Terms of Service

Agreement documents and priority

The agreement consists of these Terms and any order or additional terms expressly agreed by Coconut. Schedule 1 becomes binding only when an order or written agreement expressly incorporates it. Its inclusion below does not state that Coconut currently offers or has executed a data processing agreement. You acknowledge the Privacy Policy, which explains processing for which Coconut determines the purposes and means; it is not converted into a contractual consent to processing.

If an agreed order conflicts with these Terms, the order prevails for that purchase. Where expressly incorporated, Schedule 1 prevails for its subject matter. Mandatory law always prevails.

Workspace users

A business customer is responsible for its authorised users, their permissions, and their use of the Service, except to the extent responsibility cannot lawfully be allocated to the customer.

Beta and preview features

A feature identified as beta, preview, experimental, or evaluation may be incomplete, change materially, or be withdrawn. Do not rely on such a feature for a critical workflow unless an order expressly says otherwise.

Account activity

You are responsible for activity you authorise through your account and for promptly removing access that is no longer appropriate. You are not responsible for activity caused solely by Coconut’s breach of these Terms.

Permissions and platform terms

Connecting an account authorises Coconut, Post for Me, and the relevant platform to process account information and act within the OAuth scopes or other permissions you approve. You must have authority to connect the account and must comply with the platform’s terms, policies, and developer rules.

If you connect YouTube, the YouTube Terms of Service at https://www.youtube.com/t/terms are incorporated into your use of that connection.

Provider control, reconnects, and revocation

Platforms and integration providers control their own review, scopes, quotas, rate limits, moderation, removals, restrictions, bans, and availability. They may reject, delay, modify, restrict, or remove an action or require you to reconnect or reauthorise an account.

Disconnecting an account in Coconut stops supported future Coconut workflows for that connection, but it does not revoke every permission at the native platform, delete a native-platform account, or remove posts already published there. Use the platform’s own controls where a native revocation or post deletion is required.

Scheduling and publication state

A scheduled post may be editable or cancellable while it remains under Coconut or provider control. Once processing has begun or a post is live, a provider may reject a change and you may need to act directly in the connected platform.

Your permissions and responsibilities

You must have all intellectual-property, music, image, likeness, confidentiality, privacy, client, and platform rights and permissions needed for Customer Content and your instructions. This allocation remains your responsibility: Coconut does not validate every intellectual-property, music, image, likeness, media, privacy, or platform right. You remain responsible for publication decisions and for the legality and accuracy of content you approve.

General model training

These Terms do not themselves grant Coconut a separate right to train or fine-tune a general-purpose model using Customer Content. Any such processing requires accurate disclosure in the Privacy Policy and any separate notice, choice, or agreement required by law.

Reliance boundaries

Coconut is not a substitute for legal, financial, medical, employment, credit, or other professional advice. You must not use an output as the sole basis for a decision that produces legal or similarly significant effects about a person.

Prohibited content and conduct

• Do not create, obtain, process, or publish unlawful, fraudulent, deceptive, infringing, defamatory, harassing, exploitative, or abusive content.
• Do not send spam, conduct coordinated inauthentic activity, manipulate engagement, impersonate another person, or misrepresent an affiliation.
• Do not upload malware, disrupt the Service, gain unauthorised access, probe security, evade access controls, scrape without authority, or circumvent quotas or rate limits.
• Do not process personal or confidential information without appropriate authority, or submit specially protected data that Coconut has not expressly agreed to process.
• Do not use AI features to facilitate unlawful surveillance, discrimination, deception, impersonation, exploitation, or a prohibited high-impact decision.
• For business customers, do not publish benchmarking without Coconut’s authorisation; use automated extraction to systematically reconstruct the Service; use non-public information about the Service or non-public outputs to build or improve a competing model or service; or evade account, access, or usage controls.
• These restrictions do not limit a mandatory reverse-engineering or interoperability right, ordinary use of the Service for your own business, or evaluation based on information Coconut makes public. Do not resell or provide the Service to third parties unless an order allows it.

Enforcement

We may investigate suspected misuse and take proportionate steps to protect customers, providers, platforms, and the Service, including restricting content or access under the suspension provisions below.

Renewal and payment

Monthly plans renew monthly and annual plans renew annually until cancelled. Annual plans are prepaid. You authorise Coconut’s payment provider to charge amounts due using your selected payment method.

If payment fails, we may retry it, ask you to update your payment method, restrict paid features, or suspend the account after reasonable notice. You remain responsible for undisputed amounts due.

Tax and price changes

Prices exclude taxes unless checkout says otherwise. You are responsible for applicable sales, use, VAT, or similar taxes, except taxes on Coconut’s income.

We may change a renewal price by giving advance notice required by law. A price change does not alter a paid period already underway. You may cancel before the changed price applies.

Consumer cooling-off rights

If you are a UK or EEA consumer, you may have a statutory cooling-off right for a distance contract. Before asking us to begin supplying the Service during that period, checkout must give the required information and obtain any legally required request or acknowledgement. If you cancel after requesting immediate performance, the law may allow a proportionate charge for Service supplied before cancellation.

Nothing in these Terms excludes or limits any mandatory consumer right, cancellation right, refund, repair, repeat performance, or price-reduction remedy.

Billing errors and service-failure refunds

We will correct duplicate or unauthorised charges when verified. We will also refund prepaid unused time if Coconut terminates without your breach, or if you terminate because Coconut failed to cure a material breach after reasonable notice, except where law provides a different remedy.

Effect of termination

When the agreement ends, your right to use the Service ends, subject to any paid-period access or mandatory right that still applies. Accrued payment obligations and provisions intended by their nature to survive continue, including ownership, confidentiality, disclaimers, liability, indemnity, disputes, and data-processing obligations.

Native-platform content

Closing a workspace, cancelling a plan, deleting Coconut records, or disconnecting a channel does not guarantee deletion of content already published to a third-party platform. Native posts and platform-side copies remain controlled by that platform and may require action there.

Confidentiality obligations

The receiving party will use Confidential Information only to perform or exercise rights under the agreement, protect it with reasonable care, and disclose it only to personnel and service providers who need it and are bound by confidentiality duties.

These duties do not cover information independently developed without use of the Confidential Information, lawfully known without restriction, received lawfully from another source, or public through no breach. A legally compelled disclosure is permitted; where lawful, the receiving party will give notice and reasonable assistance.

Third-party services

Coconut is not responsible for a third-party service’s independent acts or omissions outside Coconut’s reasonable control. This does not excuse Coconut from responsibility for its own breach, negligence, or failure to comply with applicable law.

Consumers

If you are a consumer, Coconut is responsible for foreseeable loss or damage caused by its breach of these Terms or failure to use reasonable care and skill. Coconut is not responsible for business losses arising from consumer use. Your mandatory consumer remedies remain unaffected.

Business customers

For a business customer, neither party is liable for indirect or consequential loss, or for loss of profit, revenue, anticipated savings, business opportunity, or goodwill, to the extent such exclusion is reasonable and lawful.

Subject to the non-excludable liabilities above, each party’s aggregate liability arising out of or relating to the agreement is limited to the fees paid or payable by the customer for the Service during the 12 months immediately before the event giving rise to the first claim. An agreed order may set a different cap or treatment for confidentiality, data protection, or intellectual-property claims.

Claim procedure

Coconut must give prompt notice, provide reasonable cooperation at the customer’s expense, and allow the customer to control the defence. The customer may not settle a claim in a way that admits fault by Coconut, imposes an obligation on Coconut, or does not fully release Coconut without Coconut’s consent, not to be unreasonably withheld.

The indemnity does not apply to the extent a claim was caused by Coconut’s breach, negligence, unauthorised modification, or instructions.

Business customers

For a business customer, the agreement and non-contractual disputes are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction.

Consumers

For a consumer, the laws of England and Wales apply, but you retain the protection of the mandatory law and courts of your home country. You may bring proceedings in any court that applicable consumer law permits.

Assignment, waiver, and severability

You may not assign the agreement without Coconut’s consent, except where mandatory law permits. Coconut may assign it in connection with a merger, reorganisation, financing, or sale of all or substantially all relevant assets, provided this does not reduce a consumer’s mandatory rights.

A failure or delay to enforce a right is not a waiver. If a provision is unenforceable, it will be adjusted only as necessary and the remaining provisions continue.

Entire agreement and third-party rights

The agreement is the entire agreement about the Service and replaces earlier statements on that subject, without excluding liability for fraud. A person who is not a party has no right to enforce it under the Contracts (Rights of Third Parties) Act 1999.

Notices and contact

We may send operational or legal notices to the email address associated with your account or through the Service. Send notices and questions to [email protected] or to Coconut App Ltd at its registered office.

Application and roles

The customer is the controller and Coconut is its processor for the processing described in this Schedule. Each party will comply with the data protection law applicable to its role. The customer is responsible for its lawful instructions, notices, legal basis, and handling of data-subject requests as controller.

Processing details

• Subject matter: Customer Content, connected-channel information, workspace records, and related personal data processed to provide the purchased Service.
• Duration: for the agreement and any limited period during which processing is required for exit, return, deletion, legal compliance, or an agreed instruction.
• Nature and purpose: receiving, organising, storing, analysing, generating, transmitting, publishing, retrieving, supporting, securing, deleting, and otherwise processing data to provide the Service on the customer’s instructions.
• Types of personal data: identifiers, contact and workspace details, roles, account and connected-channel data, tokens and scopes, posts, media, metrics, prompts, content, approvals, support communications, and technical records included in Customer Content.
• Categories of data subjects: the customer’s users, personnel, clients, contacts, audience members, connected-account users, creators, and other individuals whose data the customer submits or directs Coconut to process.

Documented instructions

Coconut will process personal data only on the customer’s documented instructions, including instructions in the agreement and use of configured Service features, unless applicable law requires otherwise. If legally permitted, Coconut will tell the customer before processing required by law.

Coconut will promptly inform the customer if, in its opinion, an instruction infringes applicable data protection law and may pause the affected processing while the parties resolve it.

Personnel and confidentiality

Coconut will ensure that people authorised to process the personal data are subject to an appropriate duty of confidentiality and access it only as needed for their responsibilities.

Security measures

Taking into account the state of the art, implementation costs, the nature, scope, context, and purposes of processing, and risks to individuals, Coconut will maintain appropriate technical and organisational measures required by applicable data protection law. Measures will be proportionate to risk and may evolve without materially reducing the overall protection of the covered processing.

Subprocessors

The customer gives general authorisation for Coconut to appoint subprocessors needed to provide the Service. Coconut will bind each subprocessor by data-protection obligations that provide materially equivalent protection for the processing it performs and remains responsible for its subprocessor obligations as required by law.

Coconut will make current subprocessor information available and provide notice of an intended material addition or replacement where required by law or an order. A customer with a reasonable data-protection objection must contact Coconut promptly; the parties will work in good faith on a commercially reasonable resolution.

Data-subject rights assistance

Considering the nature of processing, Coconut will provide reasonable assistance through appropriate technical and organisational measures so the customer can respond to a data subject request. If Coconut receives a request relating to customer-controlled data, it will refer the requester to the customer where appropriate and will not respond substantively except on instruction or as required by law.

Impact assessments and regulators

Taking into account the nature of processing and information available to Coconut, Coconut will provide reasonable assistance with the customer’s data protection impact assessment and prior consultation with a supervisory authority where the covered processing requires it.

Personal data incidents

Coconut will notify the customer without undue delay after becoming aware of a personal data breach affecting data processed under this Schedule and provide available information reasonably needed for the customer’s assessment and notifications. Notification is not an admission of fault or liability. The customer remains responsible for its regulatory and data-subject notifications.

International transfers

Coconut will not make an international transfer of personal data restricted by applicable data protection law unless a lawful transfer mechanism and any required supplementary steps apply. The parties will reasonably cooperate to put an applicable UK IDTA, UK Addendum, standard contractual clauses, adequacy route, or replacement mechanism in place where required by the actual transfer.

Deletion or return

At the end of the relevant Service, Coconut will, at the customer’s choice and subject to available Service functionality or a verified request, delete or return personal data processed under this Schedule, and delete remaining copies, unless applicable law requires retention. This does not promise a self-service export, a fixed completion period, or deletion of native-platform content controlled by a third party.

Audits and compliance evidence

Coconut will make information reasonably necessary to demonstrate compliance with Article 28 obligations available to the customer. Where that information is insufficient, the customer may request a reasonable audit by an independent qualified auditor, subject to confidentiality, security, scope, timing, and cost arrangements that avoid unnecessary disruption and exposure of other customers’ data.

Conflicts and liability

If this Schedule conflicts with the main Terms on processing governed by this Schedule, this Schedule prevails. Liability arising under this Schedule is subject to the liability provisions of the agreement unless an order expressly provides different treatment; nothing limits data-protection liability that cannot lawfully be limited.