Terms of Service

Effective October 1, 2026.

These Terms of Service (“Terms”) govern access to and use of QA Audit, including the website, audits, reports, teasers, CLI, APIs, Chrome extension / bookmarklet helpers, operator tools, and related services (collectively, the “Service”), operated by QA Audit (“we”, “us”, or “our”). By ordering an audit, creating an account, accepting these Terms at checkout, using an API token, or otherwise using the Service, you agree to these Terms. If you use the Service on behalf of an organization, you represent that you have authority to bind that organization. Questions: [email protected].

1. The service

QA Audit provides automated website QA reports and related tooling. Checks are based on what our crawler and scanners can fetch and analyze at the time of the run. Reports identify potential issues. They are not a guarantee of security, accessibility, SEO, legal compliance, uptime, or business results, and they are not legal, security, accounting, or consulting advice. You remain solely responsible for decisions you make based on reports.

Security Pro (when offered) adds an automated external surface scan (for example, open ports and exposed services) after you prove control of the target domain. It is not a penetration test, exploit validation, red-team engagement, or compliance certification. Results depend on what our scanners can reach at scan time.

We may change, suspend, or discontinue features, plan names, limits, or availability of the Service, including free teasers and demo modes, with or without notice, except where a separate written agreement says otherwise.

2. Eligibility and accounts

The Service is for business and professional use. You must be at least 18 years old (or the age of majority where you live) to create an account or purchase.

Launch may be purchased without an account; the report link is your credential to view results for that audit.

Essential, Team, Engineering, and Security Pro require a verified account before payment (for example, email one-time code or signup). The purchase is attached to that account. DNS verification and Security Pro network scan actions are available to the account holder (or our operators on your behalf), not to anonymous report-link visitors.

You are responsible for your login credentials, API tokens, and for activity under your account. Keep tokens secret. Notify us promptly if you suspect unauthorized use. We may disable accounts, tokens, or jobs that abuse the crawler, payment flow, network scan features, or these Terms.

3. Your crawl and scan authorization

You may only submit URLs, hostnames, or targets for websites and systems you own, operate, or have explicit written permission to test. You agree not to use QA Audit for malicious purposes — including unauthorized scanning, overloading or attacking sites, bypassing access controls, harvesting credentials or personal data at scale, or any activity intended to harm a target site, its users, or third parties.

Do not use the Service to probe sites you are not authorized to test. We may refuse, suspend, throttle, or rate-limit crawls and scans to protect target sites and our infrastructure, and we may cooperate with lawful requests from target operators or authorities when we reasonably believe abuse has occurred.

Security Pro network scans require proof of domain control (DNS TXT or HTTPS well-known file) before any port scan runs. You warrant that you control the hostname you submit and that you are authorized to authorize scanning of that surface.

4. Acceptable use

You will not, and will not allow others to:

• Reverse engineer, decompile, disassemble, or attempt to derive source code, models, prompts, scoring logic, or non-public methods of the Service, except to the limited extent applicable law forbids this restriction;
• Copy, scrape, crawl, mirror, frame, or systematically download the Service, our marketing site, documentation, pricing, or report UI in order to build a competing product, train models, or republish our content;
• Resell, sublicense, rent, lease, white-label, or provide the Service (or access via your account or API tokens) to third parties as a competing audit product or managed service, unless we have agreed in writing;
• Remove, alter, or obscure watermarks, copyright notices, branding, or “not for redistribution” legends on teasers, previews, emails, or reports;
• Circumvent payment, plan limits, authentication, rate limits, or Security Pro domain verification;
• Interfere with or disrupt the Service, or probe our infrastructure except through features we expressly provide for your authorized targets;
• Use the Service in violation of law, including privacy, computer misuse, export, or sanctions rules.

5. Intellectual property and license

Our IP. We and our licensors own all right, title, and interest in the Service, including software, websites, crawlers, scanners, CLI packages we publish, documentation, branding, logos, UI/UX, report templates and layouts, scoring methodologies, prompts, workflows, teaser designs, and all related intellectual property. No rights are granted except as expressly stated in these Terms.

Your content. You retain ownership of your website content and materials you submit (such as URLs and company name). You grant us a worldwide, non-exclusive, royalty-free license to access, crawl, copy, process, store, and display that content and related scan artifacts solely to provide, secure, improve, and support the Service, and as described in our Privacy Policy.

Your license to reports. Subject to these Terms and full payment for the applicable order, we grant you a limited, non-exclusive, non-transferable, non-sublicensable license to use the purchased audit report and exports for your internal business purposes, including sharing with your employees, contractors, and advisors under confidentiality obligations no less protective than these Terms. This license does not include rights to our underlying software, methodologies, or templates as standalone products.

Teasers and unpaid previews. Free teasers, watermarked previews, demo reports, and similar evaluation materials are licensed only for your internal evaluation of QA Audit. They are not for redistribution, public posting, resale, or use as a substitute for a paid report. Watermarks and legends must remain intact.

CLI and API. npm packages and API access are licensed for use only with valid credentials and paid entitlements we issue. The CLI is a client to our Service; it does not transfer ownership of server-side logic. You may not redistribute API tokens, package the Service as your own SaaS, or use the API to power a competing public audit product.

Feedback. If you send ideas, suggestions, or feedback, you grant us a perpetual, irrevocable, worldwide, royalty-free license to use them without restriction or attribution.

6. Payment and refunds

Paid audits and add-ons run after Stripe confirms payment (unless we expressly waive payment in a demo or evaluation mode). Prices are shown at checkout and may change for future orders. Taxes may apply. Refunds are handled case by case — contact support if a paid report failed to generate. Optional add-ons (form-implementation work, subscriptions, remediation packages) are separate and may require a separate agreement.

If Stripe is not configured, the app may run in demo mode and waive payment. Demo reports are for evaluation only and are not a paid contract.

Chargebacks or payment disputes filed without first contacting support may result in suspension of accounts, report links, or API access while we investigate.

7. Report links and confidentiality

The report URL is a secret. Anyone with the link can view the report and, where enabled, update finding status. You are responsible for who you share it with. We treat report contents as confidential to you, except as needed to operate the Service, comply with law, or as you direct via sharing.

8. Third-party sites and services

Crawling and scanning interact with third-party websites and infrastructure. We do not control those sites. You are responsible for compliance with their terms and applicable law. The Service may rely on third-party processors (for example Stripe for payments, email delivery providers, and hosting). Your use of those processors may also be subject to their terms.

9. Disclaimer of warranties

TO THE FULLEST EXTENT PERMITTED BY LAW, THE SERVICE AND ALL REPORTS ARE PROVIDED “AS IS” AND “AS AVAILABLE,” WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, OR UNINTERRUPTED OR ERROR-FREE OPERATION. We do not warrant that findings are complete or that remediating them will achieve any particular outcome.

10. Limitation of liability

TO THE FULLEST EXTENT PERMITTED BY LAW, QA Audit AND ITS OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS OPPORTUNITY, ARISING OUT OF OR RELATED TO THE SERVICE, REPORTS, CRAWLS, OR SCANS, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

OUR TOTAL LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATED TO A PARTICULAR PAID ORDER WILL NOT EXCEED THE AMOUNT YOU PAID US FOR THAT ORDER. FOR USE OF FREE, TEASER, OR DEMO FEATURES, OUR TOTAL LIABILITY WILL NOT EXCEED USD $50. These limits apply in aggregate and regardless of the theory of liability.

Some jurisdictions do not allow certain limitations; in those cases, our liability is limited to the maximum extent permitted by law.

11. Indemnification

You will defend, indemnify, and hold harmless QA Audit and its officers, directors, employees, and agents from and against any claims, damages, losses, costs, and expenses (including reasonable attorneys' fees) arising out of or related to: (a) websites or systems you submit for crawling or scanning; (b) your breach of these Terms or of authorization warranties; (c) your misuse of the Service, reports, teasers, CLI, or API; or (d) your violation of law or third-party rights.

12. Suspension and termination

We may suspend or terminate access to the Service, accounts, tokens, or jobs immediately if we reasonably believe you violated these Terms, created risk or legal exposure for us or others, or if required by law or payment processors. You may stop using the Service at any time. Sections that by their nature should survive (including intellectual property, disclaimers, liability limits, indemnity, and governing law) will survive termination.

13. Changes

We may update these Terms by posting a revised version on this page and updating the effective date. Material changes apply prospectively. Continued use of the Service after the effective date constitutes acceptance of the updated Terms. If you do not agree, stop using the Service and contact support about outstanding paid work.

14. Governing law

These Terms are governed by the laws of the State of New York, USA, without regard to conflict-of-law rules. Exclusive venue for disputes that are not resolved informally lies in the state or federal courts located in New York, and you consent to personal jurisdiction there, except where applicable law requires otherwise for consumers (this Service is intended for business use).

15. General

These Terms, together with the Privacy Policy and any order-specific terms shown at checkout, are the entire agreement between you and us regarding the Service and supersede prior conflicting terms for that subject. If a provision is unenforceable, the remainder stays in effect. Our failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; we may assign them in connection with a merger, acquisition, or sale of assets. Notices may be sent to the email on your account or order, or to [email protected].

16. Privacy

How we handle personal data is described in the Privacy Policy.