Website Management Agreement
Effective April 23, 2026
Our promise
We use commercially reasonable efforts to make your website available 99.9% of the time during each monthly billing cycle. If there is a website issue, please reach out to [email protected] for help.
Introduction
This Website Management Agreement (the “WMA”) sets out the terms of your subscription to our Growth System Plan — our bundled WordPress hosting, management, and Co-Create CRM service.
This WMA works together with our Master Services Agreement (MSA), which governs our overall relationship. If you haven’t already accepted the MSA, accepting this WMA (by subscribing to a Growth System Plan) also constitutes acceptance of the current MSA (version 2026.1 or later). Where this WMA conflicts with the MSA, this WMA controls for the managed service.
“We,” “us,” “our,” and “the Company” means Co-Creative Digital, a business registered in British Columbia. “You,” “your,” “Client,” and “Subscriber” means you.
1. The Service
1.1 What You Get
The Growth System Plan bundles:
Co-Create CRM — our white-labelled marketing and business-growth platform, built on enterprise CRM infrastructure we license and customise for our clients. All plan features, usage credits, and support covered by this WMA.
Optional WordPress site management — one (1) WordPress site included with your plan, activated on request. Backups, updates, security, and included platform hosting are covered. See Section 2 for the full scope.
WordPress is included but not required — see Section 1.4 for how to choose between a CRM-only setup and a CRM + WordPress setup.
1.2 When Co-Create CRM Isn’t the Right Fit
Co-Create CRM is our default recommendation for most solopreneurs and small teams, and it’s where most of our clients see the most success. It works for higher-risk work too, provided the content-handling rules in Section 4 are followed.
However, Co-Create CRM isn’t the only option, and it isn’t right for everyone. You may need a different CRM if:
Your work involves content or campaigns that cannot be accommodated within our underlying CRM platform’s acceptable use policy even with Section 4 in place (for example, advocacy work on politically sensitive topics where even metadata and subject lines risk enforcement)
You already have an established CRM with active data, workflows, and team adoption
Your campaign tooling requires infrastructure we cannot host on Co-Create CRM (for example, complex membership gating, custom donation logic, or specialised advocacy tools)
In these cases, we also support select self-hosted, open-source CRM alternatives that run inside WordPress on your managed server. Because these alternatives run on infrastructure you own, they offer a different defensibility profile than any SaaS CRM.
If Co-Create CRM isn’t the right fit for your work, we’ll scope a custom engagement (under the MSA) to implement and support an alternative. Pricing varies based on the CRM selected, data volume, and integration needs. The Growth System Plan pricing below applies to subscribers using Co-Create CRM as their primary platform.
1.3 Plan Tiers
Starter Plan — $197 CAD/month (or $1,970/year, two months free)
Full access to Co-Create CRM (automation, AI, scheduling, social, e-commerce, all features)
Optional: one (1) WordPress site on our included platform hosting (backups, updates, security), activated at your request. See Section 2.1.
Plus:
1–2 team members with platform access
$25 USD/month in usage credits (SMS, calls, email, AI)
Onboarding call + self-serve setup guides
24/7 chat support, email (1–2 business day response), and scheduled video calls for complex issues
Access to add-on marketing services (priced separately)
Pro Plan — $397 CAD/month (or $3,970/year, two months free)
Everything in Starter, plus:
Up to 5 team members with platform access
$50 USD/month in usage credits
Done-with-you setup — we build alongside you
First campaign launched within 2 weeks of onboarding
Priority support
Quarterly strategy calls
Annual design refresh — one data-informed visual refresh of your primary customer-facing website or CRM funnel each year, scoped to improve conversion (see Section 2.7)
1.4 WordPress is Optional
Both plans include WordPress hosting and management at no additional cost, but WordPress is not required. You can choose to build your entire online presence directly in Co-Create CRM — using its funnels, landing pages, websites, blogs, membership sites, communities, and e-commerce tools — and skip WordPress altogether.
Two ways to use the Growth System Plan:
CRM-only — Build entirely in Co-Create CRM. A great fit for coaches, solopreneurs, and small teams whose needs are fully met within the CRM and who want to keep their stack simple.
CRM + WordPress — Run Co-Create CRM alongside one or more WordPress sites. The better fit if you need content-rich publishing, blog or news functionality, complex membership structures, custom design, or the defensibility profile of owning your publishing infrastructure (see Section 4).
CRM-only clients save on:
Spam protection for WordPress forms and comment sections (often US$10–$30/mo for services like CleanTalk, Akismet, or WPArmour — required if you publish a site with a comments section or any WordPress/plugin form that isn’t embedded from Co-Create CRM)
WordPress security add-ons and premium plugin licences that the WordPress version would otherwise draw on
Potentially simpler compliance footprint (one platform to audit rather than two)
CRM + WordPress clients get:
More content and design flexibility (richer page builders, larger theme and plugin ecosystem)
A defensibility layer — an owned WordPress site alongside the CRM for content that shouldn’t sit inside a third-party platform (see Section 4)
Both CRM-only and CRM + WordPress Pro Plan clients receive the annual design refresh (Section 2.7), applied to whichever is their primary customer-facing surface.
You can switch between the two approaches as your needs evolve. If you start CRM-only and later want WordPress, we’ll spin up and activate it for you. You can also add additional WordPress sites beyond the one included with your plan directly from your account dashboard at the per-site cost shown there (see Section 2.1).
1.5 Usage Credits and the Wallet
Your plan includes monthly usage credits — $25 on Starter, $50 on Pro (USD) — that fund variable-cost services: SMS messages, phone calls, email sends beyond included limits, AI-generated content, and similar.
Credits are added to your wallet each billing cycle and consumed as you use the platform. You can monitor balance and usage inside Co-Create CRM.
Auto-recharge is required. You must keep a valid payment card on file. When your wallet falls below a threshold, your card is automatically charged to replenish it. By subscribing, you authorise these automatic wallet top-ups. Disabling auto-recharge may result in service interruptions when the wallet is depleted.
Overage rates match industry-standard provider rates for SMS, voice, email, and AI services and may change with 30 days’ notice.
2. Website Management — What’s Included
2.1 Hosting
Included with your Growth System Plan: WordPress hosting provided through the GoHighLevel platform as part of your subscription. This is suitable for most small-business websites, landing pages, and content-driven marketing sites. We target 99.9% uptime during each monthly billing cycle. If this level is not met, you may be eligible for service credits, calculated as a percentage of the affected month’s fees, based on duration of unavailability.
Unavailability due to scheduled maintenance (announced at least 48 hours in advance, not exceeding one hour per month) does not qualify for service credits. Credit requests must be submitted within 7 days of the unavailability.
Activation. The WordPress site included with your plan must be activated before we can host, back up, or manage it. Activation happens during onboarding or at any time later via a support request. If you don’t activate WordPress (because you’re running a CRM-only setup — see Section 1.4), the WordPress components of your plan simply sit unused; you can activate at any time during your subscription.
Additional WordPress sites. You can add additional WordPress sites to your account at any time directly inside Co-Create CRM — sites spin up in seconds at the per-site cost displayed in your dashboard. Additional sites are billed separately from your Growth System Plan base fee and are charged through the platform’s dashboard pricing. Each additional site receives the same management coverage (updates, security, daily backups) as your primary included site. High-activity or high-performance requirements on additional sites may still require custom-scoped hosting or enhanced backups, as described below and in Section 2.2.
When your site needs more than the included hosting: For sites with heavier performance, scale, compliance, or technical requirements — for example, high-traffic sites, complex membership or e-commerce systems, sites with specialised server configurations, or sites with specific data-residency needs — we commission and manage hosting through third-party providers (we already work with several). This is scoped as a custom engagement under the MSA, with hosting costs and our management fee detailed in the Scope of Work. The 99.9% uptime target above applies to hosting we commission; specific SLA terms for third-party hosting may differ and will be documented in the Scope of Work.
We’ll tell you during onboarding whether the included hosting fits your site. If your needs change later (for example, a traffic surge or a new compliance requirement), we’ll flag it and scope the upgrade separately.
2.2 Backups
Included with your Growth System Plan:
Daily backups of your site (files and database) to redundant offsite storage whenever your site has activity.
If your site is compromised by a security vulnerability or external attack, we will restore from backup. No restoration limit for hacks.
For user-error issues, we’ll perform up to two restorations in any 30-day period. Additional restorations from user error are billed at our current hourly rate with a one-hour minimum.
Restorations reflect the state of the site at the time the backup was taken. Anything added or changed after that backup is lost.
When your site needs more than daily backups: High-activity sites — for example, news and advocacy sites publishing multiple times per day, sites processing frequent donations or transactions, membership sites with constant user-generated content, or sites with strict recovery-point objectives — may benefit from additional backup frequency and redundancy (for example, 4x-daily snapshots via specialised backup services such as BlogVault). These enhanced backup configurations involve additional third-party costs and management, and will be recommended and scoped as part of a custom engagement under the MSA if needed for your site.
We’ll flag this during onboarding if your site’s activity profile suggests it’s warranted, or whenever your publishing patterns change in a way that exposes you to more data-loss risk than daily backups can cover.
2.3 Software Updates
We keep WordPress core, themes, and plugins updated on a regular schedule, applying updates at our discretion based on security guidance and operational impact.
2.4 Security
We implement security hardening, malware scanning, firewall protection, and monitoring. We cannot guarantee your site will be immune to hacking. In the event of a breach, we will restore your site to its pre-breach state from the most recent clean backup. Beyond restoration, we do not assume further liability.
2.5 Premium Themes and Plugins
Premium themes and plugins require recurring licence fees for updates.
If we hold appropriate licences for the themes and plugins used on your site, costs are included in your plan. We maintain licences for as long as you remain an active subscriber.
If your site uses premium themes or plugins we don’t hold licences for, maintaining those licences is your responsibility. We’ll tell you which ones.
If you cancel your plan, you lose access to our licensed themes and plugins. You are responsible for securing alternatives or your own licences before continuing to use the site.
2.6 What’s Not Included in Management
Fixing problems caused by third parties you’ve given access to, by your own user error (beyond the two monthly restorations), by expired domain/registrar issues, or by changes to infrastructure outside our stack is not included and is billable at our current hourly rate.
Support after a WordPress or plugin update requires diagnosis and fixing — included to the extent that the issue relates to work we perform. Outside that scope, it’s billable at the current hourly rate.
IT IS YOUR RESPONSIBILITY TO NOTIFY US PROMPTLY IF YOUR SITE IS EXPERIENCING PROBLEMS.
2.7 Annual Design Refresh (Pro Plan)
Pro Plan subscribers receive one data-informed visual design refresh of their existing website every 12 months at no additional cost. The refresh is intended to improve conversion performance based on real analytics and user behaviour from the previous year of activity.
The annual design refresh applies to your activated WordPress site or to your Co-Create CRM funnels and pages — whichever is your primary customer-facing surface. If you’re running a CRM-only setup, we’ll refresh your primary CRM funnel(s) and landing pages within the scope below.
Eligibility requirement — originally designed by us: The refresh applies only to sites, funnels, or pages originally designed and built by Co-Creative Digital under a Scope of Work or this WMA. Sites or funnels you built yourself, had built by another agency, or migrated in from elsewhere are not eligible for the included refresh. If you’d like us to redesign a site we didn’t originally build, we’ll happily scope it as a custom engagement under the MSA.
What’s included:
Review of site analytics, heatmaps, conversion data, and user-behaviour signals from the prior 12 months
Identification of the highest-impact visual and layout improvements
Refreshed design across up to five (5) key pages (typically homepage, primary landing pages, key service or product pages) in Figma or our working design tool
One round of revisions on the design before implementation
Implementation of the approved refresh on your live site
What’s not included:
Adding new pages or new functionality
Structural rebuilds, full redesigns, or rebrand work (new logo, new brand identity, new content strategy)
Copywriting, photography, video, or other new content creation
Custom development, new integrations, or plugin builds
E-commerce catalogue changes, product photography, or store redesigns
Anything outside the included scope is available as a custom engagement under the MSA with a separate Scope of Work.
Eligibility and timing:
Eligibility begins 12 months after your Pro Plan subscription start date, and resets every 12 months thereafter on the subscription anniversary
Unused refreshes do not accumulate — one refresh per 12-month period, use it or it rolls off
The refresh must be scheduled and kicked off within 90 days of becoming eligible; after that, the year’s refresh is forfeited (this prevents an end-of-year rush and lets us plan capacity)
If you downgrade from Pro to Starter before a scheduled refresh is delivered, the refresh entitlement is forfeited
If you cancel the Pro Plan before the refresh is delivered, the refresh entitlement is forfeited and no refund or credit is issued for the value of the refresh
How it works:
At your Pro Plan anniversary, we’ll reach out to schedule a refresh discovery session (typically 30–45 minutes) to review data and agree on scope
We’ll then deliver the design within approximately 3 weeks of the discovery session, subject to our queue and your availability to review
Your regular support, hosting, and quarterly strategy calls continue during the refresh
2.8 Site Freeze Tier
If your business is closing, pausing, rebranding, or otherwise dormant but you want to keep your WordPress site online, we offer a Site Freeze tier as an alternative to maintaining an active Growth System Plan subscription.
What the Site Freeze includes:
WordPress site remains publicly viewable at your domain
Server-level locking of the WordPress installation (no database writes, no new content, no form submissions, no comment submissions, no new users)
DNS, SSL certificate, and domain pointing maintained
Server-level security and infrastructure protection continues through the hosting provider
Annual check-in to confirm the site is still serving correctly
What the Site Freeze does not include:
Access to Co-Create CRM (the CRM subscription is separate and ends when you transition to a Site Freeze, unless you pay for it separately)
Active WordPress core, theme, or plugin updates (the site is locked — updates cannot be applied while frozen)
Active backups (the site isn’t changing, so new backups are not taken — the final pre-freeze backup is retained)
Active monitoring, malware scanning, or threat response beyond the hosting provider’s server-level protections
Content changes, design changes, SEO work, or any active management
Support beyond clarifying questions about the freeze status
Pricing:
$25 CAD/month per frozen site
$250 CAD/year annual billing option (two months free)
$99 CAD one-time setup fee when transitioning an existing site onto the Site Freeze tier (covers disabling writes, documenting site state, migrating off active management, and configuring the frozen environment)
Residual risk on frozen sites. Because a frozen WordPress site cannot receive security updates, a critical plugin or WordPress core vulnerability discovered after freeze could theoretically be exploited. Server-level protection at the hosting provider mitigates most of this risk, but not all. By accepting the Site Freeze tier, you acknowledge and accept this residual risk in exchange for the reduced price and near-zero active maintenance.
Reactivation. If you decide to bring the site back online as an active, editable site — whether on our Growth System Plan or to migrate elsewhere — a reactivation engagement of $299 CAD applies. This covers:
Unlocking the WordPress installation
A full health audit of the site in its frozen state
Applying all pending WordPress core, theme, and plugin updates accumulated during the freeze
Resolving any breakages caused by updates (within the included scope; complex breakages may be billed additionally at our current hourly rate)
Restoring active backups, monitoring, and support coverage
After reactivation, normal Growth System Plan pricing applies if you return to active management, or you can choose to migrate the reactivated site elsewhere.
Cancellation of a Site Freeze. You may cancel the Site Freeze at any time with at least 15 days’ notice before your next billing cycle. Upon cancellation, the site will be removed from our hosting unless you arrange an alternative. We do not provide refunds for partial billing periods or unused portions of annual Site Freeze plans.
3. Co-Create CRM — What’s Included
3.1 Platform Access
Full access to the Co-Create CRM platform, including automation workflows, AI-powered features, appointment scheduling, social media publishing, e-commerce tools, forms, pipelines, and reporting.
The exact features available may change as we add, remove, or refine capabilities. We’ll give reasonable notice of material changes.
3.2 Underlying Platform Dependency
Co-Create CRM runs on GoHighLevel’s infrastructure. By using our service, you agree to comply with GoHighLevel’s acceptable use policies. We’ll notify you of material changes we become aware of.
3.3 Security and Compliance Certifications
GoHighLevel — the platform underlying Co-Create CRM — holds SOC 2 Type II certification across the Security, Confidentiality, and Availability trust service criteria (achieved March 2026). SOC 2 Type II is an independently audited security standard showing that the platform’s data-protection controls are both properly designed and operating effectively over time. This gives you enterprise-grade security as the foundation of your CRM, at small-business pricing.
Privacy and health-data compliance varies by your jurisdiction and the nature of your work:
Canadian clients — Co-Create CRM, configured properly, can be used in compliance with PIPEDA (federal private-sector privacy law) and most provincial privacy regimes, for lead management and non-clinical marketing data. For Canadian health-data work subject to provincial health privacy law (e.g., PHIPA in Ontario, HIA in Alberta, PIPA in BC), see the recommended architecture in Section 3.4 below.
US clients handling Protected Health Information (PHI) — HIPAA compliance is available through a separate HIPAA-enabled CRM account we establish for you, which includes GoHighLevel’s HIPAA add-on, a Business Associate Agreement (BAA), and agency-wide encryption controls. This is priced separately — currently USD $297/month passed through from GoHighLevel, plus our setup and management fee, detailed in a separate Scope of Work. A HIPAA-enabled account is permanent once activated and cannot be downgraded. For most healthcare clients, the architecture in Section 3.4 below is a better fit than putting PHI into the CRM at all.
International and NZ / AU / UK / EU clients — Co-Create CRM’s underlying infrastructure (including SOC 2 Type II certification and encryption-at-rest) provides a strong technical baseline that supports compliance with frameworks such as the NZ Privacy Act 2020 / Health Information Privacy Code, Australian Privacy Act, UK GDPR, and EU GDPR. However, compliance with these laws depends on how the platform is configured and used in your specific workflows. We’ll scope any additional configuration or documentation needs separately.
Regardless of jurisdiction: you are responsible for how you collect, store, and use personal data within the platform, and for your own compliance with the privacy and health-data laws applicable to your business. We provide the infrastructure, configuration support, and certification chain — you provide the lawful basis, consent, and operational practice. See also Section 8 (Acceptable Use) and Section 12 (Indemnification).
3.4 Recommended Architecture for Clinics and Healthcare Practices
For clinics, practitioners, and healthcare providers, the most defensible — and most compliance-friendly — architecture is to keep patient health information in a dedicated practice management system (PMS) and use Co-Create CRM for lead management, marketing, and non-clinical customer relationships alongside it.
Practice management systems we commonly integrate with (via API, Zapier, or custom middleware) include:
Jane App (widely used by Canadian clinics)
Cliniko, SimplePractice, Tebra, and similar cloud-based PMS platforms
EMR / EHR systems where API access is available
Why this works:
Your PMS is already compliant-by-design for clinical data in your jurisdiction. Jane App, for example, is already compliant with PHIPA, HIA, PIPA, and PIPEDA as part of its core product.
Co-Create CRM handles inbound leads, marketing automation, email/SMS campaigns, appointment-booking flows, and long-term relationship management — without ever needing to hold patient-chart information.
Clean separation between clinical data (in the PMS) and marketing data (in the CRM) simplifies your privacy audits, reduces your breach surface, and makes your data-processing records clearer for any regulator or privacy officer.
You don’t need — and therefore don’t pay for — a HIPAA-enabled CRM account if PHI never enters the CRM in the first place.
What we integrate:
We can connect the two systems so that leads in the CRM convert cleanly into patients in the PMS (without duplicate data entry), and appointment confirmations or reminders can flow through the CRM’s SMS/email infrastructure while the clinical record stays in the PMS. This integration work is scoped as a custom engagement under the MSA, separate from the Starter or Pro Growth System Plan base fee.
If you’re a clinic or practitioner unsure which architecture fits your practice, we’ll discuss it during onboarding and scope the integration separately.
3.5 Integrations
The platform integrates with third-party services (payment processors, email providers, calendars, social platforms, etc.). Those services are governed by their own terms. We are not responsible for third-party availability or policy changes. If a third party discontinues or changes a service, we’ll do our best to offer an alternative, but cannot guarantee equivalent replacement.
3.6 Email and Communications
We do not provide or host email accounts (e.g., [email protected]). For email hosting, we recommend Google Workspace, Microsoft 365, Zoho, or ProtonMail.
4. Defensibility and Restricted Content
This section applies to every subscriber. It matters especially for work that challenges institutional power, questions mainstream consensus, or involves subject matter that third-party platforms increasingly refuse to support — including health advocacy, political dissent, cultural work, subversive art, and adult or health-related content.
4.1 What We Mean by Defensibility
Over the past decade, third-party platforms — Facebook, Twitter, Stripe, Mailchimp, PayPal, GoFundMe, and even advocacy-specific tools like New/Mode — have increasingly used terms-of-service enforcement to restrict which causes, communities, and commercial activities are allowed to operate online. Policies are often written in the language of “community values” or “acceptable use” but applied inconsistently against work that is entirely legal.
We’ve seen this first-hand. In 2019, Facebook banned a nonprofit fundraiser mid-campaign — a campaign co-founded by our Principal for an Amazonian Indigenous community, using a National Geographic photograph — because the community’s traditional dress was classified as “nudity.” Within a week, the team rebuilt the entire technology stack on owned infrastructure. That experience is the foundation of the service we now offer clients.
Defensibility means: the core of your operation lives on infrastructure you own or can move. Specifically:
Your website runs on self-hosted WordPress, where the server is under our (or your) control
Your subscriber list, content, and automations can be exported at any time
Your payment processing, email deliverability, and messaging flow through providers chosen for compatibility with your work, not for mainstream convenience
Your critical operations do not depend on any single third-party platform that can unilaterally shut you down
This is the playbook that has kept our advocacy, health-freedom, and cultural-work clients operating through years of escalating platform enforcement. It’s why we built our service the way we did.
4.2 Legal Standard
The standard we hold ourselves and our clients to is Canadian law — specifically the Criminal Code and applicable federal and provincial regulations. If your work is legal under Canadian law, we will generally work to support it, even when third-party platforms will not.
We will not, however, protect you from the consequences of third-party platform decisions. If any provider we integrate with — including our CRM platform, payment processors, email or SMS providers — removes you from their service, we will help you migrate to an alternative. But we cannot force a third-party platform to keep serving you.
4.3 What Lives Where
Different content and different operations need to live in different places based on the enforcement risk of each platform we use.
Self-hosted WordPress is the safest place for content that third-party platforms are likely to enforce against — including but not limited to:
Politically or culturally contested claims (health advocacy against official guidance, critiques of government policy, religious or philosophical dissent)
Fundraising for causes that mainstream processors refuse to service
Subversive or provocative creative work
Sexually explicit, nude, or adult-oriented material
Any content that has previously been flagged, removed, or restricted by a third-party platform
Co-Create CRM (or alternative CRM) is for contact management, workflow automation, sales records, and non-enforcement-risky communications. Because any SaaS CRM depends on third-party infrastructure — including the underlying CRM platform, SMS and voice providers, email providers, and payment processors — content within the CRM must comply with those providers’ acceptable use policies.
This is not censorship. It’s compartmentalisation — putting the pieces of your operation on the infrastructure best suited to protect them.
4.4 Practical Rules for CRM Use
To keep your CRM running and your deliverability healthy:
Critical fundraising and subscriber-relationship infrastructure should never depend solely on a single third-party provider
Highly politically contested claims should be linked to rather than stated in full inside email bodies, where feasible
Explicit imagery, explicit video, and explicit written content stays on your WordPress site, not in the CRM
Email subject lines and preview text must remain non-explicit to protect deliverability and provider compliance
Email campaigns sent from the CRM may link out to gated WordPress pages containing restricted content — they may not embed that content in the email body itself
4.5 Absolute Prohibitions
Regardless of where content is hosted (WordPress, CRM, or anywhere else we manage), you may not create, host, or distribute content involving:
Minors in any sexual, suggestive, or exploitative context
Non-consent, coercion, or human trafficking
Bestiality
Direct incitement to violence against persons or identifiable groups
Any other content illegal under Canadian law (including but not limited to Sections 163 and 163.1 of the Criminal Code)
These prohibitions are non-negotiable and override any other provision of this WMA or the MSA. Violation is grounds for immediate termination without refund and, where required by law, mandatory reporting to appropriate authorities.
4.6 Compliance
Strict adherence to this section is a condition of your Growth System Plan subscription. Material breach is grounds for termination of the WMA (see Section 7.2). We will give notice and an opportunity to cure where practical. Repeated or serious violations that put our infrastructure relationships at risk may be acted on immediately.
We reserve the right to review any content at any time and require modifications if, in our reasonable judgment, it puts your operation or ours at risk with third-party providers. Our goal is always to keep your work online — but we need your cooperation in placing each piece of it on the infrastructure best suited to protect it.
5. Billing and Payment
5.1 Billing Cycle
Plans are billed in advance:
Monthly: billed on the same date each month, starting from your signup date
Annual: billed once per year, starting from your signup date. Annual plans receive a discount (two months free, as priced above)
5.2 Payment Method
Credit card via our payment processor. You authorise us to charge your card for recurring subscription fees plus any usage overages or wallet top-ups.
5.3 Price Changes
We may adjust pricing with at least 30 days’ written notice. Price changes take effect at your next billing cycle after the notice period. If you don’t agree, you may cancel before the new price takes effect.
5.4 Failed Payments
If a payment fails, we’ll notify you and attempt again. If payment is not resolved within 7 days, we may suspend access until the account is current. You remain responsible for all amounts owed.
5.5 Late Payments
Accounts more than 30 days past due may be suspended or terminated. Overdue amounts bear interest at 1.5% per month (or the maximum permitted by law, whichever is less).
5.6 Annual Plan Refunds
Annual subscriptions are non-refundable. If you cancel an annual plan mid-term, you retain access until the end of your paid period, but no refund is issued for unused months.
6. Cancellation
6.1 How to Cancel
Cancel by:
Emailing [email protected], or
Using the cancellation option in your account settings (if available)
6.2 Notice Period
Cancel with at least 15 days’ notice before your next billing cycle for cancellation to take effect at the end of your current billing period. Notice given later than that takes effect at the end of the following billing period.
You retain access until your cancellation takes effect. We do not provide refunds for partial billing periods or unused portions of annual plans.
6.3 Effect of Cancellation
When your subscription ends:
Your access to the Co-Create CRM stops
If WordPress is activated on your account, your WordPress site is no longer covered by our hosting, backups, updates, security, or premium-licence coverage. Your WordPress site will be removed from our hosting unless you arrange alternative service with us at our current hourly rate or migrate off before cancellation takes effect
We are not obligated to retain your CRM data beyond 30 days after cancellation. Export anything you need before cancellation takes effect.
You remain responsible for any amounts owed through the termination date
6.4 Data Export
You may export CRM data (contacts, pipelines, forms, etc.) at any time while your subscription is active using the platform’s built-in export tools.
If WordPress is activated on your plan, WordPress site exports (full database + files) are provided on request for $150 CAD, or we will perform the full migration to another host at our current hourly rate.
Once your subscription ends and your access period expires, data export is no longer available.
7. Our Right to Suspend or Terminate
7.1 Suspension
We may suspend your account if you:
Fail to pay amounts owed after notice and opportunity to cure
Cause active harm to the platform or other users
Violate the content-handling or absolute-prohibition rules in Section 4
Violate the Acceptable Use policy (Section 8)
7.2 Termination
We may terminate your subscription immediately if:
Suspension continues beyond 30 days without resolution
You materially breach this WMA or the MSA
You become subject to bankruptcy, insolvency, or similar proceedings
Repeated or severe violations of Section 4 that put our third-party platform relationships at risk
For non-severe violations, we’ll give notice and an opportunity to fix the issue before terminating.
8. Acceptable Use
8.1 Use in Good Faith
Co-Create CRM and our website management are for legitimate business use. You agree to use them lawfully and professionally.
8.2 Prohibited Uses
You may not:
Send spam or unsolicited messages in violation of CASL, CAN-SPAM, or equivalent anti-spam law
Violate any law, including privacy and data-protection regulations
Harass, threaten, or harm others
Infringe on intellectual property rights
Distribute malware or attempt to compromise security
Resell or sublicense platform access without our written permission
Engage in activity that could damage our reputation or the platform
8.3 Prohibited Industries
We do not provide services to businesses primarily engaged in:
Illegal activities of any kind (per Canadian law)
Multi-level marketing or pyramid schemes
Unlicensed gambling
Cryptocurrency schemes or unregistered securities
Weapons, ammunition, or explosives
Unlicensed controlled substances (properly licensed cannabis where legal is acceptable)
Debt collection harassment or predatory lending
Content that meets the Absolute Prohibitions in Section 4.5
Work we explicitly do support, subject to the handling rules in Section 4, includes:
Health advocacy, including work that challenges mainstream health-regulatory positions
Political or cultural advocacy, including subject matter that mainstream platforms refuse to host
Religious or philosophical dissent
Subversive or provocative artistic and cultural work
Fundraising for causes that mainstream processors decline to service
Adult, nude, or sexually explicit content for consenting adult audiences
Any other lawful work that encounters disproportionate third-party platform enforcement
Political campaign work (electoral advocacy for specific candidates or parties) requires a separate written agreement.
8.4 Reasonable Use
Plans include generous allowances designed for typical business use, not abuse. If your usage materially exceeds normal patterns (e.g., using one account to support multiple distinct legal entities/businesses), we’ll reach out to discuss a plan that better fits your needs.
9. Data and Intellectual Property
9.1 Ownership of Your Data
You own your data. We don’t claim any ownership rights over the content, contacts, or business information you store in the platform.
You grant us a limited licence to host, process, and display your content solely to provide the service.
9.2 Ownership of the Platform
Co-Create CRM, including all software, design, branding, and documentation, is our property (or licensed to us). Your subscription gives you a limited right to use the platform; it doesn’t transfer any ownership.
9.3 Feedback
If you give us suggestions about the platform, we may use them to improve our services with no further obligation to you.
9.4 Data Processing
By using the service, you acknowledge that your data may be processed by our underlying CRM platform provider (as named in Section 3.2) according to their privacy policy and data-processing terms.
9.5 Data Security
We implement reasonable security measures to protect your data. No system is perfectly secure. You are responsible for maintaining your own backups of business-critical data.
10. Support
10.1 Channels
Chat — available 24/7 via the in-platform chat widget to connect with our support team
Email — [email protected], with a 1–2 business day response time
Video call — for complex issues, we recommend scheduling a call using our booking link (available inside the platform and on our website)
Pro Plan subscribers also receive priority response and quarterly strategy calls with us.
10.2 Response Times
Chat — 24/7 connection to our support team
Email — 1–2 business days for most issues. Pro Plan subscribers receive priority.
Video call — scheduled through our booking link. Business hours for video calls are Monday–Thursday 8:00 am – 5:00 pm and Fridays 8:00 am – 12:00 pm Pacific Time.
10.3 What Support Covers
Support covers questions about using the platform, troubleshooting platform issues, and basic guidance. It does not include:
Custom development
Campaign strategy beyond the included Pro quarterly strategy call
Content creation (copy, design, video)
Services outside your plan
These are available as add-on services or scoped as custom projects under the MSA.
11. Disclaimers and Limitations
11.1 Service Provided “As Is”
The service is provided “as is” without warranties of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, or non-infringement.
11.2 No Guarantee of Results
We provide tools, hosting, management, and support. Business results depend on many factors outside our control. We don’t guarantee any specific business outcomes, revenue figures, or marketing results.
We also don’t guarantee approval by any third-party service provider — payment processors, email providers, SMS carriers, hosting platforms, advertising networks — whose services you or we may apply to use on your behalf. Approval decisions are made by the provider based on their own criteria, and we are not responsible for rejections, delays, or account closures initiated by third parties.
11.3 Platform Availability
We target high availability but cannot guarantee uninterrupted service. Maintenance, third-party provider outages, or circumstances beyond our control may interrupt service from time to time.
11.4 Limitation of Liability
To the maximum extent permitted by law, our total liability for any claim arising from your use of the service is limited to the fees you paid us in the six (6) months preceding the claim. We are not liable for indirect, incidental, consequential, or punitive damages — including lost profits, lost data, or business interruption.
12. Indemnification
You agree to indemnify and hold us harmless from any claims, damages, or expenses (including reasonable legal fees) arising from:
Your use of the service
Your violation of this WMA or the MSA
Your violation of any law or regulation
Content you create, send, host, or store through the platform or your managed WordPress site
Your infringement of any third party’s rights
13. Dispute Resolution
13.1 Informal Resolution First
Before any formal dispute, you agree to contact us and attempt to resolve the matter informally. Most concerns resolve quickly through direct communication.
13.2 Governing Law
This Agreement is governed by the laws of British Columbia, Canada, without regard to conflict-of-law principles.
13.3 Jurisdiction
Disputes not resolved informally will be addressed through mediation in Nanaimo, British Columbia. If mediation does not resolve the dispute within 60 days, either party may bring the matter before a court in Nanaimo.
14. General
14.1 Entire Agreement
This WMA, together with the MSA, constitutes the entire agreement between us regarding your subscription. It supersedes any prior discussions or agreements on the same subject.
14.2 Changes to Terms
We may update this WMA from time to time. We’ll give reasonable notice of material changes. Continued use after changes take effect constitutes acceptance.
14.3 Severability, Waiver, Assignment
If any provision is unenforceable, the rest remains in effect. Our failure to enforce a right does not waive it. You may not assign this agreement without our consent; we may assign in connection with a merger, acquisition, or sale of assets.
Acceptance
You accept this Website Management Agreement and confirm the following by any of these actions:
Paying your first subscription invoice for the Starter or Pro Growth System Plan
Completing checkout for the Growth System Plan through our payment portal
Otherwise activating or using the service after being given access to these terms
By accepting, you confirm that:
You have read and understood this Website Management Agreement
You have also accepted the current Master Services Agreement (MSA) — activating a Growth System Plan subscription constitutes acceptance of both documents
You have the authority to enter into this agreement on behalf of your business
Your selected plan, billing cycle, and subscription start date are reflected in your account record and first invoice.