Terms of Service

About these terms

These are the terms for services provided by JWC Apps, a company based in San Diego, California, USA, trading as Verified Everywhere at verifiedeverywhere.com. In these terms, "we" and "us" mean JWC Apps. "You" means the business that hires us.

These terms apply when you sign an order form or statement of work with us, or when you pay an invoice for our services. Your order form describes the specific work, the fee, and anything unusual about your engagement. If the order form and these terms disagree, the order form controls for that engagement.

Our services are sold to businesses for business purposes. The person who accepts these terms must be authorized to bind the business.

Last updated: [insert publication date].

What we do

We are a done-for-you agency. We set up official third-party verification programs on your behalf, using each platform's own published process.

Our current service lines and our fees are below. Our fee is what you pay us for the work. It is separate from any fee a platform or certificate authority charges you.

Fee ranges depend on the size and condition of your setup. Your order form states the exact fee before any work starts.

• Google Business Profile Verify and Rescue: $300 to $800. Reinstatement work may be quoted pay on success. See the pay-on-success section below.
• Email Compliance Sprint, covering SPF, DKIM, and DMARC: $497 to $1,497.
• Logo in the Inbox, BIMI with a Common Mark Certificate: $1,500 to $2,500.
• Gmail Blue Check, BIMI with a Verified Mark Certificate: $2,000 to $3,000.
• Meta Verified and other social badge setup: $250 to $500. This is an add-on to another service, not a standalone engagement.
• Trust Monitoring retainer: $50 to $150 per domain per month.

What we are not

We do not issue, sell, or resell certificates, badges, checkmarks, or verified status. We cannot. Only the platforms and the certificate authorities can do that.

We have no special access, no insider channel, and no relationship that lets us skip a step or move a review along. Everything we do is the same official process that is open to you. What you are paying for is that the work gets done correctly, completely, and in the right order, by people who have done it before.

We are not a law firm and we do not give legal advice. We do not file trademarks. Where a certificate authority requires a trademark, owning that trademark is your responsibility.

We are an independent agency

Verified Everywhere is independent. We are not affiliated with, endorsed by, sponsored by, or acting as an agent of any platform or certificate authority we work with, including Google, Meta, Apple, Microsoft, Yahoo, X, LinkedIn, TikTok, DigiCert, GlobalSign, and SSL.com.

We name those companies to describe what we do. Their names, logos, and trademarks belong to them. Nothing on our site or in our materials should be read as a claim that any of them backs us.

We act only as your agent, only within the scope you authorize in writing, and only through each platform's official delegated-access flow.

No guarantee of any verification outcome

We do not guarantee, and we cannot guarantee, that any verification, reinstatement, badge, certificate, or logo display will be approved. Read that sentence twice, because it is the most important one on this page.

The platforms and certificate authorities make every approval decision. They set the rules, they change the rules, they interpret the rules, and they can reverse themselves. They can approve an application that looks weak and reject one that looks perfect. They do not owe us an explanation and they usually do not give one.

Here is what we do guarantee. We will do the work correctly and completely, through official channels, using accurate information you provide. We will tell you honestly where you stand. We will not misrepresent your business to anyone.

If a provider tells you they can guarantee a Gmail blue check, a Google verification, or a Meta badge, they do not control that outcome any more than we do.

Approval also does not mean permanent. Platforms can suspend, revoke, or stop displaying a verification later, for reasons inside or outside your control. A certificate expires and must be renewed. We are not responsible for a platform's later decision to change or remove what it once granted.

We decline work we do not believe can succeed

Before we take your money, we run a fit check. We compare your actual situation against what the platform or certificate authority actually requires.

If we do not believe the work can succeed, we tell you and we decline the engagement. We would rather lose the sale than take a fee for a filing with no realistic path. Where the gap is fixable, we tell you what would have to change and roughly what that would take, so you can come back later if you want to.

If we discover after starting that the work cannot succeed as scoped, we stop, we tell you why in writing, and we refund the portion of the fee we have not earned.

We will not submit information to a platform that we know or believe to be false, and we will not describe your business as something it is not. If getting to an approval would require that, we will end the engagement instead.

Scope of work and change orders

Your order form is the scope. It names the service line, the domains, profiles, or accounts covered, the deliverables, and the fee.

Anything not written in the order form is out of scope. That includes additional domains, additional locations or profiles, additional brands or logos, additional certificates, rebuilding email infrastructure, migrating mail platforms, resolving a suspension we did not quote for, and repeat filings after a rejection caused by facts you did not disclose.

If you want something added, or if the work turns out to be materially different from what you described at intake, we will send you a change order with the added scope and the added fee. Work on the change starts after you approve it in writing. We will not do out-of-scope work and bill you for it as a surprise.

One re-filing or one round of platform follow-up is included where the platform allows it and the rejection was not caused by inaccurate information from you. Beyond that, additional filings are a change order.

What you are responsible for

The work only functions if you hold up your side. Specifically, you agree to the following.

• Give us accurate, current, and complete information and documents. Verification programs are identity checks. A small inconsistency, such as a legal name that does not match your registration or an address that does not match your utility bill, is one of the most common reasons applications fail.
• Grant us access through the official delegated-access flow for each platform, and keep that access in place while we are working.
• Sign a scope-limited Letter of Authorization naming the domains, records, profiles, and accounts we may touch, and keep it current if the scope changes.
• Personally perform the steps that only you can perform. These are listed in the next section.
• Pay all third-party platform and certificate authority fees directly to those companies.
• Own, or be entitled to use, the logo and marks you give us. For a Verified Mark Certificate, this generally means a trademark registered with a trademark office the certificate authority accepts, in the exact form of the logo you want displayed. We do not file trademarks.
• Respond to our requests within a reasonable time. Most platform and certificate authority processes have deadlines, and a missed window can mean starting over.
• Tell us promptly if anything changes, including your legal name, address, ownership, domain, mail provider, registrar, or logo.

Steps only you can perform

Some steps are reserved to you by the platform or the certificate authority. We cannot do them for you, and any provider who offers to is asking you to break the platform's rules.

We will prepare everything around these steps, brief you before each one, and be on call while you do them. But you have to actually do them.

• The certificate authority identity check. An officer of your company appears on a live video call with their government-issued ID, or completes the check before a notary, depending on the certificate authority's process.
• The Google Business Profile video verification. The owner or an authorized representative records it in person, at the business location, live in the Google app.
• Paying platform subscriptions and certificate authority invoices from your own payment method.
• Approving your own two-factor authentication prompts.
• Any step where a platform requires the account owner personally.

How we access your accounts

We work exclusively through each platform's official delegated-access flow. That means you grant a named role to our account, and you can see it, audit it, and revoke it at any time from your own admin console.

Depending on the service, that looks like a Manager role in Google Business Profile Manager, partner access in Meta Business Manager, a DNS delegation at your registrar or a specific set of records you authorize us to change, or a dedicated admin user created for us inside your Google Workspace or Microsoft 365 tenant.

We ask for the narrowest access that will do the job, and we ask for it for the shortest time that will do the job. We keep an access register listing every access we hold, when it was granted, what it covers, and when it was removed. You get a copy at handoff, and you can ask for it at any time.

We act only within the scope of your written Letter of Authorization. If a fix would require touching a domain or a record type outside that authorization, we come back to you first.

Three things we never accept

We do not accept, request, or store any of the following, at any point, for any reason.

We never need them. Every service we sell can be completed through delegated access plus the steps you perform yourself. If anyone claiming to be from Verified Everywhere asks you for one of these, it is not us. Stop, and contact us through the address on our website.

If you send us one of these anyway, we will not use it. We will delete it, tell you we deleted it, and ask you to change the password or reissue the credential, because it has been transmitted and should be treated as exposed.

• Passwords. Not for your Google account, your registrar, your mail platform, your Meta account, or anything else.
• Government-issued ID documents. Driver's licenses, passports, and similar documents go from you directly to the certificate authority or platform that requires them, never through us.
• Payment card numbers. Our fees are processed by Stripe. We do not see, handle, or store card numbers. Third-party fees are paid by you directly to that third party.

Documents we do collect

To prepare an application we normally need business documents. These typically include your business registration, professional or business licenses, a recent utility bill, a bank statement, your EIN letter, trademark certificates, logo artwork in the required format, and photos of your storefront or premises.

We use these only to perform the work you hired us for. We submit them to a platform or certificate authority only where that entity requires them for an application you authorized. We do not sell them, and we do not use them for anything else.

We keep them for the duration of the engagement and for a reasonable period afterward for our records and legal obligations. You can ask us to delete what we are not required to keep.

Fees and payment

Your fee is stated on your order form. Unless the order form says otherwise, project work is billed with a deposit before we start and the balance on delivery of the work, meaning the point where the application, filing, or configuration has been submitted or completed. Delivery is not the same as approval, because approval is not ours to give.

Invoices are due within [insert number] days. We may pause work on an overdue account after written notice.

Payments are processed by Stripe. We do not see or store card numbers. Bank transfer is available for larger engagements.

The Trust Monitoring retainer bills monthly in advance and runs month to month. You can cancel at any time, effective at the end of the month you have already paid for.

Refunds work like this. If we have not started, you get a full refund. If we have started, you get a refund of the portion we have not earned, and we will show you the work that was done. If a platform or certificate authority rejects your application after we did the work correctly and completely, the fee for that work is earned, because the work is what you bought. Third-party fees are never refundable by us, because we never receive them.

Third-party costs are separate and never marked up

Platform subscriptions and certificate authority fees are paid by you, directly to that company, on your own payment method. They never pass through us, and we never add a markup, a handling fee, or a commission.

Typical third-party costs as of the last update of these terms are below. These are set by third parties and can change without notice. Treat them as estimates and confirm the current price with the provider before you commit.

We will tell you the expected third-party cost before you commit to a service line, and we will tell you if we learn it has changed.

• Verified Mark Certificate: roughly $749 to $1,416 per year, paid to the certificate authority.
• Common Mark Certificate: roughly $649 per year, paid to the certificate authority.
• Meta Verified: $14.99 to $499.99 per month per asset, paid to Meta.
• Certificate authorities that issue these certificates include DigiCert, GlobalSign, and SSL.com. You buy directly from the one we select together.
• Google does not charge a fee for Business Profile verification. If anyone asks you to pay Google for it, that is a scam.

Pay-on-success terms for reinstatement work

Some Google Business Profile reinstatement work can be quoted pay on success. This applies only when your order form says so in writing, and only to the specific profile named on that order form.

Success means all of the following: the profile named on your order form is reinstated by Google, it appears publicly on Google Search and Google Maps, its verified status is restored, and it stays live for 14 consecutive days after reinstatement.

These do not count as success: Google restores a different profile; you or someone else creates a new profile instead of recovering the suspended one; the profile returns without verified status; or the profile is reinstated and then suspended again within the 14 days for a reason on your side, such as new content that breaks Google's guidelines.

If your order form includes a non-contingent intake fee, that fee covers the audit, evidence assembly, and filing, and it is payable whether or not the appeal succeeds. It will be stated plainly on the order form. Everything above that amount is contingent.

If Google reinstates the profile within 60 days after our last appeal filing, the success fee is due, even if the engagement has already ended. Appeals often land after a delay, and we are not going to pretend the outcome was unrelated.

If you end the work early, or you do not complete a step only you can perform such as the video verification, the appeal is treated as unresolved. No success fee is due. Any non-contingent intake fee remains payable.

Success fee invoices are due within [insert number] days of the invoice date.

Timelines are estimates

Any timeline we give you is an estimate, not a commitment, because the clock is not ours. Platform reviews, certificate authority identity checks, appeal queues, DNS propagation, and mail provider caching all move at their own pace and their pace changes without warning.

We commit to our part: we will start when the order form says we will, we will do our work within the time we quote for it, and we will tell you promptly when the ball is in someone else's court and whose court it is.

Delays caused by a platform, a certificate authority, a registrar, a notary, or by your own response time are not a breach by us and do not entitle you to a refund of work already performed.

Termination and our seven-business-day access relinquishment

You can terminate at any time, for any reason, with written notice. You pay for work performed up to that point, and we refund the rest.

We can terminate with 10 days' written notice, or immediately if you fail to pay after written notice, if we are asked to submit information we believe is false, if the work would require us to break a platform's terms, or if the engagement would require us to handle a password, a government ID, or a card number.

Within 7 business days of termination, for any reason, we remove ourselves from everything. That means every delegated role, every partner connection, every DNS delegation, and every admin user created for us. We then send you an access register showing every access we held, when it was granted, what it covered, and when it was removed. If you want it faster, say so, and we will do it faster.

At handoff we also give you the work product you have paid for, including record values, configuration documentation, and any filing references, in a form you can hand to another provider.

Sections that by their nature should survive termination do survive it, including fees owed, limitation of liability, indemnity, intellectual property, and governing law.

You warrant that you are authorized to grant us access

You represent and warrant that you own or control the business, domains, profiles, and accounts you ask us to work on, and that you have the authority to grant us access to each of them and to sign the Letter of Authorization.

This matters more here than in most engagements. Delegated access to a domain's DNS or a Google Workspace tenant is real power, and we take it only from someone entitled to give it.

If it turns out you did not have that authority, we will suspend work immediately, and you are responsible for the consequences under the indemnity section below.

Indemnity for information you give us

You will defend, indemnify, and hold us harmless from third-party claims, losses, and reasonable costs arising from: information or documents you gave us that were inaccurate, incomplete, or not yours to give; logos or marks you gave us that infringe someone else's rights; your lack of authority to grant the access you granted; and your own use of any verification, badge, or certificate obtained through our work.

We will tell you promptly about any claim, give you control of the defense, and cooperate with you. We will not settle a claim in a way that admits fault on your part without your written consent, and you will not settle a claim in a way that admits fault on our part without ours.

This does not cover claims caused by our own breach of these terms, our gross negligence, or our willful misconduct.

Limitation of liability

Our total liability to you for any claim arising out of or relating to our services is limited to the fees you actually paid us for the engagement that gave rise to the claim, in the 12 months before the claim arose.

That cap counts only fees paid to us. It does not include third-party costs you paid to a platform or a certificate authority, because we never receive that money.

We are not liable for indirect, incidental, special, or consequential damages, or for lost profits, lost revenue, lost business opportunities, lost rankings, lost email deliverability, or loss of data, even if we were told those were possible.

We are not liable for the decisions of platforms or certificate authorities, including a refusal to verify, a delay, a suspension, a revocation, or a change in their rules or pricing.

Nothing in these terms limits liability for fraud, gross negligence, willful misconduct, or anything else the law does not permit us to limit.

Intellectual property

Your logos, trademarks, artwork, business documents, content, and data remain yours. Nothing here transfers ownership of them to us.

You grant us a limited, non-exclusive license to use those materials only to perform the work, including submitting them to the platforms and certificate authorities named in your order form. That license ends when the engagement ends, except where a platform or certificate authority requires us to retain a copy of a submission.

Our own methods, templates, checklists, audit tools, internal documentation, and general know-how remain ours. Deliverables we prepare specifically for you, such as your DNS record values, your DMARC rollout plan, and your written audit report, are yours to keep and use once you have paid for them, including with a different provider.

We will not name you, use your logo, or describe your engagement publicly without your written permission.

Disputes and governing law

These terms are governed by the laws of the State of California, without regard to its conflict of laws rules.

If something goes wrong, tell us first. Email us a description of the problem and what you want. We will respond within 10 business days and we will spend the next 30 days genuinely trying to sort it out with you. Most problems end here.

If that does not resolve it, the dispute will be brought in the state or federal courts located in San Diego County, California, and both sides consent to the jurisdiction of those courts. Either side may still bring a qualifying claim in small claims court.

Each side pays its own costs unless a court orders otherwise.

Changes to these terms

We may update these terms. When we do, we post the updated version at verifiedeverywhere.com with a new "Last updated" date at the top.

For changes that materially affect your rights or obligations, we email active clients at least 14 days before the change takes effect. We do not make material changes quietly.

Changes do not apply retroactively to work already ordered under a signed order form. That work continues under the terms in effect when you signed. If you do not agree with a change, you can terminate under the termination section, and we will refund the unearned portion of any fee.

How to reach us

JWC Apps, trading as Verified Everywhere. San Diego, California, USA.

Email: [insert support email]. Legal notices: [insert notice email and mailing address].

If you ever receive a message from someone claiming to be us that asks for a password, an ID document, or a card number, it is not us. Forward it to us and we will confirm.