Terms of Service

Who we are, and how these terms apply.

Koba HQ is a brand, not a corporation. Browsing the site is not a purchase. A merchant becomes bound when they accept the linked version at checkout or in the app. A person who only taps a card is the merchant's customer.

A short summary under a heading helps you scan. It does not replace the section. If a summary and a section ever conflict, the section controls.

Koba HQ is operated by a California sole proprietor in Los Angeles. No corporation or limited liability company is the contracting party. We do not print a home address, an employer identification number, or a personal legal name on this page. For the operator's legal name and a commercial mailing address, email [email protected] with the subject Legal notice.

The person who accepts a merchant order must be 18 or older and authorized to bind the business.

These terms cover four interactions. Website use is covered by visiting kobahq.com. A hardware sale, a Koba Command account, and a retainer or custom system become binding only when the merchant accepts the linked version at checkout or in the app. A footer link is notice. It is not acceptance of a payment duty.

• Website visitor: you may use the public site. The footer link does not create a payment contract.
• Person who emails [email protected]: that message is an inquiry, unless a later order says otherwise.
• Person who taps a card: you are not a Koba customer, and you do not get a Koba account. After the redirect, Google's terms apply.
• Merchant: you buy hardware, use Command, or buy a retainer or custom system. Binding terms attach at checkout or by clickwrap.
• Field sales representative: you are workforce or a contractor. An oral sales statement does not change this page.
• End user of a custom system: you are the merchant's customer. The merchant is responsible for that product's notices.

Words used on this page.

An HTTP 302 is a redirect response. It tells the browser to open a different address. NTAG213 is the chip type in a Koba Tap card. It stores a web address. It does not read the phone. A card vault means Stripe stores a card for a later charge the merchant approves. It is not, by itself, a subscription. A service provider, in the Privacy Policy, is a company that processes data to run the service. Clickwrap means an explicit checkbox next to a link to this page, on the checkout screen or in the app, with the accepted version stored. A footer link is not clickwrap.

Koba Tap hardware and the redirect.

You buy the card or plaque. In-person sales are final. A factory-failed chip is replaced within 5 business days. The redirect for that card is guaranteed for 5 years from the purchase date. You do not buy the redirect system, and rewriting the chip ends that guarantee.

Title to the physical card or plaque passes when it is handed over in person and paid for. Risk of loss passes at that handoff. In-person sales are final. The remedy for a factory-failed chip is replacement, not a refund. Buying the plastic does not buy the redirect system.

Koba owns the /r/{code} namespace. The merchant receives a non-exclusive license to use that route for 5 years from the purchase date of that card. The chip stores https://app.kobahq.com/r/{code} and must not be rewritten to a static Google address. The merchant must not rewrite, unlock, spoof, or replace the encoded URL. Doing so ends the redirect guarantee and any replacement obligation. Koba may also end the route for fraud or abuse.

Koba guarantees the redirect for 5 years after the NFC card purchase. The 5 years run from the purchase date of that card. Ending a retainer, or a failed retainer payment, does not end that guarantee. After the 5 years, continued routing is not promised.

A factory-failed chip is replaced as a physical unit, and the existing code is remapped, within 5 business days. Lost, stolen, bent, heat-damaged, or re-encoded units are not factory failures. Koba may deactivate the old code so a found card cannot keep routing taps, and may sell a replacement.

The checkout screen must show these same rules before payment: the sale is final, a factory-failed chip is replaced within 5 business days, and the redirect is guaranteed for 5 years from that purchase.

Koba Command and Google Business Profile.

Command is the merchant portal. Google Business Profile stays the merchant's. Koba does not post a review response unless the merchant authorizes that response. Drafts are drafts.

Koba Command is a multi-tenant portal at app.kobahq.com. Authenticated API responses are not cached by the service worker.

If the app sends an SMS login link, that text is a transactional message for that login. It is not consent to marketing texts. The program name, message frequency, message and data rates, HELP, and STOP belong on the screen where the number is entered. This page states that split. The data notice is in the Privacy Policy.

• Google Business Profile is a Google product. Google does not charge the merchant for the profile itself. A Koba management fee is Koba's fee, not Google's.
• The merchant keeps ownership of the profile.
• Koba accesses profile data only after the merchant authorizes it.
• Koba does not post a review response unless the merchant authorizes that response.
• Koba will tell the merchant within 48 hours of an account-level change Koba makes to management of the profile, where Google's third-party policy requires that notice.
• Koba is not Google and has no special relationship with Google.

Response drafts are drafts. The merchant reviews and approves anything posted. The merchant must not put health, financial, or other sensitive customer details in a public response. This page does not name a model used to draft a response.

Merchant duties and acceptable use.

Staff must ask for reviews honestly. Every tap goes to the merchant's Google review destination. Do not ask us to filter taps by star rating.

The merchant is responsible for how staff ask for reviews. The merchant must not buy reviews, post reviews for people who did not have the experience, post insider reviews without a clear disclosure, gate reviews, or offer an incentive conditioned on a positive star rating or a particular sentiment.

The merchant must not ask Koba to put a sentiment filter in front of the HTTP 302. Every tap goes to the merchant's Google review destination.

Do not scrape the marketing site, flood /r/{code} to fake tap counts, reverse engineer the app, or use these tools for unlawful or fake reviews. A field representative must not review a merchant's profile as if they were a customer.

Retainers and Koba Systems.

Managed Reputation, Local SEO, and Koba Systems start only under a separate order. A card sale does not start that work. This page does not list prices.

Managed Reputation, Local SEO, and Koba Systems are separate from the card sale. Each starts only under an order or statement of work that links to this page. The work is not a promise of a ranking or of reputation repair.

For a custom system Koba hosts, the merchant decides what end users are asked to provide. Koba processes that data on the merchant's instructions. The merchant provides the end-user notice. Koba owns the code and other intellectual property in that system. The merchant receives a license to use the system. Payment does not assign the code to the merchant.

Payments, saved cards, and subscriptions.

Stripe is the only payment processor. Saving a card does not start a subscription. A retainer needs its own consent, with the amount, the billing period, and how to cancel, before the first recurring charge.

Stripe, Inc. processes cards. Charges should appear as KOBA HQ or KOBA. Saving a card at the counter, including a Stripe instruction to use the card later, authorizes storage for later merchant-approved charges. It does not start a subscription.

A recurring retainer requires a separate affirmative consent that states the amount, the billing period, and how to cancel, before the first recurring charge. The merchant can cancel inside Koba Command, or by email to [email protected]. This page does not describe a phone line.

A fee change on an auto-renewing retainer requires notice before the change, with a way to cancel. The notice window is stated on the order. This page does not set that window.

If a payment fails, Koba may retry a vaulted card under Stripe and card-network rules, and may pause retainer work after notice. A failed retainer payment does not stop a card redirect during its 5-year guarantee. Koba may still stop a route for fraud, abuse, or a rewritten chip.

Intellectual property and feedback.

Koba owns the site, the app, and the redirect system. The merchant owns merchant data. We will not publish your name as a testimonial unless you agree.

Koba owns the marketing site, the app, the redirect system, and the code in a custom system. The merchant owns merchant data, profile content, and intake records. Koba gets a limited license to host and display that data to provide the service. The merchant's right in a custom system is a license to use it, not ownership of the code.

Koba may use feedback without compensation. Koba will not publish the merchant's name, or a testimonial, without express consent.

Disclaimers.

We do not promise rankings, review counts, star ratings, or revenue. Google may remove or delay a review. A spoken sales line does not change the written order, and it also does not excuse a deliberate false statement.

Limitation of liability.

Indirect damages are excluded to the extent California law allows. This page does not set a dollar cap. Fraud and willful injury are not waived.

Termination and exit.

A merchant can end a retainer in Command or by email. Google profile access comes back within 7 business days of that notice. The plastic card cannot be rewritten to a static Google address.

A merchant may end a retainer through Koba Command or by email to [email protected]. Within 7 business days after the merchant's notice, Koba must let the merchant disconnect Koba's Google API project and take back exclusive management of the profile.

On exit, the merchant may email [email protected] to ask for an export of tap summaries and hosted system data. This page does not set a retention tail.

Physical cards cannot be remotely rewritten to a static Google URL. Ending a retainer does not deactivate a card redirect during its 5-year guarantee. After that guarantee ends, or if the chip was rewritten or the route was used for fraud or abuse, Koba may deactivate /r/{code} or replace it with a short neutral notice. The plastic will not keep opening Google by itself.

Ending a custom-system engagement does not transfer the code. The merchant keeps the license to use the system that the order describes. Hosting handoff follows the statement of work and payment of amounts already due.

Disputes.

California law applies. Courts in Los Angeles County hear disputes, and either party may use small claims court for an eligible individual claim. This page has no arbitration clause.

California law governs, without conflict-of-law rules that would pick another state's law. Venue is the state and federal courts in Los Angeles County, California. Either party may bring an eligible individual claim in small claims court. These terms do not require arbitration, and they do not waive the right to participate in a class action.

Changes to these terms.

This page shows a date and a version. A change for anonymous visitors is posted here. A material change for a merchant with an account requires email, and a change to price, liability, or data use requires a new acceptance in the app.

The effective date is the publish date. The version is that date. A change for anonymous visitors is posted on this page with a changelog line. A material change for a merchant with an account requires email to the registered address before it takes effect. A change that alters price, liability, or data use also requires re-acceptance in the app. A silent edit does not bind an active merchant.

Changelog.

• 2026-10-15: Initial public terms. In-person card sales are final. A factory-failed chip is replaced within 5 business days. A card redirect is guaranteed for 5 years from that card's purchase date. Koba owns custom-system code. The merchant receives a license to use that system.