Terms for app makers

1. Who these terms are between

These terms are a contract between you, the business or person who makes an app that other SplashSend accounts can install (the maker), and CKR Digital Limited, trading as SplashSend, a company registered in England and Wales (company number 17290887) whose registered office is 135 High Street, Needham Market, Suffolk, IP6 8DH. They apply to every public app you make under Apps, alongside our Terms of Service, which cover your own account. You agree to them on your app's page in SplashSend, before you send it to us to check or anyone else installs it.

2. Words used here

An account is a SplashSend customer that allows your app. Account data is anything your app receives through SplashSend about an account or the people on its list, including their details, what they did, their orders and the emails sent to them.

3. Whose data it is

Account data belongs to the account. For the personal data in it, the account is the controller and you process it on the account's behalf. You must meet the duties that UK data protection law, and the EU GDPR where it applies, place on a processor, and agree a data processing agreement with any account that asks for one.

4. What your app may do with account data

Use account data only to give the account the features it installed your app for, as your app's listing describes them. You must not:

• sell, rent or give away account data;
• use it to advertise to the people on an account's list, or to build profiles of them for anyone other than that account;
• use one account's data for another account, or for your own marketing;
• share it with anyone except providers who handle it for you under written terms that protect it as well as these do.

5. Asking for permissions

Ask only for the permissions your app uses, and say in your app's details why it needs each one. Ask for people's other details (contacts:details) only if your app shows or uses them. If your app needs a new permission, or will use account data for something new, change its details first. We check it again before accounts are asked.

6. Email and consent

Your app must never email or text someone who hasn't agreed to hear from the account, and never subscribe someone again after they unsubscribed. It must not try to get round SplashSend's protections, such as unsubscribes, bounce and complaint suppression, sending limits or the checks before a send. If your app sends campaigns, the account must choose what is sent and who to. Follow the laws on marketing messages that apply to the people being contacted, including PECR in the UK, CAN-SPAM in the US and CASL in Canada.

7. Privacy notices

Give us an https address for privacy notices on your app's page, and check each notice's signature with the secret shown there. Answer each notice with a 2xx status as soon as you receive it, and act on it within 30 days:

• person.erased: erase everything you hold about that person for that account.
• account.erased: erase everything you hold for that account. We send it 48 hours after an account removes your app, and when an account closes.
• person.data_request: send what you hold about that person to the address in reply_to.

Keep account data only while you need it for the account. You may keep something longer only where the law requires it, and then only for that purpose.

8. Keeping data safe

Keep your client secret, your notices secret and every token on your servers, never in a web page or in an app people download. Encrypt account data when it travels and where you store it, and let only the people who need it reach it. If you think a secret has been seen, make a new one on your app's page straight away. Tell us at hello@splashsend.com within 72 hours of learning that account data may have been lost, seen or changed without permission, and help the accounts affected.

9. Your listing and support

Your app's name, description and pictures must say honestly what it does. Don't use SplashSend's name or logo in your app's name, and don't suggest we made it or are responsible for it. Your privacy policy must say what your app does with account data, how long you keep it and how to ask for it to be erased. Give a support email that is answered, and keep your app's details up to date.

10. Our checks

We check every public app before it is listed, and we may check it again at any time. We may ask how your app handles account data, try it on a test account, and look at the requests it makes. You must answer our questions truthfully. A check helps us decide whether to list an app. It is not a promise that the app is safe, and it doesn't make us responsible for it.

11. Stopping an app

We may stop your app straight away, which ends its access to every account, if we reasonably believe it breaks these terms or the law, or puts accounts or the people on their lists at risk. We will tell you why unless the law or someone's safety prevents it, and you can ask us to look again. We may also stop an app whose maker doesn't answer us within 14 days.

12. Your responsibility

You are responsible for your app and for what it does with account data. You will make good any loss, cost or claim we face because your app, or you, broke these terms or the law.

13. Our liability

We provide the API, the allow screen and the Apps store as they are, with no promise that they will suit your app or always be available, and we may change them. We will give notice of changes that would stop working apps where we can.

To the fullest extent the law allows, we have no liability to you under these terms or for your app, for any kind of loss, including lost profit, business, goodwill or data. We are not liable for anything that arises between you and an account. If we are found liable to you despite this, our total liability for all claims together is limited to £100.

Nothing in these terms limits liability that the law doesn't allow to be limited, such as liability for fraud, or for death or personal injury caused by negligence.

14. Apps are free to connect

Making an app and listing it in Apps is free. An app listed in Apps must be free for accounts to install and use with SplashSend. If it works with a service of yours that people pay for, such as a booking system with its own plans, you may charge for that service under your own terms, and your listing must say so. SplashSend doesn't take payments for apps.

15. Ending

You can delete your app at any time on its page. When it is deleted or stopped, erase all account data within 30 days unless the law requires you to keep it, and confirm that you have if we ask. Sections 3, 4, 7, 8, 12 and 13 still apply after these terms end.

16. Changes to these terms

We may change these terms. We will email the address on your account at least 30 days before a change that affects you, or sooner where the law or the safety of account data requires it. If you keep your app available after a change takes effect, you agree to the new terms.

17. Law

These terms are governed by the law of England and Wales, and the courts of England and Wales decide any dispute about them.

Questions

hello@splashsend.com