K1 Upload Files — Terms and Conditions

Effective date: May 22, 2026

Contracting entity: K1 Apps LLC, 30 N Gould St, STE R, Sheridan, WY 82801, USA ("K1", "we", "us", "our").

Contact: support@k1apps.com

These Terms & Conditions (the "Terms") govern your access to and use of the K1 Upload Files Shopify application and related services (the "App"), which enables you to receive file uploads from buyers on product pages, attach files to existing orders via secure magic links, and download attached files in bulk. By installing or using the App, you agree to be bound by these Terms. If you are entering into these Terms on behalf of a company or other legal entity, you represent that you have authority to bind that entity.

1. Definitions

"Merchant", "you", "your" — the Shopify merchant account owner or its authorized representative who installs/uses the App.

"Shop" — the Shopify store associated with your Merchant account.

"End‑Customer" — an individual who purchases from the Shop or who is invited by you to upload a file through a Magic Link.

"File" — any file uploaded through the App by an End‑Customer (e.g., PDF, image, document), together with its associated metadata (filename, size, MIME type, timestamps, antivirus scan result, linked order ID).

"Upload Rule" — a configuration you create in the App that determines when the upload widget is shown (scope: whole store / collections / products / variants) and which constraints apply (allowed file types, size limits, min/max files, required flag, labels, instructions).

"Magic Link" — a single‑use or multi‑use, expiring URL generated from the Shopify Admin to request file uploads from an End‑Customer against a specific order.

"Storage Quota" — the aggregate storage limit and upload count limit associated with your current subscription plan.

"Documentation" — any guides, help docs, UI texts, and specifications we provide.

"DPA" — the Data Processing Addendum offered by K1 (see §11).

2. Relationship with Shopify

K1 is not part of Shopify. The App runs on, and interacts with, the Shopify platform and APIs. Your use of Shopify remains governed by your separate agreement with Shopify. We are not responsible for Shopify's platform, billing, data handling, outages, or changes to its APIs, policies, or features.

Platform changes. To the extent Shopify changes its platform, APIs, or policies in a way that materially impacts the App, K1 may modify, deprecate, or suspend affected features without liability. Where practicable, K1 will provide prior notice of such changes and, if feasible, reasonable guidance or alternatives.

3. Account, Eligibility & Authority

You must: (a) use the App for business purposes, (b) ensure the person installing the App is authorized, and (c) maintain accurate account information. You are responsible for actions taken under your Shop's credentials and for your staff's compliance with these Terms.

4. Access Rights & License

Subject to these Terms, K1 grants you a limited, revocable, non‑exclusive, non‑transferable license to access and use the App for your internal business purposes on your Shop. You shall not (and shall not permit others to): (i) sublicense, sell, or lease the App, (ii) reverse engineer or decompile the App except as allowed by applicable law, (iii) circumvent usage limits, Storage Quotas, or technical restrictions, (iv) use the App to develop a competing product, or (v) access the App in a manner that violates Shopify's Acceptable Use Policies.

5. Merchant Responsibilities

You are solely responsible for:

  • Configuration. Creating and verifying Upload Rules behave as intended; testing widget placement on your theme before going live.
  • Lawful collection. Ensuring that requesting Files from End‑Customers is lawful in the jurisdictions where you operate, that you have a valid legal basis to collect the categories of personal data the Files may contain, and that you provide End‑Customers with all required notices and choices (including, where applicable, valid consent before they upload personal data, images, or documents).
  • Children and sensitive data. Not configuring the App to collect Files from children under the applicable age of consent without verifiable parental consent, and not soliciting special categories of personal data (e.g., health, biometric, government identifiers) unless you have an explicit legal basis and have informed K1 in writing.
  • Consumer obligations. Compliance with all laws applicable to your Shop and End‑Customers (including consumer, e‑commerce, refund/return, and content laws).
  • Theme & integration. Maintaining backups of theme/custom code and ensuring compatibility with your theme and other apps; testing the storefront widget after theme updates.
  • Credentials. Safeguarding your Shopify admin credentials, tokens, and Magic Links you generate or share.
  • Storage management. Monitoring your Storage Quota; downloading and backing up Files you wish to retain beyond the retention period set out in the Privacy Policy §7.

You acknowledge that the App stores Files on infrastructure managed by us and that you are responsible for downloading them in time and for communicating relevant retention information to your End‑Customers.

6. Plans, Fees, Trials & Taxes

Fees for the App (including any free trial) are presented in the Shopify App Store listing and charged through the Shopify Billing API. By installing the App you authorize Shopify to bill you on our behalf. Fees are exclusive of taxes; you are responsible for all applicable taxes, duties, and withholdings.

Upgrades/Downgrades/Cancellation. You may change plan or uninstall the App at any time. Uninstalling stops future billing cycles. Unless expressly stated by Shopify Billing, fees are non‑refundable (including partial periods). If local law requires a refund, we will comply.

Storage and upload count gates. Each plan includes a Storage Quota. When your quota is reached, further uploads will be blocked until you free up space (delete Files) or upgrade your plan. We are not liable for uploads that fail because your quota was exhausted.

Fee changes. We may change fees by updating the pricing in the Shopify App Store. For existing subscribers, material price increases will be communicated via email or in‑app notice at least 30 days in advance.

7. Changes to the App

We may modify, add, or remove features, or provide Beta/Preview features.

Feature deprecation / "sunset". We will use commercially reasonable efforts not to remove a core paid feature during an active billing period. If deprecation is required (for example, due to Shopify platform or policy changes, security, or legal requirements), we will provide at least 30 days' notice where practicable and, where feasible, a reasonable alternative or proration. Beta/Preview features are provided "as is" and may change or end without notice.

8. Data Protection & Privacy

8.1 Roles

For merchant/admin data (your account, subscription, settings, Upload Rules, widget design, diagnostics) we act as an independent controller. For Shop customer data and the contents of Files uploaded by End‑Customers we process as your processor, only under your documented instructions (i.e., your configuration of the App). We do not repurpose customer data or File contents.

8.2 DPA & Privacy Policy

Our Privacy Policy (as updated from time to time) explains what we collect and why. A controller‑processor DPA with SCCs/UK Addendum is available at K1 Upload Files DPA and is incorporated by reference when we process customer data or File contents on your behalf. Our current sub‑processors are listed in the Privacy Policy appendix.

8.3 International Transfers

We use appropriate transfer mechanisms (e.g., EU 2021 SCCs Modules 2/3, UK Addendum/IDTA; where applicable EU‑US DPF/UK‑US extension for certified vendors). Details are in the Privacy Policy.

9. App Behavior & Implementation Details

The App provides the following functions and characteristics:

  • Storefront widget. Renders on product pages where one or more Upload Rules match. Buyers select files via the widget; uploads are performed with resumable upload protocol (TUS) directly to encrypted object storage (Cloudflare R2).
  • Server‑side validation. File size against the plan limit and Upload Rule, file type against the configured whitelist and verification of MIME via magic bytes, and Storage Quota check.
  • Antivirus scanning. Every uploaded File is queued for scanning by our self‑hosted ClamAV worker before becoming available for download. Files that fail the scan are quarantined and removed from R2; their download endpoints return an error.
  • Order linking. Once an order is placed, the App parses Shopify's line item properties and links each File to the corresponding order via Shopify webhooks.
  • Magic Links. You can generate single‑use or multi‑use, expiring Magic Links from the Admin to request a File from an End‑Customer against an existing order. Magic Link tokens are stored hashed and validated against expiry and use count; rate limiting applies to validation endpoints.
  • Bulk download. You can request a ZIP archive of all Files attached to a specific order. ZIPs are generated asynchronously and made available via a short‑lived presigned URL.
  • Retention. Files attached to an order are retained for 3 months from the order's creation date and then deleted automatically. Orphan uploads (not yet attached to an order) are deleted after 24 hours. Temporary ZIPs are deleted after 1 hour. See Privacy Policy §7 for the full schedule.

The App does not control your checkout, payment gateways, or fulfilment; you remain responsible for End‑Customer communications (including any messaging about expected retention of Files) and for compliance with local consumer and data protection law.

10. Third‑Party Services

The App integrates with third‑party services (e.g., Cloudflare R2 for storage, hosting provider, analytics, session insights, telemetry, support chat, email delivery, logging). Your use of those services may be subject to their terms. We do not control third‑party services and are not responsible for their acts or omissions. Current third‑party processors are listed in the Privacy Policy appendix.

11. Support

We provide reasonable technical support via in‑app chat or email (support@k1apps.com) during business hours (Monday–Friday). We may request temporary limited access or diagnostic information to troubleshoot. Support scope excludes custom development, theme customization, or issues caused by third‑party themes/apps or code changes.

12. Service Levels; Maintenance

The App is provided on a commercially reasonable‑efforts basis. We schedule routine maintenance windows and may perform emergency maintenance without notice. We do not guarantee uninterrupted or error‑free operation, but we aim to maintain high availability and prompt incident response.

Incident communication. We maintain service‑wide incident communications (e.g., status page and/or in‑app banner) and may notify you by email for material incidents. We target timely updates during incidents and a brief post‑incident summary where appropriate.

13. Intellectual Property

K1 and its licensors retain all rights, title, and interest in and to the App and Documentation, including all related intellectual property rights. No rights are granted except as expressly set forth in these Terms. You may not remove proprietary notices or branding. You grant K1 a limited, non‑exclusive, worldwide license to display your Shop name and logo in an in‑app account selector and operational screens solely to identify your Shop.

File contents. As between you and K1, you (or your End‑Customer, as applicable) retain all rights in the contents of Files uploaded through the App. Nothing in these Terms transfers ownership of those contents to K1.

14. Feedback

If you provide feedback or suggestions, you grant K1 a perpetual, irrevocable, worldwide, royalty‑free license to use, modify, and incorporate the feedback without restriction.

15. Confidentiality

Each party may disclose non‑public information to the other. The receiving party will protect such information with at least the same care it uses for its own confidential information (and not less than reasonable care), and use it only to perform under these Terms. Exclusions apply to information that is public, independently developed, or properly received from a third party.

16. Compliance; Export; Anti‑Corruption; Sanctions

You represent and warrant that you (and your beneficial owners) are not subject to sanctions and will comply with applicable anti‑corruption, anti‑money‑laundering, and export control laws. You shall not use the App in jurisdictions or for purposes prohibited by law.

Prohibited content. You agree not to use the App to collect, store, or transmit Files that: (a) infringe the intellectual property rights of third parties; (b) contain malware, viruses, or other harmful code; (c) depict child sexual abuse material; (d) violate applicable export control laws; or (e) are otherwise unlawful. We reserve the right to suspend the App and remove Files where we reasonably believe this clause has been violated.

17. Warranties & Disclaimers

THE APP, DOCUMENTATION, AND ANY BETA/EXPERIMENTAL FEATURES ARE PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON‑INFRINGEMENT. K1 DOES NOT WARRANT THAT THE APP WILL BE UNINTERRUPTED, ERROR‑FREE, OR MEET YOUR REQUIREMENTS, AND IN PARTICULAR DOES NOT WARRANT THAT ANTIVIRUS SCANNING WILL DETECT ALL MALICIOUS OR HARMFUL CONTENT. YOU REMAIN RESPONSIBLE FOR EXERCISING APPROPRIATE CAUTION WHEN OPENING FILES UPLOADED BY END‑CUSTOMERS.

18. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW: (A) K1 WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, GOODWILL, OR DATA (INCLUDING LOSS OF FILES OR FILE CONTENTS), EVEN IF ADVISED OF THE POSSIBILITY; AND (B) K1'S TOTAL LIABILITY ARISING OUT OF OR RELATING TO THE APP OR THESE TERMS WILL NOT EXCEED THE AMOUNTS PAID BY YOU FOR THE APP DURING THE THREE (3) MONTHS PRIOR TO THE EVENT GIVING RISE TO THE CLAIM. Nothing in these Terms excludes liability that cannot be excluded by law.

19. Indemnification

You will defend, indemnify, and hold harmless K1 and its officers, directors, and employees from and against any third‑party claims, damages, liabilities, costs, and expenses (including reasonable legal fees) arising out of or related to: (a) the Files you collect through the App, including any claim that a File infringes intellectual property rights, contains unlawful content, or was collected without a valid legal basis; (b) your Shop's products, content, or practices; (c) your use of the App in violation of these Terms, law, or a third party's rights; or (d) your misconfiguration of Upload Rules or failure to communicate upload conditions to End‑Customers.

20. Term; Suspension; Termination

These Terms start when you install the App and continue until terminated. You may terminate by uninstalling the App. We may suspend or terminate access immediately if you violate these Terms, create security risks, use the App unlawfully, or fail to pay fees. Upon termination, your license ends and we may delete or anonymize data (including Files) per our Privacy Policy and retention schedule. Sections intended to survive (including §§ 8, 13–19, 21–27) will survive termination.

21. Force Majeure

Neither party is liable for delays or failures due to causes beyond its reasonable control (including natural disasters, war, labor disputes, internet or utility failures, platform outages, laws, or government actions).

22. Governing Law; Venue; Language

These Terms are governed by the laws of the State of Wyoming, USA, excluding conflict‑of‑law rules. The state and federal courts located in Sheridan County, Wyoming shall have exclusive jurisdiction over any dispute arising out of or relating to these Terms, except where prohibited by applicable law. The English language version of these Terms controls.

23. Notices

We may provide notices via email to your Shopify account email, in‑app messages, or banners. Legal notices to K1 must be sent to support@k1apps.com and by mail to the address specified above. Notices are deemed given when received (or, for in‑app banners, when posted within the App).

24. Changes to these Terms

We may modify these Terms to reflect changes in law, platform requirements, or our services. If we make material changes, we will notify you via email or in‑app notice at least 14 days in advance. Continued use after the effective date constitutes acceptance.

25. Entire Agreement; Precedence; Assignment

These Terms (together with the Privacy Policy, App Store listing, and any order form in the Shopify Billing flow) constitute the entire agreement between you and K1 regarding the App and supersede prior agreements on the same subject. In case of conflict, an expressly agreed order form (if any) prevails over these Terms, which prevail over Documentation. You may not assign or transfer these Terms without our prior written consent; we may assign to an affiliate or in connection with a merger, acquisition, or sale of assets.

26. Publicity

Customer listing (opt‑out). We may identify you as a customer (name and logo) on our website and in App marketing materials unless you opt out by notifying us. This does not permit use of your trademarks beyond customary customer listings without your prior consent, and you may revoke permission at any time by notice.

27. Contact

For questions about these Terms, contact support@k1apps.com.

Exhibit A — Data Processing Addendum

When K1 processes customer personal data or File contents on your behalf, the DPA at K1 Upload Files DPA applies (including the 2021 EU SCCs and the UK Addendum/IDTA, as applicable). The DPA forms part of these Terms by reference.