Terms of Service

Last updated November 5, 2026

These terms govern your use of the Checkbox website, the Checkbox API, CLI, MCP server and Elements, and the Checkbox product (together, the service).

In short
Checkbox is a software tool. You run your subscription business and remain solely responsible for complying with the law. Checkbox does not take on legal liability for your subscriptions, your checkout, your emails or your cancellation flow, and using Checkbox does not make your program compliant or protect you from claims. The full terms below control.

Not legal advice

Checkbox is software that observes and checks subscription flows against a catalog of legal requirements. Its check results, findings, compliance plans, compliance status and suggested fixes and copy are automated assessments, not legal advice, and do not create an attorney–client relationship. Passing Checkbox’s checks does not guarantee that your program complies with the law. Rules drafted from the statute text and updated as new statutes come into effect. Automated checks, not legal advice. Every rule cites its source, so you or your lawyer can check it. Laws change and can be interpreted differently by regulators and courts; consult counsel about your program.

You are responsible for your subscription program

You, not Checkbox, are the seller and the party responsible to your customers and to regulators. You are solely responsible for your products and services, your offers, prices, trials and renewals, your sign-up and checkout pages, your consents and disclosures, the emails and notices sent to your customers, your cancellation and refund practices, your billing, and your compliance with every law that applies to them, including automatic-renewal, consumer-protection, privacy and payment laws.

  • Checkbox does not assume or share any of that responsibility or liability. We are not your agent, your lawyer, your compliance officer or a party to your contracts with your customers.
  • Everything Checkbox provides — findings, compliance plans, suggested code, copy and Stripe settings, Elements, hosted cancellation pages, notices sent through Checkbox, consent receipts, evidence and certificates — is a tool you choose whether and how to use. You decide what to change and what to ship, and you review it first. Notices and pages Checkbox sends or hosts for you are sent or shown at your direction and on your behalf.
  • Checkbox checks only what it is configured to check and can observe. It may miss problems, report problems that are not there, or lag behind changes in the law. A missing finding is not confirmation that anything complies, and we have no duty to monitor your program beyond what the service does automatically.
  • Consent receipts, evidence exports and certificates are records of what Checkbox observed. We do not promise that any court, arbitrator or regulator will accept them or that they will defeat any claim.
  • The same applies to anything a coding agent or AI assistant does with Checkbox’s output, and to Checkbox’s status, trust and documentation pages: they describe a tool, not a promise about your program.

Indemnity

To the extent permitted by law, you will defend, indemnify and hold harmless Checkbox, its affiliates (including System1) and their personnel against any claim, demand, investigation, fine, penalty, judgment, settlement, restitution or refund, and related costs and reasonable attorneys’ fees, arising out of your products or services, your subscription program or its compliance with law, your dealings with your customers, or your use of the service in breach of these terms.

Price

The service is free of charge, subject to the fair-use limits published in the documentation, which we may adjust with notice. We will not charge you for anything without your prior agreement: if we introduce paid features, they will have their own terms and prices, shown to you before you agree to them.

Keys, the API and coding agents

  • Keep secret keys secret. You are responsible for what is done with your keys and by the coding agents and tools you give them to, including changes those agents make to your code or billing settings. Review changes before you ship them.
  • Only connect sites, billing accounts and email you control or are authorized to test. Synthetic test subscriptions run in your billing platform’s test mode; do not give Checkbox live billing credentials it does not ask for.
  • Do not use the service to probe private networks, to load content you are not allowed to access, to overload any site, or to get around rate or fair-use limits. We may suspend keys or accounts that do.
  • Apps you connect with OAuth (for example an MCP client) act with the access you approve until you disconnect them under Connected apps in the dashboard.
  • Test mode and preview features may change or stop at any time.

Your responsibilities

You are responsible for the sites, test accounts, promo codes and emails you connect to Checkbox, for having the right to share that data with us, and for the decisions you make based on our findings.

Your data

You own the data you send to Checkbox and the records Checkbox creates about your sites (findings, captures, evidence, consent receipts and reports). You give us permission to store and process them only to provide the service to you. We keep them only as long as your retention settings allow:

  • records (consent receipts, disclosures as shown, passing check results, certificates, emails sent, confirmed cancellations and the evidence chain) for 7 years by default, adjustable from 1 to 10 years;
  • superseded check results (earlier results that a later check replaced, with their page captures and change history) for 30 days after they are replaced by default, adjustable from 7 days to 2 years, after which only summary counts for status history charts remain. Current results are not deleted automatically.

You can set these for your organization and for each site in the dashboard or through the API. Superseded check results are stored separately from the write-once evidence storage, so when your settings delete it, it is deleted; database backups keep copies for up to 35 days and then roll off. The Privacy Policy has the details.

An owner or admin can turn on a legal hold for your organization or for a site. While it is on, Checkbox deletes nothing automatically, and data cannot be deleted and retention cannot be shortened, until an owner or admin turns it off. We record who changed it and when. Deciding whether and when you must preserve records is your responsibility; turn on a legal hold when you need one.

If we receive a subpoena, court order or other legal request for your data, we will notify you before we produce anything, unless we are legally prohibited from doing so, and give you a reasonable opportunity to object or to seek a protective order. Where we can, we will ask the requester to obtain the data from you directly. We will produce only what we are legally required to produce, and only what we still hold under your retention settings. If we were prohibited from notifying you in advance, we will notify you when that prohibition ends.

Personal data

Our Privacy Policy describes how we handle personal data. Where we process personal data about your customers on your behalf, we do so on your instructions; a Data Processing Addendum is available at /dpa and applies once signed.

Feedback

If you send us ideas or feedback, we may use them without any obligation to you.

No warranties

The service is provided “as is” and “as available”. To the extent permitted by law, Checkbox disclaims all warranties, express or implied, including merchantability, fitness for a particular purpose, accuracy and completeness of the legal catalog and findings, non-infringement, and uninterrupted or error-free operation.

Limitation of liability

To the extent permitted by law: (a) Checkbox is not liable for any indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue or data; (b) Checkbox is not liable for any fines, penalties, judgments, settlements, restitution, refunds, chargebacks, attorneys’ fees or other amounts arising from your subscription program, your customers, or any claim, demand, investigation or lawsuit against you, even if the service did not detect or report the issue; and (c) our total liability for any claim relating to the service is limited to the fees you paid us in the twelve months before the claim, or one hundred US dollars if you paid us nothing. These limits apply whatever the legal theory and even if we were told such damages were possible.

Suspension and termination

You may stop using the service and delete your account at any time. We may suspend or end access for a breach of these terms, to protect the service or others, or if we stop offering the service, with notice where we reasonably can. The sections on responsibility, indemnity, warranties and limitation of liability survive.

Disputes

Any dispute arising out of or relating to these terms or the service will be resolved by binding individual arbitration administered by the American Arbitration Association under its applicable rules, not in court, except claims eligible for small claims court. You and Checkbox waive any right to bring or participate in a class action or class-wide arbitration. If this arbitration agreement is held unenforceable for a dispute, that dispute will be resolved in the state or federal courts located in Los Angeles County, California. These terms are governed by the laws of the State of California.

Eligibility

You must be at least 18 years old (or the age of majority where you live) and, if you use the service for a business, authorized to accept these terms on its behalf.

Changes

We may update these terms and will post the new version here with its date. We will email account owners in advance about material changes.

Who you contract with

Checkbox is operated by S1 Media Ventures LLC, a System1 company. These terms are governed by the laws of the State of California; disputes are resolved as described under “Disputes” (arbitration), and any dispute not subject to arbitration is heard in the state or federal courts located in Los Angeles County, California.

Contact

Checkbox is a System1 company. Questions about these terms: support@checkbox.site.

See also the Privacy Policy, the Data Processing Addendum and the Trust center.