Connected Services Notice

1. Common rules

• Connections are initiated by you and used only to read data into your space.
• Credentials (the Monobank access identifier, exchange API keys and secrets) are encrypted at rest with AES-256-GCM using a key held only by the server, and are sent only to the service they belong to.
• Imported records belong to your space like any other record: members with access to the linked account see them; they sync to your devices; they are deleted with the account or the space.
• The connected service is the source of truth for a linked account: its balance follows the service and is updated on every sync, and you cannot add manual transactions to an account linked to a bank.
• Third-party services may change or interrupt their APIs; imported data may be delayed, incomplete, or differ from what the service shows you. The service's own terms and privacy policy apply to your relationship with it.
• The Service never has access to your money or crypto assets and cannot initiate any transaction.

2. Monobank

How the connection works. Degroshi is a provider registered with Monobank and verified by it. You never create, copy or paste any token. To connect, Degroshi asks Monobank for an access request; you open it (on the web by scanning a QR code with your phone, or with "Open in monobank" on the phone itself; in the iPhone app through a link that opens the Monobank app) and confirm the request in the Monobank app. The request is valid for 24 hours. The Monobank app shows the name of the company in whose name Degroshi's provider registration is held (at the time of writing, OneStake OÜ, Estonia); our connect screen shows the same name before you open the request. Monobank then gives Degroshi read-only access to your client information and statements; every request we make is signed with Degroshi's provider key.

What we read. Your client information (your name, the permissions you granted, and the list of your cards, jars and private-entrepreneur (ФОП) accounts), the accounts you choose to link, their balances (shown as your own funds, that is the balance minus any credit limit) and their statements, for a history period you choose (up to 12 months back). Each imported transaction keeps the bank's details: amount and currency, the original amount for foreign operations, merchant description, merchant category code, commission, cashback, and, where Monobank provides them, the counterparty's name, IBAN and tax code, the payment comment and the receipt number. Monobank notifies our API of new transactions at a secret address; we also re-read your statements regularly (every 6 hours, or every hour when notifications are not available), and the statement is what counts.

What we do not do. We cannot make payments or transfers, open or close cards, or change anything in your Monobank account. The access Monobank grants to providers is read-only.

How to revoke. Withdraw Degroshi's access in the Monobank app at any time; the connection then shows "reconnect required" and stops syncing. Disconnecting in the connection settings (on the web or in the apps) deletes the stored access identifier and stops syncing, but does not withdraw the access at Monobank (Monobank offers providers no way to do that): withdraw it in the Monobank app as well. Accounts and transactions already imported stay in your space as manual records unless you delete them.

Earlier connections. Until 21 October 2026, Monobank could be connected with a personal token pasted from api.monobank.ua. That method has been removed and those tokens have been deleted; such connections show "reconnect required" until you confirm a new request.

3. Crypto wallets

Two modes.

• Watch-only: you paste a wallet address (EVM chains, or Solana) or an ENS name. We resolve ENS names through an Ethereum RPC provider (Alchemy). Anyone can watch any public address; watch-only wallets are marked as such.
• Verified: you prove you control the wallet by signing a message (Sign-In with Ethereum or Sign-In with Solana style, with a one-time challenge bound to you and your space). Signing happens in your wallet app or browser extension, or through WalletConnect (Reown); the signature is checked by our server. Smart-contract wallets are checked on-chain (EIP-1271) through the RPC provider. A verified wallet shows a "Verified" badge, and the proof (time, method, message and signature) is stored.

What we read. Through the Zerion API: token holdings and their valuations, DeFi, staked and debt positions, NFTs where supported, and the wallet's on-chain transaction history. Spam tokens are hidden by default. Holdings are refreshed about every 15 minutes and history every few hours.

What we never have. Your private keys or seed phrase. Signing a message does not authorise any transaction and costs nothing. We cannot send, swap or approve anything from your wallet.

How to revoke. Remove the wallet in the app; this deletes the address, its proof and imported holdings. If you connected through WalletConnect, the session is closed as soon as the message is signed; you can also remove the connection in your wallet app.

4. Crypto exchanges

What you give us. An API key and secret (and a passphrase where the exchange uses one) that you create at the exchange with read permissions only.

Permission check. When you add a key we ask the exchange what the key can do. Keys that can withdraw or trade are refused with an error; create a new read-only key instead. If the exchange does not report permissions, you must confirm that the key is read-only before it is saved. The result of the check and when it was made are stored with the connection.

What we read. Account balances and holdings of the wallets you pick (valued through the exchange's own markets, with reference exchanges for assets it cannot price), the account's ledger (trades, conversions, transfers between its wallets, deposits, withdrawals and fees) for the activity and value history, and fiat deposit or withdrawal suggestions to pair with your bank transactions (never created automatically). Requests respect each exchange's rate limits.

How to revoke. Disconnect the exchange in the app (deletes the encrypted key) and delete the API key at the exchange. You can also rotate the key in the app; the new key goes through the same permission check.

5. Upcoming business connections

The business features described in the Terms of Service are not available yet. When they launch, they will add:

• Monobank business accounts for companies. Monobank offers no consent request for company accounts, so a company director will paste a token issued in the monobank business cabinet. It will be stored encrypted like other credentials, used only to read the company's accounts and statements, and deleted when you disconnect; revoke it in the business cabinet as well.
• Private-entrepreneur accounts will keep using the confirmed Monobank request described in section 2, with the option to route them into a business space.

Some planned business features would do more than read, for example creating a payment link for an invoice or preparing a tax payment that you then sign in the bank's app. They will be described here, and will need your explicit consent, before they become available. Degroshi will never be able to send money on its own.

6. Questions

support@degroshi.com. See the Privacy Policy for the data we keep and the Security overview for how credentials are protected. This notice is published in Ukrainian and English; if the two differ, the Ukrainian text prevails.

All documents