Terms of service

These terms are an agreement between [Company legal name] ("Glassrecord", "we", "us") and the organization that signs up for or uses Glassrecord ("Customer", "you"). The person who accepts these terms confirms they have authority to bind the organization. If you use the free scan without an account, the section "Free scan" applies to you.

Glassrecord is for businesses and professionals. You may not use it as a consumer.

1. The service

Glassrecord loads websites in a real browser from one or more regions, records which third parties load and what data they receive under each consent choice, and reports what it observed as findings with evidence. Depending on your plan, the service also includes:

• the web app, with organizations, members, sites, findings, fixes, proof records, shared links, and PDF reports;
• scheduled and on-demand scans;
• the Google Tag Manager integration;
• Protection, a script that runs on your website to observe, and when you approve a policy, enforce it;
• other integrations, such as Vanta.

We may change the service, add features, or remove features, as long as we do not materially reduce the core functions of a paid plan during its current term.

2. Findings are observations, not legal advice

Glassrecord reports what its browser observed on a website at a point in time, and names the laws, regulations, or guidance that concern that kind of behavior. A finding is not a legal conclusion. Glassrecord does not provide legal advice, does not certify that a website complies with any law, and is not a substitute for advice from a qualified lawyer.

A scan sees what its browser saw from the regions and under the consent choices it used. Websites change, may treat automated browsers differently, and may behave differently for other visitors, devices, regions, or signed-in users. The absence of a finding does not mean a website complies. You are responsible for your own compliance decisions.

Some features use language models to classify pages or draft text. Text a model wrote is stored as generated text and is never stored as an observation or a finding.

A finding is closed only by a later scan that no longer observes it. Marking a finding fixed starts that scan.

3. Accounts and organizations

• Your account. Keep your sign-in credentials secure. You are responsible for activity under your organization's accounts. Tell us at once at [Security contact address] if you suspect unauthorized use.
• Members and roles. Owners and Admins control who can access your organization and what each member can do. You are responsible for the people you invite.
• Agencies and clients. If you manage websites for clients, you confirm that each client has authorized you to scan its sites, to receive and share its findings, and, where you use them, to connect its Tag Manager containers and install Protection on its sites. At the client's request you may transfer that client's records to the client's own Glassrecord organization. After a transfer the records belong to the client's organization.
• Staff access. Our staff see a limited set of facts about each account to run the service, such as the organization's name, plan, number of sites, and scan status. They see your sites, findings, and evidence only under a time-limited grant, which your organization's audit log records, or when your Owners or Admins open support access. One exception: staff review how scanned pages are classified, and that review shows pages from every customer's scans.

4. Your sites and permission to scan

You may add a site to Glassrecord only if you own it or are authorized by its owner to have it scanned. By adding a site you confirm that authority. You may not use Glassrecord to scan a site you have no right to scan.

• Verification. You can verify a site by adding a DNS record. Until a site is verified, scans are limited to 12 pages, and some features, such as signed-in scans, are not available.
• Scan sign-in. If you give Glassrecord a test account for your site, you confirm that the site's owner allows automated sign-in with it, and that the account holds no real person's data beyond what the test needs. Glassrecord signs in only to verified sites.
• Load on your site. Scans load pages as a visitor would, up to four times per page per region. Our crawler page (glassrecord.com/crawler) describes what the crawler does. You are responsible for making sure your site and your hosting terms allow this.
• Third parties on your site. Scans cause the third-party scripts on your site to run as they would for a visitor, which may send data to those third parties about the crawler's visit.

If a site owner tells us that you are not authorized to scan their site, we may stop scanning it and ask you to show your authority.

5. Integrations

• Google Tag Manager. When you connect Tag Manager, you grant Glassrecord's service account access to the containers you choose. Glassrecord reads your containers. With the access level you grant, it can draft a change in a workspace it creates and publish a version of that workspace, and it does so only when a person approves the change in the app. You are responsible for reviewing each change before you approve it. Glassrecord does not write outside the workspaces it creates.
• Vanta and other services. When you connect another service, you authorize us to send it the data the integration describes. Your use of that service is governed by your agreement with its provider. We are not responsible for services we do not operate.
• Cloudflare install. If you install Protection through your Cloudflare account, you give us an API token to deploy a Worker and a route to your zone. We use the token for that deployment and do not keep it.

6. Protection

Protection runs on your website, in your visitors' browsers, and in your edge or WordPress installation if you use one.

• Observe only by default. Until you approve a policy, Protection observes and reports and does not change what your pages do.
• Enforcement is your decision. When you approve a policy and turn on enforcement, Protection may hold or block third-party scripts according to that policy. Enforcement can affect how your site works. Review a policy before you approve it, and use the staged rollout the app offers. Any member who can reach the site, including a Viewer, can turn Protection off at any time.
• Your visitors. You are responsible for telling your visitors about Protection in your own privacy notice where the law requires it. Protection never reads or sends cookie values, IP addresses, visitor or session identifiers, form contents, or full URLs with parameters.
• Fail open. Protection is designed so that if it cannot load its configuration, your pages load as they would without it. We do not guarantee that it will never affect a page.

7. Shared links and reports

You can share reports, proof records, and fix links with people outside your organization. Anyone who has a link can open it until it expires or you revoke it. You are responsible for whom you share links with. Shared reports and emails show "Scanned by Glassrecord" unless your plan includes Branding and you turn the credit off.

8. Free scan

Anyone may ask for a free scan of a public website at glassrecord.com, subject to these terms:

• You may use the free scan for any public website. Use of the free scan does not grant you any right to access the site beyond what the crawler did.
• A free scan loads at most 6 pages from one region. A domain gets at most one free scan every 30 days; a later request opens the existing report. We limit how many free scans one person can ask for each day.
• The scan stops before loading anything if the site's robots.txt keeps our crawler out, forbids automated access, or the domain is on our opt-out list.
• The report is available by its private link for 30 days and then deleted. It is not a public page. You may share its link.
• Do not present a free scan report as a statement by Glassrecord about the site's legal compliance, or use it to threaten or harass the site's owner.
• The free scan is provided as is, without any warranty, and we may change, limit, or end it at any time.

9. Acceptable use

You must not, and must not let anyone else:

• scan a site you are not authorized to scan, or use the service to find vulnerabilities to exploit;
• use the service or its results to harass, defame, or threaten anyone, or to state that a site breaks the law based only on a finding;
• interfere with, overload, or try to bypass the limits, security, or bot checks of the service;
• reverse engineer the service, except where the law allows it despite this restriction;
• resell or offer the service to others except as the agency plan allows;
• use the service to build a competing product, or scrape or bulk-copy its registries, findings, or reports for that purpose;
• upload malware or content that infringes others' rights, or break any law while using the service.

We may suspend access that breaks this section, or that threatens the security or availability of the service, with notice where practical.

10. Data

• Customer Data. Customer Data is data you and your members put into the service, and data the service records for your organization, such as your findings, fixes, notes, proof records, reports, and Protection's counts for your sites. You own Customer Data. You grant us the rights we need to provide, secure, and support the service.
• Data Processing Agreement. Our Data Processing Agreement (glassrecord.com/dpa) applies to personal data in Customer Data and is part of these terms. It lists our sub-processors (glassrecord.com/subprocessors) and how we tell you about changes.
• Observations of websites. What our crawler records about a public web page is a fact about that website. We keep these observations and use them to provide the service to every customer who monitors the same site, and for free scans. We do not show one customer's findings, notes, or settings to another.
• Aggregate data. We may use de-identified, aggregated data from the service to operate and improve it and to publish statistics about the web, as long as it does not identify you, your members, or your sites.
• Privacy. Our privacy policy (glassrecord.com/privacy) explains how we handle personal data for which we are the controller.

11. Fees, trials, and billing

• Plans. Plans are priced per site per month, billed monthly or yearly, as shown when you subscribe. The agency plan is available only to an organization whose sites belong to its clients.
• Trial. A new organization may start a free trial of [21] days without a payment method. One trial per person. When the trial ends without a payment method, scans pause until you add one.
• Payment. You authorize us, through Stripe, to charge your payment method for fees, plus applicable taxes, in advance for each billing period. Sites added during a period are billed [prorated / from the day they are added]. Fees are in U.S. dollars.
• Late payment. If a payment fails, we will tell you and retry. If it is still unpaid 28 days after the first failure, we may pause your organization's scans until you pay. [Confirm what a paused organization keeps: Protection, shared links, and read access.]
• Renewal. Subscriptions renew for the same period unless you cancel before the renewal date. You can cancel in the app at any time. Cancellation takes effect at the end of the current period.
• Refunds. Fees are non-refundable except as these terms or the law require. [Counsel: confirm the refund position for yearly plans and for termination for our breach.]
• Price changes. We will give at least 30 days' notice of a price increase. It applies from your next renewal.
• Taxes. Fees exclude taxes. You pay any sales, use, value-added, or similar taxes, other than taxes on our income.

12. Term, termination, and your data after it ends

These terms last while you use the service. Either party may end a paid subscription by cancelling it. Either party may terminate these terms if the other materially breaches them and does not cure the breach within 30 days of written notice. If you terminate for our uncured breach, we refund prepaid fees for the unused period.

After a subscription ends, your organization's records stay readable for one year, and you can export them during that time. We then delete them. An Owner may delete the organization sooner: it disappears at once and is purged 30 days later. Some records may remain in backups for a limited time, and we may keep records the law requires us to keep. Observations of public websites and aggregate data are not part of your records and are not deleted with them.

Sections 2, 9, 10, 13 to 17, and any accrued payment obligations survive termination.

13. Confidentiality

Each party will protect the other's confidential information with at least reasonable care and use it only to perform under these terms. Confidential information does not include information that is public, already known, independently developed, or rightly received from someone else. A party may disclose confidential information when the law requires it, after notifying the other party where allowed.

14. Intellectual property and feedback

We own the service, including its software, registries, finding catalog, and designs. These terms grant you a limited, non-exclusive, non-transferable right to use the service during your subscription for your internal business purposes and, on the agency plan, for your clients. You may use and share the reports and PDFs the service produces for your sites. If you send us feedback, we may use it without obligation to you.

15. Warranties and disclaimers

We will provide the service with reasonable skill and care and in line with its documentation. If we do not, your remedy is that we correct the problem or, if we cannot within a reasonable time, you may terminate the affected subscription and receive a refund of prepaid fees for the unused period.

Except as stated in this section, the service, the free scan, findings, and reports are provided "as is". To the extent the law allows, we disclaim all other warranties, including warranties of merchantability, fitness for a particular purpose, accuracy, and non-infringement. We do not warrant that findings are complete or correct, that the service will be uninterrupted, or that Protection will prevent every unapproved script.

16. Limitation of liability

To the extent the law allows:

• Neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data, even if told they were possible.
• Each party's total liability arising from these terms is limited to the fees you paid to us in the 12 months before the event giving rise to the claim. For the free scan and free trials, our total liability is limited to [USD 100].
• These limits do not apply to your payment obligations, to either party's indemnity obligations, to a breach of section 9, or to liability that cannot be limited by law.

[Counsel: decide whether to add a higher cap for data protection or confidentiality breaches, as some customers will ask.]

17. Indemnities

• By you. You will defend and indemnify us against third-party claims arising from sites you scanned without authority, test accounts you gave us, changes you approved in Tag Manager or through Protection, your content, or your breach of section 9.
• By us. We will defend and indemnify you against third-party claims that the service, as we provide it, infringes their intellectual property rights. This does not cover claims arising from your content, your modifications, or combinations with things we did not provide. If such a claim arises, we may modify the service, obtain a license, or end the affected subscription and refund prepaid fees for the unused period.

The party seeking indemnity must notify the other promptly, let it control the defense, and cooperate reasonably.

18. Beta features

We may offer features marked as beta or preview. They are provided as is, may change or end at any time, and are excluded from any service commitment.

19. Changes to these terms

We may update these terms. We will post the new terms with a new effective date and tell account holders of material changes by email or in the app at least 30 days before they take effect. If you do not agree, you may cancel before the change takes effect. Continued use after that date is acceptance.

This version takes effect on [Date].

20. General

• Governing law and venue. [Governing law] governs these terms, without regard to its conflict of law rules. The courts of [Venue] have exclusive jurisdiction.
• Assignment. Neither party may assign these terms without the other's consent, except to a successor in a merger, acquisition, or sale of substantially all of its assets, with notice.
• Force majeure. Neither party is liable for delay caused by events beyond its reasonable control.
• Independent parties. The parties are independent contractors. Agencies and partners that resell or recommend Glassrecord are independent of us and cannot bind us.
• Notices. We send notices to your Owner's email address or in the app. Send notices to us at [Legal notice address].
• Export and sanctions. You will not use the service in breach of export control or sanctions laws.
• Entire agreement. These terms, the Data Processing Agreement, and any order form are the whole agreement between the parties about the service. An order form's specific terms prevail over these terms. If a provision is unenforceable, the rest stays in effect. A failure to enforce a provision is not a waiver.

Contact

[Company legal name] [Address] [Legal notice address]