AuthOnce is a non-custodial subscription payment infrastructure platform. AuthOnce provides software infrastructure that enables Merchants to collect recurring payments from Subscribers in USDC and other supported stablecoins directly on Base Network. AuthOnce never holds, custodies, or has access to Subscriber or Merchant funds at any point. AuthOnce provides software infrastructure only and does not provide financial, investment, legal, or tax advice.
By accessing authonce.io or using AuthOnce services, you confirm that you are at least 18 years of age, have the legal authority to accept these terms, and agree to be bound by them. If you do not agree, do not use our services.
AuthOnce provides:
Merchant access is by invitation only. By registering, the Merchant represents and warrants that:
AuthOnce charges a single Protocol Fee per successful transaction — 0.5%, hardcoded on-chain, as displayed on authonce.io at the time of Merchant registration. There are no other fees, processing charges, or intermediary costs. AuthOnce reserves the right to update the Protocol Fee with 30 days written notice to Merchants, subject to a hard ceiling of 2%.
AuthOnce provides software infrastructure only and does not hold, control, or have access to user funds at any time. USDC and other supported stablecoin payments flow directly on-chain, from Subscriber wallet to Merchant wallet, via Base Network smart contracts in a single atomic transaction. AuthOnce facilitates the technical execution of pre-authorised payment instructions but is not a payment service provider, custodian, or financial institution. Where fiat on-ramp access becomes available through a third-party onramp partner, that partner will deliver USDC directly to the Subscriber's own wallet — AuthOnce will never hold a key or touch the fiat leg of that transaction.
Merchants using AuthOnce agree to:
AuthOnce may not be used for:
Disputes arising from commercial relationships between Merchants and Subscribers are exclusively the responsibility of those parties. AuthOnce is payment infrastructure and does not mediate, arbitrate, or accept liability for commercial disputes. AuthOnce may be contacted at [email protected] solely in cases of suspected platform fraud, platform abuse, or technical errors caused by the AuthOnce protocol itself.
AuthOnce and its protocol are protected under the Business Source License 1.1 (BUSL-1.1). Commercial use, copying, forking, or deployment of the AuthOnce protocol without explicit written permission is prohibited until January 1, 2030. After that date, the protocol converts to open-source under GPL v2.
You are solely responsible for the security of your wallet address and private keys. AuthOnce cannot recover lost wallets, reverse blockchain transactions, or restore access to wallet addresses. On-chain transactions are final and irreversible.
AuthOnce is currently operating on testnet. No guarantee of uptime, availability, or continuity of service is made during the testnet period. For mainnet, AuthOnce will publish a service level policy prior to launch. AuthOnce is not liable for losses caused by service unavailability, blockchain network outages, or third-party service failures.
AuthOnce reserves the right to suspend or revoke Merchant access with 14 days written notice. In cases of fraud, illegal activity, or material breach of these terms, access may be revoked immediately without prior notice. Existing active subscriptions will be honoured during any transition period.
AuthOnce reserves the right to modify, update, or discontinue any part of the service with 30 days written notice to Merchants. Smart contracts deployed on mainnet cannot be modified — this is by design and provides Merchants and Subscribers with immutability guarantees.
AuthOnce may update these terms at any time. Merchants will be notified by email at least 14 days before material changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated terms.
Nothing on authonce.io or in any AuthOnce communication constitutes financial, investment, legal, or tax advice. The use of USDC, blockchain technology, and digital assets carries risk. Use of the AuthOnce protocol is entirely at your own risk.
AuthOnce is not liable for any failure or delay in performance caused by events beyond our reasonable control, including but not limited to: blockchain network outages, third-party service failures, natural disasters, regulatory changes, government actions, or acts of war.
Merchants agree to indemnify, defend, and hold harmless AuthOnce and its operator from and against any claims, liabilities, damages, losses, and expenses (including legal fees) arising from: their use of the platform, their business operations, their Subscribers, their violation of these terms, or their violation of any applicable law.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, AUTHONCE'S TOTAL LIABILITY TO ANY PARTY SHALL NOT EXCEED €100 OR THE TOTAL AMOUNT PAID BY THAT PARTY TO AUTHONCE IN THE THREE MONTHS PRECEDING THE CLAIM, WHICHEVER IS LOWER. AUTHONCE SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES WHATSOEVER, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any disputes arising from these Terms shall be submitted to the competent courts of Portugal. Users in the European Union retain all rights granted under applicable EU consumer protection law, including the right to bring disputes before consumer protection authorities in their country of residence.
These terms are governed by the laws of Portugal and the European Union. Mandatory EU consumer protection provisions apply regardless of any other governing law.
If any provision of these terms is found to be invalid or unenforceable by a court of competent jurisdiction, that provision shall be modified to the minimum extent necessary to make it enforceable, and the remaining provisions shall continue in full force and effect.
These Terms of Service, together with the Privacy Policy and Refund Policy, constitute the entire agreement between AuthOnce and the user with respect to the subject matter herein, and supersede all prior and contemporaneous agreements, understandings, and communications.
For questions about these terms: [email protected]
AuthOnce is operated by Vasco Humberto dos Reis Diogo. Upon company incorporation, the data controller will be updated to AuthOnce Lda. (Portugal). Contact: [email protected]
AuthOnce collects the absolute minimum data required to operate. We never store personal identity information (PII) — this remains with our regulated partners who hold appropriate authorisations. The primary identifier for any user in our system is their wallet address, which is pseudonymous.
For Merchants:
What we do NOT store:
Transaction records recorded on Base Network are technically immutable by the nature of blockchain technology and cannot be deleted by AuthOnce or any party. This is a fundamental technical property of the system, not a policy choice. Wallet addresses recorded on-chain are pseudonymous but publicly visible.
Merchant account data is retained for the duration of the commercial relationship plus the minimum period required by applicable law (minimum 10 years for tax compliance under Portuguese law). When a Merchant account is closed, personal data is deleted or anonymised within 30 days, except where retention is required by law.
AuthOnce does not and will never sell, rent, or trade personal data to any third party for commercial purposes. Period.
Under GDPR, you have the right to:
To exercise these rights, contact [email protected]. We will respond within 30 days.
In the event of a personal data breach that poses a risk to your rights and freedoms, AuthOnce will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, and affected individuals without undue delay, as required by GDPR Article 33 and 34.
AuthOnce is not directed at children under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that personal data from a minor has been collected without parental consent, we will delete it immediately.
AuthOnce uses essential cookies required for authentication and session management. You cannot opt out of essential cookies as they are required for the platform to function.
AuthOnce also uses Google Analytics, a single analytics cookie, to understand how visitors use authonce.io so we can improve it. This cookie is off by default and only activates if you click "Accept" on the cookie banner shown on your first visit. No advertising or third-party tracking cookies are used. You can change your choice at any time via the "Cookie preferences" link shown in the bottom-left corner of every page.
Some of our third-party processors operate in the United States. Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place in accordance with GDPR Chapter V.
We may update this Privacy Policy from time to time. Material changes will be communicated by email with at least 14 days notice. The current version is always available at authonce.io/legal.
AuthOnce is developing a voluntary data monetisation feature called DataOnce, which will allow subscribers to consent to sharing anonymised subscription behaviour data with third parties in exchange for direct payment. Participation will be entirely optional. Subscribers will have full control over which data categories are shared, with whom, at what price, and will be able to revoke consent at any time. This feature will be subject to a separate privacy impact assessment and updated terms before launch.
For privacy questions or to exercise your rights: [email protected]. You also have the right to lodge a complaint with your national data protection supervisory authority (in Portugal: CNPD — Comissão Nacional de Proteção de Dados, www.cnpd.pt).
This Refund Policy applies to subscription payments processed through the AuthOnce platform. AuthOnce is payment infrastructure — refund decisions for goods and services belong exclusively to the Merchant. AuthOnce is not responsible for refunds issued or refused by Merchants.
Subscribers may cancel their subscription at any time by connecting their wallet at authonce.io/my-subscriptions and confirming the on-chain cancellation transaction. Cancellation takes effect immediately once the transaction is confirmed on Base Network and prevents all future charges. No action from the Merchant is required to process the cancellation.
AuthOnce does not automatically issue refunds for the current billing period already paid. When a Subscriber cancels, they retain access to the Merchant's service until the end of the current billing period, after which no further charges are made. Merchants may choose to issue pro-rata refunds at their own discretion.
Under EU Directive 2011/83/EU and Portuguese consumer law (DL 24/2014), consumers have a 14-day right of withdrawal for digital services. However, by activating a subscription, the Subscriber explicitly requests that the service begins immediately and acknowledges that the right of withdrawal is waived once the digital service has commenced, in accordance with Article 16(m) of the Directive.
If a payment fails, the subscription enters a grace period of 1 to 30 days, as configured by the Merchant (default: 7 days). The Subscriber is notified and given the opportunity to resolve the payment. No charges are made during the grace period. If the payment is not resolved within the grace period, the subscription is automatically cancelled with no further charges.
Merchants may issue partial or full refunds to their Subscribers at their own discretion, via a separate on-chain USDC transfer to the Subscriber's wallet. AuthOnce does not currently provide a refund feature within the merchant dashboard. Each Merchant is solely responsible for their own refund policies and for compliance with all applicable consumer protection laws in their jurisdiction.
Disputes regarding charges are exclusively between the Subscriber and the Merchant. Subscribers should contact their Merchant directly for any refund requests. AuthOnce does not mediate commercial disputes and cannot override Merchant refund decisions. AuthOnce may be contacted at [email protected] solely in cases of suspected platform fraud or technical errors caused by the AuthOnce protocol.
The AuthOnce Protocol Fee is automatically deducted at the time of each successful transaction. The Protocol Fee is non-refundable under any circumstances, including in cases of disputed transactions, chargebacks, or Merchant-issued refunds. In the event of a full Merchant refund to a Subscriber, the Protocol Fee is not refunded to the Merchant.
In the event of a demonstrable technical error caused solely by the AuthOnce protocol that results in an incorrect charge, AuthOnce will investigate and, if confirmed, facilitate a remedy. Such cases should be reported immediately to [email protected] with full details.
USDC payments executed on Base Network are irreversible by nature of blockchain technology. AuthOnce cannot reverse, cancel, or refund on-chain transactions once confirmed. Merchants receiving USDC payments are responsible for issuing any refunds through separate on-chain transfers at their own discretion.
For questions about this policy: [email protected]
These Subscriber Terms govern your use of AuthOnce as a subscriber — a person who authorises recurring payments to a Merchant via the AuthOnce protocol. By completing your first payment, you agree to these terms.
AuthOnce is a non-custodial recurring payment protocol built on Base Network. When you subscribe to a Merchant's service, you authorise AuthOnce to automatically collect payments on the Merchant's behalf on the agreed schedule. AuthOnce never holds your funds — payments are pulled directly from your payment method at the time of each billing cycle.
This authorisation covers all future payments at the same amount and interval unless the Merchant initiates a price change with a minimum 30-day notice period. You will be notified of any price change before it takes effect.
AuthOnce currently supports payment via USDC and other supported stablecoins held in your own wallet on Base Network — available globally. Fiat on-ramp access, allowing you to fund a subscription directly without holding crypto beforehand, is planned via a third-party onramp partner but is not yet live. When available, that onramp will deliver USDC directly to your own wallet — AuthOnce will never hold your funds or your fiat payment details at any point.
Your wallet at subscription creation is used for all subsequent recurring payments. You may update your payment method by cancelling and creating a new subscription.
AuthOnce sends payment notifications from [email protected]:
Notifications are sent to the email address and/or phone number you provided at subscription creation. It is your responsibility to keep your contact details current. Some Merchants on paid tiers may also send their own branded notifications — these will be clearly identified as coming from the Merchant.
If a payment fails, your subscription enters a grace period configured by the Merchant (default: 7 days, maximum: 30 days). During the grace period you will be notified and given the opportunity to resolve the payment. No charges are made during the grace period. If the payment is not resolved within the grace period, your subscription is automatically cancelled with no further charges.
You may cancel your subscription at any time with no penalty or fee from AuthOnce or the Merchant. AuthOnce processes cancellations independently — the Merchant cannot block or delay your cancellation. A minimal Base Network transaction fee (typically well under $0.01) applies when cancelling, paid directly to the network by your wallet — not to AuthOnce.
Cancellation takes effect immediately. No further payments will be collected. For questions about access to the Merchant's service after cancellation, contact the Merchant directly.
Under EU Directive 2011/83/EU and Portuguese consumer law (DL 24/2014), consumers have a 14-day right of withdrawal for digital services. If you have not yet activated your subscription, you may withdraw within 14 days for a full refund. By activating your subscription and explicitly requesting that the service begins immediately, you acknowledge that the right of withdrawal is waived once the digital service has commenced, in accordance with Article 16(m) of the Directive.
Refund requests for subscription payments are handled by the Merchant, not by AuthOnce. Please contact your Merchant directly for any refund requests. AuthOnce's Refund Policy applies in cases of technical errors caused solely by the AuthOnce protocol.
AuthOnce collects only what is necessary to operate your subscription: your email address and your wallet address. Your personal data is never sold. Full details are in our Privacy Policy.
To view and manage your subscriptions at authonce.io/my-subscriptions, connect the wallet you used to subscribe and sign a free verification message. This proves wallet ownership and costs no gas — it is not an on-chain transaction. No password is required. AuthOnce may also offer optional Google sign-in for account and notification purposes, but viewing or managing your subscriptions requires connecting your wallet.
To cancel or manage your subscription: authonce.io/my-subscriptions
For payment, technical issues or cancellation help: [email protected]
For questions about the Merchant's service, content or refunds: contact your Merchant directly.