Terms of Service - PCrisk Website Scanner & Trust Badge

These Terms of Service (the "Terms") govern your use of the free website scanner at scanner.pcrisk.com and the paid "Trust Badge" subscription service. Please read them together with our Privacy Policy. By creating an account, using the scanner, or subscribing, you agree to these Terms.

1. Who we are and scope of these Terms

The scanner and the Trust Badge are operated by RCS LT, UAB, 18 I. Kanto str., 44296 Kaunas, Lithuania, European Union ("RCS LT", "we", "us"). You can contact us at support@pcrisk.com.

These Terms cover two services: (a) the free website scanner, which lets anyone scan a public website URL and produces a published report (a trust score of 0-100, a threat classification, screenshots, WHOIS/DNS/SSL data and an AI-generated summary); and (b) the paid Trust Badge, an embeddable seal and monitoring subscription for websites you control. Where a clause applies to only one service, that is stated.

The contract is concluded in English. Where parts of the site are provided in other languages for convenience, the English text of these Terms prevails.

2. The free scanner and public reports

Scans are automated and point-in-time. They draw on independent third-party data sources and infrastructure services that we do not control - including VirusTotal, Quttera, Google Safe Browsing, OpenPhish, PhishTank, WHOIS/registrar data providers, Tranco and Keywords Everywhere; page retrieval and screenshots are performed through infrastructure partners, and report summaries are generated with third-party AI providers (currently OpenAI and Anthropic). Reports are published on public report pages. A trust score is an automated opinion and is not a guarantee; no vendor can guarantee 100% detection of threats.

Reports describe websites, not people. Where information in a report nonetheless relates to an identifiable person (for example content visible in a screenshot of the scanned page), our Privacy Policy describes how we handle it. If you believe a report contains information about you that should be corrected or removed, use the dispute form on the report page or email support@pcrisk.com; every report can be reviewed by a person through this channel.

3. Accounts

To use the Trust Badge you must create an account with a valid email address, which we verify by an emailed link. You may also sign in with Google or Apple. You are responsible for keeping your credentials secure and for activity under your account. By opening an account you confirm that you have the legal capacity to enter into a binding contract and that, where you act for an organisation, you are authorised to bind it.

When you create an account you accept these Terms and acknowledge the Privacy Policy through an explicit action: continuing past the notice on the sign-up form, or proceeding with Google or Apple sign-in after being shown the same notice. We record the version of the Terms in force and the time of acceptance.

You may delete your account at any time from Settings once any active subscription has been cancelled. Deletion is treated as a GDPR erasure and removes your subscriptions, domains, sign-in identities and API keys, subject to records we must retain by law (see the Privacy Policy).

4. Subscriptions, billing and Paddle as merchant of record

The Trust Badge is offered on three plans, billed monthly or annually as you select at checkout. Base prices are set in US dollars (USD); where available, the site also displays the equivalent price in your local currency, including applicable tax where so labelled:

Where annual billing is offered, the annual price is billed once per year and the equivalent per-month amount is shown alongside it. Before you are bound, the total price payable, including any applicable taxes (such as VAT) and shown in your local currency where applicable, is calculated and displayed to you by Paddle at checkout. That checkout total is the binding price.

Paddle is the merchant of record. Your subscription is sold and billed by Paddle - Paddle.com Market Limited or the Paddle group entity identified for your location in the Paddle Buyer Terms and at checkout - acting as the merchant of record and authorised reseller. Your payment, invoicing, VAT/tax charging and remittance, refunds and chargebacks are handled by Paddle under the Paddle Buyer Terms. The Trust Badge service itself is provided to you by RCS LT, UAB under these Terms. Both sets of terms apply. Your payment details are handled by Paddle and never touch RCS LT servers.

The checkout presents the required pre-contract information before you commit, and you place your order only through an unambiguous action that acknowledges an obligation to pay: the order summary beside the payment form states the subscription you are taking out, the date and amount of the first charge, and that the subscription then continues at that price until cancelled.

Confirmation of your contract. After your order is placed, you receive confirmation of the concluded contract on a durable medium: Paddle issues an order/receipt email with the plan, price and billing period, and RCS LT sends a confirmation email setting out your plan, the trial end and first-charge date, your renewal terms, your right of withdrawal and the model withdrawal form.

4.1 Free trial with a payment method on file

New subscriptions include a 14-day free trial that requires a valid payment method on file. Unless you cancel during the trial, the subscription converts automatically to the paid monthly plan you selected. The date and estimated amount of the first charge (the plan price plus any applicable tax, based on your location) are displayed to you at sign-up before you commit; the binding total is the one confirmed by Paddle at checkout.

4.2 Auto-renewal and cancellation

Subscriptions auto-renew at the end of each billing period - monthly or annually, as selected at checkout - at the same price until cancelled. If an annual subscription renews and you did not intend it to, contact us within 14 days of the renewal charge and we will cancel and refund it in full, provided you have not made substantial use of the service in that new term. You can cancel anytime from your dashboard; cancellation is self-service, with no lock-in and no cancellation fee, and cancelling is at least as easy as subscribing. If you cancel a paid subscription, cancellation takes effect at the end of the current billing period. If you cancel during the free trial, the service and badge stop immediately and you are never charged. We confirm every cancellation by email.

Cancellation under this clause is your voluntary, anytime exit from the subscription. Your separate statutory right of withdrawal is described in clause 5.

4.3 Obvious pricing errors

Where a price displayed on the site is an obvious error, we may decline or cancel an order made at that price before performance begins. The binding price and terms are otherwise those presented and confirmed at checkout through Paddle.

5. Your right of withdrawal (EU/EEA consumers)

If you are a consumer in the EU/EEA, you have a statutory right to withdraw from this distance contract within 14 days. Because the Trust Badge is a digital service, the 14-day period runs from the conclusion of the contract. To withdraw, send any clear statement of your decision to support@pcrisk.com, or contact Paddle through its buyer portal at paddle.net. We acknowledge every withdrawal statement by email, and your withdrawal counts as exercised on the day you send it.

You may use the model withdrawal form set out in Annex A, which is available to you before you place your order; use of the form is optional.

6. 30-day money-back guarantee (voluntary, additional)

In addition to your statutory rights, we offer a voluntary 30-day money-back guarantee: if you are not satisfied, email support@pcrisk.com within 30 days of your first charge and we will refund every amount you have paid to date, in full, through Paddle to your original payment method - no questions asked. The guarantee is available once per customer. Guarantor: RCS LT, UAB, 18 I. Kanto str., 44296 Kaunas, Lithuania. This commercial guarantee is offered in addition to, and does not limit or replace, your statutory rights as an EU consumer, including your 14-day right of withdrawal and your rights if the service is not as described.

7. Plan limits and fair use

Each plan permits monitoring of the number of domains stated in clause 4. You must not exceed your plan's domain allowance or use automated means to circumvent limits. We may apply reasonable rate limits and fair-use controls to protect the platform, and may throttle or suspend usage that is abusive, excessive or degrades the service for others.

8. The Trust Badge licence

Subject to these Terms and an active subscription, RCS LT grants you a limited, revocable, non-exclusive, non-transferable and non-sublicensable licence to display the badge solely on the verified domain(s) covered by your plan. The badge is score-gated: it renders only while that domain's most recent scan scores at least 70/100, and it hides automatically otherwise. Its hiding is by design and is not a defect, and we make no representation that the badge will be continuously visible or that the service will be uninterrupted.

You must not alter, reproduce, spoof or fake the badge, display it on any unverified domain, or keep displaying it after your subscription ends. We may change the badge service only as described in clause 15, and may revoke the badge and this licence where you breach these Terms or where the law requires it.

9. Alerts, integrations and API

9.1 Scans, alerts and the service digest

We provide recurring automated scans - currently daily on all paid plans. We send essential service and security messages that you cannot opt out of while you hold an active account or subscription - including threat-alert and all-clear notices, and billing, account and legal notices. We also send an optional service digest summarising the monitoring results for your own domains (on by default; weekly, monthly or off, configurable in Settings). The digest contains no advertising, and every digest includes a one-click unsubscribe link that turns it off without signing in. Any marketing email is separate and would be sent only as described in our Privacy Policy.

On Pro and Business plans we also offer optional Slack and webhook alerts to endpoints you supply. Webhook payloads are signed with HMAC-SHA256 so you can verify them. Notifications are provided on a best-efforts basis and may be delayed, incomplete or undelivered; customer-supplied endpoints are used at your own risk. You must not rely on these alerts as your sole means of detecting security issues.

9.2 API

We offer a REST API with bearer keys. Access is plan-scoped: Pro is read-only, and Business is full access including adding and removing domains. API keys are confidential, are stored only as SHA-256 hashes, and you are responsible for all use under your key. You must not share keys, and you must not use the API to scan or add domains you do not own or lack authorisation to test. We may apply rate limits and may throttle, suspend or revoke keys for breach, security risk or non-payment, without liability.

10. Acceptable use

You must not: scan or add domains you are not authorised to test where authorisation is required; use outputs to defame or harass; scrape or bulk-automate the service outside the documented API; reverse engineer the service; resell scan results; circumvent the score gate or fake a badge; or interfere with, overload or attempt to compromise the platform. We may suspend or terminate access for breach.

11. Conformity of the paid service, and disclaimers

If you are a consumer, you always have the right that the paid digital service conforms with the contract under Directive (EU) 2019/770 as implemented in Lithuania: the service must match its description, be fit for its purpose, be supplied with updates and function as described. If it does not, you have the statutory remedy ladder - bringing the service into conformity and, where applicable, a proportionate price reduction or termination, with any refund due within 14 days. For as long as the service is supplied continuously, the burden of proving conformity rests on us. Nothing in these Terms limits those rights.

Subject to the consumer conformity rights above, and otherwise to the maximum extent permitted by applicable law, the service and all outputs are provided "as is" and "as available", and we disclaim all other express, implied and statutory warranties, including merchantability, fitness for a particular purpose, accuracy, completeness, non-infringement, title, and uninterrupted, error-free or secure operation. We do not warrant that scans detect all threats or that scores or verdicts are accurate, current or complete.

Reliance on third-party data. Scans and scores incorporate data from independent third-party sources that we do not control and do not warrant. We are not liable for third-party inaccuracy, latency, gaps or unavailability.

12. Limitation of liability

Nothing in these Terms excludes or limits liability that cannot lawfully be excluded or limited, including liability for (a) death or personal injury caused by negligence; (b) fraud or fraudulent misrepresentation; (c) wilful misconduct or gross negligence; (d) your statutory conformity remedies as a consumer under Directive (EU) 2019/770 as implemented in Lithuania (clause 11); and (e) any other liability that cannot be excluded or limited under applicable mandatory law, including your statutory rights as a consumer under EU and Lithuanian law.

Subject to the paragraph above and to the maximum extent permitted by applicable law: (i) we shall not be liable for indirect, incidental, special, consequential or punitive damages, or for loss of profit, revenue, data, goodwill or business; (ii) we shall not be liable for loss arising from reliance on a trust score or badge, or from a missed, delayed, false-positive or false-negative threat assessment, to the extent the loss results from inaccuracy, latency or unavailability of third-party data sources, from circumstances outside our reasonable control, or from use of the service contrary to the limits stated in clause 11; and (iii) for business customers, our total aggregate liability shall not exceed the total fees you paid for the Trust Badge subscription - whether to RCS LT or via Paddle as merchant of record - in the twelve (12) months before the event giving rise to the claim. For consumers, our liability is limited only to the extent permitted by mandatory law.

13. Suspension and termination

You may stop using the free scanner at any time and cancel or delete your Trust Badge account as described above. We may suspend or terminate access for breach of these Terms, non-payment, or where required to protect the platform or comply with law. On termination your badge licence ends and you must remove the badge from your site. Clauses that by their nature should survive (including clauses 11, 12 and 16) survive termination.

14. Automated assessments

Our trust score is generated automatically from third-party security signals and assesses websites, not individuals. To the extent the automated showing or hiding of the badge at the 70/100 threshold could constitute an automated decision with significant effects for a customer who is a natural person, that processing is necessary for entering into and performing the Trust Badge contract (Article 22(2)(a) GDPR). As the applicable safeguards, you may at any time obtain human intervention, express your point of view and contest a score through our dispute channel, which is available on every report page.

15. Changes to these Terms and to the service

We may change these Terms and the service only for valid reasons: changes in law or regulatory guidance, security needs, technical adaptation, or the introduction of features that do not degrade the agreed service. Modifications of the paid service beyond what is necessary to maintain conformity are made at no additional cost to you and with clear information about them.

For material changes we will notify account holders on a durable medium (email) at least 30 days before the change takes effect, and we will update the "Last updated" date above. If a material change negatively affects your access to or use of the paid service more than insignificantly, you may terminate the contract free of charge before the change applies, with a pro-rata refund of any prepaid period. Price changes apply only from your next renewal after notice, and you can cancel before they take effect. If you do not agree with a change, you may cancel and stop using the service.

16. Governing law, courts and consumer protections

These Terms are governed by the law of the Republic of Lithuania. For business customers, the courts of Kaunas, Lithuania have exclusive jurisdiction. If you are a consumer, you may bring proceedings in the courts of your country of habitual residence or in Lithuania, and we will bring proceedings against you only in the courts of your country of habitual residence. The choice of Lithuanian law does not deprive you of the protection of the mandatory consumer-law provisions of your country of habitual residence, and nothing in these Terms limits statutory rights you cannot lawfully waive.

If you are a consumer and have a complaint, please contact us first at support@pcrisk.com. If we have not resolved your complaint within 14 days, you may refer the matter to a competent alternative dispute resolution (ADR) body: in Lithuania, the State Consumer Rights Protection Authority (Valstybinė vartotojų teisių apsaugos tarnyba, Vilniaus g. 25, 01402 Vilnius, vvtat.lt); consumers resident elsewhere in the EU may use the ADR body competent in their own country. Billing, invoicing, tax and refund complaints are handled by Paddle as merchant of record under the Paddle Buyer Terms - but where you exercise a statutory right (withdrawal, conformity remedies or the money-back guarantee), you may always address RCS LT directly and we will arrange any refund with Paddle for you.

Your statutory conformity rights for the paid digital service (clause 11) are preserved and are not limited by these Terms.

17. Contact

RCS LT, UAB, 18 I. Kanto str., 44296 Kaunas, Lithuania, European Union. Email: support@pcrisk.com. Billing, invoicing, tax and refund questions are handled by Paddle as merchant of record; other questions about the service can be sent to us directly. See also our Privacy Policy.

Annex A - Model withdrawal form

(Complete and return this form only if you wish to withdraw from the contract. If you consented to immediate performance of the service, see clause 5 for the effect on any amount owed.)