VIV SDK terms of use

Publisher

DOMINO SAS, trading as Green-Got, registered with the Nanterre Trade and Companies Register under number 883 981 763. Registered office: 20 bis rue Louis-Philippe, 92200 Neuilly-sur-Seine, France.

For questions about this licence, contact your GGBS representative or write to DOMINO at its registered office.

1. Scope and applicable documents

These terms cover the VIV binary SDKs for iOS and Android, their documentation and updates. They are intended for businesses integrating the SDKs into their applications. API access, pricing, support and service commitments are governed by a separate GGBS agreement. Specific provisions of that agreement take precedence on their subject matter in the event of a conflict.

2. Integration and distribution within an application

Subject to compliance with these terms, the publisher grants a non-exclusive licence to download the SDK, retain copies for development and CI, integrate it into an application and distribute the integrated binary with that application, including through app stores. This permission does not transfer intellectual property rights or grant access to GGBS services without the required authorisation.

3. Ownership and restrictions

The SDK is proprietary software distributed in compiled form. Public availability does not make it open source. Unless authorised in writing by the publisher, redistributing the SDK as a standalone product, reselling it, removing its proprietary notices or modifying it is not permitted. These restrictions do not limit mandatory statutory rights, including rights relating to interoperability and observing and studying how the software functions. Third-party components remain subject to their respective licences.

4. Integration and security

The integrator protects access to the services and follows the security documentation. Server secrets must not be embedded in the application. The integrator verifies the origin and integrity of installed versions and assesses security updates. A result from a device alone does not authorise a banking operation: verification and authorisation decisions belong on the server. Tests that may affect the services, third parties or their data require an authorised scope. Vulnerabilities should be reported to the security contact provided in the GGBS agreement, without including secrets or biometric data in a public issue.

5. Personal data

The SDK licence alone does not authorise the collection or processing of personal or biometric data. Each party complies with the obligations arising from its actual role. Before going live, the integrator determines the purposes, legal bases and, where applicable, conditions for processing biometric data; it arranges transparency, retention, security and the exercise of data subject rights. The parties’ roles and processing entrusted to GGBS are set out in the applicable agreements.

6. Versions, support and liability

Supported environments and technical limitations are described in the documentation for each version. Downloading the SDK does not constitute compliance certification, a guarantee against fraud or vulnerabilities, or a commitment to service availability. Support, maintenance, warranty and liability commitments are set out in the applicable GGBS agreement, subject to mandatory law.

7. Duration and end of usage rights

The granted rights apply while these terms are complied with. In the event of a material breach, notification, remediation and termination follow the applicable GGBS agreement and law. Termination of API access does not remove data protection and deletion obligations. Intellectual property provisions continue to apply after the licence ends.

8. Versions of these terms

Each SDK release references a dated version of these terms. New terms will be published at a new address and will not silently replace this text. Changes affecting an existing contractual relationship follow the procedures in the relevant agreement.