Terms of Service

Last updated: 4 October 2026. Effective upon publication. Operator: GP novum s.r.o., Company ID 28155483, Riegrova 1756/51, 370 01 České Budějovice, Czech Republic (the "Operator").

1. What the service does

Ankorith (the "Service") lets a company that proves control of an internet domain (the "Issuer") issue a seal for a file: a record that, at a given time, the Issuer declared a certain origin (photograph, human-made, edited or generated by artificial intelligence) for the file with a given fingerprint (sha256). Seals are written to a public, append-only log signed with a quantum-resistant key and anchored in Bitcoin. Anyone can verify, free of charge, who sealed a file and whether it has changed since. You never send the files themselves to the Operator — the Service works with their fingerprints.

2. What a seal proves — and what it does not

• A seal proves who (a verified domain) declared something about a file and when, and that the file has not changed since (exact match), or that it is the same image after social-media recompression (appearance match).
• A seal does not prove that the declaration is true. The Issuer alone is responsible for its declarations (e.g. that an image was not made by AI).
• Detecting changes in an image has technical limits: it reliably finds edits from about 2 % of the shorter side; smaller edits cannot be ruled out. For heavily compressed copies it may also show uncertain areas (yellow).
• The Vír Foto app signs a photo with keys stored on the phone after Face ID; it proves that the photo was processed by this app on this device of the given account.

3. Accounts, registration and keys

You sign in with Google, Microsoft, GitHub, a one-time e-mail link, a passkey or Vír; we do not use passwords. You are responsible for access to your sign-in method. The free plan starts by signing in; paid plans are ordered by contacting the Operator at info@gpnovum.cz.

An Issuer is whoever proves control of a domain (a DNS TXT record or a file on the website). It receives a main API key; only the main key can issue and revoke sub-keys. Keys are secret — the Issuer is responsible for protecting them and for seals issued with its keys. A lost or leaked key must be revoked without delay. The Operator stores only key fingerprints.

4. Issuer obligations

• Seal only content for which it can truthfully declare the chosen origin.
• Not put personal data of third parties, trade secrets or unlawful content into seal titles.
• Not use the Service to issue seals on behalf of others, for fraud or to circumvent the rights of third parties.

5. The public log is permanent

Writing a seal to the public log cannot be revoked or deleted — that is the essence of the Service. The log contains the file fingerprint, the Issuer's domain, the declaration, the time and a fingerprint of the title (not the title itself).

6. Prices and payment

Verification is free. Issuing seals follows the current pricing. Monthly plans are paid in advance; seals beyond the plan are billed for the past month. Prices exclude VAT. We announce price changes at least 30 days in advance; the Issuer may cancel its plan before they take effect.

7. Availability

We operate the Service with care but without a guarantee of uninterrupted availability; that is subject to a separate agreement (Enterprise, SLA). Seals already issued remain verifiable even without the Operator — anyone can independently verify the public log and its Bitcoin anchors.

8. Liability

The Operator is not liable for the truth of Issuers' declarations nor for decisions of third parties made on the basis of a verification. The Operator's total liability to the Issuer is limited to the amount the Issuer paid in the last 12 months and excludes lost profit and indirect damage — except where the law does not permit such limitation. The Service helps meet the machine-readable marking obligation under Art. 50 of Regulation (EU) 2024/1689 (AI Act); responsibility for regulatory compliance remains with the Issuer.

9. Termination

The Issuer may terminate the Service at any time. The Operator may terminate access for a material breach of these terms. Issued seals remain verifiable.

10. Data protection

Processing of personal data is described in the Privacy Policy. For data the Operator processes on behalf of the Issuer, the Data Processing Agreement applies.

11. Final provisions

These terms are governed by the laws of the Czech Republic; disputes are decided by the courts of the Czech Republic. Consumers (free verification) retain the rights granted by the mandatory laws of their country. We announce changes to these terms at least 30 days in advance. The English version of these terms is the governing version; any translation is for convenience only. Contact: info@gpnovum.cz.