Terms of Service

Last updated: August 13, 2026

This is not legal advice, and Unbeta is a young product — treat this page as our current good-faith terms, not a substitute for reading your own agreements. If anything here is unclear, email us before you rely on it.

1. Who we are

Unbeta (“Unbeta,” “we,” “us”) operates unbeta.ai and the Unbeta service (the “Service”). By creating an account, verifying a domain, or running a scan, you agree to these Terms. If you don’t agree, don’t use the Service.

2. What the Service does

Unbeta scans a website or web app you specify and reports on four areas — bugs, security exposure, legal/accessibility exposure, and traffic readiness — as a single Beta Score plus a findings list. The Service is diagnostic and informational only. It is not:

• A guarantee that a target is secure, bug-free, legally compliant, or able to withstand any level of traffic.
• Legal advice, a security certification, or an accessibility audit performed by a licensed professional.
• A substitute for your own judgment about whether to ship, launch, or remediate anything the Service reports.

We use “exposure” and “readiness” language deliberately and never claim a target is “safe,” “compliant,” “certified,” or “guaranteed” — see the disclaimer on every report.

3. Authorization to scan — the core rule

You may only submit a domain you own or are explicitly authorized to test. By submitting a URL for any active scan (security, bug, legal, or traffic/load testing), you represent and warrant that:

• you own the domain, or have explicit written permission from the owner to run security testing, bug testing, and load testing against it;
• you have the legal authority to give that authorization; and
• the testing complies with all laws and any agreement (e.g. a hosting provider’s acceptable-use policy) that applies to the target.

We enforce a domain-ownership verification step (a DNS TXT record or a meta tag you control) before any active scan runs. The one exception is the free Quick Check, which performs a passive, read-only check — a single request to your homepage, its publicly served response headers, and the scripts that page publicly references (the same resources an ordinary visitor’s browser loads and a tool like Lighthouse or securityheaders.com reads on any public page) — and does not require verification, because it never requests anything beyond what that page itself already points to.

You are solely responsible for the consequences of running a scan — including if you scan a domain you were not actually authorized to test. You agree to defend, indemnify, and hold Unbeta harmless from any claim, loss, or expense (including reasonable legal fees) arising from your violation of this section.

4. Load testing (Traffic pillar) — extra terms

The Traffic pillar generates real, sustained traffic against your target to find its breaking point. This is never run automatically or on a schedule — it only runs when you explicitly trigger it. Because this can:

• generate real load-related costs on your own hosting bill,
• trip your own host’s or CDN’s rate-limiting/DDoS protection, or
• affect real users if run against a live production system,

you acknowledge these risks are yours to manage, and that Unbeta’s caps (virtual-user limits by plan) are a safety measure, not a guarantee that a run will have no side effects on your infrastructure. Only run a load test against a target you’re prepared to have receive that traffic.

5. Acceptable use

You may not use the Service to:

• scan or load-test a domain you don’t own and aren’t authorized to test;
• attempt to interfere with, disable, or overload Unbeta’s own infrastructure;
• reverse-engineer, scrape, or resell the Service or its findings data as a competing product;
• use the Service for any unlawful purpose.

We may suspend or terminate access for violation of this section, at our discretion.

6. Accounts, plans, and billing

• Free, Starter, and Pro plans are described on the pricing/billing page. Plan limits (scan frequency, load-test intensity, etc.) are enforced server-side.
• Paid plans renew automatically each month via Stripe until canceled. Cancel anytime from the Billing page (Stripe Customer Portal) — cancellation takes effect at the end of the current billing period, no partial-month refund.
• You’re responsible for keeping your account secure — whichever sign-in method you use (Google, GitHub, or an emailed one-time code).

7. Data we handle about your target

See the Privacy Policy for full detail. In short:

• We store scan results (scores, findings) tied to your account so you can view history and track progress over time.
• We never persist a raw secret we find (API keys, credentials). A detected secret is shown to you once, for five minutes, then permanently destroyed — we do not log or retain the plaintext value.
• Self-service deletion of a connected app or its scan history isn’t built yet — request it via the contact below and we’ll handle it manually.

8. Disclaimers

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE,” WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. We do not warrant that the Service will detect every bug, vulnerability, legal-compliance gap, or traffic-capacity issue that exists on your target — a clean or high score is not proof that none exist. We do not warrant uninterrupted or error-free operation.

9. Limitation of liability

To the maximum extent permitted by law, Unbeta’s total liability arising out of or relating to the Service — whether in contract, tort, or otherwise — will not exceed the greater of (a) the amount you paid us in the 12 months before the claim, or (b) $100. Neither party is liable for indirect, incidental, special, consequential, or punitive damages, including lost profits or lost data, even if advised of the possibility.

10. Indemnification

You agree to defend, indemnify, and hold harmless Unbeta and its owners, officers, and employees from any claim, damage, loss, liability, cost, or expense (including reasonable attorneys’ fees) arising from: (a) your use of the Service, (b) your violation of these Terms, (c) your violation of any law or third party’s rights, or (d) your scanning of a target you were not authorized to test.

11. Termination

You may stop using the Service at any time. Self-service account deletion isn’t built yet — closing your account requires contacting us below. We may suspend or terminate your access for violating these Terms, non-payment, or if we reasonably believe your use poses a legal or security risk to us or others.

12. Changes to these Terms

We may update these Terms from time to time. Material changes will be communicated via a notice on the site. Continued use after a change takes effect means you accept the updated Terms.

13. Governing law

These Terms are governed by the laws of the State of Washington, USA, without regard to its conflict-of-laws principles, and any dispute will be resolved in the state or federal courts located in Washington.

14. Contact

Questions about these Terms: seattlefishbox@gmail.com

This page has not been reviewed by a lawyer. It’s a good-faith first draft, adapted from comparable active-scanning SaaS products, and will be revised as Unbeta grows.