Papaya
Papaya
Legal

Terms of Service

Terms of Service for Papaya Consent Checker

Last Updated: 15th July 2026

These Terms of Service ("Terms") govern your access to and use of the Papaya Consent Checker platform, including our hosted web application (including the got cipa? assessment workspace), command-line interface (CLI), HTTP API, Model Context Protocol (MCP) server, and related services (collectively, the "Service"). Please read these Terms carefully before using the Service.

By accessing or using the Service, you agree to be bound by these Terms. If you do not agree to these Terms, you may not access or use the Service.

1. Description of Service

Papaya Consent Checker provides automated tools for analyzing website tracking, consent interfaces, and related privacy behaviors. Depending on the feature you use, the Service may include:

  • Consent Analysis: testing website behavior before and after cookie or privacy-choice interactions, including accept-all, reject-all, granular/custom flows, and preference-modal handling.
  • GPC Analysis: testing website responses to Global Privacy Control signals.
  • Regional Simulation: running analyses from selected US states or international regions to approximate location-based experiences.
  • Post-Consent Journeys: optional follow-on navigation or workflow steps after a consent interaction.
  • Reporting and Exports: markdown, JSON, PDF, and related evidence outputs describing detected trackers, cookies, requests, and screenshots.
  • AI Insights: automated compliance summaries, report chat, and workflow-building assistance.
  • got cipa? / CIPA-Oriented Analysis: a separate assessment mode focused on California CIPA-style exposure themes such as pixels, session replay, chat interception, and related evidence. This mode is provided for informational analysis only.
  • Composer: an AI-assisted workflow builder for designing and running multi-step privacy test plans.
  • Scheduled Tests: recurring automated runs on a schedule you configure.
  • Live View: real-time visibility into active browser sessions when available.
  • Share Links: optional read-only public links for specific completed reports.
  • Programmatic Access: API and MCP interfaces for authenticated, subscribed accounts.

The Service is intended to help teams observe and document website behavior. It is not a substitute for legal review, manual QA, or a comprehensive compliance program.

2. Accounts and Access

  • Account Required: You must sign in to start privacy tests in the hosted web application. Anonymous test runs are not supported.
  • Accurate Information: You agree to provide accurate account information and keep your credentials secure.
  • Subscription and Free Tests: We may offer a limited number of free tests per account in the web application. Additional or sustained use may require an active paid subscription.
  • API and MCP Access: Programmatic access through the HTTP API or MCP server requires an active subscription tied to your account. API keys are personal to your account and must be kept confidential.
  • Account Controls: You are responsible for activity conducted through your account, including actions taken with your API keys, share links, scheduled tests, and Composer workflows.

3. Your Responsibilities

You are solely responsible for your use of the Service. You agree not to use the Service for any unlawful or unauthorized purpose, including but not limited to:

  • scanning websites without authorization where such authorization is required by law, contract, or the target website's terms;
  • using the Service to launch denial-of-service attacks or otherwise disrupt third-party websites or infrastructure;
  • reverse engineering or attempting to extract the source code of the hosted Service (except where permitted by law or an applicable open-source license for locally run components);
  • misrepresenting your affiliation with Papaya Privacy Co;
  • sharing API keys, account credentials, or live-session access in a way that allows unauthorized use;
  • creating public share links for sensitive, confidential, or client materials without appropriate authorization and safeguards; or
  • presenting reports, findings, screenshots, summaries, or other outputs generated by the Service to a client, customer, regulator, or other third party as if they were produced solely by you or your organization, without disclosing that Papaya was used.

You are responsible for ensuring that your use of scheduled tests, page discovery, post-consent journeys, and programmatic runs complies with applicable law and any obligations you owe to website owners.

4. Attribution and Client Use

If you use the Service to generate analysis, reports, findings, screenshots, summaries, or other materials for a client, customer, regulator, or other third party, you must clearly and accurately disclose that Papaya was used to produce or support those materials. You may not remove Papaya branding, obscure Papaya's role, or otherwise present Service outputs as your own independent work product without attribution, unless Papaya Privacy Co has agreed to different attribution terms in writing.

5. Share Links

If you create a share link, anyone with that link may be able to view the shared report materials until the link is removed or the underlying data is deleted. You are solely responsible for deciding whether a share link is appropriate and for distributing it only to intended recipients. Papaya Privacy Co is not responsible for access obtained by anyone you provide the link to, or by anyone who obtains the link from them.

6. API, MCP, and Programmatic Use

  • API and MCP features are provided for integration with your own systems and workflows.
  • You must protect API keys and revoke keys that are compromised.
  • We may monitor API and MCP usage for security, reliability, and account reporting.
  • We may modify, rate-limit, suspend, or discontinue programmatic interfaces at any time.
  • Programmatic use remains subject to the same authorization, attribution, and no-legal-advice limitations as the rest of the Service.

7. Disclaimer of Warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND.

  • No Legal Advice: Reports, summaries, workflow suggestions, and AI-generated insights are for informational purposes only. They do not constitute legal advice, regulatory advice, or a determination of compliance or non-compliance. This includes outputs from default compliance analysis and from got cipa? / CIPA-oriented analysis. You should consult qualified counsel regarding your obligations.
  • No Litigation Guarantee: got cipa? and related CIPA-oriented outputs are not predictions of litigation outcomes, liability, damages, or evidentiary sufficiency in any proceeding.
  • Accuracy: We do not guarantee the accuracy, completeness, or reliability of analysis results. Detection relies on automated browser interaction, third-party blocklists (such as DuckDuckGo Tracker Radar), heuristics, and AI models, which may produce false positives or false negatives.
  • Website Changes: Websites frequently change their code, banners, and tracking technologies. A result generated at one point in time may not reflect the website's state at another time.
  • Third-Party Sites: The Service interacts with third-party websites at your direction. We do not control and are not responsible for those websites.

8. Limitation of Liability

TO THE FULLEST EXTENT PERMITTED BY LAW, PAPAYA PRIVACY CO SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUES, WHETHER INCURRED DIRECTLY OR INDIRECTLY, OR ANY LOSS OF DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES, RESULTING FROM:

(A) YOUR ACCESS TO OR USE OF OR INABILITY TO ACCESS OR USE THE SERVICE;

(B) ANY CONDUCT OR CONTENT OF ANY THIRD PARTY ON THE SERVICE OR ON A WEBSITE YOU CHOOSE TO ANALYZE;

(C) ANY CONTENT OBTAINED FROM THE SERVICE; OR

(D) UNAUTHORIZED ACCESS, USE, OR ALTERATION OF YOUR TRANSMISSIONS OR CONTENT.

9. Fees and Payment

  • Free Tier: We may offer a limited number of free tests per account in the hosted web application. The current allowance may change over time.
  • Subscriptions: Paid subscriptions are billed in advance on a recurring basis (for example, monthly). You authorize us to charge your payment method for applicable subscription fees through Stripe. Our self-serve Starter plan is currently offered at $99.99/month. Other plans (such as custom or enterprise subscriptions) may have different pricing, billing intervals, or usage-based terms described at purchase or in a separate agreement.
  • Usage Metering: The Service records usage metrics such as browser minutes and AI usage. On the Starter plan, these metrics are provided for monitoring and account visibility only and do not create additional charges beyond your flat subscription fee. If you subscribe to a different plan or enter into a custom agreement with us, usage metering may be used to calculate usage-based fees, quotas, or overages as described in your pricing page, checkout flow, order form, or written agreement.
  • Cancellation: You may cancel your subscription through the account and billing flows made available in the Service. Cancellation generally takes effect at the end of the current billing period.
  • Refunds: Refunds are generally not provided for partial subscription periods, except as required by law.

10. Intellectual Property

The Service and its original content, features, branding, and functionality (excluding your input URLs, prompts, and the factual outputs generated for your runs) are and will remain the exclusive property of Papaya Privacy Co and its licensors, except for components subject to separate open-source licenses when run locally. The Service is protected by copyright, trademark, and other laws.

11. Third-Party Links and Resources

The Service may contain links to third-party websites or services that are not owned or controlled by Papaya Privacy Co. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services.

12. Governing Law

These Terms shall be governed by and construed in accordance with the laws of Delaware, without regard to its conflict of law provisions.

13. Changes to Terms

We reserve the right, at our sole discretion, to modify or replace these Terms at any time. If a revision is material, we will try to provide at least 30 days' notice before the new terms take effect, where practicable. What constitutes a material change will be determined at our sole discretion. Continued use of the Service after updated Terms become effective constitutes acceptance of the revised Terms.

14. Contact Us

If you have any questions about these Terms, please contact us at:

ram@papayacomply.ai