Terms of Use

1. Service scope and getting started

The service provides a hosted API for integrating Swish payments, payment status checks and refunds into your own website, app or other system. It is a technical integration service, not a replacement for your bank agreement or your obligations to your customers.

The service is available only to businesses and organisations with a Swish Handel number. You need Swish Handel from your bank, with BjornTech AB appointed as technical provider, and must complete merchant onboarding. Buying a subscription does not itself connect your Swish number. You must be authorised to connect and use the merchant’s number and keep your contact details accurate.

Your bank and Swish set their own requirements, fees and restrictions. Bank fees are separate from BjornTech’s fees. You are responsible for complying with those requirements, including when using the same number across several projects.

2. Subscriptions, payment and cancellation

The free transaction threshold and when a paid subscription is required are described on the pricing page. Subscriptions can be purchased through the Swish API product page. Your subscription is tied to your Swish number rather than to each individual project. You are responsible for purchasing the appropriate subscription when required and paying the charges you agree to for that subscription.

Paid subscriptions run for one year and renew automatically each year unless you cancel renewal. The annual fee is paid in advance at purchase and at each annual renewal. Product-page prices exclude VAT; applicable VAT is displayed once you enter your customer address on bjorntech.com.

You can cancel renewal through your account page on bjorntech.com at any time before the next renewal. Cancellation stops future renewals, not access during the subscription year you have already paid for. Access continues until that year ends, subject to the suspension and termination provisions below.

BjornTech does not send renewal reminders. This does not remove any notice or other obligation required by applicable law. Refunds of subscription fees are considered case by case at BjornTech’s discretion, subject to any legally required refund. These are distinct from refunds of Swish payments made through the API.

BjornTech will notify you by email of subscription price changes at least 30 days before renewal. The new price applies from the next subscription year.

3. Your integration and acceptable use

You are responsible for your application, its configuration, access controls, transactions and handling of customer information. Follow the current documentation, test your integration before live use and verify payment status before delivering goods or services. A created payment request or callback alone is not proof of a completed payment.

• Only initiate payments and refunds you are authorised to make. Validate amounts, recipients and refund permissions in your own system.
• Use the service lawfully. Do not commit fraud, misuse personal data, infringe others’ rights, bypass security controls or attempt unauthorised access.
• Do not disrupt the service, exploit vulnerabilities or use it to attack other systems. Report suspected vulnerabilities without exposing customer data or secrets.
• Provide the information and privacy notices your customers need, and ensure you have a lawful basis for personal data you submit.

4. Protect credentials and confidential information

You must keep passwords, API keys, signing secrets, activation links and other confidential integration information secure. Restrict access to people and systems that need it. Keep API secrets in protected server-side storage, never in browser code, mobile app bundles, public repositories, client-side environment variables or publicly accessible logs.

Documentation examples and integration prompts do not authorise disclosure of real credentials. Do not paste secrets, confidential customer information or live credential responses into AI-builder prompts, chats, screenshots, support messages or other tools that are not approved to handle that information. Review generated code and configuration before deployment; using an AI tool does not transfer your security responsibility to BjornTech AB.

If you suspect exposure or unauthorised use, immediately stop using the affected credentials, revoke or replace them through the available process and contact BjornTech for assistance where needed. Notify BjornTech promptly, limit further harm and fulfil any legal duties to notify affected people or authorities. Do not send the compromised secret itself when reporting the incident.

5. Responsibility for misuse and disclosure

To the extent permitted by applicable law, BjornTech AB is not liable for loss, unauthorised transactions, data exposure or other harm caused by your misuse, misconfiguration, insecure integration or failure to protect credentials or confidential information. This includes disclosure in client-side code, public repositories or integration prompts, and actions by people or tools to whom you give access.

This allocation of responsibility applies to harm caused by the customer or their integration. It does not remove BjornTech AB’s own obligations under applicable law or exclude responsibility for its own unlawful conduct where liability cannot lawfully be excluded.

6. Availability and warranties

The service depends on Swish, banks, communications networks and other services outside BjornTech AB’s control. BjornTech AB does not guarantee that every payment will be accepted or completed, that third-party systems will always be available, or that the API will work with every customer setup.

Unless expressly agreed otherwise, the service and documentation are provided as available, without a guarantee of uninterrupted or error-free operation or suitability for a particular purpose, to the extent permitted by applicable law. This does not override express contractual commitments or statutory obligations. Plan for failures and verify transaction outcomes rather than blindly repeating payment or refund requests.

7. Limits of liability and mandatory rights

To the extent permitted by applicable law and unless expressly agreed otherwise, BjornTech AB excludes liability for indirect or consequential losses arising from use of the service, such as lost profit, lost business or losses arising from interruption of your own operations.

Nothing in these terms excludes or limits liability that cannot legally be excluded or limited, including liability for intentional misconduct or gross negligence where such an exclusion is not permitted. Mandatory consumer rights, data protection rights and BjornTech AB’s statutory duties remain unaffected. These terms are not a blanket exemption from responsibility for BjornTech AB’s own unlawful conduct.

8. Suspension, termination and changes

Subject to these Terms and applicable law, BjornTech AB may restrict or suspend access to address misuse, a security risk, non-payment or a legal requirement. BjornTech will give notice when reasonably practicable, with the timing assessed case by case. Security risks, unlawful use or serious breaches may require immediate suspension. A serious or repeated breach may lead to termination. Payment processing may also be affected by decisions of your bank or Swish.

Changes to the service, documentation or these Terms are subject to applicable law and do not override mandatory rights. Contact BjornTech with questions about a change affecting your subscription. These Terms do not establish a specific notice period or acceptance process for changes to the Terms.

9. Applicable law and questions

Swedish law applies, subject to any mandatory protections that apply to you. Contact BjornTech AB with questions about these terms or your agreement. These terms do not restrict statutory complaint routes or rights to seek a remedy before a competent court or authority.

Related information

• Swish API subscription and current pricing