Terms of service

Kestero lets you design a widget and embed it on your own website. These terms are the agreement between you and us. By creating an account you accept them.

You need an account to save a widget. Keep your credentials to yourself, tell us if you think somebody else has them, and do not share one account across people who should not see each other’s data.

You can close your account at any time from the dashboard. That deletes your projects, widgets, submissions and analytics, and it is not reversible.

• Collect passwords, payment card details, or any other credential through a widget. The form fields do not offer it and you must not work around that.
• Impersonate somebody else, or build a widget designed to make a visitor think they are dealing with a company they are not.
• Embed a widget on a site you do not control or have permission to place it on.
• Use a widget to cover, obscure or interfere with the page it sits on beyond the surface you chose.
• Attempt to reach other customers' data, or to use the API in ways it plainly is not for.

A widget can contain a code block: HTML, CSS and JavaScript that you write. It runs in a sandboxed frame on a separate origin, which is what stops it reaching the page it sits on, that page’s cookies, or anything of ours.

The division is this. We are responsible for the sandbox — that it isolates what runs inside it, and that it keeps doing so. You are responsible for the code itself: what it does, whether it works, whether it is accessible, and whether it is lawful where your visitors are. If code you wrote causes a problem on a site your widget is embedded on, that is yours to answer for.

We do not review code before it runs, and we are explicit about that rather than implying a check nobody performs. We can switch off a widget that is causing harm, and we will if we are told about one.

Form submissions belong to you. We store them so you can read them and we do not use them for anything else.

Under the GDPR you are the data controller for what your widgets collect and we are your processor. That means the obligations to your visitors are yours: telling them what you collect, having a lawful basis for it, and answering their requests. We will help you answer, and our privacy page lists every processor involved so you can put them in your own records.

We try to keep the service up and we do not promise a particular level of uptime. If we plan something disruptive we will say so beforehand where we can.

The widget script is designed to fail quietly: if our API cannot be reached, the widget renders nothing rather than showing an error on your site.

There is a free tier, and a paid tier billed monthly through Stripe. You can cancel whenever you like and keep access until the period you have paid for ends. We do not refund part-months by default, but write to us if something has gone wrong — we would rather sort it out than argue about it.

If we change what a plan costs, we will tell you before it applies to you.

You can stop at any time. We may suspend or close an account that breaks the rules above, and where it is not urgent we will tell you why first and give you a chance to put it right.

The service is provided as it is. To the extent the law allows, we are not liable for indirect or consequential loss, and our total liability is limited to what you paid us in the twelve months before whatever went wrong.

Nothing here limits liability that cannot lawfully be limited — including for death or personal injury caused by negligence, or for fraud.

These terms are governed by Danish law, and the courts of Denmark have jurisdiction. If you are a consumer, this does not take away rights you have under the law of the country you live in.

This page is written to be read and understood rather than to be exhaustive. It is not legal advice, and it has not yet been reviewed by a solicitor. If you need something formal — a signed DPA, a security questionnaire, particular contractual terms — ask and we will sort it out properly.