Terms of Service

1. What this service does

WatchTower OS monitors websites you own or manage: performance, SEO, security posture, accessibility, broken links, uptime and — where you explicitly authorise it — penetration testing. You get scores, findings and reports.

We do not fix your website for you. We tell you what is wrong and how to fix it.

2. Your account

You are responsible for what happens under your account, including anything done by people you invite into your workspace. Keep your password to yourself, and turn on two-factor authentication — it is free and it is in your account settings.

One person, one account. Sharing a login with your whole team defeats the audit log, which is the thing that tells you who authorised what.

3. Websites you may add

You may only add websites you own, or that you manage with the owner's permission. Every site must pass domain verification before we scan it, precisely so that nobody can point our scanners at a stranger's server.

4. Penetration testing — read this one

Pen testing sends real probes at a live system. Before any run, you must record an explicit authorisation naming the target and the categories of test.

By authorising a pen test you are declaring that you own the target system, or that you act with the written permission of whoever does. Running these tests against a system without permission is a criminal offence in most jurisdictions, including under the Computer Misuse Act in the UK, the CFAA in the United States, and the Digital Security Act in Bangladesh. That is your liability, not ours.

Every authorisation and every run is recorded in the audit log with your name and the time, and we will provide those records to law enforcement if we are lawfully required to.

Our probes are non-destructive by design — read-only requests and at most one harmless reflected marker. We do not guarantee that any scan is exhaustive. A clean report means the checks we ran found nothing, not that your system is secure.

5. Payment

Plans are billed in US dollars. Where you pay in Bangladeshi taka through bKash or Nagad, the amount is converted at the market rate at the moment you are quoted, and that quoted amount is what we expect to receive.

Manual payments do not activate a plan on their own. When you submit a transaction reference, you are telling us you have paid. Someone checks it against our records, and your plan changes only when they approve it — usually within a few hours. If we cannot match your payment we will tell you why, and you can submit again.

We do not store your card, wallet or mobile banking credentials. We never ask for your PIN, and no employee of ours will ever request it.

6. Refunds

If a paid feature does not work as described, contact us at info@webhaat.org and we will refund the affected period. We do not refund for a change of mind mid-month, but you can downgrade at any time and the change takes effect at the end of the period you have paid for.

7. Acceptable use

You may not use WatchTower OS to:

• scan or test any system you are not authorised to scan or test;
• attempt to overwhelm a third party by using our scanners as traffic;
• resell raw access to the API as a competing scanning product;
• work around plan limits with multiple accounts.

We may suspend an account that does any of these, and we will tell you why when we do.

8. Availability

We aim to keep the service running continuously, but we do not promise it. Scheduled scans may be delayed. We are a monitoring tool and not a substitute for your own incident response — do not rely on us as your only alerting.

9. Liability

Our liability to you is limited to what you have paid us in the twelve months before the claim. We are not liable for lost revenue, lost data, or damage arising from a vulnerability we did not detect. Some jurisdictions do not allow these limits, in which case they apply to the extent permitted.

10. Ending the agreement

You can stop using the service and delete your workspace at any time. Deleting a website deletes its scan history permanently — we cannot restore it afterwards. We may end the agreement if you breach these terms, with notice where it is reasonable to give it.

11. Changes

When we change these terms materially we will tell you by email before the change takes effect. Continuing to use the service after that means you accept the new version.

12. Contact

Questions about these terms: info@webhaat.org.