Terms of service

> DRAFT — not reviewed by a lawyer. Placeholders in [brackets] must be filled in by the owner before publishing.

Terms of Service

Last updated: October 11, 2026

These terms cover your use of OkayToShip at okaytoship.com (the "Service"). The Service is operated by [Owner legal name] ("we", "us"). By running a scan or buying anything from us, you agree to these terms. If you don't agree, please don't use the Service.

1. What OkayToShip does

OkayToShip checks web apps (and, later, Telegram bots) for common launch problems in six areas: security, payments, SEO, speed, legal pages and email setup, and costs. We offer:

• a free scan with a readiness score and a short summary;
• a full report for a one-time fee;
• fixed-price fixes done by us;
• monitoring by monthly subscription.

Current prices are on our pricing page. Prices are in US dollars.

2. Scanning: what you promise us

Before you scan an app you confirm that it is your app, or that you have permission from its owner to check it. You must not use the Service to scan apps you have no right to check.

Without ownership verification we run passive checks only: we look at what any visitor's browser can see (public pages, JavaScript files, response headers, DNS records, and a short list of well-known public file paths). We do not log in, guess passwords, read anyone's data, or send attack traffic.

Some checks need you to prove you own the app (for example, a meta tag, a file at /.well-known/, or a DNS TXT record). Only after that do we run checks that go beyond what a browser sees, and only against the app you verified.

We don't scan government, military, banking, healthcare or education sites, private network addresses, or sites on non-standard ports. See our Acceptable Use Policy.

3. Accounts

You sign in with a one-time code sent to your email. Keep access to your email secure; anyone who can read it can sign in as you. One person per account.

4. Payments

Payments are processed by Lemon Squeezy, which acts as the Merchant of Record. That means Lemon Squeezy is the seller on your receipt, handles payment, sales tax and VAT, and issues invoices. Lemon Squeezy's own terms also apply to your purchase.

• The full report is a one-time payment.
• The amount you paid for a full report counts toward any fix you order for the same app.
• Monitoring renews monthly until you cancel. You can cancel at any time; you keep access until the end of the paid period.

Refunds are covered by our Refund Policy.

5. Fixes

When you order a fix:

• You give us access only by inviting us to your project or repository. We never ask for or accept your passwords.
• We work within the scope of the package you bought (one issue, security, or launch-ready), within the time shown on the fixes page, counted in business days from when we receive access.
• After the work we re-scan the app to show the before and after, and you remove our access (we will remind you, and we stop using it either way).
• Guarantee: if the re-scan after our fix still finds the same problem, we fix it again for free or refund you.

You are responsible for keeping backups of your app and data. We take care, but we're not responsible for problems caused by changes made by you, your platform, or third parties after our work.

6. What a report is and isn't

A report is an automated check plus plain-language advice. It is not a full security audit, penetration test, legal advice or a guarantee that your app is secure or compliant. Automated checks can miss problems and can sometimes flag something that isn't a real problem. Use your own judgment and, where it matters, a qualified professional.

7. Secrets we find

If a scan finds a key or token in your public code, we show only its type and the first 6 characters. We don't store the full value. If we report a key as exposed, assume it's compromised: rotate it with your provider.

8. Your content and our content

You keep all rights to your app. You give us permission to access and analyse it as needed to run the checks and fixes you asked for.

We may use anonymised, aggregated scan results (for example, "how many apps on platform X miss a security header") in our own content. We never publish your app's name, URL or findings without your permission.

The OkayToShip site, software, report format and text belong to us.

9. Acceptable use

You agree to follow our Acceptable Use Policy. We may suspend or close accounts that break it, without refund for the misuse.

10. Availability

We aim to keep the Service running but don't promise it will always be available or error-free. Free scans have daily limits per domain.

11. Liability

To the extent the law allows:

• The Service is provided "as is".
• Our total liability to you for any claim is limited to the amount you paid us in the 12 months before the claim.
• We are not liable for indirect losses such as lost profits, lost data, or business interruption.

Nothing in these terms limits rights you have under consumer law that can't be limited by contract.

12. Changes

We may update these terms. If a change is significant, we'll tell signed-in users by email before it takes effect. Continuing to use the Service after that means you accept the new terms.

13. Law and contact

Questions: hello@okaytoship.com.