Terms of Service

01 —

Acceptance of Terms

By accessing or using the Normalyze API (the "Service"), you agree to these Terms of Service ("Terms"). These Terms form a binding legal agreement between you ("User," "you," or "your") and Normalyze ("we," "us," or "our").

We may update these Terms from time to time. Continued use of the Service after changes constitutes acceptance of the revised Terms. We will notify users of material changes by updating the "Last updated" date above.

02 —

The Service

Normalyze provides a REST API that processes raw financial transaction strings and returns structured, normalised JSON data. The Service includes:

• Transaction normalisation endpoints (POST /v1/normalize, POST /v1/normalize/csv)
• API key management endpoints (POST /v1/keys/generate, POST /v1/keys/revoke)
• Usage reporting (GET /v1/keys/usage)
• API documentation at /docs

We reserve the right to modify, suspend, or discontinue any part of the Service at any time with reasonable notice where practicable.

03 —

API Keys & Accounts

Access to the Service requires an API key in the format nyz_live_.... You are responsible for:

• Keeping your API key confidential — treat it like a password
• All activity that occurs under your API key
• Notifying us immediately at support@normalyze.dev if you believe your key has been compromised
• Revoking and regenerating keys that may have been exposed

We reserve the right to revoke any API key that we reasonably believe has been compromised or is being used in violation of these Terms.

One API key per email address is permitted on the free tier. You may not create multiple accounts to circumvent usage limits.

04 —

Acceptable Use

You may use the Service only for lawful purposes and in accordance with these Terms. You agree not to:

• Use the Service to process data you do not have legal right or authorisation to process
• Attempt to reverse-engineer, scrape, or extract our classification models or training data
• Use the Service in any way that violates applicable laws or regulations, including data protection laws
• Resell or sublicense access to the Service without our written permission
• Send requests designed to probe, test, or exploit system vulnerabilities
• Create multiple accounts to circumvent the free tier limit
• Use the Service to process personally identifiable information beyond what is strictly necessary for transaction normalisation

We process only the transaction strings you submit. You should minimise the personal data included in transaction strings sent to the API.

05 —

Billing & Payments

Free tier: New API keys include 500 free transaction normalisations. No payment method is required to start.

Paid tier: Usage beyond the free tier is billed at $0.005 USD per successful normalisation, aggregated monthly and billed at the end of each billing period via Stripe.

Billing terms:

• All prices are in USD
• Billing is metered — you pay only for what you use
• Invoices are issued monthly via Stripe
• Failed payments may result in suspension of API access
• We do not offer refunds for consumed API calls
• Pricing may change with 30 days' written notice

Payment processing is handled by Stripe. By providing payment details, you agree to Stripe's terms of service. We do not store your payment card information.

06 —

Data & Privacy

When you use the Service, you submit transaction strings to our infrastructure for processing. You should be aware of the following:

• Processing: Approximately 90% of transaction strings are processed entirely on our infrastructure using deterministic rules. The remaining ~10% may be sent to Google's Gemini API for classification.
• Retention: We do not persistently store the raw transaction strings you submit. Usage metadata (transaction counts, timestamps, API key identifiers) is retained for billing and abuse prevention.
• Third parties: We use Supabase (database), Stripe (billing), and Google Gemini (LLM fallback). Each processes data under their own privacy policies.
• Your obligations: You are responsible for ensuring you have appropriate legal basis to submit transaction data to third-party processing services under applicable data protection law (including DPDP Act 2023 for Indian users).

For full details on how we handle your data, please refer to our Privacy Policy (forthcoming).

07 —

Intellectual Property

The Service, including the API, classification engine, ruleset, documentation, and all associated software, is owned by Normalyze and protected by intellectual property laws.

You retain all rights to the transaction data you submit. We claim no ownership over your input data or the normalised output returned to you.

The ruleset_version field in API responses indicates the version of our classification ruleset used. You may not use this information to reconstruct or replicate our classification logic.

08 —

Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED.

We do not warrant that:

• Classification results will be accurate, complete, or suitable for your specific use case
• The Service will be uninterrupted, error-free, or available at all times
• Results with high confidence scores are guaranteed to be correct

The explain.confidence field is a probabilistic indicator, not a guarantee of accuracy. You are responsible for validating output before using it in financial models, credit decisions, or other consequential applications.

09 —

Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, NORMALYZE SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING FROM YOUR USE OF THE SERVICE.

Our total liability to you for any claim arising from these Terms or your use of the Service shall not exceed the amount you paid us in the three months preceding the claim.

This limitation applies regardless of the form of action — whether in contract, tort, negligence, or otherwise — even if we have been advised of the possibility of such damages.

10 —

Termination

You may terminate your use of the Service at any time by revoking your API key via POST /v1/keys/revoke or by contacting us.

We may suspend or terminate your access immediately if:

• You breach these Terms
• We are required to do so by law
• We reasonably believe your use poses a security risk
• Your account has unpaid charges outstanding for more than 30 days

On termination, your API key will be deactivated and your usage data may be deleted after a 30-day retention period.

11 —

Governing Law

These Terms are governed by the laws of India. Any disputes arising from these Terms or your use of the Service shall be subject to the exclusive jurisdiction of the courts of Shimla, Himachal Pradesh, India.

If any provision of these Terms is found to be unenforceable, the remaining provisions will continue in full force and effect.

12 —

Contact

For questions about these Terms, data processing, or any other matter, contact us at: