Popkit
Sign inStart free

Terms of service

Last updated 26 July 2026.

A plain-language draft, not legal advice. Have it reviewed before you sell against it.

The service

Popkit lets you design widgets and serve them on websites you control through a script tag. You keep ownership of your content, your design and every lead you collect. We claim no licence over any of it beyond what is needed to store and deliver it on your behalf.

Your account

You are responsible for keeping your credentials safe and for everything done under your account. Tell us promptly if you think someone else has access.

What you may not do

  • Install the script on a site you do not control or have permission for.
  • Collect data you have no lawful basis to collect, or hide what a form is for.
  • Use the custom HTML, CSS and JavaScript feature to imitate another company, phish for credentials or payment details, or take over the host page.
  • Serve malware, or content that is illegal where your visitors are.
  • Deliberately overload the ingest endpoints or work around the abuse protections.

Accounts doing any of the above can be suspended without notice.

Custom code

Custom HTML, CSS and JavaScript runs on your own website, in your visitors’ browsers, under your name. It is your code and your responsibility. Widgets are sandboxed in a Shadow DOM, but that is an isolation boundary for styling, not a security guarantee about what your own script does.

Data protection roles

For leads collected through your widgets you are the data controller and Popkit is the processor: we store and forward that data on your instructions and nothing more. Make sure your own privacy notice covers the forms you publish.

Availability and liability

The service is provided as it is. We aim to keep it up and to keep your data intact, but we do not promise uninterrupted availability, and we are not liable for indirect or consequential losses — including revenue you believe a widget would have earned. Export your leads regularly; the CSV button exists for exactly that.

Ending it

You can delete a site or your whole account whenever you like, and the data goes with it. Remove the script tag from your website and Popkit stops loading entirely.