Terms of Service
Last updated: September 25, 2026
These are the basic terms for using Attriloop. A signed order form or agreement takes priority if it says something different.
1. Service
Attriloop provides link routing, attribution, analytics, and related tools. The service and its features may change. Attribution and analytics may be incomplete, delayed, or inaccurate.
The service is provided as available. Attriloop does not promise uninterrupted availability, compatibility with every platform, or any particular business result unless a signed agreement expressly says so.
2. Your use
You are responsible for your account, users, credentials, apps, links, destinations, integrations, and data. You must have the rights and permissions needed for the data you send and must follow applicable law and platform rules.
Do not use Attriloop for unlawful activity, fraud, malware, spam, unauthorized tracking, security testing without permission, or to interfere with the service. Do not send sensitive or regulated data unless Attriloop has agreed to that use in writing.
3. Access
When you purchase a subscription, Polar handles checkout and billing. The selected price, taxes and renewal frequency are shown before payment. Subscriptions renew until cancelled through the billing portal; cancellation takes effect at the end of the paid period. Manually granted access does not create a paid subscription.
4. Data and ownership
You keep your rights in your data. You allow Attriloop to process it only as needed to provide, secure, maintain, and comply with law for the service. Attriloop keeps its rights in the service, software, and documentation.
Data handling is also covered by the Privacy Policy and, where Attriloop acts as a processor, the Data Processing Agreement.
5. Suspension and termination
You may stop using the service. Attriloop may restrict or end access where reasonably necessary for security, legal compliance, abuse, or protection of the service or other users.
6. Disclaimer and liability
To the extent allowed by law, the service is provided "as is" without implied warranties. Attriloop is not liable for indirect, special, incidental, consequential, or lost-profit damages. Attriloop’s total liability for the service is limited to the amount paid for it during the twelve months before the event giving rise to the claim.
Nothing in these Terms excludes liability that cannot legally be excluded or limits rights that mandatory law gives you.
7. General
Attriloop may update these Terms by publishing a new effective date. Any change applies only as permitted by law. If one provision cannot be enforced, the remaining provisions continue to apply.
Data Processing Agreement
This DPA applies only where Attriloop processes personal data on behalf of a customer and data-protection law requires a processor agreement. It forms part of the Terms or other agreement covering the service.
1. Roles
The customer is the controller and Attriloop is the processor for customer data. Each party remains responsible for the obligations that apply to it. The customer’s use and configuration of the service are documented instructions.
2. Processing details
- Subject and purpose: providing link routing, attribution, analytics, reporting, integrations, support, and related service functions selected by the customer.
- Duration: the service term and the limited period needed for deletion, backup expiry, dispute handling, or a legal obligation.
- People: the customer’s app users, visitors, customers, personnel, and other people whose data the customer submits.
- Data: identifiers, link and request metadata, device and app data, attribution, events, revenue, and other data configured by the customer.
The customer must not submit special-category, sensitive, children’s, precise-location, payment-card, or government-identifier data unless the parties expressly agree in writing.
3. Attriloop’s processor duties
To the extent required by applicable law, Attriloop will:
- process customer data only on documented instructions;
- require confidentiality from people authorized to process it;
- apply security measures appropriate to the processing and available service;
- provide legally required assistance with data-subject requests, security incidents, impact assessments, and regulator consultations;
- notify the customer of a personal-data breach without undue delay after becoming aware of it;
- delete or return customer data after the service ends, unless law requires retention; and
- provide information reasonably needed to demonstrate compliance with these processor duties.
4. Customer duties
The customer is responsible for lawful instructions, notices, legal bases, consents, platform permissions, data accuracy, and its own response to data-subject requests. The customer must configure the service to avoid unnecessary data.
5. Subprocessors
The customer gives general authorization for the providers on the Subprocessors section. Attriloop will require a subprocessor handling customer data to accept data-protection obligations appropriate to its services.
Where required by law, Attriloop will publish an intended subprocessor change before that provider starts processing customer data. A customer may object on reasonable data-protection grounds. If the issue cannot be resolved, the customer may stop using the affected feature or terminate the affected service.
6. International transfers
Where customer data is transferred across borders, the parties use the transfer mechanism required by applicable law. If European Commission Standard Contractual Clauses are required, the parties must complete the applicable module and annexes before the regulated transfer. This DPA does not claim an adequacy decision or certification.
7. Reviews
Attriloop may satisfy information and audit requests with current documentation or independent reports where available. Any further review must be legally required, reasonable, confidential, and avoid exposing other customers or creating a security risk.
8. Order of terms
This DPA controls over conflicting Terms only for personal-data processing. The liability terms in the main agreement apply to this DPA unless mandatory law requires otherwise.