Terms of Service

1. Acceptance of Terms

These Terms of Service ("Terms") constitute a legally binding agreement between you ("Developer", "you") and OpenDinar ("OpenDinar", "we", "us") governing your access to and use of the OpenDinar API, developer dashboard, documentation, and all related services (collectively, the "Service").

By registering for an account, generating an API key, or otherwise accessing the Service, you represent that:

• You are at least 18 years of age
• You have the legal authority to enter into these Terms on behalf of yourself or your organisation
• You will comply with all applicable laws and regulations

2. Description of Service

OpenDinar provides an open banking API that enables developers to access financial data from Serbian banks — including account balances, transaction history, account holder identity, and payment credentials — on behalf of their end users, subject to those users' explicit consent.

The Service includes:

• The OpenDinar REST API (api.opendinar.com)
• The OpenDinar Link Widget — a secure bank connection UI
• The developer dashboard for account and key management
• API documentation and sandbox environment
• Webhook delivery for real-time event notifications

OpenDinar reserves the right to modify, suspend, or discontinue any part of the Service at any time with reasonable notice.

3. Accounts & API Keys

To use the Service, you must create a developer account and obtain an API key. You are responsible for:

• Account security: maintaining the confidentiality of your login credentials and API keys
• All activity: all API calls made using your keys, whether or not authorised by you
• Prompt notification: immediately notifying us at security@opendinar.com if you suspect unauthorised use of your account or API keys
• Accurate information: keeping your account information accurate and up to date

API keys are issued per environment. Sandbox keys (od_test_sk_*) may only be used in development and testing contexts. Live keys (od_live_sk_*) access real bank data and must be protected accordingly. Keys must never be embedded in client-side code or public repositories.

4. Permitted Use

Subject to these Terms and payment of applicable fees, OpenDinar grants you a limited, non-exclusive, non-transferable, revocable licence to access and use the Service to:

• Build applications that retrieve financial data from Serbian banks on behalf of your end users who have given explicit consent
• Develop and test integrations in the sandbox environment
• Display financial data within your own application interfaces
• Initiate payments using verified IBAN/BIC data obtained through the Auth API
• Integrate OpenDinar's Link Widget into your application to facilitate bank connections

5. Prohibited Use

You may not use the Service to:

• Resell or redistribute raw API data as a standalone data product or feed to third parties
• Access data without consent — connect bank accounts or retrieve financial data without the explicit, informed consent of the account holder
• Violate bank terms — use the API in ways that violate the terms of service of any Serbian bank whose data is accessed
• Conduct illegal activities — use financial data for money laundering, fraud, identity theft, or any unlawful purpose
• Circumvent security measures — attempt to bypass rate limits, authentication, or other security controls
• Store credentials — store, log, or transmit users' bank passwords, PINs, or authentication tokens beyond what is explicitly permitted by these Terms
• Scrape or harvest — use the API to scrape, harvest, or bulk-collect data beyond your legitimate application use case
• Disrupt the service — conduct load testing, stress testing, or any activity that could impair the Service for other users without prior written consent
• Reverse engineer — attempt to reverse engineer, decompile, or derive the source code of the API or Link Widget
• Misrepresent affiliation — represent that your application is created by or affiliated with OpenDinar or any Serbian bank

Violation of these prohibitions may result in immediate suspension or termination of your account.

6. End User Obligations

If you build an application that connects end users' bank accounts through OpenDinar, you are responsible for:

• Obtaining consent: obtaining clear, informed, and explicit consent from each end user before initiating any bank connection. You must explain what data will be accessed and for what purpose.
• Publishing a privacy policy: maintaining and displaying a privacy policy in your application that accurately describes your data practices, including your use of OpenDinar.
• Honouring revocation: providing end users with the ability to revoke bank connections at any time and honouring such requests promptly.
• Data minimisation: only requesting access to the data types your application genuinely requires. Do not enable API products that you do not use.
• GDPR/ZZPL compliance: ensuring your own data practices comply with applicable data protection law, including the Serbian Law on Personal Data Protection.

7. Rate Limits & Fair Use

The Service enforces rate limits to ensure availability for all developers. Current limits are published in the API documentation at api.opendinar.com/docs.

• Sandbox plan: 100 API calls per month. Exceeding this limit returns a 429 Too Many Requests error.
• Growth plan: Unlimited API calls subject to fair use. We reserve the right to throttle or suspend accounts engaging in abusive call patterns.
• Enterprise plan: Custom limits agreed in writing.

You must not attempt to circumvent rate limits through multiple accounts, IP rotation, or any other means.

8. Fees & Billing

The Sandbox plan is provided free of charge. Paid plans are described on our pricing page and are subject to the following terms:

• Billing cycle: Fees are billed monthly in arrears based on the number of active bank connections.
• Payment: You authorise OpenDinar to charge your payment method on file at the end of each billing cycle.
• Price changes: We will provide 30 days' notice before changing prices. Continued use after the effective date constitutes acceptance.
• No refunds: All fees paid are non-refundable, except as required by applicable law or expressly stated in writing.
• Taxes: You are responsible for any applicable taxes on fees charged to you.
• Suspension for non-payment: Accounts with overdue balances may be suspended after 14 days' notice.

9. Intellectual Property

OpenDinar's IP: The Service, API, Link Widget, documentation, and all associated software are owned by OpenDinar and protected by applicable intellectual property laws. These Terms grant you no ownership rights in any OpenDinar IP.

Your IP: You retain all intellectual property rights in your application and any data you generate independently. OpenDinar claims no ownership over your application.

Feedback: If you provide suggestions, ideas, or feedback about the Service, you grant OpenDinar a perpetual, irrevocable, royalty-free licence to use that feedback without restriction or compensation to you.

Brand use: You may state that your product "uses OpenDinar" or "powered by OpenDinar" in factual descriptions. You may not use the OpenDinar name or logo in a way that implies endorsement or partnership without prior written consent.

10. Confidentiality

"Confidential Information" means any non-public information disclosed by OpenDinar to you in connection with the Service, including API keys, technical specifications, pricing, and any information marked as confidential.

You agree to:

• Keep Confidential Information strictly confidential
• Not disclose Confidential Information to any third party without prior written consent
• Use Confidential Information only to use the Service as permitted by these Terms
• Treat end user financial data with at least the same level of protection as your own confidential information, and in any case no less than reasonable care

11. Data Protection

With respect to personal data processed through the Service:

• You are an independent data controller for personal data you collect from your end users. You are responsible for ensuring your data practices comply with applicable law.
• OpenDinar acts as a data processor when processing end user financial data on your behalf, subject to our Privacy Policy.
• You must have a lawful basis (typically user consent) for instructing OpenDinar to access end user bank data.
• You must not instruct OpenDinar to access data types beyond what your end users have consented to.

By using the Service, you warrant that your data processing activities comply with the Serbian Law on Personal Data Protection and, where applicable, the EU General Data Protection Regulation.

12. Disclaimers

The Service is provided "as is" and "as available" without warranties of any kind, either express or implied. OpenDinar expressly disclaims all warranties including, but not limited to:

• Warranties of merchantability, fitness for a particular purpose, and non-infringement
• Warranties that the Service will be uninterrupted, error-free, or completely secure
• Warranties regarding the accuracy, completeness, or timeliness of data received from Serbian banks (which is outside OpenDinar's direct control)

Bank data is provided by Serbian financial institutions via their own systems. OpenDinar does not guarantee the accuracy of data received from banks and is not responsible for errors originating from bank systems.

13. Limitation of Liability

To the maximum extent permitted by applicable law, OpenDinar's total aggregate liability to you for any claims arising from or related to these Terms or the Service shall not exceed the greater of (a) the total fees paid by you to OpenDinar in the 12 months preceding the claim, or (b) €100.

In no event shall OpenDinar be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, business, or goodwill, even if OpenDinar has been advised of the possibility of such damages.

Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable law, including liability for fraud or wilful misconduct.

14. Indemnification

You agree to defend, indemnify, and hold harmless OpenDinar and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or related to:

• Your use of the Service in violation of these Terms
• Your application and its data practices, including failure to obtain end user consent
• Your violation of any applicable law or third-party rights
• Any dispute between you and your end users arising from your application

15. Term & Termination

These Terms are effective from the date you create an account and continue until terminated.

By you: You may terminate your account at any time by deleting it from the dashboard. Termination does not entitle you to a refund of prepaid fees.

By OpenDinar: We may suspend or terminate your access to the Service:

• Immediately, without notice, for material breach of these Terms (including prohibited use)
• With 30 days' written notice, for any reason other than material breach
• Immediately, if required to do so by law or regulatory authority

Effect of termination: Upon termination, your API keys will be deactivated, and all bank connections established through your keys will be invalidated. OpenDinar will delete your data in accordance with our Privacy Policy. Sections that by their nature should survive termination (including Sections 9, 10, 12, 13, 14, and 16) will survive.

16. Governing Law & Disputes

These Terms are governed by and construed in accordance with the laws of the Republic of Serbia, without regard to conflict of law principles.

Any dispute arising from or related to these Terms or the Service shall be submitted to the exclusive jurisdiction of the competent courts in Belgrade, Serbia.

Before initiating legal proceedings, you agree to attempt to resolve any dispute informally by contacting us at legal@opendinar.com. We will make good faith efforts to resolve disputes within 30 days.

17. Changes to These Terms

We may update these Terms from time to time. For material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify you by email at least 30 days before the changes take effect
• Display a notice in the developer dashboard

Your continued use of the Service after the effective date of revised Terms constitutes your acceptance of the changes. If you do not agree, you must stop using the Service and close your account before the effective date.

18. Contact

For questions about these Terms or the Service:

OpenDinar — Legal
Email: legal@opendinar.com
Address: [Address], Belgrade, Republic of Serbia

For security issues: security@opendinar.com
For privacy matters: privacy@opendinar.com