Crumple Business Dashboard Terms and Conditions

Effective Date: 19th April 2026

Last Updated: 19th April 2026

These Terms and Conditions ("Terms") govern your access to and use of the Crumple Business Dashboard ("the Dashboard"), provided by Crumple Receipts Ltd ("we," "our," "us"). By accessing or using the Dashboard, you agree to comply with these Terms on behalf of yourself and the business you represent. If you do not agree, please do not use the Dashboard.

1. Introduction

Crumple Receipts Ltd provides the Dashboard as a tool for authorised business representatives to manage their business profile, stores, team members, API integrations, and to access aggregated customer receipt analytics.

Crumple Receipts Ltd is a registered business in the United Kingdom. Company number 16031291.

These Terms apply in addition to any separate agreement entered into between Crumple Receipts Ltd and your business. In the event of a conflict, the separate agreement shall take precedence.

2. Eligibility and Account Registration

To access the Dashboard, you must be an authorised representative of a business that has been granted access by Crumple Receipts Ltd, or have been invited to join a business team by an existing Owner or Admin.

You must provide accurate and complete information, including:

• Full name
• Work email address
• Phone number (for multi-factor authentication)

You are responsible for maintaining the confidentiality of your account credentials. You must notify us immediately of any unauthorised access to your account.

Each Dashboard account is personal to you. You must not share your login credentials with any other person. Use the team invitation feature to grant access to colleagues.

3. Authorised Use of the Dashboard

You may use the Dashboard solely to:

• Manage your business profile, including trading name, registered details, address, and branding.
• Create, configure, and manage store locations associated with your business.
• Generate, rotate, and revoke API keys for store-level receipt integrations.
• Invite and manage team members within the role and access controls provided.
• View aggregated customer analytics, including receipt statistics, demographic summaries, and customer location heatmaps, for your authorised stores.

Prohibited activities include:

• Accessing business or store data that you are not authorised to view.
• Attempting to circumvent role-based access controls or security measures.
• Using the Dashboard to access, extract, or store individual consumer personal data beyond what is provided as part of the aggregated analytics service.
• Reverse-engineering, scraping, or otherwise extracting data from the Dashboard by automated means.
• Uploading harmful, malicious, or infringing content, including business logos or other assets.
• Using API keys outside of their intended purpose of issuing digital receipts to Crumple app users.

4. Business and Store Data

You are responsible for ensuring that all business and store information you provide through the Dashboard is accurate, up to date, and compliant with applicable laws.

You grant Crumple Receipts Ltd a limited licence to store, process, and display your business information (including logos and branding) solely for the purposes of providing the Dashboard and the Crumple receipt service to consumers.

We may remove or disable business or store information that we reasonably believe violates these Terms or applicable law, without prior notice.

5. API Keys and Integration

The Dashboard allows you to generate API keys ("Store API Keys") to integrate your point-of-sale or e-commerce systems with the Crumple receipt service. You are responsible for:

• Keeping Store API Keys confidential and secure.
• Revoking and rotating keys promptly if you suspect they have been compromised.
• Ensuring that any third-party systems or developers you share keys with comply with these Terms.

Each Store API Key is displayed in full only once at the time of generation. We store only a hashed version. You are solely responsible for securely recording the full key at the time of generation.

All API key operations (generation, rotation, and revocation) are recorded in an audit log accessible to Owners and Admins. We may access audit logs at any time for security and compliance purposes.

We reserve the right to revoke any Store API Key that we believe is being misused, without prior notice.

6. Team Management

The Dashboard supports role-based access control with the following roles:

• Owner: Full access, including the ability to delete the business.
• Admin: Can manage business details, stores, API keys, and team members.
• Editor: Can edit store information and view analytics.
• Viewer: Read-only access to business and store data.

You are responsible for ensuring that team invitations are only sent to individuals who are authorised to access your business data. Invitations expire after 48 hours.

Each business may have a maximum of three team members. We may adjust this limit at any time by providing notice through the Dashboard.

If a team member you have invited misuses their access, you and your business may be held responsible for that misuse.

7. Customer Data and Analytics

7.1 Nature of Analytics Data

The Dashboard provides analytics derived from receipts issued by your stores to Crumple app users. This includes:

• Receipt counts and transaction values
• Aggregated demographic summaries (age ranges, gender distributions)
• Postcode-based customer location heatmaps

7.2 Your Obligations

You must not use customer analytics data to attempt to identify, re-identify, or contact individual consumers. The analytics data is provided to you solely to help you understand your customer base at an aggregate level.

You must handle any data provided through the Dashboard in compliance with all applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

7.3 Data Controller Relationship

For the purposes of UK GDPR, Crumple Receipts Ltd acts as an independent data controller in respect of consumer personal data. The analytics data we share with you through the Dashboard is provided as aggregated, non-individually-identifiable insights. You do not receive individual consumer personal data as part of the standard Dashboard service.

8. Privacy and Data Processing

We collect and process personal data about you as a Dashboard user in accordance with our Business Privacy Policy.

Data is processed and stored using Google Firebase and is subject to the terms, conditions, and privacy policies outlined on their website:

We may access your account data and activity logs at any time for the purposes of diagnosing technical issues, improving our services, and investigating or preventing fraudulent or unauthorised activity.

9. Security Obligations

You must implement reasonable security measures to protect your Dashboard account, including:

• Using a strong, unique password for your account.
• Enabling multi-factor authentication (MFA), which we strongly recommend and may require in future.
• Logging out of the Dashboard when accessing it from shared or public devices.
• Promptly revoking access for team members who leave your organisation or no longer require access.

10. Intellectual Property

All content, trademarks, technology, and software within the Dashboard are owned by Crumple Receipts Ltd or licensed to us. Nothing in these Terms grants you any rights in the Dashboard or our intellectual property other than the limited right to use the Dashboard as described in these Terms.

You retain ownership of your business data and branding assets that you upload to the Dashboard. You grant us a limited licence to use these assets solely to provide the Dashboard and the Crumple receipt service.

11. Changes to These Terms

We reserve the right to update or modify these Terms at any time. Significant changes will be communicated through the Dashboard or via email. Your continued use of the Dashboard after such notification constitutes your acceptance of the updated Terms. If you do not agree to the updated Terms, you must stop using the Dashboard.

12. Termination and Suspension

We may suspend or terminate your access to the Dashboard if you breach these Terms, engage in fraudulent or harmful activity, or if your business ceases to be an authorised Crumple partner. We will endeavour to give prior notice where reasonably practicable, except where immediate suspension is necessary to protect the security of our systems or other users.

You may close your Dashboard account at any time by contacting us. Business data associated with your account may be retained for a period after closure in accordance with our data retention policy and applicable legal obligations.

13. Limitation of Liability

To the extent permitted by law, we are not liable for:

• Indirect, consequential, or special losses arising from use of the Dashboard.
• Loss of revenue, profits, or business opportunities resulting from downtime, inaccuracies in analytics, or interruption to API services.
• Unauthorised access to your account resulting from your failure to maintain adequate security measures.
• Actions or omissions of third-party systems you integrate with via Store API Keys.

Our total liability to you in connection with the Dashboard shall not exceed the greater of the amounts paid by you to us in the twelve months preceding the relevant claim or £100.

14. Governing Law

These Terms are governed by and construed in accordance with the laws of England and Wales. Any disputes arising under or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts of England and Wales.

15. Contact Us

For any questions or concerns regarding these Terms, please contact us via our website https://crumple.digital.

By accessing or using the Crumple Business Dashboard, you confirm that you have read, understood, and agreed to these Terms and Conditions on behalf of yourself and the business you represent.