Data & Technology Terms

Last updated: September 2026

These Data & Technology Terms govern access to and use of TuBoleto’s Vendor Dashboard, warehouse management systems, integrations, APIs, automation tools, Product Assessment technology, Customer Agent and related digital services.

These terms supplement the International Vendor & Services Terms, Privacy Policy and any applicable service order, quotation or specific agreement.

1. Technology Services

Depending on the services purchased, TuBoleto may provide access to technology features including:

• Vendor Dashboard;
• inventory information;
• order information;
• shipment and tracking information;
• returns information;
• billing information;
• marketplace integrations;
• warehouse management functionality;
• APIs;
• webhooks;
• Product Assessment tools;
• Customer Agent functionality;
• automation tools; and
• other digital services.

2. Limited Right of Use

TuBoleto grants Vendor a limited, revocable, non-exclusive, non-transferable right to access approved technology services solely for Vendor’s authorized business use.

This right does not transfer ownership of any TuBoleto software, systems, code, models, interfaces or intellectual property.

3. TuBoleto Intellectual Property

TuBoleto retains all rights in its software, systems, dashboards, interfaces, workflows, databases, methodologies, documentation, models, prompts, automations, APIs and other proprietary technology.

4. Vendor Data

Vendor retains its rights in business information, product information, documents, content and other data supplied by Vendor, subject to the rights reasonably necessary for TuBoleto to provide the services.

5. Customer and Recipient Data

Where Vendor provides customer, recipient, buyer or shipping information, Vendor represents that it has lawful authority to provide that information for the intended business purpose.

TuBoleto may use such information to perform fulfillment, shipping, returns, support, fraud prevention, compliance and related services.

6. Purpose of Data Use

TuBoleto may process data where reasonably necessary to:

• provide contracted services;
• receive and manage inventory;
• process orders;
• coordinate shipments;
• manage returns;
• operate the Vendor Dashboard;
• maintain integrations;
• provide customer support;
• perform Product Assessments;
• prevent fraud;
• maintain security;
• meet legal obligations;
• improve operations; and
• administer the commercial relationship.

7. Authorized Users

Vendor is responsible for identifying persons authorized to use its TuBoleto account or technology services.

Vendor must promptly remove or report access for persons who are no longer authorized.

8. Credentials

Vendor is responsible for maintaining the confidentiality of usernames, passwords, API credentials, tokens and other authentication information issued to or controlled by Vendor.

Credentials must not be shared except with properly authorized personnel or service providers.

9. Account Security

Vendor must promptly notify TuBoleto if it reasonably believes an account, password, API key, token or integration credential has been compromised.

TuBoleto may temporarily restrict access while investigating a security concern.

10. External Accounts

Where Vendor connects Amazon, Walmart, eBay, Best Buy, ecommerce platforms, carriers or other third-party accounts, Vendor remains responsible for maintaining those accounts in good standing.

11. Authorization Scope

TuBoleto will request or use access reasonably related to the services being provided.

Vendor authorizes TuBoleto to use approved credentials or integrations only for legitimate operational purposes within the applicable service scope.

12. Revocation of Access

Vendor may revoke third-party access subject to any technical or contractual limitations of the external platform.

Revocation may prevent TuBoleto from continuing services that depend on the integration.

13. Instructions Through Technology

Instructions submitted through the Vendor Dashboard, API or another approved authenticated system may be treated as instructions from Vendor.

Vendor must ensure that users entering instructions have appropriate authority.

14. Sensitive Actions

TuBoleto may require additional verification before carrying out sensitive actions such as:

• inventory removal;
• inventory destruction;
• account changes;
• payment changes;
• credential changes;
• high-value transfers;
• integration changes; or
• other material instructions.

15. WMS Information

TuBoleto may display inventory and operational information through its warehouse management systems.

System records are intended to reflect operational activity but may be subject to reconciliation, correction, physical counts, returns, carrier updates or other later adjustments.

16. Marketplace Synchronization

Inventory, orders and other information may be synchronized with marketplaces or ecommerce platforms.

TuBoleto does not guarantee instantaneous synchronization where processing depends on third-party systems, APIs, connectivity or platform availability.

17. Prohibited Use

Vendor must not use TuBoleto technology services to:

• gain unauthorized access to systems or accounts;
• circumvent security controls;
• introduce malicious code;
• interfere with service availability;
• scrape or extract data except as expressly permitted;
• reverse engineer protected technology except where legally permitted;
• misuse personal information;
• impersonate another person or business;
• perform fraudulent activity; or
• use the services in violation of applicable law.

18. Security Incidents

Vendor must promptly notify TuBoleto of any suspected unauthorized access, credential compromise, data exposure, malicious activity or other security incident involving Vendor’s use of TuBoleto systems.

TuBoleto may suspend integrations, credentials or access where reasonably necessary to contain or investigate a security concern.

19. Third-Party Service Providers

TuBoleto may use hosting providers, cloud services, payment providers, carriers, marketplaces, analytics providers, communications providers, artificial intelligence providers and other service providers to support its operations.

Those providers may process information to the extent reasonably necessary to perform services for TuBoleto.

20. Processing Outside Canada

Some service providers or technology infrastructure may process or store information outside Canada.

Where information is processed in another jurisdiction, it may be subject to the laws and lawful access requirements of that jurisdiction.

21. Artificial Intelligence and Automation

TuBoleto may use automated systems and AI-assisted tools to support activities such as:

• Product Assessment;
• classification;
• research;
• comparison;
• document preparation;
• customer support;
• fraud detection;
• workflow automation;
• operational analysis; and
• other service functions.

TuBoleto may apply human review where appropriate based on the nature and risk of the activity.

22. Automated Outputs

Automated or AI-assisted outputs may depend on Vendor data, third-party information, models, rules and assumptions.

Vendor should not treat automated outputs as a substitute for professional legal, customs, tax, regulatory or other specialized advice where such advice is required.

23. Aggregated and De-Identified Information

TuBoleto may use aggregated or reasonably de-identified information for analytics, forecasting, service improvement, security, capacity planning and business intelligence where such use does not reasonably identify an individual Vendor or customer.

24. Data Accuracy

Vendor is responsible for the accuracy of data it submits or transmits to TuBoleto.

TuBoleto may correct operational records where reliable evidence demonstrates that an adjustment is required.

25. Retention

TuBoleto may retain information for as long as reasonably necessary to provide services, administer accounts, comply with legal obligations, preserve evidence, resolve disputes, maintain financial records or protect legitimate business interests.

26. Deletion and Anonymization

When information is no longer reasonably required, TuBoleto may delete, anonymize or securely archive it in accordance with applicable policies and legal obligations.

Immediate deletion may not be possible where information remains in backups, financial records, legal records, security logs or systems subject to retention requirements.

27. Privacy Requests

Requests concerning access to or correction of personal information will be handled in accordance with TuBoleto’s Privacy Policy and applicable law.

28. Data Export

Where supported, Vendor may request or download available account, order, inventory or other operational data.

TuBoleto is not required to provide proprietary source code, internal models, security information, confidential system architecture or information belonging to other parties.

29. Termination of Technology Access

When the commercial relationship ends, TuBoleto may disable Vendor Dashboard, WMS, API, integration or other technology access after a reasonable transition period where applicable.

Vendor should export information it reasonably needs before access terminates.

30. Service Availability

TuBoleto will use reasonable efforts to maintain its technology services but does not guarantee uninterrupted or error-free availability.

Availability may be affected by maintenance, upgrades, third-party outages, internet failures, marketplace disruptions, carrier systems, security events or other circumstances outside TuBoleto’s reasonable control.

31. Maintenance

TuBoleto may perform scheduled or emergency maintenance and may temporarily restrict access where reasonably necessary.

32. Backups and Recovery

TuBoleto may maintain backups and recovery procedures appropriate to its systems and operations.

Vendor remains responsible for retaining its own critical source documents and records where required for its business or legal obligations.

33. Third-Party Platform Changes

Amazon, Walmart, eBay, Best Buy, ecommerce platforms, carriers and other third parties may change APIs, permissions, authentication, data formats or service requirements.

Such changes may require updates, reauthorization or temporary suspension of an integration.

34. API and Integration Changes

TuBoleto may modify APIs, webhooks, integrations or technical requirements where reasonably necessary for security, compatibility, platform changes, legal requirements or service improvement.

Where practical, TuBoleto may provide notice of material changes affecting Vendor integrations.

35. Technology Suspension

TuBoleto may suspend technology access where there is a reasonable concern involving security, fraud, unauthorized use, non-payment, legal requirements, abuse, compromised credentials or material breach.

36. Audit and Evidence

TuBoleto may retain logs, timestamps, authentication records, transaction records, API activity and other technical evidence reasonably necessary for security, operations, dispute resolution and compliance.

37. Cooperation

Vendor must reasonably cooperate with TuBoleto when investigating account access, integration failures, data discrepancies, security incidents or other technology-related issues.

38. Updates to Technology Terms

TuBoleto may update these terms to reflect changes in technology, services, security practices, third-party platforms or legal requirements.

Material updates may be communicated through the Vendor Dashboard, website, email or another reasonable method.

39. Relationship with Privacy Policy

These terms address operational and technology use.

TuBoleto’s Privacy Policy provides additional information regarding the collection, use, disclosure, safeguarding and retention of personal information.

40. Relationship with Other Terms

These terms must be read together with the International Vendor & Services Terms, Privacy Policy and any applicable service order or specific agreement.

Where there is a conflict, a specifically negotiated written agreement may prevail with respect to the particular matter it addresses.

---

Important: Technology services may depend on third-party platforms, APIs, carriers, marketplaces and infrastructure that TuBoleto does not fully control.