Root Communications, Inc. Developer Terms of Service

On this page: Developer Terms of Service · Data Processing Addendum

Welcome, and thank you for your interest in building on Root. These Developer Terms of Service ("Developer Terms") govern your access to and use of Root's application programming interfaces, software development kits (including the Root SDK packages published under the @rootsdk and @rootplatform scopes), developer tools (including the rootsdk command-line tools and code generators), the Root Developer Portal, the Root Store, our developer documentation, and the Root hosted runtime on which Apps and Bots execute (collectively, the "Developer Platform").

When we say "Root," "we," "us," and "our" in these Developer Terms, we mean Root Communications, Inc. (WeWork, 750 N San Vicente Blvd, Ste 800 West, Los Angeles, CA 90069, United States), unless otherwise set forth in additional terms applicable to a given part of the Developer Platform.

When we say "Terms" in these Developer Terms, we mean, collectively: these Developer Terms; our developer documentation and any other applicable documentation we make available, including at docs.rootapp.com ("Documentation"); the Root Developer Policy; the Root Terms of Use (including the Root Community Guidelines); the Root Privacy Policy; and any other applicable terms, policies, and guidelines we make available (including in the Developer Portal). If there is a conflict between these Developer Terms and any additional terms, these Developer Terms control for that conflict unless the additional terms expressly state otherwise. If you use other Root services in connection with the Developer Platform, the terms for those services also apply to you. Additional defined terms are set out in Section 15 (Definitions).

A note on how Root works, because it shapes these Terms: unlike platforms where you host your own integration, Root hosts your App for you. When a community installs your App, Root provisions and operates a dedicated server instance and datastore for that community and distributes your App's client to that community's members. That means you are giving us your software to run, and communities are trusting your software inside their spaces. These Terms are written for that arrangement.

Section 1: Acceptance of the Terms and Registration

a. Accepting the Terms

By accepting these Developer Terms, creating or operating an App, registering in the Developer Portal, or otherwise accessing or using the Developer Platform, you agree to comply with the Terms and agree that the Terms control your relationship with us. You also confirm that: (i) you are at least 16 years of age and meet the minimum age required by the laws of your country; (ii) if you are at least 16 but under 18 years of age, your parent or legal guardian has reviewed and agreed to the Terms on your behalf; and (iii) if you are under 16, you may not use the Developer Platform. The Developer Platform is not intended for anyone under 16, consistent with the Root Terms of Use.

You may not use the Developer Platform, and may not accept the Terms, if you are barred from using or receiving it under the applicable laws of the United States or any other country, including the country in which you are resident or from which you use the Developer Platform.

If you are using the Developer Platform on behalf of an entity (including an Organization registered in the Developer Portal), you represent and warrant that you have authority to bind that entity to the Terms, and by accepting the Terms you do so on behalf of that entity (and all references to "you" in the Terms refer to that entity).

b. Registration and App Information

To build and publish Apps you must register in the Root Developer Portal, where you may be required to provide information about yourself or your Organization (such as identification and contact details) and about your App (such as its name, description, category, functionality, the permissions it requests, and a link to its privacy policy). You will keep this information accurate, complete, and up to date at all times, including your App's user-facing store listing and profile. You will not misrepresent or mask your identity or your App's identity in the Developer Portal, during any certification or review process, or when using the Developer Platform. We use information about you to verify your identity and as otherwise described in our Privacy Policy.

c. App Manifest Accuracy

Each App declares its identity, permissions, and configuration in its manifest (root-manifest.json). Your App's manifest must accurately reflect your App's actual behavior. In particular, you will request only the permissions your App genuinely needs for its stated functionality, and you will not use granted permissions for purposes other than those a reasonable user would expect from your App's listing and description.

Section 2: Use of the Developer Platform

a. License to You

Subject to your compliance with the Terms, we grant you a limited, non-exclusive, non-sublicensable, non-transferable, non-assignable, revocable license to access and use the Developer Platform and Documentation solely as necessary to develop, test, publish, and operate your App as permitted under the Terms. We reserve all rights, title, and interest not expressly granted in the Terms, and you may not access or use the Developer Platform or Documentation except as set forth in the Terms.

b. Restrictions

You will not (and will not attempt to, or permit or enable others to):

1. reverse engineer or otherwise derive source code, trade secrets, or know-how from the Developer Platform, except to the extent this restriction is prohibited by applicable law;
2. modify, create derivative works of, copy, reproduce, redistribute, rent, lease, sell, or syndicate access to the Developer Platform;
3. access or use the Developer Platform in any way that (i) is not in accordance with the applicable Documentation, (ii) compromises, breaks, or circumvents any of our technical processes or security measures, including the community permission model and the App sandbox, (iii) poses a security vulnerability to users, communities, us (including our systems and networks), or any third party, or (iv) exceeds any rate, call, storage, compute, or other usage limits we set (including as set forth in the Developer Policy or Documentation) or that we believe constitutes excessive or abusive usage;
4. access or scrape data from Root communities or users other than through the Developer Platform interfaces made available to your App; or
5. circumvent the Root Store or App installation model, including by causing an App to load, execute, or hot-update code that was not submitted to and distributed by Root, except where the Documentation expressly permits it.

c. Open Source Software

Some software required by or included in the Developer Platform may be offered under an open source license (see, for example, the third-party notices we make available). Open source licenses constitute separate written agreements. To the limited extent an open source license expressly supersedes the Terms, that license governs your use of the applicable open source software.

d. Developer Credentials

You will use the developer credentials we assign to you (including your App ID, Organization credentials, developer tokens, upload/auth tokens, and any keys or secrets) solely with your App and the Developer Platform, will not permit or enable any other person or App to use them, and will treat them as Root confidential information. You will store tokens and secrets securely and will not embed them in client code, public repositories, or other materials accessible to third parties (other than your Service Providers, subject to Section 14(a)). You are responsible for all activity under your developer credentials and will notify us immediately if you believe they have been compromised.

e. Eligibility and Additional Criteria

We may make certain features of the Developer Platform available only if you meet additional criteria, for example, Organization certification for public visibility in the Root Store (see Section 7), or eligibility requirements for particular APIs or capabilities. Your access to such features is conditioned on your ongoing compliance with the then-current eligibility criteria and policies, in addition to all other Terms.

Section 3: Hosting and Operation of Your App on Root Infrastructure

a. How Hosting Works

Root hosts Apps. When you publish an App and a community installs it, Root distributes your App's client to that community's members and provisions, executes, and operates your App's server code in Root's cloud, with a separate server instance and datastore for each installing community. You do not operate your own production servers for your App, and you will not attempt to relocate, proxy, or mirror your App's execution outside the Root hosted runtime except as the Documentation expressly permits.

b. License You Grant Us to Host and Operate Your App

You grant us a non-exclusive, transferable, sublicensable, royalty-free, worldwide license to host, store, reproduce, execute, run, publicly display and perform, distribute, translate, modify (solely as necessary for technical operation, such as packaging, instrumentation, sandboxing, or format conversion), and otherwise use your App and App Content in connection with operating, developing, securing, and improving the Developer Platform and other Root services. This license allows us to, among other things: distribute your App's client to community members' devices; provision and run per-community server instances of your App; store, back up, restore, and migrate your App's datastores; display and provide information about you and your App to users (including in the Root Store, search results, categories, collections, and profile and product pages); frame and link to and place content around your App; scan and analyze your App and App Content for security, performance, and compliance; and attribute you as the source of your App and App Content. This license continues with respect to App Content after the Terms end to the extent necessary for us to comply with law, resolve disputes, and operate residual copies out of backups for a commercially reasonable period. We will not be subject to any terms or policies associated with your App or App Content, even if we click to agree to them.

c. Safety Obligations for Code That Runs in Communities

Because Root executes your server code and distributes your client code to users' devices, you will ensure that your App and App Content do not contain or introduce any viruses, worms, Trojan horses, malware, spyware, adware, ransomware, or other harmful or destructive code, and do not include any code that is obfuscated for the purpose of concealing its function. You will not use the Root hosted runtime for workloads unrelated to your App's user-facing functionality, including cryptocurrency mining, proxying or relaying third-party traffic, distributed computing for third parties, penetration of other systems, or bulk data harvesting.

d. Resources, Availability, and Backups

We may set and change limits on compute, memory, storage, bandwidth, message and event throughput, and instance lifecycle (including suspending idle instances) at our discretion. We may take your App's instances offline for maintenance, security, or enforcement reasons. While Root performs datastore backups as part of operating the hosted runtime, backups are provided as a platform convenience, not a guarantee; we do not warrant that your App's data will be preserved, and Section 12 (Liability) applies to any loss of hosted data. You are responsible for designing your App to tolerate restarts, migrations, and the per-community isolation model described in the Documentation.

e. Our Access to Hosted App Data

Because your App's server instances and datastores run on our infrastructure, we may access, process, and retain them as necessary to operate, secure, back up, and improve the Developer Platform; to enforce the Terms; to comply with applicable law or valid legal process; and to protect Root, users, and third parties. We do not claim ownership of your App's data by virtue of hosting it (see Section 9(a)).

Section 4: Your App and App Content

a. Responsibility

You are solely responsible for your App, including its development, functionality, maintenance, support, content, and behavior inside communities, and for your App Content. Root hosting your App does not make Root the developer, publisher, or operator of your App, and does not transfer any of your responsibility to Root.

b. Users and Communities

You will require users of your App to comply with all applicable laws and regulations and with the Terms (including the Root Terms of Use and Community Guidelines) in connection with their use of your App, and will not permit or enable them to violate any of the foregoing. Your App operates inside communities subject to the community permission model; you will respect the roles, permissions, and settings that community administrators configure, and you will not circumvent them.

If you maintain your own terms of service or other agreement with users of your App, you agree that (i) such agreement is solely between you and the user and we have no responsibility or liability under it, and (ii) it may not and will not supersede, modify, or be inconsistent with the Terms, which control in any conflict.

c. Uninstallation

When a community uninstalls your App, or your App is removed from a community for any reason, your entitlement to that community's data ends. You will implement the platform's uninstall lifecycle callbacks as described in the Documentation so that the community's App data is deleted, and you will not retain copies of that community's App Data except as required by applicable law.

Section 5: Compliance with Laws and Third-Party Rights

You and your App will (and you will require those acting on your behalf, and your users, to): (i) comply with all applicable laws and regulations; (ii) not infringe or violate any third-party rights, including intellectual property, proprietary, privacy, or publicity rights; (iii) not access or use the Developer Platform in a manner that is deceptive, unethical, false, or misleading, or that encourages or promotes illegal activity or the infringement or violation of third-party rights; and (iv) not violate any other terms or policies you have with Root.

Without limiting the foregoing, because Root clients are distributed through mobile app stores and other channels, you and your App will comply with any third-party terms applicable to making your App available through those channels (including developer guidelines and requirements imposed by Apple, Google, or others). If we believe you or your App have caused Root to violate any such third-party terms, we may remove your App or take other enforcement action as described in Section 12.

You represent and warrant that you have obtained and will maintain all rights necessary (including from your users) to grant us the licenses and permissions in the Terms (including Sections 3(b) and 10(d)) and to operate your App, including the right to provide all content in your App and to process users' App Data.

Section 6: User Privacy and Security

a. Privacy Practices and Privacy Policy

You will comply with all applicable privacy and data protection laws and regulations, including (where applicable) the EU and UK General Data Protection Regulations, the ePrivacy Directive, Brazil's LGPD, and the California Consumer Privacy Act as amended by the CPRA. You will provide and adhere to a privacy policy for your App that complies with applicable law and clearly, accurately, and completely describes what data your App collects, how it is used and shared (including with us and with third parties), and how users can request deletion. You will maintain an up-to-date, publicly accessible link to your privacy policy in your App's Developer Portal listing and make it easily accessible to users of your App. You may only use App Data in accordance with your privacy policy, applicable law, and the Terms; your privacy policy may not and will not supersede, modify, or be inconsistent with the Terms.

b. App Data Use, Sharing, and Retention

Your App receives access to community data (such as channels, messages, members, roles, files, and events) through the Developer Platform, scoped by the permissions declared in your manifest and granted by the community. You will use App Data solely to provide and improve your App's stated functionality, and for no other purpose. Without limiting the foregoing, you will not use App Data for advertising or marketing purposes, to build or enrich user profiles outside your App, to train machine-learning or AI models except as expressly permitted by the Documentation or our prior written consent, or to sell or broker data.

You will not transmit App Data off the Root hosted runtime or share it with any third party, except: (i) with a Service Provider subject to Section 14(a); (ii) to the extent required by applicable law or regulation; or (iii) when a user of your App expressly directs you to share their App Data with a third party (and you will provide us proof of such direction upon request).

Except to the extent retention is required by applicable law, you will (1) promptly update App Data upon request from us or the applicable user, and (2) promptly delete App Data when: (a) it is no longer necessary for your App's stated functionality; (b) a community uninstalls your App (per Section 4(c)); (c) you stop operating your App, whether voluntarily or due to enforcement action; (d) we request deletion; (e) the applicable user requests deletion; or (f) deletion is required by applicable law. You will give users an easily accessible way to request modification and deletion of their App Data. If you receive App Data in error, you will immediately notify us, delete it, and provide proof of deletion on request.

c. Security

You will use commercially reasonable efforts to protect App Data from unauthorized access or use, including destruction, loss, alteration, disclosure, or distribution. For any App Data or credentials you hold outside the Root hosted runtime (for example, in your development environment or with a Service Provider), these efforts include encryption at rest and administrative, physical, and technical safeguards designed to prevent unauthorized access and to comply with applicable law. You will promptly notify affected users of unauthorized access to or use of their data to the extent required by applicable law. You will also promptly notify us of, and provide requested information about, any incident of unauthorized access to or use of App Data or your developer credentials, or any incident reasonably likely to compromise the security, confidentiality, or integrity of your systems (or your Service Providers' systems) that process App Data. You will begin remediation immediately and reasonably cooperate with us, including by keeping us regularly informed about the incident's impact, remediation progress, and your compliance with any legal notification requirements.

d. Data Processing Addendum

As between you and Root, Root is the controller of the personal data an App processes through the Developer Platform, and you act as Root's processor for that data. Your processing of that personal data is governed by the Root Developer Data Processing Addendum, which is incorporated into these Developer Terms by reference. Among other things, the Addendum requires you to process that personal data only on Root's instructions and only to operate your App, to bind your Service Providers as sub-processors, to assist Root with data-subject requests and breach notifications, and to delete that data when the processing ends.

Section 7: Publishing, Certification, and App Review

a. Publishing Through the Root Store

Apps are distributed to communities exclusively through Root, including the Root Store. You will submit App versions through the Developer Portal and associated tooling. App versions move through lifecycle states we define (for example: draft, pre-release, published, deprecated). Once a version is published it may not be altered; changes require a new version. We may make pre-release versions available only in limited testing contexts (such as a staging community associated with your Organization) under conditions we define.

b. Certification and Review

We may condition access to publishing, public Root Store visibility, or particular capabilities on review and approval processes, including verification or certification of you or your Organization and review of your App ("App Review"). You will cooperate with App Review and provide accurate and complete information as we request. If your App or Organization has been approved or certified, you will not materially change your App's functionality, including the permissions it requests or how it collects, uses, or shares App Data, beyond its reviewed, stated purpose without first resubmitting for and receiving approval where we require it. Approval or certification is not an endorsement of your App and does not transfer any responsibility for your App to Root.

We may also periodically request information, certifications, and attestations relating to your access to or use of the Developer Platform or App Data, which you will provide within the requested time frame and in the requested form, and which you will ensure are accurate and complete. If you are an entity, such certifications must be provided by an authorized representative.

c. Listing Standards

Your Root Store listing (name, icon, description, category, screenshots, and other materials) must be accurate, must not be misleading, and must comply with the Terms and any listing guidelines we publish. We may edit, reformat, or remove listing content that violates the Terms, and we determine at our discretion how and where Apps are surfaced, ranked, categorized, and featured in the Root Store and other discovery surfaces.

Section 8: Monitoring

You agree that Root may monitor your App and its use of the Developer Platform, including its resource consumption, API usage, network behavior within the hosted runtime, and compliance with the Terms, to ensure quality, security, and compliance and to improve the Developer Platform and other Root services. You will not interfere with this monitoring, and we may use any technical means to overcome such interference. You agree to respond promptly to our requests to verify and audit your compliance with the Terms.

Section 9: Intellectual Property and Confidentiality

a. IP Ownership and Feedback

Root does not acquire ownership of your App or App Content under these Terms (the licenses in Sections 3(b) and 10(d) are licenses, not transfers), and you do not acquire ownership of any rights in the Developer Platform, App Data, Documentation, or Root confidential information, or in any derivative works of the foregoing.

The Developer Platform and App Data contain content owned by users and third parties. That content is the sole responsibility of the person who makes it available, and you are solely responsible for your decision to use or distribute it. We may, but are not obligated to, review, remove, or refuse to display content, and we make no representations or warranties about content or our decisions regarding it. App Data may be subject to intellectual property rights; you may not use it unless licensed by the owner or otherwise permitted by law, and your access to App Data may be restricted, limited, or filtered in accordance with applicable law and policy.

If you provide suggestions or other feedback about the Developer Platform, Documentation, or any other Root services, you grant us a non-exclusive, perpetual, irrevocable, sublicensable, transferable license to use the feedback and ideas generated from it without restriction, attribution, or compensation.

b. Copyright and IP Complaints

We respond to notices of alleged intellectual property infringement and terminate the accounts of repeat infringers in accordance with applicable law, including the U.S. Digital Millennium Copyright Act (DMCA), and our copyright and IP policy. Without limiting Section 5, you will comply with the DMCA (and equivalent applicable laws) with respect to receiving and responding to notices of claimed infringement regarding content provided to or contained in your App.

c. Confidential Matters

Our communications to you and the Developer Platform may contain Root confidential information, which includes any materials, communications, and information that are marked or designated as confidential or that would normally be considered confidential under the circumstances, including any nonpublic information. Your participation in any research, feedback sessions, or testing of features that are not generally publicly available (including any pre-release SDK versions or APIs, and any information you receive or feedback you provide in connection with them) is Root confidential information. If you receive Root confidential information, you will (i) keep it confidential using no less than reasonable care, use it only as necessary for your permitted use of the Developer Platform and to provide us feedback, and (ii) not disclose it to any third party without our prior written consent, except to the extent (1) required by law, with reasonable prior notice to us unless prohibited by court order, or (2) necessary for a Service Provider to provide you services subject to Section 14(a).

Section 10: Brand Features; Attribution; Publicity

a. Brand Features

"Brand Features" means the trade names, trademarks, service marks, logos, domain names, and other distinctive brand features of each party. For Root, these include "Root," "Root Store," "Root SDK," the RootApp name and domains, and associated logos. Except as expressly stated, the Terms grant neither party any right, title, or interest in the other party's Brand Features. All use by you of Root's Brand Features (including associated goodwill) inures to our benefit; all use by us of your Brand Features (including associated goodwill) inures to yours.

b. Attribution and Naming

You will provide any attributions we require, as described in the Documentation. Subject to your compliance with the Terms, we grant you a limited, revocable, non-transferable, non-assignable, non-sublicensable, non-exclusive license, for the duration of the Terms, to display Root's Brand Features solely for required attributions or in an incidental manner when promoting your App, in accordance with the Terms and any brand guidelines we publish. You will not name your App or Organization in a way that suggests it is made by or affiliated with Root (for example, using "Root" as a prefix implying first-party status), and we may require you to change a name that does. We have sole discretion to determine whether your attributions and use of our Brand Features comply with these requirements.

c. Publicity

You will not make any statement, including in promotions or advertisements of your App, that suggests partnership with, sponsorship by, or endorsement by Root without our prior written approval in each instance. Certification or verification status may only be described in the form we specify.

d. Promotional and Marketing Use

You grant us a non-exclusive, transferable, sublicensable, royalty-free, worldwide license to use your name and Brand Features, your App's name and icon, and to produce and distribute App Content and incidental depictions (including screenshots and videos) from your App, in the course of promoting, marketing, or demonstrating your App, the Developer Platform, or other Root services, including in the Root Store and other discovery surfaces. This license remains in effect for existing materials and instances even after the Terms end.

Section 11: Monetization (Reserved)

The Developer Platform does not currently include developer-facing monetization features (such as paid Apps, in-App purchases, subscriptions, or revenue sharing). You will not sell access to your App or to App functionality, or otherwise charge Root users in connection with your App, except through monetization features we make available and any additional terms that accompany them. If we make monetization features available, your use of them will be subject to additional terms, which will control over these Developer Terms with respect to those features to the extent stated in them.

Section 12: Termination and Enforcement

a. Termination and Enforcement Actions

You may terminate the Terms at any time by ceasing all access to and use of the Developer Platform and unpublishing your Apps. Because Root hosts Apps, note that ceasing to operate your App means communities that installed it will lose its functionality; where practicable, we ask that you deprecate responsibly and give your users notice.

We reserve the right to terminate the Terms, or to discontinue, suspend, or limit the Developer Platform or any portion or feature of it or your access to it, if there is an Enforcement Reason, or at our convenience upon notice to you. If there is an Enforcement Reason, we may also take other enforcement actions at our discretion, including: issuing warnings or notifications to you or to users or communities; requiring corrective action from you; removing, suspending, blocking, or limiting your App or App Content (including removing it from the Root Store, blocking new installs, disabling it in communities where it is installed, or suspending or terminating its hosted server instances); revoking any approval, certification, or verification; requiring you to stop using and to delete App Data; suspending or terminating your user or developer accounts, your Organization, or your developer credentials; terminating your other agreements with Root or your ability to use other Root services; deleting hosted instances and datastores associated with your App after a reasonable period; reporting you or your App to law enforcement as we deem appropriate; or taking legal or any other action we consider appropriate. Enforcement reviews and actions may be automated or manual, and may be taken with or without notice, including during an investigation. Where appropriate, we work to give you context for our decisions, and you may appeal enforcement actions through the Root support form at https://www.rootapp.com/support.

Without limiting the foregoing, we may limit, suspend, or terminate developer credentials, tokens, or hosted instances that have not been used or accessed within at least the prior 30 days, with or without notice to you.

b. Your Obligations After Termination

Upon any termination of the Terms or discontinuation of your access to the Developer Platform, you will (and will require those acting on your behalf to) immediately stop using the Developer Platform and your developer credentials, cease all use of Root's Brand Features, and delete all App Data in your possession or control (including any held by your Service Providers), and all rights granted to you under the Terms (including in Sections 2(a) and 10(b)) immediately cease. We may delete your App's hosted instances, datastores, and backups following termination, and we may independently notify communities and users that installed or used your App.

Root does not provide tools to export your App's data or code, and Root does not guarantee that your App or its data will remain available to you after termination or after a community uninstalls your App. You are responsible for maintaining any separate copies you are permitted to keep under the Terms, including under Section 6 and the Root Developer Data Processing Addendum.

c. Survival

Terms that by their nature should survive termination will survive, including Sections 2(b), 3(b) (to the extent stated), 3(e), 4 through 6, 8, 9, 10(d), 11, 12(b) and (c), and 13 through 15.

Section 13: International Data Transfers

You will comply with all applicable laws governing cross-border transfers of personal data. If any transfer of personal data in App Data occurs across a border in a way that such law restricts, you will ensure that an appropriate safeguard or other valid transfer mechanism required by that law is in place, and you will execute any further transfer terms we reasonably require. We may restrict or condition your access to App Data as needed for us to comply with those laws. The Root Developer Data Processing Addendum addresses these transfers in more detail and controls to the extent of any conflict with this Section.

Section 14: General Provisions

a. Service Providers

Before using a Service Provider, you will require them to agree in writing to access and use the Developer Platform and App Data only on your behalf and at your direction, to provide you services for developing or operating your App in compliance with the Terms, and for no other purpose (including their own). You will ensure each Service Provider complies with the Terms as if in your place, and you are solely responsible and liable for their acts and omissions. When you stop using a Service Provider, you will ensure they immediately stop using the Developer Platform and App Data and promptly delete all App Data in their possession or control. Upon notice, we may prohibit your use of any Service Provider we reasonably believe has violated the Terms or is negatively impacting the Developer Platform, App Data, users, or us, and you will promptly stop using them.

b. Modification

We may change these Developer Terms from time to time. If we make a material change, we will provide reasonable notice before it takes effect (for example, via the email address or developer account we have on file for you, or in the Developer Portal), unless the change is urgent. Continuing to access or use the Developer Platform after changes take effect constitutes acceptance of the changes; if you do not agree, you must stop using the Developer Platform. The current version of these Developer Terms is available in the Root Developer Portal.

c. Export Control

You represent and warrant that you are not located in, or affiliated with the government of, any jurisdiction subject to a comprehensive U.S. or E.U. embargo, and that you are not on any U.S. or E.U. list of prohibited or restricted parties. Your use of the Developer Platform must comply with U.S. and E.U. export control and sanctions laws and must not cause Root to violate them. If your App incorporates Root software or SDKs, it may be subject to export controls governing its export, reexport, and transfer; you are responsible for determining applicable restrictions and obtaining any necessary approvals. You will not permit your App to be hosted, accessed, or used in any embargoed jurisdiction or by any prohibited or restricted party unless authorized by the relevant authorities.

d. U.S. Federal Agency Entities

The Developer Platform and Documentation were developed solely at private expense and are commercial computer software and related documentation within the meaning of the applicable U.S. Federal Acquisition Regulation and agency supplements.

e. Choice of Law; Dispute Resolution

These Developer Terms, and any Dispute arising out of or relating to them or the Developer Platform (whether in contract, tort, statute, regulation, or otherwise), are governed by the internal laws of the State of California, consistent with the Federal Arbitration Act, without regard to conflict-of-laws principles, in line with the Root Terms of Use. The United Nations Convention on Contracts for the International Sale of Goods is excluded.

The dispute-resolution provisions of the Root Terms of Use are incorporated into these Developer Terms by reference and apply to Disputes between you and Root arising out of or relating to the Developer Platform. This includes the agreement to resolve Disputes through binding, individual arbitration administered by JAMS under its Streamlined Arbitration Rules; the waiver of class, representative, and consolidated proceedings; the exceptions to arbitration (including for intellectual-property Claims, certain theft/piracy/unauthorized-use Claims, small-claims actions, and temporary or preliminary injunctive relief); the venue provisions; and the one-year limitations period. For purposes of that incorporation, references to "the Service" are read to include the Developer Platform and references to "these Terms" are read to include these Developer Terms.

IMPORTANT: These provisions require most disputes to be resolved by binding individual arbitration and waive your right to a jury trial and to participate in class actions. Please read them carefully.

f. General Legal Terms

To the extent permitted by law, we each agree to contract in the English language; any translation we provide is for convenience only and the English version governs. The term "including" means "including without limitation." The Terms do not create any third-party beneficiary rights or any agency, partnership, or joint venture. Nothing in the Terms limits either party's ability to seek injunctive relief. We are not liable for failure or delay in performance to the extent caused by circumstances beyond our reasonable control. If you do not comply with the Terms and we do not take action right away, we are not giving up any rights we may have. If a particular term is found unenforceable, the remaining terms are unaffected. The Terms are the entire agreement between you and Root relating to their subject matter and supersede any prior or contemporaneous agreements on that subject, unless you and Root have entered into a separate written agreement that expressly supersedes them.

You may not assign, sublicense, delegate, or otherwise transfer any of your rights or obligations under the Terms (including any sale, license, or other transfer of ownership of your App or Organization) to any third party without our prior written consent. Upon a Root-approved transfer, the Terms apply to the transferee as "you" (including with respect to the operation of the App and any processing of App Data obtained before or after the transfer), and the transferee assumes the obligations and liabilities of the transferor. Any transfer in violation of this provision is null and void. Any change of control or material ownership of you is deemed an assignment. These Terms are non-exclusive; you acknowledge that Root may develop products or services that compete with, or are similar to, your App or any other products or services (including first-party Apps distributed in the Root Store).

g. Notices

If you need to give us notice in writing under these Developer Terms, or wish to contact us about them, you can reach us through the Root support form at https://www.rootapp.com/support. If we need to give you notice under these Developer Terms, we may do so by email, through the Developer Portal, or using any other contact details associated with your developer account, and it is your responsibility to keep that contact information accurate and current. A notice is treated as received when we send it to the most recent contact details you have given us, or when you submit it through the support form.

Section 15: Liability

a. WARRANTIES

NEITHER ROOT NOR ITS AFFILIATES, SUPPLIERS, OR DISTRIBUTORS MAKE ANY SPECIFIC PROMISES ABOUT THE DEVELOPER PLATFORM, APP DATA, DOCUMENTATION, THE HOSTED RUNTIME, OR ANY ROOT SERVICES. FOR EXAMPLE, WE MAKE NO COMMITMENTS OR WARRANTIES ABOUT THE SPECIFIC FUNCTIONS OF THE DEVELOPER PLATFORM; THE RELIABILITY, AVAILABILITY, ACCURACY, QUALITY, APPROPRIATENESS, LEGALITY, ORIGIN, SAFETY, OR USEFULNESS OF THE DEVELOPER PLATFORM, APP DATA, OR DOCUMENTATION; THE CONTINUOUS OPERATION OF, OR PRESERVATION OF DATA IN, ANY HOSTED INSTANCE, DATASTORE, OR BACKUP; OR THEIR ABILITY TO MEET YOUR NEEDS. YOU ACKNOWLEDGE THAT WE DO NOT WARRANT THAT THE DEVELOPER PLATFORM WILL BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE, AND THAT WE MAY CHANGE, SUSPEND, OR DISCONTINUE THE AVAILABILITY OF THE DEVELOPER PLATFORM OR ANY PART OF IT AT ANY TIME. WE PROVIDE THE DEVELOPER PLATFORM, APP DATA, AND DOCUMENTATION "AS IS," AND YOU USE THEM AT YOUR SOLE RISK. SOME JURISDICTIONS PROVIDE FOR CERTAIN IMPLIED WARRANTIES, LIKE MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT; EXCEPT AS EXPRESSLY PROVIDED IN THE TERMS, AND TO THE EXTENT PERMITTED BY LAW, WE EXCLUDE ALL WARRANTIES, GUARANTEES, CONDITIONS, REPRESENTATIONS, AND UNDERTAKINGS.

b. LIMITATION OF LIABILITY

TO THE EXTENT PERMITTED BY LAW, ROOT AND ITS AFFILIATES, SUPPLIERS, AND DISTRIBUTORS WILL NOT BE RESPONSIBLE FOR LOST PROFITS, REVENUES, OR DATA; FINANCIAL LOSSES; OR INDIRECT, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES. TO THE EXTENT PERMITTED BY LAW, THE TOTAL LIABILITY OF ROOT AND ITS AFFILIATES, SUPPLIERS, AND DISTRIBUTORS UNDER OR ARISING OUT OF THE TERMS, INCLUDING FOR ANY IMPLIED WARRANTIES, IS LIMITED TO THE GREATER OF (I) THE AMOUNT YOU PAID US TO USE THE APPLICABLE PARTS OF THE DEVELOPER PLATFORM (OR, IF WE CHOOSE, TO SUPPLYING THEM TO YOU AGAIN) DURING THE SIX MONTHS BEFORE YOU FIRST ASSERT A CLAIM, OR (II) $100 (OR THE EQUIVALENT IN YOUR LOCAL CURRENCY). ROOT IS NOT LIABLE FOR THE CONDUCT OR CONTENT, ONLINE OR OFFLINE, OF ANY USER OF ROOT SERVICES. IN ALL CASES, ROOT AND ITS AFFILIATES, SUPPLIERS, AND DISTRIBUTORS WILL NOT BE LIABLE FOR ANY EXPENSE, LOSS, OR DAMAGE THAT IS NOT REASONABLY FORESEEABLE.

c. Indemnification

Unless prohibited by applicable law, you will defend (at our option), indemnify, and hold harmless Root and its affiliates, directors, officers, employees, and users from and against all claims, liabilities, damages, losses, costs, fees (including legal and accounting fees), and expenses relating to: (i) access to or use of the Developer Platform or App Data by you, those acting on your behalf, your App, or your users (including any incident of unauthorized access to or use of App Data); (ii) actual or alleged violation of the Terms by any of the foregoing; (iii) actual or alleged infringement of any third-party right (including intellectual property, proprietary, privacy, or publicity rights) by any of the foregoing; or (iv) your App, App Content, your Brand Features, or any content, data, technology, information, or materials provided or contributed by or through you, those acting on your behalf, your App, or your users. You will not settle any claim without our prior written consent. We may, at our sole discretion, elect to assume control of the defense and settlement of any claim.

Section 16: Definitions

"App" (or "Application") means any application or bot that accesses or uses the Developer Platform or to which we have assigned an App ID, including its client, server, and networking components and its manifest. "Your App" means any App that you own or operate. References to "App" include Bots (server-only Apps without a client GUI) unless the context indicates otherwise.

"App Content" means any data, information, technology, materials, or other content that you or those acting on your behalf add to Root services or otherwise make available to us in connection with the Developer Platform or your App, including your App's client and server code and assets as submitted, and content submitted, posted, or displayed by or through your App.

"App Data" means any data, information, or other content you or your App obtain through the Developer Platform (including community data such as messages, members, roles, files, and events, and any personal data), together with data stored in your App's hosted datastores. App Data includes your developer credentials and tokens.

"App Review" has the meaning set forth in Section 7(b).

"Brand Features" has the meaning set forth in Section 10(a).

"Developer Platform" means, collectively, Root's APIs, SDKs, developer tools, code-generation tooling, the Developer Portal, the Root Store, the Documentation, and the Root hosted runtime and associated services on which Apps execute.

"Developer Portal" means Root's developer portal and associated management surfaces for registering Organizations and Apps, managing credentials, and publishing App versions.

"Enforcement Reason" means we believe that: (i) you or your App have or may have violated any of the Terms (including by enabling or permitting violations of the Root Terms of Use or other Terms by users) or are negatively impacting us, the Developer Platform, other Root services, communities, or users; (ii) your Root account or developer credentials have been compromised, suspended, or terminated; (iii) action is necessary to comply with applicable law or regulation or is otherwise required by court order or governmental authority; or (iv) action is necessary to protect us from legal or regulatory liability.

"Organization" means an organization registered in the Developer Portal under which Apps are owned and managed.

"Root Store" means Root's surfaces for discovering and installing Apps into communities, including any store, directory, category, collection, search, or featured placement.

"Service Provider" means a person or entity you use to provide you services to develop or operate your App.

Effective date: July 22, 2026

Last updated: July 22, 2026

This Data Processing Addendum (this "Addendum") governs the processing of personal data that occurs when a developer builds, publishes, or operates an App or Bot on Root. It is part of, and is incorporated by reference into, the Root Developer Terms of Service ("Developer Terms"). Capitalized terms used but not defined in this Addendum have the meanings given in the Developer Terms.

In this Addendum, "Root," "we," "us," and "our" mean Root Communications, Inc. "You" and "your" mean the developer bound by the Developer Terms. "Data protection law" means the data protection and privacy laws that apply to the processing of personal data under this Addendum, which may include the European Union and United Kingdom General Data Protection Regulations, Brazil's Lei Geral de Proteção de Dados, and the California Consumer Privacy Act as amended by the California Privacy Rights Act. The terms "controller," "processor," "data subject," "personal data," and "processing" have the meanings given in the applicable data protection law.

Section 1: Roles of the Parties

Root is the controller of the personal data contained in App Data, and you act as Root's processor with respect to that personal data. As between you and Root, Root determines the purposes and means of processing that personal data, and you process it only to operate your App and only on Root's instructions, as described in Section 2. Root's own collection and use of personal data from users and communities is governed by the Root Privacy Policy.

This Addendum does not make you a controller of the personal data in App Data. If you wish to process any of that data for your own purposes, you must first obtain a separate lawful basis and Root's prior written agreement, and this Addendum would need to be revised to reflect that arrangement.

Section 2: Your Processing Instructions

You will process personal data in App Data only:

• to provide and operate your App's functionality as described in its listing and permitted by the Developer Terms and the Root Developer Policy;
• in accordance with the permissions your App declares in its manifest and that the community grants; and
• as otherwise instructed by Root in writing from time to time, including through the Developer Terms and the Documentation.

The Developer Terms, the Root Developer Policy, the Documentation, and this Addendum are Root's complete and documented instructions for your processing of personal data. You will not process personal data in App Data for any other purpose. In particular, and consistent with Section 6 of the Developer Terms and the Root Developer Policy, you will not sell, rent, or broker that data, use it for advertising or to build profiles of users outside your App, or use it to train or improve machine-learning or AI models, except where the Documentation expressly permits it or Root has given prior written consent. If you believe an instruction from Root violates data protection law, you will tell us promptly.

Section 3: Confidentiality

You will ensure that any person you authorize to process personal data in App Data, including your personnel and your Service Providers, is bound by an appropriate duty of confidentiality and processes that data only as this Addendum permits.

Section 4: Security, Sub-processors, Assistance, and Breaches

a. Security

You will implement and maintain the security measures required by Section 6 of the Developer Terms, including encryption of data you hold outside the Root hosted runtime and appropriate administrative, physical, and technical safeguards, and you will protect personal data in App Data against unauthorized access, loss, alteration, disclosure, or destruction.

b. Sub-processors

A Service Provider you engage to process personal data in App Data on your behalf is your sub-processor. Root gives you general authorization to use Service Providers, provided that you first bind each one in writing to data protection obligations no less protective than those in this Addendum, and that you remain fully responsible and liable for their acts and omissions. Root may object to your use of a Service Provider that Root reasonably believes does not meet these obligations or presents a risk to Root, the Developer Platform, communities, or users, and you will promptly stop using that Service Provider for processing personal data in App Data.

c. Assistance to Root

Taking into account the nature of the processing and the information available to you, you will provide reasonable assistance to Root so that Root can meet its obligations under data protection law, including responding to requests from data subjects to exercise their rights, carrying out data protection impact assessments, consulting with supervisory authorities, and demonstrating compliance. If you receive a request from a data subject or a supervisory authority that relates to personal data in App Data, you will not respond to it directly except to confirm that the request should be directed to Root, and you will promptly forward it to Root through the Root support form at https://www.rootapp.com/support.

d. Personal data breaches

You will notify Root without undue delay after becoming aware of any breach of security that leads to the accidental or unlawful destruction, loss, alteration, or unauthorized disclosure of or access to personal data in App Data, and you will provide the information and cooperation described in Section 6 of the Developer Terms so that Root can meet its own notification obligations.

Section 5: Return and Deletion

On the end of the relevant processing, including when a community uninstalls your App, when you stop operating your App, or when Root instructs you to do so, you will delete the personal data in App Data in your possession or control, and ensure your Service Providers do the same, except to the narrow extent applicable law requires you to retain it. This Section applies in addition to the retention and deletion duties in Section 6 of the Developer Terms and the uninstall duties in Section 4 of the Developer Terms. Root will decommission the hosted instances and databases for the affected App as described in the Developer Terms.

Section 6: International Transfers

You will keep personal data in App Data on the Root hosted runtime and will not transfer it to another country except as Section 6 of the Developer Terms permits. If any transfer of personal data does occur across a border in a way that data protection law restricts, you will ensure that an appropriate safeguard or other valid transfer mechanism required by that law is in place, and you will execute any further transfer terms Root reasonably requires. Root may restrict or condition your access to personal data in App Data as needed for Root to comply with data protection law. This Section replaces Section 13 of the Developer Terms to the extent of any conflict.

Section 7: Records and Audits

You will keep records of your processing of personal data in App Data sufficient to demonstrate your compliance with this Addendum, and you will make those records available to Root on request. Where data protection law requires it, you will allow for and cooperate with audits, including inspections, conducted by Root or an auditor Root appoints, on reasonable notice and subject to appropriate confidentiality protections.

Section 8: Precedence, Term, and Contact

This Addendum forms part of the Developer Terms. If there is a conflict between this Addendum and the rest of the Developer Terms about the processing of personal data, this Addendum controls for that conflict. This Addendum applies for as long as you process personal data in App Data, and the obligations that by their nature should continue, including those in Sections 3, 4(d), 5, and 7, survive the end of the Developer Terms.

If you have any questions about this Addendum, please contact us through the Root support form at https://www.rootapp.com/support.