Jule Terms of Service

1. Agreement to these Terms

These Terms of Service (the “Terms”) are a binding agreement between Jule LLC, a Delaware limited liability company (“Jule”, “we”, “us” or “our”), and you. They govern your access to and use of the Jule websites at jule.ai and docs.jule.ai, the Jule application at app.jule.ai and jule.ai/app (the “Dashboard”), the Jule application programming interfaces, the Jule widget script and hosted preference centers, and all related documentation, features and content (together, the “Services”).

You accept these Terms and our Privacy Policy at jule.ai/privacy, which is incorporated by reference, by clicking Create Account, or the button that joins your organization when you accept an invitation, each of which is presented with a link to both documents. If you use the Services without having done so, for example because your organization embedded the Jule widget for you or gave you access, your use is also subject to these Terms. If you are using the Services on behalf of a company or other organization, you represent that you have authority to bind that organization, and “you” and “Customer” refer to that organization. If you do not agree, do not use the Services.

If you and Jule have signed a Master Work Order, order form or other written agreement covering the Services (an “Order Form”), then the Order Form, together with the General Terms and Conditions, Data Protection Addendum and exhibits it incorporates, governs your use of the Services and prevails over these Terms to the extent of any conflict. These Terms apply to everything the Order Form does not address.

2. Definitions

“Authorized User” means an individual you invite to your organization or workspace and permit to use the Services under your account.

“Connected Service” means a third-party product you connect to the Services or direct the Services to send data to, including Iterable, Shopify, Stripe, and any endpoint you configure as a webhook destination.

“Customer Content” means the pop-ups, forms, quizzes, surveys, preference centers, templates, custom HTML, CSS and JavaScript, copy, translations, images, fonts and other materials you create in or upload to the Services.

“Customer Data” means the information that End Users submit through, and that the Services collect in connection with, the experiences you build, including names, email addresses, phone numbers, form responses, preference selections, consent records, coupon assignment and redemption information, and related engagement and technical metadata.

“Customer Site” means a website, web application or preference center domain that you own or control and on which you deploy the Widget or host a preference center.

“Documentation” means the guides and references published at docs.jule.ai.

“End User” means a person who interacts with an experience you have built with the Services on a Customer Site.

“Widget” means the Jule JavaScript file (widget.js), served from assets.jule.ai or, on a hosted preference center, from our web application, together with its supporting files that render your experiences on Customer Sites.

3. Eligibility and accounts

The Services are offered to businesses and to individuals acting on behalf of a business. You must be at least eighteen years old and able to form a binding contract to use them. You must provide accurate and complete registration information and keep it current.

Registration requires verifying your email address with a code we send to it. New accounts are reviewed by Jule and are normally activated only after our approval; we may decline an account without giving a reason and do not notify declined applicants. We may also close registration to new accounts at any time. People who join your organization through an invitation you send are activated by accepting the invitation and are bound by these Terms as Authorized Users. Invitation links expire after seven days, and an invitation link is itself the credential that adds its holder to your organization, so share invitation links only with the intended person.

You are responsible for keeping your password, two-factor authentication codes, backup codes and any API keys or signing secrets confidential, for all activity that occurs under your account and the accounts of your Authorized Users, and for promptly telling us at hey@jule.ai if you learn of any unauthorized use. We strongly recommend enabling two-factor authentication, which is available in your account settings. You are responsible for the roles and permissions you assign within your organization and for removing access when an Authorized User leaves. The public workspace key that identifies your workspace to the Widget is not a secret and may appear in your pages; every other credential is.

4. Plans, fees and payment

We currently offer an Essential tier and a Full tier. The Essential tier is provided free of charge and is limited to one organization, one workspace, one preference center and one seat. It does not include pop-ups, inline forms, banners, floating bubbles, A/B experiments or coupons, and it includes up to 100,000 preference center views per calendar month; we monitor that usage and will contact you about moving to the Full tier if your views regularly exceed it, rather than blocking your preference center. The Full tier includes all features of the Services, except that coupon and QR code functionality is switched on for your organization by Jule on request, and the number of workspaces per organization and organizations per account is subject to reasonable platform limits that we may adjust. The tier assigned to your organization is set by Jule when your account is approved or under your Order Form, and we may change the features and limits of the Essential tier, or discontinue it, on reasonable notice. Tier limits apply when you create new items; a change of tier does not delete or disable what you have already built.

Fees for paid use of the Services are set out in your Order Form or otherwise agreed with you in writing. Unless the Order Form says otherwise, invoices are due thirty days after the invoice date, fees are stated and payable in United States dollars and exclude taxes, and you are responsible for any sales, use, value added or similar taxes other than taxes on our income. If your account falls into arrears we may, after notice, suspend access to paid features until payment is made. Self-service billing is not yet available in the Dashboard; when it is, we will tell you before any charge is made.

5. The Services and your license to use them

Subject to these Terms, we grant you a non-exclusive, non-transferable right during the term of your account, which we may revoke only as permitted by section 14, to access the Dashboard and Documentation, to build and publish experiences, to embed the Widget on Customer Sites, to use the JavaScript API and outbound webhooks described in the Documentation, and to host preference centers through the Services, in each case for your business purposes, including presenting experiences to your End Users and, with our permission, for the businesses you manage as an agency.

You may embed the Widget only on Customer Sites that you own or control or have the owner’s permission to modify. You are responsible for adding the Widget to your pages correctly, for testing your experiences before publishing them, and, where you want to limit where your experiences can load, for configuring the list of allowed domains in your workspace settings; that list is enforced against the origin your visitors’ browsers report, an empty list allows every domain, and your verified custom domains are always allowed. We may update the Widget at any time, and because it is served from our infrastructure your Customer Sites will load the updated version automatically. We aim to keep updates backward compatible but cannot guarantee that every customization you build on top of the Widget will continue to work unchanged.

You may connect a custom domain to a hosted preference center only if you own or control that domain. You are responsible for the DNS records you create (a CNAME record, and where our hosting provider requires it a TXT ownership record) and for keeping the domain registered. We provision custom domains through our hosting provider, re-check a domain’s DNS configuration when it is visited if the last successful check is more than twenty-four hours old, stop serving a domain whose check fails until it passes again, and may remove a domain whose ownership is disputed.

Core features of the Services, including preference centers, audience synchronization and triggered campaigns, depend on an Iterable account that you provide and connect. The Services are hosted in the United States. We may modify the Services, add or remove features, and change the Documentation from time to time. We may also offer features marked as beta, preview or experimental; those are provided as-is, may be changed or withdrawn without notice, and are excluded from any commitments in your Order Form.

6. Your responsibilities for data collection and communications

You decide what your experiences ask End Users for and where that information goes. You are solely responsible for complying with all laws that apply to your collection and use of Customer Data and to your communications with End Users, including the General Data Protection Regulation, the UK GDPR, the California Consumer Privacy Act as amended and other United States state privacy laws, the CAN-SPAM Act, the Telephone Consumer Protection Act and carrier and industry rules for SMS messaging, Canada’s Anti-Spam Legislation, and the ePrivacy rules governing cookies and browser storage.

In particular, you must publish a privacy policy on each Customer Site that accurately describes your collection of Customer Data through the Services, including the analytics events, browser storage and returning-visitor recognition described in our Privacy Policy and, for a hosted preference center on your custom domain, the website analytics that load there. You must obtain and document any notice and consent that applicable law requires before collecting Customer Data or storing information in an End User’s browser, including any consent required for the browser storage the Widget uses and for any cookies or storage you reference in targeting rules.

You are the sender of every text message sent to End Users, including the double opt-in confirmation messages the Services trigger in your Iterable account at your direction. You must obtain prior express written consent that meets the Telephone Consumer Protection Act and applicable state law before sending marketing text messages, display an SMS disclaimer that satisfies carrier requirements when collecting phone numbers, honor unsubscribe, opt-out and revocation requests promptly, and keep your suppression lists current. You must configure the Iterable signing secret so that hosted preference centers open only through signed links; if you choose not to, you acknowledge that anyone who knows an End User’s email address or user ID can view and change that End User’s preferences, and you accept responsibility for the consequences. You must also configure your experiences, field mappings, triggers, targeting rules, preference centers, coupon rules, QR code contents and webhook templates correctly.

Customer Content may include your own HTML, CSS and JavaScript, which the Services run in End Users’ browsers on Customer Sites and on hosted preference centers. You are solely responsible for that code, for what it does and collects, and for its compliance with law and these Terms. We may disable or remove code that we reasonably believe is harmful or unlawful.

You must not use the Services to collect or transmit payment card numbers, bank account or other financial account information, government identification numbers, health information, biometric information, precise geolocation, information about children, including anyone under thirteen or below the age of digital consent in the End User’s jurisdiction, special categories of personal data under the GDPR, or sensitive personal information under United States state privacy laws, and you must not place personal information in the content encoded in a coupon QR code, unless we have agreed to it in writing in advance. This includes consumer health data as defined in the Washington My Health My Data Act and similar laws, and information from which these categories can be inferred, such as quiz or survey questions about health conditions, symptoms, pregnancy, medications, sexual orientation, religion or immigration status; you are responsible for reviewing every question you ask.

You must not use the Services in connection with protected health information regulated by HIPAA, financial information regulated by the Gramm-Leach-Bliley Act, children’s data subject to COPPA, biometric information, credit, employment, housing or insurance eligibility decisions, emergency services, life-sustaining systems, or any other high-risk regulated activity, unless we have agreed to it in writing in advance.

7. Connected Services

The Services interoperate with Connected Services at your direction. You select each Connected Service, you hold your own account and agreement with it, and you are responsible for complying with its terms. By connecting a Connected Service you authorize us to store the credentials you provide, encrypted as described in our Privacy Policy, and to use them to act on your behalf as the Documentation describes: for Iterable, to read your lists, channels, message types, fields and campaign metadata, to read individual subscriber profiles and subscription state, to send profile updates (including the Jule-specific profile fields described in our Privacy Policy), subscription changes, events that can trigger campaigns you have set up in Iterable, coupon activity and SMS double opt-in requests, and to process unsubscribe requests; for Shopify, to create and deactivate discount codes, to register the webhook subscriptions we need, to read order details, and to receive paid-order and refund notifications for redemption tracking; for Stripe, to create and deactivate coupons and promotion codes using the restricted API key you provide, to manage the webhook endpoint we register in your account, to reconcile redemption counts, and to receive checkout, invoice and refund events; and for webhook destinations, once you enable outbound webhooks for your workspace, to deliver signed payloads to the endpoints you configure.

We do not control Connected Services and are not responsible for their availability, security, data handling, API changes, rate limits or fees. Each Connected Service is a downstream processor that you designate, in the same way our Data Protection Addendum designates Iterable, and none of them is our subprocessor. We do not control and are not responsible for email or SMS deliverability, inbox placement, spam filtering, sender or domain reputation, carrier filtering, campaign performance, or the content of any message you send through a Connected Service. If you use Jule through the Shopify App Store, Shopify’s terms also apply to your use of our Shopify app, and we will provide you with the data we hold about a shopper when Shopify forwards a customer data request so that you can respond within Shopify’s window.

Webhook destinations must be publicly reachable HTTPS endpoints; the Services refuse private network, loopback and non-HTTPS addresses and do not follow redirects. You are responsible for verifying the signature on webhook requests and for the security of your receiving systems.

8. Acceptable use

You agree not to, and not to permit anyone else to, use the Services in violation of any law or regulation or of these Terms, to send or facilitate unsolicited commercial messages, to deceive or defraud End Users, to collect information under false pretenses, or to design experiences that violate consumer protection or dark pattern laws. You also agree not to upload or transmit malware or content that is unlawful, defamatory, infringing, obscene or otherwise objectionable, and not to infringe the intellectual property, privacy or other rights of anyone.

You further agree not to attempt to gain unauthorized access to the Services, other accounts or systems connected to the Services; not to probe, scan or test the vulnerability of the Services without our prior written consent; not to interfere with or disrupt the Services, circumvent rate limits, usage limits or plan limits, or place unreasonable load on our infrastructure; not to copy, modify, translate, reverse engineer, decompile or create derivative works of the Services or the Widget, except to the extent the Documentation expressly permits integration or applicable law forbids this restriction; and not to remove or alter any proprietary notice.

Finally, you agree not to resell, sublicense or provide the Services to third parties as a service bureau (except that you may build experiences for the businesses you manage as an agency under a single account with our permission), not to use the Services to build a competing product or to benchmark for publication without our consent, and not to use automated means to scrape the Documentation or the Dashboard.

We may investigate suspected violations and may remove content, disable experiences, or suspend or restrict accounts where we reasonably believe it is necessary to comply with law, to protect End Users, other customers or Jule, or to stop conduct that creates material legal, security, reputational or operational risk. Where practical we will notify you and give you an opportunity to fix the problem first.

9. Customer Content and Customer Data

You retain all rights in Customer Content and Customer Data. You grant Jule a worldwide, non-exclusive, royalty-free license to host, store, copy, transmit, display, process and create technical adaptations of Customer Content and Customer Data solely as needed to provide, secure and support the Services and to comply with your instructions and with law. You represent that you have all rights and permissions needed to grant this license and that Customer Content does not infringe or violate anyone’s rights.

Jule processes Customer Data as your processor and service provider. Our role is a limited one: we collect Customer Data through the experiences you build, hold it for the periods the Services require, and transmit it to the destinations you configure, and we do not decide the purposes for which it is used downstream. Our Data Protection Addendum describes this processing as limited intermediary collection, storage and transmission on your instructions; where the Services keep Customer Data beyond the transmission itself, for example coupon records, SMS consent records and analytics events, the Privacy Policy states what is kept and for how long. We will process Customer Data only to provide the Services, on your documented instructions, as needed to keep the Services secure, or as required by law. We will not sell Customer Data, share it for cross-context behavioral advertising, use it for targeted advertising, use it to train artificial intelligence or machine learning models, or use it for any commercial purpose of our own. Our Data Protection Addendum, which is part of every Order Form and is available on request for other customers, sets out these commitments, our security measures, our subprocessors, our incident notification obligation and our assistance with data subject requests in detail. Our Privacy Policy describes what the Services collect and how long we keep it.

We may collect and use information about the operation and use of the Services, such as event counts, performance metrics and infrastructure usage, to operate, secure, improve and allocate the costs of the Services. This information is attributed to your organization so that we can support you and apply plan limits, is derived from the operation of the Services, does not identify any End User, and we will not attempt to re-identify anyone from it.

You are responsible for backing up or exporting any Customer Content or Customer Data you need. Deleting your own user account removes your profile as described in section 14 but does not delete Customer Content or Customer Data, which remain with your organization. When your organization’s agreement with us ends, or when your organization asks us to, we delete or de-identify Customer Data within thirty days as described in the Privacy Policy, except where longer retention is required by law, is needed to resolve a dispute, prevent fraud or maintain security, or consists of encrypted backups that expire on their own schedule.

10. Intellectual property

The Services, including the Dashboard, the Widget, the APIs, the templates we provide, the Documentation, and all software, designs, text, graphics and trademarks that make them up, are owned by Jule or its licensors and are protected by intellectual property laws. Except for the limited rights expressly granted in these Terms, we reserve all rights. The Jule name and logo are our trademarks and may not be used without our written permission, except that you may state truthfully that you use Jule.

Templates we provide may be used only within the Services to build your own experiences. If you provide suggestions, ideas or feedback about the Services, you grant us a perpetual, irrevocable, royalty-free license to use them without obligation to you.

The Widget and Dashboard include open source components licensed under their own terms; those terms govern your use of those components and prevail over section 8 to the extent of any conflict.

11. Confidentiality

Each of us will protect the other’s non-public business, technical and financial information disclosed in connection with the Services using at least reasonable care, will use it only to perform under these Terms, and will share it only with people who need to know it and are bound by comparable obligations. This does not apply to information that is or becomes public through no fault of the recipient, that the recipient already knew without restriction, that the recipient develops independently, or that the recipient lawfully receives from a third party without restriction. Either party may disclose confidential information when required by law after giving reasonable notice where permitted.

12. Security and incidents

We maintain commercially reasonable technical and organizational measures designed to protect Customer Data, including role-based access control, encryption in transit, encryption of credentials and other sensitive fields at rest, security logging, vulnerability and patch management, incident response procedures, personnel confidentiality obligations, and business continuity measures. Our Privacy Policy and Data Protection Addendum describe them further. These are our current measures, and we may change them as technology and threats evolve provided the overall level of protection does not decrease. We will notify you without unreasonable delay after we confirm that a material failure of our safeguards has resulted in unauthorized access to or acquisition of Customer Data in our possession, as defined in our Data Protection Addendum, and the notice will include the information reasonably available to us that you need to evaluate your own notification obligations.

You must notify us promptly at hey@jule.ai if you become aware of a compromise of your credentials or of a security issue affecting the Services. Nothing in these Terms requires us to disclose confidential security information or to permit penetration testing without a separate written agreement.

13. Availability and support

We work to keep the Services available and to document changes at docs.jule.ai, but we do not guarantee uninterrupted or error-free operation and offer no service level commitment unless one is set out in your Order Form. We may perform maintenance, and we are not responsible for outages or degradation caused by hosting, network, content delivery, analytics or other third-party providers, by Connected Services, or by your own systems. Support is provided by email at hey@jule.ai and through the Documentation.

14. Term, suspension and termination

These Terms apply from the moment you first use the Services and continue until your account is deleted or terminated. You may delete your account at any time from the Dashboard settings. Deletion is scheduled thirty days after your request, during which your account stays active and you can cancel it by signing in and choosing Cancel Deletion in your profile settings; after that your account is permanently deleted as described in the Privacy Policy, and workspaces and projects you created remain with your organization. We may also cancel a pending deletion at your request, and we may delete an account immediately where you ask us to or where we are required to. If you are on an Order Form, its term and termination provisions govern termination of paid Services.

We may restrict, deactivate or terminate your access or your experiences, with notice where practical, if you materially breach these Terms and do not cure the breach within thirty days of notice (or immediately if the breach cannot be cured or creates urgent risk), if you fail to pay fees when due, if we are required to do so by law, if your use creates material legal, security, reputational or operational risk for Jule, or if Customer Data includes categories prohibited by section 6. We may also suspend experiences that we reasonably believe are transmitting prohibited data.

Upon termination your right to use the Services ends, we will deactivate your experiences so that the Widget stops rendering them, and we will handle Customer Data as described in section 9. Sections 6, 9 (as to our obligations for retained data), 10, 11, 15, 16, 17, 18, 19 and 24 survive termination, together with any payment obligations that accrued before it.

15. Disclaimers

Except as expressly stated in these Terms or an Order Form, the Services are provided “as is” and “as available”. To the maximum extent permitted by law, Jule disclaims all warranties, whether express, implied, statutory or otherwise, including warranties of merchantability, fitness for a particular purpose, title, non-infringement, security, availability, accuracy and regulatory compliance. We do not warrant that the Services will meet your requirements, that they will be uninterrupted or error-free, that any experience will achieve any conversion or business result, or that use of the Services will make you compliant with any law. You are solely responsible for determining whether the Services, the Connected Services and your intended use of them meet your legal, regulatory and operational requirements.

16. Limitation of liability

To the maximum extent permitted by law, neither party will be liable for any indirect, incidental, special, consequential, exemplary or punitive damages, or for lost profits, revenue, data or goodwill, arising out of or relating to these Terms or the Services, even if advised of the possibility of such damages.

To the maximum extent permitted by law, each party’s total aggregate liability arising out of or relating to these Terms and the Services will not exceed the greater of the fees you paid or owed to Jule for the Services in the twelve months before the event giving rise to the claim and one hundred United States dollars. This cap also applies to liability for a breach of confidentiality or for a security incident.

These limitations do not apply to a party’s gross negligence, willful misconduct or fraud, to your payment obligations, or to either party’s indemnification obligations under section 17. Some jurisdictions do not allow certain limitations, so some of the above may not apply to you.

17. Indemnification

You will defend, indemnify and hold harmless Jule and its affiliates, officers, directors, employees, contractors and agents from and against any third-party claim, and the resulting damages, penalties, costs and reasonable attorneys’ fees, arising out of or relating to your breach of these Terms, your violation of law, your failure to obtain required notices, permissions, consents or lawful bases, Customer Content or Customer Data, code you add to experiences or hosted pages, your use or configuration of any Connected Service, communications sent to End Users at your direction, or the processing of Customer Data by a Connected Service on your instructions, except to the extent a claim results from Jule’s breach of these Terms, gross negligence or willful misconduct.

Jule will defend and indemnify you against third-party claims arising directly from Jule’s gross negligence or willful misconduct.

The indemnified party will promptly notify the indemnifying party of the claim, allow it to control the defense and settlement (provided that no settlement may impose obligations on the indemnified party without its consent), and cooperate reasonably at the indemnifying party’s expense.

18. Governing law and disputes

These Terms are governed by the laws of the State of Delaware, without regard to its conflict of laws rules. Before filing a claim, each party agrees to notify the other in writing of the dispute and to try in good faith to resolve it for thirty days. Any dispute that is not resolved will be brought exclusively in the state or federal courts located in Wilmington, Delaware, and each party consents to the personal jurisdiction and venue of those courts. Each party waives any right to a jury trial and agrees that any proceeding will be conducted on an individual basis and not as a plaintiff or class member in any purported class or representative action, to the extent permitted by law. If the waiver of class or representative proceedings is found unenforceable as to a particular claim, that claim will be severed and proceed in court on an individual basis under this section, and the waiver remains in effect for all other claims. Either party may seek injunctive relief in any court of competent jurisdiction to protect its intellectual property or confidential information. If you have an Order Form, its dispute resolution terms apply in place of this section.

19. Export controls and sanctions

You will comply with all applicable export control, sanctions, anti-boycott and trade laws, including those administered by the United States Department of Commerce and the Office of Foreign Assets Control. You will not access, use, export, re-export or transfer the Services, or permit anyone else to access them, in or to any country or territory subject to comprehensive United States sanctions, by or for the benefit of anyone on a United States restricted-party list, or otherwise in violation of those laws. You represent that neither you nor anyone using the Services on your behalf is subject to such sanctions, and you are responsible for trade compliance in respect of Customer Data and the communications you send through Connected Services.

20. Force majeure

Neither party will be liable for any delay or failure to perform caused by events beyond its reasonable control, including natural disasters, cyberattacks, internet, telecommunications or cloud infrastructure failures, DNS failures, denial-of-service attacks, labor disputes, government actions, war, terrorism, civil unrest, pandemics, utility failures, or failures of third-party providers, other than payment obligations.

21. Changes to these Terms

We may update these Terms from time to time. When we do, we will change the effective date at the top of the page. If a change is material, we will give account holders at least thirty days’ notice by email or in the Dashboard before it takes effect, unless the change is required by law or addresses a security issue, in which case it may take effect sooner. Your continued use of the Services after a change takes effect means you accept the updated Terms. If you do not agree, you must stop using the Services and may delete your account. Changes to these Terms do not modify a signed Order Form during its current term.

22. Website and Documentation use

The content on jule.ai and docs.jule.ai is provided for general information. You may view, download and print Documentation for your own use of the Services. The Documentation may include code samples, which you may use in your Customer Sites to integrate with the Services. We may change or remove website content at any time. Links to third-party sites are provided for convenience, and we are not responsible for their content.

23. End Users

If you are an End User interacting with an experience built with Jule on a business’s website or preference center, your relationship is with that business. Its terms and privacy policy govern the information you provide, and you should direct requests about your information to it. Our Privacy Policy explains our role and what our Widget does in your browser. Nothing in these Terms creates a contract between Jule and End Users.

24. General

These Terms, together with the Privacy Policy and any Order Form, are the entire agreement between you and Jule about the Services and supersede all prior or contemporaneous understandings. You may not assign these Terms without our prior written consent, except to a successor in a merger, acquisition or sale of substantially all of your assets on notice to us. We may assign these Terms to an affiliate or successor. Our failure to enforce a provision is not a waiver. If a provision is found unenforceable, it will be enforced to the maximum extent permissible and the rest of these Terms will remain in effect. The parties are independent contractors, and there are no third-party beneficiaries of these Terms. We may give you notice by email to the address on your account or through the Dashboard, and such notices are effective when sent; you may give us notice at hey@jule.ai, effective when received. Headings are for convenience only. Neither party has relied on any statement, representation or material not set out in these Terms or an Order Form.

25. Contact

You can reach Jule LLC at hey@jule.ai with any question about these Terms.