Terms of Service
These terms govern your use of VigiLayer. We have tried to write them in the same plain language we use in the product itself, and to be honest about what VigiLayer can and cannot promise.
1. Who these terms are with
VigiLayer is operated by Ibad Fahad Anwer, a sole trader based in Pakistan, trading as VigiLayer, at 273/1-10 Korangi Creek Industrial Area, Karachi 75190, Pakistan. In these terms, "we" and "us" mean that person, and "you" means the person or organisation using the service.
By creating an account or using VigiLayer, you agree to these terms, to our Acceptable Use Policy, and to our Privacy Policy.
2. What VigiLayer is
VigiLayer checks websites for security, certificate, configuration and availability problems, explains what it finds in plain language, and tells you when something changes. It runs passive, non-invasive checks against information your website already publishes publicly.
All checks beyond those any ordinary visitor's browser performs require you to prove you control the domain first, by adding a DNS record we give you.
3. What VigiLayer is not
This section matters more than most, so it is deliberately blunt.
- We do not guarantee your website is secure. A high score means the specific things we check look correct. It does not mean your website cannot be compromised, and we never claim otherwise.
- We are not a penetration test. We do not attempt to break into anything, and a clean report is not evidence that someone else could not.
- We are not a substitute for professional security advice, a firewall, malware removal, backups, or keeping your software updated.
- We may miss things. Our checks cover a defined list, described in the product. Problems outside that list will not be reported.
- Some checks are best-effort. Where we rely on third-party sources such as public certificate logs or domain registries, those sources may be unavailable, incomplete, or out of date. We report what we can see and say so when we cannot see it.
- We are not a compliance certification. A VigiLayer report is not an audit and does not by itself demonstrate compliance with any standard or regulation.
4. Your account
- You must give accurate information when signing up, and keep your email address current, since that is how we send alerts.
- You are responsible for what happens under your account, including anything done by people you give access to.
- You must keep your sign-in credentials secure and tell us promptly if you think someone else has access.
- You must be old enough to enter a contract in your jurisdiction, and at least 18.
5. Domains and authorisation
You may only add domains you own or are authorised to manage. The Acceptable Use Policy covers this in full, and breaking that rule is grounds for immediate suspension.
Verification confirms that someone with control of a domain's DNS added our record. It is not a judgement about who legally owns the domain, and it does not transfer any rights to you.
6. Plans, payment and cancellation
[CONFIRM ALL COMMERCIAL TERMS BELOW BEFORE PUBLISHING. PAYMENTS ARE NOT YET IMPLEMENTED.]
- Paid plans are billed [monthly/annually] in advance by Paddle. We never see or store your card details.
- Prices are in US dollars. Paddle adds any sales tax or VAT required in your country at checkout, so the total you pay may be higher than the listed price.
- You can cancel at any time. Cancellation takes effect at the end of the period you have paid for, and we do not refund part-used periods unless the law requires it.
- One-time audit reports are non-refundable once the report has been produced and made available to you.
- We may change prices with 30 days' notice. If you do not accept a change, you may cancel before it takes effect.
- If a payment fails, we may downgrade or suspend the account after a reasonable attempt to contact you.
- The free plan is provided as-is, may be limited or changed at any time, and carries no availability commitment.
7. Availability
We aim to keep VigiLayer running and to scan on schedule, but we do not promise uninterrupted service. Scans may be delayed, skipped, or fail, and alerts may be delayed, because of maintenance, third-party outages, rate limits, or faults.
You should not rely on VigiLayer as your only means of noticing a problem with your website. If an alert does not arrive, that is not evidence that nothing was wrong.
Pausing alerts during a fault
If we detect a fault in our scanning or email systems, we may pause scans and alerts while we investigate. We do this deliberately rather than letting a broken system keep sending: a fault can produce alerts that are wrong, duplicated, or alarming for no reason, and a stream of incorrect warnings about your website is worse than a short silence.
Where we pause alerts, we will aim to resume normal service within 48 hours, and to tell you afterwards if alerts for your websites were affected. A fault may occasionally take longer to resolve, in which case we will keep you informed rather than resume a service we know to be unreliable.
While alerts are paused, checks may not run and you will not be notified of changes to your websites. Nothing about a pause implies your websites are healthy. You can always run a scan yourself from your dashboard to see the current state.
[IF YOU LATER OFFER AN SLA ON PAID PLANS, IT GOES HERE.]
8. Your content and our reports
You keep all rights to your domains, your data, and your websites. You give us only the permission needed to run the service: to check the domains you add, store the results, and send you alerts about them.
Reports we generate for you are yours to use, including to show a client. You may not present them as the output of an audit or certification, because they are neither.
We may use aggregated, anonymised statistics about problems found across all customers to improve the service and to write about general trends. Nothing in that use identifies you or your websites.
9. Suspension and termination
You can close your account at any time from the product or by contacting us. We may suspend or close your account if you break these terms or the Acceptable Use Policy, if payment fails and is not resolved, or if we are required to by law.
On closure we stop scanning, stop sending alerts, and delete your data as described in the Privacy Policy.
10. Liability
[THIS SECTION IN PARTICULAR MUST BE REVIEWED BY A LAWYER FOR YOUR JURISDICTION. SOME LIMITS BELOW ARE UNENFORCEABLE IN SOME COUNTRIES, AND CONSUMER LAW MAY OVERRIDE THEM.]
To the extent the law allows:
- VigiLayer is provided without warranties beyond those that cannot be excluded.
- We are not liable for loss arising from a problem we did not detect, an alert that did not arrive or arrived late, or a website compromise, outage, or data loss.
- We are not liable for indirect or consequential loss, including lost profits, lost sales, lost data, or damage to reputation.
- Our total liability in any 12-month period is limited to the amount you paid us in that period, or [AMOUNT] if you are on the free plan.
Nothing here limits liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be limited.
11. Indemnity
You agree to cover our reasonable losses if a claim is made against us because you used VigiLayer against a domain you were not authorised to check, or otherwise broke these terms or the Acceptable Use Policy.
12. Changes to these terms
We may update these terms as the service changes. We will update the date at the top, and for significant changes we will tell you by email or in the product before they take effect. Continuing to use VigiLayer after that means you accept the new terms.
13. Governing law
These terms are governed by the law of Pakistan, and the courts of Pakistan have exclusive jurisdiction, except that if you are a consumer you may also have the right to bring proceedings where you live.
14. Contact
Questions about these terms: vigilayer@meltoninternational.com
Postal address: 273/1-10 Korangi Creek Industrial Area, Karachi 75190, Pakistan
See also our Acceptable Use Policy and Privacy Policy, and our Refund Policy.