Terms of Service

01Our agreement with you

These Terms of Service govern access to Loyfin’s website, applications, APIs, issuer tools, checkout interfaces and Markets (the Services), operated by Blockfactory spółka z ograniczoną odpowiedzialnością (Loyfin, we, us). Our registered details appear below. You means the individual using the Services or the organisation on whose behalf that individual is authorised to act. An Issuer is the person or organisation responsible for a loyalty program and its tokens; a Customer is a person acquiring, holding, transferring or redeeming them.

These Terms form part of the agreement when you accept them in an account, integration or transaction flow, or otherwise conclude an agreement incorporating them. Save a copy for your records. Merely receiving tokens does not by itself establish that you accepted these Terms. A separately signed agreement prevails over conflicting provisions for its subject matter. Issuer program terms govern the Issuer’s reward obligations, but cannot remove our obligations to you. Our Privacy Policy explains personal data processing; acceptance of these Terms is not consent to optional data processing.

You must be at least 18, have legal capacity and, when acting for an organisation, authority to bind it. Use is permitted only where lawful. Availability of a website, blockchain or token does not establish eligibility in your country. You must not evade lawful geographic, sanctions or eligibility restrictions. We may request reasonably necessary information to establish authority, eligibility or compliance.

02What Loyfin provides

Access requires an internet connection and an up-to-date browser with JavaScript and necessary storage enabled. Account access may require a functioning email address. Blockchain functions require a compatible wallet, a supported network and sufficient assets for the applicable charges; integrations require compatible HTTPS API clients and secure authentication. You are responsible for your connectivity, devices and software. Published documentation identifies supported interfaces and networks; test networks and preview features may be reset or withdrawn and do not promise production availability.

Loyfin supplies technology through which Issuers can represent eligible loyalty points or reward value as blockchain tokens. Add to wallet involves issuance of tokenized value; Add from wallet involves burning tokens so that the Issuer can restore or credit value in its own system. A successful blockchain operation records a token action. It does not establish that the Issuer has credited an account, delivered goods or performed any other obligation.

Unless we expressly undertake a separate obligation in writing, the Issuer alone owes the rewards, benefits, backing, refunds or offchain value described in its program. Loyfin does not become the Issuer, guarantor, insurer or redemption counterparty by providing software, displaying a program, collecting fees, sharing fees or facilitating a transaction. This allocation does not exclude responsibility for our own Services where imposed by applicable law.

A listing, Verified Brand label, leaderboard position, transaction count or integration is not a guarantee of solvency, regulatory status, reserves, legitimacy of every transaction or future performance. You must assess the Issuer and its program rules. Token ownership does not inherently confer shares, voting rights, dividends, ownership of underlying assets, a deposit, or a claim against Loyfin. These Terms neither confer regulatory authorisation nor determine a token’s legal classification.

03Issuer obligations

Each Issuer is independently responsible for designing, operating and funding its program; establishing and honouring token-holder rights; publishing accurate, accessible program terms before acquisition; and complying with applicable consumer, financial services, crypto-asset, securities, payments, advertising, sanctions, anti-money-laundering, tax and data protection requirements. Obtain all permissions and licences required for your actual activities. Calling an asset a loyalty token does not exempt it from regulation. Do not use the Services for a regulated offering or activity without the necessary authorisation and any separate arrangement required with us.

The Issuer must disclose its identity and contact details, eligibility, conversion basis, expiry, transfer restrictions, redemption conditions, charges, cancellation and refund rights, and any discretion to alter or end the program. It must maintain adequate arrangements to meet its obligations, address customer complaints and lawfully manage program changes or closure. Issuer terms and technical controls must be consistent with those obligations. An onchain restriction does not extinguish a statutory customer remedy.

The Issuer is responsible for the accuracy and authority of issuance and redemption instructions, customer eligibility and wallet association, safeguarding its credentials, and reconciling its offchain ledger with confirmed blockchain outcomes. It must prevent duplicate issuance, duplicate credits, unauthorised minting and spending of value already reserved or converted. A session, webhook, interface status or initial transaction receipt must not be treated as proof of irreversible settlement without the required verification and finality checks. Retries, delayed messages and reorganisations must be handled safely.

The Issuer must have rights to its names, logos, images, metadata and uploaded material, and obtain the notices, permissions and lawful bases required for customer data. Do not put personal, confidential or unlawful material in public token metadata. Keep independent records needed to fulfil program obligations. Changing a program administrator does not necessarily change its original issuer identity or signing authority.

04Wallets, API keys and delegated signatures

The Services support wallet infrastructure provided by third parties, including Privy. Depending on the flow, you may connect a wallet or use a wallet provisioned for your account. Ownership, recovery and delegated signing depend on the wallet configuration and provider. Do not assume that every wallet flow has identical custody or control arrangements. Provider terms apply to the services they supply.

For an externally signed API request, you are responsible for providing the correct issuer and complete, valid signed data. Where API signing is available and you have separately enabled the required delegation, omitting both issuer and signed authorisation instructs Loyfin to use the wallet assigned to the authenticated account, within the configured permission policy and limits. Enabling delegation authorises that signing service; it is not a mandate for investment decisions, discretionary trading or unrestricted wallet administration. It does not remove a Customer’s transaction approval or payment requirements.

A token remains associated with its actual issuer. Using a different signing mode or the same API account does not transfer that identity or make wallets interchangeable. You must select the correct mode and input for each operation. We are not obliged to infer your intended issuer from an incomplete or mistaken request. Technical validation does not guarantee that an instruction is commercially correct or properly authorised within your organisation.

You are responsible for reasonable access controls, secure storage of API keys and recovery material, personnel permissions and prompt reporting of suspected compromise. A person possessing an active API key may exercise the access and delegated signing permissions associated with it. Revoke or rotate compromised credentials and disable delegation promptly. Revocation prevents future authorised use subject to processing and provider availability; it cannot reverse submitted transactions and may not invalidate signatures already issued. We remain responsible for our own security obligations under applicable law.

05Transactions, charges and finality

Before authorising an action, review the network, wallet addresses, token, amount, expiry, permissions, recipient and charges. A similar name or symbol does not identify the same asset. Transactions may require network fees, platform fees and third-party charges, including funding, conversion or bridge charges. The applicable quote, interface disclosure or onchain parameters determine the transaction charges; estimates may change before execution. Do not proceed if you cannot verify the applicable terms and cost.

Network or provider charges may be incurred for failed or delayed attempts. Charges for a completed service are not ordinarily reversible merely because you change your mind, but statutory refunds, withdrawal rights and remedies for defective service remain available. We cannot refund charges retained by an independent provider on its behalf; this does not limit any separate reimbursement obligation we owe you by law. Issuer fee sharing does not give customers an interest in Loyfin revenue.

Blockchain actions are generally irreversible. Pending transactions may fail, be reordered, replaced, censored or reorganised. Displayed balances and activity may lag or be incorrect. We cannot promise to cancel, recover, reverse, reissue or restore a transaction, token, private key or lost asset. Maintain records and verify final outcomes. You are responsible for your own tax reporting; we will meet reporting and withholding obligations applicable to us.

06Markets and loss of escrowed assets

Markets provide interfaces for users to create or accept token offers using smart contracts. Unless expressly stated for a specific transaction, Loyfin does not act as the buyer or seller, promise an execution price, supply liquidity, guarantee a counterparty or undertake to purchase tokens. Offers may fill partly, remain unfilled or become impossible to execute. Market prices may differ substantially from an Issuer’s stated reward value. Trading a token does not improve or expand the Issuer’s redemption obligations.

Some market contracts restrict both trading and cancellation after a program expires. Under those contracts, remaining escrowed tokens or USDC can become permanently locked after expiry, with no recovery function. Transfer pauses or other program controls can also prevent a return of escrowed tokens. Cancel open offers sufficiently before expiry where cancellation remains possible. Do not escrow assets whose loss you cannot bear. An interface, administrator or support request cannot override a contract that lacks a withdrawal path.

You must inspect the rules and restrictions of the specific contract and program before creating or accepting an offer. Expiry, smart-contract defects, manipulation, front-running, price movements and loss of liquidity can result in total loss. A displayed valuation or past trade is not a guarantee that you can sell, cancel or redeem.

07Technology and asset risks

Use of blockchain services involves risks including coding errors, economic design flaws, exploits, malicious approvals, phishing, compromised credentials, dependency failures, cyberattacks, validator or sequencer failures, congestion, forks, reorganisations, chain halts, bridge failures and permanent loss of access. Audits, testing and security measures cannot eliminate these risks. A defect may exist in software or contracts supplied by us as well as by third parties.

Tokens can lose all utility and market value. Issuers may change permitted program features, pause transfers, stop accepting tokens, become insolvent or fail to perform. Stablecoins and other settlement assets can depeg, be frozen or blocked by their issuers, or become unredeemable. Networks and independent providers may suspend or discontinue services, restrict regions, reject transactions or suffer insolvency. Public blockchain data may remain available after a service closes.

Loyfin does not promise continuous access, compatibility with every wallet or chain, a recovery mechanism, insurance coverage, reserve backing, future listings or any particular value or return. Content and interfaces are not personalised investment, legal or tax advice. Risk disclosure is not a waiver of claims that cannot lawfully be waived, and does not excuse our mandatory duties.

08Permitted use and content

Use the Services lawfully and within published technical limits. Do not impersonate an Issuer, misrepresent reward rights, manipulate activity or rankings, wash trade to obtain incentives, infringe intellectual property, launder proceeds, exploit other users, introduce malicious code, bypass access controls or disrupt the Services. Report suspected vulnerabilities privately to our support address; reporting does not authorise exploitation, access to other people’s data or asset transfers, and creates no entitlement to a bounty.

We retain rights in our software, interfaces, branding and documentation except where a separate open-source licence applies. Subject to these Terms, you may use the Services and integration materials for their intended purpose. You retain ownership of your content and grant us a non-exclusive, worldwide, royalty-free licence to host, reproduce, process and display it as necessary to provide, secure and support the Services. Public program content may be displayed in program directories and transaction views. This licence does not transfer ownership of your brand or authorise unrelated endorsements.

We may remove or restrict unlawful, infringing or misleading content, or content that violates these Terms. Where required, we will provide reasons and a means to contest the restriction. Contact support with the affected content or account, the reason for your complaint and supporting information. Removal from an interface does not erase a public blockchain record.

09Suspension, changes and discontinuation

We may restrict access, disable API signing, suspend an integration or delist a program to address a credible security threat, suspected unlawful activity, material breach, non-payment, provider restriction, legal requirement or material technical failure. Measures will be proportionate to the circumstances. Urgent restrictions may take effect without advance notice where notice would undermine security, be unlawful or be impracticable. We will give an explanation and an opportunity to contact us where reasonably possible and legally permitted.

We may change or discontinue features, supported networks, APIs or the Services for legal, security, technical or commercial reasons. For a planned material discontinuation of an ongoing service, we will ordinarily provide at least 30 days’ notice and reasonable information on available export or exit options. Urgent circumstances may require a shorter period, subject to mandatory notice and remedy requirements. We do not guarantee that an alternative interface, migration or asset recovery will be available.

You may stop using the Services at any time and request account closure through support. Closure does not revoke every blockchain approval, cancel open offers, delete public records, extinguish Issuer obligations or undo transactions. Address these matters before closure where possible. Accrued payment obligations and provisions concerning ownership, liability, indemnity and disputes survive to the extent relevant. Termination does not remove mandatory refunds, access rights or remedies.

Neither party is responsible for delay caused by circumstances beyond its reasonable control to the extent those circumstances actually prevent performance and reasonable mitigation cannot avoid the delay. This provision does not excuse pre-existing breaches, obligations unaffected by the event, intentional or grossly negligent conduct, or duties and remedies that cannot legally be excluded.

10Business warranties and limits of liability

This section and the business indemnity below apply only to business users to the extent they do not benefit from mandatory consumer-equivalent protection for the relevant agreement. Subject to the express exceptions below and any separately signed service commitment, the Services are supplied on an as-available basis without contractual assurance of uninterrupted availability, error-free operation, fitness for a particular commercial purpose, asset recovery, token value or Issuer performance. To the extent permitted by law, implied warranties are excluded.

To the fullest extent permitted by law, Loyfin is not liable to a business user for lost profit, revenue, anticipated savings, opportunity, goodwill or data; business interruption; substitute services; indirect or consequential damage; or loss, theft, freezing, depreciation or unavailability of tokens, rewards or settlement assets, whether such asset loss is characterised as direct or indirect. These exclusions apply to claims arising from bugs, exploits, unauthorised access, failed or erroneous transactions, Issuer default, outages, chain halts, third-party failures and lawful suspension or discontinuation, irrespective of whether the relevant risk was foreseeable.

For liabilities not otherwise excluded, our aggregate liability to a business user arising out of or relating to the Services, under contract, tort including ordinary negligence, or another legal basis, is limited to the greater of EUR 100 and the platform fees actually paid by that user and retained by Loyfin during the 12 months immediately preceding the first event giving rise to the claim. Asset principal, transaction value, network fees, amounts retained by independent providers and amounts passed to Issuers are not platform fees for this purpose. Related events constitute one event; presenting multiple claims does not multiply this cap.

No exclusion or cap in these Terms applies to fraud, intentional misconduct, gross negligence, death or personal injury for which we are legally responsible, or any liability, compensation right or remedy that cannot lawfully be excluded or limited, including applicable data protection rights. These exceptions prevail over every contrary statement in these Terms. We do not exclude an obligation to return money or property where mandatory law requires its return.

11Business indemnity

A business Issuer will indemnify Loyfin against third-party claims, damages finally awarded or agreed in an approved settlement, and reasonable defence costs, to the extent caused by that Issuer’s breach of these Terms or law, infringement by its content, unauthorised instructions attributable to its failure to protect credentials, or failure to honour its program or token obligations. This includes claims concerning its reward promises, offchain reconciliation, customer disclosures and taxes for which it is responsible.

This indemnity does not apply to the extent a claim results from our breach, negligence or other conduct for which we are responsible. We will notify the Issuer promptly, provide reasonable cooperation at its expense and permit it to conduct the defence using competent counsel, subject to reasonable protection of our interests. No settlement may admit fault for us, impose a non-monetary obligation or omit an unconditional release without our prior consent, which will not be unreasonably withheld. We will take reasonable steps to mitigate recoverable loss.

12Consumer rights and complaints

If you are a consumer, or an individual entrepreneur entitled to consumer-equivalent protection under applicable law, the business liability exclusions, cap and indemnity do not remove that protection. Your statutory rights concerning service conformity, security, remedies, refunds, unfair terms and damages remain available. We are responsible for our Services in accordance with applicable law. An Issuer’s responsibility for its program does not prevent you from bringing a valid claim against us for our own conduct.

Where a statutory distance-contract withdrawal right applies to your agreement with Loyfin, you may withdraw within 14 days of concluding it without giving a reason. Send an unambiguous notice to support@loyfin.com or our registered address identifying yourself, the agreement and its date; you may use the wording: ‘I hereby withdraw from my agreement for [service], concluded on [date]. My name and contact details are [details].’ A statutory model form may also be used, but is not required. Send the notice before the deadline. Applicable law may extend the period if required information was not supplied.

Starting performance before that period ends requires any express request and acknowledgements required by law. A statutory exception or loss of the right applies only when its legal conditions are met; accepting these Terms, creating a wallet or submitting a blockchain transaction alone is not a blanket waiver. Any proportionate charge for requested early performance and any refund are subject to law. Where withdrawal requires a refund from us, we will make it within the statutory period, ordinarily 14 days after receiving the notice, using the original payment method unless lawfully agreed otherwise. Separate Issuer and third-party agreements may have different rights.

For service complaints, legal notices or privacy requests, contact support@loyfin.com or our registered address. Describe the issue and desired resolution; never send private keys, seed phrases or full API keys. We will respond to consumer complaints within 14 days where Polish law requires that deadline and otherwise without undue delay. Privacy requests follow the timing in our Privacy Policy. You may seek assistance from your local consumer adviser or competent out-of-court dispute body; information is available at uokik.gov.pl. We will state in our response whether we agree or are required to participate in a particular procedure. You retain the right to go to court.

13Governing law and changes to these Terms

Polish law governs these Terms. For business users without mandatory consumer-equivalent protection, disputes are subject to the courts having jurisdiction over our registered seat in Poznań. Consumers retain the protection of mandatory laws of their habitual residence and the right to bring proceedings in any court available under applicable consumer jurisdiction rules. There is no mandatory arbitration or contractual waiver of collective remedies in these Terms.

We may revise these Terms to reflect changes in law, security requirements, technology, functionality or operating arrangements. Changes apply prospectively. For a material change to an ongoing agreement, we will provide notice by email or another legally sufficient durable medium at least 30 days before it takes effect, explaining the reason, effective date and your right to end the affected service. A shorter period may apply where required by law or an urgent security need, without removing mandatory protections. We will obtain renewed agreement where required; publication alone does not retroactively alter accrued rights.

If a provision is invalid, the remaining provisions continue where legally possible; an unfair consumer provision is not rewritten merely to make it enforceable against the consumer. Failure to enforce a term is not a permanent waiver. You may not assign a business agreement without our consent except where law permits. Any transfer by us must preserve accrued obligations and applicable consumer rights. No provision creates a partnership, agency or fiduciary relationship beyond obligations actually imposed by law or expressly agreed.

Announcements about future tokens, buybacks, incentives, grants or distributions are not a contractual promise under these Terms. Any such program requires its own published eligibility and legal terms. No use of Loyfin, fee payment, ranking or activity by itself creates a right to a future allocation.