TRAi WP Terms of Use

Version 1.0 · Effective September 27, 2026

1. About these terms

These terms are an agreement between TheRiot Agency, LLC, a Florida limited liability company ("TRA", "we"), and the business that installs the TRAi WP plugin on a website ("Client", "you"). They govern the plugin and the services TRA provides through it.

You accept these terms when a person with authority to bind your business selects "I agree" while pairing the plugin with TRA, or when an administrator of your website accepts them in the plugin's settings. By accepting, that person confirms they have that authority. TRA keeps a record of who accepted, when, and which version.

If you have a signed Master Services Agreement with TRA, it governs the services TRA performs for you, and these terms govern the plugin. If you have a signed Data Processing Addendum with TRA, it governs how TRA processes personal data and takes priority over these terms on that subject.

2. Definitions

"Plugin" means the TRAi WP WordPress plugin and its updates.

"Website" means a website on which the Plugin is installed and paired with TRA.

"Scopes" means the permissions you grant TRA when you pair the Plugin, such as health, backup, content, forms, snippets, and commerce.

"Consent Tools" means the Plugin's consent banner, consent gating, and consent log.

"TRAi Signal" means TRA's behavioral analytics tool, which records visitor interactions with a Website and can replay them.

"Visitor" means a person who uses a Website.

"Restricted Data" means payment card data, health or medical information, biometric or genetic data, other special categories of personal data, and personal data of children under 16.

3. Your licence to use the Plugin

TRA grants you a non-exclusive, non-transferable, revocable licence to install and use the Plugin on Websites that you own or control, for as long as these terms apply.

TRA owns the Plugin and all rights in it. You will not sell, sublicense, or distribute the Plugin, remove its notices, or use it to build a competing product.

The Plugin updates itself from TRA. You agree to those updates, because they carry security and compliance fixes.

4. What TRA may do on your Website

TRA may use only the Scopes you grant. TRA will tell you on request what each Scope permits.

The health and backup Scopes are required for TRA to support a Website. A backup can contain a full copy of the Website's database, which typically includes registered user accounts and password hashes, comments with IP addresses, form submissions, and commerce records. You acknowledge this.

If you enable the forms Scope, form submissions (including the name, email address, telephone number, company, and message a Visitor provides) are sent to TRA. Before you enable it, you will state in your Website's privacy notice that TheRiot Agency, LLC processes form submissions on your behalf. TRA will supply suggested wording.

You will not enable the forms Scope on a Website whose forms collect Restricted Data unless TRA agrees in writing first.

The Plugin creates an administrator account named "TheRiot Agency Support" so that TRA can support the Website. TRA logs each use of that account and will give you the log on request. You may ask in writing for the account to be removed; TRA may then be unable to provide some support.

5. Consent Tools

You are the controller of your Visitors' personal data. You decide whether the Consent Tools are enabled, in which regions Visitors are asked for consent, which purposes are offered, what wording Visitors see, and which tags run under each purpose. TRA configures the Consent Tools on your documented instructions, including instructions you give through TRA's platform.

You are responsible for the privacy notice and cookie declaration on your Website, for your lawful basis for each purpose, and for keeping any record of consent that the law requires of you. TRA will supply suggested wording. The consent log that TRA keeps is a record kept on your behalf and for your use. It does not transfer any of these responsibilities to TRA.

The Consent Tools control only the tags that the Plugin places on your Website. They do not control tags placed by you, by your theme, by other plugins, by the contents of a tag manager container, or by any third party. TRA will tell you about tags of that kind that it detects, but it does not promise to find all of them.

If your Website uses a consent tool that TRA does not provide, the Plugin's tags follow the consent signal that tool makes available. You are responsible for that tool's configuration and for its compliance with the law.

The Consent Tools are software, not legal advice. Their default settings reflect TRA's reading of the law when each version is released, and they may change. TRA does not promise that using the Consent Tools makes your Website comply with any law. You should take your own legal advice on the settings you choose.

6. TRAi Signal and session replay

TRAi Signal records how Visitors interact with your Website, including clicks, scrolling, cursor movement, and the content of the pages they view, and can replay those sessions. Form inputs are masked by default. You will mark any other page element that displays personal data with the masking or blocking classes that TRA documents.

You will not enable TRAi Signal on pages that display or collect Restricted Data. You are responsible for any Restricted Data that reaches TRA through a page on which you enabled TRAi Signal.

Session replay is turned off for Visitors that TRA identifies as located in a United States state whose wiretap law requires the consent of all parties to a communication, and for United States Visitors whose state TRA cannot identify. TRA will turn replay on for those Visitors only if you ask in writing, and you may ask only after you have taken legal advice and put in place any consent that advice requires.

Before you enable TRAi Signal, you will state in your Website's privacy notice that Visitor interactions are recorded, and that TheRiot Agency, LLC processes those recordings on your behalf. TRA will supply suggested wording.

TRAi Signal records nothing for a Visitor whose browser sends a Global Privacy Control or Do Not Track signal.

7. Personal data

For personal data of your Visitors, TRA acts as your processor and service provider. Where no Data Processing Addendum is signed between us, TRA will:

  • process that personal data only on your documented instructions and only to provide the Plugin and the services you request;
  • make sure that the people who process it are bound by confidentiality;
  • protect it with appropriate technical and organizational security measures;
  • give you a current list of its subprocessors on request, and tell you before it adds a new one;
  • help you, at your cost where the effort is significant, to answer Visitors who exercise their data protection rights;
  • tell you without undue delay after it becomes aware of a personal data breach that affects your Visitors;
  • not sell or share that personal data, and not use it for any purpose of its own other than keeping the Plugin secure and working; and
  • delete it when these terms end, unless the law requires TRA to keep it.

TRA has no relationship with your Visitors and acts for you in processing their data.

8. TRA's commitments

For the Consent Tools and TRAi Signal, TRA will:

  • implement them as described in its documentation for the version installed on your Website;
  • tell you without undue delay after TRA becomes aware of a defect that causes a tag to run without the consent your configuration requires, and correct it;
  • keep the consent log for 24 months and give you an export on request; and
  • delete recordings and consent records when you ask in writing, or when these terms end.

9. Your commitments

You will:

  • install the Plugin only on Websites that you own or are authorized to manage;
  • keep the administrator accounts of your Website secure;
  • tell TRA promptly about changes to your Website that affect consent, such as a new consent tool or new tracking;
  • not use the Plugin in breach of any law or of the rights of any person; and
  • give Visitors the notices, and obtain the consents, that the law requires of you.

10. Disclaimers

Except for the commitments in Sections 7 and 8, the Plugin is provided "as is". TRA disclaims all other warranties, including warranties of merchantability, fitness for a particular purpose, and non-infringement, and any warranty that the Plugin will be uninterrupted or error-free or will achieve any result.

11. Limitation of liability

Neither party is liable to the other for indirect, incidental, consequential, special, or punitive damages, or for lost profits, revenue, goodwill, or data.

Each party's total liability arising out of or relating to these terms is limited to the fees you paid TRA in the 12 months before the event that gave rise to the claim.

This Section does not limit your obligations under Section 12, either party's liability for fraud or wilful misconduct, or any liability that cannot be limited by law.

12. Your indemnity

You will defend and indemnify TRA, and its members, employees, and contractors, against claims by third parties (including Visitors and regulators), and the resulting losses, fines, and costs, that arise from:

  • the tracking, recording, consent configuration, or notices on your Websites;
  • personal data you collect or instruct TRA to process, including Restricted Data;
  • content on your Websites; or
  • your breach of these terms.

This indemnity does not apply to the extent a claim is caused by TRA's failure to meet its commitments in Section 7 or Section 8.

TRA will tell you promptly about any claim, let you control its defence, and cooperate reasonably. You will not settle a claim in a way that admits fault by TRA without TRA's written consent.

13. Suspension and ending these terms

TRA may suspend the Plugin's connection to a Website to protect the security of the Website, of TRA's systems, or of other clients, and will tell you why.

Either party may end these terms for a Website by written notice. They also end for a Website when the Plugin is unpaired or removed from it. When they end, TRA stops accessing the Website and deletes the data it holds for it as Section 7 and Section 8 describe, except where the law requires TRA to keep it.

Sections 3 (TRA's ownership), 5, 6, 10, 11, 12, 15, and 16 continue after these terms end.

14. Changes to these terms

TRA may publish new versions of these terms at this address. Each version has a number and an effective date. TRA will tell you about a material change at least 30 days before it takes effect, and may require you to accept the new version before it enables any new feature on your Website.

15. Governing law and disputes

These terms are governed by the laws of the State of Florida, without regard to its conflict of laws rules.

Any dispute arising out of or relating to these terms will be settled by binding arbitration administered by the American Arbitration Association under its Commercial Arbitration Rules, before a single arbitrator, seated in Palm Beach County, Florida. Judgment on the award may be entered in any court with jurisdiction. Either party may ask a court for urgent injunctive relief to protect its intellectual property or confidential information.

16. General

These terms, together with any Master Services Agreement and Data Processing Addendum signed between us, are the whole agreement about the Plugin. If any part of these terms is found unenforceable, the rest continues in effect. A failure to enforce a right is not a waiver of it. Neither party may assign these terms without the other's written consent, except to a successor to its business. The parties are independent contractors.

Notices to TRA go to info@theriot.agency. Notices to you go to the email address of the person who accepted these terms, or to another address you give TRA in writing.

Contact

TheRiot Agency, LLC · info@theriot.agency