Terms of Service

Summary (not part of the contract)

• These Terms are between Canonical Labs, Inc. ("GoCanonical", "we") and the business that installs or uses our products ("you").
• Part A applies to every GoCanonical product. Part B is the Clue schedule. Later products add schedules.
• Clue helps you assess fraud and payment risk on your own Stripe payments and customers. It supports your decision. It does not make it.
• Do not use Clue for credit, insurance, employment, housing or tenancy decisions. Clue is not a consumer reporting agency.
• Each Stripe account gets 1,000 free credits once, on first use in live mode. After that you can subscribe to a monthly plan (Starter US$25, Growth US$99, Scale US$249 a month, for 1,000, 5,000 or 15,000 credits a month) or buy a US$30 boost of 1,000 credits. Plans renew automatically until you cancel. Cancelling takes effect at the end of the billing period. Monthly credits expire at the end of that period and are used first; boost and free credits do not expire.
• Credits are used when Clue runs lookups on paid sources and for the AI summary; checks on your own Stripe data, Explain and re-opens within 24 hours use none. You can see your balance and what each lookup used in the app.
• A Stripe sandbox runs in demo mode: no credits, Stripe-side checks work, and outside-record checks run only for sample buyers.
• Each account can use up to 1,500 credits a day on Free and Starter (5,000 after a boost), 5,000 on Growth and 15,000 on Scale. This is runaway protection, and it is stated in B10.
• Installing Clue starts a sync of up to the last 12 months of your payment history, plus live updates, so that Clue can offer history-based features. Uninstalling ends our access to your Stripe account and stops the sync, and we delete the synced copy within 30 days (section B12).
• Our liability is capped. You are responsible for how you use the results.

Part A. General terms

1. Who we are and who you are

1.1 These Terms are a contract between Canonical Labs, Inc., a Delaware corporation, with its business address at 2261 Market Street, STE 10849, San Francisco, CA 94114, United States ("GoCanonical", "we", "us"), and the business entity that accepts them ("you").

1.2 Our products are for businesses. They are not offered to individuals acting as consumers.

1.3 Acceptance. You accept these Terms when you install a GoCanonical product from the Stripe App Marketplace or another channel, when you click to accept them, or when you first use a product, whichever comes first. The settings page of each product links to these Terms.

1.4 Authority. The person who installs must have authority to bind your business. Stripe requires installers to be Stripe Administrators. By installing, that person confirms they are authorised to accept these Terms for you.

1.5 Record of acceptance. The first time Clue is opened after install, we record the version of these Terms in force for that install, with the date and time, so that we can show what was accepted. When we publish a new version we change the version number so that later installs record it.

1.6 Order of documents. If documents conflict, this order applies: a signed agreement between us that expressly overrides these Terms; the product schedule; Part A; the DPA (for personal data only); our Privacy Policy (which is a notice, not a contract term).

2. Definitions

• Account: your Stripe account (or accounts) connected to a GoCanonical product.
• Buyer: a person who buys, or attempts to buy, from you, or whose details appear in your Stripe data.
• Buyer Data: personal data about Buyers that we receive from your Stripe account, from you, or from lookups we run for you.
• Results: everything a product shows you about a Buyer or a transaction, including labels, scores, signals, summaries and explanations.
• Sources: the records and services we use to produce Results. See section B7.
• Stripe Terms: your agreements with Stripe, including the Stripe Services Agreement, the Stripe Radar terms and the Stripe Apps terms.
• DPA: our Data Processing Addendum, described in section 10.

3. Using the products

3.1 We grant you a limited, non-exclusive, non-transferable, revocable right to use the products for your own internal business purposes, under these Terms.

3.2 You are responsible for everyone who uses a product through your Account, and for keeping their access to your Stripe Dashboard authorised.

3.3 We may update the products. We may add, change or remove features. If a change materially reduces what a paid feature does, we will tell you at least 30 days in advance.

4. Fees and payment (general)

Product schedules set out fees. Unless a schedule says otherwise, fees are in US dollars, exclude taxes, and are paid in advance. You are responsible for applicable taxes other than taxes on our income. Plan and boost payments are taken by Stripe (see section B9). Taxes are added at checkout where they apply, and invoices and receipts are issued by Stripe.

5. Confidentiality

5.1 "Confidential Information" means non-public information one party discloses to the other that is marked confidential or that a reasonable person would understand to be confidential. Results and your Buyer Data are your Confidential Information to the extent they are yours under section 10. Our non-public technical and security information, and the identity of our Sources, are ours.

5.2 Each party will use the other's Confidential Information only to perform or use the products, will protect it with at least reasonable care, and will share it only with people who need it and are bound by similar duties.

5.3 This does not apply to information that is public without breach, was already known, was independently developed, or was lawfully received from someone else. A party may disclose Confidential Information when legally required, after giving notice where the law allows.

5.4 Sources are confidential. You agree not to try to identify, contact, test or extract data from our Sources through the products.

6. Security

6.1 We keep administrative, technical and physical safeguards designed to protect Buyer Data and your Account data. Our current measures are described on our security page at https://gocanonical.com/security. We will not materially reduce the overall level of protection during the term.

6.2 You are responsible for the security of your own Stripe Account, credentials and devices, and for any restricted API key you give us. You must give us only the permissions we ask for.

6.3 Each party will tell the other promptly if it learns of unauthorised access to the other's data. Our breach notice commitment to you is in the DPA.

7. Intellectual property and feedback

7.1 We own the products, the Sources' compiled outputs as delivered to you in the products, our models, rules, labels, scores and all related intellectual property. You own your Stripe data and your own business information.

7.2 Subject to these Terms, we give you a licence to use Results for your internal fraud and payment-risk purposes (see B3). You receive no other rights in Results or Sources.

7.3 If you give us feedback or suggestions, you grant us a perpetual, worldwide, royalty-free licence to use them without restriction. Feedback does not include your Buyer Data or Confidential Information.

7.4 Stripe and other third-party names and marks belong to their owners. Use of the Stripe name here identifies the platform we work with. It is not an endorsement.

8. Suspension and termination

8.1 You may stop using a product at any time by uninstalling it from your Stripe Dashboard. The effects of uninstall are in section B12.

8.2 We may suspend or end your access immediately if you breach these Terms or a product schedule in a way that creates legal, security or cost risk, if a Source or Stripe requires it, or if we believe use is abusive. Where practical, we will tell you why and give you a chance to fix the problem first.

8.3 Either party may end these Terms for the other's material breach that remains unfixed 30 days after written notice.

8.4 We may end a product on 60 days' notice. If we end a product for reasons other than your breach, we will refund the unused part of any prepaid plan period and any unused boost credits.

8.5 Sections that by nature should survive do survive: confidentiality, IP, fees owed, disclaimers, liability, indemnities, governing law, and section B12 retention terms.

9. Warranties, disclaimers and liability

9.1 Mutual. Each party confirms it has the authority to enter into these Terms and will comply with laws that apply to it.

9.2 Disclaimer. The products and Results are provided "as is" and "as available". To the fullest extent the law allows, we disclaim all other warranties, including merchantability, fitness for a particular purpose, non-infringement, accuracy, completeness and uninterrupted or error-free operation. We do not warrant that Results are correct, that any Buyer is or is not fraudulent, or that use of a product will prevent any loss or chargeback.

9.3 Limit on liability. To the fullest extent the law allows:

• (a) neither party is liable for indirect, incidental, special, consequential, exemplary or punitive damages, or for lost profits, revenue, goodwill or data, even if told they might occur; and
• (b) each party's total liability arising out of these Terms is limited to the greater of (i) the amount you paid us in the 12 months before the event giving rise to the claim and (ii) US$100. Free credits are not a payment, so the fixed floor applies where you have paid nothing.

9.4 Exceptions. Sections 9.3(a) and (b) do not limit: your payment obligations; your indemnity obligations under section 9.5(a), which are uncapped; a party's fraud, gross negligence or wilful misconduct; your breach of the permitted-purpose and prohibited-use terms in B3 and B4; or liability that cannot be limited by law. Our indemnity obligations under section 9.5(b) (intellectual property) are not an exception: they are subject to the cap in 9.3.

9.5 Indemnities.

• (a) By you. You will defend and indemnify us against third-party claims, and pay resulting damages, costs and reasonable legal fees, to the extent they arise from: your use of Results for a prohibited purpose or outside B3; your failure to meet a merchant responsibility in B5 (including buyer notice and lawful basis); a decision you make about a Buyer, including a claim of wrongful decline, discrimination or adverse action; or your breach of the Stripe Terms.
• (b) By us. We will defend and indemnify you against third-party claims that the products, used as permitted, infringe that party's intellectual property rights, and pay resulting damages, costs and reasonable legal fees. This does not cover claims that arise from your data, your combination of the products with other items, or use outside these Terms.
• (c) Process. The indemnified party must give prompt notice, allow the indemnifying party to control the defence and settlement (no settlement that admits fault or imposes obligations on the other party without consent), and cooperate at the indemnifying party's expense.

10. Data and the DPA

10.1 Your data. As between us, you own your Stripe data and your Buyer Data. We use Buyer Data to provide the product to you (including the data sync in B2.4), as described in the DPA and our Privacy Policy. For that purpose we act as your processor (or service provider).

10.2 DPA. Our DPA is incorporated into these Terms and applies to personal data we process for you. It is available at https://gocanonical.com/dpa. By accepting these Terms you accept the DPA.

10.3 Account and usage data. We are the controller of information about your users and your use of our products (for example, account identifiers, usage logs, credit ledgers and product telemetry). We use it to run, secure, bill for, support and improve the products, and to meet legal obligations.

10.4 Aggregated and de-identified data. We may create and use data that cannot reasonably identify you, your users or any Buyer, for product operation, security, analytics and improvement. We will not try to re-identify it. We do not use Stripe Radar data for this purpose (see B8).

10.5 Nothing in this Part gives us rights to use your Buyer Data to benefit other merchants except as in B8, or in aggregated or de-identified form under 10.4.

11. Export controls, sanctions and anti-corruption

11.1 You will not use, export or re-export the products in breach of US or other applicable export control or sanctions laws. You confirm you are not on a US, UK, EU or UN sanctions list and are not owned or controlled by anyone who is.

11.2 Each party will comply with applicable anti-bribery and anti-corruption laws in connection with these Terms.

12. General

12.1 Governing law and venue. These Terms are governed by the laws of the State of Delaware, without regard to conflict-of-laws rules. The state and federal courts located in New Castle County, Delaware have exclusive jurisdiction, and each party submits to them. There is no arbitration.

12.2 Changes. We may change these Terms. For material changes we will give 30 days' notice by email to the notices address on your Account and by an in-product notice. If you do not agree, you can uninstall before the change takes effect. Continued use afterwards is acceptance. Changes never reduce credits already in your balance (see B9.12).

12.3 Notices. We send notices to the email address associated with your Account or your Stripe Dashboard owner. You send notices to support@gocanonical.com and by post to 2261 Market Street, STE 10849, San Francisco, CA 94114, United States. Email notices are effective when sent unless a bounce is received.

12.4 Assignment. You may not assign these Terms without our written consent, except to a successor in a merger or sale of substantially all your business that accepts these Terms. We may assign them to an affiliate or a successor.

12.5 Entire agreement; severability; no waiver. These Terms (with the schedule, DPA and any signed order) are the entire agreement on their subject. If a provision is unenforceable, the rest remains in effect. A delay in enforcing a right is not a waiver.

12.6 Force majeure. Neither party is liable for delay or failure caused by events beyond its reasonable control, including outages of Stripe, cloud providers or Sources.

12.7 Third parties. No one other than the parties has rights under these Terms. Buyers are not parties and have no rights under them.

12.8 Relationship. The parties are independent contractors.

12.9 Contact. support@gocanonical.com for support, privacy and legal notices. This replaces earlier contact addresses on GoCanonical pages.

Part B. Schedule 1: Clue

B1. What this schedule covers

This schedule applies to Clue ("Clue"), the Stripe App that adds a drawer to your Stripe Dashboard. It is part of the Terms. If it conflicts with Part A, this schedule applies to Clue.

B2. The service

2.1 Clue reads Stripe data for a payment or customer you open, compares the identity the Buyer claimed (name, email, phone, billing and shipping address) against Stripe data and against lookups we run, and shows you:

• identity-consistency checks;
• a verdict label (one of four labels) computed by fixed rules in code;
• a short summary written by an AI model;
• on-demand explanations ("Explain");
• for blocked and failed payments, an explanation of why the payment was stopped (the "Decision Explainer"); and
• a merchant profile and policy settings that tune how the verdict is reached for your business, which we may suggest from information about your business and apply to accounts that you have not edited (you can change or pin any setting).

2.2 Clue is decision support, not a decision. Clue does not approve, decline, refund or cancel anything. It does not write to your Stripe Account. You decide what to do, and you are responsible for that decision.

2.3 What Clue looks up. Within your credits and daily ceiling, on the first open of a Buyer Clue runs every lookup for which it has an input: email, phone, address, IP address, or name and address together. Clue does not apply order-value thresholds to decide which lookups to run. Some lookups need specific data, and do not run without it:

• the carrier check needs a first and last name in the order, and receives the billing address with the name (see the Privacy Policy);
• property records need a confirmed US address; and
• a lookup you have switched off in your settings does not run.

Clue also does not run lookups that use credits when your account is out of credits, has reached its daily ceiling (B10.1), or when we have paused lookups across all accounts (B10.1). It then shows stored results only. Repeat opens use stored results for a limited time (see the Privacy Policy retention table). Stored results, failed lookups and re-opens of the same Buyer within 24 hours use no credits (B9.7).

2.4 Data sync. Installing Clue enrols your Account in our data sync. We copy up to the last 12 months of payment history from your Stripe Account (including charges, payment intents, refunds, disputes, events (the last 30 days, which is Stripe's limit), early fraud warnings, reviews, customers and payment methods) and then receive live updates as they happen. We keep the synced copy so that Clue can, for these purposes only, match repeat customers and households from a Buyer's history, make checks faster, produce signals based on that history, and run features that work automatically. Those history-based features are being built, and today's lookups do not read the synced copy. Uninstalling ends our access to your Stripe account, and the synced copy is handled as set out in B12.4. The sync is part of the service. It is not a separate opt-in.

B3. Permitted purpose

You may use Clue and its Results only to assess fraud and payment risk on your own Stripe transactions and customers. You may not use them for any other purpose.

B4. Prohibited uses

You will not, and will not let anyone else:

1. use Clue or Results to decide eligibility for, or terms of, credit, insurance, employment, housing or tenancy, or for any purpose covered by the US Fair Credit Reporting Act ("FCRA") or similar laws;
2. treat Clue or Results as a consumer report. Clue is not a consumer reporting agency, and Results are not consumer reports. We do not assemble or evaluate information to supply to others for the purposes listed in item 1;
3. use Clue to screen people for any purpose other than fraud and payment risk, to locate, track, profile or surveil an individual, or to stalk, harass, threaten or intimidate anyone;
4. make a decision that discriminates on the basis of a characteristic protected by law (including race, colour, religion, sex, national origin, age, disability or marital status), or use a Result as a proxy for one;
5. take a final adverse action against a Buyer based only on a Result, without human review (see B5);
6. resell, sublicense, export, publish or redistribute Results, or provide them to a third party (other than your own professional advisers, your payment processor and your insurers or auditors, as needed, under confidentiality);
7. scrape, crawl, bulk-extract, or build a dataset or competing product from Clue or Results, or use them to train or improve any model;
8. reverse engineer, probe, or try to discover or access our Sources, or bypass a limit, rate limit or security control;
9. use Clue for transactions that do not run through your Stripe Account, or evaluate non-Stripe transactions using Stripe Radar data (Stripe's Radar terms prohibit this); or
10. use Clue in violation of law or of the Stripe Terms.

We may suspend use we reasonably believe breaches this section (see section 8.2).

B5. Your responsibilities

You are responsible for:

1. having a lawful basis for processing Buyer Data, and for giving Buyers a privacy notice that discloses fraud screening by service providers, in the form the law requires where you operate;
2. human review before any adverse action on a Buyer (such as cancelling an order or blocking a customer) that is based in whole or part on a Result, and for giving Buyers a fair way to contest a decision where the law requires one;
3. complying with the Stripe Terms, including the Stripe Radar terms, and with laws that apply to your business;
4. the accuracy of any key or setting you provide, including any restricted Stripe API key you paste into the settings page, and giving Clue only the access the settings page asks for; and
5. keeping the list of people who can open Clue in your Stripe Dashboard up to date.

B6. AI output

6.1 The summary, the Explain text and the merchant profile suggestions are produced by an AI model. They can be wrong, incomplete or out of date. Read them as a prompt for review, not as facts.

6.2 The verdict label is computed by deterministic rules in code, not by the AI model. The model writes a short sentence, cannot choose the label, and is checked so that it does not contradict it.

6.3 We limit what goes to the model. We remove raw email addresses, phone numbers and IP addresses, and we do not send licensed record values. The Privacy Policy lists what is and is not sent.

6.4 Do not rely on AI output without review.

B7. Third-party data and Sources

7.1 Results are built from Stripe data you grant access to, your own merchant profile, public records, licensed commercial records and our own analysis. The kinds of Sources include: email reputation and breach records (including Have I Been Pwned), domain records, public profile directories, phone carrier records, postal address data, property and deed records, person records and IP network intelligence.

7.2 We do not name our Sources in the product. We list them as sub-processors where the law requires (see gocanonical.com/subprocessors). Sources can change or be removed at any time.

7.3 You receive a limited right to use Results internally under B3. Some Sources impose conditions on how Results may be used. These are reflected in B3, B4 and B5, and you must comply with them.

7.4 No warranty of completeness. Sources are incomplete and can contain errors. "No public record found" is not evidence of fraud. A mismatch is a reason to look closer, not proof that someone is lying.

7.5 Where a Result shows a name or value from a record next to a value from Stripe, it is shown for comparison only. You may not copy it into other systems or use it for another purpose.

B8. Stripe and Radar data

8.1 Clue is not a Stripe product and is not endorsed by Stripe. The Stripe Apps terms and your other Stripe Terms apply alongside these Terms.

8.2 Permissions. Clue asks for read permissions on your Stripe data (customers, charges, payment intents, setup intents, payment methods, Checkout Sessions, reviews, disputes and events), your business profile (required, so that we can tune Clue to your business and contact your business about your account), and the email of each Dashboard user who opens Clue (so that we can send account notices and reply to support requests; see the Privacy Policy). Stripe shows the purpose of each permission when you install. Clue asks for no write permission. You approve permissions at install. A later change in permissions requires you to re-authorise.

8.3 Radar data. Where Clue reads Stripe Radar data (such as risk scores and levels, rule outcomes, reviews and early fraud warnings), we use it only as your agent, for your own fraud prevention, on your own transactions. We do not make it available to other merchants or third parties, use it to train models, use it in benchmarks, or use it to build a product for anyone else. We stop using Radar data when you uninstall and delete it on the clock in B12.4, or sooner when Stripe requires.

8.4 Uninstall. Uninstalling removes our access to your Stripe Account. Section B12 explains what we then delete and keep.

B9. Fees: plans and credits

9.1 Free credits. Each Stripe account receives 1,000 free credits once, the first time Clue is used in live mode. A live account that has never used Clue with charges enabled receives nothing until it does. We hold the grant back while Stripe shows your account cannot yet accept charges. Uninstalling and reinstalling does not give a second grant. Free credits do not expire while Clue is installed. They have no cash value, cannot be sold, transferred or redeemed for money, and we may withdraw them if we reasonably believe you are abusing them (for example by creating accounts to collect free credits). Accounts with a separate written agreement with us are governed by that agreement.

9.2 Sandbox demo mode. A Stripe sandbox gets no credits and is never charged. In a sandbox, checks that use only your own Stripe data (history, linked buyers, Radar and the Decision Explainer, and the verdict) work as normal and cost nothing. Outside-record lookups run only for the built-in sample buyers, using sample data; for any other buyer they are not run, and the drawer says so. Clue's own test accounts are exempt. You can try a purchase from a sandbox in Stripe test mode: no money moves, and the test credits it grants are labelled "test", are separate from live credits and have no value.

9.3 Plans. You can subscribe to a monthly plan: Starter (US$25 a month, 1,000 credits a month), Growth (US$99 a month, 5,000 credits a month) or Scale (US$249 a month, 15,000 credits a month). The plan, its price and its credits are shown before you pay. Plans are bought on the page that the Clue drawer links to (gocanonical.com/clue/credits), which takes you to Stripe Checkout. Stripe processes the payment and issues invoices and receipts.

9.4 Auto-renewal and cancellation. A plan renews automatically each month, and we charge your payment method on each renewal, until you cancel. You can change plan or cancel at any time in "Manage plan", which opens the Stripe Customer Portal. An upgrade applies immediately and we charge you straight away, for the rest of the current billing period pro rata; it adds credits in proportion to what you paid, at the new plan's rate, and they expire at the end of that period. A downgrade takes effect at the end of the current billing period: nothing is refunded or credited, and you keep the current plan and its credits until then. Cancelling takes effect at the end of the current billing period: you keep the plan and its credits until then, and you are not charged again. We do not refund the rest of a billing period on cancellation, except as section 9.10 says.

9.5 Monthly credits. We add a plan's monthly credits when an invoice for the plan is paid. They expire at the end of the billing period they were granted for, whether or not you have used them, and Clue uses them before boost credits and free credits. Credits do not roll over. If a payment fails, we add no credits for it.

9.6 Boost. A boost costs US$30 and adds 1,000 credits. You can buy one or more at once, with or without a plan. Boost credits do not expire while Clue is installed on your account. If you uninstall, we keep your credit ledger so that a reinstall within 24 months of uninstalling restores your balance (see B12.3). Unused boost credits are not refunded on uninstall.

9.7 What uses credits. Credits are used when a lookup on a paid source returns an answer, and for the AI summary (3 credits) only when that same open also used credits on a lookup. Each lookup uses a fixed number of credits, shown in the app's settings; one open can use at most 36. A source that finds nothing on file still uses its credits, because "nothing on file" is an answer; the exception is the person-record lookup, which uses none when it finds no record. Credits are not used when Clue serves a stored result, when a lookup fails, is withheld or does not run, when you re-open the same Buyer within 24 hours, for checks that read only your Stripe data, for lookups on the public profile, breach and domain sources, or for Explain. A second AI summary of the same open is free.

9.8 Balance and tracking. Your balance, the credits used by each open, your plan and its renewal date are shown in the Clue drawer and settings, including a usage indicator for the current period and a history of credit use. Our records of credit use are the record of account unless you show an error.

9.9 When the balance is zero. Clue stops running lookups that use credits, and shows stored results and the checks that use only your Stripe data. An open that starts with a positive balance runs to the end, and an open never leaves your balance below zero. Only a refund or a dispute can: if a payment is refunded or disputed and credits from it were already used, your balance can go below zero, and the next credits you receive cover that first, once; later credits are not reduced. You can subscribe or buy a boost to continue.

9.10 Refunds and disputes. Plan payments and boosts are non-refundable, except where the law requires a refund, where we made a billing error (for example, charging you twice), or as section 8.4 or the DPA (section 6.3) says. If a plan payment or boost is refunded or disputed with your card issuer, we remove the credits it bought, in proportion to the amount refunded. For a plan payment those credits are taken from the billing period the payment covered. If you win a dispute on a charge of ours, the credits it removed come back, once: while the billing period the payment covered is still running, into that period. If you win a dispute on a charge of ours after the period it paid for has ended, the credits come back as credits that do not expire. Credits have no cash value and we do not pay interest on balances.

9.11 Taxes. Prices exclude taxes. Where sales tax, VAT or a similar tax applies, it is calculated and added at checkout, and shown on your Stripe invoice or receipt.

9.12 Price and plan changes. We may change plan prices, plan sizes, boost prices or the number of credits a lookup uses, on at least 30 days' notice by email and in the product. A price change for an existing plan applies from the first renewal after the notice period ends, and you can cancel before then. Changes never reduce credits already in your balance or change a price you have already paid.

9.13 Marketplace listing. The Stripe Marketplace pricing field reads "Free trial available" and links to gocanonical.com/clue/pricing. That page and this section describe the same fees.

B10. Usage limits and fair use

10.1 Credits are not the only limit. Daily ceiling: each account can use up to 1,500 credits per UTC day on the Free and Starter plans, 5,000 on Growth and 15,000 on Scale. An account that has bought a boost and is on Free or Starter can use up to 5,000 credits per UTC day. We can raise or lower the ceiling for an account. It exists to stop a fault, a runaway loop or abuse from causing unbounded cost, so a large balance does not lift it above these figures. The ceiling is checked before each open starts, so an open already running when it is reached can finish, and use can pass the ceiling by up to 36 credits. We also apply request-rate limits per user and per account, and a daily limit across all accounts on the cost of Sources and AI, which can pause lookups for everyone. We watch usage for patterns that suggest misuse, and may review or suspend an account that breaches these Terms (see section 8.2).

10.2 If a limit is reached, Clue pauses lookups that use credits until the limit resets (the daily ceiling resets at 00:00 UTC), shows stored results, tells you in the drawer that the ceiling was hit, and does not use credits for lookups it did not run. The figures above are also on our pricing page and FAQ.

10.3 We may suspend use that is unusual, automated or intended to avoid limits, in line with section 8.2.

10.4 Clue is for interactive use by your team. Automating opens, or using Clue to process Buyers in bulk, needs our written agreement.

B11. Data

The DPA applies to Buyer Data. Part A section 10 sets out who owns what, including aggregated data (10.4). The Privacy Policy describes what data Clue processes, from where and for how long.

B12. Term, uninstall and what happens to data

12.1 This schedule starts when you install Clue and continues until you uninstall it or it is ended under Part A.

12.2 Immediately on uninstall we stop reading your Stripe Account for lookups and delete the following: stored vendor lookup results, stored IP address observations, your merchant profile versions, and any restricted Stripe API key you gave us. We redact a limited set of reason codes in usage events. The synced copy of your Stripe data is deleted on the clock in B12.4.

12.3 We keep the following after uninstall, for audit, security and billing, in a form that has no buyer contact details or raw values: usage records, verdict records and product events. They contain your Stripe account id, Stripe object ids (customer and payment ids), hashed identifiers, verdicts, costs and outcomes. We also keep your account settings and credit ledger so that a reinstall restores them: your credit balance is restored if you reinstall within 24 months of uninstalling. Unused boost credits are not refunded on uninstall. We keep billing and payment records for 7 years for tax and accounting. We also keep the record of the Terms version you accepted (1.5).

12.4 Synced data. Installing Clue enrols your account in the data sync (B2.4). When you uninstall, our access to your Stripe account ends, the sync stops, and we delete the synced copy within 30 days. If you reinstall before then, we keep it and the sync resumes.

12.5 Backups. Database backups that held deleted data are not restored to production, and age out on their normal schedule. Automated database backups expire within 7 days.

12.6 Radar data is part of the synced data and follows the clock in B12.4, or is deleted sooner at Stripe's request (8.3).

12.7 Deleted stored results can be re-created if you reinstall and open a Buyer again (this may use credits).

B13. Clue-specific disclaimers

Part A sections 9.2 and 9.3 apply. In addition, we are not responsible for: losses that result from your acting or not acting on a Result; the completeness of any Source; disruption caused by Stripe or a Source; or any Buyer's claim against you arising from your decision.

B14. Changes to this schedule

Section 12.2 (changes) applies.