Showing the version for: UK customers EEA customers
Legal & Policies

Schedule A: Bank data (Yapily Connect)

Hedj Financial Risk Management Limited · Version 1 · Effective 8 October 2026 · For UK customers

These terms took effect on 8 October 2026. If you do not accept them, your continued use of Hedj from 8 December 2026 will be deemed acceptance.

About version 1

What changed
First published version
Why
Hedj is publishing written terms for bank connections, provided by Yapily Connect, for the first time.
What it means for you
This Schedule applies when your organisation connects a bank account to Hedj. It explains who provides the bank data service, how long your authorisation lasts and where to complain.

Contents

  1. 1. What the bank data service does
  2. 2. Who provides the service
  3. 3. Yapily Connect's End User Terms and Privacy Notice
  4. 4. How your bank data is shared
  5. 5. Your authorisation and how long it lasts
  6. 6. Your data after a disconnection
  7. 7. Your responsibilities
  8. 8. Availability
  9. 9. Complaints
  10. 10. Changes to this Schedule

This Schedule forms part of the Hedj Master Terms between your organisation and Hedj Financial Risk Management Limited ("Hedj", "we", "us"). It applies when you connect a bank account to Hedj.

Hedj Financial Risk Management Limited is a company registered in Ireland (registered no. 803831). Registered address: 2 Southwood Park, Blackrock, Co. Dublin, A94 D2C1, Ireland.

This is the UK version of Schedule A. It applies to bank data services provided by Yapily Connect Ltd in the United Kingdom.

1. What the bank data service does

1.1 With your authorisation, the bank data service reads information from the bank accounts you connect: account details, balances, transaction history, standing orders and direct debits, and the name of the account holder.

1.2 Hedj uses this information to show your cash position, forecast your cash flow, reconcile your accounts and categorise your transactions.

1.3 The service only reads information. It does not make payments from your bank account. Hedj never sees your bank login: you sign in to your bank on the bank's own pages.

2. Who provides the service

2.1 The account information service is provided by Yapily Connect Ltd, a company registered in England and Wales (company no. 11598433), which is authorised and regulated by the Financial Conduct Authority under Financial Services Register number 827001 to provide account information services and payment initiation services.

2.2 Hedj provides the account information service to you as agent of Yapily Connect Ltd.

2.3 Hedj's registration with the FCA as agent of Yapily Connect Ltd is pending; the UK bank data service is not provided until it is entered on the FCA Register.

3. Yapily Connect's End User Terms and Privacy Notice

3.1 To use the bank data service you must accept Yapily Connect's End User Terms and read its Privacy Notice. You accept them on the consent screen each time you connect or reconnect a bank. They form part of the terms on which you use the bank data service through Hedj.

3.2 The End User Terms are a contract between you and Yapily Connect. They govern the account information service itself.

3.3 For UK users, the End User Terms are governed by English law.

3.4 Yapily Connect gives at least two months' notice of material changes to its End User Terms on its website. If you continue to use the bank data service after a change takes effect, you are treated as accepting it.

4. How your bank data is shared

4.1 Your data will be shared with Yapily and may be used in connection with Yapily's value-added services. See Yapily's Privacy Notice.

4.2 Our privacy notice explains how Hedj uses bank data once we receive it.

5. Your authorisation and how long it lasts

5.1 You authorise access to each bank by pressing Confirm on the consent screen and then approving the access at your bank. This authorisation is given under payment services law, between you and Yapily Connect.

5.2 Your authorisation lasts 90 days. The consent screen shows the date on which it expires. To keep your data refreshing, a user of your organisation must reconfirm it at least every 90 days.

5.3 If an authorisation is not renewed, Hedj can no longer refresh data from that account. Data already received stays in Hedj, as set out in section 6.

5.4 You can withdraw your authorisation at any time, for one account or all of them, by disconnecting the bank in Hedj or by withdrawing it directly with your bank.

6. Your data after a disconnection

6.1 When a connection ends, because you disconnect it, your authorisation lapses or you withdraw it, Hedj stops refreshing data from that account.

6.2 The bank data we have already received is kept in your Hedj account, so your history, forecasts and reports remain complete. It is kept until an admin of your organisation removes it with the Delete bank data action, you ask us to delete it, or the retention period in our privacy notice ends.

7. Your responsibilities

7.1 Connect only accounts that your organisation holds or is authorised to access, and make sure that the users who connect them are authorised to do so.

7.2 Yapily Connect may decline to provide, or stop providing, the bank data service to businesses in the industries on its prohibited and higher-risk industries list. We will tell you if this affects you.

8. Availability

8.1 The bank data service depends on your bank and on Yapily Connect. Banks may change what they share, limit how often data can be refreshed, or be unavailable. Neither Hedj nor Yapily Connect controls this.

9. Complaints

9.1 Complaints about the bank data service should be sent to Yapily Connect's complaints team at complaints@yapily.com. Yapily Connect handles them under its complaints handling process. If you raise one with Hedj at support@hedj.eu, we will pass it to Yapily Connect promptly and help it investigate.

9.2 If you are not satisfied with Yapily Connect's final response, or have not received one within 15 business days, you may be able to refer your complaint to the Financial Ombudsman Service within six months of the final response: Exchange Tower, London E14 9SR; telephone 0800 023 4567; www.financial-ombudsman.org.uk. Whether you are eligible depends on the size of your organisation.

9.3 Complaints about Hedj's own platform are handled under clause 15 of the Master Terms.

10. Changes to this Schedule

10.1 Hedj changes this Schedule under clause 12 of the Master Terms. A new version takes effect when it is published, with a summary of what changed. If your organisation does not accept it, your continued use of Hedj from two months after it is published is deemed acceptance, and you may end the agreement before then.

Hedj Financial Risk Management Limited is registered in Ireland, company number 803831. Registered office: 2 Southwood Park, Blackrock, Co. Dublin, A94 D2C1, Ireland.

Legal & Policies

Schedule A: Bank data (Yapily Connect)

Hedj Financial Risk Management Limited · Version 1 · Effective 8 October 2026 · For EEA customers

These terms took effect on 8 October 2026. If you do not accept them, your continued use of Hedj from 8 December 2026 will be deemed acceptance.

About version 1

What changed
First published version
Why
Hedj is publishing written terms for bank connections, provided by Yapily Connect, for the first time.
What it means for you
This Schedule applies when your organisation connects a bank account to Hedj. It explains who provides the bank data service, how long your authorisation lasts and where to complain.

Contents

  1. 1. What the bank data service does
  2. 2. Who provides the service
  3. 3. Yapily Connect's End User Terms and Privacy Notice
  4. 4. How your bank data is shared
  5. 5. Your authorisation and how long it lasts
  6. 6. Your data after a disconnection
  7. 7. Your responsibilities
  8. 8. Availability
  9. 9. Complaints
  10. 10. Changes to this Schedule

This Schedule forms part of the Hedj Master Terms between your organisation and Hedj Financial Risk Management Limited ("Hedj", "we", "us"). It applies when you connect a bank account to Hedj.

Hedj Financial Risk Management Limited is a company registered in Ireland (registered no. 803831). Registered address: 2 Southwood Park, Blackrock, Co. Dublin, A94 D2C1, Ireland.

This is the EEA version of Schedule A. It applies to bank data services provided by Yapily Connect UAB in the European Economic Area.

1. What the bank data service does

1.1 With your authorisation, the bank data service reads information from the bank accounts you connect: account details, balances, transaction history, standing orders and direct debits, and the name of the account holder.

1.2 Hedj uses this information to show your cash position, forecast your cash flow, reconcile your accounts and categorise your transactions.

1.3 The service only reads information. It does not make payments from your bank account. Hedj never sees your bank login: you sign in to your bank on the bank's own pages.

2. Who provides the service

2.1 The account information service is provided by Yapily Connect UAB, a company registered in the Republic of Lithuania (company no. 305602679), which holds payment institution licence no. LB002045 issued by the Bank of Lithuania and is supervised by the Bank of Lithuania.

2.2 Yapily Connect UAB provides the account information service to you directly. Hedj is not its agent, and Hedj does not provide the account information service itself. When you connect a bank, Hedj redirects you to Yapily Connect UAB, and you contract directly with Yapily Connect UAB for that service only.

3. Yapily Connect's End User Terms and Privacy Notice

3.1 To use the bank data service you must accept Yapily Connect's End User Terms and read its Privacy Notice. You accept them on the consent screen each time you connect or reconnect a bank. They form part of the terms on which you use the bank data service through Hedj.

3.2 The End User Terms are a contract between you and Yapily Connect. They govern the account information service itself.

3.3 For EEA users, the End User Terms are governed by Lithuanian law.

3.4 Yapily Connect gives at least two months' notice of material changes to its End User Terms on its website. If you continue to use the bank data service after a change takes effect, you are treated as accepting it.

4. How your bank data is shared

4.1 Your data will be shared with Yapily and may be used in connection with Yapily's value-added services. See Yapily's Privacy Notice.

4.2 Our privacy notice explains how Hedj uses bank data once we receive it.

5. Your authorisation and how long it lasts

5.1 You authorise access to each bank by pressing Confirm on the consent screen and then approving the access at your bank. This authorisation is given under payment services law, between you and Yapily Connect.

5.2 Depending on your bank, your authorisation lasts either 90 days, after which you reconfirm it in Hedj, or 180 days, after which you approve it again at your bank. The consent screen shows the date until which it is valid.

5.3 If an authorisation is not renewed, Hedj can no longer refresh data from that account. Data already received stays in Hedj, as set out in section 6.

5.4 You can withdraw your authorisation at any time, for one account or all of them, by disconnecting the bank in Hedj or by withdrawing it directly with your bank.

6. Your data after a disconnection

6.1 When a connection ends, because you disconnect it, your authorisation lapses or you withdraw it, Hedj stops refreshing data from that account.

6.2 The bank data we have already received is kept in your Hedj account, so your history, forecasts and reports remain complete. It is kept until an admin of your organisation removes it with the Delete bank data action, you ask us to delete it, or the retention period in our privacy notice ends.

7. Your responsibilities

7.1 Connect only accounts that your organisation holds or is authorised to access, and make sure that the users who connect them are authorised to do so.

7.2 Yapily Connect may decline to provide, or stop providing, the bank data service to businesses in the industries on its prohibited and higher-risk industries list. We will tell you if this affects you.

8. Availability

8.1 The bank data service depends on your bank and on Yapily Connect. Banks may change what they share, limit how often data can be refreshed, or be unavailable. Neither Hedj nor Yapily Connect controls this.

9. Complaints

9.1 Complaints about the bank data service should be sent to Yapily Connect's complaints team at complaints@yapily.com. Yapily Connect handles them under its complaints handling process. If you raise one with Hedj at support@hedj.eu, we will pass it to Yapily Connect promptly and help it investigate.

9.2 If you are not satisfied with Yapily Connect's response, or have not received one within 15 business days, you may apply to the Bank of Lithuania within one year of raising your complaint with Yapily Connect. You must complain to Yapily Connect first. The Bank of Lithuania explains how to apply on its website: www.lb.lt/en/dbc-settle-a-dispute-with-a-financial-service-provider.

9.3 Complaints about Hedj's own platform are handled under clause 15 of the Master Terms.

10. Changes to this Schedule

10.1 Hedj changes this Schedule under clause 12 of the Master Terms. A new version takes effect when it is published, with a summary of what changed. If your organisation does not accept it, your continued use of Hedj from two months after it is published is deemed acceptance, and you may end the agreement before then.

Hedj Financial Risk Management Limited is registered in Ireland, company number 803831. Registered office: 2 Southwood Park, Blackrock, Co. Dublin, A94 D2C1, Ireland.