Terms of service

Who we are

These terms are an agreement between {{LEGAL_ENTITY}}, at {{LEGAL_ADDRESS}}, and you. In these terms, “we” means {{LEGAL_ENTITY}}. “You” means the person or company that opens an account.

You accept these terms when you create an account or use Excuto. If you accept for a company, you state that you have authority to bind that company.

The acceptable use policy and the refunds and cancellation page are part of these terms. The privacy policy explains how we handle personal data.

The service

Excuto is a quality assurance service for websites. These terms use five words with a fixed meaning.

• Audit: one run of the service on one URL.
• Finding: one reported bug and its evidence.
• Evidence: the videos, screenshots and logs that show a finding.
• Organization: the group that holds your credits and audits.
• Credit: a prepaid unit that you buy for audits.

In an audit, browser agents load the pages of a site and look for candidate bugs. The agents replay up to 20 candidate bugs twice each. An AI finding gets no replay. A person on our team reviews each finding before it appears in your report.

Some findings come from an AI model. We label them as AI findings. We never show an AI finding without approval from a person. The model does not decide that a bug exists.

Passive and active audits

• A passive audit works on any public URL. The agents load public pages like a visitor. They send only GET and HEAD requests, and they do not click or type.
• An active audit works only on a site whose ownership you proved. The agents fill in forms with test values, submit them, and click buttons and links. An active audit can create records on your site.

To prove ownership, add a DNS TXT record at the name _qa-verify.<host>. The value of the record must equal the token that we show you. We then read the record. We cannot verify a host that is an IP address.

If you do not want test records in your live data, audit a staging copy of your site. Each organization can start 20 audits each UTC day. We can change this limit.

Accounts

• You must be old enough to form a binding contract where you live.
• You sign in with email and password, or with Google. If you use email and password, you must verify your email address before you start an audit.
• We create one organization for each account. Today, an organization has one user.
• You are responsible for your account, your organization and every action that uses your API keys.
• We show an API key once, when you create it. We store only a hash of the key. If you lose a key, you must revoke it and create a new one.
• If someone uses your account or a key without your permission, email us at once.
• You must give us true information and keep your email address current.

Your authority to audit

Each time that you start an audit, you state one of two facts. Either you own the site, or you have written permission from its owner to audit it. The permission must cover the audit mode that you choose.

For a passive audit, you accept that the audit loads public pages like a visitor and obeys robots.txt. For an active audit, you accept that the agents do not read robots.txt, because you proved ownership.

If the owner of a site asks you or us to stop audits of that site, you must stop. The acceptable use policy lists what you must not do.

Credits and payment

• You buy credits in packs. Razorpay takes the payment in Indian rupees (INR) under its own terms. Your full card number does not reach our systems.
• The pricing page lists the packs and their prices. The price that checkout shows is the price that you pay.
• We add credits to your organization only after Razorpay confirms the payment to us.
• During the pilot, an audit costs 0 credits. If we change the price of an audit, the new price applies to audits that start after the change.
• Expiry of credits: {{CREDIT_EXPIRY}}.
• A credit has no cash value. You cannot transfer credits to another organization.
• You pay the amount that checkout shows. You are responsible for any other tax that applies to you.
• The refunds and cancellation page says when we refund a payment.

Service levels

Excuto is in pilot. We do not promise an uptime level. The service can be slow or unavailable. Features, limits and prices can change.

We do not promise that an audit finds every bug, or any bug. A clean report does not prove that a site has no bugs. A person reviews each finding, but a reviewer can make an error.

Support hours: {{SUPPORT_HOURS}}. We do not promise a response time.

Your content and evidence

Your content is the URLs and goal text that you send us, and the findings and evidence that we make for your audits. You own your content.

You give us a limited license to use your content. We use it only to run the audit, have a person review it, keep the service secure and show it to you. Our subprocessors, including an AI model provider, handle it for us. The subprocessors page lists them.

Evidence shows what the audited page shows. If a page shows personal data, the evidence shows it too. You must have the right to let us load the site and keep this evidence.

Our intellectual property

We own the service, its software, the name Excuto and the design of our reports. These terms give you only a right to use the service. You can use your findings and evidence for your own business.

Confidentiality

We keep your findings, evidence and API keys confidential. We use them only to give you the service. We share them only with staff and subprocessors, or when the law requires it.

Our staff can read your findings and evidence, so that they can review them. A share link shows approved findings to anyone who holds the link. You can revoke a share link on the audit page.

You must keep confidential any non-public information about the service that we give you. Information that is public, or that you knew before, is not confidential.

Suspension

We can suspend your account or stop an audit at once if one of these is true:

• You breach these terms or the acceptable use policy.
• We believe that an audit runs without authority.
• An audit harms another site or our systems.
• The law requires it.
• A payment from you is disputed or reversed.

When we can, we tell you the reason.

Termination

You can stop using the service at any time. No self-service account deletion exists today. To close your account, email {{CONTACT_EMAIL}}.

We can end your account for the reasons in the suspension section. We can also end the service or the pilot. If we end the service, we will email you first.

When your account ends, your right to use the service ends. The sections on intellectual property, confidentiality, disclaimer, liability, indemnity and governing law continue.

Disclaimer of warranties

We give the service “as is” and “as available”. To the extent that the law allows, we give no warranty, express or implied. This includes any warranty of merchantability, fitness for a purpose, non-infringement and accuracy of findings.

Some laws give you rights that a contract cannot remove. These terms do not remove those rights.

Limit of liability

To the extent that the law allows, we are not liable for indirect or consequential loss. This includes lost profit, lost revenue, lost data and lost goodwill.

Our total liability for all claims about the service is limited. The limit is the amount that you paid us in the 12 months before the event that caused the claim. If you paid nothing in that time, the limit is INR {{LIABILITY_FLOOR_INR}}.

Nothing in these terms excludes or limits liability that the law does not allow us to exclude or limit. Fraud is one example.

Your indemnity

If you start an audit without the authority that these terms require, you must defend us against any claim that arises from it. You must also pay the resulting loss, damages and reasonable legal costs. This includes a claim from the owner of the audited site.

We will tell you about the claim promptly. You must not settle a claim in a way that binds us without our consent.

Governing law and courts

The laws of India govern these terms. The courts at {{COURTS}} will hear any dispute about them. These terms contain no arbitration clause.

Changes to these terms

We can change these terms. We post the new terms on this page with a new date. If a change is material, we will also email you before it applies.

If you use the service after a change applies, you accept the new terms.

Contact

{{LEGAL_ENTITY}}, {{LEGAL_ADDRESS}}. Email {{CONTACT_EMAIL}}.