MASTER SERVICES AGREEMENT
Last Updated: May 30, 2019
Thanks for your interest in Plaid! This Master Services Agreement (this “Agreement”) is a legally binding agreement governing access to and use of Plaid’s Services. This Agreement is entered into between Plaid Inc. (f.k.a. Plaid Technologies, Inc.), a Delaware corporation with a principal place of business located at 85 2nd Street, Suite 400, San Francisco, CA 94105 (“Plaid”) and entity or person placing an Order or accessing or using the Services (“Client”). If you are placing an Order or accessing or using the Services on behalf of a company, organization, or other entity, then that entity is the Client. In that case, you are binding that entity to this Agreement and you represent and warrant that you are authorized to do so.
By clicking “I agree” (or a similar checkbox or button), placing an Order, or accessing or using the Services, you indicate your assent to be bound by this Agreement. If you do not agree to this Agreement, do not use or access the Services. This Agreement contains mandatory arbitration provisions that require the use of arbitration to resolve disputes. Please read it carefully.
The “Effective Date” of this Agreement is the earlier of (a) the date on which Client first accesses or uses the Services and (b) the date on which Client’s first Order is agreed to by Plaid.
Plaid may modify this Agreement from time to time in accordance with Section 9 (Modifications) below.
1. ACCESS RIGHTS; RESTRICTIONS
1.1 Access. Subject to the Client’s compliance with the terms and conditions of this Agreement, Plaid hereby agrees that during the applicable term of an Order (as defined below), the Client has the non-exclusive right to: (i) internally use the package of application programming interface materials provided by Plaid (the “API Package”) solely as necessary to make an application owned and operated by the Client, which application is described in such Order or otherwise approved by Plaid in writing (the “Client Application”) interoperate with the Plaid services described on https://www.plaid.com/ (collectively with the API Package, the “Services”), (ii) use the Services in such Client Application provided to end users (consumers or businesses) (the “End Users”) for the use case permitted by Plaid in writing, including, but not limited to, as set forth in the applicable Order or in the Plaid dashboard, and (iii) use the End User information and data provided via the Services (the “Output”) solely in such Client Application for such use case. All use of the Services and Output must be only as provided in this Agreement, only in accordance with Plaid’s applicable technical user documentation and subject to the applicable use case, Client Application, and business unit restrictions (if any). The “Order” means, whether available on Plaid’s website or otherwise, a Plaid order form, pricing schedule, or rate card for the Services.
1.3 Ownership. Except for the rights expressly granted under this Section 1, Plaid reserves and retains all right, title, and interest in and to the Services which includes but is not limited to the API Package and any related Output (except for raw End User data, which belongs to the End User), software, products, works, and other intellectual property created, used, or provided by Plaid for the purposes of this Agreement. To the extent the Client provides Plaid with any feedback relating to the Services (including, without limitation, feedback related to usability, performance, interactivity, bug reports and test results) (“Feedback”), Plaid will own all right, title and interest in and to such Feedback (and the Client hereby makes all assignments necessary to achieve such ownership).
1.5 Permitted Users. Client may permit its employees, agents, contractors and service providers to access the Services and Output on Client’s behalf (“Permitted Users”), provided that Client remains responsible for their compliance with all of the terms and conditions of the Agreement (including without limitation terms relating to use of Services and Output) and that any such use of the Output and Services is for the sole benefit of Client. Client is responsible under Section 2 (Payments) of the Agreement for any fees or charges incurred by its Permitted Users in their use of the Services. If Client enables any third parties as Permitted Users, Client (and not Plaid) remains solely responsible for its relationships with such third parties and for any related billing matters, technical support, or disputes.
1.6 Development Accounts. In addition to allowing production access to the Services as described in Section 1.1 ("Production Access"), Plaid may offer free sandbox or development accounts for the Services ("Development Accounts"). Client may use Development Accounts solely for internal evaluation of the Services to determine whether to place a paid Order, and not for Production Access or any other purpose. In using Development Accounts, Client must comply with Plaid's relevant documentation, policies, and instructions, including as relates to the data types and use cases eligible for Development Accounts. Plaid may make available different types of Development Accounts, and each Development Account may have limited functionality and other usage limits. Plaid may modify or disable Development Accounts (and delete related data submitted by Client or provided by Plaid) without notice or liability to Client. Plaid has no support obligations for Development Accounts. Subject to this paragraph, Development Accounts remain subject to the terms and conditions of this Agreement, including without limitation Sections 1.2 (Restrictions) through 1.5 (Permitted Users), 1.7 (Compliance Reviews), 6 (Warranty; Disclaimer) and 7 (Limitation of Liability).
1.7 Compliance Reviews. To access or use the Services, whether Development Accounts or Production Access, Client must successfully pass Plaid's compliance reviews, which may include automated verifications, online questionnaires, and requests for information ("Compliance Reviews"). As part of the Compliance Reviews, Client must provide prompt responses to Plaid's requests for information about Client, the Client Application, Client's business and associated entities, and Client's intended use of the Services. Client represents and warrants that all information it provides to Plaid as part of Compliance Reviews will be accurate and complete, and Client will immediately notify Plaid if any previously provided information is out-of-date or becomes inaccurate. Client may be required to complete more than one Compliance Review, for instance, to enable Development Accounts or upgrade to Production Access, or as requested by Plaid based on changes in Client's use of the Services or increased risk factors. Client's passage or failure of any Compliance Review is in Plaid's sole discretion. If Client fails any Compliance Review or fails to provide prompt and complete responses within three business days after Plaid's requests for information (even if Client has passed a previous Compliance Review or received provisional access to the Services), Plaid may suspend, revoke, or terminate Client's access to the Services, without notice or liability to Client.
Client will pay Plaid for the Services as set forth in each Order entered into under this Agreement (the “Payments”). Unless otherwise specified in an Order, Payments must be made within fifteen (15) days from the date of Plaid’s invoice. Unpaid invoices are subject to a finance charge of 1.5% per month or the maximum permitted by law, whichever is lower, plus all expenses of collection. The Client will be responsible for all (i) taxes associated with Services other than taxes based on Plaid’s net income and (ii) Plaid’s costs of collection in the event of the Client’s delinquent payment. All Payments made are non-refundable (unless required under applicable law), non-cancellable, and not subject to set-off.
3. TERM; TERMINATION
3.1 Term of Agreement. This Agreement will commence on the Effective Date and will continue in effect unless terminated in accordance with this Agreement. On the effective date of termination of this Agreement, all issued Orders under the Agreement will also terminate unless otherwise agreed by Plaid and the Client.
3.2 Term of Orders. Unless otherwise specified in the Order, (i) each Order will have a term of twelve (12) months (an “Initial Term”) beginning on the effective date of such Order; (ii) after the Initial Term, such Order will automatically renew for one (1) year periods (each a “Renewal Term”) unless either party provides the other party with at least sixty (60) days’ written notice prior to the end of the Initial Term or the Renewal Term; and (iii) Plaid may revise its rates for the following Renewal Term by providing Client with at least seventy-five (75) days’ written notice prior to the end of the then-current Initial Term or Renewal Term.
(i) For Cause. Either party may terminate this Agreement and any applicable Orders in the event the other party materially breaches the terms of this Agreement or any Order and fails to cure such breach within ten (10) days from receipt of written notice thereof. In addition, Plaid may immediately suspend the Services in the event it determines or believes that (a) there is unauthorized access to the Services via Client’s account, (b) continued provision of the Services may do material harm to Plaid or its networks or systems or reputation or subject Plaid to liability, or (c) Client materially breached Section 1 or 2 of this Agreement. For clarity, notice of termination for an Order shall not be construed to be notice of termination for this Agreement or for any other Order.
(ii) For Convenience. If there are no active Orders, either party may terminate this Agreement for any reason and without cause upon at least thirty (30) days’ prior written notice to the other party.
(iii) Effect of Termination. Upon termination of an Order, all rights granted to Client with respect to such Order will terminate and Client will make no further use of the terminated Services or the applicable API Package (copies of which will be immediately returned to Plaid or destroyed). But for Section 1.1 with respect to any terminated Order, all provisions of this Agreement will remain in force in the event of any Order’s or this Agreement’s termination.
During the term of this Agreement, each party (a “Disclosing Party”) may disclose, under this Agreement, the other party (a “Receiving Party”) with confidential and/or proprietary materials and information of the first party (“Confidential Information”). All materials and information disclosed by Disclosing Party to Receiving Party under this Agreement and identified at the time of disclosure as “Confidential” or bearing a similar legend, and all such other information that the Receiving Party reasonably should have known was the Confidential Information of the Disclosing Party, will be considered Confidential Information; for the avoidance of doubt, the Service, all pricing information and terms of this Agreement, are Confidential Information of Plaid. Receiving Party will maintain the confidentiality of the Confidential Information and will not disclose such information to any third-party without the prior written consent of Disclosing Party. Receiving Party will only use the Confidential Information internally for the purposes contemplated under this Agreement. The obligations in this Section 4 will not apply to any information that: (i) is made generally available to the public without breach of this Agreement, (ii) is developed by the Receiving Party independently from the Disclosing Party’s Confidential Information, (iii) is disclosed to Receiving Party by a third-party without restriction, or (iv) was in the Receiving Party’s lawful possession prior to the disclosure to the Receiving Party and was not obtained by the Receiving Party either directly or indirectly from the Disclosing Party. Receiving Party may disclose Confidential Information as required by law or court order; provided that, Receiving Party provides Disclosing Party with prompt written notice thereof and uses its best efforts to limit disclosure. At any time, upon Disclosing Party’s request, Receiving Party will return to Disclosing Party all Disclosing Party’s Confidential Information in its possession, including, without limitation, all copies and extracts thereof. Notwithstanding the foregoing, (a) Receiving Party may disclose Confidential Information to any third-party to the limited extent necessary to exercise its rights, or perform its obligations, under this Agreement; provided that, all such third parties are bound in writing by obligations of confidentiality and non-use at least as protective of the Disclosing Party’s Confidential Information as this Agreement and (b) all Feedback and the API Package will be solely Plaid’s “Confidential Information.”
The Client will defend, indemnify and hold Plaid harmless from and against all third-party claims, actions, proceedings, regulatory investigations, damages, losses, judgments, settlements, costs and expenses (including attorneys’ fees), arising from or in connection with: (i) Client breach of any laws or regulations (including with respect to privacy); (ii) Client’s or any Permitted User's use of the Services and Output; or (iii) Client’s violation of any agreements it has with any End User.
6. WARRANTY; DISCLAIMER
THE SERVICES ARE PROVIDED “AS IS.” TO THE FULLEST EXTENT PERMITTED BY LAW, NEITHER PLAID NOR ITS AFFILIATES, SUPPLIERS, LICENSORS, AND DISTRIBUTORS MAKE ANY WARRANTY OF ANY KIND, EXPRESS, IMPLIED, STATUTORY OR OTHERWISE, INCLUDING, BUT NOT LIMITED TO, WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NONINFRINGEMENT, OR ANY WARRANTY THAT THE SERVICES ARE FREE FROM DEFECTS. PLAID DOES NOT MAKE ANY WARRANTY AS TO THE OUTPUT THAT MAY BE OBTAINED FROM USE OF THE SERVICES. CLIENT, IF AN INDIVIDUAL, MAY HAVE OTHER STATUTORY RIGHTS; HOWEVER, TO THE FULLEST EXTENT PERMITTED BY LAW, THE DURATION OF STATUTORILY REQUIRED WARRANTIES, IF ANY, SHALL BE LIMITED TO THE SHORTEST PERIOD PERMITTED BY LAW.
7. LIMITATION OF LIABILITY
TO THE FULLEST EXTENT PERMITTED BY LAW, NEITHER PLAID NOR ITS AFFILIATES, SUPPLIERS, LICENSORS, AND DISTRIBUTORS WILL BE LIABLE UNDER THIS AGREEMENT FOR ANY: (A) INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES; (B) LOSS, ERROR, OR INTERRUPTION OF USE OR DATA (IN EACH CASE, WHETHER DIRECT OR INDIRECT); OR (C) COST OF COVER OR LOSS OF BUSINESS, REVENUES, OR PROFITS (IN EACH CASE WHETHER DIRECT OR INDIRECT), EVEN IF THE PARTY KNEW OR SHOULD HAVE KNOWN THAT SUCH DAMAGES WERE POSSIBLE. TO THE FULLEST EXTENT PERMITTED BY LAW, PLAID’S AGGREGATE LIABILITY IN CONNECTION WITH EACH ORDER (INCLUDING ALL LIABILITY UNDER THIS AGREEMENT THAT ARISES AS A RESULT OF SUCH ORDER) WILL NOT EXCEED THE AMOUNT PAID OR PAYABLE BY CLIENT TO PLAID DURING THE SIX (6) MONTH PERIOD PRIOR TO THE EVENT GIVING RISE TO LIABILITY (PROVIDED THAT, IF NO FEES ARE PAID OR PAYABLE, SUCH AMOUNTS WILL BE LIMITED TO ONE HUNDRED DOLLARS (US$100.00)). THE PARTIES AGREE THAT THE WAIVERS AND LIMITATIONS SPECIFIED IN THIS SECTION 7 APPLY REGARDLESS OF THE FORM OF ACTION, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, OR OTHERWISE AND WILL SURVIVE AND APPLY EVEN IF ANY LIMITED REMEDY SPECIFIED IN THIS AGREEMENT IS FOUND TO HAVE FAILED OF ITS ESSENTIAL PURPOSE.
If any provision of this Agreement is found to be unenforceable or invalid, that provision will be limited or eliminated to the minimum extent necessary so that this Agreement will otherwise remain in full force and effect and enforceable. This Agreement is not assignable or transferable by Client except with Plaid’s prior written consent; provided, however, that Client may, upon prior written notice to Plaid, transfer and assign its rights and obligations under this Agreement to an affiliate or in connection with a merger, acquisition, corporate reorganization, or sale of all or substantially all of its assets to which this Agreement relates. If such a transfer or assignment is made in favor of a direct competitor of Plaid, then Plaid may terminate this Agreement upon written notice to Client. Plaid may freely assign this Agreement. This Agreement is the complete and exclusive statement of the mutual understanding of the parties and supersedes and cancels all previous written and oral agreements, communications, and other understandings relating to the subject matter of this Agreement, and all waivers and modifications must be in a writing signed by both parties, except as otherwise provided herein. No agency, partnership, joint venture, or employment is created as a result of this Agreement. Any notices in connection with this Agreement will be in writing and sent by first class mail, confirmed facsimile or major commercial rapid delivery courier service to the address specified above (or such other address as may be properly specified by written notice hereunder). Email notice will be permitted by Plaid if sent to the Client’s account email address. Any delay in or failure of performance by either party under this Agreement will not be considered a breach of this Agreement and will be excused to the extent caused by any occurrence beyond the reasonable control of such party including, but not limited to, acts of God, power outages, governmental actions and requirements, and the acts and omissions of Plaid’s data suppliers. During the term of this Agreement, (a) Client agrees to participate in case studies and other similar marketing efforts reasonably requested by Plaid; (b) Plaid may disclose that Client is a Plaid customer to third parties; and (c) Plaid may include on and in Plaid’s website, case studies, marketing materials, and conference presentations and other speaking opportunities, Client’s testimonials and other feedback regarding the Services, name, website URL, use case, and logo and other marks. Upon request from Client, Plaid will promptly stop making the disclosure and use described in the foregoing sentence except to the extent already included in any then-existing materials. This Agreement will be governed by the laws of the State of California, without regard to the conflict of law provisions thereof. The application of 1980 United Nations Convention on Contracts for the International Sale of Goods is expressly excluded. Except for claims for injunctive or equitable relief or claims regarding intellectual property rights (which may be brought in any competent court), any dispute or claim arising or relating to this Agreement will be submitted to and finally resolved by binding arbitration in accordance with the Comprehensive Arbitration Rules of the Judicial Arbitration and Mediation Service, Inc. (“JAMS”) by a single arbitrator appointed in accordance with such Rules. The arbitration will take place in San Francisco, California, USA, in the English language and the arbitral decision may be enforced in any court of competent jurisdiction. With respect to any court challenge to JAMS jurisdiction to arbitrate any claim or dispute arising or relating to this Agreement, the parties consent to exclusive jurisdiction and venue in the state and Federal courts located in San Francisco, California. With respect to all disputes arising in relation to this Agreement, but subject to the preceding arbitration provision, the parties consent to exclusive jurisdiction and venue in the state and Federal courts located in San Francisco, California.
From time to time, Plaid may modify this Agreement. Plaid will use commercially reasonable efforts to notify Client of the modifications and the effective date of such modifications through communications via Client’s account, email, or other means.
Development Accounts: Client must accept the modifications to continue accessing or using Development Accounts. If Client objects to the modifications, its exclusive remedy is to cease any and all access and use of Development Accounts.
Production Access: If the effective date of the modifications is during the term of a paid Order for Production Access and Client objects to the modifications, then (as its exclusive remedy) Client may terminate its affected Order upon notice to Plaid, and Plaid will refund to client any fees it has pre-paid for use of the Services for the terminated portion of the term of the applicable Order. To exercise this right, Client must provide Plaid with notice of its objection and termination within thirty (30) days after Plaid provides notice of the modifications.
Client may be required to click to accept or otherwise agree to the modified Agreement in order to continue accessing or using the Services, and in any event continued access or use of the Services after the modified version of this Agreement goes into effect will constitute Client’s acceptance of such modified version.
“Assets” Product Specific Provisions THE FOLLOWING PROVISIONS WILL ONLY APPLY IF CLIENT USES PLAID’S “ASSETS” PRODUCT. Subject to this Exhibit A, Client may request that Plaid disclose Output to Client’s Secondary Investors. “Secondary Investor” means a third-party investor or purchaser of a financial product originated by Client and provided to an End User (e.g. a loan), with which investor or purchaser Plaid maintains a separate technical integration.
(i) Client represents and warrants to Plaid that, before disclosure of Output to any Secondary Investor, Client will provide all required notices to and obtain all required consents (including notices and consents required under applicable law) from the applicable End User with respect to Plaid’s disclosure of Output to such Secondary Investor.
(ii) Notwithstanding any Plaid technical integration or anything else in the Agreement to the contrary: (a) Client is solely responsible for its own relationships with Secondary Investors, including any related billing matters, technical support, or disputes; (b) Client will enter into legally binding written agreements with each Secondary Investor that are consistent with this Exhibit A and all applicable terms and conditions of the Agreement, including, without limitation, Section 1.1 (Access) and 1.2 (Restrictions); and (c) Client will remain responsible for compliance by Secondary Investors with all of the terms and conditions of the Agreement (including, without limitation, terms relating to use of Output). Client’s indemnification obligations in Section 5 of the Agreement are deemed to include (a) any breach by Client of this Exhibit A, (b) any acts or omissions of Secondary Investors, and (c) any dispute arising among Client, Secondary Investors, and/or End Users relating to the disclosure or use of Output as contemplated in this Exhibit A.
EU Service Terms
- RAISP. Client acknowledges that the API service endpoints with respect to European financial institutions supported by Plaid (the “EU Services”) are provided by Plaid Financial LLC (“Plaid Financial”) pursuant to Plaid Financial’s registration with the UK’s Financial Conduct Authority as a Registered Account Information Service Provider (RAISP). On behalf of its affiliate, Plaid Financial, Plaid agrees that Plaid Financial is an express party to the Agreement in connection with such EU Services. References to Plaid in this Exhibit B and in the Agreement will also refer to Plaid Financial with respect to the EU Services. For clarity, the EU Services are deemed Services under the Agreement. Plaid may request changes to this Exhibit B in connection with regulatory obligations, with such changes effective upon written notice to Client; provided that Client may object to the changes in writing within thirty (30) days of receiving notice from Plaid. Upon Client objection, the EU Services will be immediately suspended and the Parties will negotiate in good faith regarding the changes; provided that each Party will have the right to terminate the EU Services upon seven (7) days’ prior written notice in the event of a failure to agree to such changes.
- Data Handling. Client acknowledges that Plaid processes personal data about End Users who are natural persons (“Data Subjects”) as an independent data controller, and that Plaid may process such data in the United States. The Parties will conduct the transfer by Client of any such personal data from the UK, Switzerland or European Economic Area to Plaid in the United States in accordance with this Section 2.
If Plaid maintains an active certification under the EU-U.S. and Swiss-U.S. Privacy Shield Framework maintained by the U.S. Department of Commerce (“Privacy Shield”) and the Privacy Shield is currently in effect, then any such data transfer shall occur pursuant to the Privacy Shield.
If the Privacy Shield has been invalidated or if Plaid does not maintain an active certification under the Privacy Shield, then any such data transfer will be conducted pursuant to the Standard Contractual Clauses (which will be deemed executed and signed, where appropriate, by the parties as of the Effective Date), and the following terms will apply: (i) Client will be referred to as the “data exporter” and Plaid will be referred to as the “data importer” in such clauses with relevant details from this Exhibit B being used accordingly; (ii) for purposes of clause II(h) of the Standard Contractual Clauses, the data importer will process the personal data in accordance with the data processing principles set forth in Annex A of the Standard Contractual Clauses; (iii) details in Schedule 1 to Exhibit B will be used to complete Annex B of the Standard Contractual Clauses; and (iv) if there is any conflict between this Exhibit B and the Standard Contractual Clauses, the Standard Contractual Clauses will prevail. “Standard Contractual Clauses” means 2004/915/EC: Commission Decision of 27 December 2004 amending Decision 2001/497/EC as regards the introduction of an alternative set of standard contractual clauses for the transfer of personal data to third countries (notified under document number C(2004) 5271) (the text of which is available at: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32004D0915 ). The parties agree that the terms of this section will apply to any audit conducted pursuant to the Standard Contractual Clauses. Client will cooperate in good faith with Plaid to schedule any such audit on a mutually agreed upon date and time (such agreement not to be unreasonably withheld by either party). Client will not conduct any such audit more than once per calendar year. In connection with any such audit, Client will ensure the auditor: (a) prior to commencing the audit, enters into a suitable nondisclosure agreement containing obligations of confidentiality no less stringent than those contained in the Agreement; (b) observes reasonable on-site access and other restrictions reasonably imposed by Plaid; (c) complies with applicable on-site policies and procedures provided by Plaid; and (d) does not unreasonably interfere with Plaid’s business activities. Client’s auditor will have no right to access any information subject to third-party confidentiality obligations. Client will provide written communication of any audit findings to Plaid, and such findings will be deemed the confidential information of Plaid.
Schedule 1 to Exhibit B
Standard Contractual Clauses – Annex B
Data Subjects. The personal data transferred concern the following categories of data subjects:
- Prospective, current, and former customers of Data Exporter (each, an “End User”).
Purposes of Transfer(s). The transfer is made for the following purposes:
- for the provision of the services by Data Importer to Data Exporter; and
Categories of Data. The personal data transferred concern the following categories of data:
- Data from or about an End User collected during the provision of services by Data Importer, which may include, but is not limited to, the following categories:
- account information, such as account name and account number;,
- account owner information, such as full name, address, phone, and email address;
- financial account details, such as account transactions and account balances,
- login information required by a financial institution, such as username and password; and
- information received from the device of the End User.
Recipients. The personal data transferred may be disclosed only to the following recipients or categories of recipients:
- service providers, partners, contractors, representatives, affiliates, and agents of Data Importer in connection with the services they perform for Data Importer.
Sensitive Data (where applicable). The personal data transferred concern the following categories of sensitive data:
- Not applicable.
Data Protection Registration Information of Data Exporter (where applicable).
- Not applicable.
Additional Useful Information (storage limits and other relevant information).
- Not applicable.