Terms of Service

Synago is offered to businesses and professionals, not consumers. By creating an account or using the service, you confirm that:

• you are at least 18 years old;
• you have authority to bind the business identified during signup (“Customer”);
• you are authorized to connect the relevant Google account and instruct Synago to process its data; and
• the information you provide is accurate and kept current.

If you do not have that authority, do not create an account or connect Google.

Synago is in beta. Core collection, extraction, review, and delivery functions are operational, but the service may change and may contain defects. During beta:

• automatic acceptance and automatic delivery are disabled unless separately agreed and validated;
• extracted fields are drafts until an authorized user reviews and approves them;
• accountant output is provisional and may not match every accountant's preferred format;
• availability, support times, and recovery objectives are not guaranteed by a service-level agreement; and
• features may be added, changed, suspended, or removed with reasonable notice where practicable.

Beta status does not reduce Synago's duties to protect personal data, honor agreed retention, or comply with Google API policies.

Customer is responsible for:

• keeping account credentials confidential;
• using a work email controlled by Customer;
• promptly notifying Synago of suspected unauthorized access;
• ensuring that only an authorized representative uses the owner account; and
• maintaining access to the connected Google account and customer-owned output.

Synago may suspend access where reasonably necessary to protect the service, Customer data, other users, or legal compliance.

Google connection is optional until Customer chooses to enable collection and output. The service requests:

• openid, email, and profile to identify the connected Google account;
• gmail.readonly to find and read messages and PDF attachments relevant to invoice collection; and
• drive.file to create and manage only the Drive/Sheets files created or opened for Synago.

Synago does not modify or delete Gmail messages. Disconnecting Google stops new collection and removes Synago's stored credential, but it does not delete Customer records already held by Synago or files already created in Customer's Google Drive.

The Google-data disclosure presented immediately before connection, the Privacy Notice, and Google's own consent screen form part of Customer's authorization.

“Customer Data” includes connected-mailbox data, source metadata, PDFs, extracted invoice details, corrections, review decisions, and Customer-controlled output.

Customer retains its rights in Customer Data. Customer instructs Synago to process Customer Data only to:

• discover likely invoice/expense PDF attachments;
• store eligible originals in Synago's private application storage;
• extract and validate structured details;
• present records for Customer review;
• detect potential duplicates;
• deliver approved records to Customer-controlled Drive and Sheets;
• secure, troubleshoot, and support those functions; and
• comply with law.

Customer grants Synago a limited right to process Customer Data only for those purposes and for the duration of the service and agreed retention period.

Synago will not sell Customer Data, use it for advertising, determine creditworthiness, or use Google Workspace data to train or improve a generalized AI/ML model. Synago's use of information received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Customer is responsible for:

• having a lawful basis and providing any notices required for personal data contained in its mailbox, invoices, and accountant output;
• deciding which records to approve, exclude, correct, export, or delete;
• verifying extracted values before relying on or sharing them;
• maintaining legally required books and records independently of Synago;
• ensuring its use does not infringe third-party rights or law; and
• not uploading or connecting data that Customer is not authorized to process.

Synago is an operational aid, not an accountant, tax adviser, lawyer, tax authority, or system of record. Customer and its advisers remain responsible for filings, tax treatment, bookkeeping, payment, and regulatory compliance.

Customer must not:

• attempt unauthorized access, interfere with the service, or bypass security or tenant isolation;
• use the service to distribute malware, spam, or illegal content;
• probe or test security without written permission;
• resell or provide access to unrelated third parties without an agreed plan;
• use multiple accounts to bypass limits or Google policies; or
• use outputs as automatically verified financial facts without the required human review.

Beta pricing, any free-close offer, billing start date, taxes, and payment terms will be stated in an order form or checkout shown before Customer is charged. Synago will not charge a beta customer without affirmative agreement to the applicable price.

Unless the order states otherwise, fees are exclusive of VAT and other applicable taxes. Payment, late-payment, renewal, and refund terms for paid plans will be stated in the order form or checkout before any charge. Synago does not take paid money until a legal entity exists.

Synago depends on services provided by Google, Vercel, and the production Postgres provider. Customer's use of Google remains subject to Google's terms. Third-party outages, limits, policy changes, or account restrictions may affect Synago.

Synago remains responsible for its own contractual and data-processing obligations. A provider dependency does not authorize Synago to use Customer Data for unrelated purposes.

Synago will use reasonable technical and organizational measures appropriate to the sensitivity of Customer Data, including tenant isolation, encrypted transport, private object storage, restricted Google scopes, and encryption of stored OAuth refresh tokens.

Each party will protect the other party's non-public information and use it only to perform or receive the service, except where disclosure is required by law.

No security measure is perfect. Notify Synago promptly through the signed-in account (Settings) of suspected compromise. Synago will notify affected Customers of a qualifying personal-data breach as required by applicable law and the Data Processing Addendum.

The Privacy Notice explains how Synago processes account and operational data as controller. For personal data contained in Customer Data, Customer generally acts as controller and Synago as processor.

Before processing external beta-customer personal data, the parties will enter into Synago's Data Processing Addendum or equivalent Article 28 terms. Customer generally authorizes the subprocessors disclosed in the current subprocessor register, subject to the objection mechanism in that addendum.

While the account is active, Synago retains Customer Data needed to provide the service unless Customer submits a verified deletion request.

When service ends:

• Google access is revoked or deleted and new collection stops immediately;
• Synago retains Customer content for a 60-day recovery/export period;
• by day 60, Synago issues and completes deletion from its active primary Postgres database and application GCS bucket; and
• customer-owned Gmail, Drive, and Sheets remain under Customer's control and are not deleted by Synago.

A verified deletion request during active service is completed from primary systems within 30 days. Customer data may remain in Neon point-in-time history or scheduled snapshots for up to 35 additional days and in Neon infrastructure backups for the provider's stated 30-day period. Synago will not restore deleted data into active use; after any recovery operation, completed deletions must be replayed before service resumes. Other cloud infrastructure providers may retain residual copies for the periods stated in their applicable data-processing terms; Synago will not use those residual copies and will disclose the applicable provider limits in the Privacy Notice and DPA.

Redacted audit metadata may be retained for up to 12 months for security, accountability, and legal claims, then deleted or irreversibly anonymized. Applicable law may require limited billing or contractual records to be kept longer.

The detailed schedule is in the Privacy Notice and retention policy. If those documents conflict, the stricter deletion commitment to Customer applies unless law requires otherwise.

These Terms start when Customer accepts them and continue until terminated.

Customer may terminate using an available in-product control in Settings, or by contacting Synago through the signed-in account until an entity mailbox exists. Synago may terminate or suspend for material breach, unlawful use, security risk, non-payment, or discontinuation of beta, with reasonable notice where practicable.

Termination does not affect accrued fees, confidentiality, liability limits, or provisions intended to survive. Data handling after termination follows Section 12.

Synago and its licensors own the service, software, interfaces, and documentation, excluding Customer Data.

If Customer provides feedback, Customer grants Synago a non-exclusive, worldwide, royalty-free right to use that feedback to improve the service, provided Synago does not disclose Customer confidential information or use Google Workspace data to train a generalized AI model.

Synago warrants that it will provide the service with reasonable care and skill and substantially as described.

Except as expressly stated and to the maximum extent permitted by law, the beta service is provided “as is” and “as available.” Synago does not warrant uninterrupted operation, perfect extraction accuracy, tax or accounting correctness, or that every invoice will be discovered.

Nothing excludes rights or warranties that cannot legally be excluded.

To the maximum extent permitted by law:

• neither party is liable for indirect, incidental, special, punitive, or consequential loss, or loss of profit, revenue, goodwill, or anticipated savings;
• Synago is not liable for decisions made without Customer reviewing the underlying document and extracted data; and
• each party's aggregate liability arising from the service is limited to the fees paid or payable by Customer in the 12 months before the event giving rise to the claim, or EUR 100 during a free beta, whichever is greater.

The limitation does not apply where prohibited by law or to fraud, wilful misconduct, breach of confidentiality, infringement, or liability that cannot legally be limited.

Synago may update these Terms. Material changes will be notified before taking effect. If a change materially expands Google-data use, Synago will update its disclosures and obtain renewed authorization before the new use begins.

Continued use after the effective date constitutes acceptance only where legally valid; otherwise Synago will request affirmative acceptance.

These Terms are governed by the laws of Greece, excluding conflict-of-law rules. Courts located in Athens have exclusive jurisdiction, except where mandatory law provides otherwise.

Before filing a claim, each party will try in good faith for 30 days to resolve it through the contacts above.

These Terms, the applicable order, Privacy Notice, and Data Processing Addendum form the agreement. If they conflict:

1. the Data Processing Addendum controls for personal-data processing;
2. the order controls commercial terms;
3. these Terms control other service terms; and
4. the Privacy Notice describes transparency obligations but does not reduce contractual protections.

If a provision is unenforceable, the remainder continues. Failure to enforce a provision is not a waiver. Customer may not assign the agreement without consent, except with a merger or sale of substantially all assets; Synago may assign it subject to continued data-protection obligations.