Terms of Service

Riddle, LLC · Maryland limited liability company · SDAT Department ID W27515154 · 7608 Genevieve Blvd, Laurel, MD 20723 · legal@riddledevs.com

1. Agreement; clickwrap; order of documents

These Terms of Service (“Terms”) are a legally binding agreement between the business or professional that accepts them (“Customer,” “you”) and Riddle, LLC, a Maryland limited liability company (“Riddle,” “we,” “us”). They govern access to riddledevs.com, related marketing and billing pages, and the hosted software products Riddle makes available under these Terms, beginning with Riddle CRM.

You accept these Terms by (a) checking the acceptance box and completing Stripe Checkout, (b) signing an order that incorporates them, or (c) accessing the Platform after we have presented these Terms. Electronic records and signatures have the same effect as wet-ink signatures under the Maryland Uniform Electronic Transactions Act and the federal ESIGN Act. We will log the timestamp, email, and document versions associated with your acceptance.

The following documents form the agreement, in this order if they conflict: (1) a signed order or amendment; (2) the Subscription Agreement (fees, trial, renewal, cancellation, taxes); (3) these Terms; (4) the Privacy Policy. Product-specific addenda we publish for a later module (for example Riddle Inventory) apply to that module only. A Data Processing Addendum, if executed, controls processing of personal data to the extent it conflicts with the Privacy Policy.

If you do not agree, do not create an account or complete Checkout.

2. Definitions

Administrator means the Authorized User who controls the Tenant (invites, permissions, billing contact). At MVP there is one Administrator, who is also the sole Authorized User.

Authorized User means a natural person Customer permits to use the Platform under Customer’s Tenant. Sharing one login among two or more people is not permitted.

Beta Feature means a feature identified as beta, preview, or coming soon, including Delegations until Riddle marks it generally available.

Confidential Information means non-public information disclosed by one party to the other that is marked confidential or that a reasonable person would understand is confidential, including Customer Data, these commercial terms, and Riddle’s non-public technical information. It does not include information that is public through no fault of the receiver, independently developed, or rightfully received from a third party without duty.

Customer Data means data, files, messages, listing information, documents, and other content Customer or its Authorized Users submit to the Platform, including personal information of Customer’s clients.

Module means a distinct Riddle product. Riddle CRM is the first Module. Later Modules (including a planned inventory-management product) may share components and infrastructure but do not share Customer Data across Modules or Tenants except as Customer configures inside that Tenant.

Platform means the hosted Riddle CRM application and any other Module we expressly include, plus APIs, documentation, and support we provide.

Security Incident means unauthorized acquisition of computerized data that compromises the security, confidentiality, or integrity of personal information, as that concept is used in the Maryland Personal Information Protection Act, Md. Code, Com. Law § 14-3501 et seq. (“PIPA”).

Subprocessor means a third party Riddle engages to process Customer Data to provide the Platform (for example Stripe, Microsoft, Twilio).

Tenant means Customer’s isolated workspace in the Platform, including the Microsoft Entra External ID account Riddle provisions for that Customer.

3. Eligibility; who may buy; geographic scope

The Platform is offered only for commercial and professional use in the United States. You must be at least 18 years old and able to form a contract. Typical Customers include real-estate agents (as sole proprietors or through an entity), brokerages purchasing for associated agents, and property managers. Riddle does not verify real-estate licensure. Customer is solely responsible for complying with brokerage, MLS, and state-licensing rules that apply to Customer’s business.

We do not currently offer the Platform in the EU/UK or Canada (PIPEDA, Quebec Law 25, and GST/HST registrations are not in place). If your billing address or primary use is outside the United States, do not subscribe until we publish a territorial addendum.

You represent that you are not on an OFAC denied-party list and will not use the Platform in a comprehensively sanctioned jurisdiction.

The Platform is not directed to children. Do not submit personal information of anyone under 18 except as a client record you are lawfully permitted to hold in a professional file, and then only as needed for that professional purpose.

4. Product family; Riddle CRM; later Modules

Riddle CRM is the first commercial Module. At general availability it is intended to include Client and Property Journeys (buying, selling, leasing), Daily Brief, Prospecting, Relationships, Communications, Contacts, Property, Vendors, Work Orders, Forecasts, and Documents, as we enable them. Delegations is a near-term feature and is a Beta Feature until we say otherwise.

Later Modules (including Riddle Inventory) may reuse interface components, backend services, and Azure infrastructure. Shared infrastructure is not shared data. Customer Data in one Module or Tenant is not read, joined, sold, or used to train models for another Customer or Module except (a) as Customer itself grants through RBAC, or (b) as these Terms allow for security, billing, and telemetry.

Purchase of Riddle CRM does not include any other Module. Additional Modules are separate charges unless an order bundles them.

No MLS, IDX, or listing-feed integration is included at launch. If we later add one, we will publish an addendum; Customer—not Riddle—must hold any required MLS participant or vendor license unless we say otherwise in writing.

5. Accounts; identity; Authorized Users; anti-sharing

Paid and trial access requires an account in the Microsoft Entra External ID tenant Riddle operates for customers (the “Riddle Customer Tenant”). Checkout collects the email you designate and payment details through Stripe. Riddle’s systems subscribe to Stripe billing events and use those events to provision, disable, or re-enable the corresponding Entra account.

MVP seat rule. Each Tenant includes one Authorized User, who is the Administrator. You may not share that login, password, or session with any other person (including an assistant, team member, or “office login”). Concurrent use by more than one natural person, or credential sharing, is a material breach and grounds for suspension.

When Riddle generally releases additional seats or Delegations, Customer may designate additional Authorized Users only up to the number then permitted on the order. Riddle’s present design intent is limited Administrators (initially one, later up to two) plus, if offered, assistant or trainee users who remain under Customer’s supervision and each count as an Authorized User. Flexibility in role is not permission to pool one password across a brokerage.

You must keep credentials confidential, use MFA if we offer it, and notify us promptly of suspected compromise. You are responsible for all activity under your Tenant, including activity by people you invite. You may connect a work or personal email; the email used at Checkout is the provisioning and billing contact unless you change it in-product.

On non-payment, after Stripe’s dunning ends, or at the end of a canceled paid term, Riddle will disable interactive access. Customer Data is retained as described in Section 13 so you can export or resubscribe.

6. License; intellectual property; feedback

Subject to these Terms and a current trial or paid subscription, Riddle grants Customer a limited, non-exclusive, non-transferable, non-sublicensable, revocable right for Authorized Users to access the Platform for Customer’s internal business operations in the United States. No other license is granted. Riddle and its licensors own the Platform, software, documentation, trademarks (including Riddle), visual design, and all improvements. Customer does not receive any right to source code, except as a browser or app must download to run.

Customer owns Customer Data. Customer grants Riddle a worldwide, limited license to host, copy, transmit, display, and process Customer Data solely to provide, secure, support, and bill the Platform, to prevent abuse, and to create de-identified aggregate metrics that cannot reasonably identify Customer or an individual.

If you give feedback, you grant Riddle a perpetual, irrevocable, royalty-free license to use it without restriction. Feedback is not Customer Data.

You will not: reverse engineer except to the extent a law prohibits that restriction; copy the Platform; scrape or overload it; remove proprietary notices; use it to build a competing product by systematic extraction; or resell, rent, or white-label access except under a written partner agreement.

7. Customer Data; sensitive documents; roles

As between the parties, Customer is the owner and, where privacy law uses those terms, the controller or business of Customer Data. Riddle is a service provider / processor that processes Customer Data only on Customer’s instructions, which these Terms and in-product settings constitute.

The Platform may store documents Customer uploads, which can include listing photographs, contracts, identification documents, wire instructions, and Social Security numbers. Those categories include “personal information” under PIPA. Customer decides whether to upload them. Riddle encrypts data at rest and in transit using industry-standard methods and applies commercially reasonable administrative, technical, and physical safeguards aligned with PIPA § 14-3503. Encryption does not make Customer’s upload lawful or wise. Customer should not use the Platform as a general-purpose vault for consumer financial credentials, full payment-card PAN/CVV (those belong with Stripe), or data Customer is not allowed to hold.

Riddle does not sell Customer Data, does not use it for advertising networks, and does not use it to train generalized or third-party foundation models. Personalized AI features are not part of Riddle CRM at launch. If we later offer features that learn from Tenant content, they will be off by default and will require a separate upgraded data agreement and an affirmative opt-in.

Telemetry is product-analytics and operational metadata (for example counts of records, document sizes, feature flags). Application logs are designed not to include personal information. We may use telemetry to operate, debug, and improve the Platform.

8. Confidentiality

Each party will use the other’s Confidential Information only to perform under the agreement and will protect it with at least the care it uses for its own similar information, and no less than reasonable care. Disclosure is allowed to employees, counsel, accountants, and Subprocessors who need it and are bound by confidentiality, and as required by law (with notice if legally permitted). These duties last for three (3) years after the agreement ends, and indefinitely for trade secrets and for Customer Data until it is deleted as Section 13 requires.

9. Security; Security Incidents; Maryland PIPA timing

Riddle will maintain commercially reasonable safeguards appropriate to the nature of the Customer Data the Platform is designed to hold, including encryption in transit and at rest, Tenant isolation, RBAC, and access logging. We do not claim SOC 2, ISO 27001, or a completed penetration test in these Terms. Those may be added when they exist.

If Riddle discovers a Security Incident affecting Customer Data, Riddle will:

  1. Investigate in good faith and contain the incident;
  2. Notify Customer without unreasonable delay and, because Riddle typically maintains Customer Data on Customer’s behalf, no later than ten (10) days after discovery, so Customer can meet its own notice duties to individuals (PIPA § 14-3504);
  3. Where Riddle itself owns or licenses personal information of Maryland residents, notify affected individuals as soon as reasonably practicable and not later than forty-five (45) days after discovery, unless a permitted law-enforcement delay applies; and
  4. Share facts reasonably needed for Customer to notify individuals, regulators, or consumer reporting agencies.

Customer is responsible for notifying its own clients except where the law places that duty on Riddle as owner/licensor. Notice to legal@riddledevs.com is the channel for Customer to report a suspected incident on its side (lost device, stolen password, misdirected wire document).

10. Communications features; Twilio; Microsoft; Google

The Platform can send Customer-generated email and SMS, including scheduled template messages, and can connect to Microsoft and Google email, calendar, and contacts if Customer authorizes that connection. Riddle uses Twilio to forward SMS that Customer initiates or schedules. Riddle does not autonomously originate marketing SMS without Customer’s in-context action or schedule.

Customer is the sender of its messages. Customer represents that it has all consents and has made all disclosures required by the Telephone Consumer Protection Act, CAN-SPAM, state mini-TCPA laws, carrier A2P/10DLC rules, and brokerage advertising rules before using Communications. Customer will honor opt-outs. Riddle may suspend sending that appears to violate law, carrier rules, or Twilio acceptable use.

If Customer connects Google or Microsoft, Customer’s use of those services is governed by those providers’ terms. Riddle processes tokens and data only to provide the integration Customer enabled. Customer can disconnect those accounts in-product or by revoking access at the provider.

11. Acceptable use; Fair Housing; professional-advice disclaimer

Customer and Authorized Users will not: (a) break or probe another Tenant or RBAC; (b) upload malware; (c) send spam or unlawful messages; (d) impersonate others; (e) use the Platform for any purpose prohibited by the Fair Housing Act, 42 U.S.C. § 3601 et seq., the Equal Credit Opportunity Act, or analogous state law (including discriminatory screening, steering, or advertising copy); (f) store or process data they are not legally entitled to hold; (g) use the Platform in a way that infringes IP or privacy rights; or (h) resell access except in writing with us.

Riddle is software, not a broker, lawyer, tax advisor, or MLS. Output, templates, journey stages, and forecasts are informational. Customer remains responsible for its listings, contracts, trust-account and wire procedures, and licensed activity. Riddle is not a party to Customer’s client relationships.

We may suspend access immediately for abuse, legal risk, a Security Incident, or non-payment as the Subscription Agreement describes. We will restore access when the condition is cured unless the agreement has ended.

12. Subprocessors and third-party services

Current Subprocessors and connected services include:

Those providers’ terms apply to their services. Riddle may change Subprocessors with notice on this site or by email to the billing contact, and will remain responsible for their performance as if Riddle’s own, to the extent the law allows. We do not freeze a single Azure region in these Terms; processing of Customer Data is intended to remain in the United States unless we notify you of a change.

13. Term; suspension; export; deletion

These Terms last from acceptance until all subscriptions and trials under them have ended. Either party may terminate for material breach if the breach is not cured within fifteen (15) days after written notice (immediate for credential sharing, illegal content, or unpaid invoices that Stripe has marked uncollectible).

On disable or termination: interactive access ends at the close of the last paid period (or at trial end if you do not convert). For thirty (30) days after disable, Riddle will, on written request to the billing or legal email, permit Customer to export Customer Data in a then-available structured format or to resubscribe and reconnect the Tenant. Rolling backups expire on a cycle not to exceed ninety (90) days. After that, Riddle will delete or de-identify Customer Data from production systems, except records we must keep for tax, accounting, dispute, or legal hold. Disabled Entra accounts may remain disabled (not immediately deleted) so a later successful payment can re-enable without a second signup.

Fees, license restrictions, IP, Customer Data licenses needed for wind-down, confidentiality, indemnities, limitations of liability, and this Section survive termination.

14. Fees

Fees, the fourteen-day trial, the fifty percent first-month promotional price, monthly and yearly cadences, auto-renewal, cancellation, taxes, and the no-refund rule after trial are in the Subscription Agreement. If these Terms and that Agreement conflict on those subjects, that Agreement controls.

15. Support; availability; Beta Features; no SLA

Riddle will use commercially reasonable efforts to make the Platform available and to respond to support requests sent to the addresses we publish. These Terms do not include a service-level agreement, uptime percentage, or service credits. We do not pass through Microsoft Azure service credits. Planned maintenance and events outside our reasonable control (including Azure regional incidents, internet or DNS failures, and third-party identity or SMS outages) are not a breach.

Beta Features, including Delegations until GA, are provided AS IS, may be changed or withdrawn, and are excluded from any availability commitment.

Customer’s exclusive remedy for dissatisfaction with availability is to stop using the Platform and to cancel under the Subscription Agreement, subject to that Agreement’s refund rules.

16. Warranties; disclaimers

Each party represents it has authority to enter this agreement. Customer represents that its use is commercial, that information it provides at Checkout is accurate, and that it has the rights to Customer Data it uploads and to the messages it sends.

EXCEPT AS EXPRESSLY STATED, THE PLATFORM, DOCUMENTATION, AND INTEGRATIONS ARE PROVIDED “AS IS” AND “AS AVAILABLE.” RIDDLE DISCLAIMS ALL OTHER WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT, TO THE MAXIMUM EXTENT MARYLAND LAW ALLOWS. RIDDLE DOES NOT WARRANT THAT THE PLATFORM WILL BE UNINTERRUPTED, ERROR-FREE, OR FREE OF HARMFUL COMPONENTS, OR THAT IT WILL MEET CUSTOMER’S BROKERAGE, MLS, OR REGULATORY REQUIREMENTS. SOME NON-WAIVABLE IMPLIED WARRANTIES MAY APPLY; IN THAT CASE THEY LAST FOR THIRTY (30) DAYS FROM FIRST ACCESS UNLESS A LONGER PERIOD CANNOT BE DISCLAIMED.

17. Indemnification

By Customer. Customer will defend, indemnify, and hold harmless Riddle and its members, officers, and personnel from third-party claims, damages, and reasonable attorneys’ fees arising out of: (a) Customer Data; (b) Customer’s messages and calls (including TCPA, CAN-SPAM, and carrier claims); (c) Customer’s alleged violation of Fair Housing, licensing, MLS, advertising, or wire-fraud procedures; (d) Customer’s use of Google, Microsoft, or Twilio accounts; (e) Authorized Users’ misuse, including credential sharing; and (f) Customer’s breach of these Terms.

By Riddle. Riddle will defend Customer against a third-party claim that the Platform, as provided by Riddle and used as authorized, directly infringes a U.S. patent, copyright, or trademark, and will pay resulting damages and costs finally awarded, provided Customer gives prompt notice, reasonable cooperation, and exclusive control of the defense. Riddle may (i) obtain a license, (ii) modify the Platform, or (iii) terminate the affected portion and refund prepaid unused fees for that portion. This indemnity does not apply to claims based on Customer Data, combinations with non-Riddle products, or use after we tell you to stop. This Section 17 is Customer’s exclusive remedy for IP infringement claims against the Platform.

The indemnifying party will not settle a claim that imposes an admission or unindemnified obligation on the indemnified party without consent, not to be unreasonably withheld.

18. Limitation of liability

TO THE MAXIMUM EXTENT MARYLAND LAW ALLOWS, NEITHER PARTY WILL BE LIABLE TO THE OTHER FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES, OR FOR LOST PROFITS, LOST REVENUE, LOST DATA (EXCEPT DIRECT COST TO RESTORE CUSTOMER DATA FROM BACKUPS RIDDLE ACTUALLY MAINTAINS), BUSINESS INTERRUPTION, OR COST OF SUBSTITUTE SERVICES, EVEN IF ADVISED OF THE POSSIBILITY, AND WHETHER IN CONTRACT, TORT, OR OTHERWISE.

General cap. Except for the Super-Cap and Excluded Claims, each party’s total liability arising out of the agreement will not exceed the amounts Customer actually paid to Riddle for the Platform in the twelve (12) months before the claim, or $500, whichever is greater (the “General Cap”).

Super-Cap. Riddle’s aggregate liability for (i) Riddle’s breach of Section 8 (Confidentiality) with respect to Customer Data, (ii) a Security Incident caused by Riddle’s failure to implement the safeguards described in Section 9, and (iii) Riddle’s indemnity in Section 17 (IP) will not exceed three times (3×) the General Cap.

Excluded Claims (not limited by the General Cap or Super-Cap): (a) Customer’s payment obligations; (b) a party’s fraud or willful misconduct; (c) Customer’s indemnity obligations in Section 17; (d) infringement of Riddle’s intellectual property by Customer; and (e) liabilities that Maryland law does not allow to be limited (including certain personal-injury claims, if any).

The caps apply in the aggregate to a party and its personnel, not per incident. The parties agree the pricing reflects this allocation of risk. This Section 18 applies to the fullest extent Maryland law permits and does not limit non-waivable rights.

19. Changes

We may update these Terms for legal changes, new Modules, or product changes. We will post the new version with a new “Last revised” date and, for a material change that adversely affects Customer, email the billing contact at least thirty (30) days before it takes effect. If you do not agree, cancel before the effective date; continued use after that date is acceptance. Changes required by law may take effect on shorter notice.

20. Notices

Notices to Riddle must be sent to legal@riddledevs.com and, if to the company officially, to Riddle, LLC, 7608 Genevieve Blvd, Laurel, MD 20723, Attn: Resident Agent. Notices to Customer may be sent to the billing email on the Stripe customer record and are effective when sent. Either party may update addresses by notice.

21. Dispute resolution; governing law; venue

Before filing a lawsuit, the complaining party will send a written description of the dispute and allow thirty (30) days for good-faith resolution, except that a party may seek immediate injunctive relief to protect IP, Confidential Information, or Platform security.

Maryland law governs, without regard to conflict-of-law rules. Exclusive venue lies in the state courts sitting in Howard County, Maryland, or in the United States District Court for the District of Maryland, and each party consents to personal jurisdiction there. Injunctive relief to protect the Platform or IP may also be sought in any court of competent jurisdiction.

Jury trial. EACH PARTY WAIVES ANY RIGHT TO A JURY TRIAL IN ANY ACTION ARISING OUT OF THESE TERMS, TO THE EXTENT MARYLAND LAW ALLOWS.

Class waiver. Customer may bring claims against Riddle only in Customer’s individual capacity, not as a plaintiff or class member in a class, collective, or representative proceeding, to the extent that waiver is enforceable. If a court finds this waiver unenforceable as to a particular claim, that claim must be severed and litigated individually still in the venues above.

These Terms do not shorten any statute of limitations Maryland law makes non-waivable.

22. Export; government

Customer will comply with U.S. export-control and sanctions laws. The Platform is commercial computer software. If Customer is a U.S. government end user, Riddle provides only those rights these Terms grant, consistent with FAR 12.212 and DFARS 227.7202.

23. Miscellaneous

Entire agreement. These Terms, the Subscription Agreement, the Privacy Policy, and any order are the entire agreement and supersede prior discussions on the subject. Amendment must be in a written (including electronic) instrument, except for the change process in Section 19. Waiver must be express; failure to enforce is not a waiver. Severability: if a provision is unenforceable, the rest remains in effect, and the provision is modified to the minimum extent needed. Assignment: Customer may not assign without Riddle’s consent, except to a successor to substantially all of Customer’s business that is not a Riddle competitor; Riddle may assign to an affiliate or in a financing or sale of substantially all assets. Force majeure: neither party is liable for delay caused by events beyond its reasonable control, including cloud-provider regional failure, but this does not excuse payment. Independent contractors. No partnership or agency. No third-party beneficiaries except Riddle personnel protected by the indemnity. Headings are for convenience. Counterparts / electronic: electronic acceptance is valid. Interpretation: “including” means “including without limitation.”

24. Contact

Riddle, LLC · Maryland limited liability company · SDAT Department ID W27515154 · Principal office and resident agent: 7608 Genevieve Blvd, Laurel, MD 20723 · legal@riddledevs.com · privacy@riddledevs.com · billing@riddledevs.com

Questions about these Terms: legal@riddledevs.com. Do not send wire instructions or Social Security numbers to those mailboxes.