Terms of Service

Who you are dealing with

These terms form the agreement between you and Stefan Mikovic, trading as WhoseID, a sole trader registered in France. Our full registration details are on the legal notice. Where these terms say “we”, “us” or “WhoseID”, they mean that business.

You accept these terms when you create an account or use any part of the service. If you do not accept them, please do not use WhoseID.

Who may use WhoseID

You need to be at least 18 years old. We close any account we find to belong to a minor.

The information you give us about yourself has to be accurate, and you need to keep it accurate. Proving an identity is what this product is for, so a false one is worth nothing to anybody.

You may hold one personal account. An agency account is a different thing and is covered in Agency mode.

You may not use WhoseID if you are subject to EU, UN or US financial sanctions, or if you are established in a country we are not allowed to serve.

Your account

You are responsible for what happens under your account, and for keeping your password to yourself. If you think somebody else has got access to it, write to contact@whoseid.io straight away.

You can sign up and prove an account before you give us an email address. Until you confirm an address, your page stays private and we have no way of contacting you, which includes anything to do with money.

You can close your account whenever you like, from your settings. What happens to your data is set out in our Privacy Policy, and what happens to your money is in Ending the relationship.

What WhoseID does, and does not

We attest what we have observed. When we say an account is proven, we mean that a one-time code we generated appeared in that account’s profile while a verification window was open, and that we read it ourselves. That is a statement about a particular moment, and we stand behind it.

We never conclude that somebody is an impersonator. Not on a page, not in an alert, not in a search result. When a fan reports an account we pass on their statement as their statement, and when our engine finds a resemblance we say a resemblance was found. What it means, and what to do about it, is for you to decide.

A proven account stays proven. Proof does not expire and we do not recheck it. The only circumstance in which we would take one away is if we found out it had been obtained fraudulently. Moving to a smaller plan, or cancelling one, never removes proof you already hold.

Where we cannot see something, we do not pretend that we can. We cannot read a private account. We cannot see an Instagram story, ours or anybody else’s. We cannot tell you whether a promotion was actually posted, only how many people followed the link. We say so on every screen where it matters, and nothing in this service should be read as claiming otherwise.

Proving accounts and domains

To prove a social media account, you put a code we generate into its profile while a time-limited window is open. We then read the profile ourselves and record what we found. A failed check costs you nothing and you can try again.

To prove a domain, you add a DNS record we specify. A domain is proven once and is never rechecked afterwards.

On the free plan, your page has to carry the mention @whoseid.io. That mention is what pays for a free public page. It is a separate matter from your proof: we check periodically that it is still there, and if it disappears we switch the page off until it comes back or you take a paid plan. Your proof is untouched either way and your badge does not move.

This check currently runs on Instagram and nowhere else. We do not claim to watch anything more than that, and we always warn you by email before a page is switched off.

Your public page

Your page shows the accounts you have proven, the links you have entered and whatever else you choose to publish. Nothing appears on it that you did not put there, and you can switch it off at any time.

You are responsible for what you publish, and everything in What you may not do applies to your page as much as to anything else.

Content Shield

Content Shield stores a perceptual fingerprint of the media you register, so that copies found elsewhere can be matched back to you. What we hold is the fingerprint. The original media stays yours and we do not publish it.

Content fingerprinting is currently paused across the whole service. Our pricing page says so on every line it affects. We do not charge for it while it is paused and we do not pretend it is running.

A sighting is something a machine found. It is not an accusation and it is not a takedown. We give you what we found, and reporting it anywhere is your decision.

FaceID and face search

FaceID proves that a face is yours, live, before it can be enrolled. It exists so that nobody can register somebody else’s face, which would be both an abuse and a breach of data protection law.

A search result either names a creator or names nobody. It never returns a score, it never returns a closest match, and it never concludes that an account is fake. We do not keep media submitted to a search, and we keep no record of who was searched for.

These checks are not infallible and we do not present them as such. A doubtful result goes to a person rather than to an automatic refusal.

Agency mode

A creator can put her page under the management of an agency. While that mandate is active the agency writes on the page and the creator reads it. The two never write at the same time.

The mandate is a separate contract, signed by both sides and stored word for word as it was signed. These terms do not replace it and it does not replace these terms.

Four things stay with the creator whether or not there is a mandate:

• her login, her email address, her password and her sessions;
• her identity check and her face enrolment;
• both ends of her wallet, meaning asking for a payout and saying where it should be paid;
• ending the mandate, subject to any lock-in period she agreed to.

Whether an agency may spend her tokens, and whether it may put her page to work on the marketplace, are two further permissions. She grants each of them with a separate switch and both are off until she does. Withdrawing either one never cancels work that is already under way.

Plans, prices and billing

Our plans and their prices are on the pricing page, which reads them live from our catalogue. The price shown is the total you pay. TVA non applicable, article 293 B du CGI. VAT is not applicable under Article 293 B of the French General Tax Code.

Proving an identity is free and will stay free, and so is your page. Paid plans buy you room: more proven accounts, more domains, a page that posts, and a smaller cut when you withdraw what you have earned.

Subscriptions renew every month until you cancel. You can cancel from your billing settings in a couple of clicks, without writing to us or explaining yourself. Your plan then runs until the end of the period you have already paid for and stops there. We do not charge you for a part-month and we do not refund one.

Moving to a smaller plan never takes anything away. Accounts you have proven stay proven, domains stay proven, posts stay published. A quota only closes the door on adding more.

We may change our prices. A change never applies to a period you have already paid for, and we tell subscribers by email before it takes effect, with enough notice to cancel first.

If a payment fails we leave your plan running while the card issuer retries, and the plan ends when the paid period does. Card payments are handled by Stripe, so we never see or store your card number. Your invoices are in your billing portal.

Tokens

Tokens are the unit the promotion marketplace runs on. They are how creators pay each other for promotion, and they are not used for anything else.

Tokens are not electronic money, not a deposit, not an investment and not a cryptocurrency. They earn no interest and give you no claim on WhoseID beyond the ones written in these terms.

The promotion marketplace

Creators pay each other for a place in their audience. An advertiser posts what she is paying for, or a promoter posts what she is selling, and the other side applies. A deal can also be a straight swap, in which case nobody pays anything.

What we measure

We count followed links, and that is the only thing we count: how many clicks there were, and how many distinct visitors. We chose it because it is the one thing that neither side controls and that we can observe for ourselves.

We cannot see a story and we cannot see a post. A click curve is the shadow of a publication rather than proof of one, and our screens describe its shape without drawing a conclusion from it. Neither the shape nor our reading of it ever moves a token.

Getting paid for a promotion

A promotion is paid at a fixed price, split into parts: one part for each story or post asked for. The full price is held when the request is accepted, and each part is paid on its own.

The person posting pastes the link of each part into the shared screen of the promotion, before the deadline set in the listing. We record the link and the time it was added. We do not open it, and we never tell either side that a link works or that a post is there. Checking it is between the two of you.

The person paying then has 24 hours to mark the part as seen, which pays it at once, or to say it cannot be found, with a reason. If she does neither within 24 hours, the part counts as seen and is paid. A part that was contested can be fixed once, within 24 hours; a part that is not fixed goes back to the person paying, and a part contested a second time comes to us.

A part that is not posted before the deadline goes back to the person paying. She can give more time, a few days at a time. Both of you can also cancel a promotion by mutual agreement: what was already paid stays paid, a part already due is paid, and the rest goes back.

Either side can settle what is due. If only the person paying could do it, her silence would keep the other’s money out of reach indefinitely.

Promotions accepted before 8 October 2026 keep the rules they were accepted under: a guaranteed amount unlocked once 3 distinct visitors had followed the link, and a per click bonus where the listing offered one.

When a part comes to us

A part contested twice is decided by a member of our staff. To decide it, she reads the promotion, the links that were added and the conversation between the two of you about that promotion. Each reading is recorded. We decide only whether that part was delivered, on what the promotion shows, and the decision moves the tokens held for that part and nothing else. It is not a judgment on anyone, and a cancellation agreed between you never comes to us.

Files attached to a promotion

Photos and videos attached to a listing or a booking are deleted from our servers when the promotion ends: when the listing closes or is removed, when a booking is settled, and within a day for a file that was uploaded and never used. Keep your own copy.

Pausing a listing does not cut off the income of a promoter who has already posted in good faith. The only thing that stops a run is a suspension by us, and we only suspend a listing that should not have been there in the first place.

What we do not guarantee

We are not a party to any deal between two creators. We do not guarantee that a promoter will post, that a campaign will perform, that a declared audience is real, or that a swap will be honoured in both directions. Audience figures on this marketplace are declared by the person selling. We prove accounts, not audiences, and every screen that shows one of those figures says so.

Manufacturing clicks is theft from the person paying. It is grounds for immediate suspension and for forfeiting the tokens involved, as set out in What you may not do.

What you can see about your own activity

Through your dashboard you can see, for every run you are part of, the clicks and the distinct visitors it brought, hour by hour, along with your token balance and every movement in and out of it. Both sides of a deal see the same figures for that deal. Nobody sees anybody else’s applications, balances or audience.

Messages between creators

A creator with an account can write to another creator whose page is public, so that a question can be asked before a deal. Once a request is accepted, the steps of the promotion are written into the same conversation as they happen. A conversation is text only. Messages are not read or checked before they are sent, and our staff do not read conversations, except the conversation of a promotion when one of its parts comes to us in a dispute. There is not yet a way to report a message from the message itself. What you can do is block the person: neither of you can then send messages in that conversation, and what was already said stays. If someone harasses you or uses messages to scam, write to contact@whoseid.io and tell us who.

Paid placement and ranking

You can pay to put a listing at the top of the marketplace board for a period. Here is exactly how that works.

There are 3 places rather than an unlimited number, and only a capped number of boosts can run at the same time. Once the cap is reached we refuse the sale instead of diluting what we have already sold.

Boosted listings take turns on the clock, rotating every 10 minutes. There is no auction and no draw. Paying more does not buy a better place, and two people looking at the board in the same minute see the same order.

Filters are applied first. A boosted listing that does not match what you filtered for will not appear. Paid placement moves a listing up among results that already match; it never inserts one that does not belong.

Every paid place is labelled as paid, and the number of paid places is shown above the board. A boosted listing that is not currently in one of the places carries no label, because the label would not be true at that moment.

A boost changes the order and nothing else. It does not change the terms of a listing, its budget or its reach.

Outside the paid places, listings are ordered by the filters and the sort you choose. We do not take money to influence that order in any other way, and we do not give our own listings or anybody else’s any form of favourable treatment.

Scenes

A scene is an animated background for your public page. Buying one is a one off purchase and not a subscription.

A scene you bought is yours permanently, including one you took for free during a promotion. Ending a subscription does not remove it.

A scene lent to you by an agency ends with the mandate. The token returns to the agency’s stock at the moment the mandate ends, and your page falls back to its default background. Nothing else about the page changes.

We may withdraw a scene from sale, and people who own it keep it. The only thing that would make us switch off a scene somebody has already paid for is a serious problem with the scene itself, and we would say what it was.

Withdrawing what you earn

Tokens you have earned on the marketplace can be paid out to you in euros.

Asking for a payout moves the tokens out of your balance immediately, which is what prevents the same money being requested twice. If we refuse the request the tokens come straight back as earned tokens and you can ask again.

A transfer that bounces is not a refusal. It happens when an account has been closed or a bank rejects the payment. Nobody has decided anything and you have done nothing wrong: the tokens come back as earned tokens and you can ask again once the account works.

We screen payout recipients against EU, UN and US sanctions lists. An exact name match blocks the payout permanently and there is no appeal to us, because that is the law rather than our policy. A near match is looked at by a person, since those lists are full of homonyms and transliterations.

Tax

What you earn here is your income and it is for you to declare. WhoseID does not withhold tax or social contributions, and we are not able to advise you on your own situation.

Before you put anything paid on sale, and before your first payout, we ask you for a tax profile: your legal name, your status, your country, your address, your date of birth or registration date, and your tax identification number. We are required to collect it from everyone who is paid through WhoseID. When you have a Stripe payout account, your name and address are read from it to fill in the form, and you check them before saving. We verify what can be verified against public registers, meaning the French business register and the European VAT system, and declaring an identity that is not yours means no sales and no payout.

There are three possible outcomes rather than two: verified, refused, or we were not able to check. The third is common outside Europe and it sends your file to a person rather than producing a refusal.

As a platform we are required to report to the French tax authorities what you received through us during the year, quarter by quarter. A summary of the same figures is in your account, under Money, Tax details, and we tell you each January when last year’s is ready. Each time you make a sale we also remind you that this income may have to be declared. Giving us a false tax identity is grounds for closing your account.

What you may not do

The rule above also covers what you sell through a link or a video hosted elsewhere. A course or a quick product can deliver a link that opens after payment, or a YouTube, Vimeo or Loom video. We do not host that content and we do not see what a link leads to, so you are responsible for it in full. Selling access to sexually explicit content through a link, or using a paid product to point buyers to an adult platform, breaks this clause: the product is taken down and the account can be closed.

You also may not:

• claim an account, a domain, a name or a face that is not yours, or help anybody else do so, which is the one thing this product exists to prevent;
• manufacture clicks or visitors, on your own runs or on anybody else’s, whether by script, by proxy, by paid traffic or by arrangement with somebody;
• use the marketplace to move money rather than to buy promotion, for example by buying tokens and having an accomplice pay them back to you;
• publish content that is illegal, that depicts or involves a minor, or that is violent, hateful, harassing, defamatory or infringing;
• file reports in bad faith, in volume, or in coordination with others to get a competitor cut off;
• scrape, copy or resell our data, attack or overload the service, get around rate limits, quotas or payment controls, or automate access outside what we provide;
• impersonate WhoseID, or suggest that we endorse, verify or vouch for something we do not.

Reports, moderation and appeals

Nothing is moderated before it is published. A page, a post or a listing goes live the moment you publish it. We would rather say that plainly than imply a review that does not take place.

Anybody can report content to us, through the report form, through the report link on a listing, or by writing to contact@whoseid.io. Reports are read by a person. No automated system removes content on this service.

The report form does not ask who you are and holds no way of reaching you, which is deliberate. It also means we cannot write back to tell you what we decided. If you would like an answer, send your report by email instead and we will reply to it.

We never tell the person reported who reported them. We count how many distinct people reported the same account and we do not disclose more than that number. A report on its own is never published. What can appear publicly is a case that a person has confirmed after reviewing it, and then only the platform, the handle reported, since when, and how many distinct people reported it.

If we act against your content or your account we tell you what we did and why, in writing. If you think we got it wrong, reply and say so, and you will get a written answer either way. You can also take the matter to a court, as set out in Law and disputes.

Cancelling and refunds

If you are a consumer in the European Union you normally have 14 days to withdraw from a contract concluded online, without having to give a reason.

You can cancel a subscription at any time from your billing settings, in the same place and with about as much effort as it took to start one. Cancelling stops the next renewal and leaves you on the plan until the period you paid for runs out.

Outside the right of withdrawal we do not offer refunds, and every payment screen says so before you pay. If something went wrong at our end, for instance you were charged twice or charged for something you did not get, write to us and we will put it right.

Availability

We do not promise that the service will be available without interruption. We run it carefully and we fix what breaks, but this is a small operation and we are not going to write a guarantee we cannot stand behind.

Parts of the service depend on reading public pages on platforms we do not control. When one of them blocks us a check fails, and a failed check never counts against you. An account we could not read is an account we could not read, and not an account that failed to prove itself.

We add, change and remove features. When we remove something you are paying for we tell you first. When something is switched off, our pages say it is switched off rather than carrying on advertising it.

Liability

Nothing in these terms limits our liability for death or personal injury caused by our negligence, for fraud, or for anything else the law does not let us limit. If you are a consumer, your statutory rights are unaffected by anything written here.

Beyond that, we are liable for damage we actually cause, and not for what another creator, an agency, a fan or a social platform does. We are not liable for a deal on the marketplace failing to meet your expectations, since we count clicks rather than underwriting results.

Our total liability for any claim relating to a paid service is limited to what you paid us for that service over the preceding twelve months, except where the law requires more.

Ending the relationship

You can leave whenever you want, from your settings. Your page comes down and your data is dealt with as described in our Privacy Policy.

We can suspend or close an account that breaks these terms, that is being used for fraud, or that we are legally required to stop serving. We tell you why. Where the problem is something you can fix, we ask you to fix it before we do anything permanent.

If you use WhoseID in the course of a business and we decide to close your account for reasons other than a breach, fraud or a legal obligation, we give you 30 days’ notice first.

Money is dealt with as follows when an account ends.

• Earned tokens past the holding period can still be withdrawn, subject to the usual minimum and to a valid tax profile and payout account. Closing an account does not cancel money you have earned.
• Bought tokens are not refunded in money. They were never convertible and closing an account does not make them so.
• Runs already under way settle as normal, and a pending campaign budget comes back as tokens.
• Where we close an account for click fraud, or for moving money through the marketplace, we may withhold the tokens involved.

Changes to these terms

These terms will change as the product does. The date at the top of this page is when the current version came into force.

Where a change affects your rights or what you pay, we tell subscribers by email before it takes effect, with enough notice to cancel. Where you use WhoseID in the course of a business, that notice is at least 15 days, and you can end your account within that period if you do not want the new terms. Where the change is a correction that alters nothing, such as a typo or a clearer sentence, we simply make it.

Carrying on using WhoseID after a change has taken effect means you accept it. If you do not, you can close your account, which is always available to you.

Law and disputes

French law governs this agreement. If you are a consumer resident elsewhere in the European Union, that does not deprive you of the protection of the mandatory rules of your own country.

Please come to us first, at contact@whoseid.io. Most problems turn out to be a misunderstanding and we would rather fix one than argue about it. If we cannot agree and you are a consumer in the European Union, you can use the European Commission’s online dispute resolution platform at https://ec.europa.eu/consumers/odr.

Failing that, the French courts have jurisdiction. If any clause of these terms turns out to be unenforceable, the rest of them still stand.