Link Terms

These Link Terms apply to Link, Maxint’s service for connecting financial accounts to the software people choose, including link.maxint.com, the Link connection flow, the Link documentation and the Link API. They add to our Terms of Service, which also apply. If these Link Terms conflict with the Terms of Service, these Link Terms control for Link.

Link is also called “Maxint Link”. References to “Maxint Link” in our Terms of Service, Maxint App Terms, Privacy Policy and other Maxint documents mean Link.

Part A applies to anyone who connects an account through Link. Part B applies to developers and businesses that use Link in their own software. Part C covers product-update emails, and Part D applies to everyone.

1. How these terms fit with our other documents

Terms of Service. Our Terms of Service apply to Link, including the sections on acceptable use, disclaimers, limitation of liability, governing law and disputes, and changes. These Link Terms do not repeat them.
Maxint App Terms. When you connect an account to the Maxint app, the Maxint App Terms also apply. These Link Terms control for how the Connection is made and maintained. The App Terms control for how the Maxint app uses Account Data once it receives it.
Privacy. Our Privacy Policy and the Link Privacy Notice explain how we handle personal information, including Account Data and Credentials.
Business customers. If you have signed a separate agreement with Maxint for Link, such as a developer agreement or order form, that agreement controls where it conflicts with these Link Terms.

2. Definitions

In these Link Terms:

Link means the Link service described above. Link is provided by Maxint Inc. (“Maxint”, “we”, “us” or “our”).
Link Direct means Link’s own Route, which connects to a Financial Institution through the production interfaces its own app and online banking use, rather than by reading web pages.
Third-Party Provider means an independent company that offers its own account-connection service and that Link can offer as a Route where it covers the Financial Institution: Plaid, Stripe Financial Connections, Teller and GoCardless Bank Account Data, and any others we add.
Route means the way a Connection reaches a Financial Institution: Link Direct, a Third-Party Provider or, where available, an open-banking interface or an arrangement agreed with the Financial Institution.
Connection means an authorization you give, through Link, for a Receiving App to receive Account Data from one or more of your accounts at a Financial Institution, using a Route you choose.
Financial Institution means a bank, credit union, card issuer, brokerage or other institution that holds an account you connect.
Receiving App means the app, website or service you connect your accounts to through Link. The Maxint app is a Receiving App. A Developer is the business or person that provides a Receiving App, other than Maxint.
End User means a person who connects an account through Link.
Credentials means the sign-in details for your account at a Financial Institution, such as your username, password, security answers and one-time codes.
Account Data means information Link retrieves from a Financial Institution through a Connection, such as account and routing numbers, balances, transactions, account-holder identity and investment holdings. What is available depends on the Financial Institution and the Route.

Part A. Connecting your accounts

3. What Link is, and is not

Link lets you connect your financial accounts to software you choose, and lets you choose the Route each Connection uses.

Link is not a bank and does not hold your money. Link is not a party to your relationship with your Financial Institution or to your relationship with any Receiving App. Link does not use Connections to initiate payments or move money. Link does not give financial, investment, tax or legal advice, and it does not recommend any Financial Institution, Receiving App or Third-Party Provider.

Link is free for End Users. Developers pay for their use of Link, as described in section 13.

4. Your authorization

When you approve a Connection, you authorize Maxint, through Link, to act on your behalf and as your agent to:

access your accounts at the Financial Institution you select, using the Route you choose;
for Link Direct, use the Credentials you provide to sign in to the Financial Institution the way its own app or online banking does, and to obtain and renew the access or session tokens it issues;
retrieve the Account Data you approve, for the accounts you select; and
send that Account Data to the Receiving App you approve, and keep the Connection working until you end it.

This authority is limited. Link does not act on behalf of your Financial Institution, a Receiving App or a Third-Party Provider when it acts for you under a Connection. Connections are read-only. Link will not use your Credentials or a Connection to move money, make payments, change your account settings, contact details or Credentials, open or close accounts, or accept terms with your Financial Institution on your behalf.

You can withdraw this authorization at any time by ending the Connection, as described in section 9.

5. Your accounts and your Financial Institution’s terms

You must be at least 18 years old to use Link. You may connect only accounts that you own or are authorized to access and share, and you must have the right to give the authorization in section 4. You confirm that the Credentials you enter are yours to use and accurate.

Your relationship with your Financial Institution is governed by your agreements with it. Some of those agreements address sharing Credentials, or using other services to access your accounts. Some may limit this, or treat activity using your Credentials as activity you authorized, which can affect your protections if something goes wrong. Connecting through Link does not change those agreements, and Link does not review them for you or tell you whether they permit a particular Route. You remain responsible for your agreements with your Financial Institution. If you would rather not give your Credentials to Link, choose a Route that lets you sign in on your Financial Institution’s own page, where one is available.

6. Choosing a Route

Before you approve a Connection, Link shows you the Routes available for your Financial Institution and names the one you are about to use. What is available depends on the Financial Institution, the account, your region, the data requested and the Receiving App. A Developer may limit the Routes its Receiving App offers, or preselect one. Either way, Link names the Route before you approve, and you can choose not to connect.

Link Direct. You sign in within Link’s flow, using the same sign-in you use in your Financial Institution’s app. Section 7 explains what happens to your Credentials.
Open banking and arrangements with Financial Institutions. Where a Financial Institution offers an open-banking interface, or has agreed terms with Maxint, you may sign in on the Financial Institution’s own page. Link does not receive your Credentials on this Route.
Third-Party Providers. The Third-Party Provider runs its own sign-in flow and handles your Credentials and Account Data under its own terms and privacy policy, which apply to you when you use it. See section 11.

Changing a Connection to a different Route is a new authorization. You approve it again, and a previous authorization may not carry over. Link does not change the Route of an existing Connection without your approval.

7. Your Credentials

How Link Direct handles Credentials. When you connect through Link Direct, Link uses your Credentials to sign in to your Financial Institution and exchanges them for an access or session token. By default, Link does not retain your Credentials after that exchange.

The exception. Some Financial Institutions offer no usable way to renew access with a token. For those Financial Institutions only, Link Direct must retain your Credentials to keep the Connection working, and uses them only to sign in again for that Connection. Link will:

tell you before you connect that your Credentials will be retained;
ask you to acknowledge this explicitly before you continue; and
let you choose a different Route instead, where one is available.

If you do not acknowledge it, Link will not retain your Credentials, and you can choose another Route or not connect.

Retained Credentials are stored encrypted, used only to keep that Connection working, and deleted when you end the Connection or close your Link or Maxint account. This applies whichever Receiving App you connect to. The Link Security page describes how they are protected.

Other Routes. On open-banking interfaces and arrangements with Financial Institutions, you sign in with your Financial Institution and Link does not receive your Credentials. Third-Party Providers handle Credentials under their own policies.

Your part. Enter your Credentials only in the Link flow or on your Financial Institution’s own page, never in a Receiving App’s own form claiming to be Link. If you change your Credentials at your Financial Institution, a Connection may stop working until you approve it again. If you believe your Credentials or a Connection have been misused, tell your Financial Institution and contact us at security@maxint.com.

You choose which accounts and which types of Account Data to share with each Receiving App. Link retrieves and sends only what you approve.

Receiving Apps. A Receiving App is responsible for how it uses, keeps and protects Account Data after Link sends it, under its own terms and privacy policy. Unless the Receiving App is the Maxint app, it is not part of the Service, and Maxint is not responsible for it. Developers that use Link agree to limits on how they use Account Data (see section 13), but those limits do not replace the Receiving App’s own commitments to you.

How Maxint uses Account Data in Link. We use Account Data and Credentials to provide the Connections you approve, to keep Link secure and working, to prevent fraud and abuse, and to comply with law, as described in our Privacy Policy. We do not sell Account Data or use it for advertising.

Standardizing Account Data. Financial Institutions and Third-Party Providers each use their own data formats. On every Route, including Third-Party Provider Routes, Link receives Account Data and stores it to normalize, categorize and standardize it before sending it to the Receiving App. Link keeps Account Data for no longer than three years, unless a longer period is required by law or needed for security and compliance.

Aggregated and de-identified data. As section 6 of the Terms of Service permits, we may create aggregated or de-identified data from Account Data, for example to improve how Link categorizes and standardizes data. De-identified data does not identify you, and we do not attempt to re-identify it.

9. Seeing and ending your Connections

You can see each of your Connections, including the Receiving App, the accounts, the Route, the Account Data being shared and whether Credentials are retained, and you can end any Connection. To do this, sign in to Link at link.maxint.app. You don’t need a Maxint account. Where a Receiving App offers its own connection settings, you can also end a Connection there.

When you end a Connection:

Link stops using it, stops retrieving Account Data and stops sending Account Data to the Receiving App;
Link deletes retained Credentials for that Connection, as described in section 7; and
Link tells the Receiving App that you have ended the Connection.

Ending a Connection in Link has limits. Whether the access token is also cancelled at your Financial Institution or Third-Party Provider depends on them, and you may need to revoke access there as well, or change your Credentials. Account Data the Receiving App already received is governed by its terms. Ending a Connection does not close your account at the Financial Institution or your account with the Receiving App.

A Connection may also end if the Financial Institution, a Third-Party Provider or the Receiving App ends access, if access expires and you do not approve it again, or as described in sections 11 and 17.

10. Coverage, availability and Account Data

Coverage. Link Direct is being switched on Financial Institution by Financial Institution, generally in the order people request them. A Financial Institution having an app does not mean it is available through Link, and we do not promise that any particular Financial Institution, account type, region, data type or Route will be available, or will stay available.

Regions. Link is offered worldwide. In the United Kingdom and the European Economic Area, bank accounts connect through open banking rather than Link Direct: through GoCardless Bank Account Data today, and through Maxint’s own open-banking access once its registration is complete. Where a country’s open-banking rules require a license or registration for a Route, Maxint offers that Route only once it holds it.

Interruptions. Financial Institutions change their apps and systems. When they do, a Connection may stop working until Link updates its integration, and some Connections may need to be approved again. We work to restore Connections, but we do not promise how quickly.

Account Data. Account Data comes from your Financial Institution, directly or through a Third-Party Provider. Link passes it on as provided and does not verify it. It may be delayed, incomplete or inaccurate, and we are not responsible for errors in it. Check important information with your Financial Institution.

Demo. The demo on link.maxint.com uses demo data only. It does not connect to any Financial Institution, and nothing in it is a live Connection.

11. Financial Institutions and Third-Party Providers

No partnership or endorsement. A Connection, including a Link Direct Connection, does not mean that the Financial Institution has partnered with, approved or endorsed Maxint or Link. Names and logos of Financial Institutions and Third-Party Providers are used to identify them and belong to their owners. Listing a Financial Institution or Third-Party Provider in Link does not imply a partnership with it.

Financial Institutions may change access. A Financial Institution may change, limit, suspend or block access to its systems at any time, including access through Link. We may then suspend or end affected Connections, or offer you another Route. We may also stop offering a Route for a Financial Institution where we believe continuing would be unlawful, would breach our obligations, or would put your accounts or our systems at risk.

Third-Party Providers. Third-Party Providers are independent companies. When you choose one, its terms and privacy policy apply to its service, and it may require you to accept them in its flow. Maxint does not control Third-Party Providers and is not responsible for their services, availability, security or handling of your Credentials or Account Data. Each Third-Party Provider decides which Financial Institutions, regions and data types it supports, and that may change.

12. Acceptable use

In addition to the acceptable use rules in our Terms of Service, you may not:

connect an account you are not authorized to connect, or use another person’s Credentials without their authority;
use Link to get around a Financial Institution’s or Third-Party Provider’s security measures or a block they have placed on your access;
interfere with the Link flow, or misrepresent your identity or the Receiving App you are connecting; or
use Link to collect Account Data for any purpose other than the service you requested from the Receiving App.

Part B. Developer terms

13. Developers

Scope. This Part applies to Developers that use the Link API or otherwise make Link available in a Receiving App. If you have signed an order form or other agreement with Maxint for Link, it controls where it conflicts with this Part. Developers may use test data in the Sandbox and connect real End User accounts; this Part applies in full to real Connections. Developers sign in to Link at link.maxint.app to manage their Receiving Apps and keys.

Your account and keys. Keep your API keys and other access credentials confidential and secure, use them only for your own Receiving Apps, and tell us promptly at security@maxint.com if you believe they have been exposed. You are responsible for activity under your keys. We may rotate or revoke keys to protect End Users or Link.

End User consent and Link’s disclosures. You must:

send End Users through the Link flow to approve each Connection, and not change, hide or interfere with it, including the Route shown, the data requested and any notice that Credentials will be retained;
never ask End Users for their Credentials yourself, or collect, store or log Credentials;
request only the accounts and Account Data reasonably necessary for the product or service the End User asked you for, and describe that use accurately;
make these Link Terms and the Link Privacy Notice available to End Users before they connect, as Link’s flow requires; and
give End Users a clear way to end a Connection in your Receiving App, or direct them to Link to do so.

Permitted use of Account Data. You may use Account Data only to provide the product or service the End User requested from you, and as required by law. You may not sell, rent or license Account Data, or use or disclose it for advertising, for marketing other products, or for any other purpose the End User has not requested. You may not use Account Data to decide anyone’s eligibility for credit, insurance, employment, housing or any similar purpose. When an End User ends a Connection or withdraws consent, or when Link tells you a Connection has ended, you must stop requesting Account Data for it and delete Account Data obtained through it within 30 days, except to the extent the law requires you to keep it. This includes Account Data kept as part of the End User’s records in your service, such as transaction history.

Security. You must protect Account Data with administrative, technical and physical safeguards appropriate to its sensitivity and that meet applicable law. Tell us at security@maxint.com without undue delay, and in any case within 24 hours, after you become aware of unauthorized access to Account Data obtained through Link, or to your keys.

Compliance with law. You are responsible for complying with the laws that apply to your Receiving App and your use of Account Data. These may include federal and state privacy, financial privacy and data security laws, including limits on reusing and redisclosing information received from financial institutions; and, where they apply, the EU General Data Protection Regulation and the UK GDPR. Where Maxint processes personal data on your behalf as your processor or service provider, our Data Processing Addendum, which covers Link, applies.

Suspension. We may suspend your access to Link, or particular Connections, immediately and without prior notice if we reasonably believe that your use breaches these Link Terms, puts End Users, Financial Institutions or Link at risk, is unlawful, or if a Financial Institution or Third-Party Provider requires it. Where reasonable, we will tell you why and give you a chance to fix the problem.

Changes to the API. We may change the Link API. We will give you reasonable notice before a change that is not backward compatible, except where a change is needed for security or to comply with law. You are responsible for keeping your Receiving App compatible.

Third-Party Provider accounts. Link aggregates and standardizes Third-Party Provider Routes; it does not resell them. To offer a Third-Party Provider Route in your Receiving App, you must have your own agreement with that provider. Link connects to the provider using your account and credentials with it, and returns Account Data in Link’s standard format. You are responsible for complying with your agreement with each provider, including any end-user terms, disclosures and branding it requires in the flow. Maxint’s own agreements with Third-Party Providers cover Maxint services only.

Fees.

No fees for End Users. Link is free for End Users. We do not charge End Users to connect, view or end a Connection.

Developer fees. If you are a Developer, you pay the fees for your plan shown on the Link pricing page at link.maxint.com/pricing or in your order form. Fees are based on active Connections and the other usage described there. An active Connection is one that was authorized and from which Link retrieved Account Data during the calendar month. We do not charge for a Connection for any month in which it was disconnected, or needed the End User to sign in again, for the whole month. Free plans and trials are subject to the limits on the pricing page. When you reach a limit on a free plan or trial, new Connections will not be created until you move to a paid plan.

Third-Party Provider fees. If you use a Third-Party Provider Route, you pay that provider directly under your own agreement with it. Our fees do not include, and we do not collect, any Third-Party Provider fees.

Billing. Usage is measured per calendar month in Coordinated Universal Time (UTC) and billed monthly in arrears. Commitments on annual plans are billed annually in advance, and unused commitment does not roll over unless your order form says so. Fees are in US dollars. If you pay by card, you authorize us and our payment processor to charge your card when each invoice is issued. If you pay by invoice, payment is due within 30 days of the invoice date.

Taxes. Fees do not include taxes. You are responsible for any sales, use, value-added, goods and services or similar taxes, other than taxes on our income. Where we are required to collect them, we will add them to your invoice.

Price changes. We will give you at least 30 days’ notice before we increase a fee. The new fee applies from the first billing period that starts after the notice period ends. Prices in an order form for a fixed term do not increase during that term.

Disputes. If you believe an invoice is wrong, tell us at billing@maxint.com within 60 days of the invoice date. We will review your usage records with you in good faith. Undisputed amounts remain due.

Late payment and suspension. If an undisputed amount is more than 15 days overdue, we may suspend the creation of new Connections after giving you at least 10 days’ notice. If it is more than 30 days overdue, we may suspend your API access. Suspension for non-payment never stops End Users from viewing or ending their Connections in Link. Overdue undisputed amounts accrue interest at 1.5% per month, or the highest rate the law allows if that is lower, from the due date until paid.

Refunds. Except where required by law or as these Link Terms state, fees are non-refundable, in line with section 5 of the Terms of Service.

Liability and indemnity. Sections 12 and 13 of the Terms of Service apply to your use of Link. In addition to section 14 of the Terms of Service, you will defend and indemnify Maxint against third-party claims, including claims by End Users, Financial Institutions and regulators, and related losses, damages and reasonable costs, arising from your Receiving App, your use of Account Data, or your breach of this section.

Publicity. We will not name you as a Link customer without your permission.

Part C. Product updates

14. Product-update emails

You can subscribe to Link product updates on link.maxint.com. Subscribing does not create a Link or Maxint account.

Give only your own email address. We use it to send a confirmation email and Link product updates, as described in the Link Privacy Notice. You can unsubscribe at any time by emailing privacy@maxint.com.

Part D. General

15. Changes to Link and these Link Terms

We may add, change or remove Routes, Financial Institutions, data types and features. Section 16 of the Terms of Service applies to changes to these Link Terms. For End Users who do not have a Maxint account, we may also give notice in the Link flow or through the Receiving App. If we change how Link handles Credentials for an existing Connection in a way that reduces your protection, we will tell you first and ask you to approve the Connection again before the change applies to it.

16. Survival

Sections 5, 8, 9 (limits), 10 (Account Data), 11, 13 (Permitted use of Account Data, Security, Compliance with law, Liability and indemnity) and 17, and any other provisions that by their nature should survive, survive termination, in addition to the sections listed in section 11 of the Terms of Service.

17. Termination and its effect

You can stop using Link and end your Connections at any time. Section 11 of the Terms of Service applies to suspension and termination. If your access to Link ends, or we stop offering Link or a Route, the affected Connections end, and section 9 applies to them as if you had ended them yourself. Retained Credentials are deleted as described in section 7.

The 30-day export period in section 11 of the Terms of Service applies to data in your Maxint account. It does not apply to Credentials or tokens, and it does not apply to Account Data that Maxint holds only to operate Connections, which is kept for no longer than three years, unless a longer period is required by law or needed for security and compliance, as described in section 8. Account Data already sent to a Receiving App remains subject to that Receiving App’s terms and, for Developers, to section 13.

18. Contact us

Questions about these Link Terms: legal@maxint.com. Privacy questions and requests: privacy@maxint.com. Security concerns, including suspected misuse of a Connection: security@maxint.com. Our postal address is in section 18 of the Terms of Service.