Terms of Service

1. Acceptance of Terms

By accessing or using ScanTower ("the Service", "we", "us", or "our"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, you must not use the Service.

We may update these Terms from time to time. For material changes, we will post the updated Terms with a new "Last Updated" date and, where practical, notify registered users by email. Your continued use of the Service after such changes become effective constitutes acceptance of the updated Terms.

2. Eligibility and Accounts

You must be at least 18 years old to use the Service. By creating an account, you represent that you meet this requirement.

You agree to provide accurate registration information and to keep your account credentials confidential. You are responsible for all activity that occurs under your account, whether or not authorized by you, and must notify us promptly at [email protected] if you suspect unauthorized use of your account or API keys.

3. Authorization and Permitted Use

3.1 Ownership Requirement

YOU MUST ONLY SCAN WEBSITES AND NETWORK INFRASTRUCTURE THAT YOU OWN OR FOR WHICH YOU HAVE EXPLICIT WRITTEN AUTHORIZATION. By using the Service to scan any website, domain, or network infrastructure, you represent and warrant that:

• You are the legal owner of the website, domain, or infrastructure being scanned; OR
• You have obtained explicit written permission from the legal owner to conduct security scans; AND
• You have obtained explicit written permission from the network owner or Internet Service Provider (ISP) to conduct port scans and network reconnaissance activities; AND
• Your use of the Service does not violate any applicable laws, regulations, or third-party rights.

3.2 Port Scanning Authorization

The Service includes port scanning capabilities that scan up to 1,000+ common network ports. PORT SCANNING WITHOUT AUTHORIZATION IS ILLEGAL IN MANY JURISDICTIONS. You acknowledge and agree that:

• You must have explicit authorization from the network owner and/or hosting provider before conducting port scans;
• You are solely responsible for ensuring you have proper authorization for all port scanning activities;
• Port scanning may be considered network reconnaissance or attempted intrusion in some jurisdictions;
• You will maintain written records of all authorizations obtained for port scanning activities.

3.3 Prohibited Uses

You agree NOT to use the Service to:

• Scan websites, domains, or infrastructure you do not own or have authorization to scan;
• Conduct unauthorized penetration testing or security assessments;
• Attempt to gain unauthorized access to any system, network, or data;
• Engage in any illegal activities or facilitate violations of any laws or regulations;
• Harass, abuse, or harm another person or entity;
• Distribute malware, viruses, or other malicious code;
• Interfere with or disrupt the Service or servers or networks connected to the Service;
• Circumvent any security features or access controls of the Service;
• Use the Service for competitive analysis or to build a similar service;
• Resell or redistribute the Service without explicit written permission.

4. Billing and Payment

4.1 Plans and Fees

The Service is offered under several plans (currently Free, Solo, Pro, and Agency), each with its own fees and included usage, as described on our pricing page. Fees are shown in the currency displayed at checkout and are exclusive of applicable taxes, which may be added to your invoice.

4.2 Subscriptions and Auto-Renewal

Paid plans are billed in advance on a recurring basis (monthly or annually, as selected) through our payment processor, Stripe, and automatically renew at the end of each billing period unless cancelled before the renewal date.

4.3 Cancellation and Refunds

You may cancel your subscription at any time from your account billing settings or by contacting [email protected]. Cancellation takes effect at the end of your current billing period; you will retain access to your paid plan until then. Except where required by law, fees already paid are non-refundable, including for partial billing periods.

4.4 Price Changes

We may change our fees from time to time. Any price change will apply to future billing periods only, and we will give you reasonable advance notice (for example, by email) before it takes effect. Continuing to use a paid plan after a price change becomes effective constitutes acceptance of the new price.

4.5 Failed Payments

If a payment fails, we may retry the charge, suspend access to paid features, or downgrade your account to the Free plan until payment is resolved.

4.6 Downgrades and Data Retention

If your subscription lapses or you downgrade to the Free plan, your data will be handled according to the Free plan retention terms described in our Privacy Policy, which may include the purging of detailed scan data and screenshots after a shorter retention period than paid plans.

4.7 Organization-Billed Scans

On plans that support organizations, scans initiated by an organization member against the organization's scan budget are billed to the organization owner's payment method, subject to the budget limits the owner has configured. Owners are responsible for monitoring and managing this usage.

5. API Access

If you use our API, the following additional terms apply:

• API keys are confidential credentials. You are responsible for keeping them secure and for all activity performed using your keys;
• Requests are subject to rate limits, which may change over time; we may throttle or reject requests that exceed applicable limits;
• We may revoke or regenerate API keys at any time, including where we suspect abuse, a security risk, or a violation of these Terms;
• Actions performed using your API keys are treated as actions taken by your account, including scans initiated and any resulting charges.

6. Organizations and Teams

Where the Service allows you to create or join an organization:

• Organization owners are responsible for ensuring their members comply with these Terms, including the authorization requirements in Section 3;
• Owners control member site access and any ad-hoc scan budget available to members, and are billed for scans members initiate as described in Section 4.7;
• When a member is removed from an organization, their access to the organization's sites and data ends; scan history and other data attributed to the organization remain with the organization.

7. Public Sharing

Certain scan results, including scans run without an account, may generate a shareable link that is accessible to anyone who has it. You are solely responsible for deciding what to share and with whom, and should not share links to scans that contain information you do not want disclosed to others.

8. Disclaimer of Warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO:

• MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT;
• ACCURACY, RELIABILITY, OR COMPLETENESS OF SCAN RESULTS;
• DETECTION OF ALL VULNERABILITIES, MALWARE, OR SECURITY ISSUES;
• PREVENTION OF SECURITY BREACHES, HACKS, OR EXPLOITS;
• UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE OPERATION;
• RESULTS OBTAINED FROM USE OF THE SERVICE;
• CORRECTION OF DEFECTS OR ERRORS IN THE SERVICE.

WE DO NOT WARRANT THAT:

• The Service will detect all security vulnerabilities, threats, or malicious activity;
• Use of the Service will prevent security breaches or attacks;
• Scan results are complete, accurate, or current;
• The Service will meet your specific requirements or expectations;
• Any vulnerabilities identified will be exploitable or pose actual risk;
• The Service will be compatible with your systems or infrastructure.

YOU ACKNOWLEDGE THAT AUTOMATED SECURITY SCANNING HAS INHERENT LIMITATIONS AND CANNOT REPLACE PROFESSIONAL SECURITY AUDITS, PENETRATION TESTING, OR COMPREHENSIVE SECURITY PROGRAMS.

9. Limitation of Liability

Nothing in these Terms excludes or limits our liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot be excluded or limited under applicable law. Subject to that, the following limitations apply.

9.1 No Liability for Security Incidents

TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE SHALL NOT BE LIABLE FOR ANY DAMAGES, LOSSES, OR HARM ARISING FROM OR RELATED TO:

• Security breaches, hacks, exploits, or unauthorized access to websites you scan;
• Vulnerabilities, malware, or security issues that were not detected by the Service;
• False positives or false negatives in scan results;
• Decisions made or actions taken based on scan results;
• Data breaches, data loss, or exposure of sensitive information;
• Downtime, service interruptions, or availability issues of scanned websites;
• Financial losses, lost profits, or business interruption;
• Reputational damage or loss of goodwill;
• Third-party claims arising from your use of the Service;
• Legal or regulatory compliance issues;
• Any scanning activities conducted without proper authorization.

9.2 Maximum Liability Cap

IN NO EVENT SHALL OUR TOTAL AGGREGATE LIABILITY TO YOU FOR ALL DAMAGES, LOSSES, AND CAUSES OF ACTION (WHETHER IN CONTRACT, TORT, INCLUDING NEGLIGENCE, OR OTHERWISE) EXCEED THE AMOUNT YOU PAID TO US IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO LIABILITY, OR £100 (ONE HUNDRED POUNDS STERLING), WHICHEVER IS LESS.

9.3 Exclusion of Consequential Damages

IN NO EVENT SHALL WE BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES, INCLUDING BUT NOT LIMITED TO:

• Loss of profits, revenue, or business opportunities;
• Loss of data, goodwill, or reputation;
• Cost of substitute services or procurement;
• Business interruption or downtime;
• Emotional distress or mental anguish;

EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES, AND SUBJECT ALWAYS TO THE CARVE-OUTS AT THE START OF THIS SECTION.

9.4 Basis of the Bargain

You acknowledge that the limitations of liability and disclaimers in these Terms reflect a reasonable allocation of risk and are a fundamental basis of the bargain between you and us. The Service would not be provided without these limitations.

10. Indemnification

You agree to indemnify, defend, and hold harmless ScanTower, its officers, directors, employees, agents, licensors, and suppliers from and against all losses, expenses, damages, and costs, including reasonable attorneys' fees, resulting from:

• Your violation of these Terms;
• Your scanning of websites, domains, or infrastructure without proper authorization;
• Unauthorized port scanning or network reconnaissance activities;
• Any illegal activities conducted using the Service;
• Your violation of any rights of any third party;
• Any claims by network owners, hosting providers, or ISPs regarding unauthorized scanning;
• Your violation of any applicable laws or regulations;
• Any content or data you submit to the Service.

11. Security Scanning Limitations

11.1 No Guarantee of Complete Detection

The Service uses automated scanning techniques that have inherent limitations. We do not guarantee that the Service will:

• Detect all vulnerabilities, malware, or security issues;
• Identify zero-day vulnerabilities or novel attack techniques;
• Discover all subdomains, certificates, or infrastructure;
• Detect all malicious scripts, card skimmers, or keyloggers;
• Identify all misconfigurations or security weaknesses;
• Provide real-time protection against evolving threats.

11.2 Not a Substitute for Professional Security

THE SERVICE IS A BASIC AUTOMATED SCANNING TOOL AND IS NOT A SUBSTITUTE FOR:

• Professional security audits and assessments;
• Comprehensive penetration testing;
• Manual security code reviews;
• Security Operations Center (SOC) monitoring;
• Incident response and forensics;
• Compliance certifications (PCI DSS, SOC 2, ISO 27001, etc.);
• Security training and awareness programs;
• Comprehensive security programs and policies.

11.3 User Responsibility

You are solely responsible for:

• The security of your websites and infrastructure;
• Implementing appropriate security controls and measures;
• Verifying and validating scan results;
• Taking appropriate action to remediate identified issues;
• Maintaining backups and disaster recovery plans;
• Complying with applicable security standards and regulations;
• Engaging professional security services as needed;
• Monitoring your systems for security incidents.

12. Data and Privacy

Our collection and use of personal information is described in our Privacy Policy. By using the Service, you consent to our collection and use of information as described in the Privacy Policy.

You acknowledge that scan results may be stored on our servers and you grant us a license to use scan data for improving the Service, research, and analytics purposes.

13. Intellectual Property

The Service and its original content, features, and functionality are owned by ScanTower and are protected by international copyright, trademark, patent, trade secret, and other intellectual property laws.

You may not copy, modify, distribute, sell, or lease any part of the Service without our explicit written permission.

14. Service Changes

We may modify, limit, or discontinue any feature of the Service, or adjust plan limits and included usage, at any time. Where a change materially reduces what is included in a paid plan, we will aim to give reasonable advance notice.

15. Termination

15.1 By Us

We reserve the right to terminate or suspend your access to the Service immediately, without prior notice or liability, for any reason, including but not limited to:

• Violation of these Terms;
• Unauthorized scanning activities;
• Illegal or abusive behavior;
• Complaints from third parties;
• Suspected security risks or fraudulent activity.

Upon termination, your right to use the Service will immediately cease.

15.2 By You

You may stop using the Service and delete your account at any time from your account settings, or by contacting [email protected]. Cancellation of a paid subscription is handled as described in Section 4.3. Deleting your account permanently removes your data, subject to the retention periods described in our Privacy Policy.

16. Governing Law and Jurisdiction

These Terms shall be governed by and construed in accordance with the laws of England and Wales, without regard to its conflict of law provisions.

Any disputes arising from these Terms or your use of the Service shall be subject to the exclusive jurisdiction of the courts of England and Wales.

17. Severability

If any provision of these Terms is held to be invalid, illegal, or unenforceable, the validity, legality, and enforceability of the remaining provisions shall not be affected or impaired.

18. Entire Agreement

These Terms constitute the entire agreement between you and ScanTower regarding the use of the Service and supersede all prior agreements and understandings.

19. Contact Information

If you have any questions about these Terms, please contact us at [email protected] or through our contact form.

If you believe your website, domain, or network infrastructure has been scanned using the Service without authorization, please contact us at the same address so we can investigate.