Legal

Terms of Use

Last updated: 1 November 2026

These Terms of Use (“Terms”) are an agreement between you and LidTight (“LidTight”, “we”, “us”) about the LidTight website and security checks (the “Service”). LidTight is operated from Israel.

By using the Service, you accept these Terms and our Privacy Policy. If you do not accept them, do not use the Service.

Key points

  • Check only apps that you own, or that you have the owner’s written permission to test.
  • The deep checks act inside your app as test users. You accept their effects and any costs they cause.
  • No check finds every problem. The Service is not a full security audit.
  • Israeli law applies, and the courts of Tel Aviv-Jaffa decide disputes.

1.Definitions

  • App: a website or web application whose address you submit to the Service.
  • Check: an automated security test that the Service runs on an App. The Free Check reads only what any visitor can see. The Deep Checks act inside the App as test users.
  • Report: a paid document with the details of the findings and how to fix them, including any fix prompts and engineer notes.
  • You: the person who uses the Service, and any company or organization on whose behalf that person uses it.

2.Who may use the Service

You must be at least 18 years old and able to make a binding contract. If you use the Service for a company or another organization, you confirm that you have authority to accept these Terms for it, and these Terms bind it.

3.Permission to check an App

Security testing without permission can be a crime, for example under the Israeli Computers Law, 1995, and similar laws in other countries. For each App that you submit, you confirm that:

  • you own the App, or you have the owner’s written permission to test it, including with the Deep Checks;
  • this permission covers the systems that the App uses and a Check may reach, such as its database, file storage, functions and AI features;
  • the Checks do not break the terms of the platforms that host or build the App;
  • you accept the effects of the Checks, as described in What the Checks do.

You alone are responsible for every App you submit. We may refuse, limit or stop any Check at any time, without notice, for example if we suspect that you do not have permission. If we believe that a Check was run without permission, we may tell the App’s owner or the authorities.

4.What the Checks do

Free Check

The Free Check acts as an anonymous visitor. It reads the pages, files and public interfaces that the App offers to anyone, and the public DNS records of its domain. It may count the records that a stranger can read, and read one record to learn its field names. It does not keep the values of any record.

Deep Checks

The Deep Checks act like real users of the App. To test it, they may:

  • create test user accounts, with email addresses that start with “lidtight-scan-”;
  • create, change and delete test records that belong to those test accounts, and change a value back after a test;
  • upload a small text file to the App’s file storage and delete it right after;
  • call the App’s functions and AI features a limited number of times.

The Deep Checks try to change only test data that they created, and to remove it after the test. Some test data, such as test accounts, may stay in the App. The results say what stayed, so you can delete it.

Calls to AI features and other paid services can cost money, for example in AI credits or usage fees. You accept these costs. Test activity may also appear in the App, for example as new accounts, emails that the App sends, and entries in its logs and analytics.

Limits

The Checks do not try to overload an App, guess passwords or trick people. A Check can still slow down or affect an App that is already weak or unstable. Back up the App and its data before you run the Deep Checks.

5.Results are not a guarantee

  • The Checks are automated. They find many common problems, but not all. They can also report a problem that is not real (a false positive).
  • Results show the App at the moment of the Check. The App can change after that.
  • A clean result does not mean that the App is secure, and it is not a certificate.
  • The Service is not a full penetration test or security audit, and it is not legal or compliance advice (for example, about privacy law). For those, hire a qualified professional.

You remain responsible for the security of your App, the data of its users, and the decisions you make based on our results.

6.Reports and fix prompts

A Report explains the findings of a Check and how to fix them. Some Reports include fix prompts (instructions to paste into your AI building tool) and notes from an engineer.

Fix prompts are suggestions. Your AI tool decides what changes it makes, and those changes can contain mistakes. Read every change before you accept it, test your App afterwards, and keep a backup. We are not responsible for changes made by you or by your AI tool.

7.Prices, payment and refunds

  • Prices are shown on the website before you order. Unless we say otherwise, prices are in US dollars.
  • After you order, we email you a payment link. A third-party payment provider processes the payment under its own terms. We do not see or store your card number.
  • We send the Report by email, within the time shown for your Report. The time starts when we receive the payment.
  • Refunds: if we cannot deliver your Report, you get a full refund. If a Report has a material error that we cannot fix within a reasonable time, you get a full refund. Contact us within 14 days of delivery.
  • A Report is digital information prepared for your App. Where the law allows, the right to cancel does not apply after delivery. This does not limit any right that the law gives you and that cannot be waived.

8.Acceptable use

You must not:

  • check an App without permission (see Permission to check an App);
  • use the Service or its results to attack, harm or extort anyone, or to access data you have no right to see;
  • run Checks in bulk, by script or bot, or in a way that overloads the Service or the Apps it checks;
  • copy or resell the Service, its checks or its Reports, or use them to build a competing product;
  • try to break, bypass or reverse-engineer the Service, its limits or its security;
  • use the Service against any law.

If you find a security problem in the Service, please tell us. Do not test it beyond what you need to show the problem.

9.Intellectual property

  • We own the Service, its checks, website, text, design and Reports, and all rights in them.
  • When you pay for a Report, you may use it for your own App, and share it with people who help you fix that App.
  • You keep all rights in your App. You allow us to access it as these Terms describe.
  • If you send us ideas or feedback, we may use them freely, with no duty to pay you.
  • We may use check results in a form that does not identify you or your App, for example to improve our checks or to publish general statistics.

10.Confidential results

We treat the results of a Check as confidential. We do not publish them, or share them in a form that identifies your App, unless you agree, the law requires it, or a Check was run without permission.

11.Third-party services and trademarks

Apps may run on services of other companies, such as Lovable, Base44, Bolt, Replit, Supabase or Firebase. Those services have their own terms, and we are not responsible for them.

LidTight is an independent service. It is not affiliated with, endorsed by or sponsored by any of these companies. Their names and marks belong to their owners, and we use them only to describe which apps the Service can check.

12.Disclaimer of warranties

The Service, and all results and Reports, are provided “as is” and “as available”. To the fullest extent the law allows, we make no warranties of any kind, express or implied, including about accuracy, completeness, availability, merchantability, fitness for a particular purpose and non-infringement.

The Service is new and still in development. Features may change, pause or stop.

13.Limitation of liability

To the fullest extent the law allows:

  • we are not liable for indirect, incidental, special or consequential damages, or for loss of profits, revenue, data, goodwill or business, even if we were told they were possible;
  • we are not liable for damage caused by a problem in your App that a Check did not find, by the effects of the Checks described in What the Checks do, or by changes made by you or your AI tool;
  • our total liability for all claims about the Service is limited to the greater of the amount you paid us in the 12 months before the claim, or US$100.

Nothing in these Terms limits liability that the law does not allow to be limited, such as liability for fraud, intent or gross negligence, or for death or personal injury caused by negligence.

14.Indemnity

You will defend and compensate us, and the people who work with us, for any claim, loss, damage or cost (including reasonable legal fees) that comes from a Check of an App that you submitted without the required permission, from your breach of these Terms or of the law, or from your use of results or Reports.

15.Suspension and termination

You may stop using the Service at any time. We may suspend or end your access, or refuse any request, if you break these Terms, if the law requires it, or to protect the Service, its users or the Apps it checks.

The sections on permission, results, intellectual property, disclaimers, liability, indemnity and disputes stay in force after the Terms end.

16.Changes to these Terms

We may change these Terms. We will update the “Last updated” date, and for significant changes we will give notice on the website or by email before they take effect. If you use the Service after a change takes effect, you accept the new Terms. A change does not apply to a Report that you paid for before the change.

17.Governing law and disputes

The laws of the State of Israel govern these Terms, without regard to conflict-of-law rules. The competent courts in Tel Aviv-Jaffa, Israel, have exclusive jurisdiction over any dispute about these Terms or the Service.

If you are a consumer, you keep any protection that the mandatory laws of your country give you.

Before you go to court, please contact us. Most problems can be solved quickly by email.

18.General

  • Entire agreement: these Terms and the Privacy Policy are the whole agreement between you and us about the Service.
  • Severability: if a court finds part of these Terms invalid, the rest stays in force, and the invalid part applies as far as the law allows.
  • No waiver: if we do not enforce a right, we do not give it up.
  • Assignment: you may not transfer these Terms without our written consent. We may transfer them as part of a sale, merger or reorganization of our business.
  • Events beyond our control: we are not responsible for delays or failures caused by events that we cannot reasonably control, such as outages of our providers, attacks, war or natural disasters.
  • Notices: we may send notices to the email address you gave us, or publish them on the website.
  • Language: if we translate these Terms, the English version governs.

19.Contact us

For questions about these Terms, contact LidTight.

We will publish our contact email here before launch. Until then, reply to any email we sent you.