Draft for the owner to review with a solicitor before going live. This is not legal advice and it is not a finished contract.
Terms of use
These terms are between you and Owen Harrison, sole trader (“we”), the operator of LeakSweep. They are a draft. Have a solicitor review them before you take payment from the public.
The service
LeakSweep provides automated security checks of websites you are authorised to test. LeakSweep runs an automated check. It is not a penetration test, a certification, or a guarantee that an app is secure. A clear report does not mean there is nothing else wrong.
Your authorisation
You must not submit a URL unless this is true: I am the owner of this application, or I have explicit permission from the owner to test it. I authorise LeakSweep to make passive, non-destructive requests to this site and to APIs it publicly references. I understand that accessing a computer system without authorisation is an offence under the Computer Misuse Act 1990.
You must complete the ownership check we show you. We can refuse or stop a scan. You are responsible for the sites you submit and for rotating any credential a report says was exposed.
Orders
The Quick Scan is free. A Deep Scan is £29 once. It adds Supabase and Firebase access-rule probes that store counts only, OSV dependency checks when a manifest is public, and a fix prompt on every finding. Monitoring is £9 a month, billed monthly through Stripe. Cancel any time from the customer portal. A partial month is not refunded. This sentence is a draft for legal review. Prices are in pounds sterling and include any VAT we are required to charge once the legal entity is registered. We will show VAT properly before launch if registration is required.
Digital content and the 14-day right
I ask LeakSweep to start this digital service immediately. I understand that once the scan starts, or monitoring is switched on, I lose the 14-day right to cancel this purchase for a refund under the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013.
If you do not agree, do not pay. If we have not started the scan or the monitoring period, write to hello@leaksweep.app and we will cancel that unpaid or unstarted order.
Liability
Nothing in these terms limits liability for death or personal injury caused by negligence, or for fraud, or any other liability that the law of England and Wales does not allow us to limit.
Subject to that, our total liability arising out of a scan or a month of monitoring is limited to the fee you paid us for that scan or that month. We are not liable for lost profits, lost data on your app, or a missed finding. You are responsible for deciding what to fix.
Acceptable use
You must not use LeakSweep to probe systems you are not allowed to test, to overload a site, or to hide who you are. We log the URL, the email you give us, and the authorisation statement.
Law
These terms are governed by the law of England and Wales. Courts of England and Wales have exclusive jurisdiction, except that you may have a right to bring a claim in your home courts if you are a consumer and the law requires that.
Contact hello@leaksweep.app.