Legal / Createrun

Store Publisher Agreement

Last updated: September 23, 2026 · Draft for review

This Createrun Store Publisher Agreement (the "Agreement") is between Createrun Incorporated, a New York corporation ("Createrun") and the organization that accepts it (the "Publisher", "you"). It governs how you submit, list, distribute and support apps, site designs, libraries and other items (each an "Item") through the Createrun Store at store.createrun.ai (the "Store").

This Agreement supplements the Createrun Terms of Service. If it conflicts with the Terms of Service on a matter concerning the submission, review, signing, distribution or support of Items, this Agreement prevails for that matter only. The sale of paid Items is additionally governed by the Createrun Paid Apps Commerce Addendum (the "Commerce Addendum").

1.1 Appointment. You appoint Createrun, on a non-exclusive basis, to list, promote, host and distribute your Items through the Store and to deliver them to Customers' Instances. For paid Items, Createrun's role in collecting payment is set out in the Commerce Addendum. Except as stated there, Createrun does not act as your agent and has no authority to bind you, and you have no authority to bind Createrun.

1.2 Who may accept. This Agreement must be accepted by a person authorised to bind your organization. That person confirms that the information supplied at acceptance is accurate. Createrun keeps a record of the version accepted, the time of acceptance and the account that accepted it, and that record is evidence of your acceptance.

1.3 Definitions.

  • Customer: an organization that acquires, installs or uses one of your Items.
  • Instance: a Createrun installation registered to a Customer, on which Items are installed through the Customer's console.
  • Listing: the presentation of an Item in the Store, including its name, description, images, category, price, support details, End-User Terms and privacy policy.
  • End-User Terms: the licence and terms under which you make an Item available to Customers.
  • Customer Data: any data, including personal data, that your Item or you receive from or about a Customer or its users through the Item or the Store.
  • Program Requirements: the technical, security, review and listing requirements that Createrun publishes for the Store, as updated from time to time.
  • Security Incident: any actual or reasonably suspected unauthorised access to, or acquisition, disclosure, alteration or loss of, Customer Data, or any compromise of an Item, its update channel or your signing keys.

2.1 Submission. You submit Items and Listings through the tools Createrun provides, with the information, assets and disclosures the Program Requirements specify. You are responsible for the completeness and accuracy of everything you submit.

2.2 Review. Createrun may review any submission, and any published Item at any time, using automated checks, manual checks or both, including security analysis of packages and their behaviour.

2.3 Createrun's discretion. Createrun may refuse to list, or remove, any Item or Listing at any time and for any reason, including reasons not listed in the Program Requirements. Where Createrun refuses a submission, it will give a reason. You may resubmit after addressing it, or contest the decision in writing to legal@createrun.com.

2.4 Review is not acceptance of responsibility. Review is a limited process step. Approval is not a representation by Createrun that an Item is secure, lawful, of good quality or fit for any purpose, and it does not transfer any responsibility for the Item from you to Createrun. You remain solely responsible for the development, testing, security, operation, maintenance and support of your Items, notwithstanding any review or approval.

2.5 Store presentation. Createrun controls the design, categorisation, search, ranking and promotion of the Store and may change them at any time. You are not entitled to any particular placement, visibility, volume of installations or revenue.

2.6 Licence to Createrun. You grant Createrun a worldwide, non-exclusive, royalty-free licence, for as long as an Item is distributed and afterwards as needed to support existing installations, to host, store, reproduce, scan, analyse, repackage for delivery, display and distribute the Item and its Listing through the Store and the platform's installation and update mechanisms, and to use your name, logo, Item name and screenshots to operate and promote the Store. This licence transfers no ownership.

2.7 Accurate Listings. Your Listing must accurately describe what the Item does, what data it accesses, collects and transmits, what permissions it needs, what it costs and how Customers can get support. An Item must not install or run code, or access data, beyond what is disclosed in the Listing or reasonably expected from it.

3.1 Signing. Item packages are signed before distribution, using key material issued to or registered by your organization in accordance with the Program Requirements.

3.2 Key custody. You must keep your private keys confidential, protect them with measures appropriate to their value, limit access to those who need it, and never share or transfer them outside your organization.

3.3 Responsibility for what you sign. You are responsible for every package signed with your keys or published through your account, whether or not you authorised it, until you notify Createrun of a compromise under Section 3.4.

3.4 Compromise. You must notify Createrun at legal@createrun.com without undue delay if you know or suspect that your keys or account have been compromised, and cooperate in containing the consequences. [DECISION: dedicated security contact address.]

3.5 Revocation. Createrun may revoke a signature or signing key where it is or may be compromised, where you breach this Agreement, or where law requires it. After revocation, affected packages may no longer be installable, may stop receiving updates, and may stop running where the platform validates signatures. Createrun is not liable for losses caused by a revocation made under this Section or by your failure to protect or renew your keys.

4.1 You license your Items. You, not Createrun, license your Items to Customers. The contract for your Item, whether free or paid, is between you and the Customer.

4.2 Mandatory End-User Terms. For every paid Item, and for every free Item that you want to offer on your own terms, you must provide clear End-User Terms through the Listing. Your End-User Terms must not conflict with this Agreement, the Createrun Store Terms or applicable law, and must not present Createrun as the licensor, seller, warrantor or support provider of your Item. [DECISION: whether any clauses must be mandatory in every Publisher's End-User Terms.]

4.3 Default licence for free Items. If you offer a free Item without your own End-User Terms, the default "as is" licence set out in the Createrun Store Terms applies between you and each Customer, and you agree to be bound by it as licensor.

4.4 Mandatory privacy policy. If your Item accesses, collects, stores or transmits any personal data, you must provide a clear, complete and conspicuous privacy policy through the Listing that complies with applicable data protection laws and accurately describes your practices.

4.5 Your commitments are yours. Every warranty, service level, licence term or other commitment you make to a Customer is made by you alone. Createrun is not bound by it.

5.1 Your obligation. You are solely responsible for supporting and maintaining your Items. You must publish a working support channel in each Listing and respond to Customers and to Createrun within a reasonable time, and within any time you commit to in your Listing or End-User Terms. [DECISION: whether to set minimum response times, for example one business day for critical issues and five business days otherwise.]

5.2 Createrun does not support your Items. Createrun has no obligation to support, fix, update or answer questions about your Items. Createrun may direct Customers who contact it about your Item to your support channel.

5.3 Maintenance and compatibility. You must keep each distributed Item compatible with the Program Requirements and supply fixes for security defects within a reasonable period after you become aware of them. Createrun may delist an Item that no longer meets the Program Requirements or that carries an unremediated security defect.

5.4 Withdrawal. You may withdraw an Item from future distribution at any time. Withdrawal does not release you from obligations to Customers who already acquired it, including support and refund obligations under your End-User Terms and the Commerce Addendum. [DECISION: minimum notice to existing Customers before a paid Item is withdrawn or discontinued.]

6.1 Security measures. You must design, build and operate your Items, and any service or infrastructure they connect to, using industry-standard administrative, technical and physical security measures appropriate to the Customer Data involved.

6.2 No harmful code. Your Items must not contain malicious, deceptive or undisclosed functionality, including code that damages or disables systems, takes unauthorised control of them, or exfiltrates data.

6.3 Incident notice. You must notify Createrun at legal@createrun.com without undue delay after you become aware of a Security Incident that affects or may affect your Items, Customers or the platform, and give Createrun the information it reasonably requests. [DECISION: whether to add a fixed outer limit, for example 48 hours.]

6.4 Remediation. You are solely responsible, at your cost, for investigating and remediating Security Incidents in your Items and services, and for any notification to affected Customers, individuals or authorities that applicable law requires of you. You must coordinate with Createrun before notifying Customers about an incident that involves the Store or the platform, unless the law requires you to act first.

6.5 Createrun's protective measures. Createrun may, at any time and with or without notice, delist an Item, block new installations and updates, revoke its signature, and disable or remove it remotely from Instances where the platform supports doing so, if Createrun reasonably believes that the Item poses a security risk or is causing harm to Customers, to their systems or data, or to the platform.

7.1 Minimum data. You may access, collect and use Customer Data only as needed to provide the functionality of your Item as described in the Listing, in accordance with your privacy policy, your End-User Terms and applicable data protection laws.

7.2 No sale. You must not sell, rent or trade Customer Data, or use it for advertising, profiling or any purpose unrelated to the Item, unless the Customer has expressly agreed and applicable law permits it.

7.3 Your responsibility. You are responsible for having a lawful basis for your processing, for any agreement with a Customer that applicable data protection laws require, and for handling requests from Customers and individuals about Customer Data you hold.

7.4 Deletion after uninstall. When a Customer uninstalls your Item or its acquisition ends, you must delete Customer Data received through the Item within [DECISION: number of days, for example 30] days, unless the Customer asks you to keep it or the law requires you to keep it. Data kept for a legal reason must be protected and used only for that reason.

7.5 Data from Createrun. Any data Createrun gives you about Customers, such as installation or transaction data, may be used only to provide, support and bill for your Items and to meet your legal obligations.

8.1 You are responsible for complying with all laws that apply to you, your Items and your dealings with Customers in every territory where you offer them, including laws on data protection, consumer protection, electronic commerce, taxes, export controls, sanctions, anti-corruption, accessibility where applicable, and artificial intelligence.

8.2 You must not distribute an Item to a person or territory where that is prohibited, and you confirm that neither you nor your owners are subject to sanctions that would make Createrun's dealings with you unlawful.

8.3 You must comply with the Createrun Acceptable Use Policy, the Program Requirements and any other policy that Createrun incorporates into this Agreement.

8.4 You must not misrepresent your identity, your affiliation with any person, or any endorsement by Createrun, and you must not manipulate ratings, reviews, rankings or installation counts.

9.1 Free and paid Items. You may offer Items free of charge. You may offer paid Items through the Store only after you have accepted the Commerce Addendum, completed the verification Createrun requires for sellers, and completed onboarding with Createrun's payment processor. Paid checkout for Publishers is being introduced in stages and may not yet be available to you. Selling is available only to Publishers established in the countries Createrun lists in the developer console [DECISION: eligible publisher countries].

9.1A Createrun's role in paid sales. For paid Items sold through the Store, you appoint Createrun as your non-exclusive agent and commissionaire. Createrun sells in its own name but on your behalf and for your account, and appears on the Customer's statement as seller and payment collector. You remain the licensor of the Item under your End-User Terms. The details are in the Commerce Addendum.

9.2 Commission. Createrun's commission is a flat fifteen percent (15%), calculated and applied as set out in the Commerce Addendum.

9.3 Payouts. Payouts are made through Createrun's payment processor, currently Stripe, to the account you hold with it, after you complete its identity and compliance onboarding. Payouts are made monthly, after a hold period of [DECISION: number of days, for example 30] days, and no payout is made until your balance reaches USD 40.

9.4 Reserves, refunds and set-off. Createrun may hold a reserve against refunds, chargebacks and fees, and may set off refunds, chargebacks, fees and any other amount you owe against amounts payable to you, as set out in the Commerce Addendum.

9.5 Priority. If this Section conflicts with the Commerce Addendum, the Commerce Addendum prevails.

10.1 Where applicable marketplace or deemed-supplier rules require it, Createrun calculates, collects and remits sales tax, value-added tax and similar taxes on sales of your paid Items through the Store. Those amounts are not part of your revenue.

10.2 You remain responsible for all other taxes arising from your Items and your business, including income tax on the amounts paid to you, any tax registration you are required to hold, including value-added tax registration, and taxes on sales you make outside the Store.

10.3 You must provide the tax information Createrun or its payment processor reasonably requests, including a U.S. Form W-9 or the applicable Form W-8, and Createrun may report payments to you to tax authorities, including on Form 1099 where required. Createrun may withhold payouts until you provide that information, and may withhold tax from payouts where the law requires it.

11.1 Grant. Createrun may grant a "Verified publisher" badge or other badge to Publishers that complete the steps Createrun sets for it. A badge confirms only that those steps were completed at the time it was granted.

11.2 Revocation. Createrun may flag, suspend, downgrade or revoke any badge at any time, including because of Customer complaints, a change in your identity or ownership, a failure to meet standards or a breach of this Agreement.

11.3 Use. You may display a badge only in the form and places Createrun permits, and only while it is in effect. A badge is not an endorsement, warranty or certification by Createrun, and you must not describe it as one.

11.4 Keeping information current. You must notify Createrun within thirty (30) days of any change to your legal name, registration details, ownership or control, or primary domain. Such a change may suspend a badge or verification status until it is checked again.

12.1 You will defend, indemnify and hold harmless Createrun, its affiliates and their officers, directors, employees, contractors and agents from and against any third-party claim, and any resulting damages, liabilities, settlements, fines, penalties, costs and reasonable legal fees, to the extent arising out of or relating to:

  1. your Items, including their content, functionality, performance, failure to perform, use or inability to use, and any claim of product liability;
  2. any actual or alleged infringement or misappropriation of intellectual property, privacy or publicity rights by your Items, Listings or brand assets;
  3. your relationship with Customers, including your End-User Terms, any commitment you made to a Customer, and your support, refunds and data practices;
  4. taxes for which you are responsible, and any tax, interest or penalty imposed on Createrun because of your failure to meet your tax obligations or because of inaccurate information you provided;
  5. any Security Incident caused by or involving your Items, services or keys;
  6. your breach of this Agreement, the Commerce Addendum, any incorporated policy or applicable law.

12.2 Procedure. Createrun will notify you of a covered claim reasonably promptly; a delay reduces your obligation only to the extent it prejudices the defence. You may control the defence with counsel reasonably acceptable to Createrun, and Createrun will cooperate at your expense. You may not settle a claim in a way that admits fault on Createrun's behalf, imposes an obligation on Createrun or does not fully release Createrun, without Createrun's prior written consent. Createrun may take part with its own counsel at its own cost.

13.1 Term. This Agreement starts on your acceptance and continues until terminated.

13.2 By you. You may terminate this Agreement at any time by notice to legal@createrun.com and by withdrawing your Items from distribution.

13.3 By Createrun. Createrun may delist any Item, suspend your publishing or selling rights, revoke badges or signatures, or terminate this Agreement:

  • at any time, for convenience, on thirty (30) days' notice; or
  • immediately, with or without notice, if you breach this Agreement or an incorporated policy, supply false or misleading information, distribute harmful code, cause or fail to address a Security Incident, infringe third-party rights, generate excessive refunds or chargebacks, become insolvent, become subject to sanctions, or if Createrun reasonably believes that continuing could expose Customers, the platform or Createrun to harm or legal liability, or if the law or a competent authority requires it.

Where it is reasonable to do so, Createrun will choose the least severe measure that addresses the issue and will tell you the ground for its action. [DECISION: whether to offer a cure period, for example 14 days, for non-urgent breaches.]

13.4 Remote disabling. Createrun's rights under Section 6.5 continue to apply after suspension or termination.

13.5 Effect of termination. On termination, your Items are removed from the Store and no new acquisitions are made. You remain responsible to Customers who already acquired your Items, in accordance with your End-User Terms. Accrued payment obligations, including under the Commerce Addendum, survive. Sections 2.4, 2.6 (for existing installations), 3.3, 3.5, 4.5, 7, 10, 12, 13.5 and 14 survive termination, as does any provision that by its nature is meant to survive.

14.1 Disclaimer. To the maximum extent permitted by applicable law, the Store, the platform, the review process, the signing service, the developer tools and everything Createrun provides under this Agreement are provided "as is" and "as available", without warranty of any kind, express, implied or statutory, including warranties of merchantability, fitness for a particular purpose, non-infringement and uninterrupted or error-free operation. Createrun does not guarantee any level of installations, revenue, ranking or visibility.

14.2 Excluded damages. To the maximum extent permitted by applicable law, neither party is liable to the other for indirect, incidental, special, consequential, exemplary or punitive damages, or for lost profits, revenue, data or goodwill, arising out of or relating to this Agreement. This exclusion does not apply to your indemnity obligations under Section 12, your breach of Section 7, or amounts you owe under the Commerce Addendum.

14.3 Cap. To the maximum extent permitted by applicable law, Createrun's total aggregate liability arising out of or relating to this Agreement and the Commerce Addendum is limited to the commission Createrun retained from your sales in the twelve (12) months before the event giving rise to the claim. If Createrun retained no commission in that period, Createrun has no liability, to the extent the law allows. [DECISION: whether to add a fixed floor, for example USD 100.] Nothing in this Agreement limits Createrun's obligation to pay you amounts that are properly due under the Commerce Addendum, or liability that cannot be limited by law.

14.4 Governing law and venue. This Agreement is governed by the laws of the State of New York, without regard to its conflict of laws rules. The parties submit to the exclusive jurisdiction of the state and federal courts located in New York County, New York. EACH PARTY KNOWINGLY AND VOLUNTARILY WAIVES ANY RIGHT TO A TRIAL BY JURY IN ANY PROCEEDING ARISING OUT OF OR RELATING TO THIS AGREEMENT. Any claim arising out of or relating to this Agreement must be brought within one (1) year after the cause of action arises, or it is permanently barred.

14.5 Confidentiality. You must keep non-public information Createrun shares with you under this Agreement, including pre-release tools, review correspondence and security reports, confidential and use it only to exercise your rights under this Agreement, for three (3) years after disclosure, or longer for trade secrets.

14.6 Changes. Createrun may change this Agreement or the Program Requirements. Createrun will notify you of material changes by email or through the developer console at least thirty (30) days before they take effect, except where a change is required for security or legal reasons, in which case it may take effect immediately. If you do not accept a change, your remedy is to terminate under Section 13.2. Continued distribution after the effective date means you accept the change.

14.7 Relationship. The parties are independent contractors. Except for the limited role described in the Commerce Addendum, nothing in this Agreement creates an agency, partnership, joint venture or employment relationship.

14.8 Assignment. You may not assign this Agreement, including by merger or change of control, without Createrun's prior written consent. Createrun may assign it to an affiliate or to a successor to its business.

14.9 Notices. Createrun sends notices to the email address registered for your organization or through the developer console. You send notices to legal@createrun.com. Store support questions go to support@createrun.com.

14.10 Entire agreement and precedence. This Agreement, the Commerce Addendum (if accepted), the Createrun Terms of Service and the policies incorporated by reference are the entire agreement on their subject matter. If they conflict, the Commerce Addendum prevails on commercial matters, then this Agreement, then the Terms of Service, then the incorporated policies and Program Requirements.

14.11 Other terms. If a provision is unenforceable, it is modified to the minimum extent necessary or severed, and the rest remains in force. A failure to enforce a right is not a waiver. Neither party is liable for delay caused by events beyond its reasonable control, except for payment obligations. This Agreement is written in English, and the English version controls over any translation. Electronic acceptance is binding and electronic records of it are admissible.

Related: Terms of Service · Privacy Policy · Acceptable Use Policy · Data Processing Addendum · Subprocessors · Cookie Notice · Store Terms · Paid Apps Addendum · Security