Terms of service

1. The agreement

These terms are between [Legal entity name], registered at [registered address], [country] ("Auditor", "we", "us"), and the business that installs the Auditor app ("you", "the merchant").

You accept these terms when you install Auditor in a BigCommerce store or use the dashboard. If you are agreeing on behalf of a company, you confirm you are authorised to bind it. If you do not accept them, uninstall the app.

Our privacy statement forms part of this agreement. Where you and we have signed a separate written agreement or data processing agreement, that document wins over these terms on anything it covers.

2. What Auditor does

Auditor receives notifications of events in your BigCommerce store, converts each into an audit entry, stores those entries for the retention period of your plan, and gives you a dashboard to search, filter, export and be alerted on them.

Auditor holds read-only permissions on your store. It does not create, edit or delete anything in your store, and it cannot restore anything you delete. It records; it does not act.

3. What the record is and isn't

This section matters more than any other, so it is early and in plain language.

• We can only record what BigCommerce tells us. Auditor depends on the events BigCommerce sends and the detail it includes. If BigCommerce does not emit an event, delays it, or omits a field such as the acting staff member or the source IP address, that information will not appear in your record. We do not control BigCommerce's platform.
• The record starts at installation. Auditor has no view of anything that happened in your store before you installed it.
• Attribution can be indirect. Changes made by another app, an integration or an API token are attributed to that app or token, because that is how the platform reports them — not to the individual who triggered it.
• Auditor is not a compliance certification. Installing it does not make you compliant with PCI DSS, SOC 2, GDPR, or any other standard or law. Whether your record satisfies a particular auditor, regulator or court is a judgement for them, and for your own advisers. We make no representation that it will.
• Alerts are not a monitoring service. Anomaly alerts flag patterns for a person at your business to review. They are best-effort, may raise false positives, and may miss things. Nobody at Auditor is watching your store on your behalf.
• Auditor is not a backup. Entries record values as they were, which can help you reconstruct data by hand, but Auditor is not a backup or disaster-recovery product and must not be relied on as one.

4. Your account and access

You must be a business, at least 18 years old, and able to enter a contract. You are responsible for everyone you give access to the dashboard, including colleagues, contractors and agencies, and for their compliance with these terms.

Keep your credentials secure and tell us promptly at security@auditorapp.com if you think an account has been compromised.

5. Plans, trial and fees

• Trial. Where offered, the trial runs 14 days from installation. Uninstall before it ends and you are not charged.
• Fees. Your plan's fee, retention window and monthly event allowance are those shown on the pricing page when you subscribe. Fees are stated exclusive of tax; you are responsible for any tax your jurisdiction adds.
• Billing. BigCommerce collects payment for the app through your store account, on its own billing cycle and terms. We do not process your card. If BigCommerce tells us a payment has failed, we may suspend the dashboard until it is resolved. Recording continues during a short grace period where we can.
• Allowances. If you exceed your monthly event allowance we keep recording and notify you. We will not bill you for an overage without telling you first and giving you the chance to change plan.
• Changing plan. Upgrades take effect immediately and are pro-rated. Downgrades take effect at your next billing date and shorten your retention window — see clause 8.4.
• Price changes. We give at least 30 days' notice by email before a price change affects you. You may uninstall before it takes effect.
• Refunds. Fees are not refundable except where the law requires it or we agree otherwise in writing. Refund requests go through BigCommerce; write to us as well and we will support a fair one.

6. Your responsibilities

Because an audit log contains information about real people, some duties sit with you and cannot sit with us:

• Tell your staff that their activity in the store is recorded, and for how long. In many jurisdictions monitoring employees without notice is unlawful.
• Make sure your own privacy notice covers the fact that you keep an audit history, and set a retention period you can justify.
• Control who at your business can read the record. It can contain customer addresses and other personal data.
• Respond to requests from your staff and customers about their data. You are the controller of the audit history; we process it for you.
• Keep the store data itself lawful. We record what your store does; we do not vet it.

7. Acceptable use

Do not:

• use Auditor to monitor a person for a purpose unrelated to operating and securing your store, or in a way that is unlawful where they are;
• install it on a store you are not authorised to administer;
• attempt to reach another merchant's data, probe or overload our systems, or bypass a plan limit;
• scrape, resell, sublicense or white-label the service without our written agreement;
• reverse engineer the app except where the law expressly permits it;
• submit anything to us that infringes someone's rights or contains malware.

Good-faith security research is welcome — tell us privately first at security@auditorapp.com and we will not pursue you for it.

8. Your data

8.1 It stays yours. You own your store data and the audit history recorded from it. Nothing here transfers ownership to us.

8.2 What we may do with it. You grant us a limited licence to receive, store, process and display that data solely to provide the service to you, to support you, and to keep the service secure. We do not sell it, share it for advertising, or use it to train machine-learning models. Anomaly detection runs on your store's own data, for your store only.

8.3 Aggregate statistics. We may produce aggregated, de-identified figures about how the service is used — event volumes, feature usage — which cannot identify you, your staff or your customers, and we may use those to run and improve Auditor.

8.4 Retention and deletion. Entries older than your plan's retention window are removed on a rolling basis. When you downgrade, entries outside the new window stop being visible and are held for 30 days before deletion. When you uninstall, we revoke our access to your store immediately and keep your history available for export for 30 days, then delete it. You may ask us to delete it sooner at privacy@auditorapp.com.

8.5 Integrity. Audit entries are append-only for as long as they exist: neither your staff nor ours can alter or remove an individual entry. Deletion happens by retention window, or on a documented request from you.

8.6 Data protection. The privacy statement explains our roles. Where you need a data processing agreement, ask us and we will provide one.

9. Availability and support

We aim to keep Auditor available continuously and to record events as they arrive, but we do not promise uninterrupted service unless a separate written service level agreement says so. [If you publish an SLA, link it here and state the target and the remedy.]

We may carry out maintenance, and will give notice in the dashboard or by email for anything we expect to be disruptive. Where an outage delays event delivery, we backfill entries when we can, though BigCommerce's own retry limits may make some events unrecoverable.

Support is by email at the response targets on the pricing page, during business days in [timezone].

10. Intellectual property

Auditor, its software, dashboard, documentation, name and branding belong to us and our licensors. We grant you a non-exclusive, non-transferable, revocable right to use the service during your subscription, for your own business. All rights not expressly granted are reserved.

If you send us feedback or a feature suggestion, we may use it without obligation to you. It is a suggestion, not a contribution.

Auditor is an independent product. BigCommerce is a trademark of its owner, and we are not affiliated with, endorsed by or sponsored by BigCommerce.

11. Confidentiality

Each of us may learn confidential information about the other. Each will use it only to perform this agreement, protect it with at least reasonable care, and not disclose it except to people who need it and are bound to keep it confidential, or where the law compels disclosure. This does not apply to information that is public through no fault of the receiver, or independently developed.

12. BigCommerce and other third parties

Auditor depends on BigCommerce's platform and on the infrastructure providers listed in our privacy statement. Your relationship with BigCommerce is governed by your agreement with them, and we are not responsible for their acts, their platform's behaviour, their billing, or changes they make to their APIs and events — including changes that reduce what Auditor can record. If a platform change materially reduces the service, we will tell you and, if we cannot restore it, you may cancel and we will refund the unused portion of a prepaid term.

13. Disclaimers

We provide Auditor with reasonable skill and care. Beyond that, and to the fullest extent the law allows, the service is provided "as is" and we disclaim all other warranties, express or implied, including fitness for a particular purpose, merchantability and non-infringement.

In particular, and without limiting clause 3, we do not warrant that the record will be complete, that every event will be captured, that an alert will fire, that the service will be error-free or uninterrupted, or that the record will satisfy any audit, regulation, standard or evidentiary requirement.

Nothing in these terms excludes a right you have under consumer law or any liability that cannot lawfully be excluded, including for death or personal injury caused by negligence, or for fraud.

14. Limitation of liability

Subject to clause 13:

• Neither of us is liable for indirect or consequential loss, loss of profit, revenue, anticipated savings, goodwill or business opportunity, or for loss of data beyond the cost of restoring it from your own backups, however caused.
• Our total liability arising out of or in connection with this agreement, in contract, tort (including negligence) or otherwise, is limited to the greater of [the fees you paid us in the 12 months before the claim arose] and [USD 100].
• Each of us must bring any claim within [12] months of becoming aware of the facts giving rise to it.

These limits reflect that Auditor is a low-cost record-keeping tool, not an insurer of your store. If you need cover beyond them, ask us about an enterprise agreement.

15. Indemnity

You will defend and indemnify us against claims, losses and reasonable costs arising from your use of Auditor in breach of these terms, from your failure to give your staff or customers the notices described in clause 6, or from a third-party claim that data you put through the service infringes their rights.

16. Suspension and termination

You may end this agreement at any time by uninstalling Auditor from your store. That stops future billing; fees already due remain payable.

We may suspend or end it: if you materially breach these terms and do not fix it within 14 days of our written notice; immediately, if your use threatens the security or integrity of the service or is unlawful; or if BigCommerce tells us your payment has failed and it stays unresolved. We may also withdraw the service entirely on 90 days' notice, refunding any prepaid unused period.

On termination, your access ends, your history stays exportable for 30 days, and clauses 8, 10, 11, 13, 14, 15 and 18 survive.

17. Changes

We may change the service — adding, altering or retiring features. Where a change materially reduces a core function, we give at least 30 days' notice by email.

We may also change these terms. We update the version and date at the top, and for material changes we email the account contact at least 30 days before they take effect. Continuing to use Auditor after that date means you accept the new terms; if you do not, uninstall the app.

18. Governing law and disputes

This agreement is governed by the law of [jurisdiction], and the courts of [jurisdiction] have exclusive jurisdiction, except that either of us may seek an injunction anywhere to protect intellectual property or confidential information.

If you are a consumer, or the law where you live gives you the right to bring proceedings locally, nothing here removes that right.

Before starting proceedings, please write to us at support@auditorapp.com. Most disputes are a misunderstanding about what a log entry shows, and we would rather resolve it in a conversation.

19. General

• Entire agreement. These terms, the privacy statement and any signed agreement are the whole agreement between us and replace earlier discussions.
• Assignment. You may not assign this agreement without our consent. We may assign it to a group company or a buyer of our business.
• Severability. If a clause is unenforceable, the rest stands.
• No waiver. Not enforcing a right straight away does not waive it.
• Force majeure. Neither of us is liable for a failure caused by events beyond reasonable control, including platform or infrastructure outages.
• Notices. We write to the email on your account. You write to the addresses in clause 20.
• No partnership. Nothing here creates a partnership, agency or employment relationship.
• Third parties. Nobody other than you and us has rights under this agreement.

20. How to reach us

Privacy statement · Pricing · Contact us