For shoppers:
Terms and conditions
Software as Service Agreement
1.
Riskified responsibilities
a.
Provision of Services. Riskified will make the Services available to Client as described in this Agreement and the order form(s) (each, an “Order Form”). “Services” means the products and services, ordered by Client pursuant to an Order Form.
b.
Support. Riskified, at its own expense, will provide Client with reasonable technical support in accordance with Riskified’s standard practices.
с.
Security Program. Riskified shall establish and maintain a data privacy and information security program that includes physical, technical, administrative, and organizational safeguards, that is designed to: (i) ensure the security and confidentiality of the Client Confidential Information; (ii) protect against any anticipated threats or hazards to the security or integrity of the Client Confidential Information; and (iii) protect against unauthorized disclosure, access to, or use of the Client Confidential Information, in each case, in accordance with the security schedule attached hereto.
d.
Security Program. Riskified shall establish and maintain a data privacy and information security program that includes physical, technical, administrative, and organizational safeguards, that is designed to: (i) ensure the security and confidentiality of the Client Confidential Information; (ii) protect against any anticipated threats or hazards to the security or integrity of the Client Confidential Information; and (iii) protect against unauthorized disclosure, access to, or use of the Client Confidential Information, in each case, in accordance with the security schedule attached hereto.
2.
Client data
a.
License to Client Data. Client grants Riskified and its Affiliates the worldwide, non-exclusive, royalty-free, perpetual, fully-paid-up, and irrevocable, right to: (i) use data received from or made available by Client (“Client Data”) to provide Services to (a) Client and (b) Riskified’s and its Affiliates other clients; provided that Riskified and its Affiliates shall only use the Client Data to provide the services and shall not disclose Client Data to such other clients; (ii) incorporate the Client Data into Riskified’s services; (iii) and use the Client Data in accordance with Riskified’s Privacy Policy. For the avoidance of doubt, Riskified uses a combination of client data from all of its clients as well as third-party sources to provide its services; without such Client Data, Riskified is unable to provide the services. Riskified may provide Client Data to third parties in order for Riskified to provide the Services and Client consents to such transfer of Client Data.
b.
Client Authorization. Client shall obtain all consents and make all disclosures needed in order for Riskified to use the Client Data as permitted by this Agreement. Furthermore, Riskified may disclose Client Data pursuant to a data subject access request or consumer data request as required by law or in its sole discretion. Notwithstanding anything herein to the contrary, Riskified shall be permitted to retain and use Client Data associated with a chargeback after the expiration or termination of this Agreement or any Order Form. Solely for purposes of the California Consumer Privacy Act of 2018, Cal. Civil Code § 1798.100 et seq. (as may be amended from time to time) (the “CCPA”), (i) Riskified is acting as a Service Provider (as defined in the CCPA) for Client as a Business (as defined in the CCPA), (ii) except as set forth herein, Riskified is prohibited from selling the Client Data or retaining, using, or disclosing the Client Data for any purpose other than for the specific purpose of performing the Services, (iii) Client hereby instructs Riskified that the Business Purpose includes Riskified using and retaining the Client Data internally for the benefit of all of Riskified’s clients for detecting fraud, optimizing e-commerce solutions and similar performance enhancing purposes and (iv) Riskified understands and will comply with the restrictions herein.
с.
Client Responsibility. Client is solely responsible for all aspects of Client Data, including its sourcing, inputting, accuracy, quality, integrity and management. Client shall be responsible for (i) obtaining consent from Client’s end customers, (ii) the provision of notices to Client’s end customers, (iii) obtaining consent to use automated decision making, (iv) providing Client’s end customers with the ability to exercise any access rights, and (v) any requirements or limitations regarding the processing of data of minors, in each case, to the extent required under applicable law.