Translations — read this policy in Français, 한국어, 中文(简体), 中文(繁體), or 日本語 on the full edition.
Translated editions are AI-assisted machine translations provided for convenience; the English text is the governing version.
These Terms of Service (“Terms”) govern your access to and use of the CRM Sync platform and the “UCP Purchase Agent” / “CRM Auth” applications and integrations (collectively, the “Service”) provided by Story Story AI (“Story Story,” “we,” “us,” or “our”). Please read them carefully. Your use of the Service is also governed by our Privacy Policy, which is incorporated into these Terms by reference.
CRM Sync exists to solve a specific problem: customer identity, consent, content, and commerce data are scattered across disconnected tools, and stitching them together is slow, brittle, and risky. The Service consolidates that work behind a single, server-side data layer so you configure once and operate across every channel. Its core capabilities include:
These capabilities are provided as configurable tools; you remain responsible for how you set up, operate, and use them, as described below.
By installing, accessing, or using the Service—including through the Shopify App Store, the Webflow Marketplace, or any embedded surface—you agree to be bound by these Terms. If you do not agree, you may not install or use the Service. If you accept these Terms on behalf of a business or other legal entity, you represent that you are authorized to bind that entity, and “you” refers to that entity.
Acceptance at the point of action. In addition to acceptance on first use, completing a purchase, subscribing to communications, creating an agent mandate, or using account-bound services constitutes acceptance of the then-current Terms. Where the Service presents an acceptance control (for example, a checkout confirmation or a required checkbox), proceeding through that control is your agreement.
Declining or withdrawing acceptance. You may decline the Terms at any time via the Cookie Preferences panel. Declining does not retroactively void the agreement that governed your prior use; it withdraws your ongoing assent. While declined, contract-dependent services — purchases and checkout, agent mandates, and account-bound services — are unavailable and will prompt you to re-accept before proceeding. Browsing public pages and managing your privacy choices are never conditioned on acceptance. Both your acceptance and any later decline are retained as audited, timestamped records.
You must be at least 18 years old and have the legal capacity and authority to enter into these Terms. The Service is intended for merchants, businesses, and their authorized administrators. By registering or installing the Service, you represent that you meet these requirements and that the store, site, or account you connect is one you are authorized to manage.
CRM Sync is a multi-tenant, server-side platform that synchronizes customer identity, consent, segmentation, and related commerce data across connected systems, and that powers agentic chat-commerce experiences. Depending on your configuration, the Service may connect to and exchange data with Shopify, Webflow, Xano, Google Analytics, Adobe Experience Platform, email providers, and similar services that you authorize. We may add, modify, or discontinue features at any time. The Service is provided as a tool to help you operate your own commerce and customer-relationship workflows; you remain responsible for how you configure and use it.
The Service makes connected customer, consent, and commerce data accessible to your enterprise teams (product, compliance, analytics, agencies) and to authorized AI agents through a single governed gateway, so they can use that data without standing access to raw personal or payment data. These controls let you safely open data to more teams and agents — they define how access is granted, bounded, withdrawn, and evidenced, and are provided as tooling rather than as a managed-security service.
crm_t_ tokens for delegated surfaces and client handoff, and read-only scoped keys limited to specific data classes. Issue the least-privileged credential sufficient for each recipient.You retain ownership of the data you submit to or generate through the Service, including your configuration, content, and the customer records you connect (“Your Data”). You grant Story Story a non-exclusive, worldwide license to host, process, transmit, and display Your Data solely as necessary to provide, secure, and improve the Service. Where the Service processes personal data of your customers, you act as the data controller and Story Story acts as a data processor acting on your documented instructions; such processing is described in, and governed by, our Privacy Policy and any applicable data processing terms. You are responsible for obtaining all consents and providing all notices required for the data you connect. You may disconnect the Service or request deletion of Your Data at any time; the license terminates upon deletion except for copies already archived, aggregated, or required to be retained by law.
The Service may inject embeds, scripts, and components (for example, consent banners, account or cart surfaces, and chat experiences) into your storefront or site, and may load or display third-party content via iframes or media loaders. You are solely responsible for confirming you have the rights to display such content and for complying with the terms of the underlying providers. Where supported, the Service applies a Content-Security-Policy allowlist and Permissions-Policy restrictions to limit the surfaces and device features that embedded content can access.
You may not, and may not permit others to:
Certain plans or features may require payment. Where the Service is offered through a platform marketplace, charges may be billed through that platform’s billing system (for example, Shopify’s Billing API) and are subject to that platform’s billing terms. Where charges are processed directly, they may be handled via Stripe or the Machine Payments Protocol (MPP) using USDC stablecoins. On-chain payments are final and non-reversible. For card payments processed via Stripe, refunds may be requested within 30 days of the charge and are granted at our discretion. Fees are exclusive of taxes, which are your responsibility unless stated otherwise.
Orders placed by authorized agents. By placing an order — personally or through an AI agent acting under an active, subject-bound mandate you created — you agree to these Terms and authorize the associated charge. An agent-placed order within the mandate’s spend cap, scope, and expiry binds you as if you placed it yourself; orders outside the mandate are rejected as mandate violations and are not charged.
The Service interoperates with third-party platforms and services that you choose to connect, including but not limited to Shopify, Webflow, Xano, Google, Adobe, and email or payment providers. Your use of those services is governed by their own terms and privacy policies. Story Story is not responsible for the availability, accuracy, security, or practices of third-party services, and your relationship with them is solely between you and the relevant provider.
The Service, including its software, source code, designs, documentation, and trademarks, is and remains the property of Story Story and its licensors. Subject to these Terms, we grant you a limited, non-exclusive, non-transferable, revocable license to use the Service for your internal business purposes during the term. No rights are granted except as expressly set out here. You retain all rights in Your Data as described in Section 5.
We may suspend or terminate your access to the Service, with or without notice, if you violate these Terms or if necessary to protect the Service, other users, or comply with law. You may stop using the Service, uninstall the application, or request account deletion at any time by contacting us. Upon termination, your right to access the Service ceases; Sections that by their nature should survive (including Sections 5, 9–13) will survive.
The Service is provided “as is” and “as available,” without warranties of any kind, whether express or implied, including any implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement. We do not warrant that the Service will be uninterrupted, error-free, secure, or free from harmful components, or that it will meet your requirements. Except where a separate written service-level agreement (SLA) has been executed, we do not guarantee any specific uptime, availability, or response time, and the access-governance and security controls described in these Terms (including Section 3.1) are provided as tooling, not as a managed-security service or a warranty of security outcomes.
To the maximum extent permitted by law, Story Story will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenue, data, goodwill, or business, arising out of or relating to the Service, even if advised of the possibility of such damages. To the maximum extent permitted by law, our total aggregate liability arising out of or relating to the Service will not exceed the greater of the amounts you paid us for the Service in the twelve (12) months preceding the claim, or one hundred U.S. dollars (US$100). Nothing in these Terms limits liability that cannot be limited under applicable law.
You agree to indemnify and hold harmless Story Story and its officers, employees, and agents from and against any claims, damages, liabilities, and expenses (including reasonable legal fees) arising out of or related to (a) Your Data or the data you connect, (b) your use of the Service in violation of these Terms or applicable law, or (c) your violation of any third party’s rights, including privacy or intellectual property rights.
These Terms are governed by the laws of the State of California, USA, without regard to its conflict-of-laws rules, and the state and federal courts located in Los Angeles County, California will have jurisdiction, subject to the regional exceptions below.
Where required, marketing communications are sent only with your freely given, specific, informed, and unambiguous consent, collected separately; non-essential browser storage requires separate consent. Consumers may have a 14-day withdrawal right for certain digital purchases. You may exercise these rights by email, through the Service, or by contacting privacy@story-story.ai.
Commercial electronic messages are sent only with express consent; unsubscribe requests are processed within 10 business days. You have rights of access, correction, and complaint under PIPEDA.
Users in China, Taiwan, Japan, and other jurisdictions retain the data-protection, consent, and withdrawal rights afforded by their local laws.
We may update these Terms from time to time. Updates take effect upon posting; your continued use of the Service after an update constitutes acceptance. For material changes, we will provide notice by email or an in-app prompt where reasonably practicable.
| Channel | Contact |
|---|---|
| Legal & Terms | legal@story-story.ai |
| Data Protection | privacy@story-story.ai |
| General Support | ysl@story-story.ai |
| Mailing Address | Story Story AI, United States |
We aim to respond to all inquiries within 5 business days.