Canaryflux

← Back

Terms of Service

Effective June 22, 2026. (v1.2 — adds the per-project scan-permission attestation as a contractual representation; see "What you can scan" below.)

These are the rules for using Canaryflux. By creating an account or running a scan, you agree to them. If you don't agree, please don't use the service. Questions: support@canaryflux.com.

Who we are

Canaryflux is operated as a sole-proprietor business by Farid Islas, registered with Mexico's Servicio de Administración Tributaria (SAT) under the Persona Física con Actividad Empresarial (PFAE) regime in Mérida, Yucatán, Mexico. When these Terms refer to "Canaryflux," "we," or "us," they mean that business. These Terms are governed by the laws of the United Mexican States; disputes that can't be resolved by email go to the competent courts in Mérida, Yucatán, unless a non-waivable consumer-protection statute in your country requires otherwise.

The service

Canaryflux scans public websites you tell it to scan, captures screenshots on different device profiles, and uses AI to surface visual bugs, accessibility issues, broken layouts, slow pages, and similar quality problems. You get the findings in a dashboard.

We provide the service as-is and on a best-effort basis. Scans may occasionally miss bugs, flag false positives, or fail to load a page. You're responsible for confirming any finding before acting on it.

Your account

• You must provide a valid email and verify it before running scans on a paid plan.
• Keep your password safe. You're responsible for activity under your account.
• One person, one account. Don't share credentials. If you need multi-seat access, contact us.
• You must be at least 13 years old (16 in the EU/UK) to use Canaryflux.

What you can scan

You represent and warrant, on EVERY scan submission (not only the first per project), that you own or operate the target URL, or have explicit written authorization from the site owner to perform an active scan, AND that you understand a Canaryflux scan loads the page, executes its JavaScript, and captures screenshots + DOM content on multiple device profiles. This warranty is independent of any prior consent recorded by the dashboard.

You may only scan URLs that:

• You own, operate, or have explicit permission to test.
• Are reasonably accessible — we don't scan sites behind authentication walls without you providing the right access.
• Don't violate the law where you live, where we operate (Mexico), or where the target site is hosted.

Don't use Canaryflux to:

• Scan sites you don't have permission to scan (no scraping competitors at scale, no probing sites you don't own).
• Target loopback addresses (127.0.0.0/8, ::1), RFC1918 private ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16), link-local addresses (169.254.0.0/16) — including cloud-metadata endpoints such as 169.254.169.254 — or any host not publicly reachable on the open internet. Our SSRF guard rejects these at submission; the ToS exists so we can also terminate accounts that intentionally probe them.
• Generate denial-of-service load — repeated bulk scans of the same URL count as abuse.
• Bypass authentication, paywalls, CAPTCHAs, or other access controls.
• Scan illegal content, content depicting minors, or anything that would put us at legal risk.

We may suspend or terminate any account that violates these rules. Severe abuse can result in a permanent ban and forfeiture of any prepaid balance.

Per-project scan-permission attestation. Before each project's first scan, the dashboard asks you to check a box confirming you own the target site or have explicit permission to test it. That click is a contractual representation: it is recorded with the exact text you saw, the attested origin, a timestamp, and the IP + User-Agent at grant time. By checking the box you represent that the statement is true at the time of the attestation and that any scan you subsequently run against the same origin from that project relies on that representation. A false attestation is a material breach of these Terms — see the Indemnification clause below and the "Don't use Canaryflux to" list above.

Billing

• Paid plans are billed monthly through Stripe, in advance. Annual invoicing is available on request — email sales@canaryflux.com.
• Your monthly scan quota resets on the first day of each billing cycle. Unused scans don't roll over.
• Upgrading a plan takes effect immediately and is prorated. Downgrades take effect at the end of the current billing cycle.
• If a payment fails, we'll retry per Stripe's standard schedule. After repeated failures we'll suspend scanning until the issue is resolved.
• Refunds: we offer a full refund of your first paid charge when (a) it is the first paid subscription you have ever had on Canaryflux (the Free tier does not count), AND (b) the charge was made within the past 14 days, AND (c) you have completed fewer than 20 scans on the paid plan. Once you have had any paid subscription — refunded or not — you are no longer eligible for a refund on future plans, across all subscriptions and accounts you may hold. Annual plans qualify for the same window measured from initial purchase only — renewals are not refundable, and switching from a prior monthly subscription to annual is treated as a subsequent plan and is not refundable. Mid-cycle tier upgrades stay within the original first-plan window on the price difference, and do not create a new refund window. Scans run while on the Free tier do not count toward the 20-scan threshold. Refunds for service outages, scanner errors, or billing mistakes are not subject to the 14-day / 20-scan cap or the first-plan rule — contact support and we will resolve it. EU, UK, and Turkey customers retain their statutory 14-day right of withdrawal under applicable consumer law, regardless of usage. Accounts suspended for violation of these Terms are not eligible for refunds. Beyond the standard window, refunds are case-by-case — email us and we'll work it out.
• You can cancel any time from the dashboard or via Stripe's customer portal. Cancellation takes effect at the end of the current paid period.

Your content

Scan results, screenshots of URLs you submit, project names, and any other data you put into Canaryflux belong to you. We need a limited license to it just so we can run the service — store it, display it back to you, and send it through our processors (Google, Anthropic, Stripe, etc.) as described in our Privacy Policy. Nothing more.

You can delete your account from the dashboard at any time. Deletion removes your data from our active systems immediately.

Our content

The Canaryflux brand, the dashboard UI, the scanner code, our marketing site, and everything we publish under the canaryflux.com domain are ours. You don't get a license to copy, redistribute, or build a competing product from them.

Service availability

We aim for high uptime but we don't guarantee it. The scanner depends on third-party services (Google, Anthropic, Railway, Vercel, Cloudflare) that can have their own outages. We don't credit downtime caused by upstream failures, but we do work hard to minimize them.

We may take the service down for scheduled maintenance with at least 48 hours' notice via email, except for emergency security patches.

Disclaimers

Limit of liability

To the maximum extent allowed by law, our total liability to you for any claim related to Canaryflux is capped at the greater of (a) the amount you paid us in the 12 months before the claim arose, or (b) USD $100. We're not liable for indirect, incidental, consequential, special, or punitive damages — including lost profits, lost data, or business interruption.

Some jurisdictions don't allow these limits. Where that's the case, the limits apply to the fullest extent permitted by law.

Indemnification

You agree to defend and hold us harmless from any claim arising from your misuse of the service, your violation of these Terms, your violation of someone else's rights (including intellectual property), or content you submit to Canaryflux that we wouldn't otherwise have handled.

Termination

You can terminate your account any time. We can terminate or suspend your account if you materially breach these Terms, abuse the service, fail to pay, or use Canaryflux for anything illegal. On termination, your access ends and your data is deleted per our Privacy Policy.

Changes to these terms

If we change anything material, we'll email active users at least 14 days before the change takes effect. Continuing to use Canaryflux after the effective date means you accept the updated terms. If you don't agree, cancel before the effective date.

Governing law

These Terms are governed by the laws of the United Mexican States, without regard to conflict-of-law principles. Any dispute that can't be resolved by emailing support@canaryflux.com will be brought in the competent courts of Mérida, Yucatán — the operating-entity domicile — unless mandatory consumer-protection rules in your country require otherwise.

Contact

Anything related to these Terms: support@canaryflux.com.