Terms of Service

Synagoo is offered to businesses and professionals, not consumers. By creating an account or using the service, you confirm that:

• you are at least 18 years old;
• you have authority to bind the business identified during signup (“Customer”);
• you are authorized to connect the relevant Google account and instruct Synagoo to process its data; and
• the information you provide is accurate and kept current.

If you do not have that authority, do not create an account or connect Google.

Synagoo is in beta. Core collection, extraction, review, and delivery functions are operational, but the service may change and may contain defects. During beta:

• automatic acceptance and automatic delivery are disabled unless separately agreed and validated;
• extracted fields are drafts until an authorized user reviews and approves them;
• accountant output is provisional and may not match every accountant's preferred format;
• availability, support times, and recovery objectives are not guaranteed by a service-level agreement; and
• features may be added, changed, suspended, or removed with reasonable notice where practicable.

Beta status does not reduce Synagoo's duties to protect personal data, honor agreed retention, or comply with Google API policies.

Customer is responsible for:

• keeping account credentials confidential;
• using a work email controlled by Customer;
• promptly notifying Synagoo of suspected unauthorized access;
• ensuring that only an authorized representative uses the owner account; and
• maintaining access to the connected Google account and customer-owned output.

Synagoo may suspend access where reasonably necessary to protect the service, Customer data, other users, or legal compliance.

Google connection is optional until Customer chooses to enable collection and output. The service requests:

• openid, email, and profile to identify the connected Google account;
• gmail.readonly to find and read messages and PDF attachments relevant to invoice collection; and
• drive.file to create and manage only the Drive/Sheets files created or opened for Synagoo.

Synagoo does not modify or delete Gmail messages. Disconnecting Google stops new collection and removes Synagoo's stored credential, but it does not delete Customer records already held by Synagoo or files already created in Customer's Google Drive.

The Google-data disclosure presented immediately before connection, the Privacy Notice, and Google's own consent screen form part of Customer's authorization.

“Customer Data” includes connected-mailbox data, source metadata, PDFs, extracted invoice details, corrections, review decisions, and Customer-controlled output.

Customer retains its rights in Customer Data. Customer instructs Synagoo to process Customer Data only to:

• discover likely invoice/expense PDF attachments;
• store eligible originals in Synagoo's private application storage;
• extract and validate structured details;
• present records for Customer review;
• detect potential duplicates;
• deliver approved records to Customer-controlled Drive and Sheets;
• secure, troubleshoot, and support those functions; and
• comply with law.

Customer grants Synagoo a limited right to process Customer Data only for those purposes and for the duration of the service and agreed retention period.

Synagoo will not sell Customer Data, use it for advertising, determine creditworthiness, or use Google Workspace data to train or improve a generalized AI/ML model. Synagoo's use of information received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Customer is responsible for:

• having a lawful basis and providing any notices required for personal data contained in its mailbox, invoices, and accountant output;
• deciding which records to approve, exclude, correct, export, or delete;
• verifying extracted values before relying on or sharing them;
• maintaining legally required books and records independently of Synagoo;
• ensuring its use does not infringe third-party rights or law; and
• not uploading or connecting data that Customer is not authorized to process.

Synagoo is an operational aid, not an accountant, tax adviser, lawyer, tax authority, or system of record. Customer and its advisers remain responsible for filings, tax treatment, bookkeeping, payment, and regulatory compliance.

Customer must not:

• attempt unauthorized access, interfere with the service, or bypass security or tenant isolation;
• use the service to distribute malware, spam, or illegal content;
• probe or test security without written permission;
• resell or provide access to unrelated third parties without an agreed plan;
• use multiple accounts to bypass limits or Google policies; or
• use outputs as automatically verified financial facts without the required human review.

Beta pricing, any free-close offer, billing start date, taxes, and payment terms will be stated in an order form or checkout shown before Customer is charged. Synagoo will not charge a beta customer without affirmative agreement to the applicable price.

Unless the order states otherwise, fees are exclusive of VAT and other applicable taxes. Payment, late-payment, renewal, and refund terms for paid plans will be stated in the order form or checkout before any charge.

Synagoo depends on services provided by Google, Vercel, and the production Postgres provider. Customer's use of Google remains subject to Google's terms. Third-party outages, limits, policy changes, or account restrictions may affect Synagoo.

Synagoo remains responsible for its own contractual and data-processing obligations. A provider dependency does not authorize Synagoo to use Customer Data for unrelated purposes.

Synagoo will use reasonable technical and organizational measures appropriate to the sensitivity of Customer Data, including tenant isolation, encrypted transport, private object storage, restricted Google scopes, and encryption of stored OAuth refresh tokens.

Each party will protect the other party's non-public information and use it only to perform or receive the service, except where disclosure is required by law.

No security measure is perfect. Notify Synagoo of suspected compromise at support@synagoo.com. Synagoo will notify affected Customers of a qualifying personal-data breach as required by applicable law and the Data Processing Addendum.

The Privacy Notice explains how Synagoo processes account and operational data as controller. For personal data contained in Customer Data, Customer generally acts as controller and Synagoo as processor.

Before processing external beta-customer personal data, the parties will enter into Synagoo's Data Processing Addendum or equivalent Article 28 terms. Customer generally authorizes the subprocessors disclosed in the current subprocessor register, subject to the objection mechanism in that addendum.

While the account is active, Synagoo retains Customer Data needed to provide the service unless Customer submits a verified deletion request.

When service ends:

• Google access is revoked or deleted and new collection stops immediately;
• Synagoo retains Customer content for a 60-day recovery/export period;
• by day 60, Synagoo issues and completes deletion from its active primary Postgres database and application GCS bucket; and
• customer-owned Gmail, Drive, and Sheets remain under Customer's control and are not deleted by Synagoo.

A verified deletion request during active service is completed from primary systems within 30 days. Customer data may remain in Neon point-in-time history or scheduled snapshots for up to 35 additional days and in Neon infrastructure backups for the provider's stated 30-day period. Synagoo will not restore deleted data into active use; after any recovery operation, completed deletions must be replayed before service resumes. Other cloud infrastructure providers may retain residual copies for the periods stated in their applicable data-processing terms; Synagoo will not use those residual copies and will disclose the applicable provider limits in the Privacy Notice and DPA.

Redacted audit metadata may be retained for up to 12 months for security, accountability, and legal claims, then deleted or irreversibly anonymized. Applicable law may require limited billing or contractual records to be kept longer.

The detailed schedule is in the Privacy Notice and retention policy. If those documents conflict, the stricter deletion commitment to Customer applies unless law requires otherwise.

These Terms start when Customer accepts them and continue until terminated.

Customer may terminate using an available in-product control in Settings, or by emailing support@synagoo.com. Synagoo may terminate or suspend for material breach, unlawful use, security risk, non-payment, or discontinuation of beta, with reasonable notice where practicable.

Termination does not affect accrued fees, confidentiality, liability limits, or provisions intended to survive. Data handling after termination follows Section 12.

Synagoo and its licensors own the service, software, interfaces, and documentation, excluding Customer Data.

If Customer provides feedback, Customer grants Synagoo a non-exclusive, worldwide, royalty-free right to use that feedback to improve the service, provided Synagoo does not disclose Customer confidential information or use Google Workspace data to train a generalized AI model.

Synagoo warrants that it will provide the service with reasonable care and skill and substantially as described.

Except as expressly stated and to the maximum extent permitted by law, the beta service is provided “as is” and “as available.” Synagoo does not warrant uninterrupted operation, perfect extraction accuracy, tax or accounting correctness, or that every invoice will be discovered.

Nothing excludes rights or warranties that cannot legally be excluded.

To the maximum extent permitted by law:

• neither party is liable for indirect, incidental, special, punitive, or consequential loss, or loss of profit, revenue, goodwill, or anticipated savings;
• Synagoo is not liable for decisions made without Customer reviewing the underlying document and extracted data; and
• each party's aggregate liability arising from the service is limited to the fees paid or payable by Customer in the 12 months before the event giving rise to the claim, or EUR 100 during a free beta, whichever is greater.

The limitation does not apply where prohibited by law or to fraud, wilful misconduct, breach of confidentiality, infringement, or liability that cannot legally be limited.

Synagoo may update these Terms. Material changes will be notified before taking effect. If a change materially expands Google-data use, Synagoo will update its disclosures and obtain renewed authorization before the new use begins.

Continued use after the effective date constitutes acceptance only where legally valid; otherwise Synagoo will request affirmative acceptance.

These Terms are governed by the laws of Greece, excluding conflict-of-law rules. Courts located in Athens have exclusive jurisdiction, except where mandatory law provides otherwise.

Before filing a claim, each party will try in good faith for 30 days to resolve it through the contacts above.

These Terms, the applicable order, Privacy Notice, and Data Processing Addendum form the agreement. If they conflict:

1. the Data Processing Addendum controls for personal-data processing;
2. the order controls commercial terms;
3. these Terms control other service terms; and
4. the Privacy Notice describes transparency obligations but does not reduce contractual protections.

If a provision is unenforceable, the remainder continues. Failure to enforce a provision is not a waiver. Customer may not assign the agreement without consent, except with a merger or sale of substantially all assets; Synagoo may assign it subject to continued data-protection obligations.