Terms

Legal

Payments on AFRIPEI move real Tanzanian shillings. A live API key is not a test. There is no sandbox on the production API.

Using the service

• Collections and payouts require an active merchant. A new account waits for verification before it can move money.
• The fee on a transaction is the snapshot stored with that transaction. It is not rewritten later.
• A payout reserves the amount and the fee from available balance. A failed payout releases that reservation.
• You are responsible for the webhook URL you register and for the live keys you create.

How personal data is handled is in the privacy policy. Someone paying a business should read the customer privacy notice. Session cookies are described in the cookie notice.

Accounts

You keep the email, the password, and the phone that receives one-time codes. You create secret keys and you are responsible for where they are stored. Revoke a key that has left your control. A publishable key is not a substitute for a secret key, and a secret key is not a portal session.

Money

A collection is paid when its status is success, not when the API accepts the request. A payout reserves available balance before it is sent. If it fails, that reservation is released. You do not send a fee in the request. The fee is the snapshot stored with the transaction.

Customers pay with M-Pesa, Airtel Money, Mixx by Yas, or Halopesa. You send the phone number. AFRIPEI prompts that phone. Amounts are Tanzanian shillings, written as decimal strings with two places.

Your systems

You choose the webhook URL. You verify the signature. You treat a repeated event id as the same event. You do not fulfill an order twice because a delivery was retried. You choose idempotency keys that mean one instruction, and you reuse them when a request times out.

Acceptable use

The service is for a business collecting and paying in Tanzania. Do not use it to move money you are not entitled to move, to impersonate a customer, or to probe another merchant’s account. We may suspend an account that is doing so, including while verification is still open.