Terms of Service

By accessing or using Customaise (the "Service"), including the Chrome extension, website, and API, you agree to be bound by these Terms of Service. If you do not agree, do not use the Service.

These terms constitute a legally binding agreement between you and CNDLE Studio LTD, a company registered in England & Wales (company number 11811884), trading as Customaise. The Service is operated from the United Kingdom.

Customaise is an AI-powered Chrome extension that helps you create, manage, and run UserScripts to customise websites. The Service includes:

• A Chrome extension for managing and executing UserScripts
• An AI assistant (powered by Google Gemini) that helps generate and edit scripts
• A web portal for account management, billing, and administration
• Cloud-based features including usage tracking, script sync, and data management

• You must be at least 13 years old to use the Service
• You must sign in with a valid Google account
• You are responsible for maintaining the security of your account credentials
• You must not share your account or allow others to access the Service through your account
• One account per person. Duplicate or automated account creation is prohibited

You agree not to:

• Create or distribute malware, keyloggers, or scripts designed to harm users or systems
• Use the Service to violate any applicable law or regulation
• Scrape, crawl, or collect data from third-party websites in violation of their terms
• Attempt to circumvent rate limits, token quotas, or access controls
• Reverse-engineer, decompile, or disassemble the Service
• Use the AI assistant to generate content that is illegal, harmful, or violates third-party rights
• Impersonate others or misrepresent your identity

Cloud Script Publishing and the Customaise Marketplace

• Publishers are solely responsible for the functionality, safety, and visibility settings of scripts they publish, whether via direct share link (Cloud Script Publishing) or by submitting them to the Customaise Marketplace for editorial review
• Direct share-link publishing is uncurated. Publishers control whether their published scripts are Public or Private; Customaise is not liable for unintended access resulting from a publisher sharing a private link
• The Customaise Marketplace is a curated catalogue: every listing is reviewed by Customaise before publication, and listed scripts carry a "Reviewed by Customaise" panel summarising scope and side effects. The review surfaces what the script does at the time of review; it does not transfer publisher liability for the underlying behaviour to Customaise, nor is it a warranty against third-party site changes that affect behaviour after publication
• Subscribers to any published script receive that script DISABLED in their library by default. Pull-update and rollback re-disable the script. The decision to enable, and to keep enabled, rests with the subscriber
• Customaise reserves the right to unpublish or remove scripts (from direct share or the Marketplace) that are malicious, abusive, or violate these terms, without prior notice

We reserve the right to suspend or terminate accounts that violate these terms without prior notice.

Your Content

• You retain ownership of all UserScripts you create or import
• You grant Customaise a limited licence to store and process your content solely to provide the Service
• When you delete your data, we remove it from all our systems as described in our Privacy Policy

Our Platform

• The Customaise platform, branding, code, and design are owned by Customaise and protected by copyright and intellectual property laws
• You may not copy, modify, or distribute the platform without our written consent
• Open-source components are licensed under their respective licences

• AI-generated scripts and suggestions are provided "as is" without warranty of accuracy, security, or fitness for purpose
• You are solely responsible for reviewing, testing, and validating any AI-generated code before use
• Customaise does not guarantee that AI output will be free of errors, vulnerabilities, or unintended behaviour
• AI responses may vary and should not be relied upon as professional advice

The AI assistant uses Google Gemini. Your use of AI features is also subject to Google's Generative AI Terms of Service.

BYOK is available exclusively to Power User subscribers. It allows you to connect your own Google Gemini API key for direct billing with Google, bypassing Customaise's token system.

• Your API key is encrypted using Google Cloud KMS before storage and never stored in plaintext
• You are solely responsible for your API key, its associated costs, and compliance with Google's API terms
• Customaise is not liable for charges incurred through your API key, including unexpected usage
• For your security, API keys are aggressively rotated and are automatically, permanently deleted from our servers every 7 days. You must re-add your key after this period to continue using BYOK
• You can also manually delete your key at any time. It is permanently and immediately removed from our systems

Cross-device sync is a Power User feature that encrypts your scripts, conversations, and version history and stores them securely in the cloud, allowing you to access them on any Chrome browser where you are signed in.

Encryption & Data Handling

• All synced data is encrypted end-to-end with AES-256-GCM before leaving your device. We never store or access your data in plaintext
• Encryption keys are derived from your account credentials using PBKDF2 (100,000 iterations) and are never transmitted to our servers
• Content integrity is verified using HMAC-SHA256 keyed to your account, preventing cross-account data correlation

Data Retention & Deletion

• Synced data is stored in Google Firestore and protected by Google Cloud security infrastructure
• You may delete all synced data at any time via the Account Portal → Cross-Device Sync → Delete All Synced Data
• If you downgrade from Power User, your synced data is retained for 90 days. After this period it is permanently and irreversibly deleted
• Soft-deleted items (e.g. scripts you remove) are purged from the cloud after 30 days
• A pre-sync backup of your local data is created automatically when sync is first enabled, retained for 7 days

Availability & Limitations

• Sync operates on a best-effort basis. Temporary network issues or server downtime may cause delays
• Customaise is not liable for data loss arising from sync conflicts, encryption key loss, or service disruption
• Cloud storage is limited to 100 MB per account. You are responsible for managing your usage
• Sync is available only in Chrome desktop browsers

Customaise supports WebMCP AgentScripts: UserScripts that expose tools on a web page via the browser's navigator.modelContext API. These tools can be called by AI agents running inside your IDE (for example Cursor, Claude Code, Windsurf) through the Customaise MCP Server, or by in-browser AI, and they execute inside the tab they were registered on using whatever session credentials that tab already has.

You Are the Acting Party

• WebMCP tool calls run inside your authenticated browser session on whichever site the AgentScript matches. To the target site, every action looks like it was taken by you
• You are solely responsible for every action performed through a WebMCP tool call you or an AI agent on your behalf initiates, including any side effects on third-party services, any charges incurred, and any obligations the action creates
• You are responsible for vetting the AgentScripts you install. Customaise does not audit third-party scripts beyond the sanitisation pipeline that applies to all UserScripts
• The Customaise MCP Server does not receive your cookies, session tokens, or API keys. It only initiates tool calls that the extension routes into your browser

Consent Gate (HITL)

• Every WebMCP tool declared with the "prompt" permission triggers an in-browser consent modal before the tool body runs. You must explicitly approve or deny within 5 minutes or the call is treated as denied
• Approving a "prompt" tool call through any approval surface is your authorisation for that specific call. "Always allow" and "Always deny" extend that authorisation to all future calls of the same tool on the same script until you change the override in Settings
• You can change or reset per-tool overrides at any time from the Customaise extension Settings

Remote HITL Approvals (Power User Opt-In)

• If you enable Remote HITL Approvals on the Account page, approval requests are mirrored to your account so you can approve or deny them from any browser you are signed in to, including your phone browser
• Approvals authorised from any of those devices are binding on your account with the same legal effect as approving from the extension directly. We record a device label (for example "iPhone", "Mac") with each decision for your reference
• You acknowledge that Remote HITL Approvals require FCM push notifications (or a polling fallback if you deny the browser notification permission) and that tool-call arguments are transmitted over HTTPS and stored KMS-encrypted at rest, as described in our Privacy Policy
• You can turn Remote HITL Approvals off at any time; approvals will then only happen in the Customaise extension on your desktop

Limits of Our Responsibility

• We provide the consent gate and approval mirror as a best-effort safety harness. We do not guarantee delivery latency of push notifications or the uninterrupted availability of the remote approval surface
• We are not liable for decisions you or an authorised user of your account make through the consent modal or the Remote Approvals surface
• We are not liable for the behaviour or output of AgentScripts, including those published via Cloud Script Publishing, beyond the terms in section 4 (Acceptable Use)

Chrome DevTools Access (CM_devtools Grant)

• A UserScript or AgentScript that declares @grant CM_devtools requests access to the Chrome DevTools Protocol on its matched pages. Installing such a script does not by itself grant access; you must additionally enable Chrome DevTools Access in Customaise Settings → Scripts. The toggle is off by default and resets every Chrome restart, so the capability is granted per session
• When a session is active, Chrome displays its standard yellow debugger banner on the affected tab. The banner cannot be hidden by the script or the extension. Clicking Cancel on the banner ends the session and locks the tab against re-attaching for approximately five minutes
• You acknowledge that scripts holding a CM_devtools session can read network bodies (including cross-origin iframes), simulate genuinely-trusted user input, modify in-flight requests, set breakpoints, and capture full-page screenshots on their matched pages. You are responsible for reviewing the @devtools-justification on any script you install with this grant
• Every CM_devtools session is recorded to a local audit log in your browser. The audit log is not transmitted to Customaise

Tiers & Token Allowance

• All users, both Free and Power User, receive a monthly token allowance that resets automatically
• Token Packs are one-time purchases that add tokens to your balance. They work identically for both tiers and are consumed after the monthly allowance is exhausted
• Power User is a recurring monthly or yearly subscription (priced in USD, GBP, and EUR; see the pricing page for current rates) that unlocks 5M monthly in-browser AI tokens, unlimited MCP Server calls to your IDE (Free includes 50 tool calls per UTC day and 150 per rolling 7-day window; uses your IDE's AI subscription), Bring Your Own Key (BYOK) for unlimited in-browser AI, Cloud Script Publishing, cross-device sync, Gemini Pro for in-browser chat, and other premium features
• All users have access to Gemini Flash-Lite and Flash models. Gemini Pro is available exclusively to Power Users

Payment Processing

• All payments are processed securely by Stripe, Inc. Your payment card details are handled directly by Stripe and are never stored on our servers
• Charges will appear on your bank statement as CUSTOMAISE or CNDLE STUDIO
• By completing a purchase you agree to Stripe's Terms of Service and acknowledge their Privacy Policy
• Prices are shown in USD ($), GBP (£), or EUR (€) per your selection at checkout. VAT is included where applicable

Refund Policy

• Token Packs: full refund within 14 days of purchase, provided no tokens from the pack have been used. Once any tokens are consumed, the right to a refund for that pack is waived
• Power User subscription: by subscribing you expressly ask Customaise to start your Power User access immediately, before the end of the 14-day cancellation period. You acknowledge that, as a result, your statutory right to cancel this subscription for a refund is lost once access begins, and that the current billing period (the month or year you just paid for) is non-refundable
• You can cancel auto-renewal at any time via the Stripe Customer Portal. Your Power User features will remain active until the end of the current billing period, and you will not be charged again
• Switching between monthly and yearly mid-cycle is handled automatically by Stripe, which prorates the unused portion of your existing plan against the new one. No cash refund is issued
• In exceptional circumstances (billing error, service outage, duplicated charge) we will consider a goodwill refund case-by-case at our discretion
• To request a refund, contact support@customaise.com with your account email and order details

Tokens cannot be transferred between accounts. If you experience a billing issue, contact support@customaise.com.

Disputes & Chargebacks

• We encourage you to contact us before opening a dispute with your bank or card provider
• If a chargeback or payment dispute is opened, access to the associated purchase (tokens or Power User features) will be immediately suspended pending resolution
• If the dispute is resolved in our favour, access will be restored. If resolved in your favour, the purchase is treated as refunded
• Repeated or fraudulent chargebacks may result in account suspension or termination

To the maximum extent permitted by law, Customaise shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, or business opportunities, arising from your use of the Service.

• The Service is provided "as is" and "as available" without warranties of any kind
• We do not warrant that the Service will be uninterrupted, error-free, or secure
• Our total liability for any claim shall not exceed the amount you paid us in the 12 months preceding the claim
• Nothing in these terms excludes liability for death, personal injury, or fraud

• You may stop using the Service and delete your account data at any time via Settings
• We may suspend or terminate your access if you violate these terms
• On termination, your right to use the Service ends immediately
• Your data deletion rights under GDPR are preserved regardless of termination
• Sections on intellectual property, limitation of liability, and governing law survive termination

These terms are governed by the laws of England & Wales. Any disputes shall be subject to the exclusive jurisdiction of the courts of England & Wales.

If you are a consumer in the EU, you retain any mandatory consumer protection rights granted by the law of your country of residence.

We may update these terms from time to time. Material changes will be communicated at least 30 days in advance via the extension or this page. Your continued use of the Service after changes take effect constitutes acceptance of the updated terms.