Legal
Terms of service
The agreement between you and us when you install Auditor. Written to be read once and understood, not to be survived.
Last updated 30 July 2026 · Version 1.0
1. The agreement
These terms are between Inflexi Technologies Private Limited, registered at OCAC Tower, Bhubaneswar, India ("Auditor", "we", "us"), and the business that installs the Auditor app ("you", "the merchant").
You accept these terms when you install Auditor in a BigCommerce store or use the Auditor dashboard. If you are accepting these terms on behalf of a company or other organisation, you confirm that you are authorised to bind that organisation. If you do not agree to these terms, you should uninstall Auditor and stop using the service.
Our privacy statement forms part of this agreement. If you and we enter into a separate written agreement or data processing agreement, that agreement will take precedence over these terms to the extent of any conflict concerning the matters it specifically covers.
2. What Auditor does
Auditor receives notifications of events in your BigCommerce store, converts each into an audit entry, stores those entries for the retention period of your plan, and gives you a dashboard to search, filter on them. Auditor also tries to establish linkage between a change emitted by BigCommerce to a record in the Staff Log stored in BigCommerce.
Auditor holds read-only permissions on your store. It does not create, edit or delete anything in your store, and it cannot restore anything you delete. It records; it does not act.
3. What the record is and isn't
This section matters more than any other, so it is early and in plain language. It sets the honest limits of what an audit record can tell you.
- We can only record what BigCommerce tells us. Auditor depends on the events BigCommerce sends and the detail they contain. If BigCommerce does not emit an event, delays it, or does not include information such as the acting staff member or source IP address, that information will not appear in Auditor’syour record. We do not control BigCommerce's platform.
- Auditor will not have a has no view of events or changes that happened in your store before you installed the app.
- Attribution can be indirect. Changes made by another app, an integration, or an API token may be attributed to that app, integration, or token because that is how BigCommerce reports the activity. This does not necessarily identify the individual person who triggered the change. As a result, not all changes stored in Auditor will be linked to a staff.
- Auditor is not a compliance certification. Installing Auditor does not make your business compliant with PCI DSS, SOC 2, GDPR, or any other standard or law. Whether the records provided by Auditor satisfy a particular auditor, regulator, court, or other requirement is a matter for you and your professional advisers. We make no representation that they will make you compliant for any law, legal mandate, etc..
- Auditor is not a backup. Audit entries can help you understand what was recorded and may help you reconstruct information manually, but Auditor is not a backup or disaster-recovery product and should not be relied upon as one. There may be instances of changes where the previous data, before the change was effected, will not be available in Auditor. Change to changer linkage accuracy will have limitations: Auditor tries its best to link the change emitted by BigCommerce to the event recorded in the Staff Log based on timestamp. However, there will be cases where Auditor is not abe to create the link and hence cannot be relied upon entirely.
- Future features may have their own limitations. We may introduce additional features, such as alerts or other monitoring capabilities, in future releases. Any such features will be subject to their own functionality, availability, and limitations when introduced.
4. Your account and access
You must be a business, at least 18 years old, and able to enter a contract. You are responsible for everyone you give access to the dashboard, including colleagues, contractors and agencies, and for their compliance with these terms.
Keep your credentials secure and tell us promptly at auditor@inflexi.com if you think an account has been compromised.
5. Plans, beta and fees
- Beta. Auditor is currently available as a free beta. During the beta period, you will not be charged a subscription fee for using Auditor.
- Paid plans. We may introduce paid subscription plans after the beta and stable release. If paid plans are introduced, the applicable price, features, retention period, usage limits, and other plan terms will be clearly shown on the pricing page before you subscribe.
- No automatic charges. Moving from the free beta to a paid plan will not automatically charge you. You will need to select and approve a paid plan through the applicable BigCommerce billing process before subscription charges begin.
- Billing. Where paid plans are introduced, billing and payment processing will be handled through BigCommerce's applicable billing system and terms. We will not directly process or store your payment card details.
- Plan changes. If paid plans are introduced, the terms for upgrading, downgrading, cancelling, usage limits, and retention periods will be described with the applicable plans.
- Price changes. If we introduce paid plans or change the price of an existing plan, we will provide reasonable advance notice before the change applies to an existing paid subscription, where required by applicable law.
- Refunds. Any refund terms applicable to paid plans will be provided when those plans are introduced and will be subject to applicable law and BigCommerce's applicable billing terms.
6. Your responsibilities
Because an audit log contains information about real people, some duties sit with you and cannot sit with us:
- Tell your staff that their activity in the store is recorded, and for how long. In many jurisdictions monitoring employees without notice is unlawful.
- Make sure your own privacy notice covers the fact that you keep an audit history, and set a retention period you can justify.
- Control who at your business can read the record. It can contain customer addresses and other personal data.
- Respond to requests from your staff and customers about their data. You are the controller of the audit history; we process it for you.
- Keep the store data itself lawful. We record what your store does; we do not vet it.
- Ensure that Staff Log is scanned periodically by Auditor. Since access to BigCommerce Staff Logs are not exposed as an API, we will rely upon you to run the Staff Log scanning periodically
7. Acceptable use
Do not:
- use Auditor to monitor a person for a purpose unrelated to operating, administering, or securing your store, or in a way that is unlawful where they are;
- install or use Auditor on a store that you are not authorised to administer;
- attempt to access another merchant's data, probe, disrupt, or overload our systems, or interfere with the security or operation of Auditor;
- scrape, resell, sublicense, distribute, or white-label the service without our prior written agreement;
- reverse engineer, decompile, or attempt to derive the source code of the app, except where applicable law expressly permits it;
- submit to Auditor or provide to us any content or information that infringes another person's rights or contains malware, malicious code, or other harmful material.
Good-faith security research is welcome. If you identify a potential security vulnerability in Auditor, please report it privately using the security contact details provided on our website. We ask that you give us a reasonable opportunity to investigate and address the issue before publicly disclosing it.
8. Your data
8.1 It stays yours. You retain ownership of your store data and the audit history recorded from it. Nothing in these terms transfers ownership of that data to us.
8.2 What we may do with it. You grant us a limited right to receive, store, process, and display your store data and audit history only as reasonably necessary to provide, maintain, support, and secure Auditor. We do not sell your store data, use it for advertising, or use it to train machine-learning or artificial-intelligence models.
8.3 Service improvement. We may produce aggregated and appropriately de-identified statistics about how Auditor is used, such as overall event volumes or feature usage. We may use information that cannot reasonably identify a merchant, staff member, or customer to operate, maintain, analyze, and improve Auditor.
8.4 Retention and deletion. During the current free beta, audit history is retained for up to 1 year. After the beta and stable release, retention periods may depend on the merchant's selected paid plan and will be described with the applicable plan. Where a plan provides extended retention, older audit history may be moved to an archive and retained for the applicable period before being deleted in accordance with our retention procedures.
When you uninstall Auditor, we will stop accessing your store through the app and handle your existing data in accordance with the applicable retention and deletion policy. You may contact us to request deletion where applicable, subject to any legal or legitimate retention requirements.
8.5 Integrity. Audit entries are designed to be append-only while they exist. Individual entries are not intended to be altered or quietly removed as part of normal use of the service. Deletion occurs through the applicable retention or deletion process rather than by silently changing an individual audit entry.
8.6 Data protection. The privacy statement explains our data protection roles and how personal information is handled. Where a data processing agreement is required, you may contact us to request one.
9. Availability and support
We aim to keep Auditor available continuously and to record events as they arrive, but we do not promise uninterrupted service unless a separate written service level agreement says so. [If you publish an SLA, link it here and state the target and the remedy.]
We may carry out maintenance, and will give notice in the dashboard or by email for anything we expect to be disruptive. Where an outage delays event delivery, we backfill entries when we can, though BigCommerce's own retry limits may make some events unrecoverable.
Support is by email at the response targets on the pricing page, during business days in [timezone].
10. Intellectual property
Auditor, including its software, dashboard, documentation, name, branding, designs, and other materials provided by us, belongs to us or our licensors. We grant you a limited, non-exclusive, non-transferable, revocable right to access and use Auditor for your own business purposes while you are authorised to use the service. All rights not expressly granted to you are reserved.
If you send us feedback, suggestions, ideas, or requests about Auditor, we may use them without restriction or obligation to you. Providing feedback does not give you any ownership interest in Auditor or its intellectual property.
Auditor is an independent product. BigCommerce is a trademark of its respective owner. Auditor is not affiliated with, endorsed by, sponsored by, or operated by BigCommerce.
11. Confidentiality
Each of us may receive or learn confidential information belonging to the other in connection with Auditor. Each party will use confidential information only as reasonably necessary to perform its obligations under these terms, protect it using reasonable care, and not disclose it except to people or service providers who need it for the relevant purpose and are subject to appropriate confidentiality obligations, or where disclosure is required by law.
Confidentiality obligations do not apply to information that is publicly available through no fault of the receiving party, was already lawfully known to the receiving party, is independently developed without using the other party's confidential information, or is lawfully received from another source without a confidentiality obligation.
12. BigCommerce and other third parties
Auditor depends on BigCommerce's platform, APIs, events, and other third-party services and infrastructure that we may use to operate the service. Your relationship with BigCommerce is governed by your agreement with BigCommerce.
We are not responsible for BigCommerce's acts or omissions, the availability or behaviour of its platform, its billing processes, or changes that BigCommerce makes to its APIs, events, permissions, or other platform functionality. Such changes may affect the information that Auditor can receive or record.
We may also change the third-party infrastructure and service providers used to operate Auditor from time to time. Where a third-party change materially affects Auditor, we will take reasonable steps to address the impact and communicate material changes where appropriate.
13. Disclaimers
We provide Auditor with reasonable skill and care. To the fullest extent permitted by applicable law, however, the service is provided on an "as is" and "as available" basis, and we disclaim other warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, and non-infringement.
In particular, and without limiting clause 3, we do not warrant that the audit record will be complete, that every event will be captured, that information supplied by BigCommerce will always be available or accurate, that the service will be error-free or uninterrupted, or that the audit record will satisfy any particular audit, regulatory, compliance, evidentiary, or other legal requirement.
Auditor is not a backup, disaster-recovery service, compliance certification, or substitute for your own security, compliance, or record-keeping procedures.
Nothing in these terms excludes or limits any right or liability that cannot lawfully be excluded or limited under applicable law, including liability for death or personal injury caused by negligence or for fraud.
14. Limitation of liability
Subject to clause 13 and to the fullest extent permitted by applicable law:
- Neither party will be liable for indirect, incidental, special, consequential, or punitive losses, or for loss of profits, revenue, anticipated savings, goodwill, or business opportunities arising from or connected with this agreement.
- We are not responsible for loss or corruption of your store data where that loss results from your failure to maintain appropriate backups or other independent copies of data that you are responsible for retaining.
- Our total liability arising out of or in connection with Auditor will be limited to the maximum amount permitted by applicable law and, where a specific contractual liability cap is permitted and agreed, the cap stated in the applicable plan or separate written agreement.
- Nothing in this clause limits any liability or legal right that cannot lawfully be limited or excluded.
These limitations reflect that Auditor is a record-keeping and auditing tool and is not an insurer or guarantee against loss, security incidents, platform failures, or business interruption.
15. Indemnity
To the extent permitted by applicable law, you will defend and indemnify us against third-party claims, losses, damages, and reasonable costs arising from your unlawful use of Auditor, your material breach of these terms, or data and content that you provide through the service and that infringes a third party's rights.
This does not apply to the extent that a claim results from our own breach of these terms, negligence, wilful misconduct, or violation of applicable law.
16. Suspension and termination
You may stop using Auditor at any time by uninstalling the app from your store. If paid plans are introduced in the future, any applicable cancellation and billing terms will be provided with the relevant plan.
We may suspend or terminate access to Auditor if you materially breach these terms and fail to remedy the breach within a reasonable period after receiving written notice, where the breach can reasonably be remedied.
We may suspend or terminate access immediately where reasonably necessary to protect the security or integrity of Auditor, prevent unlawful activity, address a serious security risk, or comply with a legal or regulatory requirement.
We may also discontinue Auditor or a material part of the service. Where reasonably practicable, we will provide advance notice of a planned discontinuation and explain any applicable arrangements for existing merchants.
On termination, your right to access Auditor ends. Your data will be handled in accordance with the retention and deletion provisions in clause 8 and our privacy statement. Clauses that by their nature should continue after termination, including provisions concerning intellectual property, confidentiality, liability, indemnity, and disputes, will continue to apply.
17. Changes
We may change, add, suspend, or retire features of Auditor as the service develops. Where a change materially affects a core function, we will provide reasonable notice where practicable.
We may also update these terms from time to time. We will update the version and effective date shown on this page. For material changes, we will provide reasonable advance notice where required by applicable law. If you continue to use Auditor after the updated terms take effect, your continued use will constitute acceptance of the updated terms to the extent permitted by law. If you do not agree to the updated terms, you should stop using Auditor and uninstall the app.
18. Governing law and disputes
This agreement is governed by the laws of [to be confirmed by legal counsel]. Any dispute will be subject to the jurisdiction agreed in accordance with applicable law.
Nothing in these terms removes any mandatory legal rights or protections that apply to you or your business under applicable law.
Before starting formal proceedings, please contact us using the support details provided on our website. We will make reasonable efforts to understand and resolve disputes before formal legal action is necessary.
19. General
- Entire agreement. These terms, the privacy statement and any signed agreement are the whole agreement between us and replace earlier discussions.
- Assignment. You may not assign this agreement without our consent. We may assign it to a group company or a buyer of our business.
- Severability. If a clause is unenforceable, the rest stands.
- No waiver. Not enforcing a right straight away does not waive it.
- Force majeure. Neither of us is liable for a failure caused by events beyond reasonable control, including platform or infrastructure outages.
- Notices. We write to the email on your account. You write to the addresses in clause 20.
- No partnership. Nothing here creates a partnership, agency or employment relationship.
- Third parties. Nobody other than you and us has rights under this agreement.
20. How to reach us
Support and contractual notices
Billing
Privacy and data requests
By post
Inflexi Technologies
OCAC Tower, Acharya Vihar
Bhubaneswar, Odisha
India
6742567223