Terms of Service
Operator and controller: Next Solutions EOOD, UIC 205799485, 109 Bulgaria Blvd., Sofia, Bulgaria. Contact: legal@nextforhr.com
1. Introduction and acceptance
1.1. These Terms of Service ("Terms") govern your access to and use of the Synvest platform, including the web application, APIs, and related services (together, the "Platform") operated by Next Solutions.
1.2. By creating an account, accessing, or using the Platform, you agree to be bound by these Terms and by our Privacy Policy, which is incorporated by reference. If you do not agree, you must not use the Platform.
1.3. You accept these Terms through the acceptance screen presented at sign-in. We may issue new versions of these Terms (see Section 13); continued use after a new version takes effect requires your renewed acceptance.
2. Definitions
- "Platform" — the Synvest software-as-a-service application and APIs.
- "Syndicate" (also "Tenant") — an investment syndicate organization that uses the Platform to manage its deals, members, and data.
- "Syndicate Administrator" / "Admin" — a User authorized to administer a Syndicate, including managing members, deals, and API keys.
- "Member" — a User who participates in a Syndicate (as member, associate, or lead).
- "User", "you" — any individual who accesses the Platform.
- "Content" — any data, information, or materials entered into or generated within the Platform, including deal, commitment, valuation, and member data.
- "API Key" — a credential generated by a Syndicate Administrator that grants a third party read-only access to that Syndicate's data via the API.
3. Eligibility and accounts
3.1. You must be at least 18 years old and legally capable of entering into a binding contract.
3.2. You are responsible for the accuracy of your account information, for safeguarding your credentials, and for all activity under your account. Notify us promptly at legal@nextforhr.com of any unauthorized use.
3.3. Access to a Syndicate's data is governed by the role assigned to you within that Syndicate. You must only access data you are authorized to access.
4. Nature of the service — no financial or investment advice
4.1. The Platform is a software tool for recording, organizing, and displaying information about investment syndicates, deals, commitments, valuations, and returns. It is not, and does not provide, investment advice, financial advice, brokerage, portfolio management, or any regulated financial service.
4.2. Next Solutions is not a financial institution, investment firm, broker, dealer, or investment adviser, and does not act as an intermediary in any transaction between Users or Syndicates.
4.3. Figures displayed on the Platform (including valuations, returns, IRR, carry, fees, and portfolio values) are informational calculations based on data entered by Syndicate users and on methodologies that may change over time. They may contain errors, may be incomplete, and must not be relied upon as a statement of fact, as financial advice, or as a basis for any investment decision. You are solely responsible for independently verifying any figure before relying on it.
4.4. All investment decisions are made by Users and Syndicates at their own risk. Next Solutions is not authorized, licensed, or supervised by any financial-services regulator or supervisory authority, and provides no regulated financial, investment, brokerage, or advisory service.
5. Syndicate data and roles
5.1. Each Syndicate controls the Content within its own tenant. The Platform enforces tenant isolation so that a Syndicate's Content is not accessible to other Syndicates.
5.2. Syndicate Administrators are responsible for the accuracy and lawfulness of the Content they and their Members enter, and for managing access within their Syndicate appropriately.
5.3. As between you and Next Solutions, you retain ownership of the Content you submit. You grant Next Solutions a limited licence to host, process, and display that Content solely to provide the Platform.
6. API access and disclosure to third parties
6.1. The Platform offers a read-only API. A Syndicate Administrator may generate time-limited, revocable API Keys that grant a third party read access to that Syndicate's data — including Members' personal data and their individual financial positions — equivalent to the visibility the Administrator has within the Platform.
6.2. Administrator responsibilities. By generating an API Key, the Syndicate Administrator represents and warrants, on behalf of the Syndicate, that:
(a) the Syndicate has a valid legal basis under applicable data-protection law to disclose the relevant personal data to the chosen recipient;
(b) the Syndicate has obtained any permission, consent, or authorization required from affected Members before exposing their personal or financial data to any third party;
(c) the Syndicate has in place any agreement required with the recipient (for example, a data processing or data sharing agreement); and
(d) the Syndicate will keep API Keys confidential, use expiry appropriately, and promptly revoke any key that is no longer needed or may be compromised.
6.3. Allocation of responsibility. The decision to generate an API Key and to disclose Syndicate data to a third party is made by the Syndicate, acting as the controller of its Members' data. Next Solutions provides the mechanism but is not responsible for the Syndicate's choice of recipient or for the recipient's subsequent use of the data.
6.4. Indemnity. The Syndicate and the acting Administrator shall indemnify and hold Next Solutions harmless from any claim, loss, or liability arising from the generation or use of an API Key in breach of Section 6.2, to the extent permitted by applicable law.
6.5. Next Solutions may suspend or revoke API access, or impose rate limits, to protect the Platform, its users, or data subjects.
7. Acceptable use
7.1. You must not: (a) access data you are not authorized to access; (b) attempt to breach tenant isolation or circumvent access controls; (c) probe, scan, or test the vulnerability of the Platform without authorization; (d) use the Platform to store or transmit unlawful, infringing, or harmful content; (e) interfere with or disrupt the Platform; (f) scrape or harvest data except through the API within the limits of a valid API Key; or (g) use the Platform in violation of any applicable law.
7.2. We may suspend or terminate access for breach of this Section.
8. Intellectual property
8.1. The Platform, its software, design, and all related intellectual property are owned by Next Solutions or its licensors. These Terms grant you a limited, non-exclusive, non-transferable right to use the Platform; no other rights are granted.
9. Data protection
9.1. Our processing of personal data is described in the Privacy Policy. The roles of the parties (controller/processor) depend on the context of the processing and are set out there. Where Next Solutions acts as a processor on a Syndicate's behalf, it processes personal data under that Syndicate's instructions and the data-protection terms required by applicable law.
10. Disclaimers
10.1. The Platform is provided "as is" and "as available". To the maximum extent permitted by law, Next Solutions disclaims all warranties, express or implied, including fitness for a particular purpose, accuracy, and non-infringement.
10.2. We do not warrant that the Platform will be uninterrupted, error-free, or that any figure or calculation is accurate or complete (see Section 4).
11. Limitation of liability
11.1. To the maximum extent permitted by applicable law, Next Solutions shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of profits, revenue, data, or investment value, arising from or related to your use of the Platform.
11.2. Next Solutions' total aggregate liability arising out of or related to the Platform shall not exceed the total amounts paid by the relevant Syndicate to Next Solutions in the twelve (12) months preceding the event giving rise to the liability.
11.3. Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable law.
12. Indemnification
12.1. You agree to indemnify and hold harmless Next Solutions from any claim or demand arising from your Content, your use of the Platform, your breach of these Terms, or your violation of any law or third-party right, to the extent permitted by applicable law. (See also Section 6.4 for API Keys.)
13. Changes to these Terms
13.1. We may modify these Terms from time to time. Each version carries a version identifier and effective date.
13.2. When a new version takes effect, you will be required to accept it at your next sign-in before continuing to use the Platform. If you do not accept, you may not continue to use the Platform.
14. Term and termination
14.1. These Terms apply while you use the Platform. We may suspend or terminate access for breach or to comply with law. You may stop using the Platform at any time.
14.2. Provisions that by their nature should survive termination (including Sections 4, 6.4, 8, 10, 11, 12, and 15) survive.
15. Governing law and disputes
15.1. These Terms are governed by the laws of the Republic of Bulgaria, without regard to conflict-of-laws rules.
15.2. The courts of the Republic of Bulgaria competent for the registered seat of Next Solutions shall have jurisdiction, subject to any mandatory consumer-protection rules that give a User rights before the courts of their place of residence.
16. Contact
Questions about these Terms: legal@nextforhr.com, Next Solutions EOOD, Bulgaria.
Privacy Policy
Operator and controller: Next Solutions EOOD, UIC 205799485, 109 Bulgaria Blvd., Sofia, Bulgaria. Contact: legal@nextforhr.com
1. Who we are
Next Solutions EOOD ("Next Solutions", "we", "us") operates the Synvest platform (the "Platform"). This Privacy Policy explains how personal data is processed in connection with the Platform, in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Bulgarian Personal Data Protection Act.
2. Controller and processor roles
2.1. Account and platform data. For personal data relating to your account and your use of the Platform (for example, your name, email, authentication data, and activity logs), Next Solutions acts as controller.
2.2. Syndicate Content. For personal data that a Syndicate enters and manages within its own tenant (for example, members' participation, commitments, and positions), the Syndicate acts as controller and Next Solutions acts as processor on the Syndicate's behalf and under its instructions.
2.3. Disclosure via API Keys. Where a Syndicate Administrator generates an API Key to disclose Syndicate data to a third party, the Syndicate is the controller of that disclosure and is responsible for its lawful basis and for informing affected data subjects. Next Solutions provides the mechanism only.
2.4. Where Next Solutions acts as a processor for a Syndicate, it processes personal data only on that Syndicate's documented instructions and under the data-protection terms required by applicable law.
3. What personal data we process
- Identity and contact data: name, email address, phone number, company name, company identifier, company address.
- Authentication data: password hash, or identifiers from Google/Microsoft sign-in; session tokens.
- Syndicate participation data: your role(s), membership and invitation status, and — within a Syndicate — your commitments, positions, valuations-related data, and other deal participation Content.
- Usage and technical data: log data, timestamps (for example, last/previous login), request metadata, and limited technical identifiers needed to operate and secure the Platform.
- Preferences: such as leaderboard/ranking visibility choices.
4. Purposes and legal bases
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Providing the Platform and your account | Performance of a contract (Art. 6(1)(b)) |
| Operating Syndicate features on a Syndicate's instructions | Processing on behalf of a controller (as processor) |
| Securing the Platform, preventing abuse, maintaining logs | Legitimate interests (Art. 6(1)(f)) |
| Sending service and transactional emails (invites, resets, notices) | Performance of a contract / legitimate interests |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
| Optional features relying on your choice (e.g. being named on leaderboards) | Consent (Art. 6(1)(a)), where applicable |
5. Disclosure to third parties
5.1. Sub-processors / service providers. We use service providers to operate the Platform. These currently include:
- Google Cloud Platform — hosting and database, in an EU region (europe-west1).
- Resend — transactional email delivery.
- Google and Microsoft — authentication (sign-in), where you choose those sign-in methods.
5.2. Syndicate-directed disclosure via API. As described in Section 2.3, a Syndicate may disclose its Content, including your personal data, to a third party of its choice via an API Key. That disclosure is controlled by the Syndicate, not by Next Solutions.
5.3. We do not sell personal data.
6. International transfers
6.1. We aim to keep hosting and primary data storage within the European Union (Google Cloud europe-west1).
6.2. Some service providers (for example, email delivery) may process data outside the EU/EEA. Where that occurs, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
7. Retention
7.1. We retain personal data for as long as your account or the relevant Syndicate relationship is active, and delete or anonymize it within twelve (12) months after that account or relationship ends, except where a longer period is required to comply with a legal obligation (for example, accounting or tax law).
7.2. Audit logs are retained for security and accountability purposes for twelve (12) months.
8. Your rights
Subject to applicable law, you have the right to: access your personal data; rectify inaccurate data; request erasure; restrict or object to processing; data portability; and, where processing is based on consent, to withdraw consent at any time without affecting prior processing.
8.1. To exercise these rights, contact legal@nextforhr.com. Where the Syndicate is the controller of the relevant data, we may direct your request to, or act on the instructions of, that Syndicate.
8.2. You have the right to lodge a complaint with the Bulgarian supervisory authority, the Commission for Personal Data Protection (Комисия за защита на личните данни / CPDP), or with the authority in your place of residence.
9. Security
We implement technical and organizational measures appropriate to the risk, including tenant isolation, hashing of credentials and API-key secrets, access controls, and logging. No system is perfectly secure; we cannot guarantee absolute security.
10. Cookies and sessions
The Platform uses only cookies and tokens strictly necessary to authenticate you and maintain your session. It does not use analytics, advertising, or other non-essential cookies, and therefore does not require a cookie-consent banner.
11. Children
The Platform is not directed to persons under 18 and we do not knowingly process their personal data.
12. Changes to this Policy
We may update this Policy. Each version carries a version identifier and effective date. When a new version takes effect, you will be asked to review and acknowledge it at your next sign-in.
13. Contact
Privacy questions and data-subject requests: legal@nextforhr.com, Next Solutions EOOD, Bulgaria.
Website Privacy Notice
Controller: Next Solutions EOOD, UIC 205799485, 109 Bulgaria Blvd., Sofia, Bulgaria. Contact: legal@nextforhr.com
1. Scope
1.1. This notice covers the public Synvest website at synvest.vc (the "Website"), including the Request Access form. It supplements the Privacy Policy, which covers the Synvest Platform. Next Solutions EOOD is the controller of the personal data described in this notice.
2. Browsing the Website
2.1. When you visit the Website, our hosting provider processes the technical data needed to deliver pages to you and keep the Website secure, such as your IP address, browser type, the page requested and the time of the request. These records are kept in short-lived technical logs and are not used to profile you.
2.2. The Website does not use analytics, advertising or social-media tracking, and does not load fonts or scripts from third-party trackers.
3. Request Access form
3.1. When you submit the Request Access form, we process the details you provide: your name, work email address, syndicate or organisation, your role, the size of your syndicate, the number of syndicates you run, and any message you include.
3.2. We use these details only to review your request, reply to you and, if appropriate, arrange a call and set up access to the Platform.
3.3. The legal basis is taking steps at your request before entering into a contract (GDPR Art. 6(1)(b)) and our legitimate interest in responding to enquiries about Synvest (Art. 6(1)(f)).
3.4. To protect the form from spam and automated abuse, it uses a hidden anti-bot field and Cloudflare Turnstile, which checks technical signals from your browser (such as your IP address and browser characteristics) to tell people from bots. The legal basis is our legitimate interest in keeping the Website secure (Art. 6(1)(f)).
4. Service providers
4.1. The Website relies on the following service providers, acting on our behalf:
- Cloudflare — website hosting, security and the Turnstile spam check.
- Resend — delivery of form submissions to our team by email.
- Google (Google Workspace) — the business email account in which we receive and answer requests.
4.2. Some of these providers may process data outside the EU/EEA. Where that occurs, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. We do not sell personal data.
5. Retention
5.1. We keep access requests and related correspondence for up to twelve (12) months after our last contact with you. If you become a user of the Platform, your data is then handled under the Privacy Policy.
6. Your rights
6.1. You have the rights described in section 8 of the Privacy Policy, including access, rectification, erasure, restriction, objection and data portability, and the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) or the authority in your place of residence. To exercise them, contact legal@nextforhr.com.