Terms
Terms.
Plain terms for the scanner, the form, and the work. Three short lists, and the last one is a summary, not the contract.
Scan what is yours.
Running a scan means you agree to this list. If you cannot agree to the first item, do not run it. Ask us instead and we will scan it with you on a call.
- reads
- A page, its scripts, a short list of well-known paths.
- writes
- Nothing.
- stores
- Nothing, unless you ask for the results by email.
- is not
- A penetration test.
- 01
Scan only what is yours. You must own the site or app you scan, or have written authorization from whoever does. By running a scan you confirm that, and you are responsible for it.
- 02
The scan is read-only. It sends the ordinary requests a browser sends when it loads a page and its scripts, checks a short list of well-known paths, and, where it finds a public database key in your own bundle, uses that key against your own public endpoint to see whether your tables are readable. It writes nothing, changes nothing, and does not authenticate as anyone.
- 03
It is not a penetration test. It finds a specific list of common problems in AI-built apps and misses everything not on that list. A clean grade does not mean your app is secure.
- 04
We store nothing from a scan unless you ask us to send the results to you, in which case the grade, score, and finding titles travel with your email to our internal inbox system.
- 05
We may refuse, stop, or rate-limit scans at any time, for any target, without notice. If a scan of your site is unwelcome, tell us and we will block the address.
A person reads it.
The form on the start page is the only thing on this site that asks for your email. Here is exactly what happens to it.
Where each thing is stored, and for how long, is on the privacy page.
- 01
What you type in the form (what it is about, name, email, your site or app, what you need, a budget band, a date band) goes to our internal inbox system so an engineer can read it and reply.
- 02
It is not sold, not added to a newsletter, and not put in a drip sequence. We promise a reply from a person within one business day, Pacific time, with either a scope and a price or the questions we need answered first.
- 03
Ask and we delete it. The privacy page says where each thing goes.
Fixed price. Your repo. No hourly.
These are the terms every proposal starts from. The proposal you sign is the contract; this is what it will say in five sentences.
Questions about any of this: the form, or book twenty minutes. A person answers.
- 01
Fixed price per load. Every unit of work has a written definition of done and a price before it starts. No hourly billing, because hours are the wrong unit for a studio that runs agents all night.
- 02
Sprint Zero is $3.5k to $7.5k depending on scope, and it credits toward a retainer if you continue. Retainers run $5k to $15k a month for a standing slice of the machine. Rescue is quoted after we read the code, never before.
- 03
You own the code and the repository from day one. We work in your account. There is nothing to hand over at the end because you already have it.
- 04
30-day fix warranty, promised in every proposal. If something we shipped breaks in the thirty days after handover, we fix it at no charge.
- 05
The signed proposal governs. This page is a summary of how we work, not the contract; the proposal you sign names the engineers, the scope, the price, and the dates, and where the two differ the proposal wins.