Terms of Service

These terms govern your use of LatchKey: this website, the free page scanner, the accessibility widget, the Crawler, the customer portal, and the professional services we sell. They are between you — the person or organisation named on the account — and the company that operates LatchKey.

You accept them by creating an account, by installing the widget, or by using any part of the product. If you are accepting on behalf of an organisation, you are confirming that you may bind it.

If you do not agree with them, do not use the product. There is no part of it that is available on different terms.

LatchKey is in private beta. That has three consequences worth stating plainly rather than burying in a disclaimer:

• Features described on this website may change, be delayed, or be withdrawn. Where a plan is priced for something that does not exist yet, the pricing page marks it Coming rather than listing it as included.
• Availability targets are not contractual during the beta. The status page is what we publish about uptime.
• We may contact you about your usage, because during a beta the point of a customer is partly to find out what breaks.

You need a confirmed email address to sign in, and a confirmed address before you can buy anything: we are about to take money and send receipts to it. Keep the details accurate, and keep your sign-in to yourself.

An account has an owner, may have admins, and may have members. Owners and admins can change what the account pays for; members can run scans and read reports. Anyone you invite can see the websites and results on the account, so invite accordingly.

You are responsible for what happens under your account, including what people you invite do with it. Tell us at security@thelatchkey.in if you think someone else has your sign-in.

This is the obligation we care most about. A single scan loads a page. A crawl sends hundreds of requests to a website and, if you give it sign-in details, signs in to it.

You confirm, every time you add a website or start a crawl, that:

• you own the site, or you are authorised by whoever does to test it;
• any sign-in details you give us are yours to give, and using them for an automated audit does not breach an agreement you have with someone else;
• you accept the traffic a crawl generates against the site, and you have told whoever needs to know.

We will not help you around a site’s own defences. We do not solve CAPTCHAs, we do not handle one-time codes, and we respect robots.txt on the entry point: a crawl that is disallowed there ends and costs you nothing. The crawler only ever issues GET and HEAD requests, which is asserted at the network layer rather than promised in a document.

If you scan a site you were not authorised to scan, that is your liability, not ours, and we may suspend the account. We will cooperate with a site owner who complains.

Do not:

• install the widget on a website that is not yours or your customer’s, or on more hostnames than your licences cover;
• resell, white-label or redistribute the product without a written agreement with us;
• present our output as a certification, an audit by a person, or a legal opinion — it is none of those, and section “What we do not promise” says why;
• attempt to break, overload or reverse-engineer the service, or use it to attack anybody else;
• use automated means to extract our reports, prices or content at scale, or to create a competing dataset.

Scan and crawl allowances are per plan and per day, and they are enforced. Working around them with multiple accounts is a breach of these terms rather than a clever trick.

While your subscription is live and paid, you get a non-exclusive, non-transferable right to use the product for the websites licensed on your account, and to embed the widget script on those websites. That right ends when the subscription does.

One licence covers one registered hostname. The apex and its www form count as one — example.com and www.example.com are the same licence, not two. Staging and preview hostnames are free and are marked no-index. A subdomain that is really a different site needs its own licence.

The Crawler is licensed to the account rather than to a website, and its tier sets how many crawls a day you may run and how many pages each crawl may reach.

Dodo Payments is our merchant of record and the legal seller of your subscription. They take the payment, calculate and remit any tax, and issue your invoice and receipt. Your card statement will read “Dodo Payments”, where the character limit allows. We never see or hold your card details.

The commercial terms, which match the billing rules on the pricing page because there is one set of them:

• Trial. 7 days, no card. Nothing can be charged during a trial because we have not asked for a payment method. One trial per domain.
• Renewal. Subscriptions renew automatically for the period you chose, monthly or yearly, until cancelled.
• Cancellation. Any time, self-serve, on every plan. It takes effect at the end of the period you have paid for, and there is no notice window to observe.
• Refunds. 14 days on a first purchase. After that, cancelling stops the next renewal rather than refunding the current period.
• Changing plan. An upgrade applies immediately and you pay the difference for the rest of the period. A downgrade is scheduled for your next billing date, so you keep the plan you paid for until it ends.
• A failed renewal. There is a 14-day grace period. The widget keeps serving while Dodo retries and emails you. If the grace period runs out, the widget stops rendering rather than showing a broken panel.
• Traffic bands. Plans are bounded by monthly visits, counted by the widget’s own cookie-free beacon. Usage is checked 21 days before a renewal, with reminders if you are over the band, and a move to the next plan comes with 7 days’ notice so you can change it first.

Prices are in US dollars unless your checkout says otherwise. We may change prices for future periods, and we will tell you before a renewal at a new price.

Audits, VPAT and ACR documents, user testing, file remediation and Evidence Packs are sold per engagement, at the ranges published on the services page. Scope, deliverables and turnaround are agreed in writing before work starts, and payment is due up front unless we have agreed otherwise.

Turnaround times run from the point we have what we need from you — access, a staging environment, the files. A deliverable describes the site as it was when we tested it; a site that changes afterwards is a new engagement, not a revision.

An Evidence Pack is a dated, hashed record of the work actually done. It is evidence, not insurance. We do not indemnify you or pay legal fees.

Your website and its contents stay yours. To do the work you are asking for, you give us permission to load your pages, screenshot them, store those screenshots and the findings, and generate fixes and reports from them. Where you have asked for AI-generated fixes, that includes sending image bytes and surrounding page text to our inference provider — or to nobody outside your own infrastructure, if you run inference yourself.

What we collect, who processes it and how long it is kept is set out in the privacy notice, which forms part of these terms.

The platform, the widget, the scanner, our reports and our documentation stay ours. If you send us feedback or a feature idea, we may use it without owing you anything for it; we will not identify you as its source without asking.

We will not use your name or logo as a customer reference without your permission.

Some of what the product produces is deterministic: a missing alt attribute on a decorative image has one correct answer and we apply it. Some of it is inferred, meaning a model proposed it. Every fix is labelled with which it is, and anything we decline to guess at is labelled too, with the reason.

Inferred output is a suggestion for a person to review. Alt text that describes the wrong thing, a label that misreads a control, a patch that does not fit your codebase: these are possible, which is why they are labelled rather than applied silently. You decide what ships on your site, and you remain responsible for it.

Nothing makes a site compliant. Compliance is a legal determination about a specific site, made by a court or a regulator, not a property software can confer. We do not certify compliance, and no vendor can.

Automated checks cover roughly one third of WCAG success criteria. A clean report means the automated checks passed on the part of the page we could reach, and nothing more. Our reports name the rules that were never run, and /limitations describes in detail what automation cannot find.

So, to be explicit about the things a document like this is sometimes used to imply: we do not promise that your site will pass an audit, that a regulator or a claimant will agree with any assessment, that the widget will remove every barrier for every visitor, or that using LatchKey changes your legal position. What we provide is testing, remediation where remediation is possible automatically, and an honest record of both.

We will provide the service with reasonable skill and care. Beyond that, and to the extent the law allows, the product is provided as it is: we do not warrant that it will be uninterrupted, that it will be free of defects, that every scan will reach every page, or that the results will suit a particular purpose of yours.

Some consumer law gives you rights that a contract cannot remove. Nothing here is intended to take those away.

Neither of us is liable to the other for indirect or consequential loss, lost profits, lost revenue, lost data or reputational harm.

Our total liability under this agreement is capped. The cap is stated in LEGAL_ENTITY.liabilityCap and is one of the facts this document is still waiting for, which is why the notice at the top of this page is there. It is normally expressed as the fees you paid in the twelve months before the claim; it is not our decision to make in a source file.

Nothing in this section limits liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be limited.

You will cover our reasonable costs, including legal costs, for any third-party claim that arises from you scanning or crawling a website you were not authorised to test, from content on a site you licensed, or from your breach of the acceptable-use section above.

We will tell you promptly about any such claim, let you take over its defence if you want it, and not settle it without your agreement.

You can cancel at any time from the portal, and you can delete your account. We can suspend or end an account for non-payment after the grace period, for a breach of these terms, or where continuing would put us or a third party at legal risk. Where the circumstances allow it, we will tell you first and give you a chance to fix it.

When a subscription ends, the widget stops serving on your sites and the Crawler stops admitting new crawls. Your reports and scan history stay readable for as long as the account exists. What happens to the data after that, and how to have it erased, is in the privacy notice.

We may change these terms. If a change materially reduces what you get or increases what you owe, we will give you notice by email before it takes effect, and continuing to use the product after that is acceptance. Otherwise the current version is the one on this page, with the date it last changed at the top.

We do not keep an archive of previous versions at their own addresses yet. If you need the version you agreed to, ask legal@thelatchkey.in and we will send it.

Notices. We will email you at the address on the account. You can reach us at the addresses on /contact; legal notices go to legal@thelatchkey.in.

Transfer. You may not transfer this agreement without our consent. We may transfer it as part of a merger or sale of the business, on notice to you.

Third parties. Your subscription is sold by Dodo Payments under their own terms, and integrations you enable are governed by the terms of whoever provides them. We are not responsible for a third party’s service.

Severance and waiver. If a provision is unenforceable, the rest survives. Not enforcing something once does not waive it.

Governing law and disputes. Outstanding — see the notice at the top of this page. The law and the forum are set in LEGAL_ENTITY and this section will state them once they are decided. Until then, nothing here is an agreement about where a dispute is heard.