Acceptance and scope
By accepting this agreement in the Throttle dashboard, you agree to it on behalf of your workspace and the legal entity that owns it, and you represent that you are authorized to do so.
Acceptance is recorded once per workspace and covers every extension you publish from that workspace, including extensions created later. We record the accepting workspace, the timestamp, and the version of this agreement.
We may publish a new version of this agreement. Continued distribution of an extension after a new version takes effect requires accepting that version; until you do, you may not submit new extensions or new versions for review.
Eligibility
To submit an extension for review, your Throttle workspace must be on a paid plan or hold current partner status, and must remain eligible for as long as your extension is listed. If your workspace loses eligibility, we may suspend your listings until it is restored.
Definitions
Extension means software you make available through the Throttle Marketplace, including any hosted service, iframe surface, and webhook consumer it uses. Version means an immutable snapshot of an extension's configuration, scopes, and endpoints as recorded by the platform. Listing means the public name, tagline, description, category, icon, screenshots, and support, privacy, and terms links shown to merchants. Merchant means a Throttle customer who installs your extension. Merchant Data means any data you access, receive, or derive through the platform relating to a merchant, their buyers, or their transactions. Installation means an authorized instance of your extension in one merchant workspace, application, and environment.
Your responsibilities
You are solely responsible for your extension. This includes hosting and availability: you run your own infrastructure, persistence, queues, retries, and monitoring. Throttle hosts the catalog, the review workflow, credential issuance, and event delivery — not your service.
Every endpoint you register, including your iframe, your webhook receiver, and every URL in your listing, must use HTTPS. You must prove control of the domains you register and must not point an extension at a domain you do not control.
You must maintain the support channel published in your listing and respond to merchant enquiries about your extension. You are responsible for any third party your extension relies on, including their credentials, terms, and outages.
Review and approval
Submitting an extension begins a review. We aim to reach a first decision within five business days, though complex submissions may take longer. Approval is at our discretion. We may approve, request changes, or reject, and we will provide written feedback when we request changes or reject.
Approval applies to the exact version reviewed. It is not a certification, endorsement, audit, or warranty of your extension, and it does not transfer any responsibility for your extension to us. Publishing a change after approval moves you off the approved version and requires a new review before you can be listed publicly again.
Listing content
Your listing must accurately describe what your extension does, and screenshots must depict its actual functionality. You must not imply that your extension is built, endorsed, certified, or operated by Throttle, and you must not use our name or marks except to state factually that your extension works with Throttle.
You grant us a non-exclusive, worldwide, royalty-free license to display your listing content in the Marketplace, in the dashboard, and in materials promoting the Marketplace, for as long as your extension is listed. You represent that you hold the rights to everything in your listing.
Merchant data and privacy
Request only the scopes your extension actually uses. Scopes are granted per version, exactly as reviewed.
Use Merchant Data only to provide the functionality your listing describes, and only for the merchant it came from. You must not sell, rent, or license Merchant Data. You must not pool Merchant Data across merchants except as strictly necessary to operate your extension, and never in a form attributable to a merchant or buyer. You must not use Merchant Data to train machine-learning models, except on data from a merchant who has separately and specifically agreed to it. You must not use Merchant Data for advertising or for building profiles of buyers.
As between you and the merchant, you act on the merchant's instructions with respect to Merchant Data. You must publish a privacy policy at the URL in your listing that accurately describes what you collect, why, and how long you keep it.
When an installation is removed, stop accessing that merchant's data immediately and delete or irreversibly anonymize it within 30 days, except where you must retain it by law. You must certify deletion on request.
You must not receive, store, or transmit full payment card numbers or equivalent sensitive authentication data through your extension.
Security
Protect the credentials the platform issues you — API keys, webhook signing secrets, and identity token material — with at least industry-standard care. Never place them in browser code, public repositories, or client applications.
Verify the signature on every event you receive before acting on it, and verify identity tokens before trusting the identity they assert.
Notify us at [email protected] without undue delay, and no later than 72 hours after becoming aware of any breach of security affecting Merchant Data or platform credentials, and cooperate with us and the affected merchants in responding.
Prohibited conduct
You must not attempt to access data outside the scopes granted to your extension or circumvent any platform access control. You must not misrepresent your identity, your affiliation, or the origin of your extension. You must not ship malicious code, undisclosed data collection, or functionality materially different from what was reviewed. You must not degrade the platform, including through excessive or abusive request volume. You must not contact merchants using contact details obtained through the platform for any purpose other than supporting your extension.
Fees
Listing an extension is currently free, and Throttle does not process payments between you and merchants. Any charge you make for your extension is a matter between you and the merchant, and you are responsible for the terms, billing, taxes, and refunds involved.
We may introduce Marketplace fees in a future version of this agreement, with at least 30 days' notice before they take effect.
Suspension and removal
We may suspend or remove an extension from the Marketplace if we reasonably believe it breaches this agreement, harms merchants or buyers, or creates legal or security risk. Where the risk is not urgent, we will tell you what the problem is and give you at least 7 days to fix it before removing your extension. Where merchants or buyers face immediate harm, we may remove it at once and tell you why immediately afterward.
You should understand the technical effect before you publish. Removal is global and immediate: the extension is delisted, its approval is revoked, and every existing installation across every merchant is uninstalled, with the associated API keys and delivery endpoints deactivated. Merchants who depend on your extension will lose that functionality at once.
Term and termination
Either party may terminate this agreement at any time, and you may withdraw an extension by delisting it. On termination, the license granted in Listing content ends and we will remove your listings. The sections covering Merchant Data and privacy, Security, Intellectual property, Warranties and disclaimers, Indemnity, and Limitation of liability survive termination.
Termination does not by itself end your obligations to merchants who have already installed your extension. You must give affected merchants at least 30 days' notice before discontinuing an extension they rely on, except where you must act sooner for security or legal reasons.
Intellectual property
You keep all rights in your extension. We keep all rights in the Throttle platform, its APIs, and its marks. Nothing here grants either party rights in the other's intellectual property except the limited licenses stated in this agreement. Feedback you send us about the platform may be used without restriction or obligation.
Warranties and disclaimers
You warrant that you have the right to publish your extension, that it does not infringe anyone's rights, and that it complies with applicable law, including data-protection and consumer-protection law in the markets you serve.
The platform is provided on an "as is" and "as available" basis. To the maximum extent permitted by law, we disclaim all implied warranties, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant uninterrupted or error-free operation.
Indemnity
You will defend, indemnify, and hold harmless Better Interaction, Inc. against claims, damages, and costs arising from your extension, your use of Merchant Data, your listing content, or your breach of this agreement.
Limitation of liability
To the maximum extent permitted by law, neither party will be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, revenues, data, goodwill, or business interruption.
To the maximum extent permitted by law, our total liability arising out of or relating to this agreement will not exceed the greater of the total fees you paid us under this agreement in the twelve months before the event giving rise to the claim, or one hundred United States dollars. This limit does not apply to your indemnity obligations.
Changes to this agreement
We may update this agreement by publishing a new version with a new version identifier. Material changes take effect for you when you accept the new version in the dashboard.
Contact
Questions about this agreement can be sent to [email protected] or through the contact page. Guidance on building and submitting an extension is in the publishing documentation.