severability

If any provision of these Terms is held unenforceable, the remaining provisions remain in full force and effect. The unenforceable provision shall be reformed to the minimum extent necessary to make it enforceable while preserving the parties’ original intent.

20. Entire agreement

These Terms, together with the Privacy Policy and the Data Processing Agreement, constitute the entire agreement between you and Unisay regarding the Service and supersede all prior or contemporaneous communications and proposals. Any printed terms on a purchase order or other document you provide are rejected unless we expressly agree in writing.

21. Assignment

You may not assign these Terms without our prior written consent. Unisay may assign these Terms to a successor in interest in connection with a merger, acquisition, or sale of substantially all of its assets, subject to the assignee assuming Unisay’s obligations.

22. Notices

Notices to you may be sent to the email address on your account or via in-application notification. Notices to Unisay must be sent to legal@unisay.ai with a copy sent by registered post to our registered address.

23. Contact

AnnFar Global (Pvt) Ltd (trading as Unisay)
22/4, Peterson Tower, Havelock City, Havelock Road, Colombo 05, Sri Lanka
Email: legal@unisay.ai