Terms of Service

These Terms of Service (the “Terms”) are an agreement between Grove Hill Research (“we”, “us”) and the person or entity accessing VendorStacks (“you”). By creating an account, requesting an API key, or calling the API, you accept them. If you are accepting on behalf of an organization, you represent that you are authorized to bind it.

1. The service

VendorStacks indexes subprocessor, vendor, and privacy disclosures that companies publish on their own public websites, and exposes the result as an API and dashboard. Extraction is deterministic — we match published text against a vendor dictionary and return the matched evidence. We do not warrant that the index is complete, current, or free of error, and you should not treat it as a substitute for a company’s own disclosures or for your own due diligence.

2. Accounts and API keys

You are responsible for everything done with your API keys, including by agents or systems you connect. Keep them secret, rotate them if exposed, and tell us promptly at support if you believe a key has been compromised. We may rate-limit, suspend, or revoke a key that is being used in a way that threatens the service or breaches these Terms.

3. Credits, billing, and refunds

• Access is prepaid in credits. Each lookup consumes credits at the rate published on the pricing page at the time of the call.
• Credit purchases are processed by Stripe. We never receive or store your full card details.
• Credits do not expire while your account is in good standing, have no cash value, and are not transferable between accounts.
• Purchases are non-refundable except where required by law, or at our discretion where the service failed to deliver what you paid for — write to support and we will look at it honestly.
• Free-tier allowances exist to let you evaluate the service and may be changed or withdrawn at any time.

4. Acceptable use

Your use of the data is additionally governed by our Acceptable Use Policy, which forms part of these Terms. In short: do not use the data to harass, discriminate, or contact people in ways that break marketing or privacy law, and do not resell or redistribute the raw index as a competing dataset.

5. Your data

You keep ownership of the domains, lists, and other inputs you send us. You grant us the limited right to process them to operate the service — run scans, return results, and maintain logs. We may use aggregated, non-identifying operational statistics to improve the service. How we handle personal information is described in the Privacy Policy.

6. Availability and changes

The service is provided on an “as available” basis. We may change, add, or remove endpoints and fields. For breaking changes to a documented, stable endpoint we will give reasonable notice by email to account holders where practicable.

7. Disclaimers

To the maximum extent permitted by law, the service is provided “as is” without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement.

8. Limitation of liability

To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits or lost data. Our total aggregate liability arising out of or relating to the service is limited to the amounts you paid us in the three months preceding the event giving rise to the claim.

9. Termination

You may stop using the service at any time. We may suspend or terminate access for breach of these Terms, for non-payment, or where continued provision would expose us to legal risk. On termination for our convenience, we will refund unused credits.

10. Governing law

These Terms are governed by the laws of the State of New York, excluding its conflict-of-laws rules, and the state and federal courts located in New York County have exclusive jurisdiction.

11. Changes to these Terms

We may update these Terms. The effective date at the top of this page always reflects the current version, and material changes will be notified to account holders by email before they take effect. Continued use after that date is acceptance.

12. Contact

Questions about these Terms: josh@grovehillresearch.com.