Last updated: September 3, 2026 These Terms of Use (“Terms”) are a legal agreement between Brandle & Co LLC, doing business as Account Canvas (“Account Canvas,” “we,” “us,” or “our”), and the person or organization installing, accessing, or using the Account Canvas Shopify application and related services (“Merchant,” “you,” or “your”). By installing Account Canvas, approving a subscription, or using the Service, you agree to these Terms. If you accept on behalf of an organization, you represent that you have authority to bind it. If you do not agree, do not install or use the Service. Our Privacy Policy, Subprocessors list, and any plan or order terms presented through Shopify are incorporated into these Terms.
1. The Service
Account Canvas helps Shopify merchants create and manage customer-account pages, sections, blocks, content, personalization, visibility conditions, forms, and workflows (the “Service”). The available features, limits, and placements depend on the selected plan, Shopify’s platform capabilities, and any approval Shopify requires. Account Canvas is an independent application and is not owned, sponsored, or endorsed by Shopify. Shopify operates its platform, app installation, customer accounts, APIs, and app billing under separate terms. “Shopify” and related marks belong to their respective owners.2. Eligibility and merchant account
You may use the Service only if you can form a binding contract and operate a valid Shopify store. You are responsible for:- maintaining the security of your Shopify account and staff permissions;
- all activity performed through authorized users of your store;
- keeping merchant contact, billing, and configuration information accurate;
- configuring and testing customer-facing content before publication; and
- promptly notifying us of suspected unauthorized access or security incidents related to the Service.
3. Merchant content and instructions
“Merchant Content” means content, configuration, images, links, templates, conditions, variables, workflow fields, submissions, and other information that you or your customers provide to the Service. You retain your rights in Merchant Content. You grant Account Canvas a worldwide, non-exclusive, royalty-free license to host, reproduce, adapt, transmit, display, and otherwise process Merchant Content only as reasonably necessary to provide, secure, support, and improve the Service, comply with law, and enforce these Terms. This license ends when the content is deleted, subject to normal backup, security, and legal retention. You represent that you have all rights, notices, consents, and lawful bases necessary for Merchant Content and for the instructions you give us. You are responsible for the accuracy, legality, and customer-facing effect of your content, conditions, links, offers, forms, and workflows.4. Customer data and privacy responsibilities
For personal information submitted by or about your customers, you are generally the controller or business and Account Canvas is your processor or service provider. You instruct us to process that information to provide the features you configure and as otherwise stated in these Terms. Section 15 contains the data-processing terms that apply to this relationship. You are responsible for:- complying with privacy, consumer-protection, accessibility, marketing, employment, and other laws that apply to your use of the Service;
- giving customers accurate privacy notices and obtaining consent where required;
- collecting only information reasonably needed for a disclosed purpose;
- responding to customer requests and submitting applicable requests through Shopify;
- ensuring that conditions and personalization do not unlawfully discriminate or make decisions with legal or similarly significant effects; and
- independently determining whether the Service is suitable for regulated or sensitive information.
5. Acceptable use
You must not use the Service to:- violate law, another person’s rights, Shopify’s rules, or these Terms;
- collect, request, submit, or store payment card numbers or security codes, Social Security or other government identifiers, health or medical information, passwords, one-time codes, access tokens, private keys, or authentication secrets;
- create deceptive, fraudulent, abusive, discriminatory, defamatory, infringing, or unlawful content or workflows;
- send spam or communications without required consent;
- access or attempt to access another merchant’s or customer’s data;
- probe, scan, disrupt, overload, reverse engineer, or circumvent the Service or its security, rate limits, plan limits, or access controls, except to the extent a right cannot lawfully be restricted;
- introduce malware or harmful code;
- resell, sublicense, or provide the Service as a standalone competing service without our written permission; or
- use the Service to train an artificial-intelligence model on Account Canvas software, documentation, or non-public data without our written permission.
6. Plans, trials, billing, and taxes
Plan prices, billing intervals, trials, limits, and features are shown in the Service and during Shopify’s billing approval. Shopify processes charges through the merchant’s Shopify account. By approving a charge, you authorize Shopify to bill the amount shown, including applicable recurring charges and taxes. Unless stated otherwise in the billing approval:- subscriptions renew for the displayed billing period until canceled;
- upgrades may take effect immediately and downgrades may take effect at the next billing period or as Shopify determines;
- uninstalling the app stops future use but does not automatically create a refund for charges already incurred; and
- taxes, currency conversion, and billing administration are handled under Shopify’s applicable terms.
7. Shopify and third-party services
The Service depends on Shopify and other third-party providers. Your use of those services is governed by their terms. We do not control and are not responsible for third-party platforms, merchant-selected links, apps, products, outages, policy changes, data, or acts. Changes made by Shopify can require us to modify, suspend, or discontinue a feature. Links or integrations do not imply endorsement. You are responsible for evaluating any third-party service you choose to connect or reference.8. Intellectual property
Account Canvas and its licensors own the Service, software, documentation, designs, templates supplied as part of the Service, trademarks, and all related intellectual property, excluding Merchant Content and third-party materials. Subject to these Terms, we grant you a limited, non-exclusive, non-transferable, revocable right to use the Service for your own Shopify business during the subscription term. If you provide suggestions or feedback, you grant us a perpetual, worldwide, irrevocable, royalty-free right to use it without restriction or compensation, without identifying you publicly unless you consent.9. Confidentiality
Each party may receive non-public information that a reasonable person would understand to be confidential. The receiving party will use it only to perform under these Terms, protect it with reasonable care, and disclose it only to personnel and providers who need it and are bound by confidentiality obligations. These duties do not apply to information that is public without breach, independently developed, rightfully received without restriction, or required to be disclosed by law after legally permitted notice.10. Security
We maintain reasonable administrative, technical, and organizational safeguards designed to protect the Service and personal information, as further described in the Privacy Policy. You acknowledge that no online service is completely secure. You must use reasonable security for your Shopify account and systems. If either party becomes aware of a security incident affecting the other party’s data, it will provide reasonably prompt information and cooperation consistent with its role and applicable law.11. Service changes, availability, and beta features
We may update the Service and its documentation. We aim to keep the Service available, but do not guarantee uninterrupted or error-free operation. Maintenance, emergencies, provider failures, Shopify changes, internet conditions, and events outside our reasonable control may affect availability. Features labeled beta, preview, early access, or similar are provided for evaluation, may be changed or discontinued at any time, and may be subject to additional limits. Do not use a preview feature for production-critical or sensitive processing unless we state that it is production-ready.12. Suspension and termination
You may stop using the Service and uninstall it through Shopify at any time. We may suspend or terminate access if you materially breach these Terms, fail to pay approved charges, create a security or legal risk, misuse the Service, or if Shopify requires or prevents continued operation. Where practical, we will give notice and an opportunity to cure before termination. On termination, your right to use the Service ends. Uninstalling deactivates the local plan and removes active app sessions. Merchant and customer data is deleted according to the Privacy Policy, Shopify’s mandatory redaction process, and applicable law. Sections that by their nature should survive—including payment obligations, confidentiality, intellectual property, disclaimers, liability limits, indemnity, disputes, and data-protection duties—will survive.13. Compliance with law and export controls
Each party will comply with laws applicable to its own performance. You must not use the Service in or for the benefit of a sanctioned country, organization, or person, or in violation of U.S. export-control or sanctions laws. You represent that you are not prohibited from receiving the Service under those laws.14. Support
Support is available at support@accountcanvas.app. Support scope and response times may vary by plan and issue severity. Do not send secrets, payment-card data, or unredacted customer records by ordinary email.15. Data Processing Addendum
This Section 15 (the “DPA”) applies when Account Canvas processes personal information on your behalf as a processor, service provider, or contractor (“Service Data”). It forms part of the Terms and is intended to satisfy applicable controller-processor contract requirements. If you need signed transfer clauses or a separately executed DPA, contact us before using the Service for affected data.15.1 Roles and instructions
You are the controller or business for Service Data and Account Canvas is the processor or service provider. You appoint us to process Service Data only:- to provide, secure, maintain, and support the Service described in these Terms;
- according to your documented use and configuration of the Service;
- as required by applicable law, in which case we will notify you before processing unless legally prohibited; and
- for other written instructions we accept as consistent with the Service and law.
15.2 Processing details
- Subject matter and purpose: operating merchant-configured Shopify customer-account content, personalization, visibility conditions, forms, workflows, notifications, support, security, privacy requests, and related product operations.
- Nature of processing: collecting, receiving, accessing, organizing, encrypting, storing, retrieving, evaluating, transmitting, displaying, copying to merchant-authorized Shopify records, exporting, restricting, and deleting data.
- Duration: for the merchant’s use of the Service and the retention and deletion periods in the Privacy Policy.
- Data subjects: merchant personnel, Shopify customers, authorized customer-account users, and people whose information is included in an authorized workflow.
- Data categories: identifiers and contact data; Shopify customer, order, product, file, store-credit, and metafield data; customer preferences; workflow field labels and responses; support and security information; and technical usage data.
- Sensitive data: the Service is not intended for payment-card data, government identifiers, health data, credentials, or special-category data. You must not direct us to process those categories without a separate written agreement.
15.3 Confidentiality and personnel
We will ensure that people authorized to process Service Data are subject to appropriate confidentiality obligations and receive access only as needed for their duties. We will maintain access controls and periodically review production access.15.4 Security measures
Taking into account the state of the art, implementation costs, processing context, and risk, we maintain measures designed to protect Service Data, including:- Shopify authentication, signed requests, and shop/customer ownership checks;
- tenant-scoped authorization and least-privilege access;
- TLS for supported data in transit;
- application-level authenticated encryption for protected stored payloads and tokens;
- input validation, prohibited-data screening, request-size limits, rate controls, and webhook replay and ordering protections;
- minimized and sanitized monitoring and analytics;
- retention, redaction, and deletion controls; and
- incident-response, dependency-review, backup-provider, and change-management practices appropriate to the Service.
15.5 Subprocessors
You give general written authorization for the subprocessors listed at Subprocessors. We will require each subprocessor that handles Service Data to provide data-protection obligations appropriate to its role. We remain responsible for our obligations under this DPA when a subprocessor performs them on our behalf. We will update the Subprocessors page before a new subprocessor begins materially different processing where reasonably practicable and will provide additional notice when required by contract or law. You may object on reasonable data-protection grounds within 15 days after notice by emailing support. The parties will work in good faith on a reasonable alternative. If none is reasonably available, either party may terminate the affected Service without penalty other than charges already incurred.15.6 Assistance and individual rights
Taking into account the nature of processing, we will provide reasonable assistance for requests to access, correct, delete, restrict, or port Service Data and for your obligations involving security, breach notices, data-protection impact assessments, and regulator consultations. Shopify privacy webhooks are the primary mechanism for Shopify-customer requests. If we receive a request directly concerning Service Data, we will refer it to you unless law prevents us from doing so.15.7 Security incidents
We will notify you without undue delay after confirming a breach of security that leads to accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Service Data (a “Personal Data Breach”). We will provide information reasonably available to help you meet applicable notice duties and take reasonable steps to contain and remediate the incident. Notice is not an admission of fault.15.8 Return and deletion
At termination or on a valid instruction, we will delete or return Service Data as described in the Privacy Policy, unless law requires retention. Shopify-hosted copies remain subject to Shopify and merchant control. Data in provider backups may remain isolated until overwritten under the provider’s normal schedule.15.9 Information and audits
We will make information reasonably necessary to demonstrate compliance with this DPA available through our documentation, responses to reasonable security questionnaires, and relevant independent provider materials. If that is insufficient, you may request an audit no more than once per year, unless a confirmed incident or regulator requires otherwise. Audits must be proportionate, protect other customers and confidential information, avoid unreasonable operational disruption, and be at your expense unless the audit identifies our material breach.15.10 International transfers
You authorize processing in the United States and other locations used by the approved subprocessors. The parties will use a lawful transfer mechanism when required. Where the EU Standard Contractual Clauses are required, the parties will complete and enter the applicable 2021 controller-to-processor module and, where relevant, processor-to- processor module, together with any required annexes and supplementary measures. For UK restricted transfers, the parties will use the applicable UK Addendum or International Data Transfer Agreement. The parties will reasonably cooperate with transfer-impact or risk assessments. Nothing in these Terms by itself represents that unsigned or incomplete standard clauses have been executed. Contact us before an affected transfer if your organization requires those clauses.15.11 U.S. state service-provider terms
To the extent U.S. state privacy law applies to Service Data, Account Canvas will:- process it only for the limited and specified business purposes in these Terms;
- not sell it or share it for cross-context behavioral advertising;
- not retain, use, or disclose it outside the direct business relationship or combine it with personal information from another source except as permitted by law;
- provide the same level of privacy protection required of an applicable service provider or processor;
- notify you if we determine we can no longer meet those obligations; and
- allow you to take reasonable steps to stop and remediate unauthorized processing.
15.12 DPA priority
If this DPA conflicts with another part of the Terms regarding Service Data, this DPA controls. Executed standard contractual clauses control over conflicting provisions to the extent required by those clauses.16. Disclaimers
TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE.” ACCOUNT CANVAS DISCLAIMS ALL EXPRESS, IMPLIED, AND STATUTORY WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, AND THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR MEET EVERY LEGAL OR BUSINESS REQUIREMENT. ACCOUNT CANVAS DOES NOT PROVIDE LEGAL, TAX, ACCOUNTING, OR COMPLIANCE ADVICE. YOU ARE RESPONSIBLE FOR REVIEWING YOUR CONFIGURATION, CUSTOMER-FACING CONTENT, AND LEGAL OBLIGATIONS. NOTHING IN THESE TERMS EXCLUDES A WARRANTY THAT CANNOT LAWFULLY BE EXCLUDED.17. Limitation of liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, PUNITIVE, OR CONSEQUENTIAL DAMAGES, OR FOR LOST PROFITS, REVENUE, GOODWILL, OR DATA, EVEN IF ADVISED THAT SUCH DAMAGES WERE POSSIBLE. ACCOUNT CANVAS’S TOTAL LIABILITY ARISING OUT OF OR RELATING TO THE SERVICE OR THESE TERMS WILL NOT EXCEED THE GREATER OF (A) THE FEES YOU PAID TO ACCOUNT CANVAS THROUGH SHOPIFY DURING THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO LIABILITY OR (B) US $100. These limits do not apply to liability that cannot lawfully be limited. Some jurisdictions do not allow certain exclusions, so parts of this section may not apply.18. Indemnification
To the extent permitted by law, you will defend, indemnify, and hold harmless Brandle & Co LLC and its officers, employees, and contractors from third-party claims, damages, penalties, and reasonable costs arising from Merchant Content, your instructions, your customer-facing use of the Service, or your material violation of law or these Terms. We will promptly notify you of a covered claim and reasonably cooperate at your expense. You may not settle a claim in a way that admits fault by or imposes obligations on us without our written consent.19. Governing law and disputes
These Terms are governed by the laws of the State of Indiana, without regard to its conflict-of-law rules. Subject to any rights that cannot lawfully be waived, the parties submit to the exclusive jurisdiction of the state and federal courts located in Indiana. Before filing a claim, each party will make a good-faith effort for at least 30 days to resolve the dispute through written notice. Nothing in this section prevents either party from seeking urgent injunctive relief or using an applicable small-claims procedure. Mandatory consumer protections in a merchant’s jurisdiction remain unaffected where they cannot lawfully be waived.20. Changes to these Terms
We may update these Terms prospectively. We will post the revised Terms and update the date above. For a material change, we will provide reasonable additional notice through the Service, Shopify, email, or our website when required. Continued use after the effective date constitutes acceptance, except where law requires express consent. If you do not agree to a material change, your remedy is to stop using and uninstall the Service before it takes effect.21. General terms
Neither party is liable for delay caused by events beyond its reasonable control. You may not assign these Terms without our written consent, except in connection with a merger or sale of substantially all relevant assets; we may assign them in connection with a reorganization or business transaction. No agency, partnership, employment, or joint venture is created. Failure to enforce a provision is not a waiver. If a provision is unenforceable, it will be limited to the minimum extent necessary and the remainder will continue. Headings are for convenience. These Terms are the complete agreement about the Service and supersede prior discussions on that subject.22. Contact and legal notices
Questions and notices may be sent to: Brandle & Co LLC, doing business as Account Canvas3211 Boulevard Place
Indianapolis, Indiana 46208
United States
support@accountcanvas.app Notices to a merchant may be delivered through Shopify, the Service, the merchant contact associated with Shopify, or another address the merchant provides.