Terms of Service

Last updated: October 8, 2026

Proposed service terms — pending approval by Marketsync Global Ltd and qualified legal counsel. This draft does not activate a subscription or replace an executed agreement. Paid service starts only after both parties accept a written order form and applicable data-processing terms.

These Terms cover the KYC.bd platform, APIs, flow builder, hosted applicant pages, document submission and human-review services (the “Services”) operated by Marketsync Global Ltd(“KYC.bd”, “we”, “us”). “Customer” means the business purchasing the Services; an “Applicant” is the individual whose identity evidence is submitted for review.

1. The Service

Agreement and order of precedence

A signed order form must identify the customer, scope, price in BDT, included monthly verification volume, overage rate, billing period, taxes, start date and any service levels. If documents conflict, the signed order form controls commercial matters, the executed data-processing agreement controls personal-data matters, and these Terms apply otherwise. Website estimates and competitor comparisons are not binding offers.

Eligibility and authorized users

Production use is for lawful business purposes by an entity with authority to enter the agreement. The person accepting an order must be authorized to bind that entity. Customers are responsible for authorized staff, reviewers, account permissions, API keys and activity under their organization. Do not share credentials; promptly report suspected compromise. Applicants use verification links for their own submissions, not as customer account holders.

Service scope and verification limitations

Live sessions are first assessed by automated AI photo checking: a general-purpose vision model reads the submitted document, extracts visible fields (such as name, date of birth and document number), looks for signs of tampering or digital fabrication and, where a selfie is required, judges liveness and compares the selfie with the document photo. Clear results may be decided automatically; borderline, inconclusive or provider-error results go to human review. This AI checking is not certified biometric verification. Applicant images are sent to the AI processing service only to perform the verification. A decision reflects the evidence submitted and is not a government NID registry match, a guarantee of identity, or a certification of regulatory compliance. Sanctions/PEP checks are not included unless explicitly scoped under your order form. The Customer's privacy notice and applicant consent must disclose automated AI checking and human review. A sandbox result is synthetic or format-only and must never be used for a real onboarding decision.

The Customer remains responsible for final onboarding, risk acceptance, statutory due diligence, regulator reporting and any adverse action. A flow setting alone does not establish that a check is implemented; the agreed service scope determines which checks are performed.

Applicant links and customer responsibilities

Session links contain access credentials and must be sent only to the intended applicant. Anyone receiving a valid link may be able to use it until expiry or revocation. Customers must protect copied links, configure flow access appropriately, and review submissions for accuracy. Enabling an open flow link permits third parties to start sessions; rate limits and anti-abuse controls reduce but do not eliminate abuse or potential billable usage.

Acceptable use

No surveillance, harassment, political profiling, identity-data resale, unauthorized access, unlawful discrimination, sanctions evasion, malware uploads, rate-limit bypass or testing against third parties without permission. Security testing of KYC.bd requires prior written authorization. The Acceptable Use Policy also applies, subject to the executed agreement.

Availability, support and changes

No numeric uptime, turnaround or support-response guarantee applies unless expressly agreed in a signed SLA. Human review may require additional evidence and does not guarantee an instant decision. Maintenance, provider outages and fraud controls can interrupt service. We will give reasonable notice of material planned changes; emergency security changes may be immediate. A written SLA, if executed, defines credits and remedies.

2. Pricing and Billing

Billable events, allowances and overages

The proposed billing unit is one distinct live verification session that reaches a final approve or reject decision, whether made by automated AI checking or a human reviewer; a session decided by both counts once. Rejected sessions count because checking work was performed. A pending case is not billed until decided; duplicate delivery, status polling, document uploads and a retry on the same session do not create another billable verification. Sandbox, failed authentication, expired and abandoned sessions are excluded. A newly created session is a separate unit, including a resubmission created as a new session.

Monthly allowances reset each service month without rollover, even on quarterly or annual commitments. Excess volume is charged at the single plan overage rate in the order form, not through overlapping graduated bands. Period discounts apply to committed plan fees only, not overages. Extra checks and integration work require a separately accepted quote. These billing rules require contractual acceptance and are not an automated billing guarantee.

Plans and rates

The proposed standard plans and billing periods, all amounts in BDT excluding VAT, are:

Billing periods are monthly (1 month), quarterly (3 months) with a 5% discount on the committed plan fee, annual (12 months) with a 10% discount on the committed plan fee. Enterprise volume and review capacity are quoted separately. These figures are benchmark-informed proposals: final prices are set only by an accepted order form, and website estimates are not binding offers. See proposed pricing and billing periods.

Invoicing, payment and taxes

Proposed plan fees are invoiced in advance for the selected month, quarter or year; overages are itemized monthly in arrears. Invoices are due within 14 calendar days unless the order form states otherwise. Prices exclude applicable VAT; the applicable tax rate and any legally required withholding treatment must be stated on the invoice. Provide a withholding certificate where required. No unquoted setup fee or automatic card charge is authorized by this page.

Report a disputed charge with session references within 30 days of the invoice; undisputed amounts remain payable. We will investigate duplicate or erroneous charges and issue an appropriate correction. Suspension for nonpayment requires written notice and a 14-day opportunity to cure, except for immediate security or legal risks.

Commitment, renewal and cancellation

The order form selects a one-, three- or twelve-month commitment. The proposed quarterly and annual discounts require payment for that period in advance. There is no automatic renewal unless separately agreed in writing. Either party may decline a new term; give written cancellation notice at least 14 days before an agreed renewal date. Cancellation normally takes effect at the end of the paid period, with no partial-period refund for convenience cancellation, except where mandatory law requires otherwise.

If we terminate without customer breach, or fail to cure a material service breach within 30 days after written notice, unused prepaid plan fees will be refunded proportionately. Completed work and valid overages remain payable. New prices apply only to a newly accepted order or renewal, not retroactively to an existing commitment.

3. Data and Security

Confidentiality and security

Each party must protect the other’s confidential information with reasonable care, restrict access to personnel who need it, and use it only to perform the agreement. Exceptions cover information already lawfully known, public without breach, independently developed or lawfully received from another source. Legally compelled disclosures must be limited and, where permitted, notified. Security and incident-notification commitments belong in the executed agreement; this document does not claim certification or an unverified audit status.

Retention, export and deletion

The executed data-processing agreement must set retention periods, storage locations, sub-processors, lawful holds and deletion timelines before production use. Do not infer a Bangladesh residency guarantee from the brand or domain. On termination we will support authorized export and deletion as agreed, subject to legal preservation requirements and applicable backup-retention schedules. There is no promise of immediate erasure of every backup.

Intellectual property

Customers retain rights to their submitted data. During the agreed term we grant a limited, non-exclusive right to use the Services for the Customer’s lawful internal business purposes. We retain rights to our software, documentation and branding. Neither party may use the other’s name or logo as a public endorsement without written permission.

4. Privacy

Consent, lawful basis and applicant data

Before processing, the Customer must provide an accurate privacy notice, establish a lawful basis, obtain the active identity-verification consent required by the platform, and retain evidence of that consent. Do not submit data you lack authority to process. Consent withdrawal and erasure requests remain subject to applicable lawful retention obligations.

Controller and processor

The Customer acts as controller for applicant data; our processing obligations must be set out in an executed Data Processing Agreement. For our own handling of visitor and account data, see the Privacy Policy, and the Bangladesh DPA 2023 page for statutory alignment.

5. Governing Law and Remedies

Warranties, liability, suspension and termination

Each party warrants that it has authority to contract. Subject to mandatory law and express contractual warranties, the Services are provided on an “as available” basis without a guarantee that every fraudulent document or identity will be detected. Neither party is liable for indirect or consequential losses to the extent lawfully excludable.

The proposed aggregate liability cap is the fees paid or payable under the relevant order during the preceding twelve months. The cap does not exclude liability that cannot lawfully be limited, fraud or willful misconduct; confidentiality and personal-data claims require specifically negotiated treatment in the executed agreement. These allocations require counsel review and do not override statutory rights.

We may restrict processing immediately to address credible security threats, illegal use, compromised credentials or binding legal orders, and notify the Customer where legally permitted. Either party may terminate for a material breach not cured within 30 days of written notice. On termination, access may cease; accrued payment, confidentiality, intellectual-property and lawful data-handling obligations survive.

Governing law and disputes

The proposed governing law is that of Bangladesh, with disputes in the competent courts of Dhaka, subject to mandatory applicable law and any different executed agreement. Parties should first attempt good-faith resolution for 30 days after written notice; this does not prevent urgent protective relief or mandatory statutory remedies.

Notices and amendments

Send contractual notices, billing disputes and legal questions to mail@marketsyncglobal.com. Customer notices are sent to the designated contact in the order form. Material changes require notice and acceptance under the agreement; posting a new page alone does not amend an existing signed commitment.

Marketsync Global Ltd · 319, D.I.T Road, East Rampura, Dhaka-1219, Bangladesh

View proposed pricing and billing periods.

Questions about this document? Contact mail@marketsyncglobal.com. These proposed terms require company approval and qualified counsel review before contractual use.