Terms of Service

Tallio is a service of Hypermetron. Email: info@tallio.dev. Website: hypermetron.com.

In these terms, “we” and “us” mean Hypermetron, and “you” means the company in whose name a team is created. Your “team” is your company’s Tallio account. “Merchant” means a business you issue documents for, and “provider” means the licensed e-invoicing provider a merchant uses.

You accept these terms when you create a team, or when you use the API or the dashboard. The person who accepts them confirms that they may bind the company they name. Tallio is offered to businesses only, not to consumers.

These terms are written in English. If a translation is ever published, the English text prevails.

Tallio is a connector. You send one document format to the Tallio API, and Tallio checks it, translates it for the merchant’s provider and sends it there with the merchant’s own credentials. The provider issues and signs the document, reports it to the tax authority and returns its registration number (in Greece, the MARK). Tallio passes the result back to you.

• We are never the provider of record. The provider is the legal issuer, signer and archive of every document.
• We keep no fiscal archive. We keep each document’s metadata (type, status, number, registration number and totals) and fetch the PDF from the provider when you ask for it.
• A test key reaches only the Tallio sandbox and the providers’ test environments. Nothing sent with a test key reaches a tax authority.

Anyone with a verified Google account or email address can create a team for a business at the dashboard. The person who creates it becomes its first owner. Owners invite members, choose their roles and remove them.

• Your team acts for your company. You are responsible for everything your members do and for everything done with your team’s API keys.
• Give us your company’s real name, keep your member list current, and remove people who no longer work for you.
• Each person signs in with their own account. Do not share sign-ins.

• A test key (sk_test_) works in the sandbox. A live key (sk_live_) issues real documents, and only an owner can create one.
• We show a key once, when it is created, and store only a hash of it, so we cannot show it to you again.
• Keep keys secret and on your servers. Never put a key in a browser, a mobile app or a public repository.
• If you think a key has been exposed, revoke it in the dashboard at once and tell us.

You must not use Tallio to:

• issue a document that is false, fraudulent or otherwise unlawful;
• issue documents for a business that has not authorised you to do so;
• reach, or try to reach, another team’s data, or test, probe or break Tallio’s security without our written permission;
• get around the API’s rate limits or put a load on the service that harms other customers;
• send data you have no right to send.

The API has rate limits. A request over a limit is refused with status 429, and you can retry it later.

• You are responsible for each document’s content: its type, parties, lines, amounts, VAT and classifications.
• Tallio checks each document before it is sent. Where it applies a default classification instead of one you or the merchant set, it says so in the document’s warnings. These checks are not tax or legal advice and do not make a document correct.
• You must have each merchant’s authority to issue documents in its name, to connect its provider account, and to send its customers’ data to Tallio. You tell your merchants how their data is handled.
• A merchant’s provider account, subscription and contract are between the merchant and the provider.

A merchant connects its provider with its own credentials, through the API or a hosted connect link. We handle those credentials as follows:

• They are encrypted with a key that belongs to your team, which is itself protected by a Google Cloud KMS key in Frankfurt.
• They are used only to issue and track documents for that merchant.
• They are never returned by the API or shown in the dashboard.
• They are deleted 30 days after the connection is disconnected.

• The sandbox is free. Live use is charged at the prices on our pricing page, or as agreed with you in writing. Prices exclude VAT.
• Your merchants’ provider subscriptions are separate and are paid to the providers.
• We tell your team’s owners of a price change by email at least 30 days before it takes effect. Your current price applies until then.

We work to keep Tallio available and to answer support requests promptly, but we offer no service level unless we agree one with you in writing. Maintenance, faults, and outages at a provider, a tax authority or our hosting can interrupt the service. Providers and tax authorities are outside our control.

• You may stop using Tallio at any time, and ask us to close your team.
• We may suspend your team, or revoke keys, at once if you breach these terms, if your use puts the service, other customers or third parties at risk, or if the law requires it. Where we can, we tell you first and give you a chance to fix the problem.
• We may end these terms for any other reason by telling your team’s owners by email at least 30 days before.
• When the terms end, your keys stop working, your merchants’ connections are disconnected and their credentials are deleted 30 days later. Personal data is deleted as the Privacy Policy and the Data Processing Agreement describe. Issued documents stay with the provider that issued them.
• What you owe us, and the sections on your documents, liability, disclaimers, data protection, confidentiality and governing law, survive the end of these terms.

• To the fullest extent the law allows, we exclude all liability arising from Tallio or these terms, whatever its legal basis.
• This exclusion does not apply to liability for intent or gross negligence (article 332 of the Greek Civil Code), for death or personal injury, or to any other liability that the law does not allow to be excluded or limited.
• In particular, and within the same limits, we are not liable for the content of the documents you send, for the acts or failures of providers or tax authorities, for fines, tax or other consequences that follow from a document’s content, or for indirect or consequential loss such as lost profits, revenue or business.

To the extent the law allows, Tallio is provided as it is and as available. We do not promise that it will be uninterrupted or error-free, or that it suits a particular purpose. Nothing Tallio shows you, including classification defaults and warnings, is tax, accounting or legal advice.

Our Privacy Policy explains how we handle the personal data we hold as a controller, such as your members’ dashboard accounts. Where we process personal data for you, for example your merchants’ customers in the documents you send, we do so as your processor, and the Data Processing Agreement forms part of these terms. Where the two differ on personal data, the Data Processing Agreement prevails; the liability section applies to claims under both.

Each of us keeps the other’s non-public information confidential and uses it only for the purpose of these terms, unless the law requires its disclosure.

We may change these terms. We tell your team’s owners by email at least 30 days before a material change takes effect, and the date at the top of this page shows the last review. If you continue to use Tallio after a change takes effect, you accept it; if you do not agree, stop using Tallio before then.

These terms are governed by Greek law. The courts of Athens have exclusive jurisdiction over any dispute arising from them.

Questions about these terms: info@tallio.dev.