Terms of Service
Last updated: September 29, 2026
1. Introduction and acceptance
allus.fyi is operated by B.K.I.F. B.V. ("we", "us", "our"), a company registered in the Netherlands. These Terms of Service ("Terms") govern your company's use of the allus.fyi platform — the business portal, the company-data API, the software development kits and the integrations we publish (together, the "Service").
You accept these Terms when you create an allus.fyi account. If you do not accept them, do not use the Service.
2. Who may use the Service
The Service is for business and professional use only. It is not offered to consumers, and an account may not be opened for personal purposes.
The person who accepts these Terms warrants that they are authorised to bind the company they name, and that company is our contracting party. You are responsible for your account credentials, your API client secrets and your service keys, and for everything done through them.
3. What the Service does
The Service lets your company:
- publish a company profile and one or more services that people and other companies can connect to;
- send and receive connection requests to and from allme.fyi users, and onboard them through those services;
- ask connected customers for specific information and receive it as they keep it up to date;
- design and run contract flows, generate documents from them, and collect signatures or acceptances;
- see what your use of the Service costs, and manage your billing and invoices;
- receive changes through webhooks or a change feed, and read them through the company-data API and the software development kits;
- offer "Sign in with allme" on your own sites and applications, and use allme as a second factor for your own logins;
- connect your customer relationship management system or your webshop through the integrations we publish.
4. Relationship to allme.fyi
allme.fyi is the consumer platform operated by the same company. A person's information reaches you only because that person connected to one of your services and chose which of their fields to share. Sharing is theirs to change: they may correct a value, point the share at a different field, withdraw it entirely, or end the connection, at any time.
You accept that a shared value may change or stop being available without notice, and you must not treat a value you received as permanent or as a warranty of its accuracy. When a person withdraws a field or ends the connection, updates stop; what you have already taken into your own systems is yours to handle under clause 5.
5. Your obligations for personal data
Personal data you receive through the Service and take into your own systems is data you control. You are an independent controller for it: you decide your own purposes, you need your own lawful basis, you answer your own data subjects, and you are responsible for keeping it secure once it is in your hands.
You must honour a withdrawal. When a person withdraws a field or ends the connection you stop using the value for any purpose that depended on their sharing it, and you delete it unless you have an independent basis to keep it. You must not sell or otherwise trade personal data obtained through the Service, and you must not disclose it to anyone except as your own lawful basis and your own privacy notice allow.
6. Acceptable use
When using the Service you must not:
- harvest data in bulk, or build a directory or dataset of people beyond the customers who connected to you;
- sell, licence or otherwise trade the data you receive;
- use the API, the integrations or the software development kits to work around a person's consent, their sharing choices or their withdrawal;
- exceed the published rate limits, or evade them by rotating credentials or addresses;
- probe, scan or attempt to reach another customer's data, keys or configuration;
- attempt to re-identify or correlate data beyond what your own customers have shared with you;
- interfere with the Service, or use it in a way that degrades it for anyone else.
7. Fees and payment
The Service is offered on usage-based paid plans. Rates are those published on the pricing page or agreed with you at purchase, and are not restated here.
Usage is metered and attributed to a person's link to one of your services and to a 2FA-by-allme enrolment, each counted monthly, and is settled periodically against a prepaid balance. Where the balance is insufficient at settlement a surcharge applies and the amount is invoiced instead of drawn from the balance. You may switch on automatic balance top-up, and you may set a spend limit.
Certain verified field types carry an additional per-use fee; others are free. All amounts are exclusive of value added tax and of any other tax we are required to charge, which is added on top. Payments are handled by a third-party payment provider.
8. Term, suspension and termination
These Terms run for as long as your account exists. Either party may terminate on 30 days' notice. We may suspend or terminate your account for a breach of these Terms or for non-payment.
Termination and suspension take effect immediately: your connections end at once and the Service stops delivering updates to you. We never reach into your own systems, so what stops is the flow of updates, not the records you already hold — those remain yours and remain your responsibility under clause 5. While your account is active you can read what your services have collected through the company-data API; do so before you terminate.
9. Availability, support and changes
The Service is provided as it stands. We give no availability commitment and no service level agreement, and we do not guarantee uninterrupted or error-free operation. We carry out maintenance, updates and changes that may affect availability.
We may add to, change or withdraw parts of the Service. Where a change materially reduces a part of the Service you rely on, we tell you through the Service or by email to the address on your account. Support is provided through the contact address in clause 15.
10. Intellectual property
The Service — the platform, the portal, the API, the software development kits, the integrations, and all associated software, documentation, designs and trade marks — is ours and stays ours. For the term of these Terms we grant your company a non-exclusive, non-transferable, revocable right to use the Service for its own business purposes, subject to these Terms.
Your data stays yours. We claim no ownership of your company profile, your service configuration, your contract flow designs, your documents or the personal data you receive, and we use them only to provide the Service and as our Privacy Policy describes. You may not copy, reverse engineer, resell or sublicense the Service, and you may not remove or obscure any notice on it.
11. Warranties and limitation of liability
The Service is provided without warranties of any kind, express or implied, including any implied warranty of merchantability, fitness for a particular purpose or non-infringement. We do not warrant that a value you receive through the Service is accurate, current or complete: values come from the people and companies who share them.
To the maximum extent permitted by law we are not liable for indirect, incidental, special or consequential loss, nor for loss of profit, revenue, goodwill, business or data, however caused. Our total liability arising out of or in connection with these Terms and the Service is limited to the fees you paid us in the twelve months before the event giving rise to the claim.
Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable law, including liability for intent or gross negligence.
12. Confidentiality
Each party may receive information from the other that is marked confidential, or that a reasonable person would understand to be confidential — including your service private keys, API client secrets and webhook signing secrets, and our non-public technical and commercial information.
Each party keeps the other's confidential information in confidence, uses it only to perform these Terms, discloses it only to people who need it and are bound by equivalent obligations, and protects it with at least the care it applies to its own. This does not cover information that is public through no fault of the receiving party, that the receiving party already held, that it develops independently, or that it is required by law to disclose — in which case it tells the other party wherever it is permitted to.
13. Changes to these Terms
We may revise these Terms. We notify you of a revision through the Service and by email to the address on your account, and we ask you to accept the revised Terms. Continued use of the Service requires your acceptance. If you do not accept a revision, you may terminate under clause 8.
14. Governing law and jurisdiction
These Terms, and any dispute arising out of or in connection with them, are governed by the law of the Netherlands, without regard to its conflict-of-law rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply.
The courts of the district covering Enschede, the Netherlands, have exclusive jurisdiction over any such dispute.
15. Contact
Questions about these Terms go to info@allme.fyi. Our registration details are on the Legal Notice.
16. Data Processing Terms
This clause is the data processing agreement between us under Article 28 of the General Data Protection Regulation. It applies where we process personal data on your behalf. It forms part of these Terms — you accept it when you accept them, and no separate signature is required.
Roles. For the platform itself, for your company account and for the profile data of allme.fyi users, we are the controller, and clause 5 describes what happens once data reaches you. For contract flow runs we are your processor: you decide what is asked and why, your customer answers, and we store those answers and the documents generated from them on your behalf.
Subject matter, duration, nature and purpose. The subject matter is the storage and processing of contract flow answers and the documents generated from them, in order to run the flows you design. The processing lasts for as long as your account exists and the run is retained, and it ends when these Terms end — except for a signed document, the signature on it and the flow answers it was generated from, which we go on storing afterwards because they are the record of an agreement with another party, as the last obligation below sets out.
Categories of personal data and of data subjects. The personal data is whatever your flow asks for, which may include names, contact details, addresses, dates of birth, identification details and uploaded files. The data subjects are the people, and the representatives of the companies, who answer your flows.
- process the data only on your documented instructions — the flows you publish and the configuration you set — unless the law requires otherwise, in which case we tell you first unless the law forbids it;
- bind everyone we authorise to process the data to confidentiality;
- apply appropriate technical and organisational security measures, including encryption of flow answers, access control, and separation between customers;
- engage a sub-processor only under a written contract imposing the same obligations, and tell you of an intended change so that you can object;
- assist you, taking into account the nature of the processing, in answering data subject requests and in meeting your own security, breach notification and impact assessment duties;
- notify you without undue delay after becoming aware of a personal data breach affecting the data;
- make available the information you reasonably need to demonstrate compliance with this clause, and allow and contribute to audits carried out by you or an auditor you appoint;
- return the data to you, or delete it, at your choice when these Terms end — except a document that has been signed, the signature on it, and the flow answers the document was generated from. Those are the record of an agreement with another party, who is equally entitled to evidence of it and holds their own copy, so we cannot delete them on one party's instruction alone. We also keep what tax and accounting law requires us to keep. Everything we retain is named in this clause, and you can read your flow answers and download your generated documents through the company-data API for as long as your account exists.
Translation sub-processor. We engage DeepL SE, Cologne, Germany, as a sub-processor to machine-translate the texts you write for people to read — the texts of your contract flows, the labels and hints of your service requests, and the claim hints of your sign-in apps — into the reader's language. Only those texts are sent; the answers and other personal data of the people who use your flows and services are never sent to it.
17. Objectionable content and conduct
You must not upload, submit or transmit through the Service any content that is unlawful, that harasses, threatens or defames another person, that is hateful, that sexually exploits a minor, that infringes another party's rights, or that is designed to intimidate, defraud or abuse. The same applies to your conduct toward the people and companies you deal with through the Service.
Content you upload, submit or transmit is your responsibility, and you warrant that you are entitled to it. Where such content is reported to us, or we otherwise become aware of it, we may remove it and we may suspend or terminate your account under clause 8. Report objectionable content to the contact address in clause 15.
Messaging is measured separately. Where people connected to one of your services report the messages they receive from it, we count the distinct reporters over the preceding 30 days against that service's live connections. Once a service has more than 1,000 live connections, reports from 3% of them suspend that service's broadcasts, 5% suspend its messaging entirely, and 10% suspend messaging across every service your company operates. Such a suspension ends messaging only: your account, your services, the company-data API and the portal are unaffected.