In effect from 12 October 2026
These terms are between Overlook Innovations, LLC, a Delaware limited liability company ("we", "us"), and the firm that accepts them ("you", "your firm"). They govern your use of Cartenda — the "Service".
They cover the Service and nothing else. We do other work under the same company; if you have engaged us for anything besides Cartenda, that engagement has its own agreement and this one does not touch it.
Cartenda lets your firm build a form, send it to a named client, and receive their answers and documents in one place. Your clients do not create accounts. They open a link, answer, upload what you asked for, and leave.
Unless you turn it off, we also read the documents that arrive: identifying what each one is, pulling out the figures you asked for, and summarizing a submission for your inbox. Documents kept in your own storage are never read.
You need an account to use the Service, and you are responsible for what happens under it — including everything done by people you invite to your workspace. Keep credentials to yourself, use them honestly, and tell us at security@cartenda.com if you think someone else has them.
You must be able to enter a contract, and you must not be barred from receiving US software services.
The documents and answers your clients send belong to your firm's relationship with them, not to ours. You decide what to ask for, who to ask, how long it is kept, and when it is deleted. We hold it and act on your instructions.
Our obligations for that information are set out in the Data Processing Addendum, which forms part of these terms. If anything here conflicts with it about how we handle your clients' information, the Addendum wins.
Two things stay yours to get right, because we cannot:
Some firms that use the Service also prepare tax returns. Where your firm is a tax return preparer and the information you collect is tax return information, we handle it as an auxiliary service provider under Treasury Regulation §301.7216-2(d). We use it only to provide the Service to you, we do not disclose it to anyone else except as those rules allow, and we do not use it to train models — ours or anyone else's. See section 7.
Your own obligations under §7216, including any consent you need from a client before disclosing their information, remain yours.
Do not use the Service to break the law, to send anything you have no right to send, or to store material unrelated to your firm's work with a client. Do not attempt to reach another firm's workspace, interfere with the Service, work around its limits, or scan or test it without asking us first at security@cartenda.com — we will usually say yes.
Do not send your clients messages through the Service that they have not agreed to receive, and do not use it to contact people who are not your clients.
If something here is being abused in a way that puts other firms' documents at risk, we may suspend the workspace responsible. We will tell you why, and we will restore it as soon as the cause is dealt with.
Current plans, what each one includes and what they cost are on our pricing page and in your workspace's billing settings. They are not restated here so that a change to a price is not a change to a contract.
We do not sell your clients' information, and we do not share it for advertising. We do not use the contents of your clients' documents to train machine-learning models, ours or anyone else's, and we do not permit our providers to.
Where the Service reads a document, that processing happens under our control for the purpose of returning a result to you. We use aggregate operational data — counts, sizes, timings, error rates — to run and improve the Service. That never includes the contents of a document.
A workspace keeps documents indefinitely unless you set a retention window. If you set one, documents are permanently deleted rather than hidden when it expires, and we email you before they go. Which records you are required to keep, and for how long, is for you to decide.
A file you keep in a client group's vault is outside the window: you put it there to be kept, and it is permanently deleted when you remove it, when the client group is deleted, or when your workspace closes.
One kind of document goes sooner, whatever you set. A reply sent through a form's open link by somebody you have not confirmed as your client is not yet yours to read, and is permanently deleted 30 days after it arrives unless you confirm them first.
The record of what you asked for, what arrived and what you decided outlives the documents themselves, because that record is your firm's, not your client's. If you need something else deleted sooner, tell us at privacy@cartenda.com.
We work to keep the Service available and we do not promise that it always will be. There is no uptime commitment in these terms and no service credit. We will tell you about planned work that will interrupt you.
How the Service is built and run is described on our security page. Tell us at security@cartenda.com if you find a problem; we will not pursue anyone who reports one in good faith and gives us a reasonable chance to fix it.
You own your firm's information and everything your clients send you. You give us permission to hold, transmit and process it only so far as we need to in order to provide the Service to you.
We own the Service — the software, the interface and everything about it. These terms give you the right to use it, and nothing more. If you send us feedback we may act on it without owing you anything for it.
The Service is provided as it is. To the extent the law allows, we disclaim all implied warranties, including merchantability, fitness for a particular purpose and non-infringement.
In particular, and because it matters here: the Service reads documents and extracts figures from them as an aid, not as a substitute for your professional judgement. Automated classification and extraction can be wrong. Nothing it produces is advice, and nothing in it is checked by a person before you see it. Check what it gives you before you rely on it.
Malware scanning reduces risk. It does not eliminate it.
To the extent the law allows, neither party is liable to the other for indirect, incidental, special or consequential loss, or for lost profits, revenue or goodwill, whether or not it was foreseeable.
Our total liability arising out of or relating to these terms, for all claims together, is limited to what you paid us in the twelve months before the event giving rise to the claim.
These limits do not apply to your obligation to pay, to either party's fraud or wilful misconduct, or to anything the law does not permit to be limited.
You will defend and indemnify us against claims brought by a third party arising from information you collected through the Service that you had no right to collect, or from your use of the Service in breach of these terms — except so far as the claim arises from something we did wrong.
We may change these terms. For a change that materially affects you, we will give at least 30 days' notice by email to your workspace's owner (or, if the owner's address no longer accepts our email, to its admins) and show a notice in the application. Continuing to use the Service after a change takes effect means you accept it. If you do not, cancel before then.
The version in force is always the one published here, with the date it took effect at the top.
Send legal notices to legal@cartenda.com. We will send them to the email address on your workspace's owner account, so keep it current — a notice we send there is a notice you have received. If that address no longer accepts our email, because it bounced or our mail was reported as spam, we send them to your workspace's admins instead.
These terms are governed by the laws of the State of Arkansas, without regard to conflict-of-laws rules. Any dispute goes to the state or federal courts in Pulaski County, Arkansas, and both of us agree to that.
If a provision is unenforceable, the rest stands. Not enforcing something is not giving it up. You may not transfer these terms without our written agreement; we may transfer them to a successor to our business. Nothing here creates a partnership, and nobody but you and us can enforce anything in it.
These terms, together with the Data Processing Addendum and the Privacy Policy, are the whole agreement between us about the Service.