TERMS OF SERVICE

BNGroup App – Terms of Service

Effective date: 23 December 2025

Applies to: the BNGroup's web application available at bngroup.ro (the “App”) and any related services.

1) Who we are

The App is provided by BN FINTECH SRL (“BNGroup”, “we”, “us”, “our”).

Registered office: Cluj Napoca, Romania. Registration number: 43792885

2) Acceptance of these Terms

By creating an account, connecting a bank, or using the App, you agree to these Terms. If you use the App on behalf of a company, you confirm you have authority to bind that company.

3) Definitions

“Open Banking Connection”: an API-based connection to your bank account(s) enabled through Salt Edge and/or bank interfaces.
“Salt Edge”: Salt Edge Inc./its group entities providing open banking connectivity and related infrastructure.
“PSU”: payment service user (account holder) under PSD2 terminology.
“Account Data”: data retrieved via Open Banking Connection, such as account identifiers/IBAN (where available), balances, transactions, merchant info, and related metadata.
“Consent”: the authorization you grant to allow access to Account Data (created and managed as part of the open banking consent flow).

4) Scope of the Service

The App allows you to:

connect eligible bank accounts via Salt Edge,
retrieve and display Account Data,
use Account Data for App features such as [cashflow, reporting, reconciliation, budgeting, credit analysis, etc.—edit to match reality].

Important: We are not your bank. The App does not provide banking services.

5) Open Banking connections and consent

How access happens. You authenticate directly with your bank (typically via redirect and Strong Customer Authentication). Salt Edge and the bank exchange technical tokens/authorizations required to access Account Data.
You control consent. Open banking access starts only after you grant consent and complete bank authentication.
Revocation / expiry. You can revoke consent through the App (where supported) and/or through your bank. Consents may also expire or be terminated by the bank/TPP.
No bank credentials. We do not require or want your bank username/password inside the App (authentication occurs with the bank).
Availability. Bank APIs and connectivity may be unavailable, degraded, delayed, or produce incomplete data; we do not guarantee uninterrupted access.

6) Eligibility and user responsibilities

You agree that:

you are the lawful account holder or are authorized to access the accounts you connect,
you will keep your App credentials secure and use MFA if offered,
you will not use the App for fraud, unauthorized access, money laundering, or illegal activity,
you will keep your company/user information accurate (especially where invoices, reconciliation, or compliance outputs are involved).

7) Data protection and privacy

Roles under GDPR. For Account Data processed to provide the App, BNGroup generally acts as a data controller (deciding purposes/means), and Salt Edge typically acts as a processor/sub-processor supporting connectivity (subject to contracts). Controller/processor roles depend on the exact setup and must be reflected in your Privacy Policy and agreements.
Lawful basis. Open banking “explicit consent” is a PSD2 permission mechanism; it is distinct from GDPR consent, and GDPR lawful basis may be contractual necessity and/or legitimate interest depending on the feature.
Privacy Policy. Our processing, retention, international transfers (if any), and your rights are described in the BNGroup Privacy Policy at [link], incorporated by reference. If there’s a conflict, the Privacy Policy governs personal data topics.

8) Security

We use reasonable technical and organizational measures to protect the App and Account Data. However, no system is perfectly secure. You acknowledge and accept residual risk.

If Salt Edge is referenced as certified/licensed in your materials, ensure it matches your current contractual channel and publicly verifiable statements (Salt Edge is presented as ISO 27001 certified and UK open banking licensed in some directories).

9) Third-party services (Salt Edge and banks)

The Open Banking Connection depends on third parties (banks and Salt Edge). You acknowledge that:

banks determine what data is exposed and when,
banks may require additional steps (SCA) or block access,
Salt Edge provides infrastructure and may process data as part of providing connectivity.

We are not responsible for third-party outages, API changes, or bank decisions.

10) Fees and payment (if applicable)

Fees are described on [pricing page / order form]. Unless stated otherwise:

fees are non-refundable for periods already started,
taxes may apply,
we may change pricing with advance notice for renewals.

11) Intellectual property

We own the App, software, UI, and all related IP. You receive a limited, revocable, non-exclusive license to use the App as intended.

12) User content and outputs

If you upload or generate content (e.g., categories, tags, notes, exports), you grant us the rights necessary to host and process it to provide the service. You remain responsible for the legality of content you provide.

13) Disclaimers

The App is provided “as is” and “as available”.
We do not warrant that Account Data is error-free, complete, or up-to-date.
The App does not provide legal, tax, or accounting advice; outputs may require professional review.

14) Limitation of liability

To the maximum extent permitted by law:

we are not liable for indirect, incidental, special, consequential damages (lost profits, lost data, business interruption),
our total liability for any claim related to the App will not exceed the fees paid by you to BNGroup in the [last 12 months / last 3 months—choose one], except where liability cannot be limited by law.

15) Indemnity

You will indemnify and hold BNGroup harmless from claims arising out of:

your misuse of the App,
your unauthorized connection to accounts,
your violation of law or third-party rights.

16) Suspension and termination

We may suspend or terminate access if:

we detect suspicious or unlawful activity,
you breach these Terms,
required by law or a bank/Salt Edge requirement.

You may stop using the App at any time. Upon termination:

your license ends,
consents may be terminated (where supported),
we handle retention/deletion per the Privacy Policy and legal obligations.

17) Changes to the service or Terms

We may update the App and these Terms. If changes are material, we will provide notice via the App and/or email. Continued use after the effective date means acceptance.

18) Governing law and jurisdiction

These Terms are governed by the laws of Romania. Courts of Cluj Napoca / Cluj will have exclusive jurisdiction, unless mandatory consumer rules apply.

19) Contact

Questions about these Terms: tech@bngroup.ro