Terms of Service

These terms of service (“Terms“) contain the terms for use for the Service (as defined below) operated by Bullet Train Limited trading as Flagsmith (“Flagsmith“), a company incorporated in England and Wales with registered number 12353266 with its registered address at 3rd Floor, 86-90 Paul St, London, EC2A 4NE. These Terms shall apply to any use of Flagsmith services except those governed by an MSA) (as defined below), in which case the terms of the MSA shall apply.

Updated November 2023.

1. Definitions

“Affiliate” means, with respect to a party, any entity which directly or indirectly Controls, is Controlled by, or is under common Control with such party.

“Confidential Information” information of commercial value, in whatever form or medium disclosed by the party to the other party, including commercial or technical know-how, technology, information pertaining to business operations and strategies.

“Customer, “you”, “your” means the person, company, corporation or other legal entity using the Service. By using the Service, you automatically agree to these Terms.

“Control” means ownership or control, directly or indirectly, of at least 50% of the voting interests of the subject entity.

“Customer Data” means all electronic data or information submitted or input by Customer or any of its Team Members to the Service.

“Customer Equipment” means Customer’s and its Affiliates’ and Team Members’ computer hardware, software and network infrastructure used to access the Service.

“Customer Output” means all data, text, or other information output by the Service to the Customer and its Team Members in the course of using the Service.

“Data Protection Laws” means all applicable data protection and privacy legislation in force from time to time in the UK including the UK GDPR, the Data Protection Act 2018 (and regulations made thereunder) and the Privacy and Electronic Communications Regulations 2003 (SI 2003/2426);

“Documentation” means the published specifications of the Service (including as made available at www.flagsmith.com), including the Service Level Agreement and including as such specifications as may be updated or amended from time to time as necessary due to updates and enhancements, as determined and provided by Flagsmith.

“Fees” mean the fees paid by Customer for the right to access and use the Service during the Term in accordance with these Terms.

“MSA” means a master services agreement or similar agreement entered into between Flagsmith and the Customer in relation to the use of the Service by the Customer and its Team Members.

“Service” means the Flagsmith service (as further described in Section 3) and the Documentation, including but not limited to the SDK and the support services specified in the Documentation.

“SDK” means Flagsmith’s software development kit(s) for use with Customer’s products in accordance with the Documentation.

“Service Level Agreement” means the service level agreement set out at www.flagsmith.com/legal/sla as applicable to the Subscription.

“Subscription” means the Customer’s subscription to the Service in accordance with these Terms.

“Team Members” means the Customer’s and its Affiliates’ respective employees, agents, contractors, service providers or consultants who are authorized by Customer to use the Service and who have been supplied user identifications and passwords by Customer or by Flagsmith at Customer’s or its Affiliates’ request.

“Term” means the term of the Customer’s Subscription, as set out in Section 9.1 below.

2. Access to the Service

The person accepting these Terms or otherwise using the Service represents that they are authorized to do so as a Team Member on behalf of the Customer and the Customer agrees to be bound by these Terms. The Customer and any Team Member may not use the Service without agreeing to these Terms first

3. The Service

Flagsmith shall make the Service available to Customer and its Team Members in accordance with the Documentation and these Terms.
Subject to these Terms (including the payment of any applicable Fees), Flagsmith grants Customer and its Team Members a world-wide, non-sublicensable (except as otherwise provided herein), non-transferable and non-exclusive licence to access and use the Service, and to download the SDK solely for its internal business purposes. For the avoidance of doubt, “internal business purposes” includes the Customer’s right to use the Service to provide services to its clients.
The licence granted hereunder and the scope of the Service is limited according to the applicable level of Subscription ordered by the Customer, as set out in the Documentation. In particular, the Service is limited to the maximum number of Team Members and the level of support services specified in the Documentation (including the Service Level Agreement). The Customer may be subject to additional terms and conditions specified in the Documentation, for example regarding the number of API calls/requests; projects; environments; feature flags; identities and segments; and user permissions.

In the event that the Customer or any Team Member exceeds such limitations, Flagsmith will contact Customer and may charge Customer for such excess usage and/or upgrade the Customer to an appropriate level of Subscription. Customer shall pay such charges in accordance with Section 6 below.
Any third party component embedded, included or provided by Flagsmith for use with the Service may only be used in conjunction with the Service, and such use is subject to this these Terms.
Flagsmith may update the Service from time to time, and may change the content and/or functionality provided through the Service at any time. The Documentation and (if applicable) the Service Level Agreement will be updated accordingly.

4. Customer Responsibilities

Customer is responsible for obtaining and maintaining any Customer Equipment and any ancillary services needed to connect to, access, host or otherwise use the Service.
Customer agrees to use the Service in compliance with all applicable laws, and in particular not to use the Service to intentionally send or store or otherwise process infringing or unlawful material or material containing software viruses, worms, Trojan horses or other harmful computer code, files, scripts, agents or programs.
Customer agrees not to and not to attempt to (a) modify, copy, decompile, analyse, adapt, make error corrections or create derivative works of the Service (please note that components of the source code of the Flagsmith API are available from GitHub, https://github.com/Flagsmith/flagsmith, under BSD-3 licence terms, https://github.com/Flagsmith/flagsmith/blob/main/LICENSE.md); (b) reverse engineer the Service; (c) access the Service for the purpose of building a competitive product or service or to resell, sublicense, lease, time-share or otherwise make the Service available to any third party other than as contemplated or allowed by these Terms; (d) do any “mirroring” or “framing” of any part of the Service, or create Internet links to the Service which include log-in information, user names, passwords, and/or secure cookies; (e) use the Service for purposes of product evaluation, benchmarking or other comparative analysis intended for publication without Flagsmith’s prior written consent; (f) provide access to the Service by a known direct competitor of Flagsmith or to any third party who is not a Team Member; (g) impersonate any other Team Members; (h) access without authority, penetrate, interfere with, damage or disrupt the accounts of other Team Members or any part of the Service or its security measures.

5. Ownership and Intellectual Property Rights

Flagsmith or its licensors shall own and shall retain all ownership rights (including intellectual property rights) in the Service and the technology, software, hardware, products, processes, algorithms, user interfaces and know-how related to the Service and all data, information, software, content and other work developed or created by Flagsmith during the course of providing the Service to Customer (“Work Product“) in each case to the extent not constituting Customer Data or Customer Output (as defined below).
Customer or its licensors owns all rights in Customer Data and Customer Output. The Customer (i) hereby grants to Flagsmith a licence to use Customer Data and Customer Output in accordance with these Terms including in order to provide the Service; and (ii) confirms that the Customer and/or the Team Member submitting Customer Data is/are duly licensed to submit the Submitted Content to the Service and that the use of Customer Data by Flagsmith will not breach a third party’s rights including without limitation any intellectual property rights or rights in confidential information or data privacy. The Customer agrees to indemnify Flagsmith in respect of any loss or damage (including legal fees) incurred by Flagsmith in the event of a breach of this Section 4(2).
Except as expressly stated in these Terms (including subsection (5) below), no licence, right or interest in any Flagsmith or Customer trademark, copyright, trade name or service mark is granted by either party to the other under these Terms.
Flagsmith shall own, and shall be free to use in its sole discretion, any suggestions, enhancement requests, recommendations or other feedback that are provided by Customer or its Team Members to Flagsmith in relation to the Service.
The Customer consents to Flagsmith making use of the Customer’s corporate name and logo (in accordance with any reasonable guidance provided by you) on its website, marketing and publicity materials to indicate that the Customer is a user of the Service.

6. Fees

The applicable Fees (if any) shall be as stated in the Documentation and shall be payable in advance using Flagsmith’s payment provider notified to the Customer.
Customer’s credit or debit card will be charged at the time the Subscription order is placed and thereafter, at the frequency listed in the Documentation, which will continue until the Subscription ends or is terminated. For the avoidance of doubt, the Service will not commence until payment has been received for the Services and Flagsmith may suspend the Service in the event that subsequent fee payments are not received by the applicable time. Please note that Fees are non-refundable.
Unless otherwise provided, Flagsmith’s fees do not include any applicable taxes (including VAT) , and Customer is responsible for paying all applicable taxes arising from its subscription to the Service.
Flagsmith reserves the right to charge API overage fees in line with the pricing detailed in our pricing page.

7. Security, Data Privacy and Confidentiality

Flagsmith has in place security procedures in accordance with industry standards. Flagsmith will provide the Service and will hold Customer Data in accordance with its standard security policy, disaster recovery plan, and resilience plan. Flagsmith will also undergo a penetration test performed by a third-party at least once a year.
Customer may transfer personal data to Flagsmith in the course of using the Service, including the names and contact details of Team Members. For the avoidance of doubt, Flagsmith will not have access to Customer’s clients’ personal data. To the extent Customer Data comprises Customer’s “personal data” within the meaning of applicable Data Protection Laws, it is acknowledged that the Customer is the “data controller” of such personal data and that Flagsmith is acting on behalf of Customer as “data processor”. Accordingly, Flagsmith shall process such personal data in accordance with the Data Processor Appendix to these Terms. The terms “personal data”, “data controller”, ”data processor” and “process/processing” shall be defined according to the Data Protection Laws.
To the extent that Flagsmith collects and controls “personal data” within the meaning of applicable Data Protection Laws in the course of providing the Services, Flagsmith shall be the “data controller” of such personal data which shall be processed in accordance with Flagsmith’s Privacy Policy available here flagsmith.com/privacy-policy.
Both parties agree not to use or disclose Confidential Information relating to or owned by the other, received or disclosed to it by the other party during the Term, save for use or disclosure required in order to perform their respective obligations under these Terms. For the avoidance of doubt, Flagsmith may use your Confidential Information in order to make enhancements to the Service. Disclosure shall be limited to such of the receiving party's employees, officers, agents or contractors directly involved in performing the receiving party's obligations (the Recipients)
The parties agree that information is not to be regarded as Confidential Information and that the receiving party will have no obligation regarding confidentiality where that information is already in the public domain or enters the public domain through no fault of the receiving party, or is received from a third party without any obligations of confidentiality, or is used or disclosed with the prior written consent of the owner of that information, or is disclosed in compliance with a legal requirement, or is independently developed by the receiving party.

8. Limitation of Liability

Nothing in these Terms excludes or limits Flagsmith’s liability for death or personal injury arising from its negligence, or for fraud or fraudulent misrepresentation, or any other liability that cannot be excluded or limited by applicable law.
The Customer acknowledges and agrees that Flagsmith does not monitor Customer Data and that the Customer is responsible for ensuring that it has the necessary rights to submit Customer Data to the Service and to ensure that the use made of such Customer Data complies with all applicable laws, including but not limited to Data Protection Laws.
The Customer acknowledges and agrees that the quality of the Customer Output and the accuracy and proper functioning of the Service is reliant on the provision of accurate and complete Customer Data, for which the Customer takes sole responsibility. Any reliance by the Customer or Team Members on Customer Output is at the Customer’s risk and no guarantee is made by Flagsmith that such use will benefit the Customer or its business.
Except as expressly provided herein, to the extent permitted by law, Flagsmith makes no warranties of any kind in relation to the Service, whether implied, statutory or otherwise, including any warranties of merchantability or fitness for a particular purpose. In particular, Flagsmith does not warrant the operation of the Service will be uninterrupted or error-free, except as provided in the Service Level Agreement.
Flagsmith uses industry standard measures to remove bugs or viruses but does not guarantee that the Service will be secure or free from bugs or viruses. The Customer and Team Members should use their own virus protection software. Flagsmith will not be liable for any loss or damage caused by a virus, distributed denial-of-service attack or other technologically harmful material that may infect the Customer’s or its Team Members’ computer equipment, computer programs, data or other proprietary material due to its use of the Service.
To the maximum extent permitted by law, Flagsmith or its licensors or suppliers shall not have any liability to the Customer or any Team Member (whether in contract, tort including negligence or under any other theory of liability, whether or not the party has been advised of the possibility of such damages) for any (i) lost profits, sales, business or revenue; (ii) loss of agreements or contracts; (iii) business interruption; (iv) loss of anticipated savings; (v) loss of business opportunity, goodwill or reputation; (vi) loss of use or corruption of data, software or information; (vii) cost of procurement of substitute services or technology; or (viii) for any special, incidental, punitive, indirect or consequential damages, however caused.
Subject to the express provisions of these Terms (including this subsection 7), Flagsmith’s aggregate liability arising out of this these Terms and the provision of the Service, whether in contract, tort or under any other theory of liability shall be limited to the Fees paid to Flagsmith during the twelve (12) months prior to the liability in question arising.

9. Term and Termination

The Subscription begins once the Customer has provided its payment details (if relevant) and started its receipt of the Service and shall continue for the period set out in the Documentation. Unless stated otherwise in the Documentation, the Subscription will automatically renew for further periods of the same duration unless either the Customer or Flagsmith gives the other notice that it wishes the Subscription to end after the then-current renewal period. Please note that no refunds of Fees will be paid in the event of non-renewal of the Subscription.
Flagsmith will determine, (acting reasonably), whether there has been a breach of these Terms through any use of the Service by the Customer or its Team Members. If such a breach has occurred, Flagsmith may take such action as it deems appropriate, (acting reasonably) including all or any of the following actions: (i) immediate, temporary or permanent withdrawal of any relevant Team Member account and/or the termination of the Customer’s Subscription and/or access to the Service; (ii) immediate, temporary or permanent removal of any Customer Data; (iii) the issue of a warning to the Customer and/or any Team Member; and (iv) legal action against the Customer and/or any Team Member.
Upon expiry or termination of the Subscription, the Customer’s and its Team Members’ licence to use the Service will immediately cease. Flagsmith will have no obligation to maintain any Customer Data or Customer Output.
The provisions of this Section 9 are subject to agreement otherwise in an MSA.

10. Marketing

If you receive promotional electronic communications, including emails, from us, you may indicate a preference to stop receiving further promotional communications from us by contacting Company directly at the mailing address or at the email address or phone number provided on the electronic communication, or at the email address or phone number given on the Website or as set out below. As well, you will have the opportunity to “opt-out” of receiving future electronic messages, including promotional messages, by following the unsubscribe instructions provided in the promotional electronic communication you receive or by contacting Company directly as set out in the communication, or at the email address or telephone number given on the Website or as set out below. We do not charge for this service, and your unsubscribe request will be processed within 10 days of the date on which we receive it.

11. General

The Customer will be asked to read and accept these Terms at the time the Customer first accesses the Service. Flagsmith may revise these Terms at any time and in the event of such a revision, the Customer may be asked to read and accept the revised Terms at the next time the Customer accesses the Service. No other variation to these Terms may be made unless in writing signed by the Customer and Flagsmith.
A person who is not a party to these Terms (including Team Members) shall not have any rights under the Contracts (Rights of Third Parties) Act 1999 to enforce any term of these Terms of Use, but this does not affect any right or remedy of a third party which exists, or is available, apart from that Act.
Notwithstanding any language to the contrary therein, no terms stated in a purchase order or similar ordering document shall be incorporated into these Terms, and all such terms shall be void.
These Terms and the documents referred to in these Terms (including the Flagsmith Privacy Policy and the Service Level Agreement) represent the entire agreement of the parties, and supersede all prior or contemporaneous agreements, proposals or representations, written or oral, concerning its subject matter.
Either party may include the other’s name or logo in customer or vendor lists in accordance with the other’s standard guidelines. In addition, Flagsmith may refer to Customer’s intended use of the Service in its marketing materials and on its websites as well as in discussions with Flagsmith customers, prospective customers, and industry and financial analysts.
No failure or delay in exercising any right under these Terms shall constitute a waiver of such right. Except as otherwise provided, remedies provided herein are in addition to, and not exclusive of, any other remedies of a party at law or in equity. If any provision of this these Terms is held by a court of competent jurisdiction to be contrary to law, such provision shall be modified by the court and interpreted so as best to accomplish the objectives of the original provision to the fullest extent permitted by law, and the remaining provisions shall remain in effect.
Neither party shall be liable to the other for any delay or failure to perform its obligations (excluding payment obligations) due to circumstances which are beyond its reasonable control.
These Terms, their subject matter and their formation (including the provision of the Service), are governed by English law. The parties agree to the exclusive jurisdiction of the courts of England and Wales.
“Flagsmith” and the associated logo are trade marks of Bullet Train Limited
To contact Flagsmith, including with any comments or complaints regarding the Service, please contact support@flagsmith.com.

APPENDIX

Data Processor Terms

1. Due to the nature of the Service, where it is made available by the Customer, the parties acknowledge that Flagsmith may have access to personal data of any kind that is held by the Customer.

2. The Customer confirms that it has all necessary appropriate consents and/or notices in place to enable lawful transfer of any personal data to Flagsmith to enable Flagsmith to provide the Service under these Terms.

3. The Customer consents to Flagsmith appointing such third party processors as may be necessary to provide the Service and as are notified to the Customer from time to time, details of which are also available on request. If there is any proposed replacement of or addition to such third party processors, Flagsmith shall inform the Customer and the Customer shall have the opportunity to object on reasonable grounds to such changes during a 4 week period after such notification. If no objection has been received during that time, any proposed changes shall be deemed accepted. Flagsmith confirms that it has entered into a written agreement with any such third party processor which Flagsmith confirms reflect and will continue to reflect the requirements of the Data Protection Laws. In any event, as between the Customer and Flagsmith, Flagsmith shall remain fully liable for all acts or omissions of any third-party processor appointed by it pursuant to this Appendix.

4. Flagsmith confirms that when processing personal data under the Terms,it will process such data as “data processor” for the Customer, and Flagsmith shall:

4.1. subject to any law applicable to Flagsmith requiring them to process personal data for other purposes, only process that personal data on the documented instructions of the Customer (which shall include the provision of the Service as provided for in these Terms);

4.2. ensure that it has in place appropriate technical and organisational measures, to protect against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data, appropriate to the harm that might result from the unauthorised or unlawful processing or accidental loss, destruction or damage and the nature of the data to be protected, having regard to the state of technological development and the cost of implementing any measures;

4.3. ensure that all personnel who have access to and/or process personal data are obliged to keep the personal data confidential; and

4.4. not transfer any personal data outside the United Kingdom unless the following conditions are fulfilled:

4.4.1. there are appropriate safeguards in place in relation to the transfer;

4.4.2. the data subject has enforceable rights and effective legal remedies;

4.4.3. there is an adequate level of protection (as provided for in the Data Protection Law) to any personal data that is transferred; and

4.4.4. Flagsmith complies with reasonable instructions notified to it in advance by the Customer with respect to the processing of the personal data;

4.5. Promptly provide the Customer with reasonable assistance in responding to any request from a data subject and in ensuring compliance with its obligations under the Data Protection Laws with respect to security, breach notifications, impact assessments and consultations with supervisory authorities or regulators;

4.6. Promptly notify the Customer without undue delay and in any event within 48 hours on becoming aware of a “personal data breach” (as that is defined in Data Protection Laws);

4.7. delete personal data and copies thereof on termination or expiry of these Terms unless required by any law applicable to Flagsmith in the UK to store the personal data beyond that period;

4.8. maintain complete and accurate records and information to demonstrate its compliance with this Appendix; and

4.9. promptly inform the Customer if, in its opinion, the Customer’s instructions would be in breach of Data Protection Law.