Terms of Service

Section 1. General Provisions and Service Provider Information

1. The Storemate service is provided by BUSZ sp. z o.o. with its registered office in Suchy Las (62-002), ul. Wiązowa 1A/1, Poland, entered into the Register of Entrepreneurs of the National Court Register (KRS) under number 0001098137, NIP (Tax Identification Number): 9721351496, REGON: 528264635 (hereinafter referred to as the "Service Provider"). Contact email address: contact@storemate.io.

2. These Terms of Service (hereinafter referred to as the "Terms") govern the rules for using the Storemate software application and the storemate.io website — including account registration, service scope, subscription fees, rights and obligations of the parties, liability limitations, and data protection rules.

3. The Storemate service is intended strictly for business entities and commercial users (B2B only) — individuals conducting business activity, legal persons, and organizational units without legal personality granted legal capacity by law, using the Service directly for their business or professional activities (hereinafter referred to as the "Customer"). The Service is not offered to consumers. Provisions concerning consumers apply solely to individuals using the publicly available, free sections of the storemate.io website (Section 12).

4. The agreement for the provision of SaaS services is concluded upon the terms specified herein at the moment defined in Section 4(4).

Section 2. Definitions

Whenever used in these Terms, the following terms shall have the meaning specified below:

• Application — the Storemate software provided as a Software-as-a-Service (SaaS) model accessible via a web browser, including the Customer control panel, Application Programming Interfaces (APIs), and integration modules;
• Account — an individual allocation of resources within the Application assigned to the Customer, secured by login credentials, through which the Customer manages data, integrations, and authorized users;
• Plan — the individually agreed scope of the Service for a given Customer, specifying the available features, technical limits (e.g., number of processed orders, active listings, AI requests), and the amount of the Subscription Fee, as set out in the offer or order confirmation accepted by the Customer; general pricing information may be published at storemate.io/cennik;
• Subscription Fee — the recurring fee for accessing the Application under the agreed Plan, in the amount agreed individually with the Customer, paid for a given billing cycle (monthly or annual);
• Customer Data — all data, files, and content entered into the Application by the Customer or fetched on its behalf from connected external channels (including orders, buyer details, inventory levels, prices, invoices, and messages);
• Integrations — connection modules between the Application and third-party systems, including e-commerce platforms and marketplaces (e.g., Temu, Shopify, WooCommerce, Allegro), logistics providers (e.g., InPost, DHL), email service providers, messaging channels, and electronic invoicing/accounting systems (e.g., KSeF, Fakturownia);
• AI Assistant — a feature within the Application utilizing Artificial Intelligence and Large Language Models (LLMs) to generate draft responses, documents, or action suggestions requiring Customer verification or configuration.

Section 3. Technical Requirements, Security, and Fair Use Policy (FUP)

1. To use the Application, the Customer requires a terminal device with high-speed Internet access and a modern web browser (Chrome, Firefox, Safari, Edge) with JavaScript and cookie support enabled.

2. The Customer is responsible for maintaining the strict confidentiality of Account credentials (logins and passwords). Any action performed after logging into the Account with valid credentials shall be deemed carried out by or on behalf of the Customer, unless the Customer previously reported a compromise of login credentials to the Service Provider.

3. Each user account created under the Customer's primary Account must be assigned to an authorized individual acting on behalf of the Customer. Sharing credentials among multiple individuals is done at the Customer's sole risk.

4. It is prohibited to supply unlawful content through the Application, violate third-party rights or trade secrets, or engage in activities that disrupt system performance (including vulnerability scanning, brute-force attempts, or automated data scraping outside intended service use).

5. API Rate Limits and Fair Use Policy: The Service Provider reserves the right to impose rate limits on requests sent to the Application API or integration endpoints. In the event of excessive server load, abnormal traffic spikes, or abusive system calls threatening infrastructure stability, the Service Provider may immediately throttle or temporarily suspend API access for the involved Account.

Section 4. Account Registration and Agreement Conclusion

1. Account registration occurs via the registration form on storemate.io or through an agreed onboarding process. The Customer must provide accurate business registration details, including company name, registered address, tax ID (NIP/VAT number), and contact email.

2. Registration requires explicit acceptance of these Terms and acknowledgment of the Privacy Policy.

3. The Service Provider may offer a free Trial Period. The duration and scope of the Trial Period are specified at the discretion of Storemate. The Trial Period places no obligation on the Customer to purchase paid access; upon expiry, access is restricted until the commercial terms are agreed with the Service Provider and the first Subscription Fee is paid.

4. The SaaS Agreement is formed upon Account activation. For paid services, the agreement becomes effective upon purchasing the first subscription term. The Agreement remains in force for an indefinite period.

5. The Customer is granted a non-exclusive right to use the Application strictly for its internal business operations. Reselling, sublicensing, renting, or offering White Label services based on the Application without prior written consent from the Service Provider is strictly prohibited.

Section 5. Service Scope and Technical Support

1. The Application provides multi-channel order management (including integration with Temu, Allegro, Shopify etc.), inventory and price synchronization, shipping automation and courier label generation, order-bound email management, electronic invoicing (KSeF, Fakturownia integration), sales reporting, and AI Assistant tools.

2. Integration availability relies on the stability and availability of third-party APIs.

3. The Service Provider continuously develops the Application. System updates and feature improvements that do not substantially degrade paid Plan capabilities shall not constitute an amendment to the Agreement.

4. The Service Provider uses commercially reasonable efforts to maintain high system availability. Planned technical maintenance will be scheduled during off-peak hours whenever feasible and announced in advance.

5. Technical Support is available on business days, Monday to Friday, 9:00 – 17:00 CET via email at: contact@storemate.io.

Section 6. AI Assistant Rules

1. The AI Assistant acts as a supportive automation tool. All suggestions, drafted communications, labels, or documents generated by the AI Assistant must be reviewed and verified by the Customer prior to dispatch or execution.

2. The Customer assumes sole responsibility for all messages, actions, and legal statements approved and issued from its Account via the AI Assistant.

3. The Service Provider utilizes subprocessor LLM vendors (e.g., Anthropic, Google and others). Customer data passed to AI models undergoes data minimization and pseudonymization. Customer Data is not utilized by third-party LLM vendors to train public AI models.

Section 7. Fees, Invoicing, and Usage Adjustments

1. The Subscription Fee is agreed individually with each Customer and depends in particular on the scope of required Integrations, the volume of processed orders, and the complexity of the Customer's systems and sales channels. The agreed fees are set out in the offer or order confirmation accepted by the Customer. All prices are net amounts, exclusive of applicable taxes (e.g., VAT). General pricing information may be published at storemate.io/cennik.

2. Subscriptions are billed in advance for the selected billing cycle (monthly or annually) via invoice, bank transfer, or automated payment card charging.

3. Payment processing is handled by Stripe. The Customer authorizes recurring charges to its payment card at the start of each renewal term. Recurring billing may be disabled via the Account panel prior to the next billing cycle.

4. Invoices are issued electronically and delivered via email or made available in the Account panel.

5. Usage Adjustments: If the Customer's actual usage of the Application materially and persistently exceeds the assumptions underlying the individually agreed Plan (in particular the volume of processed orders or AI requests), the Service Provider may propose an adjustment of the Subscription Fee, providing justification. The adjusted fee applies from the next billing cycle upon the Customer's acceptance; if the Customer does not accept the proposed adjustment, either party may terminate the Agreement with effect at the end of the current billing cycle.

6. Payment default exceeding 30 days following email notice empowers the Service Provider to suspend Account access. Account suspension due to non-payment does not relieve the Customer of its outstanding payment obligations.

Section 8. Limitation of Liability

1. The Service Provider shall be liable to the Customer solely for direct actual damages (damnum emergens) caused intentionally or by gross negligence of the Service Provider.

2. Liability for lost profits (lucrum cessans), business interruption, loss of unbacked data, or third-party claims against the Customer is excluded to the fullest extent permitted by applicable law.

3. The aggregate liability of the Service Provider under or in connection with the Agreement shall not exceed the total Subscription Fees paid by the Customer in the 12 months preceding the event giving rise to the claim.

4. The Service Provider bears no liability for service interruptions, API changes, or failures originating from external integrated third-party platforms (including Temu, shipping carriers, payment processors, or government tax platforms).

5. The Customer shall indemnify, defend, and hold harmless the Service Provider against any third-party claims, disputes, or proceedings (including legal costs) arising out of the content, data, or activities submitted or approved by the Customer within the Application.

Section 9. Personal Data Protection and Incident Notification

1. Customer Data remains the exclusive property of the Customer. The Service Provider maintains robust technical and organizational security controls, including encryption in transit (SSL/TLS) and encryption at rest.

2. To the extent Customer Data includes personal data of end-buyers, the Customer acts as the Data Controller under GDPR, and the Service Provider acts as the Data Processor. Processing terms are governed by the Data Processing Agreement (DPA) attached as Annex 1.

3. Breach Notification Procedure: The Service Provider maintains a security response procedure. In the event of a confirmed personal data breach affecting Customer Data, the Service Provider shall:

• notify affected Customers (Controllers) without undue delay;
• assist the Customer in notifying supervisory authorities (e.g., UODO) within 72 hours of detection;
• directly notify integration partners where required under partner security agreements;
• log the incident details and remediation measures in an internal security register.

Section 10. Term and Termination

1. Either party may terminate an open-ended Agreement by providing 1-month written notice (via email) effective at the end of the current billing cycle.

2. The Service Provider may terminate the Agreement immediately for cause if the Customer defaults on payments past 30 days, violates Section 3(4) or 3(5), or utilizes the Service for illegal purposes.

3. Upon Agreement termination, Account access is disabled. Customer Data is retained for 90 days to allow data export requests, after which all Customer Data is permanently deleted from production systems.

Section 11. Complaints

1. Service or billing complaints must be submitted electronically to: contact@storemate.io.

2. Complaints will be reviewed within 14 days of receipt, with formal responses delivered to the Customer's registered email address.

Section 12. The storemate.io Website

1. Browsing the publicly available pages of the storemate.io website and using its contact forms is free of charge and does not require Account registration.

2. All materials, graphics, visual elements, and texts published on the website constitute the intellectual property of the Service Provider and are protected by copyright law.

Section 13. Amendments to the Terms

1. The Service Provider reserves the right to amend these Terms for valid reasons, including changes in applicable law, implementation of new features, changes in third-party provider conditions, or changes in billing models.

2. The Customer will be notified of any planned amendments by email or via an in-app message at least 14 days before they take effect.

3. If the Customer does not accept the amended Terms, the Customer may terminate the Agreement with effect before the amendments enter into force.

Section 14. Governing Law and Final Provisions

1. These Terms and any agreements concluded hereunder shall be governed by and construed in accordance with the laws of the Republic of Poland.

2. Any disputes arising out of or in connection with the Service shall be subject to the exclusive jurisdiction of the court having venue over the Service Provider's registered seat.

3. Should any provision of these Terms be held invalid or unenforceable, the remaining provisions shall remain in full force and effect, and the invalid provision shall be replaced by a valid one that most closely reflects its economic purpose.

4. In matters not regulated herein, the provisions of the Polish Civil Code and the Polish Act on Providing Services by Electronic Means shall apply. These Terms constitute the regulations for the provision of electronic services within the meaning of Article 8 of that Act.

Section 1. Purpose and Scope of Data Processing

1. The Customer (acting as Data Controller) entrusts BUSZ sp. z o.o. (acting as Data Processor) with the processing of personal data pursuant to Article 28 GDPR for the purpose of delivering the Storemate Service.

2. Entrusted categories include buyer and customer data obtained from connected e-commerce stores and marketplaces (name, delivery address, email, phone number, order history, and billing data).

3. Categories of data subjects: the Customer's buyers and business partners and their contact persons; the Customer's users of the Application. Duration of processing: the term of the Agreement plus the 90-day export and deletion window (Section 10(3) of the Terms). Nature of processing: retrieval from connected systems, storage, organisation, synchronisation, transmission to recipients designated by the Controller, and erasure. Special categories of data (Article 9 GDPR) are not subject to this DPA.

Section 2. Processor Obligations

1. The Processor shall process personal data solely on documented instructions from the Controller, which includes enabling and operating system features.

2. The Processor implements technical and organizational measures required under Article 32 GDPR, ensuring data confidentiality, integrity, and encryption at rest and in transit.

3. Access to personal data is restricted to persons authorized by the Processor who are bound by statutory or contractual confidentiality obligations.

4. Taking into account the nature of the processing, the Processor shall assist the Controller — through appropriate technical and organizational measures — in responding to data subject requests (Articles 12-22 GDPR) and in ensuring compliance with the obligations set out in Articles 32-36 GDPR, including personal data breach notifications and data protection impact assessments.

5. Upon termination of the Agreement, the Processor shall, at the Controller's choice, delete or return all entrusted personal data (in line with the 90-day export window described in Section 10(3) of the Terms), unless further storage is required by applicable law.

6. The Processor shall promptly inform the Controller if, in its opinion, an instruction infringes the GDPR or other data protection provisions (Article 28(3)(h) GDPR). Transmission of data via the Application to logistics operators, marketplaces, payment providers or invoicing systems configured by the Controller takes place on the Controller's instruction and constitutes disclosure to recipients chosen by the Controller, not sub-processing.

Section 3. Subprocessors and Cross-Border Data Transfers (DPF & SCCs)

1. The Controller grants general authorization for the Processor to engage third-party subprocessors.

2. The public, up-to-date register of subprocessors (including hosting, database, AI pipeline, invoicing, and payment infrastructure vendors such as Vercel Blob, Prisma, Braintrust, Anthropic, Fakturownia, Stripe etc.) is maintained at: https://storemate.io/subprocessors.

3. Personal data transfers outside the European Economic Area (EEA) to third countries (including the US) comply with Chapter V GDPR requirements via Data Privacy Framework (DPF) certifications or Standard Contractual Clauses (SCCs) supported by Transfer Impact Assessments (TIAs) and technical measures (pseudonymization, encryption, no PII in system logs).

4. The Processor shall inform the Controller of any intended addition or replacement of a subprocessor at least 14 days in advance (e-mail or in-app notice). The Controller may object on reasonable grounds within that period; failing agreement, either party may terminate the Agreement with effect at the end of the current billing period.

5. The Processor shall impose on each subprocessor, by contract or other legal act, data protection obligations at least equivalent to those set out in this DPA (Article 28(4) GDPR) and remains fully liable to the Controller for the performance of the subprocessor's obligations.

Section 4. Audit Rights and Final Provisions

1. The Controller is entitled to verify the Processor's compliance with this DPA — upon reasonable prior notice, in a manner that does not disrupt the Processor's operations and does not compromise the confidentiality of other customers' data. Audit requests shall be submitted to: contact@storemate.io.

2. This DPA remains in force for the duration of the main Agreement and terminates automatically upon its expiry or termination.