Early-access terms — in effect now; a full legal review is in progress.

Terms of Use & Privacy Policy

Customer Accountability Network · Effective November 10, 2026 · Version 2026-11-10

Terms of Use

1. Agreement and scope

These Terms are a binding agreement between you and the operator of Customer Accountability Network (the “operator,” “we,” “us” or “our”) governing your account and use of this early-access service. By affirmatively accepting these Terms, you agree to them. If you accept for a business, you represent that you are authorized to bind that business, and “you” includes that business. Do not create an account or submit reports if you do not agree. You must be legally able to enter this agreement and comply with applicable law.

The Privacy Policy below explains our handling of personal information. Early access means the service may change or be interrupted; it does not suspend these Terms or your statutory rights.

2. Private record keeping; no consumer reporting

The service is a private record-keeping system for real business interactions, customer responses and operator review. It is not offered or operated as a consumer reporting agency. Records are not offered as consumer reports, are not published, and must not be used as consumer reports. This statement does not override any legal classification that applicable law may impose.

Records are private by default. Nothing is shared between businesses. A record is accessible only to authorized members of the reporting business, the customer concerned through a confirmed-email match (excluding drafts and suppressed records), and authorized reviewers/admins. There are no public customer profiles or public record searches. Reporting does not establish that an allegation is true or that a customer has committed wrongdoing.

3. Accounts and business responsibility

Provide accurate account and business details, safeguard your sign-in credentials, and limit team access to people authorized to work with these records. The business is responsible for its team’s use of the service and for having a lawful basis and any required permissions to provide customer information and evidence. Business registration is subject to operator review; verification is not an endorsement of any report. Notify us of suspected unauthorized access.

By submitting each report, the business certifies and warrants that the report is truthful, factual, based on a real business interaction, and supported by evidence where possible. Reports must be evidence-based; do not fabricate allegations or evidence or present opinion or speculation as established fact. Preserve relevant evidence and cooperate with review. The business is solely responsible for the content, accuracy, lawfulness and consequences of its reports, supporting files and replies.

You retain any rights you have in your submissions. You grant us a nonexclusive permission to store, process and display them only as needed to operate this private service, conduct review, meet legal obligations and maintain its integrity. This permission does not authorize cross-business sharing or public publication.

4. Prohibited uses

You must not use records, alone or combined with other information, to make or support eligibility decisions covered by the Fair Credit Reporting Act, including credit, employment, tenancy/housing or insurance decisions. Do not obtain records for those purposes, resell them, furnish them as consumer reports, or use this service to evade consumer-reporting obligations.

Also prohibited: scraping, bulk extraction or unauthorized automated collection; bypassing access controls; sharing records with other businesses; publishing customer records; harassment, intimidation, threats or doxxing; retaliation; reports arising from personal disputes rather than real business interactions; and reports based on protected characteristics, including race, color, religion, national origin, sex, disability, age or any other status protected by applicable law. Do not submit discriminatory, knowingly false, misleading, unlawfully obtained or unlawful content, malicious files, or information unrelated to the interaction. Do not misuse another person’s identity or access another customer’s records.

5. Free customer access and review

Customers can access records about them using an account whose confirmed email matches the email on the record; name or phone alone does not provide access. Customers can respond, dispute a record, request correction or removal, upload supporting evidence, make privacy requests and download their available data. Customers never pay for these rights. If email matching prevents access, contact us for assistance; we may request information needed to verify the request without disclosing another person’s data.

A dispute, correction request or removal request flags an eligible record as disputed while review is pending; a response alone does not change the record’s status. The reporting business can reply but cannot resolve the dispute. Review is performed separately by the operator’s authorized reviewers/admins, not decided by the reporting business. They consider the customer’s submission, the business’s reply and available evidence, and can record an outcome marking the record corrected, suppressed or retained with a resolution note. Marking a record corrected documents the outcome and does not automatically rewrite the original report text. This is operator-administered review, not external arbitration or a guaranteed independent third-party investigation. No particular outcome or review deadline is guaranteed.

The operator may remove a record from customer view through suppression, restrict use, or suspend a business at its discretion, including for suspected abuse, prohibited reports, legal risk or failure to cooperate. Suppression is not deletion: authorized business members and admins can still access the retained record. The current customer interface does not show drafts or suppressed records. Contact us with continuing access, correction or deletion requests.

6. Indemnification by businesses

To the extent permitted by law, each business will defend, indemnify and hold harmless the operator and its personnel from third-party claims, liabilities, judgments, damages, penalties and reasonable legal costs arising from that business’s reports, evidence, replies, unlawful handling of personal information, breach of these Terms, or misuse of the service by the business or its team. This obligation does not apply to losses caused by the operator’s own unlawful conduct to the extent indemnification is prohibited by law.

We will give reasonably prompt notice of a claim and reasonable cooperation at the business’s expense. The business may control the defense using qualified counsel reasonably acceptable to us, but may not agree to a settlement imposing obligations on us or admitting fault on our behalf without our written consent. We may participate with our own counsel at our expense. This business obligation does not apply to customers exercising their rights in good faith.

7. No warranties

To the fullest extent permitted by law, the early-access service is provided “as is” and “as available,” without express or implied warranties, including merchantability, fitness for a particular purpose, noninfringement, accuracy or uninterrupted availability. We do not warrant the truth or completeness of reports, that verification confirms a report’s accuracy, that review will discover all errors, or that the service will be error-free or completely secure. Nothing excludes warranties or rights that cannot legally be excluded.

8. Limitation of liability

To the fullest extent permitted by law, the operator is not liable for indirect, incidental, special, consequential, exemplary or punitive damages, or loss of profits, opportunities, goodwill or data arising from the service or these Terms, even if advised of their possibility. The operator’s total liability for all claims arising from the service or these Terms is limited to the greater of US $100 or the amount you paid the operator for the service during the twelve months before the event giving rise to the claim.

These limits do not apply to liability that cannot be limited by law, including applicable liability for fraud, willful misconduct or gross negligence. They do not require customers to pay to exercise their rights or waive nonwaivable privacy or consumer-protection rights.

9. Suspension and termination

You may stop using the service and request account closure by contacting us. We may suspend access or terminate use for breach, misuse, security or legal reasons, or discontinuation of early access. Business suspension currently disables new reports; it does not automatically erase existing records. Account closure and deletion requests require operator handling, not an automatic in-app closure or purge. Retention, disputes and legal holds are handled as described below.

Clauses that by their nature must continue survive termination, including responsibility for prior submissions, indemnification, liability limits, governing law and legally necessary retention. Ending business access does not make customer rights chargeable.

10. Washington law and general provisions

Washington State law governs these Terms, without its conflict-of-law rules, subject to mandatory laws and rights applicable to you. Unless applicable law requires otherwise, disputes about these Terms may be brought in courts of competent jurisdiction in Washington State. These Terms do not impose mandatory arbitration or waive any nonwaivable right to bring a claim.

If a provision is unenforceable, the remaining provisions remain effective to the extent lawful. Failure to enforce a provision is not a waiver. These Terms are the agreement governing use of this early-access service and do not override statutory rights.

11. Updates and contact

We may update these Terms with notice by posting the revised version and effective date on this page; material changes will also be announced prominently in the service before they take effect, except when an immediate change is required for law or security. We may request renewed affirmative acceptance. If you disagree, stop using the service and contact us about closure. An update will not retroactively authorize prohibited use or cross-business sharing.

For questions, notices, account closure or rights requests, email privacy@customeraccountability.network.

Privacy Policy

1. Scope and information collected

The operator of Customer Accountability Network handles the personal information described here to run the private early-access service. Businesses supply incident information; customers supply account details, responses, evidence and requests. We collect account name and email and authentication information; business legal/trading name, category, address, contact details and website; team membership and permissions; and business locations.

Records contain customer name, email and phone when supplied; incident type, date/time, location, factual description, amount involved when supplied, status and reviewer notes; evidence files and file names; customer responses, disputes, correction/removal requests and business replies; privacy requests and outcomes; in-app notifications; and audit logs of actions and status changes. We also record Terms acceptance, including user ID, version, context and timestamp. Our service providers may process technical connection and security information needed to provide hosting, authentication and protect the service.

Provide only information relevant and lawful to include. Do not submit protected-characteristic reports or unnecessary sensitive information. We do not perform independent identity checks; customer access currently uses a confirmed-email match.

2. Why we use information

We use information to create and authenticate accounts, register and review businesses, manage teams and locations, store private records and evidence, provide customer access, run responses/disputes and privacy requests, deliver in-app notifications to the customer concerned and relevant business members, maintain the audit trail, and prevent abuse and unauthorized access. We may also use it to comply with lawful obligations, preserve evidence for legal claims and enforce these Terms.

Record notifications are currently in-app only, not incident email alerts. On submission or supported status changes, the system notifies an existing customer account with a matching confirmed email. It does not guarantee notice to people without such an account, nor a retrospective alert when someone later signs up. Authentication confirmation and password-reset emails are separate from incident notifications.

3. Who can see information

We do not sell personal data, publish customer profiles or publish records. Nothing is shared between businesses. Access to records and their evidence is restricted to authorized members of the reporting business, the customer concerned through a confirmed-email match, and authorized reviewers/admins. Customers cannot see drafts or suppressed records; suppression does not remove access for the reporting business or admins. Team and location information remains within its business and authorized administration. Privacy requests and Terms acceptance records are accessible to their owner and authorized admins; audit logs are accessible to authorized admins.

Service providers process information on our behalf as necessary to operate the service. We may disclose information when required by law or valid legal process, or where legally necessary to address security, abuse or legal claims. This does not enable a business-to-business record-sharing service. Limit downloads and disclosures to lawful handling by authorized persons.

4. Service providers and subprocessors

Lovable Cloud supplies database, storage and authentication services using Supabase infrastructure. Lovable provides hosting and build services. Stripe will process billing information when billing is enabled; billing is not currently enabled, and Stripe does not currently receive billing data through this service. Customers will never be charged for access, responses, disputes, correction/removal requests or data downloads.

These providers process information necessary for their services under their applicable arrangements. We do not claim a particular data residency or international-transfer mechanism that has not been verified. Contact us with questions about provider processing.

5. Retention, suppression and deletion

Our retention purpose is to keep records and evidence while the reporting business account is active, or when needed for ongoing disputes, privacy requests, legal obligations or legal holds, and then arrange deletion or suppression when no longer needed. The current service has no automated account-closure deletion, retention schedule or evidence purge. Inactive or suspended accounts do not automatically trigger removal. Retention and deletion requests require operator review and handling; we do not promise automatic deletion or a fixed deletion deadline.

Suppression hides a record from customer access but leaves it stored and accessible to the reporting business and admins. Deletion of a record and deletion of a stored evidence file are different actions; suppression is not evidence deletion. Contact us to request review of continued retention or actual deletion. Applicable legal holds may delay deletion, and provider backups may remain subject to provider retention practices.

Audit logs are retained permanently for integrity and are append-only: existing entries cannot be edited or deleted through the system. They include action metadata, user/entity identifiers and, for some reviewed changes, notes. Terms acceptance records are also preserved as immutable evidence of agreement. Do not place unnecessary personal information in reviewer notes. Where a legal right conflicts with retention, contact us for assessment; we do not represent that the current interface can erase immutable log entries.

6. Security

Database row-level access rules isolate business records and restrict customer access using confirmed email matching. Evidence files are stored privately and opened only through authorized access. The hosted service uses HTTPS for information in transit. The audit log is append-only and rejects changes or deletion of entries. These controls reduce risk but cannot guarantee complete security; safeguard your account and report suspected exposure promptly.

7. Your rights and free access

Customers can access available records about them, respond, dispute, upload evidence, request correction/removal, submit access/correction/deletion privacy requests and download their available data, always free. The current download includes the account profile, accessible records about the customer, their disputes and privacy requests; it is not a bulk download of evidence files, drafts, suppressed records or the audit log. Contact us for information not included in the download or if email matching prevents access.

Email privacy@customeraccountability.network to exercise applicable privacy rights, request account closure, question retention or challenge a review outcome. We may verify identity and authority before disclosing or changing information. A removal request is reviewed and does not guarantee immediate erasure: an outcome may suppress, correct or retain a record. Nothing here limits rights, response deadlines or complaint options provided by applicable law. Customers never pay to exercise these rights.

8. Changes and contact

We will post policy updates here with an effective date and provide a prominent in-service notice for material changes. Changes do not authorize sale of personal data, public customer profiles or sharing records between businesses. For privacy questions or requests, contact privacy@customeraccountability.network.