These Terms of Service ("Terms") govern your access to and use of OSBN Flow ("the Service"), a multi-provider bank data aggregation API operated by the project owner ("we", "us"). By creating an account or calling the Service you agree to these Terms.
1. The Service
The Service allows registered developers to connect end-users' bank accounts through third-party aggregators (Plaid, GoCardless Bank Account Data, TrueLayer) and to read account and transaction data through a unified API.
2. Eligibility & accounts
You must be at least 18 and legally able to enter a contract. You are responsible for keeping your credentials and API keys secret. You must not share keys publicly or commit them to source control.
3. End-user consent
When you use the Service to connect a bank account, you must collect informed consent from the end-user, including the data scopes, retention period, and the right to revoke. The aggregator's consent screen does not replace your own privacy disclosures.
4. Acceptable use
- No reverse engineering, scraping, or attempts to bypass rate limits.
- No use of the Service to facilitate fraud, money laundering, or sanctioned activity.
- No re-distribution of raw provider responses to third parties.
5. Fees
Pricing is published on the dashboard or agreed in writing. Underlying aggregator fees may apply and will be passed through transparently.
6. Data & sub-processors
We process bank data on your behalf through the sub-processors listed in our Privacy Policy. Access tokens are encrypted at rest (AES-256-GCM). We do not sell personal data.
7. Disclaimers
The Service is provided "as is". Bank data is sourced from third parties and may be delayed, incomplete, or temporarily unavailable. We do not provide financial advice.
8. Limitation of liability
To the maximum extent permitted by law, our aggregate liability is limited to the fees you paid for the Service in the 12 months preceding the claim.
9. Termination
Either party may terminate the agreement at any time. We may suspend access if we reasonably believe the Service is being misused. On termination, your access tokens are deleted within 30 days.
10. Governing law
This agreement is governed by the laws applicable at the operator's registered office.
11. Contact
Questions about these Terms: legal@os3n.com.
See also our Privacy Policy.