Terms of service

1. Who we are

Rowlock is a service of ITACC Inc., a corporation based in Ontario, Canada (“we”, “us”). These terms apply when you buy or use any Rowlock service (“you” means you and, if you order for a company, that company). By placing an order you confirm you have read and accept them.

2. Our services

• Audits (Founding client, Database Check, Launch Audit): a one-time review of the database rules and related configuration in the source code you give us access to, delivered as a written report.
• Rowlock Watch: a subscription under which we review new database migrations and policy changes in the repositories your plan covers, for as long as the subscription is active.
• Fix it for you and Enterprise work: quoted separately and governed by these terms plus anything we agree in writing.

Turnaround times on the site are targets from when we have access to your code (and a signed NDA, if you asked for one).

3. What a review is, and isn’t

Our work is a code and configuration review. It is not a penetration test, a certification, an audit under any standard, or a guarantee that your app is secure or cannot be compromised. We review what you give us access to at the time we review it; changes made afterwards, other systems, and third-party services are outside scope unless covered by an active Rowlock Watch subscription or agreed in writing.

4. Your authorisation and responsibilities

• You confirm you own the app or are authorised by its owner to have it reviewed.
• We do not test live systems or access production data without separate written permission.
• Give us read-only access only. Remove secrets (such as .env files, service role keys and passwords) from what you share. We never need your database password or service role key.
• You are responsible for deciding whether and how to apply our recommendations, and for testing changes before release.
• You must not use our services for anything unlawful or to review software you are not authorised to review.

5. Prices, payment and taxes

• Prices are in Canadian dollars (CAD). Applicable Canadian sales taxes (GST/HST) are added where required.
• Payments are processed by Stripe. We never see or store your full card details.
• Audits are paid once, in advance. Rowlock Watch is billed in advance, monthly or yearly as you choose.

6. Subscription renewal and cancellation

• Rowlock Watch renews automatically at the end of each billing period, at the same price, until you cancel.
• You can cancel anytime from the “Manage subscription” link (on our site, in your confirmation email and in Stripe receipts) or by emailing us. Cancellation stops future renewals; you keep the service until the end of the period you have already paid for.
• For yearly plans, we send a reminder before the renewal date.
• We will give you at least 30 days’ notice by email before any price change takes effect for your subscription.
• If a renewal payment fails, Stripe retries it; if it still fails, the subscription may end.

7. Refunds

• Audits: full refund any time before the review starts. After that, contact us and we will work it out fairly.
• Rowlock Watch: full refund of your first payment if you cancel within 14 days of subscribing. After that, payments for periods already started are not refunded part-way through.
• Refunds go back to the original payment method and usually appear within 5–10 business days.

8. Confidentiality and your code

• We use your code and information only to provide the services.
• We delete our copy of your code within 30 days of delivering an audit, and remove our access within 30 days of a Rowlock Watch subscription ending.
• We never publish anything about your app without your written permission. Founding client orders include permission for an anonymised case study, as stated on that plan.
• If you ask, we sign a mutual NDA before starting.

9. Ownership

Your code stays yours. Once paid for, you may use our reports and recommendations freely within your organisation. Our tools, methods and templates remain ours.

10. Limitation of liability

To the extent permitted by law, our total liability for any claim relating to our services is limited to the amount you paid us for the service concerned in the 12 months before the claim, and we are not liable for indirect or consequential losses (such as lost profits, lost data or business interruption), including losses from a security incident we did not identify. Nothing in these terms limits rights you have that cannot be limited under applicable law, including consumer protection law.

11. Suspension and termination

We may decline or stop work, with a refund of any unused prepaid amount, if we reasonably believe a review is not authorised or that the service is being misused. You may stop using the services at any time as described above.

12. Changes to these terms

We may update these terms. The version in force when you place an order applies to that order; for subscriptions, we will email you about material changes at least 30 days before they apply.

13. Governing law

These terms are governed by the laws of the Province of Ontario and the federal laws of Canada that apply there. The courts of Ontario have jurisdiction over any dispute, without limiting any consumer’s right to bring a claim where the law allows.

14. Contact

ITACC Inc. (Rowlock) · Ontario, Canada · info@itacc.ca