Terms of Service
These Terms of Service ("Terms") form a binding contract between you ("you" or "Customer") and autoprocess-fz, a free zone company incorporated in the Ras Al Khaimah Economic Zone, United Arab Emirates ("autoprocess-fz", "we", "us", or "our"). They govern your use of Securli, our automated security-scanning service available at securli.ai (the "Service").
By creating an account, paying for a scan, or otherwise using the Service, you agree to these Terms. If you do not agree, do not use the Service.
1. The Service in brief
Securli is an automated security-scan service for web applications, focused on apps built with AI tools (Cursor, Lovable, Bolt, Replit, v0, Claude, and similar). You pay a one-time fee, we run a fixed bundle of scanning engines against a target you have demonstrated ownership of, we return a report containing findings and machine-readable remediation prompts. We do not perform manual security review. We do not provide professional security advice.
2. Eligibility and account
- You must be at least 18 years old and legally capable of entering into a binding contract under the law of your jurisdiction.
- You are responsible for the accuracy of the information you supply to us, and for keeping your account credentials confidential.
- You are liable for every action taken via your account, whether or not authorised by you.
- One person, one account. Sharing accounts or reselling access without our written permission is prohibited.
3. Acceptable use — what you may scan
You may only request scans against:
- Web properties (domains, repositories, AI surfaces) that you own, OR
- Web properties that you have explicit written authorisation from the owner to test.
Before any scan begins, the Service requires you to verify ownership using one of the supported methods (OAuth to your hosting provider, a magic file you place at a known path, or a DNS TXT record). By initiating a scan you represent and warrant that you have the legal right to scan the target. You agree to indemnify autoprocess-fz against any claim arising from a scan you initiated against a target you did not have the right to scan.
3.1 Prohibited use
You must not, and must not attempt to:
- Scan systems you do not own and have not been authorised to test, including third-party SaaS, customer environments, or networks you do not control.
- Use the Service to perform a denial-of-service attack, exfiltrate data, defeat access controls, or otherwise engage in unlawful or unauthorised activity.
- Use the Service in any jurisdiction where its use is unlawful, including jurisdictions subject to comprehensive sanctions administered by the UAE, the United States, the European Union, or the United Kingdom.
- Resell, sublicense, or commercially redistribute scan results or remediation prompts without our written agreement.
- Reverse-engineer, decompile, or attempt to derive the source code of the Service.
- Probe, scan, or test the security of the Service itself except through our published responsible-disclosure channel.
We may suspend or terminate your account, without notice and without refund, on reasonable suspicion of any of the above.
4. Fees and payment
Pricing is stated on the Service at the time of purchase. As of the effective date: a one-time scan is US $15 and a rescan is US $10. Prices may change; the price in force at the time you pay is the price you owe.
Payments are processed by Paddle.com Market Limited ("Paddle"), which acts as the Merchant of Record for sales of the Service. Your contract for payment is with Paddle; your contract for the underlying Service is with autoprocess-fz. Paddle's own terms govern the payment transaction (chargebacks, currency conversion, fraud screening, tax collection). By paying for the Service you also agree to Paddle's terms.
All prices are exclusive of applicable indirect taxes (VAT, GST, sales tax). Paddle calculates, collects, and remits these on our behalf based on your billing jurisdiction.
5. Refunds — 14-day window for unused credits
Securli is sold as scan credits. When you pay, a credit lands in your account in an unused state. The credit is consumed the moment you press "Start scan" against a verified target.
You may request a full refund within 14 days of payment, for any credit that has not yet been consumed. No reason required. Refunds are issued to your original payment method via Paddle within 5 business days of receiving your request.
Once you press "Start scan", the credit is consumed and the scan runs to completion automatically. From that point the credit is no longer refundable, because:
- Compute resources, third-party API quota, LLM tokens, and network egress are allocated and consumed within seconds. We bear those costs regardless of your subsequent satisfaction with the findings.
- The scan cannot be paused, aborted, or rolled back.
- Findings are delivered as the engines produce them. There is no "right answer" being withheld that could be re-delivered.
- Under EU and UK consumer-protection law for digital services, the right to withdraw is lost once performance has begun with your express consent. Pressing "Start scan" is that consent.
If a scan you started failed because of an issue on our infrastructure (no report produced at all, or every scanning engine failed for a reason we are responsible for), we will re-run it at no charge. To request a re-run, email [email protected] within 14 days of the failed scan with your Paddle transaction ID.
Full details, including how to request a refund, in our Refund Policy.
6. Service deliverables — what you get and what you don't
A successful scan delivers a report containing:
- A list of findings detected by our scanning engines against the verified target, each with a severity score, a plain-English explanation, and a paste-ready remediation prompt suitable for AI coding tools.
- Raw scanner output retained on our infrastructure for 90 days, after which it is deleted.
You do not receive:
- A guarantee that all vulnerabilities in your target have been identified. Security scanning is inherently incomplete; the absence of a finding is not evidence of the absence of a vulnerability.
- Professional security advice, code review, or manual penetration testing. The Service is automated and advisory only.
- Any warranty that acting on the remediation prompts will resolve the underlying issues without introducing new ones. You are responsible for testing changes you apply.
- Any warranty that the Service will identify vulnerabilities specific to your industry, regulatory regime, or contractual obligations.
7. Customer responsibilities
- You are solely responsible for the security of your systems. Securli is one input among many; you must combine it with your own judgement and other security controls.
- You are responsible for evaluating findings before acting on them, including but not limited to testing remediation prompts in a non-production environment before deploying them.
- You are responsible for any consequences of acting on a finding, including downtime, data loss, regression, or new vulnerabilities introduced by your changes.
- You are responsible for complying with all applicable laws and contracts when using the Service.
8. Intellectual property
The Service, including its software, brand, documentation, finding rules, remediation prompt library, and visual design, is and remains the property of autoprocess-fz. You receive a limited, non-exclusive, non-transferable, revocable licence to use the Service in accordance with these Terms.
You retain ownership of the data you submit (target domains, repository URLs, account details). You grant us a worldwide, royalty-free licence to process that data for the sole purpose of providing the Service and to retain anonymised aggregate metrics for product improvement.
9. Confidentiality
We treat your findings, the targets you scan, and the contents of your account as confidential and will not disclose them to third parties except: (a) to subprocessors we use to operate the Service (Paddle, Cloudflare, Amazon Web Services, Anthropic, OpenAI, listed in the Privacy Policy); (b) where legally compelled by a competent court or regulator with jurisdiction over us; (c) where you instruct us in writing to do so.
10. Disclaimers of warranty
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND. TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, AUTOPROCESS-FZ DISCLAIMS ALL WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, COMPLETENESS, TITLE, AND NON-INFRINGEMENT.
WITHOUT LIMITING THE FOREGOING, WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, COMPLETE, OR SECURE. WE DO NOT WARRANT THAT FINDINGS ARE COMPREHENSIVE, ACCURATE, OR ACTIONABLE IN YOUR SPECIFIC ENVIRONMENT. WE DO NOT WARRANT THAT REMEDIATION PROMPTS WILL PRODUCE CORRECT, SAFE, OR COMPLIANT CODE WHEN APPLIED.
11. Limitation of liability
TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW:
- AUTOPROCESS-FZ'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR IN CONNECTION WITH THESE TERMS OR YOUR USE OF THE SERVICE, FROM ALL CAUSES OF ACTION AND UNDER ALL THEORIES OF LIABILITY, IS LIMITED TO THE GREATER OF (A) THE FEES YOU ACTUALLY PAID US IN THE NINETY (90) DAYS PRECEDING THE CLAIM, OR (B) US $100.
- AUTOPROCESS-FZ WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES; LOSS OF PROFITS, REVENUE, OR DATA; LOSS OF GOODWILL OR REPUTATION; OR BUSINESS INTERRUPTION; WHETHER OR NOT AUTOPROCESS-FZ HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
- AUTOPROCESS-FZ WILL NOT BE LIABLE FOR ANY DAMAGES RESULTING FROM: (I) ACTIONS TAKEN BY YOU OR A THIRD PARTY IN RELIANCE ON A FINDING OR REMEDIATION PROMPT; (II) FAILURE OF YOUR SYSTEMS, NETWORKS, OR INFRASTRUCTURE DURING OR AFTER A SCAN; (III) VULNERABILITIES NOT DETECTED BY THE SERVICE; OR (IV) THIRD-PARTY SERVICES INTEGRATED WITH OR USED ALONGSIDE THE SERVICE.
SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF CERTAIN WARRANTIES OR THE LIMITATION OF CERTAIN DAMAGES; IN THOSE JURISDICTIONS THE LIMITATIONS ABOVE APPLY ONLY TO THE FULLEST EXTENT PERMITTED BY LAW.
12. Indemnification
You agree to defend, indemnify, and hold harmless autoprocess-fz, its officers, directors, employees, agents, and subprocessors from and against any and all claims, damages, obligations, losses, liabilities, costs, and expenses (including reasonable legal fees) arising from or relating to: (a) your use of the Service; (b) your violation of these Terms; (c) your violation of any third-party right (including any intellectual property right, privacy right, or contractual right); (d) any scan you initiated against a target you did not have the legal right to scan; (e) any action you took, or failed to take, based on a finding or remediation prompt produced by the Service.
13. Suspension and termination
We may suspend or terminate your account at any time, with or without notice, for any reason, including (without limitation) suspected violation of these Terms, suspected fraud, non-payment, abusive behaviour towards our staff, or risk to the Service. Termination does not entitle you to a refund of any kind.
You may stop using the Service at any time. Your obligations under sections 7, 8, 11, 12, 14, 15, and any others that by their nature should survive, survive termination.
14. Governing law and dispute resolution
These Terms and any dispute arising out of or in connection with them, including any non-contractual dispute or claim, are governed by the laws of the United Arab Emirates as applied in the Emirate of Ras Al Khaimah, without regard to conflict-of-laws principles.
Any dispute, controversy, or claim arising out of or in connection with these Terms, including their existence, validity, interpretation, performance, breach, or termination, shall be referred to and finally resolved by arbitration administered by the RAK International Centre for Reconciliation and Arbitration ("RAK ICRA") under its rules in force at the time, which rules are deemed incorporated by reference. The seat of arbitration shall be Ras Al Khaimah, UAE. The language of the arbitration shall be English. The number of arbitrators shall be one.
Nothing in this section prevents either party from seeking interim or injunctive relief in any court of competent jurisdiction.
15. General
- Changes to these Terms. We may update these Terms from time to time. We will publish the updated Terms at this URL and update the effective date above. Material changes will be notified by email to your account address at least 14 days before they take effect, except where a change is required to comply with applicable law, in which case it takes effect immediately. Your continued use after the effective date constitutes acceptance.
- Entire agreement. These Terms, together with our Privacy Policy and Refund Policy, constitute the entire agreement between you and autoprocess-fz regarding the Service and supersede all prior agreements, communications, and proposals.
- Severability. If any provision of these Terms is held unenforceable, the remaining provisions remain in full force and effect.
- No waiver. Our failure to enforce any right or provision is not a waiver of that right or provision.
- Assignment. You may not assign or transfer these Terms without our prior written consent. We may assign these Terms in connection with a merger, acquisition, or sale of assets, without consent but with notice.
- Force majeure. Neither party is liable for any failure or delay in performance caused by events beyond reasonable control, including acts of God, war, terrorism, civil unrest, government action, internet or third-party-service outages, or pandemic.
- Notices. Notices to autoprocess-fz must be sent to [email protected]. Notices to you will be sent to the email address on your account; you are responsible for keeping it current.
- Language. The English-language version of these Terms is the controlling version. Translations are provided for convenience only.
16. About us
autoprocess-fz
Ras Al Khaimah Economic Zone (RAKEZ)
Ras Al Khaimah, United Arab Emirates
Contact: [email protected]