Terms

What the service is

An automated technical analysis of a publicly served SuiteCommerce storefront. We fetch pages the way a search engine and a shopper each receive them, run a fixed set of checks over what we captured, and produce a report that cites the evidence behind every finding.

What it is not

This section limits what you may rely on, and it is the most important one on the page.

• Not a certification, and not an assurance. A report is a measurement taken at one moment against one sample of your storefront. It certifies nothing, it is not a penetration test or a security audit, and it is not an accessibility conformance statement under any standard.
• Not complete. An audit reads a sample bounded by the page budget of the depth you chose. A check that could not run is reported as skipped and is never reported as a pass — but a clean report means the checks that ran found nothing, not that your storefront has no defects.
• Not advice. Findings and suggested remediations are information. They are not legal, accessibility, security or tax advice, and some are produced by a language model interpreting evidence, which the report labels as such. Verify a finding before you act on it in production.
• Not a substitute for your own testing. You remain responsible for what you deploy to your storefront.

Merchant accounts

• You may request audits of hostnames you have verified, and of no others. Verification is an e-mail address at the registrable domain, a DNS TXT record, or a tag in the Site Management Tools head. It lapses after twelve months and whenever the NetSuite account serving the hostname changes.
• An audit makes your NetSuite account regenerate pages. That cost is yours, it is bounded by the page budget of the depth you chose, and the budget is stated before you start.
• Reports are yours. We use anonymised, de-identified measurements — no hostname, no account — to produce the benchmark a report compares you against.
• We do not fetch anything behind a storefront login, and we do not read order, customer or account data.

What you promise us

• Authorisation. You warrant that for every hostname you ask us to audit you are the owner, or you are authorised by the owner to request it. Verification is how we check that, and it is a check rather than a substitute for the warranty.
• Indemnity. You will indemnify us against claims, losses and reasonable costs arising from an audit of a hostname you were not authorised to request, from your use of a report in breach of these terms, or from content you asked us to fetch that infringes somebody’s rights.
• Acceptable use. No attempt to audit infrastructure you do not control, no probing of our own systems, no circumventing rate or breadth limits, no reselling access, and no use of the service to build a census of a market.
• Accuracy. The account and billing details you give us are true, and you keep them current.

Availability, suspension and termination

The service is provided as it stands and as it is available. We offer no uptime commitment and no service credits, and we may change, suspend or withdraw a feature. We may suspend or close an account immediately where we reasonably believe it is being used to audit hostnames without authorisation, to probe our systems, or in breach of the acceptable use above; and on notice for non-payment. You may close your account at any time. A paid term already invoiced is not refunded on early termination, because the remainder is already paid.

Limits on our liability

Nothing in these terms limits or excludes liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for anything else that the applicable law does not permit to be limited. If you contract as a consumer, your statutory rights are unaffected by anything below. Liability owed directly to a data subject under data protection law is owed to that person and is not affected by any term agreed between us and a customer.

Subject to that paragraph, and to the extent the applicable law permits:

• We give no warranty that the service will be uninterrupted, that a report will be complete or free of error, or that acting on a finding will produce any particular result. All warranties, conditions and terms implied by statute or common law are excluded so far as the law allows.
• We are not liable for loss of profit, revenue, business, goodwill, anticipated savings, search ranking or data, nor for any indirect or consequential loss, however arising.
• We are not liable for loss arising from your acting on a finding without verifying it, from a defect in your storefront that an audit did not detect, or from a change a third party made to your NetSuite account or your theme.
• Our total liability arising out of or in connection with the service, whether in contract, tort including negligence, or otherwise, is capped in aggregate at the greater of the fees you paid us in the twelve months before the claim arose and €100.00.

Agency and vendor accounts

A partner account may audit a storefront it has not verified. These six clauses are what stands in for the merchant’s consent, and they are why partner accounts are approved by hand rather than by card.

1. Legitimate interest. Each domain audited is a client or a prospect you have a genuine commercial interest in. Building a market census is not one.
2. No resale. A report may be shown to the merchant it describes and used in your own engagements. It may not be sold, syndicated or published as a dataset. Aggregate commentary is fine; findings attributed to a named merchant are not.
3. Breadth limits are contractual. 5 new distinct domains per day and 40 per rolling thirty days, within a fair-use credit pool. The first audit of a domain you have never audited costs 3 times the usual credits. Circumventing the limits with multiple accounts or shared credentials ends the contract without refund.
4. Term. Six months minimum, paid upfront by invoice. Early termination refunds nothing, because the remainder is already paid.
5. Opt-out is absolute. A verified owner may block partner audits of their domain. There is no appeal path through support, and no account tier that overrides it.
6. Audit. Every partner audit is logged with the domain, the user and the report id, and we may disclose that log to the merchant who owns the domain.

If you are a merchant we audited

You do not need an account to stop us. Our crawler page explains how to block the user agent outright. Verifying your domain also lets you switch off partner audits for it permanently, and you may ask us to delete what we hold about your storefront — the privacy notice says what that covers, what survives it and how long it takes.

Changes, and the rest

We may change these terms; the version in force is the one on this page, with its date at the top, and we will tell account holders by e-mail before a change that materially reduces what they get. If a clause is held unenforceable the rest stands. Failing to enforce a term is not a waiver of it. These terms and the documents they link to are the whole agreement.

Your data

What we hold, who processes it and for how long is in the privacy notice and the sub-processor list. Enterprise and Partner accounts can sign the data processing addendum.