Terms of Service

These Terms of Service ("Terms") govern your access to and use of the CardKit web application at app.cardkit.ai, the website cardkit.ai, and all related services, integrations, APIs and documentation (together, the "Service").

The Service is provided by BlueCloud Software d.o.o., Sesvete, Ulica Ivana Meštrovića 35, 10040 Zagreb, Croatia, OIB: 81263662150 ("CardKit", "we", "us"). Full provider details are available in our Legal Notice.

By creating an account, clicking "I agree", or using the Service, you enter into a binding agreement with us. If you accept these Terms on behalf of a company or other legal entity, you confirm that you are authorised to bind that entity, and "you" and "Customer" refer to that entity.

Last Update: 5 August 2026

1. Definitions

"Account" means the workspace created for you in the Service, including all Users you invite to it.
"Customer Data" means all data, metrics, files, credentials, text and other content that you or your Users transmit to the Service, or that the Service retrieves from Third-Party Services on your instruction.
"Documentation" means the product documentation and help resources we publish for the Service.
"Order" means the plan selection and any additional options you confirm at checkout or in an order form signed with us.
"Subscription Term" means the billing period you selected (monthly or annual) and each renewal period.
"Third-Party Service" means any service you connect to CardKit, for example Shopify, Stripe, Google Analytics 4, Google Ads, Meta or similar.
"User" means an individual authorised by you to use the Service under your Account.

2. The Service

CardKit is a software-as-a-service product. It connects the tools you already use, imports the metrics from those tools, displays them in one dashboard ("cockpit"), and notifies you when a metric moves outside its expected range based on your historical data.

We grant you a non-exclusive, non-transferable, non-sublicensable right to access and use the Service during the Subscription Term for your internal business purposes, in accordance with these Terms, your Order and the Documentation.

We deliver the Service over the internet. We do not deliver copies of software, and you receive no rights in our source code.

3. Eligibility and Account Registration

You must be at least 18 years old and able to enter into binding contracts. The Service is designed for businesses, self-employed professionals and organisations.

You must provide accurate registration data and keep it current. You are responsible for all activity under your Account, for the confidentiality of login credentials, and for the acts and omissions of your Users. Notify us at support@cardkit.ai as soon as you suspect unauthorised access.

Each User account is personal. Sharing one login between several individuals is not permitted where the plan is priced per user seat.

4. Plans, Trials and Beta Features

The features, connector limits, user seats, data refresh intervals and history retention of each plan are described on our pricing page and apply to the plan you order.

Trials. If we offer a free trial, you may use the Service during the trial period for evaluation. We may end or change trials at any time. Unless you cancel before the trial ends, the Account converts to the paid plan you selected and the first payment becomes due.

Beta features. Features marked as beta, preview, early access or "in review" are made available for testing. They may change or be withdrawn, are excluded from any service level commitment, and are provided without warranty.

Fair use. Plans are calculated for normal business use. If your usage of API calls, connector syncs, storage or compute is materially above comparable Accounts on the same plan, we will contact you and agree either a suitable plan or a fair-use limit before restricting anything.

5. Fees, Billing and Taxes

Fees are those stated at checkout for the plan you order. Unless expressly stated otherwise, prices are net prices and exclude value added tax and other applicable taxes.

Billing cycle. Subscriptions are billed in advance, monthly or annually, depending on your Order.
Payment. Payment is processed by our payment service providers. You authorise us and them to charge your selected payment method for all amounts due, including renewals, until you cancel.
Upgrades and downgrades. Upgrades take effect immediately and are charged pro rata for the remainder of the current period. Downgrades take effect at the start of the next period; we do not refund the unused part of a period.
Taxes. You are responsible for all taxes and duties, except taxes on our income. Where the reverse-charge procedure applies, you must provide a valid VAT identification number.
Late payment. If a payment fails, we may retry it, and we may suspend the Account after prior notice. Statutory default interest and reasonable collection costs may apply.
Price changes. We may change prices with at least 30 days' notice before the start of the next Subscription Term. If you do not accept the change, you may terminate with effect from the end of the current term.
Refunds. Except where mandatory law requires otherwise (see section 20) or where we terminate without cause, fees are non-refundable.

6. Term, Renewal and Termination

The agreement starts when you create an Account and continues for the Subscription Term. It renews automatically for further periods of the same length unless cancelled before the end of the current period.

Cancellation by you. You may cancel at any time in your Account settings, effective at the end of the current paid period. You keep access until then.
Termination for cause. Either party may terminate for good cause with immediate effect, in particular for material breach that is not cured within 14 days of written notice.
Termination by us for convenience. We may terminate a free Account at any time with 30 days' notice, and a paid Account with effect from the end of the current period.
Effect. On termination your right to use the Service ends and we deactivate connections to Third-Party Services.
Data export and deletion. You can export your dashboards and metric data at any time while the Account is active. After termination we retain Customer Data for 30 days so that you can export it, then delete it, unless a longer retention period is required by law. Details are set out in our Privacy Policy.

7. Acceptable Use

You must not, and must not allow any User or third party to:

use the Service in breach of applicable law, third-party rights or the terms of a connected Third-Party Service;
upload or connect data you are not entitled to process, or special categories of personal data, health data, payment card numbers or government identifiers, unless we have agreed this in writing;
reverse engineer, decompile, copy, resell, rent, sublicense or provide the Service to third parties as a service bureau, except as permitted by mandatory law;
circumvent plan limits, authentication, rate limits or usage metering, or scrape the Service by automated means outside our documented API;
upload malicious code, attempt to gain unauthorised access, disrupt or overload the Service or its infrastructure;
use the Service to send unsolicited communications or to build a competing product.

We may report unlawful activity to the competent authorities.

8. Third-Party Integrations and Credentials

The Service can connect to Third-Party Services on your instruction. Those services are operated independently and are governed by their own terms and privacy policies. We are not a party to your agreement with them.

By connecting a Third-Party Service you confirm that you are authorised to grant access and to have the relevant data processed in CardKit. You authorise us to access, retrieve, store and process that data to provide the Service.

Third-Party Services may change, restrict, deprecate or price their APIs at any time. We are not liable for their availability, accuracy or changes, and such changes may reduce or remove the functionality of an integration. Where an integration is unavailable for a material period through no fault of yours, we will offer you a reasonable remedy such as a plan change or pro-rata credit.

Access tokens and credentials are stored in encrypted form and used only to provide the Service. You may disconnect an integration at any time.

9. Customer Data and Licence

Customer Data remains yours. You grant us a worldwide, non-exclusive, royalty-free licence to host, copy, transmit, display, analyse and process Customer Data solely to provide, secure, support and improve the Service for you, and as instructed by you.

You are responsible for the legality, accuracy and quality of Customer Data and for having the necessary rights and legal bases.

We may generate aggregated, anonymised statistics from usage of the Service that no longer allow identification of you, your Users or your customers, and we may use those statistics to operate and improve the Service. We do not sell Customer Data, and we do not use identifiable Customer Data to train foundation models.

10. AI Features and Outputs

The Service includes automated analysis features that examine your historical metrics, detect anomalies and produce explanations, summaries and recommendations ("Outputs").

Outputs are generated automatically and can be incomplete or incorrect. They are decision support, not financial, tax, legal or investment advice.
You are responsible for reviewing Outputs before acting on them, and for any decision you take based on them.
Similar Outputs may be produced for other customers; Outputs are not exclusive to you.
As between you and us, you own the Outputs generated for your Account, to the extent they are capable of ownership.
Where sub-processors are used for these features, they are listed in our Privacy Policy.

11. Intellectual Property and Feedback

The Service, including all software, designs, dashboards templates, logos, brands, Documentation and improvements, is and remains our property or that of our licensors. These Terms grant no rights other than the limited right of use in section 2.

If you send us suggestions, ideas or feedback, we may use them without restriction, free of charge and without obligation to you. You retain no claim to compensation or attribution.

12. Confidentiality

Each party will keep the other party's confidential information secret, use it only to perform this agreement, and protect it with at least reasonable care. This does not apply to information that is public without breach, was already lawfully known, was independently developed, or must be disclosed by law or authority order, in which case the disclosing party will be informed where legally permitted.

These obligations continue for three years after the end of the agreement, and for trade secrets for as long as they remain trade secrets.

13. Data Protection

We process personal data as described in our Privacy Policy. Where we process personal data on your behalf as a processor within the meaning of Art. 28 GDPR, our data processing agreement applies; it is available on request at support@cardkit.ai and forms part of this agreement once concluded.

You act as controller for the Customer Data you connect and are responsible for informing data subjects and for the legal basis of the processing.

14. Availability, Support and Changes

We operate the Service with commercially reasonable care and aim for high availability. Planned maintenance is announced in advance where practicable and scheduled outside core business hours where possible. Availability excludes downtime caused by force majeure, by Third-Party Services, or by your systems or misuse.

Support is provided by email at support@cardkit.ai during our business hours. Response times, if any, follow your plan or a separate agreement.

We continuously develop the Service. We may add, change or remove features, provided the agreed core functionality of your plan is not materially reduced. If we materially reduce agreed functionality, we will inform you at least 30 days in advance and you may terminate the affected Subscription Term with effect from the change, with a pro-rata refund of prepaid fees for the unused period.

15. Security

We maintain technical and organisational measures appropriate to the risk, including encryption in transit and at rest, access controls with least-privilege principles, logging, regular backups, and vetted infrastructure providers inside the EU where possible.

You are responsible for security within your sphere, in particular strong credentials, multi-factor authentication where offered, prompt removal of Users who leave, and the security of your own devices and Third-Party Service accounts.

If you discover a vulnerability, please report it to support@cardkit.ai before disclosing it publicly.

16. Suspension

We may suspend access to the Service in whole or in part if: (a) there is a material security risk to the Service or other customers; (b) your use violates section 7 or applicable law; (c) a payment is overdue after a reminder; or (d) a Third-Party Service or authority requires it. Except in urgent cases we will notify you first and limit the suspension to what is necessary. Suspension does not relieve you of payment obligations, unless the suspension is our fault.

17. Warranties and Disclaimers

We warrant that the Service will substantially perform as described in the Documentation during the Subscription Term, and that we will provide it with the professional care customary in the industry.

Beyond that, and to the extent permitted by law, the Service is provided "as is". We do not warrant that it will be uninterrupted or error-free, that anomaly detection will identify every relevant event, that Outputs are accurate, or that data delivered by Third-Party Services is complete or correct. Nothing in this section limits the statutory rights of consumers.

18. Limitation of Liability

We are liable without limitation for intent and gross negligence, for injury to life, body or health, under mandatory product liability law, and to the extent we have given a guarantee.

In the event of slight negligence, we are liable only for breach of a material contractual obligation (an obligation whose fulfilment makes the proper performance of this agreement possible in the first place and on whose fulfilment you may regularly rely). In that case our liability is limited to the damage typical for this type of contract and foreseeable at the time of conclusion.

Subject to the paragraphs above, our total aggregate liability in any 12-month period is limited to the fees you paid for the Service in the 12 months preceding the event giving rise to the claim.

To the extent permitted by law, neither party is liable for indirect or consequential damages, loss of profit, loss of anticipated savings, or business interruption. We are not liable for loss of data where the loss could have been avoided by regular exports on your side.

Any further liability is excluded. The statutory rights of consumers remain unaffected.

19. Indemnification

You will indemnify us against third-party claims arising from Customer Data, from your breach of section 7 or section 8, or from your infringement of third-party rights, including reasonable legal defence costs, unless you are not responsible for the breach.

We will defend you against third-party claims alleging that the Service as provided by us infringes intellectual property rights in the EEA, and will bear the resulting costs and awarded damages, provided you notify us promptly, do not acknowledge the claim, and let us control the defence. We may at our option modify the Service, obtain the necessary rights, or terminate the affected part with a pro-rata refund.

20. Consumer Rights and Right of Withdrawal

The Service is intended for business use. If you nevertheless conclude the contract as a consumer, you have a statutory right to withdraw within 14 days of conclusion without giving reasons.

To withdraw, send a clear statement to support@cardkit.ai. If you expressly request that we begin providing the Service during the withdrawal period and acknowledge that you lose the right of withdrawal on full performance, the right expires once the Service has been fully provided; otherwise you owe a pro-rata amount for the period used.

Consumers may also use the European Commission's online dispute resolution platform at https://ec.europa.eu/consumers/odr/. We are neither obliged nor willing to participate in dispute resolution proceedings before a consumer arbitration board.

21. Force Majeure

Neither party is liable for delay or failure caused by events beyond its reasonable control, including natural disasters, war, terrorism, labour disputes, pandemics, failures of public networks, energy supply or upstream providers, and state measures. Payment obligations already incurred remain unaffected. If the event lasts longer than 60 days, either party may terminate the affected Subscription Term.

22. Changes to these Terms

We may amend these Terms where necessary for legal, regulatory, security or product reasons. We will notify you at least 30 days before the change takes effect, by email or in the Service.

If you object before the change takes effect, we may terminate the agreement with effect from the date the change takes effect and refund prepaid fees pro rata. If you do not object and continue to use the Service, the amended Terms apply. Changes that are purely to your advantage or that are required by mandatory law may take effect immediately.

23. General Provisions

Entire agreement. These Terms, the Order, the Privacy Policy and any data processing agreement form the entire agreement and supersede prior arrangements on the same subject. Your general terms of purchase do not apply, even if we have not expressly objected to them.
Assignment. You may not assign this agreement without our consent, except to a successor of your business. We may assign it to an affiliate or in connection with a merger or sale of assets.
Subcontractors. We may use subcontractors and sub-processors, and remain responsible for their performance.
Notices. Notices to you are sent to the email address in your Account; notices to us go to support@cardkit.ai. Text form is sufficient.
Severability. If a provision is or becomes invalid, the remaining provisions stay in force and the invalid provision is replaced by the statutory rule closest to its economic purpose.
No waiver. Failure to enforce a right is not a waiver of that right.
Language. The English version of these Terms is the binding version. Translations are provided for convenience only.
References. Our company information is set out in the Legal Notice, and data processing is described in the Privacy Policy.

24. Governing Law and Disputes

These Terms are governed by the laws of the Republic of Croatia, excluding its conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods. For consumers, this choice of law does not deprive you of the protection of mandatory provisions of the law of your country of habitual residence.

For merchants, legal entities under public law and special funds under public law, the exclusive place of jurisdiction is Zagreb, Croatia. We may also sue at your general place of jurisdiction. For consumers, the statutory places of jurisdiction apply.

25. Contact

BlueCloud Software d.o.o.
Sesvete, Ulica Ivana Meštrovića 35
10040 Zagreb, Croatia
OIB: 81263662150
E-mail: support@cardkit.ai

Start monitoring your business today.

Don't let a revenue drop be your first alert.

CardKit monitors your store overnight and tells you what needs your attention. Connected in 2 minutes.

Start for free