Terms of Service

By creating an account, accessing the Service, or clicking "I agree", you confirm that you have read, understood, and agree to be bound by these Terms and our Privacy Policy, Cookie Policy, and Acceptable Use Policy, all of which are incorporated by reference. If you are using the Service on behalf of an organisation, you represent that you have authority to bind that organisation.

If you do not agree to these Terms, you must not use the Service.

RecallStream is a software-as-a-service platform that aggregates product-recall data from public government sources — including openFDA, the U.S. Consumer Product Safety Commission (CPSC), the National Highway Traffic Safety Administration (NHTSA), and the EU Safety Gate — normalises that data into a unified schema, and delivers near-real-time webhook alerts and a REST API based on watchlists you configure.

We do not own or control the underlying recall data. Recall notices are published by independent government agencies on their own schedules and in their own formats. RecallStream processes and re-delivers that data as a convenience, but we are not responsible for the accuracy, completeness, timeliness, or legality of agency-published recall data. If you have questions about a specific recall, contact the originating agency directly.

You must be at least 16 years old to use the Service. By using the Service, you represent that you meet this age requirement and that you are not subject to any sanctions or trade restrictions that would prohibit you from accessing the Service.

You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. You must provide accurate and current information when registering. If you suspect unauthorised access to your account, notify us immediately at support@recallstream.com. We are not liable for losses arising from unauthorised use of your account where you failed to take reasonable steps to protect your credentials.

The Service allows you to register HTTP or HTTPS endpoints to receive recall match events. You are solely responsible for the security, availability, and compliance of the endpoints you register. You must ensure that those endpoints are under your control and that any personal data received via webhook payloads is handled in accordance with applicable data protection laws.

Webhook payloads are signed with your whsec_… HMAC-SHA256 secret. You should verify this signature on every received event before processing it. RecallStream is not responsible for actions taken by your systems in response to webhook events.

Your watchlists, API keys, webhook endpoints, and account settings ("Customer Configuration") remain your property. You retain all rights in your Customer Configuration. You grant RecallStream a limited, non-exclusive licence to store and process your Customer Configuration solely to operate and improve the Service.

You represent that your Customer Configuration does not infringe any third-party rights and that you have the right to register the webhook endpoints you provide. You acknowledge that watchlist match results are based on text matching against agency-published recall data and may not be exhaustive.

Payments are processed by Paddle (Paddle.com Market Ltd), which acts as our authorised reseller and Merchant of Record. Paddle handles checkout, invoicing, and applicable sales tax/VAT, and is the counterparty for your purchase and any refund. Your purchase is therefore also subject to Paddle's buyer terms. Refunds are governed by our Refund Policy.

Paid plans are billed monthly in advance. Fees are non-refundable except where required by applicable law or expressly provided in our Refund Policy. EU/UK consumers who purchase a paid plan have a statutory 14-day right of withdrawal. That right ends early when, after purchase and with your prior express consent to immediate performance, you first make use of a paid entitlement — for example issuing or using an API key, receiving data from a paid-tier source, or enabling a paid alert channel — and you acknowledge that you thereby lose the right of withdrawal. Merely signing in does not, by itself, end the withdrawal right.

Subscriptions renew automatically at the end of each billing period unless cancelled before renewal. If payment fails, we will notify you and may suspend access until payment is received. You are responsible for all taxes applicable to your subscription in your jurisdiction.

You may upgrade or downgrade your plan at any time from your account settings. Changes to a lower plan take effect at the start of the next billing cycle. Upgrades take effect immediately, with a prorated charge for the remainder of the current period.

Your use of the Service is subject to our Acceptable Use Policy. Key obligations include: do not use the Service to publish or transmit illegal, harmful, or deceptive content; do not attempt to circumvent rate limits or access controls; do not reverse-engineer the Service; and do not redistribute recall data in a manner that misrepresents its source or origin.

If you redistribute data sourced from the EU Safety Gate, you must comply with the Creative Commons Attribution 4.0 International (CC BY 4.0) licence and provide appropriate attribution to the European Commission Safety Gate (RAPEX).

The RecallStream platform — including its software, APIs, data normalisation logic, documentation, and visual design — is owned by RecallStream and protected by applicable intellectual property laws. You receive a limited, non-exclusive, non-transferable licence to access and use the Service in accordance with these Terms.

Underlying recall data from US government agencies (openFDA, CPSC, NHTSA) is in the public domain. EU Safety Gate and certain other sources are licensed under CC BY 4.0 or equivalent open licences.RecallStream's proprietary contribution is the aggregation, normalisation, matching, and delivery infrastructure. Nothing in these Terms transfers ownership of any government data to RecallStream. Each source, its licence, and the required attribution are listed on our Sources page, and attribution metadata is delivered on the wire with every recall via the API. If you redistribute this data you must comply with the applicable source licence and preserve its attribution.

The Service relies on government APIs that are operated independently of RecallStream. If a government agency modifies, restricts, or discontinues its API, we may be required to modify, suspend, or discontinue corresponding features of the Service without prior notice or liability to you.

Recall data accuracy, completeness, and timeliness are the sole responsibility of the originating agency. RecallStream normalises and delivers agency data as received but does not independently verify or guarantee the accuracy of individual recall records. You should always refer to the originating agency's official publication for authoritative recall information.

We aim to provide a reliable Service but do not guarantee uninterrupted availability. Scheduled maintenance, third-party API outages, force majeure events, and other factors outside our control may cause downtime. We will endeavour to provide advance notice of planned maintenance where practical.

We may modify or discontinue features of the Service at any time. Where a change materially affects paid customers, we will provide reasonable advance notice by email or in-app notification.

The Service is provided "as is" and "as available" without warranties of any kind, whether express or implied, including warranties of merchantability, fitness for a particular purpose, or non-infringement. We do not warrant that the Service will be error-free, secure, or continuously available.

Recall monitoring is a supplement to, not a replacement for, your own compliance program. RecallStream does not warrant that its feed captures every recall published by every agency, or that recall data is current at the time you access it. You should maintain independent compliance practices appropriate to your industry and regulatory environment.

To the maximum extent permitted by applicable law, RecallStream's total liability to you for any claims arising out of or related to these Terms or the Service is limited to the greater of: (a) the total fees you paid to RecallStream in the 12 months preceding the claim, or (b) USD $100.

RecallStream is not liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, business, or goodwill, even if advised of the possibility of such damages.

You agree to indemnify, defend, and hold harmless RecallStream and its affiliates from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising out of: (a) your use of the Service in violation of these Terms; (b) your Customer Configuration; (c) your webhook endpoints or the downstream use of recall data you receive; or (d) your violation of any applicable law or third-party rights.

You may close your account at any time from Settings → Account → Delete account. Upon termination, your access to the Service ceases and your data will be deleted in accordance with our Privacy Policy retention schedule.

We may suspend or terminate your account immediately if you violate these Terms, fail to pay fees, or if we are required to do so by law. Sections 9, 12, 13, 14, and 16 survive termination.

These Terms are governed by the laws of Ukraine. Any dispute arising out of or in connection with these Terms that cannot be resolved amicably shall be submitted to the competent courts located in Ukraine.

If you are an EU or UK consumer, mandatory consumer protection provisions of your country of residence apply, and you may bring claims in your local courts. Nothing in these Terms removes your right to seek remedies from your national consumer protection authority.

We may update these Terms from time to time. When we make material changes, we will notify you by email and by updating the "Last updated" date. If you continue to use the Service after changes take effect, you accept the revised Terms.

Questions about these Terms should be directed to:

• Email: support@recallstream.com
• Privacy matters: privacy@recallstream.com
• Post: Sole Proprietor (FOP) Kharchenko Yaroslav Oleksandrovych, Komunalna St 16, Hlukhiv, Sumy Oblast, 41400, Ukraine