Terms of Service

Mast Finance Sàrl — Effective date: 13 July 2026 — Version 1.1

1. Scope and Acceptance

These Terms of Service ("Terms") govern access to and use of the Mast Finance cloud-based accounting and treasury software platform and related services (the "Service"), provided by Mast Finance Sàrl, a Swiss limited liability company registered under CHE-136.079.732, with registered address at Rue Centrale 15, 1003 Lausanne, Switzerland ("Mast Finance", "we", "us").

The Service is intended exclusively for business customers (B2B). By accessing or using the Service, you confirm that you are acting on behalf of a legal entity and have authority to bind that entity to these Terms.

These Terms incorporate by reference:

• Privacy Policy
• Data Processing Agreement (DPA)
• Acceptable Use Policy (AUP)
• Cookie Policy
• Service Level Agreement (SLA) (docs/legal/sla.md)
• Data Retention & Account Deletion Policy (docs/legal/data-retention-policy.md)
• Refund and Cancellation Policy (docs/legal/refund-cancellation-policy.md)

2. Order of Precedence

In the event of conflict between documents, the following order of precedence applies:

1. Any signed Order Form based on the Order Form template (docs/legal/order-form-template.md), together with any engagement letter executed under §6.
2. Data Processing Agreement.
3. These Terms of Service.
4. Referenced policies (Service Level Agreement, Privacy Policy, AUP, Cookie Policy, Data Retention Policy, Refund and Cancellation Policy).

Where no Order Form has been signed, precedence begins at the Data Processing Agreement and these Terms.

3. Description of the Service

The Service provides cloud-based tools including accounting support, invoicing, supplier and employee expense management, financial reporting, cash and treasury analytics, and related functionalities. Specific features depend on the subscription plan selected.

Mast Finance may add, modify, or discontinue features at any time, and will endeavour to provide reasonable advance notice of material changes.

Important: The Service does not submit filings, declarations, or returns to any regulatory or tax authority unless explicitly agreed in a separate written agreement.

4. No Professional Advice

The Service does not provide legal, tax, accounting, financial, HR, or any other form of regulated professional advice. All outputs, reports, simulations, calculations, narratives, or recommendations generated by the Service:

• are informational only and do not constitute professional advice;
• require independent professional and human review before reliance;
• must not be used as a substitute for qualified legal, tax, or financial advice.

You remain solely responsible for compliance with all applicable laws, regulations, and filing obligations.

5. Accounts and Security

You are responsible for:

• all activities conducted under your account(s);
• maintaining the confidentiality and security of credentials;
• assigning appropriate access rights to authorized users only;
• promptly notifying Mast Finance at contact@mastfinance.io of any unauthorized access or misuse.

Mast Finance is not liable for losses arising from your failure to maintain adequate account security.

6. Customer Data and Responsibility

6.1 Ownership and Licence

You retain all rights to data that you upload, input, or generate through the Service ("Customer Data"). You grant Mast Finance a limited, non-exclusive licence to process Customer Data solely as necessary to provide the Service and as described in the Data Processing Agreement.

You represent and warrant that:

• you hold all necessary rights, consents, and lawful bases to provide Customer Data;
• your use of the Service complies with all applicable laws;
• Customer Data does not infringe the rights of any third party.

You are solely responsible for validating all outputs, statutory record-keeping, and ensuring the accuracy of Customer Data. Under the currently in-force version of these Terms, data rights and control over each tenant vest in the account holder (the legal entity that created the account), acting through its account owner.

6.2 Support and Operational Access

To provide support, onboarding, data import, and setup services, authorised Mast Finance staff may access your tenant and Customer Data. This access is limited to what is necessary for the requested service or for maintaining the Service, and is subject to the following safeguards:

• Staff access runs through controlled internal mechanisms (a scoped staff session, and, for changes that write data, a proposal-and-approval flow or a logged raw-write session used only as a last resort).
• Staff are bound by confidentiality obligations no less protective than §11 of these Terms.
• Access and any data changes are recorded in audit logs.
• Where staff use AI assistance to help deliver support, onboarding, or setup, that AI processing runs on the AWS Bedrock managed service in Switzerland and the EU, on the same basis described in §7. It does not create any additional data flow beyond the Subprocessors listed in our Subprocessors page.

This clause is the contractual basis on which Mast Finance staff may access a tenant to deliver these services. It does not authorise access for any purpose other than providing, supporting, or maintaining the Service, or complying with a legal obligation.

6.3 Fiduciary Mandates and Delegated Access — DRAFT clause §6.3 (pending counsel ratification)

⚠️ DRAFT — not yet in force. The mandate mechanics below are drafted to support Mast's fiduciary practice model (a fiduciary or accountant acting for its own clients through Mast). They are not part of the currently binding Terms and must be ratified by legal counsel before they take effect. Until ratified, §6.1 governs: data rights and control vest in the account holder.

Once ratified, this clause is intended to describe how a fiduciary practice may be granted a mandate to access and act within a client's tenant, the authority and limits of that mandate, how consent is evidenced (membership in the client tenant), and how mandates are established, varied, and revoked. The detailed terms of each mandate, including scope, responsibilities, and liability allocation between the practice, the client, and Mast Finance, will be set out in an engagement letter based on the Engagement Letter template (docs/legal/engagement-letter-template.md) rather than in these Terms.

7. Automated and AI-Based Features

The Service may include automated, statistical, or AI-based features. You acknowledge that:

• AI-generated outputs are probabilistic and may be incorrect, incomplete, biased, or outdated;
• outputs are provided "as is" for informational purposes only;
• you must not use AI outputs as the sole basis for decisions with legal, tax, or financial consequences;
• you are responsible for all inputs and confirm you have the legal right to use such data;
• Mast Finance does not guarantee uniqueness of AI-generated outputs.

Mast AI processes relevant data from your account using AI infrastructure operated through the AWS Bedrock managed service. Customer Data is stored in Switzerland. AI inference runs primarily in Switzerland (AWS Bedrock, Zurich region, eu-central-2) and, for reranking and burst capacity, in EU regions under the Switzerland–EU adequacy decision. The underlying models (provided by Anthropic and Cohere) are accessed as part of the AWS Bedrock managed service; AWS does not use Bedrock inputs or outputs to train its models. By using the Service, you acknowledge that data relevant to your queries (including company names, amounts, and transaction summaries) may be processed by this AI infrastructure as described in our Privacy Policy and Subprocessors list.

8. Acceptable Use

Your use of the Service is subject to the Acceptable Use Policy (AUP). Mast Finance may suspend or restrict access to prevent harm, investigate misuse, or comply with legal obligations.

9. Fees, Billing, and Renewal

Subscriptions are annual. Billing may be monthly or annual per your Order Form. Subscriptions renew automatically unless terminated with at least 30 days' notice before the renewal date.

All fees are exclusive of applicable taxes. Mast Finance reserves the right to adjust fees upon renewal with at least 30 days' advance notice.

Cancellation and any refund eligibility are governed by the Refund and Cancellation Policy (docs/legal/refund-cancellation-policy.md).

Free Trials and Free Tiers

Mast Finance may offer free trials, beta access, or free-tier plans at its discretion. During any free or trial period:

• the Service is provided "as is" without warranties or service level commitments;
• Mast Finance may limit features, usage, storage, or support;
• Mast Finance may terminate or modify free access at any time without liability;
• all other provisions of these Terms apply, including data protection, acceptable use, and limitation of liability.

Upon expiry of a free trial, access to paid features will cease unless you subscribe to a paid plan. Customer Data then follows the same lifecycle described in §13 and in the Data Retention & Account Deletion Policy (docs/legal/data-retention-policy.md): it stays available for export during a grace period, personal data is anonymised at Day 30, and financial data is purged at Day 90.

10. License Compliance, Verification, and Misuse

10.1 Accuracy Obligation

You must provide accurate information relevant to pricing metrics, including number of users, legal entities, transaction volumes, and company size.

10.2 Verification

Mast Finance may reasonably verify compliance with these Terms.

10.3 True-Up and Back-Billing

If underpayment or misuse is identified, Mast Finance may invoice retroactive fee differences, verification costs, and interest as permitted by Swiss law.

10.4 Material Breach

Intentional misrepresentation or circumvention of pricing metrics constitutes a material breach. Mast Finance may immediately suspend access, terminate the agreement, and pursue all available legal remedies.

11. Confidentiality

Each party agrees to protect the other's confidential information with reasonable care and to use it solely for performing or receiving the Service under these Terms.

12. Availability and Maintenance

Availability targets, scheduled-maintenance handling, and any service credits are set out in the Service Level Agreement (SLA) (docs/legal/sla.md), which forms part of these Terms. Where no paid SLA commitment applies (for example, during free trials, beta access, or free-tier plans), the Service is provided on an "as available" basis. Mast Finance will endeavour to minimise disruption and provide advance notice of scheduled maintenance where practicable.

13. Term and Termination

Either party may terminate for material breach not remedied within 30 days of written notice. Upon termination or account deletion, Customer Data follows the lifecycle set out in the Data Retention & Account Deletion Policy (docs/legal/data-retention-policy.md):

• your access to the Service will cease;
• Day 0: you can export a complete copy of your Customer Data before deletion is confirmed (or expressly waive the export). Export also remains available at any time before deletion via Settings > Data Export.
• Grace period (Day 0 to Day 30): your data remains fully intact and the account can be recovered.
• Day 30: individual personal data is anonymised and the tenant is archived; recovery is no longer possible.
• Day 90: all tenant-scoped financial data is permanently purged. Only a minimal tenant record (company name and subscription metadata), anonymised audit logs, and Mast's own Stripe billing records are retained, as required for Mast's 10-year bookkeeping obligation under CO Art. 958f.

You remain responsible for retaining your own accounting records for the statutory period under Swiss law.

14. Warranties and Disclaimers

Except as expressly stated, the Service is provided "as is" without warranties of any kind, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement.

15. Limitation of Liability

To the maximum extent permitted by applicable law:

• Mast Finance shall not be liable for indirect, incidental, consequential, special, or punitive damages.
• Aggregate liability shall not exceed the total fees paid in the 12 months preceding the claim (minimum CHF 500).

Nothing excludes liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be excluded under Swiss law.

16. Indemnification

You agree to indemnify Mast Finance from third-party claims arising from your Customer Data, misuse of the Service, or breach of these Terms.

17. Force Majeure

Neither party shall be liable for failure or delay caused by circumstances beyond reasonable control, including acts of God, war, pandemics, or failures of third-party infrastructure.

18. Assignment

You may not assign your rights without Mast Finance's prior written consent, except in connection with a merger or acquisition. Mast Finance may assign these Terms upon written notice.

19. Notices

Notices shall be given in writing by email. Notices to Mast Finance: contact@mastfinance.io. Notices to you: the email address associated with your account.

20. Changes to These Terms

Mast Finance may update these Terms at any time. Continued use after any update constitutes acceptance. The current version is always available at /terms.

21. Governing Law and Jurisdiction

These Terms are governed by Swiss law. The parties submit to the exclusive jurisdiction of the courts of Lausanne, Switzerland. The CISG is excluded.

22. Severability

If any provision is found invalid, it shall be modified to the minimum extent necessary or severed. The remaining provisions continue in full force.

23. Waiver

No failure or delay in exercising any right constitutes a waiver. No waiver shall be effective unless in writing.

Mast Finance Sàrl — Rue Centrale 15, 1003 Lausanne, Switzerland — contact@mastfinance.io

Revision history

• v1.1 (2026-07-13): Reworded §7 AI residency to the accurate AWS Bedrock Switzerland/EU framing (removed Switzerland-exclusive wording); added §6.2 Support and operational access clause and a DRAFT §6.3 fiduciary-mandate clause (not in force); aligned the deletion timeline in §9 and §13 to the real Day-0 export / Day-30 anonymisation / Day-90 purge lifecycle; pointed §2 order of precedence and §1 at the Order Form template, SLA, Data Retention Policy, and Refund and Cancellation Policy; referenced the SLA in §12 and the Refund and Cancellation Policy in §9.
• v1.0 (2026-02-24): initial.