Developer terms

Developer termsLast updated: 7 September 2026These developer terms apply to the Byna developer platform: the developer console, OAuth apps and the Byna API. By registering as a developer you enter into this agreement with Byna IT.These developer terms supplement the terms of service, which also apply to your Byna account.1. Acceptance and registrationYou accept these terms by registering a developer profile in the developer console. The moment of acceptance is recorded. The following applies to your registration:

You provide accurate and complete information (name, company name, Chamber of Commerce number, website and country) and keep this information up to date.

If you register on behalf of a company, you declare that you are authorised to accept these terms for that company.

You register one developer profile per account and only for yourself or your own company.

Access to the developer platform requires a verified email address and an active developer profile.

2. LicenseByna grants you a limited, non-exclusive, non-transferable and revocable license to use the Byna API, solely to build, test and support integrations for Byna users. The following restrictions apply:

You do not sublicense, sell or lease API access to third parties.

You do not present the API or data from the API as your own product or as an official Byna product.

Byna may revoke this license as described in the section on suspension and termination.

3. API credentials and securityYou are responsible for the security of your app and for everything that happens with your API credentials:

Keep your client secret confidential. Never place credentials in public repositories, client-side code or app store packages.

Store access tokens and refresh tokens securely and encrypted, and only for as long as necessary.

Use the OAuth authorization code flow with PKCE and a state parameter, as described in the documentation.

Use HTTPS for all redirect URIs and API calls in production.

Do you suspect credentials or tokens have been compromised? Rotate your client secret immediately and inform Byna via info@byna.io.

4. User data and privacyThrough the API you gain access to data of Byna users who connect their account to your app. For that data you are an independent controller under the GDPR:

You only access data after explicit consent from the user through the OAuth consent screen.

You request only the scopes your app actually needs and use the data only for the purpose you communicated to the user.

You have a clear and accessible privacy policy that describes which data you process and why.

You never sell, rent or share user data with third parties for their own purposes, including advertising.

When a user revokes access or asks you to delete data, you delete the data obtained through the API within 30 days.

In the event of a data breach involving Byna user data, you inform Byna without undue delay and no later than 72 hours after discovery, alongside your own obligations under the GDPR.

5. Acceptable useWhen using the developer platform and the API you shall not:

use the API for unlawful, misleading or harmful purposes;

circumvent rate limits, user caps, security measures or access restrictions;

retrieve data in ways other than through the documented API endpoints;

distribute malware or disrupt the operation or availability of the platform;

mislead users about who you are, what your app does or your relationship with Byna;

use the platform to send spam or unsolicited communication.

6. Test administrationYour first app is a test app with its own test administration containing sample data:

Tokens of test apps only give access to the test administration, never to real accounts.

A test administration never sends email to clients or other recipients.

Unverified apps can be connected by a limited number of users. Byna can verify apps and lift this limit.

7. Rate limits and availabilityThe API has documented rate limits. Byna may adjust these limits, throttle traffic or temporarily restrict access to protect the platform. Byna strives for high availability but does not guarantee uninterrupted availability of the API. See the documentation for the current limits.8. Use of the Byna nameYou may indicate that your app works with Byna, for example "works with Byna". You shall not use the Byna name or logo in a way that suggests your app is made or endorsed by Byna, and "Byna" shall not be part of your app name.9. Changes to the API and these termsThe API evolves. Changes that break existing integrations are announced in advance and existing behaviour remains available in parallel per the versioning policy in the documentation. Byna may amend these developer terms; material changes are announced in advance. Continued use of the developer platform after a change constitutes acceptance of the amended terms.10. Suspension and terminationAccess can end in the following ways:

Byna may suspend or terminate your access, apps or tokens in case of a breach of these terms, security risks, abuse or a legal obligation. Where reasonable, Byna informs you in advance.

You can stop at any time by deleting your apps or your developer profile.

After termination, tokens are revoked. You cease API use and delete user data obtained through the API within 30 days, unless you are legally required to keep it.

11. Disclaimer and liabilityThe API and the developer platform are provided as is, without warranty of fitness for a particular purpose, availability or error-free operation. Towards your own users you remain fully responsible for your app.The limitations of liability from the terms of service apply equally to the developer platform.12. IndemnificationYou indemnify Byna against claims by third parties arising from your app, your use of the API or your breach of these terms, including reasonable legal costs.13. Governing lawThese developer terms are governed by and construed in accordance with the laws of the Netherlands. Any disputes arising from or related to these terms shall be submitted to the competent courts in the Netherlands.14. ContactThese developer terms are offered by Byna IT (sole proprietorship), established at Walborg 2A, 1082 AM Amsterdam, the Netherlands, Chamber of Commerce (KVK) number 94203431, VAT ID NL003708448B92. If you have any questions, please contact us via info@byna.io.