Stripe
Weighted across nine legal categories. Lower is worse.
Executive summary
This is the contract you accept when you take payments through Stripe as a business or sole proprietor. It is professionally drafted and more balanced than most platform agreements in places: the liability cap and the intellectual property indemnity run both ways, Stripe gives you 30 days notice before raising fees, and Stripe cannot hide behind its own gross negligence, fraud or willful misconduct. The hard edges are on control and recourse. Stripe can suspend your account immediately whenever it reasonably believes there is risk, can close your account at any time for convenience in most countries, can rewrite this agreement by posting a new version that takes effect on posting, and can debit your bank account without separate notice. If you have a serious dispute, you are pushed into private individual arbitration with a class action waiver in the US, no small claims carve-out, no opt-out window, and a loser-pays rule that can leave you paying Stripe's legal fees. Users in the EEA, UK, Australia, New Zealand, Japan, Singapore and Hong Kong get the class waiver removed, and Brazilian users go to the courts of Sao Paulo instead of arbitration.
Category breakdown
Acceptance of Terms & Scope
Contract formation and service boundaries
The agreement is clearly structured, dated, and tells you upfront that arbitration and a class action waiver apply, which is better disclosure than most documents give. Acceptance happens the moment you first access or use the Services, and the contract pulls in a long list of outside documents that can change without a new signature. Age rules are unusual for a financial product: 13 is the floor, with an adult representative required for anyone under 18, except in Brazil where 18 is the minimum.
Key findings
- The agreement binds you as soon as you first access or use the Services, not only when you click a box
- The preamble flags the arbitration clause and class action waiver in plain sight before the terms begin
- Scope covers the General Terms plus every product-specific Service Term, the Data Processing Agreement, the Pricing Page and the Prohibited Businesses List, all of which live at separate URLs
- Personal, family and household use is banned, so this is a business agreement and consumer protection rules may not shield you
- Minimum age is 13 with an adult representative who becomes liable for your account, and 18 in Brazil
- Which Stripe entity you contract with depends on your account country, and each country brings different Regional Terms
Evidence from the document
This Agreement is effective when User first accesses or uses the Services or Stripe Technology
Disputes between User and Stripe are subject to a class action waiver and will be resolved by individual binding arbitration
use the Services for personal, family, or household purposes
Only people 13 years of age or older may open a Stripe Account and use the Services and Stripe Technology.
Recommendations
- Read the Service Terms for each Stripe product you actually turn on, since they override these General Terms where they conflict
- Check the Regional Terms for your account country before assuming the main text applies to you
- Save a dated copy of the agreement as it stands on the day you sign up
- If you are a sole proprietor, understand that you are personally bound alongside your business
User Accounts
Registration, suspension, and termination
You can close your account whenever you like, but Stripe holds far broader powers on its side. It can suspend you immediately on eight separate grounds, most of them resting on what Stripe reasonably believes rather than on anything you have actually done, and it can terminate for convenience at any time in most countries with no fixed notice period. There is no appeal process, no cure period for suspension, and Stripe has no obligation to keep your data after the relationship ends. For a payments account this is severe, because suspension freezes the money flowing through your business.
Key findings
- Stripe can suspend access immediately if it reasonably believes your activity is risky, unlawful or fraud-increasing, with no warning and no cure period
- Stripe can terminate for convenience at any time in most regions; only Australia and New Zealand users get a guaranteed 30 days notice
- You get a 10 day cure period for material breach, but every suspension ground doubles as an immediate termination ground
- The document sets out no appeal or human review process for a suspended or closed account
- Stripe is not obligated to retain your data after the term, so exports should be done before you leave
- Failing to respond promptly to a request for information, or not updating to the latest version of the technology, is itself a suspension ground
Evidence from the document
Unless otherwise agreed in writing, Stripe may terminate this Agreement or close User’s Stripe Account at any time.
Stripe may immediately suspend User’s access to the Stripe Technology and use of any or all of the Services if:
Stripe reasonably believes User is engaged in a business or activity that may be unlawful, enables or facilitates (or may enable or facilitate) illegal or prohibited transactions, may be harmful to a third party
Stripe is not obligated to retain data that it receives from or through User after the Term
User may terminate this Agreement at any time by closing its Stripe Account via the Stripe Dashboard.
Recommendations
- Export transaction, payout and customer data on a regular schedule so a sudden closure does not strand your records
- Answer Stripe information and compliance requests fast, since delay alone is a listed suspension trigger
- Check the Prohibited and Restricted Businesses List against your actual product line before you scale
- Keep a secondary payment processor configured if payments are critical to your business
Intellectual Property & UGC
Content ownership and licensing
Ownership lines are clean: Stripe keeps its technology, you keep yours, and nothing transfers. The problem is the licence you hand over. Any Content you give Stripe carries a perpetual, irrevocable, royalty-free licence that Stripe can use for its internal business purposes, and Feedback you offer is licensed for any purpose at all, with both surviving termination. Stripe may also put your logo in its sales and marketing materials without asking first.
Key findings
- You keep ownership of your material and Stripe keeps ownership of its technology, with no joint development or assignment
- The licence you grant over your Content is perpetual and irrevocable, and covers Stripe internal business purposes as well as running the service
- Feedback you send is licensed to Stripe for any purpose, with no restriction or obligation back to you
- Stripe may use your trademarks in its marketing and on customer pages without seeking consent first, subject only to guidelines you supply in writing
- The Content licence and the Feedback licence both survive termination of the agreement
- Content is defined to exclude Personal Data, which narrows the sweep of the licence
Evidence from the document
perpetual, worldwide, non-exclusive, irrevocable, royalty-free license to use the Content to develop, improve, and provide Services and Stripe Technology and for Stripe’s internal business purposes.
Feedback is voluntary and User grants to Stripe, on behalf of itself and its Affiliates, a perpetual, worldwide, non-exclusive, irrevocable, royalty-free license to use that Feedback for any purpose.
As between the parties, Stripe, its Affiliates, and its third party licensors own all IP Rights in the Services, the Stripe Technology, Stripe Data, the Stripe Marks, the Documentation, and the Stripe Website.
in Stripe sales and marketing materials and communications
Recommendations
- Send Stripe only the content it needs to run your integration, since anything you upload is licensed permanently
- Give Stripe written trademark usage guidelines early if you care how your brand appears in its marketing
- Treat product suggestions to Stripe as free to use, because Feedback carries no compensation or attribution
- Keep confidential designs and proprietary material out of support tickets and shared assets
Data Privacy
Data collection, usage, and protection
The agreement points to a separate Data Processing Agreement, a Data Transfers Addendum and a Data Security Exhibit rather than spelling out privacy commitments here, so much of the real detail sits outside this document. What is here is reasonable: both sides promise commercially reasonable safeguards, GDPR and CCPA definitions are adopted, and Canadian users get an explicit no-sale promise. The weak point is that you carry the loss from any unauthorized access unless Stripe was grossly negligent or acted deliberately, which leaves ordinary Stripe negligence on your side of the line in most regions.
Key findings
- The Data Processing Agreement and Data Transfers Addendum are incorporated by reference and hold the substantive privacy terms
- Both parties must maintain commercially reasonable administrative, technical and physical safeguards, and Stripe is bound by a Data Security Exhibit
- You carry the losses from hacking or unauthorized access unless Stripe was grossly negligent, fraudulent or acted willfully
- You must notify Stripe immediately of any incident on your systems, and you are liable if you pass protected health information to Stripe
- Cross-border processing is disclosed for several regions, and in Canada Stripe promises not to sell or lease personal data it receives from you
- Personal Data definitions expressly track the GDPR and the CCPA
Evidence from the document
Each party will maintain commercially reasonable administrative, technical, and physical safeguards designed to protect data in its possession or under its control from unauthorized access, accidental loss, and unauthorized modification.
losses, damages or costs that User or others may suffer arising out of or relating to hacking, tampering, or unauthorized access of the Services, User’s Stripe Account, or Protected Data
User must notify Stripe immediately if User becomes aware of any unauthorized acquisition, modification, disclosure, access to, or loss of Personal Data on User’s systems
Stripe will not sell or lease Personal Data that Stripe receives from User to any third party.
Recommendations
- Read the Data Processing Agreement and the Data Security Exhibit, since this document defers to them on the substance
- Tell your own customers that their data may be processed outside your country, which several Regional Terms make your obligation
- Never send protected health information to Stripe, because liability for that disclosure falls on you
- Set up your own incident detection, since your notification duty to Stripe is immediate
Payment & Subscriptions
Billing and subscription management
Pricing is published and Stripe commits to 30 days notice before it raises a fee or makes a subscription plan materially worse, which is a genuine protection. Everything else leans hard in Stripe's favor. Fees are non-refundable and payment obligations are non-cancelable, there is no proration promise, free trials roll into paid pricing automatically, and Stripe can debit your bank account without separate notice while you waive any right you would otherwise have to revoke that authorization. Stripe can also recover money owed by pulling from reserves, balances, backup cards and accounts across related entities.
Key findings
- Fees paid are non-refundable and payment obligations are non-cancelable unless the law says otherwise
- Stripe gives at least 30 days notice of fee increases, new fees and materially adverse subscription plan changes
- Free trials convert automatically to the published pricing or to a purchased subscription plan when they end
- Stripe may debit your bank account without separate notice, and you waive any right to revoke that debit authorization where the law permits
- Debts can be recovered from reserves, your Stripe balance, funds payable to you, your bank accounts and a backup payment method, and across related entities
- Currency conversion happens at Stripe's own rate with its conversion fees added on top
- Brazil users are excluded from the bank debit authorization, and their setoff is limited to their own agreements
Evidence from the document
Unless User and Stripe otherwise agree in writing or if Law requires, payment obligations are non-cancelable and Fees paid are non-refundable.
Stripe will provide User with at least 30 days notice (or longer period if Law requires) of any increase in a Fee or any new Fees for any Service provided to User
User authorizes Stripe to debit and credit each User Bank Account without separate notice
If applicable debit scheme authorization rules grant User the right to revoke User’s debit authorization, then to the extent Law permits, User waives that right.
Stripe may make certain Services available to User on a trial basis free of charge until (i) the expiration or termination of the free trial, at which point the Fees stated on the Stripe Pricing Page will apply
Recommendations
- Diary your free trial end dates, since conversion to paid pricing is automatic
- Keep a buffer in the linked bank account, because Stripe can debit it without a separate notice
- Watch for fee change notices and use the 30 day window to compare processors before increases land
- Reconcile payouts against the pricing page every month, since there is no refund route for fees already paid
Limitation of Liability
Risk allocation and legal protection
The structure is mutual, which is better than the one-way disclaimers common in platform terms. Both sides give up indirect damages and both sides are capped at the fees you paid in the previous 12 months. Real carve-outs exist for gross negligence, fraud and willful misconduct, and Australia and New Zealand users also escape the disclaimers for ordinary Stripe negligence. The catch is the size of the cap. If you pay modest processing fees but move large sums, 12 months of fees may be a small fraction of what a failure could cost you, and personal injury, property damage and data loss are excluded outright.
Key findings
- Liability is capped at the fees you paid Stripe in the 12 months before the event, and the cap applies to both parties
- Excluded Claims lift the cap for gross negligence, fraud, willful misconduct, breaches of the use restrictions, confidentiality breaches and indemnity payments
- Indirect, consequential and punitive damages are excluded for both sides, along with lost profits, business interruption, personal injury, property damage and loss of data
- The Services are provided as is with all implied warranties disclaimed to the maximum extent the law allows
- Preview Services carry no warranty, no indemnity and no support, with liability capped at USD 1,000
- Brazil sets a floor on the cap at the greater of 12 months of fees or R$2,500, and Australia and New Zealand disapply the disclaimers for Stripe negligence, fraud or willful misconduct
- Your own payment obligations, fines and taxes are excluded from the cap, so the limit protects Stripe more than it protects you
Evidence from the document
a party’s total aggregate liability for damages and Losses for all claims arising out of or relating to the Agreement (including Data Incident Losses) is limited to the total Fees User paid to Stripe
neither party will have any liability in relation to this Agreement for any indirect, consequential, special, reliance, incidental, or punitive damages, lost revenue, profits, savings or goodwill, business interruption, personal injury
Stripe provides the Services and Stripe Technology “as is”, and to the maximum extent permitted by Law, Stripe does not make any, and disclaims all, warranties
(a) a party’s gross negligence, fraud, or willful misconduct, (b) User’s breach of Section 1.2 (Restrictions)
The disclaimers in this Agreement (including in Section 8.2 (Disclaimers)) do not apply to the extent any losses, damages or costs arise out of Stripe’s negligence, fraud or willful misconduct.
Recommendations
- Compare 12 months of your Stripe fees against your worst realistic loss, and buy insurance if the gap is large
- Do not run Preview or beta features in production, since liability there is capped at USD 1,000
- Keep independent records of transactions, because loss of data is an excluded damage
- If you are in Australia or New Zealand, note the extra carve-outs that apply to ordinary Stripe negligence
Indemnification
Legal responsibility allocation
The indemnity is better built than most, but the trigger is too wide. You must cover Stripe for losses arising from your use of the Services, which does not require you to have done anything wrong. Three things pull the score back up: intellectual property indemnities run both ways, neither side has to indemnify the other for losses caused by that other side's own negligence, fraud, willful misconduct or breach, and recoverable losses are limited to third-party claim amounts plus reasonable costs. Whoever gives the indemnity also controls and pays for the defense.
Key findings
- The user indemnity is triggered by your use of the Services, not only by your fault, which is the widest common trigger
- The intellectual property indemnity is mutual, so Stripe covers you for infringement claims about its own technology and marks
- Neither side owes indemnity for claims caused by the other side's negligence, fraud, willful misconduct or breach of the agreement
- Losses are defined as third-party awards plus reasonable third-party costs including reasonable legal fees, which limits open-ended billing
- The indemnifying party controls defense and settlement at its own expense and cannot impose non-monetary obligations on you without consent
- The indemnity survives termination, and Brazil swaps the negligence standard for the local fault standard
- The indemnified party list extends to Stripe affiliates, directors, employees and agents
Evidence from the document
User will indemnify Stripe, its Affiliates, and their directors, employees, and agents for all Losses arising from User’s use of the Services or Stripe Technology, gross negligence, willful misconduct, fraud, or material breach of the Agreement.
An indemnifying party’s obligations under Section 9.1 do not apply to the extent that the Claim or Losses arise out of an indemnified party’s negligence, fraud, willful misconduct, or breach of this Agreement.
each party will indemnify the other party, its Affiliates, and their directors, employees, and agents for all Losses, to the extent they arise from an IP Claim
it must promptly notify the indemnifying party of the applicable Claim and allow the indemnifying party to take exclusive control of its defense and settlement.
Recommendations
- Treat the indemnity as real exposure and check whether your business insurance covers contractual indemnities
- Notify Stripe promptly of any third-party claim, since delay can prejudice your position
- Keep your integration inside the documented use, because the trigger reaches your use of the service generally
- If you are in Brazil, the EU or the UK, know that sweeping consumer-style indemnities face enforceability challenges, but do not rely on that in a business dispute
Modification of Terms
How agreements can be changed
In most countries Stripe can rewrite this agreement by posting a new version, the change takes effect on posting, and the duty to notice it is placed on you. Continued use counts as acceptance. There are partial fixes: fee increases get 30 days notice, material reductions in functionality get reasonable notice, and Australia, New Zealand and Thailand get 30 days for material or detrimental changes while Malaysia gets 10 days. Those exceptions prove the rule for everyone else. Stripe can also assign the whole contract without your consent, with prior notice only in Australia and New Zealand.
Key findings
- Stripe can modify the agreement at any time by posting a revised version, effective on posting
- You are told it is your responsibility to check the Stripe Legal Page regularly for changes
- Continuing to use the Services after a change takes effect binds you to the new terms
- Australia, New Zealand and Thailand require 30 days notice for material or detrimental changes, and Malaysia sets a 10 day delay, but the US and EEA get no equivalent guarantee
- Fee increases and materially adverse subscription plan changes do carry at least 30 days notice everywhere
- The document is dated and links to a summary of the latest changes, but there is no archive of prior versions in the text
- Stripe may assign its rights and obligations without your consent, while you need Stripe's consent to assign yours
Evidence from the document
Stripe may modify this Agreement (or any portion of it) at any time by posting a revised version of the modified portion(s) on the Stripe Legal Page or by notifying User.
User is responsible for checking the Stripe Legal Page regularly for modifications to this Agreement.
By continuing to use Services after the effective date of any modification to this Agreement, User agrees to be bound by the
Modifications of the terms of this Agreement will come into effect 30 days after Stripe posts the modified version on the Stripe Legal Page
Recommendations
- Check the Stripe Legal Page on a set schedule, since posting is the only notice you are promised in most countries
- Archive a dated copy of the agreement each time you notice it has changed, so you can prove what applied when
- Pay particular attention to changes in the dispute resolution, fee and data sections, where value shifts hide
- If you are in Australia, New Zealand, Malaysia or Thailand, use the notice window your Regional Terms give you
Governing Law & Disputes
Jurisdiction and conflict resolution
Almost every dispute goes to private binding arbitration before a single arbitrator, covering past, present and future events. In the US, Canada, India, Indonesia, Malaysia, Mexico, Thailand and the UAE that comes with a class action waiver and a jury trial waiver, and there is no small claims carve-out and no opt-out window anywhere in the document. The loser-pays rule is the sharpest edge: the arbitrator or court must award the winner its legal fees, so a small business that loses can owe Stripe's costs on top of its own. Arbitration is confidential, which keeps patterns of complaints out of public view. The regional carve-outs are real and meaningful: the EEA, UK, Australia, New Zealand, Japan, Singapore and Hong Kong lose the class waiver, and Brazil replaces arbitration with the courts of Sao Paulo.
Key findings
- Binding individual arbitration applies to all disputes including those based on past events, with intellectual property claims sent to court instead
- A class, consolidated and representative action waiver applies in the US and several other markets, and is expressly removed in the EEA, UK, Australia, New Zealand, Japan, Singapore and Hong Kong
- Jury trial is waived in the US, Canada, India, Indonesia, Malaysia, Mexico, Thailand and the UAE for anything that reaches court
- The prevailing party recovers its reasonable legal fees and costs, and collection costs also fall on you if you owe money
- No small claims court carve-out and no arbitration opt-out window appear anywhere in the document
- US arbitration sits in San Francisco under AAA Commercial Arbitration Rules and the commercial fee schedule, with court venue in the Northern District of California and San Mateo County
- A mandatory 30 day notice and meeting period runs before arbitration can start
- Arbitration proceedings, evidence and the award must be kept confidential
- Brazil users go to the Judicial District of Sao Paulo rather than arbitration, and in Australia, New Zealand and Japan each side advances half of the arbitrator costs
Evidence from the document
all disputes, claims, and controversies, whether based on past, present, or future events, including those arising out of or relating to statutory or common law
any dispute arising out of or relating to this Agreement, whether in arbitration or in court, will be conducted only on an individual basis and not in a class, consolidated or representative action.
the arbitrator or court will award to the prevailing party, if any, its reasonable attorneys’ fees and costs incurred in connection with such proceeding.
each party knowingly and irrevocably waives any right to trial by jury in any action, proceeding or counterclaim arising out of or relating to this Agreement
The class action waiver in the preamble does not apply.
Recommendations
- Budget for the fact that a losing dispute can leave you paying Stripe's legal fees as well as your own
- Use the 30 day pre-arbitration notice and meeting period seriously, since it is the cheapest stage of the process
- Check your Regional Terms first, because the class waiver, the forum and the cost sharing all change by country
- Get legal advice before filing, since AAA Commercial Rules and San Francisco arbitration are expensive for a small business
Ex-TerCo provides automated analysis of legal documents for informational purposes. This is not legal advice. Terms can change at any time.