Terms of Service

01The Service

Synci lets you fetch your own banking, brokerage, and crypto data through connectivity providers, transform it with rules and enrichment, and transfer it to destinations you choose. Access to your financial accounts is read-only. We cannot move your money, and we never see your bank login credentials.

The Service depends on third parties we do not control, including banks, brokerages, and connectivity providers. Availability and quality of data from these parties can vary, and we cannot guarantee that every institution remains supported at all times.

02Your account

You must be at least 18 years old to use the Service. You agree to provide accurate registration information and keep it up to date. You are responsible for keeping your login credentials confidential and for activity under your account. Tell us immediately at support@synci.io if you suspect unauthorized access.

03Plans, trial, and billing

Plans. Available plans, features, and prices are described on our pricing page. Paid features require an active subscription.

Free trial. New users get a 14-day free trial. You provide a payment method at signup, and your chosen subscription is charged when the trial ends, unless you cancel before then. Cancelling during the trial costs nothing.

Billing and renewal. Subscriptions renew automatically, monthly or yearly depending on your plan, and your payment method is charged at the start of each billing period. Payments are processed by Stripe, which acts as merchant of record for your purchase and handles payment processing, applicable sales taxes, and payment-related support and disputes. All prices are in euros, inclusive of VAT where applicable.

Cancellation. You can cancel at any time in your account settings. Cancellation takes effect at the end of the current paid period, and you keep access until then.

Price changes. We may change subscription prices. We will notify you in advance by email or in the app, and changes apply from your next billing period after the notice period required by law. If you do not accept a price change, you can cancel before it takes effect.

Failed payments. If a renewal charge fails, we will retry and notify you. We may suspend paid features until payment succeeds.

04Right of withdrawal and refunds

If you are a consumer in the EU/EEA or the UK, you have a statutory right to withdraw from this agreement within 14 days of entering into it (in Norway, under angrerettloven), without giving any reason. You agree that the Service begins during this period at your request. If you withdraw after the Service has begun and after any paid period has started, you may be charged a proportional amount for the period already delivered.

To withdraw, notify us by a clear statement to support@synci.io. You may use the standard withdrawal form, but you do not have to.

In practice, we go further than the statutory minimum: if you are a consumer, our refund policy gives you a full, no-questions-asked refund within 14 days of any charge, available once in any 12-month period. That policy is a goodwill policy for consumers. It does not apply where you use the Service for business purposes, and in particular it does not apply to any charge for a billing period in which your account held Managed app connections for users other than you or a member of your own team. The statutory right of withdrawal applies alongside, and is not limited by, our refund policy.

05Your data

Your data is yours. You retain all rights to the financial data and other content you bring into the Service. You grant us permission to process it solely to provide the Service, as described in our Privacy Policy.

Retention windows. Financial data we fetch is stored only for your configured retention window and then permanently deleted, as described in the Privacy Policy. Deleted data cannot be recovered from us, but can normally be re-fetched from your institution.

Destinations and clients. Data you send to destinations, or access through clients and AI assistants you connect, leaves our systems at your direction. Once delivered, it is governed by the receiving provider's terms, and removing it from those systems is your responsibility.

Backups. We perform routine backups to operate the Service reliably. You are responsible for maintaining your own copies of any data you cannot afford to lose, for example by using a destination such as a spreadsheet.

06Acceptable use

You agree not to:

• use the Service for any unlawful purpose, or in violation of any applicable law or regulation;
• access accounts or data belonging to anyone else, or attempt to;
• circumvent, disable, or interfere with security features, usage limits, or billing mechanisms;
• probe, scan, or test the vulnerability of the Service without our written permission;
• upload or transmit malware or other harmful code;
• use bots, scrapers, or other automated means to access the Service outside the documented API;
• resell or redistribute the Service or data obtained through it, except as permitted by section 7 or a separate agreement with us;
• reverse engineer the Service, except as permitted by applicable law;
• impersonate any person or misrepresent your affiliation with anyone;
• use our AI-powered features (such as transaction enrichment) in ways that violate these Terms, applicable law, or the terms of our AI providers;
• harass or abuse our staff or other users.

We may investigate violations and take proportionate action under section 10.

07Developer platform and API

The Synci API lets you build applications and integrations on top of Synci. This section applies when you use the API or register an application.

We offer two app types. A Standard OAuth app connects to the Synci accounts of users who already have a relationship with us. A Managed app lets you register your own users, who connect their financial accounts through a Synci-hosted portal without holding a Synci account. The Managed apps subsection below applies only to Managed apps. The rest of this section applies to both app types unless stated otherwise.

Access. API access requires an active plan or trial. Your API tokens and client secrets are confidential; you are responsible for keeping them secure and for all usage under them.

End users authorize through Synci. For Standard OAuth apps, if your application accesses other users' data, those users authenticate with their own Synci account and grant your application scoped access through our authorization flow. The relationship with the end user, including their account, plan, and data, belongs to Synci, and your application receives only the data within the scopes the user granted, for as long as the grant lasts. For Managed apps, the relationship with the end user belongs to you, as set out under Managed apps below.

Your obligations as a developer. You must: handle end-user data lawfully and in accordance with your own published privacy notice; use data only within the granted scopes and for the purpose your application discloses; delete end-user data obtained through the API when the user revokes access or asks you to; keep access tokens secure; and not misrepresent your application's relationship with Synci.

Fair use. API usage is subject to the rate limits in our documentation. We may throttle or suspend usage that degrades the Service for others.

Changes. We may evolve the API. For breaking changes we will give reasonable advance notice through our developer channels.

No warranty toward your users. You are responsible for your application and your relationship with its users. We provide the API to you as-is, and section 11 applies.

Partner agreements. Commercial or high-volume use of Synci as a data layer for your own product may require a separate partner agreement, and we may make continued access conditional on entering one. Where a signed partner agreement or order form exists between you and us, it prevails over these Terms in the event of conflict. These Terms continue to apply where the partner agreement is silent.

Managed apps

What these words mean. In this subsection, "you" is the account holder that registered the Managed app. A "Managed user" is a natural person you register through the Synci API to use that Managed app. The "portal" is the Synci-hosted connection page at which a Managed user connects, reviews, or disconnects financial accounts. "Financial data" means account, balance, transaction, holding, and connection data obtained from a connectivity provider on behalf of a Managed user.

A Managed user is your user. You decide which persons become Managed users, register them, and determine why their financial data is collected and how it is used. Managed users do not hold a Synci account, cannot log in to Synci, and are not customers of Synci. We will not market to Managed users. You pay for your Managed users' connections under your own plan or partner agreement.

Data protection roles. For financial data processed for a Managed app, you are the controller and we are the processor acting on your documented instructions. We are an independent controller only for the limited operating activities set out in the Data Processing Agreement. The Data Processing Agreement is incorporated into these Terms and applies to every Managed app from the moment you register your first Managed user. Where a signed partner agreement includes a Data Processing Agreement, that version applies instead.

Connectivity providers. Connectivity providers (for example GoCardless, listed in the Privacy Policy) obtain financial data under their own licences and their own end-user terms, which the Managed user accepts directly. They act as independent controllers and are not our sub-processors. We do not control and cannot guarantee any connectivity provider's continued availability, coverage, consent duration, or data quality.

Your end-user documents. Before registering any Managed user who is not you or a member of your own team testing the app, you must have in force your own terms of service and privacy notice with that user. Your privacy notice must disclose that financial data is obtained through Synci and the relevant connectivity providers, name Synci and those providers as recipients, and link to the portal privacy notice and to the connectivity providers' end-user terms. You must have a lawful basis for the processing you instruct us to perform and must be able to demonstrate it on request. We verify your privacy notice at review, not before. An app in testing mode may hold a limited number of live connections, the portal tells Managed users that the app has not been reviewed by Synci and is intended for testing, and you remain fully responsible for those users under this subsection.

Portal terms. Managed users are shown the Synci portal terms and must accept them before connecting an account. The portal terms govern the Managed user's use of the portal only. They do not create a service, subscription, or billing relationship between Synci and the Managed user, and they do not alter the data protection roles set out above.

Your controls. You configure, and are responsible for, the settings that apply to your Managed users, including permitted providers and countries, connection limits, history depth, retention period, enrichment, and whether we send connection status emails to your Managed users on your behalf. Where you enable those emails, they are sent as your instructed communications and contain no Synci marketing.

Scope of access. A Managed app's tokens receive data from every account a Managed user connects, including accounts connected later, without per-account selection by the user. You must make this clear to your Managed users in your own terms or privacy notice.

Deletion. You may delete a Managed user or any of their connections at any time through the API. We delete the associated financial data in accordance with the Data Processing Agreement. We may ourselves disconnect a Managed user's connection where required by a connectivity provider, by law, or to protect the security of the platform, and we will notify you where we do. If your Managed app is suspended or removed, we notify affected Managed users once that the app can no longer access their connections.

Provider-specific requirements. Some connectivity providers require a direct and verified relationship between the end user and the party holding the provider's consent. We may designate such a provider as operating in Direct Provider Mode under the Data Processing Agreement. In that mode, Managed users connecting through the designated provider also enter our own end-user terms for that connection, and we are the controller for establishing and maintaining the provider consent. We will notify you before applying Direct Provider Mode to a provider you have enabled, and you may disable that provider for your Managed app.

Your indemnity for Managed apps. You indemnify us against claims, fines, losses, and reasonable costs arising from (a) your failure to have valid end-user terms, a compliant privacy notice, or a lawful basis for the processing you instruct; (b) instructions that infringe applicable law; (c) your use of financial data; and (d) claims brought by Managed users in relation to your app or service. This indemnity is in addition to and does not limit section 13. It does not cover losses to the extent caused by our breach of these Terms or of the Data Processing Agreement, or by our negligence.

08Third-party services

The Service connects to third parties at your direction: connectivity providers that retrieve your financial data (listed in the Privacy Policy), destinations you send data to, and clients or AI assistants you connect. These providers operate under their own terms and privacy policies, which we do not control and are not responsible for. When a connection to your institution requires you to accept a provider's own end-user terms, that acceptance is between you and the provider.

Our website links to external sites, and some links (for example to Lunch Money) are affiliate links, meaning we may earn a commission if you make a purchase through them. Affiliate relationships never affect what your Synci subscription costs.

Testimonials on our site reflect the genuine experiences of individual users, published with their permission and edited at most for grammar or length. They are individual experiences, and your results may vary.

09Intellectual property

The Service, including its software, design, documentation, and trademarks, is owned by us or our licensors and protected by intellectual property law. We grant you a limited, non-exclusive, non-transferable, revocable licence to use the Service in accordance with these Terms. We reserve all rights not expressly granted. Nothing in this section limits your rights to your own data under section 5.

If you send us feedback, suggestions, or ideas about the Service, you grant us a perpetual, irrevocable, royalty-free licence to use them without restriction or compensation. Feedback is voluntary, and we may use it or not at our discretion.

10Suspension and termination

By you. You can stop using the Service and delete your account at any time in your settings.

By us. We may suspend or terminate your access, with notice where reasonably possible, if: you materially breach these Terms; your use creates a security risk or legal exposure for us, other users, or our providers; we are required to by law, a regulator, or a connectivity provider; or your account has been inactive for an extended period on a free tier. Where the cause is remediable, we will give you a reasonable opportunity to fix it before termination.

Effect. On termination, your right to use the Service ends and your data is handled as described in the Privacy Policy. Sections that by their nature survive termination continue to apply, including sections 5, 8, 9, 11, 12, 13, and 14, and two paragraphs of section 7: Data protection roles, to the extent it incorporates the Data Processing Agreement, and Your indemnity for Managed apps. Termination does not affect your statutory rights or any right to a refund under section 4.

11Disclaimers

The Service is provided as-is and as-available. To the extent permitted by law, we disclaim all warranties, express or implied, including fitness for a particular purpose and non-infringement. We do not warrant that the Service will be uninterrupted or error-free, or that data retrieved from your institutions is accurate, complete, or current, since that data originates with your institutions and passes through providers we do not control.

Synci is a data tool. Nothing in the Service is financial, investment, tax, or legal advice, and decisions you make based on data in the Service are your own.

Nothing in these Terms limits rights you have as a consumer under mandatory law, including Norwegian consumer protection law, which cannot be waived by contract.

12Limitation of liability

To the extent permitted by law, we are not liable for indirect or consequential losses, loss of profits, or loss of data arising from your use of the Service. Our total aggregate liability for all claims relating to the Service is limited to the amount you paid us in the six months before the event giving rise to the claim.

These limitations do not apply to liability that cannot be limited by law, including liability for gross negligence or intent, death or personal injury caused by negligence, or your mandatory rights as a consumer.

13Indemnification

If you use the Service in breach of these Terms or applicable law, or if your application built on our API causes claims from its users or other third parties, you agree to compensate us for losses, including reasonable legal costs, that we suffer as a direct result. This section does not apply to the extent a claim results from our own breach or negligence.

14Governing law and disputes

These Terms are governed by the laws of Norway. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

We both agree to the non-exclusive jurisdiction of the Norwegian courts, with Bergen District Court (Bergen tingrett) as the agreed venue. If you are a consumer residing in the EU/EEA or the UK, you keep the protection of the mandatory rules of your country of residence and may also bring proceedings there.

If you have a complaint, contact us first at support@synci.io and we will try to resolve it. Norwegian consumers can also contact the Norwegian Consumer Council (Forbrukerrådet) for mediation, and consumers in other countries can use their national consumer dispute resolution bodies.

15Changes to the Service and these Terms

We continuously improve the Service and may add, change, or remove features. If we make a change that materially reduces the core functionality you pay for, we will notify you in advance, and you may cancel before it takes effect.

We may update these Terms. For material changes we will notify you by email or in the app before they take effect. If you continue using the Service after the effective date, the updated Terms apply. If you do not agree, cancel before that date.

16Miscellaneous

These Terms, together with the documents they reference (including the Privacy Policy and Cookie Policy) and any separate written agreement between you and us, are the entire agreement between us about the Service. If a provision of these Terms is found invalid, the rest remains in effect. Our failure to enforce a provision is not a waiver of it.

You may not transfer this agreement to anyone else. We may transfer it to a legal entity that continues our business (for example, upon incorporation of the current sole proprietorship), with notice to you, provided that entity assumes our obligations.

Communications between us happen electronically, by email and in the app, and satisfy any requirement that a communication be in writing.

17Contact

Tonning, doing business as Synci
Nordbø 15
5009 Bergen, Norway
support@synci.io