Terms of Service

These Terms govern your use of the PrivaScan service operated by Talivio Technology OÜ (registry code 16991406, Ahtri tn 12, Kesklinna linnaosa, Tallinn, Harju maakond, 15551, Estonia — "Talivio", "we"). By using the service you agree to them. The service is intended for business and professional use.

1. The service

PrivaScan runs automated privacy checks against web pages you submit — detecting pre-consent trackers, cross-border data transfers, cookies, web storage and consent banners — and reports the findings as evidence, including downloadable reports with a public verification link. It is a testing and evidence tool, not a certification body and not a law firm.

2. Results are an indication, not legal advice

Scan results are technical evidence of what the tested page(s) did at the moment they were loaded. They are not legal advice, and a clean scan does not certify or guarantee compliance with the KVKK, the GDPR, the ePrivacy rules or any other law or standard. Automated scanning covers only the pages tested and the signals observable in the browser: server-side collection, trackers not in our signature databases and content behind logins may go undetected, and the absence of findings is not proof of compliance. Grades, risk labels and report narratives are risk indications to support your own assessment — verify results, and consult qualified counsel, before relying on them for compliance decisions.

In short: a scan report is evidence, not a certification. A clean scan does not certify compliance with the GDPR, the ePrivacy rules, the KVKK or any other law. Automated scanning detects only a subset of what a full review would, and every result is provided "as is".

3. Authorisation to scan

You may only submit sites you operate or are authorised to test. By submitting a URL you warrant that you own the site, or that its operator has authorised you (for example as its agency, developer or data protection officer) to run automated privacy tests against it, and that the scan does not breach any law, contract or acceptable-use policy that binds you or the site. Our standard scan is a passive test — it loads pages the way an ordinary visitor's browser would. Some features perform more active or deeper testing (for example triggering a site's consent tool to measure post-consent behaviour, following resource chains, or capturing pages for expert review); for those you warrant that your authorisation extends to such testing.

You are responsible for every scan run from your account or at your instruction. You will defend, indemnify and hold harmless Talivio Technology OÜ and its staff against any claim, liability, loss, fine, penalty, regulatory investigation, cost or expense (including reasonable legal fees) arising out of or connected with a scan you were not authorised to run or that otherwise breached this section. This obligation survives termination of these Terms and the closure of your account.

4. How the scanner behaves

Scans load the target page(s) in a real headless browser, the way an ordinary visitor's browser would, and are rate-limited to a small number of page loads per scan. The scanner does not attempt to bypass authentication, exploit vulnerabilities or place meaningful load on the target. We may refuse, throttle or stop scans of any target at our discretion, including at the request of a site operator.

5. Your account

You must provide accurate information and keep your credentials secure; you are responsible for activity under your account. Public badges and report verification links you create are visible to anyone who has them.

6. Acceptable use

• Do not scan sites you are not authorised to test (section 3).
• Do not use the service to disrupt, probe or attack any website, or to circumvent our rate limits and abuse protections.
• Do not attempt to disrupt, overload or gain unauthorised access to the service, or reverse-engineer it.
• Do not resell scan results as your own certification, or use the service to build a competing scanning product.

7. Paid plans and one-off products

Subscriptions are billed in advance on a monthly or yearly basis through Stripe and can be cancelled at any time; access continues until the end of the paid period. One-off products (such as audit reports or expert reviews) are charged when ordered. Fees already paid are non-refundable unless required by law. Prices are in EUR and exclude VAT where applicable. We may change prices with effect from your next billing period, with prior notice.

8. Intellectual property and your data

We own the PrivaScan platform and its content. You retain ownership of the data and reports relating to your sites; you grant us the rights needed to host and process them to provide the service.

9. Availability

The service is provided "as is" and "as available", without warranty of uninterrupted or error-free operation. We may change, suspend or discontinue features at any time. The service depends on third-party systems we do not control — including Stripe, our AI narrative provider and the behaviour of the websites being scanned — and we are not responsible for their availability or decisions. This disclaimer does not affect the statutory conformity rights that consumers have under Directive (EU) 2019/770 and applicable national law, which remain unaffected.

10. Limitation of liability

To the fullest extent permitted by law, Talivio Technology OÜ is not liable for indirect, incidental or consequential damages, or for loss of profits, or for regulatory penalties, fines or other losses arising from decisions made in reliance on scan results. Our total aggregate liability under these Terms is limited to the fees you paid us in the twelve months before the event giving rise to the claim; where you use the service on a free plan and have paid us nothing, that aggregate liability is limited to EUR 100.

This limitation does not apply to liability that cannot be limited under mandatory law, including liability for intent (wilful misconduct) or gross negligence, for death or personal injury, or under mandatory consumer-protection law.

11. Termination

You may stop using the service and close your account at any time. We may suspend or terminate access for breach of these Terms, including unauthorised scanning. You can download your reports before closing your account.

12. Governing law

These Terms are governed by the laws of Estonia, excluding its conflict-of-laws rules and the United Nations Convention on Contracts for the International Sale of Goods (CISG). The exclusive place of jurisdiction for disputes is Harju Maakohus (Harju County Court, Tallinn). Nothing in this clause deprives you of the protection of mandatory provisions of the law of your country of habitual residence or establishment that cannot be derogated from by agreement.

13. Consumers

The service is intended for business and professional use. If you nonetheless use it as a consumer, mandatory consumer-protection provisions of your country of habitual residence apply, and the Governing Law, Limitation of Liability and Warranty Disclaimer sections above apply only to the extent that mandatory law permits.

14. Changes and contact

We may update these Terms; continued use after an update means you accept the revised Terms. The date at the top shows when they last changed. Questions: [email protected].