Terms of service

1. Who you are contracting with, and who may buy

The service is provided by ADMI ENTERPRISES s.r.o., registered seat Nové sady 988/2, Staré Brno, 602 00 Brno, IČO 29581010, entered in the commercial register under file C 151699, Krajský soud v Brně (Regional Court in Brno). Sales are made through our merchant of record, Stripe (Link), which includes and remits any applicable VAT - listed prices are final, with nothing added at checkout. WebAuditOS is the trading name of the product and is not itself a legal entity.

WebAuditOS is sold to businesses and to consumers alike. You are a consumer if you are a natural person buying outside the scope of your trade, business or profession, and a business customer if you are not. That is decided by what the purchase is objectively for, not by anything you tell us or we ask, and it is why we do not make you declare it.

Where a section below treats the two differently it says so in its own words. Sections 6, 12, 13, 14, 17, 19 and 20 are the ones that do. Everywhere else the same rules apply to everyone.

Nothing in these terms limits the rights Czech or EU law gives a consumer and does not allow to be limited.

The contract between us consists of these terms. If you are a business customer, the data processing agreement at /legal/dpa is incorporated by reference and binding on both of us from the moment you accept these terms - no separate signature is needed; where your procurement requires one, write to us. The privacy policy at /privacy is not part of the contract: it is the information about personal data we owe you by law, provided for your information.

2. Authorisation to scan

You may only scan domains you own or are contractually authorised to assess. By starting a scan you confirm you hold that authorisation, and you remain responsible for confirming it for every target you add - we cannot verify it and do not attempt to.

You can also run one free scan from our homepage without an account. The same rule applies there: the scan starts only after you tick a box confirming that you own the domain or are authorised to assess it and that you accept these terms and the privacy policy. We record that confirmation - the declaration you ticked, the terms version, the target domain, the time and your IP address - and keep the record for twelve months as evidence of what was agreed.

We may suspend accounts that scan third-party sites without permission or that use the platform to probe infrastructure they do not control.

3. Acceptable use

You are responsible for the people you admit to your workspace: anyone using a seat, an invitation or an API key you issued acts under your account, and their use of the service counts as yours.

If you operate a website and do not want it scanned at all, you can object at /opt-out - verified with one DNS record, no account needed - or write to [email protected]. A domain on the do-not-scan list is refused for every customer, paying ones included.

A verified operator of a domain can also have every stored scan of it erased, in every customer's workspace, paying customers' included: the pages, findings, screenshots, reports and share links those scans produced. The erasure covers the scans started up to the request. Scans from the public free scanner go at once; scans in a customer's workspace go 7 days later, after we have told that workspace's owners, who can tell us in that time if the request did not come from someone entitled to make it. Erased scans are not restored, and no refund or other compensation is owed for them.

The erasure removes scan data, not every mention of the domain. What remains afterwards is: the domain on the do-not-scan list, where the operator chose the block, so that the block keeps working; our record of the request and its outcome (the domain, when it was requested, due and carried out, which workspaces held scans of it, which share links were switched off, how many scans were erased, and the IP address the request came from, which is removed after twelve months); the records of the confirmation ticked on our public free scanner for that domain (the domain, the time and the IP address), each deleted 365 days after it was made; the public free scanner's project entry for the domain, with no scans in it; each customer's own project for the domain, with no scans in it, which stays part of that customer's workspace until the customer deletes it; and the erased scan data itself in our backup copies, for up to 8 days until those copies expire. Where the operator did not choose the block, the domain can be scanned again later, and those later scans are not covered by the request.

• No attempts to bypass rate limits or plan quotas
• No creating additional accounts or workspaces to evade free-tier or plan limits
• No resale of raw API access outside your plan entitlements
• No use of the service to plan or facilitate an attack, and no use of scan output to attack, exploit or harass a third party
• No scanning of a single host at a frequency that degrades it
• No scanning a target where doing so is contrary to the law of the place the target operates
• No scanning of critical infrastructure - energy, water, healthcare, transport, financial or government systems and the like

4. Subscriptions, billing and the trial

Plans bill monthly or annually in advance and renew automatically for successive periods of the same length until cancelled. You can cancel at any time from Billing; cancellation takes effect at the end of the period already paid for, and no further charge is taken after it.

Plan changes are made in the billing portal, reached from Billing. The portal shows what a change costs - and what, if anything, is credited for the part of the period you have already paid for - before you confirm it. Unused quota does not carry over. We give 30 days of notice before a price change takes effect at a renewal, and a price change never applies to a period already paid for.

The Pro plan offers a free trial of 7 days. Your card is collected at checkout but nothing is charged until the trial ends; we remind you by e-mail before the first charge, and cancelling before the trial ends costs nothing. There is one trial per workspace, per e-mail address and per IP address. If the workspace has had a subscription before, or if the workspace, your e-mail address or your IP address has had a trial in the last 24 months, the subscription is charged at the full price from its first day. A checkout with the trial that has been opened but not finished holds the trial for 24 hours: until then no other checkout for the same workspace, e-mail address or IP address gets one, unless it is the same person trying again in the same workspace. The IP check looks at the network address, not the person, so a trial already used by someone else on the same connection (a shared office, household or mobile network) can mean there is no trial for you either.

If a renewal payment fails you keep access while the charge is retried, and we notify you by e-mail - for at most 21 days from the day the payment first failed. If it is still unpaid after that, the workspace is treated as being on the free plan until the open invoice is paid, even though the subscription has not ended. If the subscription ends unpaid or cancelled, the workspace moves to the free plan. Either way paid features close and scan history follows the free plan's retention window of 30 days, so older scans are deleted by the daily retention job.

5. Payments, merchant of record and taxes

Purchases are processed through Stripe Managed Payments, with Stripe's Link service acting as merchant of record for the transaction. The service contract - everything these terms govern - remains between you and us; the payment transaction is between you and Stripe/Link.

Sales are made through our merchant of record, Stripe (Link), which includes and remits any applicable VAT - listed prices are final, with nothing added at checkout. That is true whether you buy as a consumer or as a business: the price on /pricing is the price you pay, and Stripe/Link calculates, collects and remits any VAT or similar tax due on the sale.

Receipts and invoices are issued by Link, and your card or bank statement will show LINK.COM* rather than our name. Refunds, payment disputes and transaction-level payment support are handled by Stripe/Link; you can manage a subscription from the Billing page in the app and at link.com. Nothing about the merchant-of-record arrangement reduces your rights against us under these terms.

6. When the service starts, and your right to withdraw

Your subscription starts as soon as payment succeeds: quotas are raised, paid checks unlock and scans can begin within seconds.

If you are a consumer you have 14 days to withdraw from the contract without giving a reason. The period runs from the day after the contract is concluded, and the contract is concluded - for a subscription and for a trial alike - on the day your payment or checkout succeeds. A trial changes nothing about the deadline: the fourteen days run from checkout, not from the trial's end.

To withdraw, tell us in a clear statement before the 14 days are up - an e-mail to [email protected] is enough, and so is the form at the end of this section, which you may use but do not have to. Sending the message before the deadline is what counts, not when it reaches us. We will confirm receipt without delay, and everything you paid is refunded within 14 days of our being told, by the same means you paid and at no cost to you; the refund is paid out through Stripe/Link, the merchant of record described in section 5.

No part of that right is given up at checkout. You are not asked to have the service start early at the cost of your right to withdraw, so if you withdraw within the 14 days you owe nothing for the time you had the service, and the refund above is the whole amount you paid. Nothing we sell ends your right to withdraw on delivery.

None of this affects your right to cancel a renewal under section 4, which is separate, has no deadline, and always exists. Nor does it affect your rights where something is defective, which are in section 13.

If you are a business customer, no statutory withdrawal right arises and this section does not apply to you. Section 4 still lets you cancel any renewal.

Model withdrawal form - copy it, fill it in and send it to us, or write your own:

• To ADMI ENTERPRISES s.r.o., Nové sady 988/2, Staré Brno, 602 00 Brno, [email protected]:
• I hereby give notice that I withdraw from my contract for the supply of the following service: …
• Ordered on / received on: …
• Name of consumer: …
• Address of consumer: …
• Signature (only if this form is sent on paper): …
• Date: …

7. How the contract is concluded

The technical steps are these: choose a plan, create an account or sign in, and complete payment on the Stripe-hosted checkout page. You can review and correct anything you entered at any point before paying, and the contract is concluded when your payment succeeds.

Link sends the receipt or invoice for each payment; the terms themselves reach you in full in the e-mail described below. Where a plan starts with a free trial nothing is charged on the first day, so the first such document arrives when the trial ends, and we e-mail you before that happens.

The contract can be concluded in English only. When you create an account, we e-mail you the full text of these terms, with the version identifier and the time you accepted it; keep it as your copy. With an e-mail address and password it is in the e-mail that asks you to confirm the address; with Google it is in an e-mail we send once you have accepted these terms. We do not store a signed contract document; what we store is the record of your acceptance - which version of these terms you accepted, when, and the declaration you agreed to. The current version is always at this address, and the full text of any earlier version is available from us on request.

8. Intellectual property

The platform, its check library, scoring model, report designs and texts are ours and remain ours; we grant you a non-exclusive, non-transferable licence to use the service and its output for the purpose the product serves - assessing and improving the websites you are authorised to assess - for the duration of your contract.

Reports you generate are yours to use and to share with the site's operator, your team and your advisers. On the Agency and Enterprise plans you may also pass white-label reports to your own clients as part of your services to them. Nobody may resell reports or scan output as a standalone product, publish them, or use them to build a competing service.

Where you configure white-label branding, you grant us a licence to use the logo and colours you upload in the reports you generate, and you warrant that you hold the rights needed to grant it.

You may not reverse-engineer the platform, scrape its interface, or systematically extract the check library or scoring model. If you send us feedback or suggestions we may use them without restriction or payment - that is the only licence you grant us in the other direction.

9. Nature of the findings

Audit output is informational. Automated analysis observes external signals and cannot guarantee the absence of vulnerabilities, legal non-compliance or accessibility barriers. Manual and inferred items are labelled as such and require human verification. You remain responsible for decisions taken on the basis of a report.

10. Availability

We target 99.9% monthly availability for the application. We do not publish a measured figure against that target: no uptime history is stored yet, and /status explains why rather than showing an invented number. So this is an intention, not a service level you can hold us to.

Scheduled maintenance is announced in advance. There is no service level agreement on any plan today; Enterprise terms, including any contractual service levels and credits, are negotiated per contract.

11. Warranties and disclaimers

The service is provided as it stands. To the extent permitted by law we make no warranty that it will be uninterrupted or error-free, or that findings will be complete, and we exclude warranties not expressly given in these terms.

Nothing in this section excludes liability that cannot lawfully be excluded, including liability for damage caused intentionally or by gross negligence, and liability for harm to a person's natural rights.

12. Liability

If you are a business customer: to the extent permitted by law, our total liability arising out of or in connection with the contract is limited to the greater of the fees you paid in the twelve months preceding the event giving rise to the claim and EUR 1,000, and we are not liable for lost profit, lost data, loss of goodwill, or indirect or consequential loss. This cap does not apply to our breach of data-protection obligations or of the confidentiality obligations in section 15.

If you are a consumer: that limit does not apply to you. We are liable to you as Czech law provides, and nothing in these terms cuts down the rights you have from defective performance or the compensation the law allows you to claim.

For everyone, the limits in this section do not apply to the exclusions named in section 11.

13. Defective performance and complaints

If the service does not work as described, tell us and we will fix it. Report a defect to the contact address in section 20, describing what you observed and when. We tell you what we found and what we intend to do about it.

We are responsible for the service conforming to the contract for the whole time of supply, and we provide the updates - security updates included - needed to keep it conforming throughout that time. Rights under §1914 et seq. and, for digital content and services, §2389a et seq. of the Czech Civil Code are otherwise unaffected.

If you are a consumer, this is also your complaints procedure, and two statutory rules sit on top of it. We decide a complaint immediately, or within three working days where it needs looking into; and we settle it, including any repair, within 30 days of the day you raised it unless we agree a longer period with you. If that deadline passes without a resolution, you may withdraw from the contract or ask for a proportionate discount.

Where a defect is ours and material, and we do not remedy it in a reasonable time, you may claim a proportionate reduction of the fee for the affected period, or terminate the affected subscription with a refund of the unused part. We will give you written confirmation of when you raised a complaint, what you asked for, and how and when it was settled.

14. Your indemnity to us

If you are a business customer, you will indemnify us against claims, losses and reasonable legal costs arising from your breach of section 2 or section 3 - in particular any claim by the operator of a site you told us you were authorised to scan. We will tell you promptly about any such claim, will not settle it without asking you, and will let you take over its defence if you want to.

This clause does not apply to consumers. If you are a consumer and you scan a site you were not entitled to scan, you are liable for the harm that causes under the general law, and section 18 lets us suspend the account - but you do not owe us an indemnity.

15. Confidentiality

Each of us will keep the other's non-public information confidential and use it only to perform the contract. Your scan results, findings and reports are your confidential information: we do not publish them and we access them only to provide and secure the service. This does not cover information that is public, that was known to the receiving party without a duty of confidence, or that must be disclosed by law or to a competent authority - and it survives the end of the contract.

16. API terms

API access is included from the Pro plan up, at the rate limit shown for your plan on /pricing; the Free and Starter plans include none. Keep your API keys secret: a key's plaintext is shown once, we store only a hash, and every request made with your key counts as yours - revoke a key immediately if you suspect it has leaked. We give at least 90 days' notice, by e-mail to workspace owners, before deprecating an API version or reducing a plan's API limits.

17. Force majeure

Neither party is liable for failure to perform caused by events beyond its reasonable control - including network or power failure, government action, or armed conflict. Payment obligations already accrued are not excused. If such an event lasts more than 30 days, either party may terminate the affected subscription and we refund the unused part of any prepaid period.

If you are a business customer, events beyond our reasonable control include the failure of an infrastructure provider named in our sub-processor list at /legal/subprocessors. If you are a consumer they do not: the providers we choose are our responsibility towards you.

18. Suspension and termination

Either party may terminate at any time; you keep access until the end of the paid period and can export your data during that window. We may suspend an account immediately where continued use would breach section 2 or section 3, endanger the platform, or expose a third party - and we will tell you why when we do.

If you believe a suspension is wrong, tell us: we will review it and lift it if the reason does not hold.

Ending a subscription does not delete anything: the workspace moves to the free plan and that plan's retention window then applies to its scan history, as section 4 describes. Your workspace and everything in it - screenshots and reports included - are deleted when you delete the workspace or your account, and that happens at once. What survives such a deletion, and for how long, is listed in our privacy policy and on /legal/gdpr.

19. Changes to these terms, and assignment

We may change these terms for new periods. Material changes are announced by e-mail to workspace owners and on this page at least 30 days before they take effect, and the version identifier at the top changes with them. If you do not accept a change, cancel before it takes effect; continuing to use the service after that date is acceptance.

If you are a consumer and do not accept a material change, you may also terminate the contract with effect from the date the change takes effect, and we refund the unused part of any prepaid period. A change we are required to make by law may take effect immediately; we still announce it the same way.

You may not assign the contract without our written consent, which we will not unreasonably withhold. We may assign it to a successor of our business, and will tell you if we do.

20. Governing law, jurisdiction, disputes and contact

The contract is governed by the law of the Czech Republic, excluding its conflict-of-law rules and excluding the UN Convention on Contracts for the International Sale of Goods.

If you are a business customer, the courts of the Czech Republic have exclusive jurisdiction, with local jurisdiction determined by our registered seat.

If you are a consumer, that choice of law does not take away the protection given to you by rules that cannot be departed from under the law of the country where you habitually live. And the exclusive forum above does not apply to you: we may bring proceedings against you only in the courts of the country where you live, and you may bring proceedings against us either there or in the Czech Republic.

If you are a consumer and we cannot settle a dispute between us directly, you may take it to the Česká obchodní inspekce (Czech Trade Inspection Authority), Štěpánská 796/44, 110 00 Praha 1, Czech Republic, https://adr.coi.cz - the competent out-of-court dispute resolution body for this kind of contract. Using it is free, entirely your choice, and does not stop you going to court instead. If you live in another EU member state, you may instead use the out-of-court body competent in your own country, and the European Consumer Centres Network can help with a cross-border complaint.

Notices, defect reports, complaints and withdrawal notices go to [email protected], or by post to ADMI ENTERPRISES s.r.o., Nové sady 988/2, Staré Brno, 602 00 Brno.