Terms & conditions

Terms & Conditions

These Terms & Conditions outline your rights, obligations, and the legal framework for using Bylateral’s services.

Effective Date: 1st of August, 2025.

‍

Acceptance of Terms

By accessing or using the Bylateral website and services, you agree to these Terms & Conditions and any updates we post. If you do not agree, please discontinue use immediately.

‍

Services

Bylateral provides institutional fiat-settlement infrastructure, including account issuance, payment rails, and compliance tools. All service access is subject to your eligibility, KYC/KYB approval, and ongoing compliance.

‍

User Obligations

You must provide accurate, complete information during registration and maintain the security of your credentials. You warrant you have authority to bind your institution to these terms.

‍

Prohibited Conduct

Do not use our platform for illicit, fraudulent, or unauthorized activities. Any breach may result in immediate suspension or termination.

‍

Fees & Payment

All fees are as set in your pricing agreement. Late payments may incur interest. We reserve the right to change fees with 30 days’ notice.

‍

Limitation of Liability

To the maximum extent permitted by law, Bylateral’s liability for any claim related to the services is limited to the fees paid by you in the 12 months preceding the claim.

‍

Governing Law & Dispute Resolution

These terms are governed by the laws of Switzerland. Any disputes will be resolved in the courts of Switzerland unless otherwise agreed in writing.

Privacy Policy

Venenatis sollicitudin posuere elit consequat et enim. Neque tortor amet dictum tempor. Leo facilisis aliquet viverra scelerisque eleifend viverra est. At massa erat vel amet enim laoreet dictum pellentesque. Urna cursus quam pulvinar tellus. Duis fermentum nibh volutpat morbi. Et ac sed ultricies ut nunc sodales.

Effective Date: 1st of August, 2025. Last Updated: 3rd of July, 2025.

‍

Introduction

Bylateral (“we,” “us,” “our”) respects your privacy. This Policy explains how we collect, use, disclose, and safeguard personal data of institutional users across our U.S., UK, and EU operations.

• Morbi fringilla molestie magna sed dictum praesent pharetra.
• Cras mi purus, viverra vitae felis sit amet, tincidunt fringilla lorem.
• Non mattis urna ex nec sem donec varius diam et suscipit.
• Quisque euismod posuere lacus sit amet volutpat praesent.

Data Controller & Jurisdiction

• U.S: Bylateral Inc, Delaware

• EU/UK: Bylateral EU Ltd, Malta (GDPR controller)

Data We Collect

Core personal and technical information we gather to power, secure, and improve our services.

‍

• Identity & Contact: Name, title, business email, phone, address, and company registration.
• Verification Data: Documents (ID, incorporation papers) and KYC/KYB information.
• Transactional Data: Account balances, settlements, transaction logs.
• Technical Data: IP address, device/browser identifiers, usage logs, cookies.
  ‍

Purposes & Legal Bases

Why we process your data—and the lawful grounds that permit each activity.

• Performance of Contract (GDPR Art. 6(1)(b)): To onboard you, maintain accounts, and facilitate settlements.

• Legal Compliance (GDPR Art. 6(1)(c)): AML/KYC screening, sanctions checks, fraud prevention.
• Legitimate Interests (GDPR Art. 6(1)(f)): Service improvements, security monitoring, analytics.
• Consent (where required): For marketing communications (opt-in).
  ‍

Data Sharing & Transfers

Who we share data with, under what circumstances, and how we safeguard cross-border flows.

• Service Providers: KYC vendors, banking partners, hosting (AWS, Azure) under data-processing agreements.

• Regulators & Law Enforcement: Disclosed as required by U.S., UK, or EU law (e.g., FinCEN, FCA, MFSA).
• International Transfers: EU-U.S. transfers rely on EU-U.S. Data Privacy Framework; other transfers use Standard Contractual Clauses.
  ‍

Data Security & Retention

Our commitments to protect your information and how long we keep each category.

• Security Measures: Encryption at rest/in transit, SOC 2 Type II, access controls, regular audits.

Retention Periods:

• KYC/KYB Records: Minimum 5–7 years per local regulation.
• Transactional Data: 7 years for audit and compliance.
• Marketing Data: Until consent withdrawal or business need ends.
  ‍

Your Rights

Under GDPR, you may request access, correction, deletion, restriction, portability, and object to processing. Under U.S. state privacy laws (e.g., CCPA), you have similar rights. To exercise, contact privacy@bylateral.com.

‍

Cookies & Tracking

We use essential cookies for platform function and analytics cookies (Google Analytics) to optimize user experience. You can manage preferences via your browser settings.

‍

Children’s Privacy

Services are for institutional users only; we do not knowingly collect data from minors.

‍

Changes to This Policy

We may update this Policy; we will notify you by email or via website notice with the effective date.

‍

User Policy

Effective Date: 1st of August, 2025.
Last Updated: 15th of July, 2025.

Purpose & Scope

This User Policy governs your access, security, and acceptable use of the Bylateral platform and APIs, supporting our U.S., UK, and EU infrastructures.

Account Security & Access

Credentials: You must safeguard your login credentials and enable multi-factor authentication.
‍
Breach Notification: Immediately notify security@bylateral.com of any suspected compromise.

Acceptable Use

Lawful Business Use: Only use Services for legitimate institutional fiat settlement.
‍
Prohibited Activities: Do NOT:

• Facilitate prohibited money-laundering or sanctions-evading transactions
• Resell or benchmark Bylateral’s infrastructure
• Engage in attacks (DDoS, phishing, scanning) against Bylateral or its users
  ‍

Transaction & Usage Limits

Limits: We may impose per-transaction or daily volume limits based on your risk profile.
‍
Policy Controls: Administrators can set sub-user roles, whitelist counterparties, and configure compliance triggers.

‍

Incident Response & Support

Support Tiers:

• Critical: Settlement failure or security breach (response < 1 hour)
• High: API outages or major functionality errors (response < 4 hours)
• Normal: General inquiries (response < 24 hours)
• ‍Escalation: Contact your designated relationship manager or email support@bylateral.com.
• ‍

6. Suspension & Termination

Grounds for Suspension: Suspected illicit activity, non-payment, or repeated policy violations.

Account Termination: We reserve the right to terminate with 5 days’ notice for convenience or immediately for cause.
‍
Post-Termination: Client funds will be returned per Section 5 of the Terms & Conditions.

‍

7. Policy Amendments

Bylateral may modify this User Policy to reflect regulatory changes or new features. Notice is provided 30 days in advance; continued use implies acceptance.

‍