> ## Documentation Index
> Fetch the complete documentation index at: https://docs.accountcanvas.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Terms of Use

> Terms governing merchant access to and use of Account Canvas.

**Effective date: September 3, 2026**\
**Last updated: September 3, 2026**

These Terms of Use ("Terms") are a legal agreement between Brandle & Co LLC,
doing business as Account Canvas ("Account Canvas," "we," "us," or "our"), and
the person or organization installing, accessing, or using the Account Canvas Shopify
application and related services ("Merchant," "you," or "your").

By installing Account Canvas, approving a subscription, or using the Service, you
agree to these Terms. If you accept on behalf of an organization, you represent that
you have authority to bind it. If you do not agree, do not install or use the Service.

Our [Privacy Policy](/privacy), [Subprocessors list](/subprocessors), and any plan or
order terms presented through Shopify are incorporated into these Terms.

## 1. The Service

Account Canvas helps Shopify merchants create and manage customer-account pages,
sections, blocks, content, personalization, visibility conditions, forms, and workflows
(the "Service"). The available features, limits, and placements depend on the selected
plan, Shopify's platform capabilities, and any approval Shopify requires.

Account Canvas is an independent application and is not owned, sponsored, or endorsed
by Shopify. Shopify operates its platform, app installation, customer accounts, APIs,
and app billing under separate terms. "Shopify" and related marks belong to their
respective owners.

## 2. Eligibility and merchant account

You may use the Service only if you can form a binding contract and operate a valid
Shopify store. You are responsible for:

* maintaining the security of your Shopify account and staff permissions;
* all activity performed through authorized users of your store;
* keeping merchant contact, billing, and configuration information accurate;
* configuring and testing customer-facing content before publication; and
* promptly notifying us of suspected unauthorized access or security incidents related
  to the Service.

Access is authenticated through Shopify. You must not bypass Shopify authentication,
share access tokens, or permit an unauthorized person to use the Service.

## 3. Merchant content and instructions

"Merchant Content" means content, configuration, images, links, templates, conditions,
variables, workflow fields, submissions, and other information that you or your
customers provide to the Service.

You retain your rights in Merchant Content. You grant Account Canvas a worldwide,
non-exclusive, royalty-free license to host, reproduce, adapt, transmit, display, and
otherwise process Merchant Content only as reasonably necessary to provide, secure,
support, and improve the Service, comply with law, and enforce these Terms. This license
ends when the content is deleted, subject to normal backup, security, and legal
retention.

You represent that you have all rights, notices, consents, and lawful bases necessary
for Merchant Content and for the instructions you give us. You are responsible for the
accuracy, legality, and customer-facing effect of your content, conditions, links,
offers, forms, and workflows.

## 4. Customer data and privacy responsibilities

For personal information submitted by or about your customers, you are generally the
controller or business and Account Canvas is your processor or service provider. You
instruct us to process that information to provide the features you configure and as
otherwise stated in these Terms. Section 15 contains the data-processing terms that
apply to this relationship.

You are responsible for:

* complying with privacy, consumer-protection, accessibility, marketing, employment,
  and other laws that apply to your use of the Service;
* giving customers accurate privacy notices and obtaining consent where required;
* collecting only information reasonably needed for a disclosed purpose;
* responding to customer requests and submitting applicable requests through Shopify;
* ensuring that conditions and personalization do not unlawfully discriminate or make
  decisions with legal or similarly significant effects; and
* independently determining whether the Service is suitable for regulated or sensitive
  information.

Account Canvas is not designed for protected health information, payment-card data,
government identifiers, authentication secrets, or other highly sensitive data. The
Service attempts to detect and reject certain prohibited submissions, but this control
is not a substitute for appropriate merchant configuration and review.

## 5. Acceptable use

You must not use the Service to:

* violate law, another person's rights, Shopify's rules, or these Terms;
* collect, request, submit, or store payment card numbers or security codes, Social
  Security or other government identifiers, health or medical information, passwords,
  one-time codes, access tokens, private keys, or authentication secrets;
* create deceptive, fraudulent, abusive, discriminatory, defamatory, infringing, or
  unlawful content or workflows;
* send spam or communications without required consent;
* access or attempt to access another merchant's or customer's data;
* probe, scan, disrupt, overload, reverse engineer, or circumvent the Service or its
  security, rate limits, plan limits, or access controls, except to the extent a right
  cannot lawfully be restricted;
* introduce malware or harmful code;
* resell, sublicense, or provide the Service as a standalone competing service without
  our written permission; or
* use the Service to train an artificial-intelligence model on Account Canvas software,
  documentation, or non-public data without our written permission.

We may remove content, disable a feature, or suspend access when reasonably necessary
to prevent harm, comply with law or Shopify requirements, or enforce these Terms.

## 6. Plans, trials, billing, and taxes

Plan prices, billing intervals, trials, limits, and features are shown in the Service
and during Shopify's billing approval. Shopify processes charges through the merchant's
Shopify account. By approving a charge, you authorize Shopify to bill the amount shown,
including applicable recurring charges and taxes.

Unless stated otherwise in the billing approval:

* subscriptions renew for the displayed billing period until canceled;
* upgrades may take effect immediately and downgrades may take effect at the next
  billing period or as Shopify determines;
* uninstalling the app stops future use but does not automatically create a refund for
  charges already incurred; and
* taxes, currency conversion, and billing administration are handled under Shopify's
  applicable terms.

Refund requests are considered where required by law or Shopify policy and otherwise at
our reasonable discretion. We may change plans or pricing prospectively by providing
notice through the Service, Shopify, email, or our website as appropriate.

## 7. Shopify and third-party services

The Service depends on Shopify and other third-party providers. Your use of those
services is governed by their terms. We do not control and are not responsible for
third-party platforms, merchant-selected links, apps, products, outages, policy
changes, data, or acts. Changes made by Shopify can require us to modify, suspend, or
discontinue a feature.

Links or integrations do not imply endorsement. You are responsible for evaluating any
third-party service you choose to connect or reference.

## 8. Intellectual property

Account Canvas and its licensors own the Service, software, documentation, designs,
templates supplied as part of the Service, trademarks, and all related intellectual
property, excluding Merchant Content and third-party materials. Subject to these Terms,
we grant you a limited, non-exclusive, non-transferable, revocable right to use the
Service for your own Shopify business during the subscription term.

If you provide suggestions or feedback, you grant us a perpetual, worldwide,
irrevocable, royalty-free right to use it without restriction or compensation, without
identifying you publicly unless you consent.

## 9. Confidentiality

Each party may receive non-public information that a reasonable person would understand
to be confidential. The receiving party will use it only to perform under these Terms,
protect it with reasonable care, and disclose it only to personnel and providers who
need it and are bound by confidentiality obligations. These duties do not apply to
information that is public without breach, independently developed, rightfully received
without restriction, or required to be disclosed by law after legally permitted notice.

## 10. Security

We maintain reasonable administrative, technical, and organizational safeguards
designed to protect the Service and personal information, as further described in the
[Privacy Policy](/privacy). You acknowledge that no online service is completely secure.

You must use reasonable security for your Shopify account and systems. If either party
becomes aware of a security incident affecting the other party's data, it will provide
reasonably prompt information and cooperation consistent with its role and applicable
law.

## 11. Service changes, availability, and beta features

We may update the Service and its documentation. We aim to keep the Service available,
but do not guarantee uninterrupted or error-free operation. Maintenance, emergencies,
provider failures, Shopify changes, internet conditions, and events outside our
reasonable control may affect availability.

Features labeled beta, preview, early access, or similar are provided for evaluation,
may be changed or discontinued at any time, and may be subject to additional limits.
Do not use a preview feature for production-critical or sensitive processing unless we
state that it is production-ready.

## 12. Suspension and termination

You may stop using the Service and uninstall it through Shopify at any time. We may
suspend or terminate access if you materially breach these Terms, fail to pay approved
charges, create a security or legal risk, misuse the Service, or if Shopify requires or
prevents continued operation. Where practical, we will give notice and an opportunity
to cure before termination.

On termination, your right to use the Service ends. Uninstalling deactivates the local
plan and removes active app sessions. Merchant and customer data is deleted according
to the [Privacy Policy](/privacy), Shopify's mandatory redaction process, and applicable
law. Sections that by their nature should survive—including payment obligations,
confidentiality, intellectual property, disclaimers, liability limits, indemnity,
disputes, and data-protection duties—will survive.

## 13. Compliance with law and export controls

Each party will comply with laws applicable to its own performance. You must not use
the Service in or for the benefit of a sanctioned country, organization, or person, or
in violation of U.S. export-control or sanctions laws. You represent that you are not
prohibited from receiving the Service under those laws.

## 14. Support

Support is available at
[support@accountcanvas.app](mailto:support@accountcanvas.app). Support scope and response
times may vary by plan and issue severity. Do not send secrets, payment-card data, or
unredacted customer records by ordinary email.

## 15. Data Processing Addendum

This Section 15 (the "DPA") applies when Account Canvas processes personal information
on your behalf as a processor, service provider, or contractor ("Service Data"). It
forms part of the Terms and is intended to satisfy applicable controller-processor
contract requirements. If you need signed transfer clauses or a separately executed
DPA, contact us before using the Service for affected data.

### 15.1 Roles and instructions

You are the controller or business for Service Data and Account Canvas is the processor
or service provider. You appoint us to process Service Data only:

* to provide, secure, maintain, and support the Service described in these Terms;
* according to your documented use and configuration of the Service;
* as required by applicable law, in which case we will notify you before processing
  unless legally prohibited; and
* for other written instructions we accept as consistent with the Service and law.

You are responsible for the lawfulness, accuracy, and adequacy of your instructions and
for providing all required notices and legal bases. If we reasonably believe an
instruction violates data-protection law, we may suspend the affected processing and
notify you.

### 15.2 Processing details

* **Subject matter and purpose:** operating merchant-configured Shopify customer-account
  content, personalization, visibility conditions, forms, workflows, notifications,
  support, security, privacy requests, and related product operations.
* **Nature of processing:** collecting, receiving, accessing, organizing, encrypting,
  storing, retrieving, evaluating, transmitting, displaying, copying to
  merchant-authorized Shopify records, exporting, restricting, and deleting data.
* **Duration:** for the merchant's use of the Service and the retention and deletion
  periods in the Privacy Policy.
* **Data subjects:** merchant personnel, Shopify customers, authorized customer-account
  users, and people whose information is included in an authorized workflow.
* **Data categories:** identifiers and contact data; Shopify customer, order, product,
  file, store-credit, and metafield data; customer preferences; workflow field labels
  and responses; support and security information; and technical usage data.
* **Sensitive data:** the Service is not intended for payment-card data, government
  identifiers, health data, credentials, or special-category data. You must not direct
  us to process those categories without a separate written agreement.

### 15.3 Confidentiality and personnel

We will ensure that people authorized to process Service Data are subject to appropriate
confidentiality obligations and receive access only as needed for their duties. We will
maintain access controls and periodically review production access.

### 15.4 Security measures

Taking into account the state of the art, implementation costs, processing context, and
risk, we maintain measures designed to protect Service Data, including:

* Shopify authentication, signed requests, and shop/customer ownership checks;
* tenant-scoped authorization and least-privilege access;
* TLS for supported data in transit;
* application-level authenticated encryption for protected stored payloads and tokens;
* input validation, prohibited-data screening, request-size limits, rate controls, and
  webhook replay and ordering protections;
* minimized and sanitized monitoring and analytics;
* retention, redaction, and deletion controls; and
* incident-response, dependency-review, backup-provider, and change-management
  practices appropriate to the Service.

### 15.5 Subprocessors

You give general written authorization for the subprocessors listed at
[Subprocessors](/subprocessors). We will require each subprocessor that handles Service
Data to provide data-protection obligations appropriate to its role. We remain
responsible for our obligations under this DPA when a subprocessor performs them on our
behalf.

We will update the Subprocessors page before a new subprocessor begins materially
different processing where reasonably practicable and will provide additional notice
when required by contract or law. You may object on reasonable data-protection grounds
within 15 days after notice by emailing support. The parties will work in good faith on
a reasonable alternative. If none is reasonably available, either party may terminate
the affected Service without penalty other than charges already incurred.

### 15.6 Assistance and individual rights

Taking into account the nature of processing, we will provide reasonable assistance
for requests to access, correct, delete, restrict, or port Service Data and for your
obligations involving security, breach notices, data-protection impact assessments, and
regulator consultations. Shopify privacy webhooks are the primary mechanism for
Shopify-customer requests. If we receive a request directly concerning Service Data,
we will refer it to you unless law prevents us from doing so.

### 15.7 Security incidents

We will notify you without undue delay after confirming a breach of security that leads
to accidental or unlawful destruction, loss, alteration, unauthorized disclosure of,
or access to Service Data (a "Personal Data Breach"). We will provide information
reasonably available to help you meet applicable notice duties and take reasonable
steps to contain and remediate the incident. Notice is not an admission of fault.

### 15.8 Return and deletion

At termination or on a valid instruction, we will delete or return Service Data as
described in the Privacy Policy, unless law requires retention. Shopify-hosted copies
remain subject to Shopify and merchant control. Data in provider backups may remain
isolated until overwritten under the provider's normal schedule.

### 15.9 Information and audits

We will make information reasonably necessary to demonstrate compliance with this DPA
available through our documentation, responses to reasonable security questionnaires,
and relevant independent provider materials. If that is insufficient, you may request
an audit no more than once per year, unless a confirmed incident or regulator requires
otherwise. Audits must be proportionate, protect other customers and confidential
information, avoid unreasonable operational disruption, and be at your expense unless
the audit identifies our material breach.

### 15.10 International transfers

You authorize processing in the United States and other locations used by the approved
subprocessors. The parties will use a lawful transfer mechanism when required. Where
the EU Standard Contractual Clauses are required, the parties will complete and enter
the applicable 2021 controller-to-processor module and, where relevant, processor-to-
processor module, together with any required annexes and supplementary measures. For
UK restricted transfers, the parties will use the applicable UK Addendum or
International Data Transfer Agreement. The parties will reasonably cooperate with
transfer-impact or risk assessments.

Nothing in these Terms by itself represents that unsigned or incomplete standard
clauses have been executed. Contact us before an affected transfer if your organization
requires those clauses.

### 15.11 U.S. state service-provider terms

To the extent U.S. state privacy law applies to Service Data, Account Canvas will:

* process it only for the limited and specified business purposes in these Terms;
* not sell it or share it for cross-context behavioral advertising;
* not retain, use, or disclose it outside the direct business relationship or combine
  it with personal information from another source except as permitted by law;
* provide the same level of privacy protection required of an applicable service
  provider or processor;
* notify you if we determine we can no longer meet those obligations; and
* allow you to take reasonable steps to stop and remediate unauthorized processing.

Each party will comply with the duties applicable to its role. These terms are not an
admission that a particular state law applies to either party.

### 15.12 DPA priority

If this DPA conflicts with another part of the Terms regarding Service Data, this DPA
controls. Executed standard contractual clauses control over conflicting provisions to
the extent required by those clauses.

## 16. Disclaimers

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICE IS PROVIDED "AS IS" AND "AS
AVAILABLE." ACCOUNT CANVAS DISCLAIMS ALL EXPRESS, IMPLIED, AND STATUTORY WARRANTIES,
INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE,
NON-INFRINGEMENT, AND THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR MEET EVERY
LEGAL OR BUSINESS REQUIREMENT.

ACCOUNT CANVAS DOES NOT PROVIDE LEGAL, TAX, ACCOUNTING, OR COMPLIANCE ADVICE. YOU ARE
RESPONSIBLE FOR REVIEWING YOUR CONFIGURATION, CUSTOMER-FACING CONTENT, AND LEGAL
OBLIGATIONS. NOTHING IN THESE TERMS EXCLUDES A WARRANTY THAT CANNOT LAWFULLY BE
EXCLUDED.

## 17. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR INDIRECT,
INCIDENTAL, SPECIAL, EXEMPLARY, PUNITIVE, OR CONSEQUENTIAL DAMAGES, OR FOR LOST PROFITS,
REVENUE, GOODWILL, OR DATA, EVEN IF ADVISED THAT SUCH DAMAGES WERE POSSIBLE.

ACCOUNT CANVAS'S TOTAL LIABILITY ARISING OUT OF OR RELATING TO THE SERVICE OR THESE
TERMS WILL NOT EXCEED THE GREATER OF (A) THE FEES YOU PAID TO ACCOUNT CANVAS THROUGH
SHOPIFY DURING THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO LIABILITY OR (B) US \$100.

These limits do not apply to liability that cannot lawfully be limited. Some
jurisdictions do not allow certain exclusions, so parts of this section may not apply.

## 18. Indemnification

To the extent permitted by law, you will defend, indemnify, and hold harmless Brandle &
Co LLC and its officers, employees, and contractors from third-party claims, damages,
penalties, and reasonable costs arising from Merchant Content, your instructions, your
customer-facing use of the Service, or your material violation of law or these Terms.
We will promptly notify you of a covered claim and reasonably cooperate at your expense.
You may not settle a claim in a way that admits fault by or imposes obligations on us
without our written consent.

## 19. Governing law and disputes

These Terms are governed by the laws of the State of Indiana, without regard to its
conflict-of-law rules. Subject to any rights that cannot lawfully be waived, the parties
submit to the exclusive jurisdiction of the state and federal courts located in
Indiana. Before filing a claim, each party will make a good-faith effort for at least 30
days to resolve the dispute through written notice.

Nothing in this section prevents either party from seeking urgent injunctive relief or
using an applicable small-claims procedure. Mandatory consumer protections in a
merchant's jurisdiction remain unaffected where they cannot lawfully be waived.

## 20. Changes to these Terms

We may update these Terms prospectively. We will post the revised Terms and update the
date above. For a material change, we will provide reasonable additional notice through
the Service, Shopify, email, or our website when required. Continued use after the
effective date constitutes acceptance, except where law requires express consent. If
you do not agree to a material change, your remedy is to stop using and uninstall the
Service before it takes effect.

## 21. General terms

Neither party is liable for delay caused by events beyond its reasonable control. You
may not assign these Terms without our written consent, except in connection with a
merger or sale of substantially all relevant assets; we may assign them in connection
with a reorganization or business transaction. No agency, partnership, employment, or
joint venture is created. Failure to enforce a provision is not a waiver. If a provision
is unenforceable, it will be limited to the minimum extent necessary and the remainder
will continue. Headings are for convenience. These Terms are the complete agreement
about the Service and supersede prior discussions on that subject.

## 22. Contact and legal notices

Questions and notices may be sent to:

**Brandle & Co LLC, doing business as Account Canvas**\
3211 Boulevard Place\
Indianapolis, Indiana 46208\
United States\
[support@accountcanvas.app](mailto:support@accountcanvas.app)

Notices to a merchant may be delivered through Shopify, the Service, the merchant
contact associated with Shopify, or another address the merchant provides.


## Related topics

- [Welcome to Account Canvas](/index.md)
- [Privacy Policy](/privacy.md)
- [Privacy and data](/privacy-and-data.md)
- [Subprocessors](/subprocessors.md)
- [Blocks and sections](/blocks-and-sections.md)