Consentinel
Start free

Consentinel Terms of Service

Last updated: August 12, 2026

These Terms of Service ("Terms") govern access to and use of the hosted Consentinel services at consentinel.co and app.consentinel.co, including the hosted dashboard, site crawler, JavaScript SDK and bundles, consent API, consent log, and WordPress Cloud connection (collectively, the "Hosted Service"). The Hosted Service is operated by SLI Studios Web Development, LLC, a Florida limited liability company ("Consentinel," "we," "us," or "our").

The free Consentinel WordPress plugin distributed through WordPress.org (the "Plugin") can operate locally without an account or the Hosted Service. Section 2 explains the separate license and terms that apply to the Plugin.

By clicking to accept these Terms, creating an account, purchasing a plan, or connecting the Plugin to the Hosted Service, you agree to these Terms for yourself and the organization you represent ("Customer" or "you"). You represent that you are at least 18 years old and authorized to bind that organization.

1. Scope and order of precedence

These Terms, any applicable order or plan description, and the Data Processing Addendum ("DPA") form the agreement for the Hosted Service. If they conflict, the DPA controls for processing of Customer Personal Data, an order controls commercial terms specific to that order, and these Terms control otherwise.

The Plugin is not required to be connected to the Hosted Service. Merely downloading, installing, or using the Plugin in local mode does not create a paid subscription or authorize transmission of data to Consentinel.

2. WordPress plugin; open-source license

The Plugin code distributed through WordPress.org is licensed under the GNU General Public License, version 2 or later (GPLv2+), as stated in the Plugin package. The GPLv2+ governs your rights to copy, modify, and redistribute that code. Nothing in these Terms restricts rights granted by the GPLv2+.

When the Plugin operates in local mode, its configuration, scanner results, and consent records remain on the WordPress site controlled by the Plugin user. Consentinel does not receive those records and is not the controller, business, processor, or service provider for that local processing.

The Plugin makes documented connections to Consentinel only after a site administrator affirmatively initiates and completes the Cloud connection. The Plugin's WordPress.org listing and readme describe those connections and the data involved. Disconnecting restores local operation and stops the Cloud connection, subject to preservation obligations and the uninstall behavior disclosed in the Plugin documentation.

WordPress.org and the WordPress Foundation are independent of Consentinel, do not sponsor the Plugin or Hosted Service, are not parties to these Terms, and are not responsible for support, privacy, security, or performance of the Plugin or Hosted Service.

3. The Hosted Service

The Hosted Service provides technical tools to configure consent interfaces, gate certain trackers, crawl and scan sites, retain consent-event records, and generate reports or draft disclosures. It is compliance tooling, not legal advice.

No feature, default, scan result, badge, report, generated policy, or statement guarantees compliance with CIPA, CCPA/CPRA, GDPR, the Florida Digital Bill of Rights, or any other law; prevents litigation or regulatory action; detects every tracker; blocks every transmission; or establishes that a particular consent is legally valid. You must evaluate your own sites, data practices, audience, and legal obligations with qualified counsel.

4. Accounts and organizations

You must provide accurate account information, keep credentials secure, and promptly notify us of suspected unauthorized access. Sites, configurations, consent logs, billing, and memberships belong to the Customer organization. Organization owners and administrators control access and are responsible for activity under their accounts, including activity by invited users and connected WordPress sites.

5. Customer responsibilities

  • Authority and notices. You are responsible for having authority to deploy the Plugin or Hosted Service on each site and for providing accurate privacy notices, cookie disclosures, and consent language appropriate to that site's practices and audience.
  • Lawful basis and choices. You determine the lawful basis for each processing purpose and must obtain, record, and honor consent or opt-out choices where required. This includes honoring Global Privacy Control and applicable sale, sharing, targeted-advertising, sensitive-data, and withdrawal rights.
  • Children and teens. If a site is directed to, or knowingly serves, children or teens, you are responsible for age-appropriate notices and any verifiable parental or guardian authorization required by law. You may not use the Hosted Service to facilitate sale or sharing of personal information of a person under 16 without the affirmative authorization required by California law, or rely on a child's consent under GDPR Article 8 without satisfying the applicable Member State age and parental-authorization rules.
  • Installation and testing. You are responsible for correct installation, configuration, testing, updates, and compatibility with your theme, plugins, cache, CDN, tag manager, and hosting environment. The documented limits concerning script order, catalog coverage, dynamically injected tags, server-side tracking, edge/CDN injection, stylesheets, cross-origin data, and browser restrictions are part of the Service description.
  • Customer-controlled technologies. You are responsible for site content, third-party scripts and vendors, tag-manager rules, server-side tracking, privacy links, category assignments, and any decision to disable or bypass blocking or consent controls.
  • Generated materials. Reports, scans, configuration snapshots, and generated policy text are informational drafts. You must review them for accuracy and legal sufficiency before use.
  • Lawful use. You will not use the Plugin or Hosted Service to deceive visitors, conceal tracking, infringe rights, introduce malicious code, probe or disrupt the Hosted Service, access another customer's data, or violate law.

6. Data roles and DPA

For account, billing, support, security, and business-administration data, Consentinel acts as an independent controller or business as described in the Privacy Policy.

For visitor consent records and related data that the Hosted Service processes on Customer's behalf ("Customer Personal Data"), Customer is the controller/business and Consentinel is the processor/service provider. The DPA is incorporated into these Terms. Customer's decision to connect a WordPress site to the Hosted Service activates this processing relationship; the DPA does not apply to data processed solely in local Plugin mode.

7. Plans, billing, and taxes

  • Paid plans are billed through Stripe monthly or annually according to the pricing and domain allowances shown when ordered.
  • A trial, discount, or promotional term applies only as stated when offered and may be changed prospectively.
  • Domain overages may be billed at the published per-domain rate, prorated where described at checkout.
  • Cancellation takes effect at the end of the then-current billing period unless law requires otherwise. Downgrades apply the lower plan's features and retention limits.
  • Fees are non-refundable except as stated in an order or required by law. You are responsible for applicable taxes other than taxes on our net income.

8. Free Plugin and Free Hosted plan

The Plugin is free, operates locally without a Consentinel account, and does not require public attribution. Any Plugin branding or outbound public-site link is optional and off by default.

The optional Free Hosted plan is separate from the Plugin. It may include one connected domain, a 90-day hosted consent-log window, plan limits, and service-supplied attribution disclosed before connection or publication. We may adjust Free Hosted plan limits prospectively with reasonable notice. You may disconnect and continue using the Plugin locally.

9. Retention, export, deletion, and legal holds

Hosted consent records are retained for the period stated in the applicable plan, currently 90 days for the Free Hosted plan and up to 24 months for paid plans, and are then scheduled for deletion. Published configuration history may be retained while the connected site exists as consent evidence. Customer may export available records during the subscription term.

Deleting a hosted site or organization initiates deletion as described in the Privacy Policy and DPA. We may preserve data when required by law, court order, or a documented legal hold. Local Plugin records are controlled by the site operator and are not deleted by deleting a Consentinel account.

10. Availability, support, and updates

Unless an order expressly states otherwise, the Hosted Service has no service-level agreement or guaranteed uptime. Cached or local components may continue operating during some outages, but no failover behavior is guaranteed for every environment.

Support is provided according to the applicable plan and available resources. Plugin support may be offered through WordPress.org community forums or other published channels without a guaranteed response time. We may issue security, compatibility, or feature updates, and you are responsible for installing and testing updates. WordPress.org controls directory hosting and distribution availability; we do not guarantee that any version will remain listed or downloadable there.

11. Intellectual property and feedback

The GPLv2+ governs the Plugin code distributed under that license. Except for those open-source rights, Consentinel and its licensors retain all rights in the Hosted Service, documentation, trademarks, hosted content, and non-public technology. Customer retains all rights in Customer data and grants Consentinel the limited rights necessary to provide, secure, support, and improve the Hosted Service in accordance with the Privacy Policy and DPA.

You may provide feedback voluntarily. We may use feedback without restriction or obligation, but we will not identify you publicly as its source without permission.

12. Third-party services

The Plugin and Hosted Service may interoperate with WordPress.org, hosting providers, payment processors, analytics or advertising platforms selected by Customer, and other third-party products. Those products are governed by their own terms and privacy practices. Consentinel is not responsible for third-party products, changes to their APIs, or Customer's use of them.

13. Disclaimers

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE PLUGIN AND HOSTED SERVICE ARE PROVIDED "AS IS" AND "AS AVAILABLE." CONSENTINEL DISCLAIMS ALL EXPRESS, IMPLIED, AND STATUTORY WARRANTIES, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.

WITHOUT LIMITING THE FOREGOING, CONSENTINEL DOES NOT WARRANT THAT THE PLUGIN OR HOSTED SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, SECURE, COMPATIBLE WITH EVERY SITE, OR ABLE TO DETECT OR BLOCK EVERY TRACKER OR TRANSMISSION. CONSENTINEL DOES NOT WARRANT THAT USE WILL ENSURE LEGAL COMPLIANCE, CREATE VALID CONSENT, PREVENT A CLAIM, OR SERVE AS A SUBSTITUTE FOR LEGAL ADVICE. THESE DISCLAIMERS DO NOT LIMIT RIGHTS THAT CANNOT LAWFULLY BE WAIVED.

14. Indemnification

Customer indemnity. To the extent permitted by law, Customer will defend, indemnify, and hold harmless Consentinel and its officers, members, employees, and contractors from third-party claims, damages, penalties, and reasonable legal fees arising from: (a) Customer's sites, content, notices, consent language, or data practices; (b) Customer's lack of authority or lawful basis; (c) Customer's configuration, disabling, bypassing, or misuse of controls; (d) Customer-selected trackers, vendors, tag managers, server-side processing, or other technologies outside Consentinel's control; (e) Customer's use of generated policies or reports without appropriate review; or (f) Customer's breach of these Terms or law.

Consentinel indemnity. Consentinel will defend Customer against a third-party claim alleging that the unmodified Hosted Service infringes a United States patent, copyright, or trademark, and against a third-party privacy or security claim to the extent directly caused by Consentinel's material breach of the DPA or Annex B security commitments. Consentinel may modify or replace the affected component, obtain rights for continued use, or terminate the affected Hosted Service with a prorated refund of prepaid unused fees. This obligation does not apply to claims caused by Customer data, Customer instructions, combinations not supplied by Consentinel, modifications not made by Consentinel, continued use after notice, or the open-source Plugin code as modified or redistributed by others.

The indemnified party must promptly notify the indemnifying party, provide reasonable cooperation, and allow the indemnifying party to control the defense and settlement. No settlement may admit fault by or impose a non-monetary obligation on the indemnified party without its consent. Consentinel's indemnity is subject to Section 15.

15. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, CONSEQUENTIAL, OR PUNITIVE DAMAGES; LOSS OF PROFITS, REVENUE, GOODWILL, OR DATA; OR COST OF SUBSTITUTE SERVICES, EVEN IF ADVISED OF THE POSSIBILITY.

EXCEPT FOR THE PRIVACY AND SECURITY CAP BELOW, CONSENTINEL'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THE PLUGIN, HOSTED SERVICE, THESE TERMS, OR THE DPA WILL NOT EXCEED THE GREATER OF (A) THE FEES PAID OR PAYABLE BY CUSTOMER FOR THE HOSTED SERVICE DURING THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO LIABILITY OR (B) $100. THIS IS ONE AGGREGATE CAP FOR ALL CLAIMS BY CUSTOMER AND ITS USERS, EVENTS, AND LEGAL THEORIES, NOT A PER-VISITOR, PER-RECORD, PER-INSTALLATION, OR PER-VIOLATION CAP.

For claims arising directly from Consentinel's material breach of the DPA, confidentiality obligations, or Annex B security commitments, Consentinel's aggregate liability will instead be capped at the greater of $1,000 or two times the fees paid or payable during the preceding 12 months, but in no event more than $1,000,000 (the "Privacy and Security Cap").

The exclusions and caps do not apply to Customer's payment obligations; Customer's indemnification obligations; either party's fraud or willful misconduct; or liability that cannot lawfully be excluded or limited. They do not waive any non-waivable data-subject or consumer right or limit a regulator's statutory authority.

16. Suspension and termination

You may stop using the Hosted Service, disconnect sites, and delete your organization subject to the retention provisions above. We may suspend or terminate the Hosted Service for material breach, security risk, nonpayment, unlawful use, or conduct that threatens the Service or others. Where practicable, we will give notice and a reasonable opportunity to cure.

Termination of the Hosted Service does not terminate GPLv2+ rights in a lawfully obtained copy of the Plugin. Sections concerning license boundaries, ownership, disclaimers, indemnification, liability, payment, retention, and general terms survive as their nature requires.

17. Changes to these Terms

We may update these Terms prospectively. We will give account holders reasonable advance notice of a material change by email, dashboard notice, or another conspicuous method. The updated Terms will state their effective date. Continued use after that date constitutes acceptance only to the extent permitted by law; where affirmative consent is legally required, we will request it.

18. Florida law and venue

These Terms are governed by Florida law, without regard to conflict-of-law principles. Subject to any non-waivable consumer forum right, the state courts located in Miami-Dade County, Florida, and the United States District Court for the Southern District of Florida have exclusive jurisdiction, and each party consents to personal jurisdiction there.

19. General

Neither party is the other's agent, partner, or fiduciary. Customer may not assign the agreement without our written consent, except in connection with a merger or sale of substantially all assets; we may assign it to an affiliate or successor. There are no third-party beneficiaries except as expressly required by the DPA or incorporated SCCs. Failure to enforce a provision is not a waiver. If a provision is unenforceable, it will be modified to the minimum extent necessary and the remainder will remain effective. Headings are for convenience only. Electronic notices and acceptances are valid to the extent permitted by law.

  • Legal contact: legal@consentinel.co
  • Mailing address: SLI Studios Web Development, LLC, 1688 Meridian Avenue, Suite 700, Miami Beach, Florida 33139, USA

Consentinel provides software and documentation, not legal advice. Nothing here creates an attorney-client relationship or guarantees compliance with any law.