1. Agreement and operator
These Terms are between the customer accepting them ("Customer," "you") and The Plain Works Co.,Ltd. ("Plain Works," "we," "us"). Runstamp is a Plain Works service and software project.
If you act for an organization, you represent that you can bind it. These Terms incorporate the Privacy Policy, DPA where applicable, Subprocessors, Security Overview, Billing, Cancellation, and Refund Policy, Open-Source and Commercial License Policy, Copyright and Content Reporting Policy, and any executed Order Form.
2. Business use and supported market
Hosted and commercial Runstamp offerings are business-to-business, for users at least 18, and currently offered only to customers established in the United States or Canada, excluding customers established in Quebec and people using them primarily from Quebec. They are not offered or targeted in the EU, EEA, or UK. Public open-source software may be obtained wherever its license and applicable law permit; that availability does not expand the hosted market.
3. Product boundary
Runstamp includes separately licensed Apache-2.0 packages and documentation plus optional hosted accounts, license/entitlement services, managed jobs, connectors, support, and commercial services. Local packages may inspect, transform, render, verify, or generate documents entirely in your own runtime. If you do not use a hosted feature, support channel, telemetry endpoint, or Runstamp-managed integration, local document inputs and outputs are not sent to us.
Hosted features process the data required for the selected operation. Results are evidence of mechanical operations and stated checks, not legal, tax, regulatory, accessibility, security, or professional certification. You must review outputs and loss/exception ledgers before use.
4. Open-source and commercial rights
Files and packages expressly marked Apache-2.0, MIT, or another open-source license are governed by that license, which controls over these Terms for the licensed component. A nearby private package, hosted endpoint, trademark, key, certificate, service, or commercial feature does not become open source by interoperability.
Any Commercial Component is governed by the License Policy, plan, and Order Form. During a valid entitlement, you may use it only within the granted scope. Outputs generated through authorized use belong to you, subject to rights in your inputs and third-party materials.
5. Accounts and entitlements
You must provide accurate information, secure accounts, API keys, certificates, tokens, and connected systems, and notify hello@runstamp.com of compromise. You are responsible for users, deployments, jobs, integrations, and instructions under your organization.
Offline signed certificates permit local verification without sending documents or a validation request to Runstamp. They remain entitlement credentials and must be protected. We may revoke or replace online keys or future certificates for compromise, fraud, chargeback, scope violation, or material breach. Offline revocation may depend on expiry, replacement, key-version rotation, or an updated deny list.
6. Plans, trials, billing, renewal, and cancellation
Paddle is merchant of record for Pro and Platform self-serve purchases and handles checkout, payment, tax, invoices, fraud, chargebacks, and approved refunds under Paddle's buyer terms. Enterprise purchases may use an executed Order Form and direct invoice.
A trial lasts for the period and scope shown at enrollment. If payment details are required, checkout states when charging begins. Paid self-serve subscriptions renew automatically for successive terms at the disclosed price unless canceled before renewal. Cancel through the Runstamp account, Paddle buyer portal, or hello@runstamp.com. Cancellation normally takes effect at period end, stops future renewal, and does not itself refund the current period. See the Billing, Cancellation, and Refund Policy.
7. Customer Content and outputs
Customer Content includes hosted job inputs, source documents, configurations, templates, artifacts, outputs, connector data, webhooks, support uploads, and related metadata. As between the parties, you own Customer Content. You grant us a limited worldwide, non-exclusive license to host, process, transmit, transform, display, back up, and delete it only to provide, secure, and support the selected hosted service and comply with law.
You represent that you have all rights, authority, notices, and consents required for Customer Content and instructions. You are responsible for accuracy, legal compliance, validation, and distribution of outputs. We do not acquire local-only inputs or outputs we never receive.
8. Hosted integrations and AI boundary
Customer-selected storage, repositories, workspaces, e-signature systems, CRMs, chat tools, and other connectors have separate terms. You authorize data exchange according to selected scopes and remain responsible for the destination and credentials.
Runstamp does not currently use OpenAI, Gemini, or Anthropic as a core hosted subprocessor for Customer Content. Documentation and examples may show how customers connect their own AI provider locally or through their own credentials. That provider is customer-selected and outside our processor chain unless a hosted Runstamp feature expressly identifies it otherwise on the Subprocessors page before launch.
9. Acceptable use
You must not:
- violate law, sanctions, export controls, privacy, confidentiality, intellectual-property, publicity, license, or contractual rights;
- use Runstamp for fraud, impersonation, harassment, unlawful surveillance, discrimination, malware, phishing, credential theft, or system compromise;
- access another customer's data, attack or overload hosted systems, bypass security/rate/license controls, falsify receipts, provenance, approvals, signatures, timestamps, or verification results, or test without written authority;
- redistribute or expose Commercial Components contrary to their license, share entitlement credentials outside scope, or build a substantially equivalent competing hosted service from non-public components;
- submit protected health data; full card data or bank credentials; government identifiers or identity documents; passwords, private keys, access tokens, or session secrets; biometric identifiers; precise geolocation; FCRA or GLBA data; children's data; classified/export-controlled data; or highly sensitive genetic, health, or employment data to hosted features without written approval; or
- rely on Runstamp as the sole basis for a legally significant employment, credit, housing, insurance, health, education, immigration, legal, filing, or regulatory decision.
We may remove content, reject jobs, rotate credentials, rate-limit, suspend, or terminate proportionately. We will provide notice and a cure opportunity when practicable but may act immediately for security, legal, fraud, or harm reasons. The former Acceptable Use Policy is incorporated here.
10. Intellectual property, marks, and contributions
Plain Works and its licensors retain rights in hosted services, non-public software, commercial materials, documentation, and Runstamp marks, subject to express open-source licenses. You may not imply endorsement or use marks beyond nominative reference without permission. Contributions are governed by the Contributor Terms. Feedback may be used without restriction or payment.
11. Confidentiality and security
Each party must protect the other's non-public information with reasonable care and use it only for the agreement. Lawfully public, independently developed, already-known, or unrestricted third-party information is excluded. Required disclosure is permitted after notice where legally allowed.
The Security Overview describes hosted controls and local/shared responsibility. You remain responsible for local runtime security, dependencies, source documents, outputs, credentials, and deployments.
12. Privacy and deletion
The Privacy Policy governs our controller processing and the DPA governs Customer Personal Data processed on instructions. Privacy inquiries go to hello@runstamp.com. Local-only data that never reaches us is outside our processing.
When an authenticated hosted-account deletion request is accepted, Runstamp does not apply a discretionary grace period: live erasure is scheduled without avoidable delay. Generated hosted artifacts normally remain 7 days, unbound staging 24 hours, usage/audit records 24 months, and isolated backup fragments up to 35 days after live deletion. Export needed data first. Legal holds, security, fraud, disputes, and mandatory billing records may be retained as described in Privacy.
13. Support, availability, and termination
Standard Pro and Platform support is available by email at hello@runstamp.com, Monday through Friday, 09:00–17:00 in the America/New_York time zone, excluding U.S. federal holidays. Response clocks run only during this support window. Pro targets an initial response within one business day for a reproducible production-blocking defect and within two business days for other technical requests. Platform targets an initial response within four business hours for a production-blocking incident, within one business day for degraded production, and within two business days for other requests. An initial response is a human acknowledgement with a concrete next diagnostic step. These targets do not promise resolution within the target period. An executed Enterprise/OEM Order Form may state a different support window or service level.
The standard Platform is self-serve and generally available under these Terms to customers with an active Platform subscription. Enhanced service levels, dedicated support, or negotiated deployment commitments apply when an executed Order Form states them. Only features expressly identified as experimental are excluded from the standard Platform. Either party may terminate for material breach not cured within 30 days, or immediately where cure is impossible, law requires action, or serious harm is likely. Expired or terminated commercial rights stop as stated in the License Policy; open-source rights continue under their licenses.
14. Disclaimers
To the maximum extent allowed, Runstamp software, hosted services, outputs, receipts, connectors, and beta features are provided "as is" and "as available." We disclaim implied warranties of merchantability, fitness, non-infringement, and uninterrupted/error-free operation. We do not warrant output accuracy, fidelity, acceptance, compliance, legal effect, or fitness for filing or production. Nonwaivable rights remain.
15. Liability
Neither party is liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or lost profits, revenues, goodwill, data, or business interruption. Aggregate liability is limited to fees paid or payable for the affected Runstamp offering in the 12 months before the event. Limits do not apply to payments; IP misuse; confidentiality breach; indemnification; fraud, willful misconduct, or gross negligence; or liability that law cannot limit. Open-source license liability terms control for open-source components.
16. Indemnification
Customer will defend and indemnify Plain Works and its personnel against third-party claims arising from Customer Content, outputs, connected systems, Customer's instructions, license violation, or prohibited use, except to the extent caused by our breach. Plain Works will defend a paid customer against a claim that an unmodified Commercial Component or hosted Service used as authorized infringes third-party IP, excluding Customer Content, customer combinations/instructions, open source, and continued use after notice. Prompt notice, cooperation, defense control, and settlement consent apply.
17. Law, changes, and general terms
Korean law governs, excluding conflict rules. The parties will attempt good-faith resolution for 30 days; courts having jurisdiction over Cheonan-si, Chungcheongnam-do, Republic of Korea then have exclusive jurisdiction, except urgent injunctive relief may be sought elsewhere. Mandatory rights remain.
We may update these Terms with reasonable notice of material adverse changes. An executed Order Form controls for its subject, the DPA for personal data, an express open-source license for its component, the License Policy for Commercial Components, then these Terms. Assignment requires consent except for a merger, reorganization, or sale of relevant assets. Force majeure excuses delay other than payment. Invalid terms are narrowed/severed; non-enforcement is not waiver.
18. Contact
Support, legal, privacy, and security: hello@runstamp.com