Terms of Service

Last updated: May 2026

These Terms of Service ("Terms") govern your access to and use of CredWatch (the "Service"), operated by CredWatch ("we", "us", or "our"). By creating an account or using the Service, you agree to be bound by these Terms.

1. Use of the Service

CredWatch is a credential-exposure monitoring platform. You may only use the Service to monitor repositories and web endpoints that you own or have explicit written permission to monitor. Unauthorized scanning of third-party systems is strictly prohibited and may result in immediate account termination and legal action.

You agree not to:

Use the Service to scan systems you do not own or lack authorization to monitor.
Attempt to reverse-engineer, decompile, or extract the Service's source code.
Use the Service for any illegal purpose or in violation of any regulations.
Share your account credentials or allow unauthorized third parties to access your account.
Attempt to circumvent rate limits, access controls, or any security mechanism.

2. Account Registration

You must provide accurate and complete information when creating an account. You are responsible for maintaining the confidentiality of your login credentials and for all activity that occurs under your account. Notify us immediately at [email protected] if you suspect unauthorized access.

3. GitHub Access Tokens

If you provide a GitHub Personal Access Token, you represent that you have the authority to grant CredWatch access to the repositories covered by that token. We store tokens encrypted at rest and use them solely to perform scans on your behalf. We will never use your token to access repositories beyond the scope you have configured.

4. Data and Privacy

Our collection and use of your data is described in our Privacy Policy, which forms part of these Terms.

5. Free Tier and Paid Plans

Free accounts are subject to usage limits (repositories, domains, scan frequency) as described on our pricing page. We reserve the right to modify these limits with reasonable notice. Paid plans are billed as described at the time of purchase. You may cancel at any time; cancellation takes effect at the end of the current billing period.

6. Data Retention

Free accounts that have been inactive for 90 days will receive a warning email. Accounts inactive for 180 days may be archived and data deleted in accordance with our data retention policy. Paid accounts are exempt from this policy while an active subscription exists.

7. Disclaimer of Warranties

The Service is provided "as is" without warranties of any kind, express or implied. We do not warrant that the Service will be uninterrupted, error-free, or that it will detect all exposed credentials. You are solely responsible for acting on findings and securing your systems.

8. Limitation of Liability

To the fullest extent permitted by applicable law, CredWatch shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the Service, including but not limited to any data breaches or security incidents that occur despite the Service's findings.

9. Termination

We may suspend or terminate your account at any time for violation of these Terms. You may delete your account at any time by contacting [email protected].

10. Changes to These Terms

We may update these Terms from time to time. We will notify you by email or via a notice in the portal at least 14 days before material changes take effect. Continued use of the Service after changes become effective constitutes acceptance of the updated Terms.

11. Contact

If you have questions about these Terms, contact us at [email protected].