DEVELOPER TERMS OF USE

Last Updated: May 30, 2019

Thanks for your interest in testing out Plaid! These Terms of Use (these “Terms”) are our rules for our sandbox and development environments.

By clicking “I agree” (or a similar checkbox or button) or accessing or using the Services, you indicate your assent to be bound by these Terms. If you do not agree to these Terms, do not use or access the Services. These Terms contain mandatory arbitration provisions that require the use of arbitration to resolve disputes. Please read it carefully.

These Terms are between Plaid Inc. (f.k.a. Plaid Technologies, Inc.), a Delaware corporation (“Plaid”) and entity or person accessing or using Plaid’s development or sandbox environment (“Client”). If you are accessing or using the Plaid development or sandbox environment on behalf of another entity, then that entity is the Client. Plaid may modify these Terms from time to time in accordance with Section 10 (Modifications) below.

1. ACCESS RIGHTS; RESTRICTIONS

1.1 Access. Subject to the Client’s compliance with the terms and conditions of these Terms, Plaid hereby agrees that during the term of these Terms, the Client has the non-exclusive right to: (i) internally use the package of application programming interface materials provided by Plaid (the “API Package”) solely as necessary to make an application owned and operated by the Client (the “Client Application”) interoperate with the Plaid services described on https://www.plaid.com/ (collectively with the API Package, the “Services”), (ii) use the Services in such Client Application provided to end users (consumers or businesses) (the “End Users”) solely for internal evaluation of the Services, and (iii) use the End User information and data provided via the Services (the “Output”) solely in such Client Application for such internal evaluation use case. All use of the Services and Output must be only as provided in these Terms, only in accordance with Plaid’s applicable technical user documentation and subject to the internal evaluation use case

1.2 Restrictions. Unless Plaid specifically agrees in writing, Client will not, and will not enable or assist any third-party to: (i) attempt to reverse engineer (except as permitted by law), decompile, disassemble, or otherwise attempt to discover the source code, object code, or underlying structure, ideas, or algorithms of the Services; (ii) modify, translate, or create derivative works based on the Services; (iii) make the Services or Output available to, or use the Services or Output for the benefit of anyone other than Client or End Users; (iv) sell, resell, license, sublicense, distribute, rent or lease any Services or Output to any third-party, or include any Services or Output in a service bureau, time-sharing, or equivalent offering; (v) publicly disseminate information from any source regarding the performance of the Services or Output; or (vi) attempt to create a substitute or similar service through use of, or access to, the Services or Output. Client will use the Services and Output only in compliance with (a) the rights granted hereunder, (b) the Plaid developer policies (available at https://www.plaid.com/legal), and (c) any agreements between Client and End Users (for clarity, including any privacy policy or statement). Notwithstanding anything to the contrary, the Client accepts and assumes all responsibility for complying with all applicable laws and regulations in connection with all of Client’s activities involving any Services, Output, or End User data. In addition, Client acknowledges and agrees that Plaid is neither a “consumer reporting agency” nor a “furnisher” of information to consumer reporting agencies under the Fair Credit Reporting Act (“FCRA”) and the Output is not a “consumer report” under the FCRA and cannot be used as or in such. Client represents and warrants that it will not, and will not permit or enable any third-party to, use the Services (including Output) as a or as part of a “consumer report” as that term is defined in the FCRA or otherwise use the Services (including Output) such that the Services (including Output) would be deemed “consumer reports” under the FCRA. Client will comply with the provisions set forth in any product- or territory specific exhibit, addendum, or other document attached to these Terms, but such provisions will only apply if Client uses the Service set forth in such document.

1.3 Ownership. Except for the rights expressly granted under this Section 1, Plaid reserves and retains all right, title, and interest in and to the Services which includes but is not limited to the API Package and any related Output (except for raw End User data, which belongs to the End User), software, products, works, and other intellectual property created, used, or provided by Plaid for the purposes of these Terms. To the extent the Client provides Plaid with any feedback relating to the Services (including, without limitation, feedback related to usability, performance, interactivity, bug reports and test results) (“Feedback”), Plaid will own all right, title and interest in and to such Feedback (and the Client hereby makes all assignments necessary to achieve such ownership).

1.4 Privacy and Authorizations. Before any End User engages with the Client Application in a manner that uses the Services, the Client warrants and will ensure that it provides all notices and obtains all consents required under applicable law to enable Plaid to process End User data in accordance with Plaid’s privacy policy (currently available at https://www.plaid.com/privacy). Client will not (i) make representations or other statements with respect to End User data that are contrary to or otherwise inconsistent with Plaid’s privacy policy or (ii) interfere with any independent efforts by Plaid to provide End User notice or obtain End User consent.

1.5 Permitted Users. Client may permit its employees, agents, contractors and service providers to access the Services and Output on Client’s behalf (“Permitted Users”), provided that Client remains responsible for their compliance with all of the terms and conditions of these Terms (including without limitation terms relating to use of Services and Output) and that any such use of the Output and Services is for the sole benefit of Client. If Client enables any third parties as Permitted Users, Client (and not Plaid) remains solely responsible for its relationships with such third parties and for any related billing matters, technical support, or disputes.

2. DEVELOPMENT ACCOUNTS

Plaid may offer free sandbox or development accounts for the Services ("Development Accounts"). Client may use Development Accounts solely for internal evaluation of the Services to determine whether to enter into a paid commercial relationship with Plaid, and not for production access or any other purpose. In using Development Accounts, Client must comply with Plaid's relevant documentation, policies, and instructions, including as relates to the data types and use cases eligible for Development Accounts. Plaid may make available different types of Development Accounts, and each Development Account may have limited functionality and other usage limits. Plaid may modify or disable Development Accounts (and delete related data submitted by Client or provided by Plaid) without notice or liability to Client. Plaid has no support obligations for Development Accounts. Subject to this paragraph, Development Accounts remain subject to the terms and conditions of these Terms, including without limitation Sections 1.2 (Restrictions) through 1.5 (Permitted Users), 3 (Compliance Reviews), 7 (Warranty; Disclaimer) and 8 (Limitation of Liability).

3. COMPLIANCE REVIEWS

To access or use the Services, Client must successfully pass Plaid's compliance reviews, which may include automated verifications, online questionnaires, and requests for information ("Compliance Reviews"). As part of the Compliance Reviews, Client must provide prompt responses to Plaid's requests for information about Client, the Client Application, Client's business and associated entities, and Client's intended use of the Services. Client represents and warrants that all information it provides to Plaid as part of Compliance Reviews will be accurate and complete, and Client will immediately notify Plaid if any previously provided information is out-of-date or becomes inaccurate. Client may be required to complete more than one Compliance Review, for instance, to enable Development Accounts or upgrade to production access, or as requested by Plaid based on changes in Client's use of the Services or increased risk factors. Client's passage or failure of any Compliance Review is in Plaid's sole discretion. If Client fails any Compliance Review or fails to provide prompt and complete responses within three business days after Plaid's requests for information (even if Client has passed a previous Compliance Review or received provisional access to the Services), Plaid may suspend, revoke, or terminate Client's access to the Services, without notice or liability to Client.

4. TERM; TERMINATION

These Terms will commence on the Effective Date and will continue in effect unless terminated in accordance with these Terms. Either party may terminate these Terms in the event the other party materially breaches the terms of these Terms and fails to cure such breach within ten (10) days from receipt of written notice thereof. In addition, Plaid may immediately suspend the Services in the event it determines or believes that (a) there is unauthorized access to the Services via Client’s account, (b) continued provision of the Services may do material harm to Plaid or its networks or systems or reputation or subject Plaid to liability, or (c) Client materially breached Section 1 of these Terms. Plaid may terminate these Terms for any reason and without cause upon written notice to Client. But for Section 1.1, all provisions of these Terms will remain in force in the event of termination.

5. CONFIDENTIALITY

During the term of these Terms, each party (a “Disclosing Party”) may disclose, under these Terms, the other party (a “Receiving Party”) with confidential and/or proprietary materials and information of the first party (“Confidential Information”). All materials and information disclosed by Disclosing Party to Receiving Party under these Terms and identified at the time of disclosure as “Confidential” or bearing a similar legend, and all such other information that the Receiving Party reasonably should have known was the Confidential Information of the Disclosing Party, will be considered Confidential Information; for the avoidance of doubt, the Service, all pricing information and terms of these Terms, are Confidential Information of Plaid. Receiving Party will maintain the confidentiality of the Confidential Information and will not disclose such information to any third-party without the prior written consent of Disclosing Party. Receiving Party will only use the Confidential Information internally for the purposes contemplated under these Terms. The obligations in this Section 5 will not apply to any information that: (i) is made generally available to the public without breach of these Terms, (ii) is developed by the Receiving Party independently from the Disclosing Party’s Confidential Information, (iii) is disclosed to Receiving Party by a third-party without restriction, or (iv) was in the Receiving Party’s lawful possession prior to the disclosure to the Receiving Party and was not obtained by the Receiving Party either directly or indirectly from the Disclosing Party. Receiving Party may disclose Confidential Information as required by law or court order; provided that, Receiving Party provides Disclosing Party with prompt written notice thereof and uses its best efforts to limit disclosure. At any time, upon Disclosing Party’s request, Receiving Party will return to Disclosing Party all Disclosing Party’s Confidential Information in its possession, including, without limitation, all copies and extracts thereof. Notwithstanding the foregoing, (a) Receiving Party may disclose Confidential Information to any third-party to the limited extent necessary to exercise its rights, or perform its obligations, under these Terms; provided that, all such third parties are bound in writing by obligations of confidentiality and non-use at least as protective of the Disclosing Party’s Confidential Information as these Terms and (b) all Feedback and the API Package will be solely Plaid’s “Confidential Information.”

6. INDEMNITY

The Client will defend, indemnify and hold Plaid harmless from and against all third-party claims, actions, proceedings, regulatory investigations, damages, losses, judgments, settlements, costs and expenses (including attorneys’ fees), arising from or in connection with: (i) Client breach of any laws or regulations (including with respect to privacy); (ii) Client’s or any Permitted User's use of the Services and Output; or (iii) Client’s violation of any agreements it has with any End User.

7. WARRANTY; DISCLAIMER

THE SERVICES ARE PROVIDED “AS IS.” TO THE FULLEST EXTENT PERMITTED BY LAW, NEITHER PLAID NOR ITS AFFILIATES, SUPPLIERS, LICENSORS, AND DISTRIBUTORS MAKE ANY WARRANTY OF ANY KIND, EXPRESS, IMPLIED, STATUTORY OR OTHERWISE, INCLUDING, BUT NOT LIMITED TO, WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NONINFRINGEMENT, OR ANY WARRANTY THAT THE SERVICES ARE FREE FROM DEFECTS. PLAID DOES NOT MAKE ANY WARRANTY AS TO THE OUTPUT THAT MAY BE OBTAINED FROM USE OF THE SERVICES. CLIENT, IF AN INDIVIDUAL, MAY HAVE OTHER STATUTORY RIGHTS; HOWEVER, TO THE FULLEST EXTENT PERMITTED BY LAW, THE DURATION OF STATUTORILY REQUIRED WARRANTIES, IF ANY, SHALL BE LIMITED TO THE SHORTEST PERIOD PERMITTED BY LAW.

8. LIMITATION OF LIABILITY

TO THE FULLEST EXTENT PERMITTED BY LAW, NEITHER PLAID NOR ITS AFFILIATES, SUPPLIERS, LICENSORS, AND DISTRIBUTORS WILL BE LIABLE UNDER THESE TERMS FOR ANY: (A) INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES; (B) LOSS, ERROR, OR INTERRUPTION OF USE OR DATA (IN EACH CASE, WHETHER DIRECT OR INDIRECT); OR (C) COST OF COVER OR LOSS OF BUSINESS, REVENUES, OR PROFITS (IN EACH CASE WHETHER DIRECT OR INDIRECT), EVEN IF THE PARTY KNEW OR SHOULD HAVE KNOWN THAT SUCH DAMAGES WERE POSSIBLE. TO THE FULLEST EXTENT PERMITTED BY LAW, PLAID’S AGGREGATE LIABILITY IN CONNECTION WITH THESE TERMS WILL NOT EXCEED ONE HUNDRED DOLLARS (US$100.00). THE PARTIES AGREE THAT THE WAIVERS AND LIMITATIONS SPECIFIED IN THIS SECTION 8 APPLY REGARDLESS OF THE FORM OF ACTION, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, OR OTHERWISE AND WILL SURVIVE AND APPLY EVEN IF ANY LIMITED REMEDY SPECIFIED IN THESE TERMS ARE FOUND TO HAVE FAILED OF ITS ESSENTIAL PURPOSE.

9. MISCELLANEOUS

If any provision of these Terms are found to be unenforceable or invalid, that provision will be limited or eliminated to the minimum extent necessary so that these Terms will otherwise remain in full force and effect and enforceable. These Terms are not assignable or transferable by Client except with Plaid’s prior written consent; provided, however, that Client may, upon prior written notice to Plaid, transfer and assign its rights and obligations under these Terms to an affiliate or in connection with a merger, acquisition, corporate reorganization, or sale of all or substantially all of its assets to which these Terms relate. If such a transfer or assignment is made in favor of a direct competitor of Plaid, then Plaid may terminate these Terms upon written notice to Client. Plaid may freely assign these Terms. These Terms are the complete and exclusive statement of the mutual understanding of the parties and supersedes and cancels all previous written and oral agreements, communications, and other understandings relating to the subject matter of these Terms, and all waivers and modifications must be in a writing signed by both parties, except as otherwise provided herein. No agency, partnership, joint venture, or employment is created as a result of these Terms. Any notices in connection with these Terms will be in writing and sent by first class mail, confirmed facsimile or major commercial rapid delivery courier service to the address specified above (or such other address as may be properly specified by written notice hereunder). Email notice will be permitted by Plaid if sent to the Client’s account email address. All notices to Plaid will be sent to: Plaid Inc., 85 2nd Street, Suite 400, San Francisco, CA 94105, Attn: Plaid Legal. Any delay in or failure of performance by either party under these Terms will not be considered a breach of these Terms and will be excused to the extent caused by any occurrence beyond the reasonable control of such party including, but not limited to, acts of God, power outages, governmental actions and requirements, and the acts and omissions of Plaid’s data suppliers. During the term of these Terms, (a) Client agrees to participate in case studies and other similar marketing efforts reasonably requested by Plaid; (b) Plaid may disclose that Client is a Plaid customer to third parties; and (c) Plaid may include on and in Plaid’s website, case studies, marketing materials, and conference presentations and other speaking opportunities, Client’s testimonials and other feedback regarding the Services, name, website URL, use case, and logo and other marks. Upon request from Client, Plaid will promptly stop making the disclosure and use described in the foregoing sentence except to the extent already included in any then-existing materials. These Terms will be governed by the laws of the State of California, without regard to the conflict of law provisions thereof. The application of 1980 United Nations Convention on Contracts for the International Sale of Goods is expressly excluded. Except for claims for injunctive or equitable relief or claims regarding intellectual property rights (which may be brought in any competent court), any dispute arising under these Terms will be finally settled in accordance with the Comprehensive Arbitration Rules of the Judicial Arbitration and Mediation Service, Inc. (“JAMS”) by a single arbitrator appointed in accordance with such Rules. The arbitration will take place in San Francisco, California, USA, in the English language and the arbitral decision may be enforced in any court. With respect to all disputes arising in relation to these Terms, but subject to the preceding arbitration provision, the parties consent to exclusive jurisdiction and venue in the state and Federal courts located in San Francisco, California.

10. MODIFICATIONS

From time to time, Plaid may modify these Terms. Plaid will use commercially reasonable efforts to notify Client of the modifications and the effective date of such modifications through communications via Client’s account, email, or other means. Client must accept the modifications to continue accessing or using Development Accounts. If Client objects to the modifications, its exclusive remedy is to cease any and all access and use of Development Accounts. Client may be required to click to accept or otherwise agree to the modified Terms in order to continue accessing or using the Services, and in any event continued access or use of the Services after the modified version of these Terms goes into effect will constitute Client’s acceptance of such modified version.



EXHIBIT A

“Assets” Product Specific Provisions

THE FOLLOWING PROVISIONS WILL ONLY APPLY IF CLIENT USES PLAID’S “ASSETS” PRODUCT.

Subject to this Exhibit A, Client may request that Plaid disclose Output to Client’s Secondary Investors. “Secondary Investor” means a third-party investor or purchaser of a financial product originated by Client and provided to an End User (e.g. a loan), with which investor or purchaser Plaid maintains a separate technical integration.
  1. Client represents and warrants to Plaid that, before disclosure of Output to any Secondary Investor, Client will provide all required notices to and obtain all required consents (including notices and consents required under applicable law) from the applicable End User with respect to Plaid’s disclosure of Output to such Secondary Investor.

  2. Notwithstanding any Plaid technical integration or anything else in the Agreement to the contrary: (a) Client is solely responsible for its own relationships with Secondary Investors, including any related billing matters, technical support, or disputes; (b) Client will enter into legally binding written agreements with each Secondary Investor that are consistent with this Exhibit A and all applicable terms and conditions of the Agreement, including, without limitation, Section 1.1 (Access) and 1.2 (Restrictions); and (c) Client will remain responsible for compliance by Secondary Investors with all of the terms and conditions of the Agreement (including, without limitation, terms relating to use of Output).

Client’s indemnification obligations in Section 5 of the Agreement are deemed to include (a) any breach by Client of this Exhibit A, (b) any acts or omissions of Secondary Investors, and (c) any dispute arising among Client, Secondary Investors, and/or End Users relating to the disclosure or use of Output as contemplated in this Exhibit A.

EXHIBIT B

EU Service Terms

  1. RAISP. Client acknowledges that the API service endpoints with respect to European financial institutions supported by Plaid (the “EU Services”) are provided by Plaid Financial LLC (“Plaid Financial”) pursuant to Plaid Financial’s registration with the UK’s Financial Conduct Authority as a Registered Account Information Service Provider (RAISP). On behalf of its affiliate, Plaid Financial, Plaid agrees that Plaid Financial is an express party to the Agreement in connection with such EU Services. References to Plaid in this Exhibit B and in the Agreement will also refer to Plaid Financial with respect to the EU Services. For clarity, the EU Services are deemed Services under the Agreement. Plaid may request changes to this Exhibit B in connection with regulatory obligations, with such changes effective upon written notice to Client; provided that Client may object to the changes in writing within thirty (30) days of receiving notice from Plaid. Upon Client objection, the EU Services will be immediately suspended and the Parties will negotiate in good faith regarding the changes; provided that each Party will have the right to terminate the EU Services upon seven (7) days’ prior written notice in the event of a failure to agree to such changes.
  1. Data Handling. Client acknowledges that Plaid processes personal data about End Users who are natural persons (“Data Subjects”) as an independent data controller, and that Plaid may process such data in the United States. The Parties will conduct the transfer by Client of any such personal data from the UK, Switzerland or European Economic Area to Plaid in the United States in accordance with this Section 2.

    • If Plaid maintains an active certification under the EU-U.S. and Swiss-U.S. Privacy Shield Framework maintained by the U.S. Department of Commerce (“Privacy Shield”) and the Privacy Shield is currently in effect, then any such data transfer shall occur pursuant to the Privacy Shield.

    • If the Privacy Shield has been invalidated or if Plaid does not maintain an active certification under the Privacy Shield, then any such data transfer will be conducted pursuant to the Standard Contractual Clauses (which will be deemed executed and signed, where appropriate, by the parties as of the Effective Date), and the following terms will apply: (i) Client will be referred to as the “data exporter” and Plaid will be referred to as the “data importer” in such clauses with relevant details from this Exhibit B being used accordingly; (ii) for purposes of clause II(h) of the Standard Contractual Clauses, the data importer will process the personal data in accordance with the data processing principles set forth in Annex A of the Standard Contractual Clauses; (iii) details in Schedule 1 to Exhibit B will be used to complete Annex B of the Standard Contractual Clauses; and (iv) if there is any conflict between this Exhibit B and the Standard Contractual Clauses, the Standard Contractual Clauses will prevail. “Standard Contractual Clauses” means 2004/915/EC: Commission Decision of 27 December 2004 amending Decision 2001/497/EC as regards the introduction of an alternative set of standard contractual clauses for the transfer of personal data to third countries (notified under document number C(2004) 5271) (the text of which is available at: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32004D0915). The parties agree that the terms of this section will apply to any audit conducted pursuant to the Standard Contractual Clauses. Client will cooperate in good faith with Plaid to schedule any such audit on a mutually agreed upon date and time (such agreement not to be unreasonably withheld by either party). Client will not conduct any such audit more than once per calendar year. In connection with any such audit, Client will ensure the auditor: (a) prior to commencing the audit, enters into a suitable nondisclosure agreement containing obligations of confidentiality no less stringent than those contained in the Agreement; (b) observes reasonable on-site access and other restrictions reasonably imposed by Plaid; (c) complies with applicable on-site policies and procedures provided by Plaid; and (d) does not unreasonably interfere with Plaid’s business activities. Client’s auditor will have no right to access any information subject to third-party confidentiality obligations. Client will provide written communication of any audit findings to Plaid, and such findings will be deemed the confidential information of Plaid.

Schedule 1 to Exhibit B

Standard Contractual Clauses – Annex B

Data Subjects. The personal data transferred concern the following categories of data subjects:

  • Prospective, current, and former customers of Data Exporter (each, an “End User”).

Purposes of Transfer(s). The transfer is made for the following purposes:

  • for the provision of the services by Data Importer to Data Exporter; and
  • for the protection, improvement, and development of the services of Data Importer, and as otherwise outlined in the privacy policy of the Data Importer.

Categories of Data. The personal data transferred concern the following categories of data:

  • Data from or about an End User collected during the provision of services by Data Importer, which may include, but is not limited to, the following categories:
    • account information, such as account name and account number;,
    • account owner information, such as full name, address, phone, and email address;
    • financial account details, such as account transactions and account balances,
    • login information required by a financial institution, such as username and password; and
    • information received from the device of the End User.

Recipients. The personal data transferred may be disclosed only to the following recipients or categories of recipients:

  • service providers, partners, contractors, representatives, affiliates, and agents of Data Importer in connection with the services they perform for Data Importer.

Sensitive Data (where applicable). The personal data transferred concern the following categories of sensitive data:

  • Not applicable.

Data Protection Registration Information of Data Exporter (where applicable).

  • Not applicable.

Additional Useful Information (storage limits and other relevant information).

  • Not applicable.