Crumple Business Terms and Conditions

Effective Date: 19th April 2026

Last Updated: 25th August 2026

These Terms and Conditions ("Terms") govern your access to and use of the Crumple Business Dashboard ("the Dashboard"), provided by Crumple Ltd (previously known as Crumple Receipts Ltd) ("we," "our," "us"). By accessing or using the Dashboard, you agree to comply with these Terms on behalf of yourself and the business you represent. If you do not agree, please do not use the Dashboard.

1. Introduction

Crumple Ltd (previously known as Crumple Receipts Ltd) provides the Dashboard as a tool for authorised business representatives to manage their business profile, stores, team members, API integrations, and to access aggregated customer receipt analytics.

Crumple Ltd (previously known as Crumple Receipts Ltd) is a registered business in the United Kingdom. Company number 16031291.

These Terms apply in addition to any separate agreement entered into between Crumple Receipts Ltd and your business. In the event of a conflict, the separate agreement shall take precedence.

2. Eligibility and Account Registration

To access the Dashboard, you must be an authorised representative of a business that has been granted access by Crumple Ltd (previously known as Crumple Receipts Ltd), or have been invited to join a business team by an existing Owner or Admin.

You must provide accurate and complete information, including:

• Full name
• Work email address
• Phone number (for multi-factor authentication)

You are responsible for maintaining the confidentiality of your account credentials. You must notify us immediately of any unauthorised access to your account.

Each Dashboard account is personal to you. You must not share your login credentials with any other person. Use the team invitation feature to grant access to colleagues.

3. Authorised Use of the Dashboard

You may use the Dashboard solely to:

• Manage your business profile, including trading name, registered details, address, and branding.
• Create, configure, and manage store locations associated with your business.
• Generate, rotate, and revoke API keys for store-level receipt integrations.
• Invite and manage team members within the role and access controls provided.
• View aggregated customer analytics, including receipt statistics, demographic summaries, and customer location heatmaps, for your authorised stores.

Prohibited activities include:

• Accessing business or store data that you are not authorised to view.
• Attempting to circumvent role-based access controls or security measures.
• Using the Dashboard to access, extract, or store individual consumer personal data beyond what is provided as part of the aggregated analytics service.
• Reverse-engineering, scraping, or otherwise extracting data from the Dashboard by automated means.
• Uploading harmful, malicious, or infringing content, including business logos or other assets.
• Using API keys outside of their intended purpose of issuing digital receipts to Crumple app users.
• Creating, issuing, or causing the issuance of receipts that do not correspond to a genuine, completed transaction, or otherwise submitting falsified, fabricated, or fraudulent receipt or transaction data through the Crumple receipt service.

4. Business and Store Data

You are responsible for ensuring that all business and store information you provide through the Dashboard is accurate, up to date, and compliant with applicable laws.

You grant Crumple Ltd (previously known as Crumple Receipts Ltd) a limited licence to store, process, and display your business information (including logos and branding) solely for the purposes of providing the Dashboard and the Crumple receipt service to consumers.

We may remove or disable business or store information that we reasonably believe violates these Terms or applicable law, without prior notice.

Receipt retention

Receipts issued to consumers through the Crumple receipt service are retained for a minimum of six years from the date of issue.

Receipts older than two years may be moved to archival storage. Individual receipts remain available to you, but archived receipts may be excluded from dashboards, analytics, and bulk exports, and bulk retrieval of archived data may take up to 30 days.

Your own access to receipts issued by your stores is not affected by anything a consumer does or does not pay us. How far back a consumer can browse their own wallet depends on their Crumple plan, and we may limit a free account to the most recent two years. That is a limit on what they see, not on what we keep: the retention commitment above is unchanged, and a consumer can obtain a copy of their own receipts from us on request regardless of their plan.

Crumple is not a substitute for your own statutory record keeping. You remain responsible for retaining the business, tax and VAT records the law requires of you, as set out in section 14, and you may export your business and store data at any time while your account is open.

Audit log

Administrative actions taken in the Dashboard are recorded in an audit log. This includes changes to business details, stores being created, updated or deleted, team invitations and role changes, subscription cancellation and reinstatement, and all API key operations. Each entry records the user account that performed the action, the affected business or store, the time, and the fields that changed.

The audit log is accessible to Owners and Admins from the Activity page of each business. Entries cannot be edited or removed through the Dashboard. We may access audit logs at any time for security and compliance purposes.

Business and store names

You may change your registered name, trading name, or the name of a store at any time. Each change is recorded against the business or store, together with the previous name, the time of the change, and the user account that made it.

Receipts display your current names. Where a name has changed since a receipt was issued, that receipt will also show the name it was issued under, so that a consumer holding it can see who supplied the goods or services at the time. Renaming a business or store does not remove or alter the name shown on receipts already issued.

5. API Keys and Integration

The Dashboard allows you to generate API keys ("Store API Keys") to integrate your point-of-sale or e-commerce systems with the Crumple receipt service. You are responsible for:

• Keeping Store API Keys confidential and secure.
• Revoking and rotating keys promptly if you suspect they have been compromised.
• Ensuring that any third-party systems or developers you share keys with comply with these Terms.

Each Store API Key is displayed in full only once at the time of generation. We store only a hashed version. You are solely responsible for securely recording the full key at the time of generation.

All API key operations (generation, rotation, and revocation) are recorded in the audit log described in section 4.

We reserve the right to revoke any Store API Key that we believe is being misused, without prior notice.

6. Team Management

The Dashboard supports role-based access control with the following roles:

• Owner: Full access, including the ability to delete the business.
• Admin: Can manage business details, stores, API keys, and team members.
• Editor: Can edit store information and view analytics.
• Viewer: Read-only access to business and store data.

You are responsible for ensuring that team invitations are only sent to individuals who are authorised to access your business data. Invitations expire after 48 hours.

A Crumple account is a single account. The same account a team member uses to sign in to the Dashboard is also their personal account in the Crumple app, where they hold their own receipts. If a team member deletes their Crumple account from the app, their membership of your team is removed with it and their Dashboard access ends. Nothing belonging to your business is deleted, and the seat they held is returned to your plan allowance; you would need to invite them again, to a new account, to restore their access. We do not notify you when this happens, so a member who disappears from your team may simply have closed their Crumple account.

An owner is treated differently. Because ownership cannot be reassigned through the Dashboard, and a business must always have an owner, we will not delete a Crumple account that owns a business. An owner who asks to delete their account is told to contact us, and we will transfer ownership to another member of your team or close the business account, as set out in section 13, before their request can proceed.

The number of team members your business may have is set by your plan, and is shown alongside your other plan allowances in your business settings. Invitations that would take you beyond that number are refused until you remove a member or move to a plan with a larger allowance. We may adjust plan allowances by giving notice through the Dashboard.

If a team member you have invited misuses their access, you and your business may be held responsible for that misuse.

7. Customer Data and Analytics

7.1 Nature of Analytics Data

The Dashboard provides analytics derived from receipts issued by your stores to Crumple app users. This includes:

• Receipt counts and transaction values
• Aggregated demographic summaries (age ranges, gender distributions)
• Postcode-based customer location heatmaps

7.2 Your Obligations

You must not use customer analytics data to attempt to identify, re-identify, or contact individual consumers. The analytics data is provided to you solely to help you understand your customer base at an aggregate level.

You must handle any data provided through the Dashboard in compliance with all applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

7.3 Data Controller Relationship

For the purposes of UK GDPR, Crumple Ltd (previously known as Crumple Receipts Ltd) acts as an independent data controller in respect of consumer personal data. The analytics data we share with you through the Dashboard is provided as aggregated, non-individually-identifiable insights. You do not receive individual consumer personal data as part of the standard Dashboard service.

8. Privacy and Data Processing

We collect and process personal data about you as a Dashboard user in accordance with our Business Privacy Policy.

Data is processed and stored using Google Firebase and is subject to the terms, conditions, and privacy policies outlined on their website:

We may access your account data and activity logs at any time for the purposes of diagnosing technical issues, improving our services, and investigating or preventing fraudulent or unauthorised activity.

Where your data is held

The Dashboard and its supporting services are deployed to Google data centres in the European Economic Area. Google may process data in other locations in accordance with the terms and transfer mechanisms set out in the Google Firebase Terms linked above, and we rely on those mechanisms for any transfer outside the United Kingdom or the European Economic Area.

Service providers we use

We use a small number of third-party providers to operate the Dashboard. Each may process data on our behalf for the purpose described:

• Google (Firebase and Google Cloud Platform) — hosting, database, authentication, file storage and background functions.
• Stripe — payment processing and storage of your payment details.
• Resend — delivery of transactional email, such as team invitations and account notifications.
• Google reCAPTCHA — protecting sign-up and authentication against automated abuse.

We may change these providers, or add others, where necessary to operate or improve the Dashboard. The current list is maintained in our Business Privacy Policy.

Security incidents

If we become aware of a security breach affecting your business data or the personal data we hold in connection with your account, we will notify you without undue delay, and provide the information reasonably available to us about what happened, what is affected, and what we are doing about it. Nothing in this section makes us responsible for your own reporting obligations to the Information Commissioner's Office or to affected individuals, which remain yours.

Requests from individuals

Because we act as an independent controller for consumer personal data, requests from consumers to exercise their data protection rights are handled by us directly. Where you receive such a request that relates to the Crumple receipt service, you should direct it to us. We will each give the other reasonable assistance in responding to requests, complaints or investigations that concern the other's processing.

9. Security Obligations

You must implement reasonable security measures to protect your Dashboard account, including:

• Using a strong, unique password for your account.
• Enabling multi-factor authentication (MFA), which we strongly recommend and may require in future.
• Logging out of the Dashboard when accessing it from shared or public devices.
• Promptly revoking access for team members who leave your organisation or no longer require access.

10. Intellectual Property

All content, trademarks, technology, and software within the Dashboard are owned by Crumple Ltd (previously known as Crumple Receipts Ltd) or licensed to us. Nothing in these Terms grants you any rights in the Dashboard or our intellectual property other than the limited right to use the Dashboard as described in these Terms.

You retain ownership of your business data and branding assets that you upload to the Dashboard. You grant us a limited licence to use these assets solely to provide the Dashboard and the Crumple receipt service.

11. Changes to These Terms and to the Dashboard

We reserve the right to update or modify these Terms at any time. Significant changes will be communicated through the Dashboard or via email. Your continued use of the Dashboard after such notification constitutes your acceptance of the updated Terms. If you do not agree to the updated Terms, you must stop using the Dashboard.

Changes to the Dashboard itself

We develop the Dashboard continuously and may add, change, or withdraw features at any time. Where we withdraw or materially reduce a feature that your plan includes, and doing so has a material adverse effect on your use of the Dashboard, we will give you reasonable notice and you may cancel your subscription with effect from the date the change takes effect, in which case we will refund the unused portion of any fee you have paid in advance for the period after that date.

Features described as beta, preview, early access or coming soon are provided for evaluation, may change or be withdrawn without notice, and are excluded from the availability target in section 14.

12. Fees and Refunds

Access to the Dashboard may be provided free of charge or subject to fees, as agreed between your business and Crumple Ltd (previously known as Crumple Receipts Ltd), whether under these Terms or a separate agreement. Where a separate agreement sets out payment terms, those terms take precedence over this section.

Where fees apply, they are payable in accordance with the applicable plan or separate agreement. Unless expressly stated otherwise, all fees are non-refundable.

What your plan includes

Each plan carries allowances — the number of stores, team members and receipts per month it permits, and whether it includes API access and analytics. Your allowances are shown in your business settings and are the ones we enforce.

We may refuse any request that would take you beyond an allowance, and may apply rate limits to the receipt API to protect the service for all users. Receipt allowances are counted per calendar month and reset at the start of each month. Unused allowance does not carry over and is not refundable. A business that has negotiated different allowances under a separate agreement is held to those instead.

VAT

Crumple Ltd (previously known as Crumple Receipts Ltd) is not currently registered for VAT. Fees are therefore charged with no VAT added, the price shown to you before you subscribe is the amount taken from your card, and we do not issue VAT invoices.

If we become registered for VAT, VAT will be charged on fees at the prevailing rate from the date the registration takes effect. We will give notice before that happens, and the notice provisions for fee changes below apply to it.

Automatic renewal

Paid plans are subscriptions and renew automatically. At the end of each billing period your subscription renews for a further period of the same length, and the payment method you provided is charged the then-current fee for that period without further action from you. The billing period and fee for your plan are shown before you subscribe, and in your business settings at any time.

We store your payment details with our payment processor for this purpose, and payments are taken without you being present. If a renewal payment fails, your plan may be suspended until payment is received, and the features your plan provides will be unavailable in the meantime.

You may cancel at any time from your business settings. Cancellation takes effect at the end of the billing period you have already paid for; your plan continues until then and is not renewed again. Cancelling does not entitle you to a refund of fees already paid for the current or any earlier period.

Except where required by law, we do not provide refunds for partial billing periods, unused access, or where we suspend or terminate your access due to a breach of these Terms or fraudulent activity.

Changes to fees

We may change our fees. Where a change affects the price of your next renewal, we will give you at least 30 days' notice before that renewal, through the Dashboard or by email. You may cancel at any point during that notice period, in which case your plan runs to the end of the period you have already paid for and is not renewed at the new price. If you do not cancel, the revised fee applies from your next renewal.

If any amount you owe us remains unpaid, we may suspend your access until it is paid, and we may charge interest and recovery costs on overdue amounts in accordance with the Late Payment of Commercial Debts (Interest) Act 1998.

13. Termination and Suspension

We may suspend or terminate your access to the Dashboard if you breach these Terms, engage in fraudulent or harmful activity, or if your business ceases to be an authorised Crumple partner. This includes, without limitation, where we have evidence that you or your stores have created, issued, or submitted fake, falsified, or fraudulent receipts or transaction data. We will endeavour to give prior notice where reasonably practicable, except where immediate suspension is necessary to protect the security of our systems or other users.

Where we suspend or terminate your access for breach of these Terms or for fraudulent activity, you will not be entitled to any refund of fees paid, and any outstanding fees remain payable.

You may cancel your subscription at any time from your business settings, as set out in section 12. You may close your Dashboard account entirely by contacting us.

Ownership and account deletion

Ownership of a business cannot be transferred or removed through the Dashboard, so that a business is never left without someone able to administer it. For the same reason, a Crumple account that owns a business cannot be deleted, whether the request is made through the Dashboard or through the Crumple app — they are the same account.

If you own a business and wish to close your personal Crumple account, please contact us. We will either transfer ownership to another member of your team, at your direction, or close the business account alongside yours under this section. Your personal account deletion request can then proceed. Where you ask us to close the business account, the data provisions below apply to it.

What happens to your data

While your account is open you may export your business and store data from the Dashboard at any time. If you ask us to close your account, you may request an export of that data within 30 days of the closure date, and we will provide it in a commonly-used machine-readable format.

After that period we will delete or anonymise your business and store data, except where we are required to retain it to comply with a legal obligation, to resolve a dispute, or to enforce these Terms. Backups are overwritten on our providers' ordinary cycles rather than immediately.

Receipts already issued to consumers are not deleted. A receipt in a consumer's Crumple wallet is their record of a transaction with your business, and it remains theirs, and ours as its independent controller under section 7.3, after your account is closed. Closing your account stops new receipts being issued; it does not withdraw receipts already given. The retention commitment in section 4 continues to apply to those receipts.

Survival

Termination or expiry does not affect any right or obligation that has already accrued. Sections 4 (as to the licence granted for receipts already issued and the retention of receipts), 7, 8, 10, 12 (as to fees already payable), 13, 15, 16, 17, 19, 20 and 21 survive termination, together with any other provision that by its nature is intended to.

14. Service Availability

The Dashboard, its database, authentication, file storage and background functions are hosted on Google Firebase and Google Cloud Platform. Our ability to make the Dashboard available is therefore bounded by the service levels Google publishes for those services, which we adopt as our own.

On that basis we target monthly uptime of 99.95% or better for the Dashboard and the receipt API, measured across a calendar month. The underlying commitments are set out by Google here:

• Firebase Service Level Agreement
• Google Cloud Firestore Service Level Agreement

This figure is a target rather than a contractual guarantee, and no service credits, refunds or other remedies arise from failing to meet it. Where a shortfall is caused by Google, our recourse is limited to whatever Google provides to us under the agreements above, and we do not undertake to pass that recourse on to you.

The following are excluded from any availability measurement:

• Planned maintenance, and emergency maintenance required to preserve security or data integrity.
• Outages, degradation or changes at Google, or at any other third-party provider we depend on.
• Suspension of your access under these Terms, and unavailability of features your plan does not include or whose allowance you have exhausted.
• Faults in your own systems, integrations, network or configuration, including misuse of Store API Keys.
• Anything outside our reasonable control, including internet failures and events of force majeure.

Your fallback obligation

Crumple must not be your only means of issuing a receipt. You are responsible for maintaining, and being able to use at short notice, an alternative way of giving a customer a receipt or proof of purchase. For example:

• A handwritten receipt.
• A printed receipt from your till, point-of-sale system or card terminal.
• A receipt emailed or otherwise sent from a system independent of Crumple.

You must use that alternative whenever the Dashboard or the receipt API is unavailable, degraded, or otherwise fails to issue a receipt, including during planned maintenance and during any suspension of your access.

Nothing in these Terms relieves you of your obligations to your own customers, or of your obligations under applicable law, including consumer, tax, VAT and record-keeping requirements. We are not liable for any failure by you to issue a receipt, nor for any loss, penalty, fine or dispute arising from it.

Where a separate agreement between your business and Crumple Ltd (previously known as Crumple Receipts Ltd) sets out a service level, that agreement takes precedence over this section.

15. Warranties and Limitation of Liability

Warranties

We warrant that we will provide the Dashboard with reasonable care and skill.

Beyond that warranty, and to the fullest extent permitted by law, the Dashboard is provided "as is" and we exclude all other terms, conditions and warranties, whether express, implied or statutory, including any implied terms as to satisfactory quality or fitness for a particular purpose. In particular, we do not warrant that the Dashboard will be uninterrupted, error-free or free of harmful components, that it will meet your specific requirements, or that analytics, statistics and other derived figures will be free from inaccuracy. Your obligation to maintain an alternative means of issuing receipts under section 14 is not affected by this warranty.

Liabilities we do not exclude

Nothing in these Terms excludes or limits our liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, for breach of the terms implied by section 2 of the Supply of Goods and Services Act 1982 or section 12 of the Sale of Goods Act 1979, or for any other liability that cannot lawfully be excluded or limited.

What we are not liable for

Subject to the paragraph above, we are not liable for:

• Indirect, consequential, or special losses arising from use of the Dashboard.
• Loss of revenue, profits, or business opportunities resulting from downtime, inaccuracies in analytics, or interruption to API services.
• Unauthorised access to your account resulting from your failure to maintain adequate security measures.
• Actions or omissions of third-party systems you integrate with via Store API Keys.

Subject to the liabilities we do not exclude, our total liability to you in connection with the Dashboard, whether in contract, tort (including negligence), breach of statutory duty or otherwise, shall not exceed the greater of the amounts paid by you to us in the twelve months preceding the relevant claim or £100.

16. Indemnity

You will indemnify us against all losses, damages, costs and expenses (including reasonable legal fees) that we incur arising out of or in connection with:

• Any claim by one of your customers, or by any other third party, relating to a receipt or transaction data you issued or submitted, or to your failure to issue a receipt.
• Any claim that your business information, logos or other assets provided to us infringe the rights of a third party.
• Your breach of these Terms, including any use of analytics data prohibited by section 7.2 and any misuse of Store API Keys.
• Your breach of applicable law, including data protection, consumer and tax law.

We will notify you promptly of any claim to which this indemnity applies, not settle it without your consent (not to be unreasonably withheld), and give you reasonable assistance in dealing with it at your expense.

17. Confidentiality

Each of us may receive information from the other that is confidential, or that a reasonable person would regard as confidential. That includes your transaction and analytics data, and our non-public pricing, technical and product information.

Each of us will keep the other's confidential information confidential, use it only to perform obligations or exercise rights under these Terms, and disclose it only to those who need it and are under equivalent obligations. This does not apply to information that is or becomes public through no breach of these Terms, that was already lawfully held, that is independently developed, or that must be disclosed by law or a regulator — in which case the disclosing party will, where lawful, give the other reasonable notice.

These obligations continue for three years after termination, and indefinitely for any confidential information that is also personal data.

18. Force Majeure

Neither of us is liable for any failure or delay in performing our obligations, other than an obligation to pay, caused by an event beyond our reasonable control. That includes failures of internet or telecommunications infrastructure, failures or withdrawal of services by Google or another provider we depend on, cyber attack, power failure, industrial action, epidemic, act of government, fire, flood and other natural disaster.

The affected party will notify the other as soon as reasonably practicable and use reasonable efforts to resume performance. If the event continues for more than 30 days, either of us may terminate these Terms by written notice, and we will refund the unused portion of any fee you have paid in advance.

19. General

Entire agreement

These Terms, together with the Business Privacy Policy and any separate agreement between your business and us, are the entire agreement between us about the Dashboard and replace any earlier discussions or representations. Neither of us relies on any statement not set out in them, though nothing here limits liability for fraud or fraudulent misrepresentation.

Assignment and subcontracting

You may not assign or transfer your rights under these Terms without our written consent. We may assign or transfer ours to a group company or in connection with a merger, acquisition or sale of assets, and may use subcontractors and service providers to perform our obligations, remaining responsible for their performance.

No third-party rights

These Terms are between you and us. No other person has any right under the Contracts (Rights of Third Parties) Act 1999 to enforce any of them, and we may vary or rescind them without any third party's consent.

Notices

We may give you notice through the Dashboard or by email to the address on your account, and it takes effect when sent. You must give us notice by the contact route in section 21, and it takes effect when we acknowledge receipt. Keeping your account email address current is your responsibility.

Waiver and severability

A delay or failure to enforce any provision is not a waiver of it, and a single or partial exercise of a right does not prevent its further exercise. If any provision is found to be invalid or unenforceable, it is severed to the minimum extent necessary and the remainder continues in force.

No partnership or agency

Nothing in these Terms creates a partnership, joint venture or employment relationship between us, and neither of us may bind the other.

20. Governing Law

These Terms are governed by and construed in accordance with the laws of England and Wales. Any disputes arising under or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts of England and Wales.

21. Contact Us

For any questions or concerns regarding these Terms, please contact us via our website https://crumple.digital.

By accessing or using the Crumple Business Dashboard, you confirm that you have read, understood, and agreed to these Terms and Conditions on behalf of yourself and the business you represent.