Strapi Cloud Terms of Service

Effective as of 18 March 2026

Thank you for your interest in Strapi, the leading open-source headless CMS for managing any content, anywhere. The following terms apply to our Cloud offering. Please read carefully and ensure you agree before using our product or services. If you do not agree to be bound by the Terms, you must not use the service. Your continued use of the Strapi Cloud Solution implies acceptance of the Terms.

This Strapi Cloud Terms of Service is a legal agreement made by and between you or the entity you represent (if you are using the Solution on behalf of an entity or otherwise accepting the terms on behalf of a company or entity as its representative) (in each case you or that entity is referred to herein as the “Customer”, “you”, or “your” ) and Strapi, Inc. with a principal place of business located at 548 Market St, PMB 60577, San Francisco, California 94104 (referred to as “Strapi”, “We”, “Our” or “Us”) regarding the access and use of the Strapi Cloud Solution (as defined below) and delivery of related services, each to the extent identified in the Order. Customer and Strapi are the “Parties” and individually a “Party”.

BY ACCESSING OR USING THE SOLUTION OR OTHERWISE CONFIRMING YOUR CONSENT TO THESE TERMS, YOU ARE AGREEING TO BE BOUND BY THE TERMS AND CONDITIONS OF THIS AGREEMENT.

IF YOU ARE NOT AUTHORIZED TO ACCEPT THESE TERMS ON BEHALF OF CUSTOMER OR IF YOU DO NOT AGREE TO ALL OF THE TERMS AND CONDITIONS OF THIS AGREEMENT AND YOU HAVE NOT OTHERWISE EXECUTED A WRITTEN AGREEMENT WITH STRAPI, YOU AND THE CUSTOMER ENTITY YOU REPRESENT (IF ANY) ARE NOT AUTHORIZED TO ACCESS OR USE OR ALLOW ANY USER TO ACCESS OR USE ANY PART OF THE SOLUTION AND/OR SCHEDULE OR ACCEPT ANY SERVICES REFERENCED HEREIN.

THE STRAPI RIGHTS GRANTED HEREIN AND OBLIGATIONS TO DELIVER ANY SERVICES ARE EXPRESSLY CONDITIONAL ON CUSTOMER'S CONSENT TO THESE TERMS TO THE EXCLUSION OF ALL OTHER TERMS; IF THESE TERMS ARE CONSIDERED AN OFFER BY CUSTOMER, ACCEPTANCE IS EXPRESSLY LIMITED TO THESE TERMS.

NOTWITHSTANDING ANY OF THE FORGOING, IF STRAPI AND CUSTOMER HAVE ENTERED INTO A SIGNED AGREEMENT THAT IS REFERENCED IN THE ORDER, THEN SUCH WRITTEN TERMS OF AN EXECUTED AGREEMENT SHALL PREVAIL AND OVERRIDE THESE TERMS IN THEIR ENTIRETY. FOR CLARITY, ANY LICENSE REFERENCED IN GITHUB.COM WHERE ACCESS TO SOFTWARE MAY BE OBTAINED DOES NOT APPLY, INSTEAD, THESE TERMS APPLY WITH RESPECT TO USE OF THE SOFTWARE IN CONNECTION WITH THE SOLUTION.

1. DEFINITIONS

“Affiliate” means any entity Controlling, Controlled by, or under common Control with a Party.

“Agreement” means this Strapi Cloud Terms of Service, including all the attachments and exhibits hereto, Statement of Work(s), and any terms incorporated by reference herein.

“Authorized Reseller” means any party who purchases the Solution, Software, and/or Professional Services for the purpose of reselling or providing them to third parties. Authorized Reseller is subject to the terms of this Agreement and the Strapi Reseller Agreement available at https://strapi.io/strapi-reseller-agreement.

“Control” and its grammatical variants mean (i) a general partnership interest in a partnership, (ii) the beneficial ownership of a majority of the outstanding equity entitled to vote for directors, or (iii) the power to direct or cause the direction of the management and policies of such entity whether by contract or otherwise, provided that for Customers that are French entities then “control” shall have the meaning defined under article L.233-3 of French Commercial Code.

“Customer Content” means the software, applications, data, files, text, images, audio, video, photographs, and other content and material, in any format, stored, linked, made available, inputted, delivered, or otherwise uploaded by Customer and/or its Users to or through the Strapi Cloud Solution, including Users’ account login information and/or Third Party Materials stored, linked, made available, inputted, delivered, or otherwise uploaded by Customer and/or its Users to or through the Strapi Cloud Solution. For clarity, and notwithstanding any of the foregoing, Customer Content specifically excludes any component of the Solution (including the Software), Usage Data, and/or Documentation or other materials made available by Strapi, even if later uploaded to the Solution by Customer or Customer’s Users.

“Customer Software Modifications” means any modification or derivative work of the Software (or portions of the Software or Documentation) created by or on behalf of Customer which is uploaded to the Solution by a User.

“Documentation” means applicable Strapi end-user manuals made available by or on behalf of Strapi to its licensees of the Cloud Solution as such documentation is updated from time to time during the Subscription Term (which definition specifically excludes any marketing or promotional materials).

“Intellectual Property Rights” means any patents, copyrights, trademarks, industrial designs, trade secrets, confidential information, and all other proprietary rights (whether registered or not) and all applications for the same which may now or in the future subsist anywhere in the world.

“Internal Business Purposes” means the access and use of the Solution by Customer and its Users in compliance with the Documentation and on behalf of and for the benefit of Customer (and/or Customer’s Affiliates), solely to manage Customer Content which is owned or licensed by Customer (and, where applicable, Customer’s Affiliates) solely for Customer’s (and, where applicable, Customer Affiliates) internal use and benefit in connection with the Project initiated on the Solution as part of the subscription purchased.

“Malicious Code” means any software, code, file or program or content that is designed to prevent, impair or otherwise adversely affect the operation of any computer software, hardware or network, any telecommunications service, equipment or network, or any other service or device, prevent, impair or otherwise adversely affect access to or the operation of or reliability of any program or data, or adversely affect the user experience, that contains any virus, trojan horse, worm, backdoor, shutdown mechanism, sniffer, bot, drop-dead mechanism, spyware, malicious, or similar code or content.

“Order” means an ordering document, invoice or form (whether in written format or online form or invoice, direct or indirect via an Authorized Reseller) that identifies the commercial terms of the purchase, namely, for example, the Strapi products and/or services ordered, the applicable Subscription Parameters or any other restrictions or limitations on use, the Subscription Term, and any pricing and payment terms relating to the same (each as relevant). Multiple Orders may apply if additional subscriptions, products, or services are purchased, provided that, unless expressly stated otherwise, terms specified in an Order shall be relevant only to that Order.

“Project” is defined as a "project" created within the Cloud Dashboard, which is created by a unique configuration of the Strapi Software deployed within the Strapi Cloud Solution, producing a unique Strapi API and resulting in a unique content model structure (backend and frontend) which is deployed, managed, and hosted through the Solution by or on behalf of Customer and Users for the benefit of Customer or its Affiliates.

“Personal Data” means any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.

“Reverse Engineer” means any act of reverse engineering, translating, disassembling, decompiling, decrypting, or deconstructing data, software (including interfaces, protocols, and any other data included in or used in conjunction with programs that may or may not technically be considered software code) or services or any method or process of obtaining or converting any information, data or software from one form into a human-readable form.

“Representative(s)” means, in relation to a Party, (i) such Party’s Affiliates, (ii) the employees of such Party and such Party’s Affiliates, and (iii) contractors, subcontractors, agents of such Party, and (iii) in the case of Customer, the Users.

“Seat” means a registered account for Users of the Software, which may be occupied by a single active User at any given time.

“Statement of Work” or “SOW” means any document provided by or on behalf of Strapi outlining the Professional Services to be delivered by or on behalf of Strapi, if any which references this Agreement (or an Order placed under this Agreement).

“Strapi API” shall mean the application programming interfaces created as a result of the Customer’s use of the Solution.

“Strapi Cloud Dashboard” or “Cloud Dashboard” means the hosted dashboard of the Solution maintained by Strapi which is used to manage Customer’s subscription to the Solution, create and manage the Project(s) and to interface with Customer’s Git provider account to access and upload the modified instances of the Software for use with the Solution. For clarity, the definition of Cloud Dashboard shall include any Updates or modified versions of the Cloud Dashboard that may be made available to Customer during the Subscription Term and specifically excludes any Third Party Material(s).

“Strapi Cloud Management and Delivery Network” means the cloud-based infrastructure and service maintained by Strapi in connection with delivery of the Solution that enables Customer to host and maintain databases, and store, manage, and deliver Customer Content within the Solution as detailed in the Documentation, and specifically excludes any Third Party Material(s).

“Strapi Cloud Solution” or “Solution” means the Strapi cloud solution referenced in the relevant Order, which definition includes all components of the solution which are delivered or otherwise made available to Customer, including the Strapi Cloud Dashboard, the Strapi Software, the Strapi Cloud Management and Delivery Network,** Documentation,** and any copies, changes, modifications, Updates, relating to any of the foregoing which are delivered or made available or accessible by Strapi to Customer in connection with its subscription during the relevant Subscription Term, and specifically excludes any Third Party Material(s).

“Strapi Software” or “Software” means the “Enterprise Edition” of Strapi’s headless content management software, including all source code, software, plugin(s), extension(s), sample code, sample scripts, documentation and other proprietary materials made available by Strapi via https://github.com/strapi/strapi and which is uploaded by Customer to the Solution and hosted by Strapi on Strapi Infrastructure on behalf of Customer during the Subscription Term. For clarity, the Enterprise Edition of the Strapi Software includes: 1) all the components included in the free "Community Edition" of the Strapi Software (i.e., all code made available by Strapi via https://github.com/strapi/strapi except that which is available under any "ee/" folder) and 2) extensions that are only available as part of the Enterprise Edition of the Strapi Software (all code made available by Strapi via https://github.com/strapi/strapi available under any "/ee/" folder) and 3) any Updates or modified versions of the Software that are made available by Strapi at no additional charge during the Subscription Term, and specifically excludes any Third Party Material(s).

“Strapi Professional Services” or “Professional Services” means professional services to be delivered by Strapi Representative to Customer which may be outlined in the Order or Statement of Work, e.g., training, configuration, implementation, etc. For clarity, the definition of Professional Services does not include Support and Maintenance Services, which are separately defined herein.

“Strapi Support and Maintenance Services” or “Support and Maintenance Services” means the technical support and maintenance services which Customer is entitled to which will be provided by or on behalf of Strapi to Customer in accordance with the Strapi Support Policy (defined below).

“Subscription Term” means the term of the subscription purchased for the Solution as identified on the relevant Order, or if no term is specified then one (1) month. For clarity, the Subscription Term shall be subject to the termination rights specified herein.

“Subscription Parameter(s)” means any factor that serves as a basis for calculating the amount of fees payable by Customer for the subscription to the Solution as identified in the Order, including, for example, where relevant: (i) counts, (ii) usage amounts (including as relevant storage, outbound data GB, and/or bandwidth), and/or (iii) any other measurement/parameter identified as a factor that serves as a basis for calculating the amount of fees payable by Customer for the subscription to the Solution in the Order.

“Third Party Material(s)” means Customer’s or any third party’s (other than Strapi’s and Strapi Affiliates’): (i) software, (ii) content, and/or (iii) other products, services or systems, including plugins, data feeds, RSS feeds, internet connectivity products, systems, wireless networks, websites, devices, servers, equipment, and other hardware products which may be linked to or provided together with or otherwise obtained from marketplaces, blog posts or other websites made available by Strapi or third parties.

“Updates” means error corrections, bug fixes, software updates and upgrades to the Solution (including Software) and improvements to the infrastructure of the Cloud Dashboard that are released or made available during the relevant Subscription Term and made generally available by or on behalf of Strapi without extra charge to other Strapi customers purchasing a subscription to the relevant Solution. For clarity, Updates exclude Third Party Material(s) even if made available by Strapi. 

“Users” means Customer’s (and, where applicable, the Customer Affiliates’) employees, agents, and/or independent contractors who are registered to access the Solution (or any component of the Solution, including the Cloud Dashboard or the Software) on behalf of the Customer.

2. ACCESS & USE RIGHTS

A. Rights

Subject to the terms and conditions of this Agreement, during the Subscription Term, Strapi grants to Customer a non-exclusive, non-transferable (except as expressly permitted herein), and non-sublicensable (except as expressly permitted herein) right to:

(i) access and use the Strapi Cloud Solution in accordance with the uses described in the Documentation; and

(ii) access, use, modify, create derivative works of Software and upload and deploy the Software (and Customer Software Modifications) on Cloud Infrastructure maintained by Strapi on behalf of Customer for use by Users in connection with a Customer Project and Customer’s subscription to the Solution.

For each of the rights granted in sub-section (i) and (ii) above, such license is granted solely for Internal Business Purposes and such rights are subject to Customer’s compliance with the Subscription Parameters and all the applicable restrictions specified herein and in the relevant Order.

B. Customer Users

Customer may authorize Users to exercise the foregoing rights in sub-section 2 (A)(i) and (ii) above on behalf of and for the benefit of Customer provided that all Users comply with the Subscription Parameters and all the applicable restrictions specified herein and in the relevant Order.

3. FREE TRIALS

Strapi may, at its sole discretion, offer a free subscription with a free trial of its Solution for a limited period of time and for the limited purpose of evaluating the Strapi Cloud Solution. The Customer may be required to enter Customer’s billing information in order to sign up for the free trial. If the Customer does enter the billing information when signing up for the free trial, Customer will not be charged by Strapi until the free trial has expired and the paid subscription begins. At any time and without notice, Strapi reserves the right to cancel the trial. On the last day of the free trial period, unless Customer has canceled the subscription, Customer will be automatically charged the applicable subscription fees for the type of subscription Customer has selected, at the price specified at the onset of the trial for the Subscription Parameters specified. If a subscription is not purchased at the end of the trial, the Customer Content will be deleted from Strapi infrastructure at the conclusion of the trial. The Customer understands and agrees that the Solution provided as part of the trial is subject to all the restrictions on use and warranty disclaimers and liability limitations stated herein with respect to a paid subscription, however, notwithstanding anything else herein, Customer understands and agrees that: (a) the solution delivered as part of a trial is provided with no Support and Maintenance Services; (b) the Strapi indemnification and hold harmless obligations stated herein shall not apply to a free trial; (c) EXCEPT AS MANDATED BY RELEVANT LAW, THE SOLUTION AND SERVICES DELIVERED AS PART OF THE TRIAL (AND ANY AND ALL RESULTS OF USE) ARE DELIVERED “AS IS”; and (d) THE TOTAL LIABILITY OF STRAPI WITH RESPECT TO ANY TRIAL FOR ANY CAUSE OF ACTION RELATING TO THE TRIAL OR ARISING FROM THE TRIAL SHALL BE LIMITED TO $100, PROVIDED THAT STRAPI ASSUMES NO LIABILITY FOR ANY DAMAGE OR LOSS CAUSED BY LOSS OF DATA OR INFORMATION (EVEN PARTIAL). CUSTOMER IS SOLELY RESPONSIBLE FOR CREATING BACKUPS OF CUSTOMER CONTENT UPLOADED IN CONNECTION WITH A TRIAL TO AVOID ANY SUCH LOSS.

4. RESTRICTIONS; CUSTOMER RESPONSIBILITIES

A. General Restrictions

Except as otherwise expressly permitted under this Agreement, Customer shall not (and shall not authorize or permit or cause any third party including any Users or other Customer’s Representatives to): (i) use the Solution (or any portion thereof) in excess of or beyond the Subscription Parameters and/or other restrictions/limitations described in this Agreement or the Order;** (ii) modify the Solution or create derivative works based upon the Solution or Reverse Engineer the Solution, except and only to the extent the foregoing restriction is prohibited by applicable law; (iii) create a program or a set of programs similar or identical to the Solution, using any elements or functionalities of the Solution to do so; (iv) use the Solution in any way that is unlawful or in violation in any applicable laws, (v) allow the Solution to be used in any embargoed country or region, or involving a sanctioned person or party; (vi) distribute, sell, rent, lease, license, transfer, or otherwise provide or allow access to the Solution to third parties other than Users consuming Seats purchased by Customer for Project initiated by Customer in connection with Customer’s subscription to the Solution; (vii) use or permit the Solution to be used other than for Internal Business Purposes, e.g. to perform services for third parties, whether on a service bureau, SaaS, time sharing basis or otherwise; (viii) release, publish, and/or otherwise make available to any third party the results of any performance or functional evaluation of the Solution without the prior written approval of Strapi; (ix) copy any part of the Solution (including data structures or similar materials produced by programs or access or use the Solution in order to build or support, directly or indirectly assist others to build, products or services competitive to Strapi; (x) alter or remove any proprietary notices or legends contained on or in the Solution; (xi) attempt to defeat, avoid, bypass, remove, deactivate or otherwise circumvent any protection mechanisms in the Solution, including without limitation any such mechanism used to restrict or control the functionality of the Solution or access or use of the Solution in compliance with Subscription Parameters; (xii) use the Solution on or in connection with unauthorized or unsupported systems, equipment or products (i.e. not identified in Documentation); (xiii) attempt to gain unauthorized access to any component or portion of the Solution, other accounts, computer systems or networks connected to the Solution, or obtain or attempt to obtain any materials or information made available through any component or portion of the Solution not intentionally made available by or on behalf of Strapi to Customer or its Users; (xiv) perform or disclose any performance or vulnerability testing of the Solution without Strapi’s prior written approval, or perform or disclose network discovery, port and service identification, vulnerability scanning, password cracking or remote access testing of the Solution. Competitors of Strapi are strictly prohibited from accessing or using the Solution for any purpose. Customer agrees that all actions or inactions of User(s) shall be deemed an action or inaction by Customer and that Customer shall be liable and fully responsible for any action or inaction of the User(s) which is in violation of the Agreement (including the Order). It is the responsibility of Customer to ensure that all User(s) are aware of all the restrictions of this Agreement.

B. Customer Content

In connection with any Customer Content, Customer may not, and may not cause or permit others (including any User) to: (i) upload Malicious Code to the Solution (ii) use the Solution to harass any person, cause damage or injury to any person or property, publish any material that is false, defamatory, harassing or obscene, violate and personal or privacy rights, promote bigotry, racism, hatred or harm, send unsolicited bulk e-mail, junk mail, spam or chain letters, infringe proprietary or property rights, or otherwise violate applicable laws, ordinances or regulations; (iii) use the Solution to perform cyber currency or cryptocurrency mining. Customer Content may not include any sensitive or special data that imposes specific data security or data protection obligations on Strapi in addition to or different from those specified herein or in the standard Strapi data security policies. Should Customer store, link, make available, input, deliver, or otherwise upload unauthorized sensitive or special data in Customer Content, Customer agrees that Strapi will not be held liable for any incident involving such Customer Content.

C. Customer Software Modifications.

Notwithstanding anything else herein, Customer understands that the right to modify and/or create derivative works of Software is conditioned on the following: (i) Customer is solely responsible for any liability, losses, and/or any damages associated with the Customer Software Modifications; (ii) Customer Software Modifications are subject to the restrictions on use identified herein with respect to unmodified Software; (iii) Customer may only use and otherwise Customer Software Modifications in connection with the Project initiated within the Solution and as part of the Solution and that it shall cease all use of the Customer Software Modifications at the end of the Subscription Term, provided that any Customer Software Modifications made to the Community Edition components of the Software may be used under the MIT license outside of the Solution after the termination of the Subscription to the extent such Software is otherwise available under the Community Edition at the end of the Subscription Term; (iv) Customer agrees that Customer and/or any User shall not enjoy any exclusive rights to Customer Software Modifications and Customer acknowledges and expressly agrees that other customers of Strapi or Strapi may create or otherwise exploit the exact same or similar modifications or derivatives of Software, and (v) Customer on behalf of itself and its User’s waives (and agrees that will not assert any claim) of infringement, misappropriation or other violation of proprietary rights against Strapi (or its customers or licensees or any users of the Strapi Software) for creating, using, replicating, distributing, publishing, adapting or otherwise exploiting in any way Customer Software Modifications or works which are substantially similar to Customer Software Modifications.

D. Applicability of Restrictions to All Components and all Users; Customer Responsibilities; Remedial Actions

For the avoidance of doubt, all restrictions specified herein with respect to the Solution apply to all components of the Solution which applicability may be relevant. There are no implied licenses granted by Strapi under this Agreement. Customer is responsible for (i) the use of the Strapi Cloud Solution through the User accounts; (ii) for compliance with data protection obligations with respect to its use of the Solution and Customer Content; (iii) the accuracy, quality, reliability, integrity, and appropriateness of the Customer Content, and for obtaining all rights related to Customer Content required by Customer and/or Strapi to deliver the Solution; (iv) backing up any data and information used in conjunction with the Solution; (vi) using the current version of the Solution (and each component) made available by Strapi (v) any security vulnerabilities, and the consequences of such vulnerabilities, arising from Customer Content, including any viruses, Trojan horses, worms or other harmful programming routines contained in Customer Content. In addition to any rights of termination, Strapi has the right to immediately, without prior notice, suspend the Customer account and/or removing or disabling access by Users to the Solution (and Customer Content maintained thereon) or take such other remedial action Strapi deems reasonable, if Customer engages in any prohibited uses of the Solution.

5. SUPPORT & MAINTENANCE

As part of its purchase of a subscription license to the Solution*,* Customer shall be entitled to receive Strapi standard Support and Maintenance Services. Strapi will deliver Support and Maintenance Services in accordance with Strapi’s support and maintenance policy, available here, (“Support Policy”). For clarity, such Support and Maintenance Services include the provision of Updates to the Solution as they become generally available to other relevant Strapi customers during the relevant Subscription Term. Strapi may make changes to its Support Policy with thirty (30) days’ notice to Customer (via the support portal or otherwise), provided such change is in connection with a standard change made to its then-current standard support and maintenance terms and there is no material degradation of the support offering. For clarity, all Support and Maintenance Services acquired by Customer are provided subject to: (i) this Agreement; (ii) the Support Policy; and (iii) Customer’s payment of all applicable fees for the requisite period and number and type of support acquired by Customer according to an accepted Strapi Order. For clarity, Strapi does not support Third Party Materials or Customer Software Modifications.

6. PROFESSIONAL SERVICES

If Customer orders Professional Services (e.g., deployment, training, configuration, or other consulting professional services related to assisting Customer in the use of the Solution), then Strapi shall deliver such Professional Services subject to the terms and conditions of this Agreement, the relevant Order and/or the relevant Statement of Work. For clarity, no work for hire shall be provided hereunder. Customer agrees that it will reasonably cooperate with Strapi in connection with the performance of such Professional Services under this Agreement by making available such Representative and information as may be reasonably required for Strapi to perform Professional Services. If applicable, Customer will reimburse Strapi (either directly or through the Authorized Reseller, as relevant) for reasonable and pre-approved travel and lodging expenses incurred by Strapi in connection with any Professional Services. Professional Services will be delivered during the timelines identified in the Order or Statement of Work, provided that if no timelines are specified, then Professional Services will only be delivered for one year from the Order effective date (“Delivery Period”). If Customer does not request delivery of the Professional Services ordered within such Delivery Period, then Professional Services will be deemed delivered at the end of the relevant Delivery Period.

7. PRICING & PAYMENT TERMS; OVERAGES

A. Pricing & Payment Terms

Pricing shall be stated at the time of the Order and is binding for the agreed Subscription Term. Strapi may, in its sole discretion and at any time, modify its pricing. Any changes will become effective at the end of the then-current Subscription Term; modified prices will be charged beginning with the consecutive Subscription Term. Except expressly agreed, renewal prices will not be adjusted based on promotional or one-time priced subscriptions but on Strapi’s standard applicable list price in effect at the time of the applicable renewal.

Customer will make all payments agreed at time of Order on timelines identified, or if no timelines are specified, then upfront. Unless otherwise stated herein, Orders are non-cancelable, and all payments are non-refundable and pro-ratable for partial periods, and payments are not subject to any deduction or set-off.

Parties agree that, unless expressly agreed in the Order: (i) all amounts are payable in U.S. Dollars and due upfront or when invoiced; (ii) all fees outlined in the Orders are exclusive of all taxes, duties, shipping fees, and similar amounts (to the extent applicable), all of which are Customer’s responsibility (excluding taxes based on Strapi or its Authorized Reseller’s income); (iii) Customer shall provide Strapi with accurate and complete billing information including company name (if appliable), full name of the contact person, address, state, zip code, country, email address, VAT (or equivalent)-number (if appliable) and (iv) Customer authorizes Strapi to charge fees incurred through their account to the payment method provided and should payment fail to occur for any reason, Strapi reserves the right to terminate the subscription.

B. Overages

If Customer’s actual usage of the Solution** (“Actual Usage”) exceeds the relevant Subscription Parameters paid for by Customer (“Purchased Usage”), then Customer shall be billed for such overage (“Overage”) and Customer agrees to** pay the relevant incremental fees due for such Overage for the relevant period. Customer agrees that Strapi may track Customer’s and Users’ adherence to the Subscription Parameters and Actual Usage and invoice Customer for Overages. The fees charged to Customer for such Overages during the Subscription Term shall be based on pricing indicated in the Documentation.

C. Defaults

If Customer is in default of making any payment due to Strapi, then Strapi may, without prejudice to other remedies available, assess a late payment charge, at the lower rate of 1.5% per month, or the maximum rate under applicable law, and/or suspend delivery of any product or service hereunder. The Customer undertakes to reimburse Strapi for any costs of dunning and collection agencies incurred in the case of Customer default on payment insofar as they are necessary for the appropriate legal actions. In case of Customer default on a payment, Strapi shall be entitled to demand immediate payment of any outstanding bills (even if so far not yet due) and/or to require advance payment or appropriate security for future Strapi services. Any Customer’s counterclaim can only be set off as long as such counterclaim is neither contested nor recognized by declaratory judgment. If Customer delays payment or if the Customer has Overages and has not paid fees on time, Strapi is additionally entitled to suspend Customer’s account in addition to other rights and remedies available to it. Strapi is not liable for any damage, losses, losses of data or profits or any other negative impacts that may occur due to a suspension according to this provision.

8. OWNERSHIP & INTELLECTUAL PROPERTY

A. Strapi Cloud Solution

The Solution is licensed and not sold. As between Customer and Strapi, Strapi and its licensors shall own and retain all right, title, and (except as expressly licensed hereunder) interest in and to the Solution (and each component or portion thereof), Strapi’s Confidential Information, and all copies or portions thereof, and any derivative works thereof (by whoever created). Customer agrees that it shall not refute or otherwise challenge Strapi’s and/or any of its Affiliate’s ownership of any such Intellectual Property Rights. Customer is not required to provide any feedback, suggestions for improvement, or updates to the Solution, however, if provided all such feedback regarding the Solution, including contributions made to Software (via GitHub or otherwise), suggestions for improvements or updates to the other aspects of Solution recommended or provided by Customer and/or any User (“Feedback”) shall be owned by Strapi, and Customer (on behalf of itself and its Users) hereby assigns the same to Strapi. All rights, title, and interest not expressly granted herein are reserved by Strapi.

B. Customer Content

As between the Parties, Customer retains the ownership (including any Intellectual Property Rights) in and to the Customer Content. Customer, on its own behalf and on behalf of its Users, grants Strapi a non-exclusive, sub-licensable, transferable, worldwide, royalty-free right and license to upload, collect, use, copy, store, transmit, modify, reproduce, distribute, display, publish and perform the Customer Content (collectively “Process” or “Processing”) as necessary to provide the Solution, Support and Maintenance Services, and/or Professional Services to Customer (and its User(s)), to generate Usage Data, to protect the security of the Solution, to protect third parties from Malicious Code. Strapi may authorize its Representatives to exercise the foregoing rights for the same purposes and subject to the same limitations and restrictions stated herein that apply to Strapi.

9. CONFIDENTIALITY

A. Confidential Information

“Confidential Information” means any non-public data, information and other materials regarding the products, technology, software, services, or business of a Party and/or its Affiliate(s) (and/or, if either Party is bound to protect the confidentiality of any third party’s information, of a third party) provided by or made available by one Party (“Disclosing Party”), either directly or indirectly through third parties, to the other Party (“Receiving Party”) where such information is marked or otherwise communicated as being “proprietary” or “confidential” or the like, or where such information should, by its nature, be reasonably considered to be confidential and/or proprietary. The Parties agree that, without limiting the foregoing, the Solution (including each component and any performance data, benchmark results, training materials, and technical information relating thereto), the Documentation, and Strapi’s pricing information shall be deemed the Confidential Information of Strapi, Customer Content shall be deemed the Confidential Information of Customer, and the terms and conditions of this Agreement (but not its existence) shall be deemed the Confidential Information of both Parties. Notwithstanding the foregoing, Confidential Information shall not include information which the Receiving Party can show: (i) is already known to the Receiving Party prior to disclosure by the Disclosing Party; (ii) becomes publicly available without fault of the Receiving Party; (iii) is rightfully obtained by the Receiving Party from a third party without restriction as to disclosure, or is approved for release by written authorization of the Disclosing Party; or (iv) is independently developed or created by the Receiving Party without use of the Disclosing Party’s Confidential Information.

B. Duties

Except as expressly authorized herein, the Receiving Party agrees to: (i) use the Confidential Information of the Disclosing Party only to perform its obligations under the Agreement (including providing the*** features and services associated with the normal use of the Solution) or exercise rights granted to it under the Agreement; (ii) treat all Confidential Information of the Disclosing Party in the same manner as it treats its own similar proprietary information, but in no case will the degree of care be less than reasonable care; and (iii) disclose the Disclosing Party’s Confidential Information only to its Representatives who have a need to know such information for the purposes of this Agreement, provided that any such Representatives of the Receiving Party who are provided access to Confidential Information of the Disclosing Party are subject to obligations of non-use and confidentiality with respect to such Confidential Information at least as restrictive as the terms of this Agreement. Receiving Party shall remain responsible and liable for any non-compliance with the terms of this Agreement by the Receiving Party’s Representatives who obtained such access.

C. Disclosures Required by Law

Either Party may disclose Confidential Information of the other Party if it is required to be disclosed by law or governmental regulation, provided that the Receiving Party provides reasonable notice to Disclosing Party of such required disclosure (to the extent permitted by law) and reasonably cooperates with the Disclosing Party in limiting such disclosure and ensuring confidential handling of the Confidential Information. A Party may also disclose the terms of this Agreement to its advisors, investors, lawyers, and accountants or as part of any legal proceeding or as necessary to defend its rights or enforce the terms of this Agreement.

D. Survival

The obligations in this section shall survive for five (5) years from the date of access to Confidential Information, provided that with respect to any trade secrets, the obligations of confidentiality shall survive for so long as the matter is maintained as a trade secret.

10. SECURITY; DATA PROCESSING

A. Security; Compliance

As of the effective date, Strapi is developing Information Security Management Program (“ISMP”) that meets SOC certification requirements. Strapi agrees to meet the administrative, physical, technical, and other safeguards outlined in its ISMP. During the Subscription Term, Strapi will continue to work towards developing ISMP that meets SOC certification requirements until the SOC 2 certification is achieved and will thereafter continue to maintain compliance. During the Subscription Term, Customer may request review of, and under obligations of confidentiality, the Customer may review, the relevant third party audit reports obtained by Strapi or its Affiliates in respect to relevant Information Security Management Systems maintained by Strapi and its Affiliates. Strapi is entitled to partially or completely suspend access to Solution or Customer Content if the security of Strapi, Strapi Cloud Infrastructure, the Strapi Cloud Solution or the security of a Customer is at risk. Strapi will immediately inform the Customer of such measures. Such a suspension does not give Customer any right to any claim against Strapi.

B. Personal Data and Privacy Notice

Customer, on its own behalf and on behalf of its Users: (i) agrees that Strapi and its Representatives may Process Customer Content for the purposes set out in this Agreement and in Strapi’s Privacy Notice, as may be amended from time to time by Strapi and which is incorporated by reference herein, the current version of which can be viewed at [https://strapi.io/privacy] and (ii) represents and warrants that it has a lawful basis for such processing, including the collection of User’s personal data as required for the use of the Solution, products or services used with the Solution and as contemplated in this Agreement. Where applicable to the processing of Customer Content, both parties agree to comply with the provisions of the General Data Protection Regulation (GDPR). Customer is responsible for any required notices, consents and/or authorizations related to Customer’s provision of, and our processing of, Customer Content (including any Personal Data) in connection with access or use of the Solution by Customer, Users or any customers of Customer or third parties with access to Customer Content.

11. TERM & TERMINATION

A. Term; Renewals

This Agreement commences when the subscription is initiated and continues for the Subscription Term stated in the Order, subject to renewal and/or early termination in accordance with terms of this Agreement and the Order. Unless Customer cancels the subscription prior to the end of the Subscription Term Customer’s subscription will automatically renew for an equal term to the prior Subscription Term for the exact same Subscription Parameters.

B. Termination for Cause

This Agreement may be terminated by either Party: (i) if the other Party materially breaches this Agreement or the Order and fails to cure it within thirty (30) days of receipt of written notice of the breach; and (ii) where permitted by law, if the other Party ceases to carry on business in the ordinary course without a successor, becomes insolvent, makes composition with its creditors, has a receiver or administrator of its undertaking or the whole or a substantial part of its assets appointed, or an order is made, or an effective resolution is passed, for its administration, receivership, liquidation, winding-up, examinership or other similar process, or has any distress, execution or other process levied or enforced against the whole or a substantial part of its assets (which is not discharged, paid out, withdrawn or removed within 30 days), or is subject to any proceedings which are equivalent or substantially similar to any of the foregoing under any applicable jurisdiction, or ceases to trade or threatens to do so.

C. Effect of Termination

Upon termination of this Agreement for any reason:

(i) all licenses and rights to the Solution and obligations to provide Support and Maintenance Services or Professional Services shall immediately cease/terminate, and Customer and its Users shall immediately cease all use of and/or access to the Solution (and all components thereof);

(ii) Customer and Users shall delete and/or destroy all copies of Software that are in the possession or control of Customer and/or its Users and, on Strapi's request, confirm the same in writing signed by an officer of Customer, provided that, notwithstanding the foregoing, Customer may continue to access and use the Community Edition components of the Software only under the MIT license that Strapi licenses such software;

(iii) Customer shall promptly pay all amounts due and not yet paid under the relevant Order (including Overage fees owed);

(iv) on the effective date of termination, Strapi shall delete Customer Content associated with Customer account, provided that Strapi and Representative may retain Customer Content on backup servers for standard periods that backups are maintained by Strapi or for so long as may be required to comply with any applicable law or regulation applicable to Strapi or its Affiliates or any court, regulatory agency or authority to which Strapi or its Affiliate is subject; and,

(v) The following sections of this Agreement shall survive its termination: sections 4, 7, 8, 9, 11.C, 12, 13, 14, & 15.

12. LIMITED WARRANTIES; DISCLAIMERS; ASSUMPTION OF RISK

A. Mutual Warranties

Each Party warrants to the other that (i) it has the full power to enter into this Agreement and (ii) this Agreement constitutes a legal, valid, and binding obligation of such party, enforceable against it (iii) this Agreement does not contravene, violate, or conflict with any other agreement of such Party with any third party; and (iv) each Party shall comply with all applicable law in connection with its activities contemplated under this Agreement.

B. Solution Warranty

During the Subscription Term, Strapi warrants to Customer that the Solution materially conforms to its published specifications described in the relevant Documentation. Customer’s sole and exclusive remedy and the entire liability of Strapi, Strapi Affiliates, and Strapi's suppliers and licensors, under this limited warranty will be for Strapi to use reasonable efforts to promptly correct the non-conformity or provide a workaround for such problem (which fix or workaround may be provided to Customer at Strapi’s reasonable discretion in one of a variety of forms or means) or if Strapi is unable to deliver a fix or workaround within a reasonable time, then to terminate the Agreement and provide a pro-rata refund of any prepaid subscription fees paid to Strapi for the non-conforming Solution for the remaining unused portion of the Subscription Term following such termination.

C. Malicious Code

Strapi will use standard industry practices to test and/or review the Solution made available to Customer hereunder prior to its delivery or transmission for “Malicious Code” and Strapi shall remove any “Malicious Code” it discovers prior to delivery of Solution to Customer. For clarity, Malicious Code shall not include standard routines in the Solution which are intended to delete data and are implicit in the standard functionality of the Solution, or any standard Solution bugs or errors handled through Support and Maintenance, or any license key or other equivalent code which may limit the functionality or scope of the use of the Solution to the scope of the license purchased by Customer hereunder. If Malicious Code is found, Strapi will remediate the Malicious Code from the Solution at its sole cost and expense.

D. Professional Services Warranty

For a period of thirty (30) days from the date of the delivery of the Professional Services to Customer, Strapi warrants to Customer that such Professional Services provided under this Agreement (if any) shall be provided in a professional and workmanlike manner and shall be performed in a manner conforming to any requirements stated herein or in the relevant Statement of Work or Order (as relevant). The entire liability of Strapi and Strapi Representatives, and Customer’s sole and exclusive remedy for any breach of the preceding warranty will be for Strapi, at its cost, to re-perform the nonconforming Professional Services, or if Strapi is unable to deliver conforming Professional Services within a reasonable time, then refund any fees paid to Strapi for the relevant non-conforming Professional Services (if any).

E. Customer Warranties

Customer warrants that Customer has and will have the legal authority and all consents, permissions, notices and all rights necessary, including any of the foregoing from Customer employees or third parties or regulatory authorities, employee representative bodies, each to the extent relevant: (i) to the Project and to process Customer Content through the Strapi Cloud Solution otherwise provide access to the Customer Content to Strapi (and/or Strapi Representatives) for the purposes outlined in this Agreement and (ii) for Strapi (and/or Strapi Representatives) to fulfill its obligations and exercise its rights with respect to the Customer Content as expressly set forth this Agreement.

F. Exclusions

Any warranties of Strapi with respect to the Solution (and any component thereof) shall not apply to trials, sample code, or sample scripts, or to the extent the failure is due to: (i) use of the Solution in a manner inconsistent with any of Customer’s obligations set out in this Agreement or in a manner inconsistent with the instructions in the Documentation; (ii) Third Party Material(s) or a malfunction or other problem related to any Third Party Material(s) or other external causes affecting the Solution, including changes to Third Party Materials that adversely affect interoperability or compatibility or use (iii) defects due to Customer Software Modifications or repairs or modifications to Solution not authorized by Strapi in writing.

G. DISCLAIMER

EXCEPT AS EXPRESSLY SET FORTH IN THE AGREEMENT AND AS PERMITTED BY APPLICABLE LAW, THE SOLUTION, THE SUPPORT AND MAINTENANCE SERVICES, TRIAL OFFERINGS, PROFESSIONAL SERVICES, DELIVERABLES AND/OR RESULTS OF ANY OF THE FOREGOING PROVIDED BY OR ON BEHALF OF STRAPI HEREUNDER ARE PROVIDED “AS IS” WITHOUT ANY WARRANTY OF ANY KIND. STRAPI, ON BEHALF OF ITSELF, ITS SUPPLIERS, LICENSORS, AND REPRESENTATIVES DISCLAIMS ALL OTHER IMPLIED OR EXPRESSED REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR USE, SATISFACTORY QUALITY, TITLE OR NON-INFRINGEMENT WITH RESPECT TO THE SAME. WITHOUT LIMITING THE FOREGOING, STRAPI, ITS SUPPLIERS, LICENSORS, AND REPRESENTATIVES (I) PROVIDE NO WARRANTIES OR GUARANTEES REGARDING THE QUALITY, PERFORMANCE, OPERABILITY OR INTEROPERABILITY OF ANY THIRD PARTY MATERIAL(S), CUSTOMER SOFTWARE MODIFICATIONS, OR ANY OTHER EXTENSIONS, INTEGRATIONS, APPLICATION OR OTHER MATERIAL MADE AVAILABLE IN STRAPI MARKETPLACE FOR USE WITH THE SOLUTION; (II) DO NOT WARRANT THAT THE USE OF OPERATION OF THE SOLUTION OR ANY COMPONENT WILL BE UNINTERRUPTED OR ERROR-FREE OR THAT ALL DISRUPTIONS OR SECURITY BREACHEWS WILL BE PREVENTED; OR (III) THAT CUSTOMER CONTENT, SYSTEMS OR NETWORKS SHALL BE COMPATIBLE OR INTEROPERABLE WITH SOLUTION OR FREE FROM LOSS, ERROR OR CORRUPTION. CUSTOMER ACKNOWLEDGES THAT ANY RESULTS OBTAINED FROM THE SOLUTION, SUPPORT AND MAINTENANCE SERVICES, TRIAL OFFERING(S), AND/OR PROFESSIONAL SERVICES MAY BE INCOMPLETE OR INACCURATE. CUSTOMER ACKNOWLEDGES THAT THE SOLUTION IS NOT DESIGNED OR INTENDED FOR USE WITH SYSTEMS OR SOLUTIONS CONTROLLING ANY APPLICATION OR SYSTEM WHERE A FAILURE COULD RESULT IN DEATH, SEVERE PHYSICAL INJURY, OR PROPERTY DAMAGE.

13. INDEMNIFICATION

A. Strapi Indemnification

Strapi shall defend, or at its option settle, any third party claim brought against Customer and/or Users (collectively “Customer Indemnitee(s)”) alleging that use of the Solution in accordance with the terms of this Agreement, infringes a third party copyright or patent right, and shall pay any damages finally awarded, to such third party by a court of competent jurisdiction or that is agreed to in a settlement by Strapi with respect to such third party claim. If such a claim occurs, or if in Strapi’s opinion is likely to occur, Strapi in its sole discretion may: (i) procure the right for Customer to continue to use the applicable Solution or infringing portion(s); or (ii) modify or replace the applicable Solution or infringing portion(s); or, if neither (i) nor (ii) is available or commercially practicable, (iii) terminate Customer’s license to the affected portion of the Solution and refund or credit a portion of the license fees paid by Customer on a pro-rata basis corresponding with the remaining portion of the license term for the affected portion. Strapi shall have no obligations or liability under this subsection (a) to the extent that any claim is based upon or arises out of: (i) any modification or alteration to the applicable Solution not made by or on behalf of Strapi; (ii) any combination or use of the applicable Solution with equipment, software, services, products or systems not provided by or on behalf of Strapi; (iii) Customer Indemnitee(s)’ continued use of allegedly infringing Solution or infringing component thereof after being notified; (iv) Customer Indemnitee(s)’ failure to use software updates or upgrades made available by or on behalf of Strapi at no additional cost; (v) use of the Solution other than in accordance with the applicable Documentation or outside the scope of the license granted under this Agreement; (vi) Trial Offering(s), (vii) Third Party Material or (viii) Customer Software Modification. The remedies set forth in this subsection constitute Customer Indemnitees’ sole and exclusive remedies, and the entire liability of Strapi, its suppliers, licensors, and Representatives, with respect to infringement or violation of third-party Intellectual Property Rights.

B. Customer Indemnification

Customer shall defend, or at its option settle, any third party claim brought against Strapi, its Affiliates, and/or its Representatives (“Strapi Indemnitee(s)”) arising out of or in connection with (i) use of the Solution by Customer and/or Users in violation of the terms of this Agreement or any applicable laws (ii) Customer Content and/or Strapi's or its Representatives authorized use or processing of Customer Content as authorized by the Agreement, and (iii) Customer Software Modifications, and Customer shall pay any damages finally awarded, to such third party by a court of competent jurisdiction or that is agreed to in a settlement by Customer.

C. Indemnification Process

Each indemnifying party’s indemnification obligations are subject to the indemnified party (e.g. Customer Indemnitee(s) or Strapi Indemnitee(s), as relevant) (i) promptly notifying the indemnifying party in writing of the third party claim subject to indemnification hereunder, provided, however, the failure to provide such notice will only relieve the indemnifying party of its indemnity obligations hereunder to the extent it is prejudiced thereby); (ii) promptly giving the indemnifying party the right to control and direct the investigation, preparation, defense and settlement of such claim (provided that the indemnified party shall have the right to reasonably participate, at its own expense, in the defense or settlement of any such Claim), and (iii) providing reasonable assistance and cooperation for the defense of same, at the indemnifying party’s reasonable expense

14. LIMITATION OF LIABILITY

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW AND EXCEPT FOR ANY LIABILITY ARISING FROM FRAUD OR FRAUDULENT MISREPRESENTATION, DEATH OR PERSONAL INJURY CAUSED BY NEGLIGENCE, ANY VIOLATION OF SECTION 9 (CONFIDENTIALITY), THE INDEMNIFICATION OBLIGATIONS STATED IN SECTION 13, OR ANY MATTER FOR WHICH IT WOULD BE UNLAWFUL TO LIMIT LIABILITY UNDER APPLICABLE LAW:

IN NO EVENT SHALL STRAPI BE LIABLE FOR: (I) INDIRECT, ECONOMIC, SPECIAL, INCIDENTAL, EXEMPLARY, CONSEQUENTIAL, OR PUNITIVE DAMAGES; (II) LOST PROFITS, REVENUE OR EARNINGS, LOST OR CORRUPTED DATA, COST OF REPLACEMENT OR RESTORATION OF DATA, DELAYS OR FAILURE TO TRANSMIT OR RECEIVE DATA, BUSINESS INTERRUPTION, FAILURE TO REALIZE EXPECTED SAVINGS, COST OF SUBSTITUTE PRODUCTS OR SERVICES, LOST GOODWILL, REPUTATIONAL DAMAGE; AND (III) DAMAGES RELATED TO OR ARISING OUT OF ANY THIRD PARTY MATERIALS OR CUSTOMER SOFTWARE MODIFICATIONS; AND NOTWITHSTANDING ANYTHING TO THE CONTRARY, IN NO EVENT SHALL THE AGGREGATE LIABILITY OF STRAPI EXCEED THE AMOUNTS RECEIVED BY STRAPI IN CONNECTION WITH THE ORDER WHICH IS RELATED TO THE SUBJECT MATTER OF THE CLAIM(S).

THE LIMITATIONS, EXCLUSIONS, AND DISCLAIMERS SET OUT IN THIS AGREEMENT SHALL APPLY: (I) WHETHER AN ACTION, CLAIM OR DEMAND ARISES FROM A BREACH OF WARRANTY OR CONDITION, BREACH OF CONTRACT, TORT (INCLUDING NEGLIGENCE), INDEMNITY STRICT LIABILITY, STATUTORY LIABILITY, OR ANY OTHER THEORY OF LIABILITY; (II) WHETHER OR NOT SUCH DAMAGES COULD REASONABLY BE FORESEEN OR THEIR POSSIBILITY HAS BEEN DISCLOSED TO STRAPI; AND (III) TO STRAPI, ITS AFFILIATES, AND THEIR RESPECTIVE LICENSORS, SUPPLIERS, REPRESENTATIVES, SUCCESSORS AND ASSIGNS.

15. GENERAL

A. Third Party Materials

The Solution may enable Customer or Users to access, use, consume, interoperate with or link to, or transfer or obtain Customer Content or other information to or from Third Party Materials. Any Third Party Materials that Strapi makes accessible or available are provided on an “as-is” and “as-available” basis without any warranty of any kind. Any warranty for Third Party Materials shall be provided directly by the provider of Third Party Materials. Strapi assumes no responsibility for Third Party Materials or the providers of Third Party Materials. Customer acknowledges and agrees that Strapi has no obligation to deliver, make available, verify, test, manage, monitor, ensure ongoing interoperability or availability of, or correct Third Party Materials. Customer acknowledges and agrees that (i) Strapi shall not be responsible or liable, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with use of or reliance on any such Third Party Materials; (ii) the nature, type, quality and availability of Third Party Materials may change at any time during the Subscription Term, and (iii) features of the Solution that interoperate with or provide access to Third Party Materials (including APIs) may change or depend on the ongoing cooperation with and from third party providers; (iv) nothing herein or in any Documentation shall be construed to imply a guarantee or warranty of any kind regarding continued access, availability or interoperability with Third Party Materials or features of Solution intended to be interoperable with Third Party Materials; and (v) Strapi will not be liable to Customer for any damages or losses or refunds resulting from any changes in circumstances which result in a lack or failure of access or availability or compatibility or interoperability of Third Party Materials or any feature or functionality of the Solution. Strapi may cease providing such access, interoperability or features without entitling Customer to any refund, credit, or other compensation. Additionally, Customer acknowledges that Customer’s access or use of Third Party Materials shall be governed by separate third party terms between Customer and the third party provider. Customer is solely responsible for obtaining appropriate access and use rights and maintaining such rights consistent with the terms of use governing Third Party Materials. Customer is solely responsible for complying with the terms of access and use of Third Party Materials, and if Strapi Representative or systems require access, use, processing, hosting or other exploitation of Third Party Materials on Customer behalf to facilitate performance of the Solution, or to deliver Support and Maintenance Services or Professional Services contemplated hereunder, Customer is solely responsible for ensuring that such access and use, including through passwords, credentials or tokens issued or otherwise, is authorized by Customer’s terms of access and use for such Third Party Materials. If Customer transfers or cause the transfer of Customer Content or Third Party Materials from or to the Solution or other location, the Parties agree that such transfer constitutes a distribution by Customer and not by Strapi.

B. Copyright Policy; Protection of Third Party Proprietary Rights

Strapi respects the Intellectual Property Rights of others. The Customer is solely responsible for the legality of Customer Content. Strapi has no duties of care, protection or warning in this respect. Therefore, the Customer guarantees to have all corresponding rights to Customer Content processed, stored and/or used by Customer on Strapi infrastructure in connection with its access or use of the Solution. If a third party copyright owner, or a person authorized on behalf of one, believes that the copyrighted work has been copied in a way that constitutes copyright infringement that is taking place through the Solution and submits a notice to Customer or Strapi, Strapi may act as necessary to avoid legal liability, including remove access to such content. Customer agrees to notify Strapi of any such notice that it may receive from a third party regarding Customer Content which is hosted on Strapi infrastructure. Such notification should be sent to the attention of “Copyright Infringement” to legal@strapi.io and any such notices must include a detailed description of the alleged infringement identified by the third party.

C. Usage Data

Customer, on its own behalf and on behalf of its Users, authorizes Strapi (and its Representatives) to collect and analyze data, metrics and other information relating to the provision, use, consumption, security, integrity, and performance of various aspects of the Solution, Strapi systems and interactions and interoperability between the Solution and Strapi Systems with other technologies or Third Party Materials (collectively “Usage Data”). For clarity, Usage Data shall not be deemed Customer Content or Customer Confidential Information. Strapi (and Strapi Representatives acting on behalf of Strapi and Strapi successors and permitted assigns) will be free to: (a) use such Usage Data for any internal lawful business purpose including to verify compliance with Subscription Parameters and restrictions, to develop, improve and enhance the Solution, to improve interoperability, to develop, enhance, diagnose, correct or improve its offerings, to create reports, summaries, and other materials, and (b) disclose such Usage Data to others, provided such Usage Data is in an “Aggregated and Anonymized Form”. The term “Aggregated and Anonymized Form” means the data has been collected from multiple sources and compiled in a way that does not identify, and is not capable of identifying, Customer, Users, or any individual or entity associated with Customer, including as the source of such Usage Data. Notwithstanding the foregoing, Usage Data may be disclosed in a non-Aggregated but Anonymized Form to Strapi's Representatives subject to the restrictions stated herein and/or to any advisors, investors, lawyers, and accountants as part of a legal proceeding or as necessary to defend Strapi or its Representatives rights or enforce this Agreement.

D. Third Party Open Source

Notwithstanding anything else herein, to the extent Software delivered by Strapi accesses, makes available, integrates with, delivers or interacts with any third-party open source libraries/components/applications/user interface/utilities (collectively referred to as “Third Party Open Source”) and to the extent required by the relevant licensor, such Third Party Open Source shall be subject to the relevant Third Party Open Source proprietary notices, disclaimers, requirements and/or extended rights which are relevant to the relevant Third Party Open Source and identified to the User via the Cloud Dashboard (or otherwise upon request). Strapi confirms that if Third Party Open Source is made part of the Solution delivered hereunder, such Third Party Open Source shall not be subject to terms which create, or purport to create, an obligation that Customer grant to any third party any rights to, or immunities under, any of Customer’s Intellectual Property Rights, or that Customer disclose or make any of its own proprietary code (or any part or derivative work thereof) available to third parties under any circumstances.

E. Choice of Law

The Agreement shall be governed by and construed in accordance with the California, USA and the courts of San Francisco, County in California shall have exclusive jurisdiction, excluding specifically any conflicts of laws provisions, the United Nations Convention on Contracts for the International Sale of Goods and the Uniform Computer Information Transactions Act (UCITA). Except as expressly provided herein, each Party irrevocably consents and submits to the exclusive jurisdiction of the courts as specified and waives any objection thereto on the grounds of venue, forum non-conveniens or any similar grounds and irrevocably consents to service of process by mail or in any other manner permitted by applicable law.

F. Notices

Any notice, request, demand or other communication required or permitted under this Agreement shall be in writing and delivered by registered mail or courier, effective on the date of receipt, addressed as follows: if to Customer, at the billing address provided in the billing section of Customer’s Strapi Cloud account, and, if to Strapi, Attention: Strapi Legal, addressed to Strapi, Inc, 3500 S Dupont Hwy Dover, DE 19901, USA. A Party may from time to time change its address for notice by notice in writing to the other Party delivered hereunder. In addition, Strapi may at its option deliver the foregoing notice or other communication to an e-mail address provided by Customer to Strapi, which shall be effective and deemed delivered when transmitted, and if Customer has provided Strapi with no such address, notice may be duly given when prominently posted on https://strapi.io/cloud-legal.

G. Dispute Resolution

Any dispute, claim or controversy (collectively “Claims”) arising out of or relating to this Agreement, including the determination of the scope, applicability or adjudicative process associated with this Agreement, shall be submitted to and determined by arbitration in the county of San Francisco, California, U.S.A. The arbitration shall be administered by JAMS pursuant to its Comprehensive Arbitration Rules and Procedures. For Claims of five million United States dollars ($5,000,000), or less, the arbitration shall be administered pursuant to JAMS' Streamlined Arbitration Rules and Procedures. Any judgment awarded by JAMS may be entered in any court having jurisdiction.

H. Equitable Relief

Notwithstanding anything to the contrary, the Parties agree that a material breach of this Agreement which adversely affects Confidential Information disclosed in connection with this Agreement and/or any Intellectual Property Rights in the Solution (or any component thereof) shall cause irreparable injury for which monetary damages would not be an adequate remedy and the non-breaching Party shall be entitled to equitable relief in any court of competent jurisdiction (without a requirement to post a bond) in addition to any remedies it may have hereunder or at law.

I. Interpretation and Language

Headings are inserted herein for convenience only and are not to be used in the interpretation of this Agreement. As used herein: (i) "days" means calendar days; (ii) “include” and “including” are not limiting; and (iii) use of the Solution shall be deemed to include active or inactive use. This Agreement, any disputes or claims raised hereunder, and all services to be provided hereunder by Strapi to Customer (if any) shall be conducted and provided in the English language. Where Customer's primary address is in Quebec or France, it is the express will of the Parties that this Agreement and all related documents be drawn up in English. C'est la volonté expresse des Parties que la présente convention ainsi que les documents qui s'y rattachent soient rédigés en anglais.

J. Independent Contractors

The Parties are independent contractors for all purposes under this Agreement, and neither Party shall be deemed an employee, partner, or agent of the other. Each party shall be solely responsible for all obligations and payments due with respect to its Representative, including any wages, salaries, and amounts due or payable to its Representative in connection with this Agreement. This Agreement shall not establish any relationship of partnership, joint venture, employment, franchise, or agency between the Parties.

K. Force Majeure

A Party shall not be liable for its failure or delay in the performance of its obligations under the Agreement (except for payment of fees) if such failure results from circumstances beyond its reasonable control, including but not limited to supplier strikes, lock-outs, labor disputes or availability, third party acts, war, riot, civil disorder, acts of terrorism, curtailment of transportation, work stoppages, pandemic, compliance with any law or governmental order, prohibition, rule, regulation or direction not in force on the date the Agreement commences. (“Force Majeure Event”). If a Force Majeure Event continues to cause failure or delay in performance of a Party’s obligations for more than thirty (30) days, the affected Party shall have the right to terminate, without liability, to the other.

L. Compliance with Laws, Export Control & U.S. Government Users

Customer agrees that the Solution may include cryptographic technology, data or other information and shall not be received, exported, imported, used, transferred, distributed, accessed, or re-exported except in compliance with the applicable laws and regulations of the relevant government authorities, including U.S. export control and sanction regulations. Customer also represents and covenants: (i) not to, directly or indirectly, allow access to or use of the Solution in embargoed or sanctioned countries/regions, by sanctioned or denied persons, or for prohibited end-uses under applicable law; and (ii) that Customer shall ensure that its receipt and use of and/or access to the Solution, or that of its Users, is in accordance with the restrictions in this subsection. If any part of the Solution is being licensed by the U.S. government, including any U.S. federal agency, the Solution is considered access to commercial computer software and documentation developed exclusively at private expense and the Solution is provided as a “commercial item” as that term is defined in FAR 2.101 (and as it is defined and used in all corresponding agency-specific Federal Acquisition Regulation supplements) and is provided with only those rights specified in section 2.

M. Assignment

This Agreement may not be wholly assigned or transferred without the other Party’s prior written consent, provided each party expressly reserves the right to assign this Agreement to a successor in interest of all or substantially all of its business or assets. Any action or conduct in violation of the foregoing shall be void and without effect. All validly assigned rights and obligations of the parties hereunder shall be binding upon and inure to the benefit of and be enforceable by and against the successors and permitted assigns.

N. Delegation

Notwithstanding anything else herein, Strapi may delegate (including by way of subcontract) any of its obligations hereunder to its Representatives, provided Strapi shall be solely and fully liable and responsible for its Representatives' compliance with the relevant terms and conditions of this Agreement with respect to any such delegation.

O. No Third Party Beneficiaries

The provisions of this Agreement are for the benefit of Customer and Strapi (as the case may be) and not for any other person or entity, whether under statute or otherwise. There are no third party beneficiaries intended hereunder. Only Strapi and the Customer may bring legal action against the other Party hereunder.

P. Marketing and Promotion

From time-to-time, Strapi lists and/or mentions its customers in its marketing and communications initiatives. Customer agrees that Strapi may use Customer’s name and logo, for such purpose. In addition, subject to applicable privacy law and Strapi’s Privacy Notice, Customer expressly consents to Strapi contacting Customer for marketing or promotional purposes. Such right may be revoked by you by providing written instruction to legal@strapi.io, which notice shall specify the particular marks, names, and/or logos of other assets that you require Strapi to cease displaying on physical or digital marketing materials.

Q. No Waiver

The waiver by either Party of any right provided under this Agreement must be in writing signed by such Party and any waiver shall not constitute a subsequent or continuing waiver of such right or of any other right under this Agreement.

R. Severability

If any section, provision, or part thereof of this Agreement is held to be illegal, invalid or unenforceable by a court of competent authority in any jurisdiction, that section, provision or part shall be limited if possible and only thereafter severed to the extent necessary to render this Agreement valid and enforceable in such jurisdiction.

S. Entire Agreement; Modifications

Unless a separate signed written Agreement has been executed between the Parties and referenced in the Order, this Agreement is the complete agreement between the Parties concerning the subject matter hereof and supersedes any prior agreements and understandings between the Parties applicable to the Solution, Support and Maintenance Services or Professional Services delivered by or on behalf of Strapi. This Agreement prevails over any pre-printed terms or other conflicting or additional terms of any purchase order, acknowledgment, confirmation, or other ordering document issued by Customer or an Authorized Reseller, even if signed and returned. For clarity, where Strapi and Customer have entered into a separate signed written agreement that is referenced in the Order provided by Customer for signature, then such terms shall prevail and override these terms, in all other circumstances these terms shall apply. Except to the extent expressly precluded by applicable law, Strapi reserves the right, at Strapi’s sole discretion, to modify or replace these Terms at any time. If a revision is material we will try to provide at least 30 days' notice prior to any new terms taking effect. What constitutes a material change will be determined at our sole discretion. Notwithstanding any notice requirements herein, Strapi may notify Customer of the change by a reasonable means of notice, including email to User account(s) or if no valid email is available, by posting the revised Agreement to the Cloud Dashboard. Customer agrees that its continued access or use of the Solution after the written notice and changes become effective shall constitute Customer’s acceptance of the revised Agreement. Unless otherwise specifically set out in the relevant document, in the event of a conflict between these terms and conditions and the Support Policy, Statement of Work, or Order, these terms and conditions shall prevail.

T. Basis of the Bargain

The Parties acknowledge and agree that Strapi has set its prices and entered into this Agreement in reliance upon the disclaimers of warranty and the limitations of liability agreed to herein, that the same reflect an allocation of risk between the parties (including the risk that a contract remedy may fail of its essential purpose and cause consequential loss), and that the same form an essential basis of the bargain between the parties.

U. Audit

Upon written notice, We may audit your compliance with the terms of this Agreement and your Order. You agree to cooperate with Our audit and to provide reasonable assistance and access to information. Any such audit shall not unreasonably interfere with Your normal business operations. In addition to the foregoing, the Services include a self-audit function and any usage in excess of your subscription allotment will result in the imposition of additional fees, which You shall be obligated to pay as if they were included in Your Order.

16. CONTACT US

If you have any questions or complaints about the Cloud Terms of Service or the Privacy Policy or if you would like to update any personal information you have provided to us, please contact the webmaster at the email address below:

Email: legal@strapi.io

Please note that e-mail communications will not necessarily be secure; accordingly, you should not include credit card information or other sensitive information in your e-mail correspondence with us.

Strapi Cloud Policies

Effective as of 10 July 2026

Important information regarding our Strapi Cloud Solution

The following terms apply to our Solution, as defined in the Strapi Cloud Terms of Service. Please read this policy & our Terms of Service carefully and ensure you agree before using our Solution.

Fair Use Policy

Use of the Solution is strictly limited to lawful purposes in accordance with governing laws and regulations and must not attempt to compromise the security or integrity of Strapi's systems, networks, or those of others. Prohibited activities include, but are not limited to, unauthorized access to Strapi systems or services; engaging in the sale or distribution of illegal goods or content; the use of the Solution for impersonation, misrepresentation, or fraudulent activities; introducing automated agents, scripts, or software to create multiple accounts, mine data, or bypass usage limits; generating or disseminating spam, clickbait, click fraud, deepfakes promoting illegal activities, or synthetic media involving exploitation. The Solution cannot be used as a remote storage server, to proxy, scrape, create virtual private networks or servers, or reproduce Strapi's functionality. Renting, leasing, or transferring access, engaging in name-squatting, or disrupting operations is strictly prohibited. Benchmark testing is permitted, provided that any public disclosure includes sufficient detail to enable others to replicate the results accurately. Violations of this Fair Use Policy are determined at Strapi's sole discretion and may result in account termination, project removal, or other corrective actions.

All plans include usage that is subject to this Fair Use Policy. The following provides general guidance for determining which projects align with Strapi’s definition of "Fair Use" and which do not.

Examples of Fair Use include:

• Content Management System (blog, landing pages, marketing sites)
• E-commerce
• Mobile Apps
• Internals apps (knowledge bases)
• Custom apps that query DBs or APIs

Examples of activities that are never considered Fair Use under this policy include, but are not limited to:

• Proxies and VPNs
• Media hosting for hot-linking
• Scrapers
• Crypto Mining
• Load Testing
• Any app not running on Strapi CMS, the software

This Fair Usage Policy is a key part of the agreement between you and Strapi, which regulates your use of the Strapi Cloud Solution. If you do not agree with this Fair Usage Policy, do not use the Strapi Cloud Solution.

Free Cloud

The Free Plan is for personal, non-commercial use only. We may change its terms or discontinue it at any time without notice. We can disable or remove projects on the Free Plan at our sole discretion, with or without notice, for any reason, including delays, performance issues, or security risks. Projects affected by malicious attacks or excessive resource use may also be terminated without notice. For commercial or critical use, please upgrade to a paid plan.

Commercial usage is defined as any Deployment that is used for the purpose of financial gain of anyone involved in any part of the production of the project, including a paid employee or consultant writing the code. Examples of this include, but are not limited to, the following:

• Any method of requesting or processing payment from visitors of the site.
• Advertising the sale of a product or service.
• Receiving payment to create, update, or host the site.
• Affiliate linking is the primary purpose of the site.
• The inclusion of advertisements, including but not limited to online advertising platforms like Google AdSense.

*The Free plan includes a limit of 2,500 API requests and/or 10GB of assets bandwidth per month, per project. Exceeding this limit may result in throttling, suspension, or termination. For higher usage, an upgrade to a paid plan is required.

**Projects on the Free plan may only be connected to personal Git repositories. Connections to an organization or enterprise Git repositories are not permitted. An upgrade to a paid plan is required for access to advanced repository integrations.

Standard Cloud

You can use our self-service Cloud Dashboard to create Standard Cloud projects. A Standard Cloud Project refers to a Project created with a subscription to our Starter, Pro, or Business plans (including our retired Essential, Developer, Pro (old) or Team plans). These projects may serve cached API/Asset data, and/or impose caps on API request overages, asset bandwidth overages, total asset storage, or other metrics.

Each Standard Cloud project is subject to the following technical limits:

Starter Plan

Pro Plan

Business Plan (formerly Scale)

If you require higher limits than the ones listed above, contact Customer Support.

Retired Plans

Essential Plan

Developer Plan

Old Pro Plan [CMS + Cloud Features]

Team Plan

Advanced Cloud

Each Advanced Cloud project is subject to the following technical limits:

Custom Plan

All usage is measured on a calendar month basis, with usage reset on the first day of each month. Please refer to our Cloud Documentation for more information on usage and billing.

Technical Limits Policy

To ensure the best possible experience for all Cloud customers, we may enforce technical limits. If your usage exceeds the following technical limits, we reserve the right to take corrective action, including but not limited to the throttling of API requests or suspending/terminating your account. If you do not agree with the technical limitations described below then do not use the Strapi Cloud Solution.

Support Policy

Please refer to our Support Policy here.

Bug Reporting

Regardless of how you use Strapi, if you believe you have found an issue with the Strapi Cloud Solution itself, please open a ticket via the Help widgit platform so our team can triage/fix the problem.

Project Deletion

Keep in mind that projects can be destroyed by you at any time via the Cloud Dashboard. When a project is destroyed or upon cancellation or termination of your Subscription, all project data will be erased and will not be recoverable.

Service Levels

Effective as of 16 February 2024

Strapi aims to provide the best level of availability for our customers at all times. For our Cloud offering, we use commercially reasonable efforts to meet certain uptime guarantees.

Standard Cloud

For our Standard Cloud offering, we use commercially reasonable efforts to meet certain uptime guarantees. Strapi will provide the Services with a best possible yearly Uptime Percentage of at least ninety-nine point nine (99.9) percent for Business customers.

Advanced Cloud

For our Custom Cloud offering the service level agreement is a monthly Uptime Percentage of at least ninety-nine point nine five (99.95) percent. Services Level for Advanced Cloud customers are subject to the following Service Level Agreement.

1. SERVICES AVAILABILITY

Strapi Inc ("Strapi", "we", "us" and/or "our") will use commercially reasonable efforts to make the Strapi Cloud Management and Delivery Network, as defined in the Terms of Service, ("Services") available 99.95% of the time, excluding any Scheduled Downtime or Excused Downtime events, each as defined below ("Services Level"). The Services availability will be calculated by dividing the total number of minutes of uptime in the Services during an applicable calendar month by the total number of actual minutes in such month minus minutes of Scheduled Downtime and minus minutes of Excused Downtime, and then multiplying that amount by 100 ("Uptime"). If the Services fail to meet the above Services Level, you will receive a Credit equal to the result of the Services Credit calculation in Section 4 of this SLA.

2. SCHEDULED DOWNTIME

We will use reasonable efforts to provide you with a minimum of (7) days' advance notice for all scheduled downtime to perform system maintenance, backup and upgrade functions for the Services (the "Scheduled Downtime") if the Services will be unavailable due to the performance of system maintenance, backup and upgrade functions. Scheduled Downtime will not exceed eight (8) hours per month and will be scheduled in advance during off-peak hours (based on PT). We will notify you via email of any Scheduled Downtime that will exceed two (2) hours.

The duration of Scheduled Downtime is measured, in minutes, as the amount of elapsed time from when the Services are not available to perform operations to when the Services becomes available to perform operations. Daily system logs will be used to track Scheduled Downtime and any other Services outages.

3. UNSCHEDULED DOWNTIME

Unscheduled Downtime is defined as any time outside of the Scheduled Downtime when the Services are not available to perform operations, excluding any outages caused by the failure of any third-party vendor, the Internet in general, factors outside of our reasonable control, outages that resulted from your software or hardware or third party software or hardware, or both or any force majeure event ("Excused Downtime"). The measurement is in minutes.

4. CREDITS

A Credit is the percentage of the monthly subscription fees for the Services that is credited to you for an Unscheduled Downtime below the Services Level based on the Uptime as set forth below. In order to receive any of the Credits described below, you must notify Strapi in writing within 30 days from the time you become eligible to receive a Credit. You must also provide us with log files showing Unscheduled Downtime and the date and time it occurred. If you do not comply with these requirements, you will forfeit your right to receive a Credit. If a dispute arises with respect to this SLA, we will make a determination in good faith based on its system logs, monitoring reports, configuration records, and other available information.

The maximum aggregate number of Credits issued by us to you for all Unscheduled Downtime in a single billing month will not exceed 30% of the amount due from you for the Services for the applicable month. Credits will be in the form of a monetary credit applied to future use of the Services. Within 60 days after the Credit was requested, any Credits shall automatically be applied against subscription fees subsequently payable for the current or next Subscription Term. No refunds will be provided in exchange for Credits; thus, if the Subscription Term is not renewed, the Credit will expire. No Credit is available if Customer is past due or in default with respect to any payment or in material breach of this Agreement when the Credit is claimed. Credits are your sole and exclusive remedy for any violation of this SLA.

Example: Assuming annual Subscription Fees of $120,000 for the Services, the Credits for an uptime of <95% would be calculated as follows: 30% * ($120,000 / 12) = $3,000

Strapi Data Processing Addendum

Effective as of 21 November 2024

This Strapi Data Processing Addendum and its Annexes (“DPA” or "Addendum") is supplementary to, and forms part of, the Strapi Cloud Terms of Service & Cloud Policies ("Agreement") entered into between Strapi, Inc. (“Strapi” or “Data Processor”) a Delaware corporation, and the entity or person(s) identified as Customer in the relevant customer account or Order referencing this Addendum ("Customer").  Customer enters into this DPA on its own behalf and on behalf of its Affiliates to the extent such Affiliates are included and covered under the Agreement with Strapi. Customer and Data Processor are individually a “Party” and collectively the “Parties”.

For purposes of this DPA, "Affiliates" shall mean any entity Controlling, Controlled by, or under common Control with a Party. Capitalized terms not otherwise defined in this DPA will have the meaning as set forth in the Agreement.

This Addendum applies where and to the extent that Strapi is acting as a processor of Customer Personal Data on behalf of Customer under the Agreement. In the event of any conflict between this Addendum and the Agreement, this Addendum shall prevail to the extent of such conflict.

This Addendum shall become legally binding upon Customer entering into the Agreement.

WHEREAS

(A) The Customer acts as a Data Controller.

(B) The Customer wishes to subcontract certain Services, which imply the processing of personal data, to the Data Processor.

(C) The Parties seek to implement a data processing addendum that complies with the requirements of the current legal framework in relation to data processing and with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

(D) The Parties wish to lay down their rights and obligations.

IT IS AGREED AS FOLLOWS:

1.     Definitions and Interpretation

1.1.  Unless otherwise defined herein, capitalized terms and expressions used in this Addendum shall have the following meaning:

1.1.1.     “Addendum,” means this Data Processing Addendum and all Annexes;

1.1.2.     “Customer Personal Data” means any Personal Data Processed by a Contracted Processor on behalf of Customer pursuant to or in connection with the Agreement;

1.1.3.     “Contracted Processor” means a Subprocessor;

1.1.4.     “Data Protection Laws” means all applicable laws relating to Processing of Personal Data and privacy that may exist in any relevant jurisdiction, including EU Data Protection Laws;

1.1.5.     “EEA” means the European Economic Area;

1.1.6.     “EU Data Protection Laws” means EU Directive 95/46/EC, as transposed into domestic legislation of each Member State and as amended, replaced or superseded from time to time, including by the GDPR and laws implementing or supplementing the GDPR;

1.1.7.     “GDPR” means EU General Data Protection Regulation 2016/679;

1.1.8.     “Data Transfer” means:

1.1.8.1.         a transfer of Customer Personal Data from the Customer to a Contracted Processor; or

1.1.8.2.         an onward transfer of Customer Personal Data from a Contracted Processor to a Subcontracted Processor, or between two establishments of a Contracted Processor, in each case, where such transfer would be prohibited by Data Protection Laws (or by the terms of data transfer agreements put in place to address the data transfer restrictions of Data Protection Laws);

1.1.9.     “Services” means the Software and Solution the Data Processor provides.

1.1.10.  “Subprocessor” means any person appointed by or on behalf of Data Processor to process Personal Data on behalf of the Customer in connection with the Agreement.

1.2.  The terms, “Commission”, “Controller”, “Data Subject”, “Member State”, “Personal Data”, “Personal Data Breach”, “Processing” and “Supervisory Authority” shall have the same meaning as in the GDPR, and their cognate terms shall be construed accordingly.

2.     Processing of Customer Personal Data

2.1.  Customer shall:

2.1.1.     ensure that any and all information or data, including without limitation Customer Personal Data, is collected, processed, transferred, and used in full compliance with Data Protection Laws;

2.1.2.      be solely responsible for ensuring that it has all obtained all necessary authorizations and consents from any Data Subjects to Process Customer Personal Data and in particular any consents needed to meet the cookie requirements in the ePrivacy Directive 2002/58/EC and any associated national legislation;

2.1.3.     Instruct the Data Processor to process Customer Personal Data.

2.2.  Data Processor shall:

2.2.1.     comply with all applicable Data Protection Laws in the Processing of Customer Personal Data; and

2.2.2.     not Process Customer Personal Data other than on the relevant Customer’s documented instructions unless required to do otherwise by applicable law. In such a case, the Data Processor shall inform the Customer of that legal requirement before processing, unless that law prohibits such information on important grounds of public interest. The Customer acknowledges that as part of the processing instructions, Data Processor may aggregate, anonymize, extract and combine or otherwise deidentify information resulting from the Customer’s use of the licensed materials and services for product improvement, benchmarking, and the development of new products;

2.3 Compliance: Both Parties shall comply with all applicable Data Protection Laws in the performance of this DPA.

3.     Data Processor Personnel
Data Processor shall take reasonable steps to ensure the reliability of any personnel who may have access to the Customer Personal Data, ensuring that all such individuals are subject to confidentiality undertakings or professional or statutory obligations of confidentiality.

4.     Security

4.1.  Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of Processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, Data Processor shall in relation to the Customer Personal Data implement appropriate technical and organizational measures to ensure a level of security appropriate to that risk, including, as appropriate, the measures referred to in Article 32(1) of the GDPR.

5.     Subprocessing

5.1.  The Customer authorizes the Data Processor to engage Subprocessors. The Data Processor shall inform the Customer of any intended changes concerning the addition or replacement of other Subprocessors, thereby giving the Customer the opportunity to object to such changes.        

5.2.  If the Customer objects to a Subprocessor, the Customer shall notify the Data Processor thereof in writing within seven (7) days after receipt of the Data Processor’s updated Subprocessors list. If the Customer objects to the use of the Subprocessor, Data Processor shall use efforts to address the objection through one of the following options: (a) Data Processor will cancel its plans to use Subprocessor with regard to Customer Personal Data or will offer an alternative to provide the Services without such Subprocessor; or (b) Data Processor will take any corrective steps requested by the Customer in its objection (which would therefore remove the Customer’s objection) and proceed to use Subprocessor. If none of the above options are reasonably available and the objection has not been sufficiently addressed within thirty (30) days after Data Processor’s receipt of the Customer’s objection, the Customer may terminate the affected Service with reasonable prior written notice.

6.     Data Subject Rights

6.1.  Taking into account the nature of the Processing, Data Processor shall assist the Customer by implementing appropriate technical and organisational measures, insofar as this is possible, for the fulfilment of the Customer obligations, as reasonably understood by Customer, to respond to requests to exercise Data Subject rights under the Data Protection Laws.

6.2.  Data Processor shall:

6.2.1.     notify Customer if it receives a request from a Data Subject under any Data Protection Law in respect of Customer Personal Data; and

6.2.2.     ensure that it does not respond to that request except on the documented instructions of Customer or as required by Applicable Laws to which the Data Processor is subject.

7.     Personal Data Breach

7.1.  Data Processor shall notify Customer without undue delay upon Data Processor becoming aware of a Personal Data Breach affecting Customer Personal Data, providing Customer with sufficient information to allow the Customer to meet any obligations to report or inform Data Subjects of the Personal Data Breach under applicable Data Protection Laws.

7.2.  Data Processor shall cooperate with the Customer and take reasonable commercial steps as are directed by Customer to assist in the investigation, mitigation and remediation of each such Personal Data Breach.

8.     Deletion or return of Customer Personal Data

8.1.  Following a written request from the Customer, Data Processor shall promptly and in any event within 30 business days of the date of cessation of any Services involving the Processing of Customer Personal Data (the “Cessation Date”), delete and procure the deletion of all copies of those Customer Personal Data unless applicable laws require storage of such Customer Personal Data.

9.     Audit rights

9.1.  Data Processor shall make available to the Customer on request all information necessary to demonstrate compliance with this Addendum, and at the cost of the Customer shall allow for and contribute to audits, including inspections, by the Customer in order to assess compliance with this Addendum.

10.  Data Transfer

10.1.               The Customer acknowledges that the Data Processor will Process the Personal Data outside of the Protected Area including in the US.

10.2.               If personal data processed under this Agreement is transferred from a country within the European Economic Area to a country outside the European Economic Area, the Parties shall ensure that the personal data are adequately protected. To achieve this, the Parties shall, unless agreed otherwise, rely on EU approved standard contractual clauses for the transfer of personal data.

11.  General Terms

11.1.               Confidentiality. Each Party must keep this Agreement and information it receives about the other Party and its business in connection with this Agreement (“Confidential Information”) confidential and must not use or disclose that Confidential Information without the prior written consent of the other Party except to the extent that:
(a) disclosure is required by law;
(b) the relevant information is already in the public domain.

11.2.               Notices. All notices and communications given under this Addendum must be in writing and will be delivered personally, sent by post or sent by email to the address or email address set out as the contact in the Agreement at such other address as notified from time to time by the Parties changing address.

11.3.               Amendments. Any amendments to this DPA shall be in writing and signed by duly authorized representatives of both Parties.

12.  Governing Law and Jurisdiction

12.1.               The Agreement shall be governed by and construed in accordance with the California, USA and the courts of San Francisco, County in California shall have exclusive jurisdiction, excluding specifically any conflicts of laws provisions. Except as expressly provided herein, each Party irrevocably consents and submits to the exclusive jurisdiction of the courts as specified and waives any objection thereto on the grounds of venue, forum non-conveniens or any similar grounds and irrevocably consents to service of process by mail or in any other manner permitted by applicable law.

ANNEX I

A. Processing Activities:

Subject matter of the processing

The personal data shall be processed in order to allow Data Processor to provide the Services.

Nature and purpose of the processing

EU Personal Data will be subject to those Processing operations described in the Agreement.

Duration

For the duration of the Agreement.

Categories of data subjects

Representatives of Customer; representatives of partners; Services users and Services visitors, including without limitation recipients of files uploaded into the Services; and individuals referenced in files uploaded into the Services.

Categories of personal data processed

EU Personal Data relating to the category of data subjects described above. The EU Personal Data depends on the particular Services but could include: Name, email address, IP address, employer, address, telephone number, occupation, and position, and any EU Personal Data provided by Customer and Services users and Services visitors (including without limitation recipients of files uploaded into the Services) in connection with the Services, including Customer Personal Data contained within files uploaded into the Services.

Sensitive categories of personal data processed (if applicable):

The contents of the Personal Data are varied and under the data exporter’s control, but may, from time to time, depending on the particular Services, include sensitive data under the relevant Data Protection Laws.

B. List of Parties:

The data exporter shall be:

·      the Customer at the address set out in the Agreement.

·      the contact person for the Customer shall be: as set out in the Agreement.

·      the signature of the data exporter and the date of signature shall be as signed in the Agreement;

·      the role of the exporter is controller; and

·      the activities relate to the provision of the Services.

The data importer shall be:

·      the Data Processor at the following address 548 Market St, PMB 60577, San Francisco, California 94104 United States of America

·      the contact person for the Processor shall be: privacy@strapi.io;

·      the signature of the data importer and the date of signature shall be as signed in the Agreement;

·      the role of the exporter is processor;

·      the activities relate to the provision of the Services.

C. Description of Transfer

Categories of data subjects whose personal data is transferred:

See ‘A. Processing Activities’ above

Categories of personal data transferred:

See ‘A. Processing Activities’ above

Sensitive data transferred (if applicable) and applied restrictions or safeguards:

N/A; If sensitive data are transferred, see Annex C, Part B for applicable restrictions and safeguards

Frequency of transfer (e.g. whether on a one-off or continuous basis) (EU Standard Contractual Clauses only):

On a continuous basis.

Nature of the processing/ processing operations:

See ‘A. Processing Activities’ above.

Purpose(s) of the data transfer and further processing (EU Standard Contractual Clauses only):

See ‘A. Processing Activities’ above.

Period for which the personal data will be retained, or, if that is not possible, the criteria used to determine that period (EU Standard Contractual Clauses only):

See ‘A. Processing Activities’ above.

The subject matter, nature and duration of the processing (EU Standard Contractual Clauses only):

See ‘A. Processing Activities’ above.

ANNEX II

Technical and Organizational Security Measures

See https://trust.strapi.io/

ANNEX III

Subprocessors & Subcontractors

See https://strapi.notion.site/35b3c8f1d24e4d54bef4421f7f02b7dc?v=8617e4384f254109aa8796c31da04586