Responsible disclosure
Reports should be handled privately. Sensitive evidence should not be posted publicly or forwarded carelessly.
Needs legal/council review before production use. Do not treat this copy as attorney-approved.
Terms draft
Use of the site, account portal, reports, service requests, authorization, payments, and acceptable behavior.
Privacy draft
Contact data, report records, account activity, analytics, support, retention, deletion, and subprocessors.
Authorization and scope
Claiming an account or report does not authorize deeper testing. Separate written scope is required.
Launch readiness
- Terms reviewed by council/legal.
- Privacy reviewed by council/legal.
- Payment/refund language matches Stripe flow.
- Analytics, cookies, retention, and subprocessors documented.
- Account signup requires acceptance of current terms/privacy.