Terms of service

These terms are a draft for RLS Radar, a product of Patrick Godin, operating from Greater Moncton, New Brunswick, Canada. The public site is intended to be rlsradar.com. Until a lawyer reviews this draft, treat it as the working rules of the service, not a finished contract.

Who may use the service

You may start a scan only for a website, app, or API you own, or that the owner has authorized you in writing to check. You confirm that authorization when you add a project and again when you pay. Scanning someone else’s property without permission is outside these terms. We will refuse, cancel, or report that use.

You must be able to enter a contract. If you use RLS Radar for a company, you confirm you can bind that company.

What the scan is, and is not

A scan is a passive, read-only look at responses an anonymous visitor can already request. We send GET requests only. We do not sign in, we do not submit forms, we do not change data, and we do not try exploits. We do not bypass logins, rate limits, or paywalls.

This is not a penetration test, an audit, a certification, or a promise that an app is secure. The number we publish is a perimeter score: how the site looks from an anonymous GET. A high score means those outside checks did not find the issues we look for. It does not test logins, POST requests, authorization, injection, business logic, or cross-tenant access, and it does not mean there are no issues. A low score means we saw something worth fixing. It does not mean the app has already been breached.

Ownership checks

Before a scan, you prove control of the hostname. You either publish a DNS TXT record we give you, or you place a file at /.well-known/rlsradar-verify.txt. We re-check that proof before the worker runs. A verification expires. After it expires, you prove ownership again before another scan.

Payment

The first perimeter scan of a verified domain is free, once for that domain and once for that email, while the daily free-scan cap has room. The core plan is perimeter monitoring at 19 US dollars per month per project. It includes weekly rescans, an email when the outside view changes, and a code grade when you connect a repository. A single paid scan is 9 US dollars and includes the same code grade. Those amounts can be changed in the server configuration. Monitoring checkout is offered when that plan is switched on. Taxes such as GST or HST are added when the law requires them. Stripe processes the card. We do not store your full card number.

If a scan fails because our service broke, we will rerun it or refund the scan fee. We do not refund a scan because the report found problems, or because a finding was a false positive you already accepted. Monitoring fees already used in a billing period are not refunded except where consumer law in New Brunswick or Canada requires it.

Your content and our limits

You keep ownership of your app and of the configuration you publish. You give us a limited right to request public URLs on the verified host, for the scan you ordered, and to store the redacted report we produce.

We store table names, whether a table returned a row, status codes, and short redacted snippets. We do not store customer rows, source-map source, or full secret values. Reports are kept for 30 days unless we agree a different window in writing, then the evidence is deleted. Account email and payment records may be kept longer where tax or accounting rules require it.

Acceptable use

You will not:

• point the scanner at a host you are not allowed to check;
• resell raw scan access, or use the service to build a competing scanner, without a written agreement;
• interfere with the service, other customers, or the worker;
• submit malware, or use a finding to attack a third party.

Our side

We may pause scans, refuse a target, or close an account that breaks these terms or that puts other people at risk. We may change the checks. We will not sell your scan data.

The service is provided as available. We are not liable for indirect or consequential loss, lost profits, or a breach of your app that these checks did not catch, except where Canadian law does not allow that limit. Our total liability for a scan is the amount you paid us for that scan in the prior three months.

Law

These terms are governed by the laws of New Brunswick and the federal laws of Canada that apply there. Courts in New Brunswick have jurisdiction, without removing any rights you have as a consumer that cannot be waived.

Questions: support@rlsradar.com. Patrick Godin, Greater Moncton, New Brunswick, Canada.