Terms of service

Operator. The Service is run by a sole trader under the trading name Sigila, with an EU seat (Finland) and an operating contact at sigila@polsia.app. References to “we”, “us”, “our” below mean that operator.

Account holder. “You” is the SME, freelancer or individual who created a Sigila account or paid for a scan. If you sign on behalf of a company, you confirm you are authorised to bind it. These terms apply to every paid plan and to the free anonymous scans alike.

• Anonymous scans are allowed. You can run a free 60-second scan without creating an account or giving us an email.
• Paid plans create a Stripe customer. Checkout is handled by Stripe; a Stripe customer record is created for the email you give at the form.
• You must be 18+ (or, if you’re a legal entity, duly represented) to bind yourself to these terms.
• You are responsible for your credentials. Keep your sign-in and your Stripe-receipt access safe. We will treat any order placed through your logged-in account as authorised by you.
• One Sigila account per Stripe customer. We do not duplicate accounts; if you need to migrate an account between emails, email us at sigila@polsia.app and we will do it manually.
• Suspected compromise? Notify us at sigila@polsia.app as soon as you can. We will suspend the affected plan and rotate the credentials.

Sigila is a weekly accessibility scanner. We run an axe-core-driven audit in a headless browser (Playwright + JSDOM) against a public URL you give us. Each weekly pass is written to a hash-chained vault: today’s hash carries yesterday’s forward via SHA-256, chained and — on Pro, with a trusted RFC 3161 timestamp from a third-party authority.

On the Agency tier you may resell the same machinery under your own brand and a single, consolidated Stripe-style invoice per billing cycle.

Automated tooling covers roughly 30–40% of WCAG 2.1 AA. We treat that number as on the box honesty, not marketing: the Service is evidence, not a compliance certificate. We do not warrant accessibility, regulatory, audit or judicial outcomes — see §8 and §9.

• Only point the scanner at sites you own or have written authorisation to test. Scanning a third-party site without authorisation may violate computer-misuse law in your jurisdiction.
• Do not scan EU/EEA personal data at scale. The crawler should hit only the public URL you give it; do not route personal-data endpoints through it.
• No security probing. The scanner is for accessibility findings, not vulnerability testing. Do not use it to probe third-party security, harvest credentials or fingerprint stacks.
• Do not tamper with the vault. Do not attempt to reverse-engineer the hash chain, race the timestamping, or alter anything in the evidence chain once sealed.
• No resale of the digests. The weekly digest is yours to use; it is not for re-marketing, re-licensing or repackling into a competing product.
• Rate limits. Free plans are limited to one scan per domain per 24 hours — rate-limited re-runs are excluded from the vault.
• Resale is an Agency-tier feature. Commercial resale of the Service — including white-labelled delivery to your own clients — requires the Agency tier.

Paid plans run on Stripe Connect. The price is computed server-side and disclosed at checkout; the price never comes from the browser. Prices are ex-VAT; VAT is added at the Stripe checkout based on the buyer’s billing country. The currency is EUR (Stripe may charge in EUR or USD depending on the card).

Refund policy.

• Starter is refundable inside 14 days of first charge as long as fewer than three scans have run — email us at sigila@polsia.app. After 14 days or three scans (whichever comes first), the running invoice is final.
• Pro and Agency run month-to-month. No annual contract, no minimum term. Cancel any time from the Stripe customer portal or by emailing sigila@polsia.app. Cancellation takes effect at the end of the current billing period; the running invoice is final (no pro-rata refund).
• Pro up-stamp and Agency re-brand are non-refundable after the first charge, on the customer-mistake exception in EU consumer law — these go into immediate delivery once minted, so they cannot be un-minted.
• Failed charges. Stripe will retry automatically. After 7 days of unpaid balance we suspend the Service. After 30 days we seal the working set back to the customer and the relationship terminates per §7.

Pro and Agency subscriptions auto-renew each billing interval on the same day of the Stripe cycle (Stripe’s default). You can cancel any time from the Stripe customer portal or by writing to sigila@polsia.app — cancellation is effective at the end of the current billing period. We do not refund partial months.

After cancellation, your evidence vault stays readable for 30 days so you can export the entire hash chain. On day 31 we hash the last entry, sign it and hand it back so the chain stays intact, then we delete the working set. A fair copy is requestable by email (see §11).

• For cause — we may suspend or terminate immediately on a material breach of §4 or §5 (acceptable use, payment fraud). The running invoice on a suspected-breach account is final.
• For convenience — either side may terminate on 30 days’ written notice by email to sigila@polsia.app. Outstanding fees stay due.
• Force-majeure. We may terminate immediately without notice if Stripe onboarding, our identity provider, or our timestamping authority goes out of service. In that case we’ll pro-rate any unused pre-paid period and email you a refund link.
• Effect of termination. Outstanding fees remain due. On a material breach by us (terminating the Service for reasons other than §4 / §5 breach by you) you get a pro-rata refund for the unused portion of the paid-for period.

The Service is provided “as is” and without warranty of fitness for a particular purpose. We do not warrant any accessibility outcome, regulatory outcome, audit outcome or judicial outcome, and we do not warrant that the weekly digest, the vault or the timestamps will be uninterrupted or error-free.

Automated tooling covers roughly 30–40% of WCAG 2.1 AA. We do not, and cannot, promise that a Sigila result discharges your duty to test, fix or document under the European Accessibility Act or any equivalent regime.

We do not give legal advice, and these terms are not a contract for a legal opinion. If you need one, talk to a counsel. Nothing in this contract waives your statutory consumer rights under EU law.

To the maximum extent permitted by law, our aggregate liability for any claim arising out of or relating to the Service is capped at the fees you paid us in the 12 months preceding the claim. We are not liable for indirect, incidental or consequential damages, including lost profits, lost business, lost goodwill or lost data.

Nothing in this clause limits liability for fraud, for death or personal injury, or for any liability that cannot be limited as a matter of mandatory law (including any non-excludable guarantee under EU consumer law).

This section is not the privacy policy. The privacy notice lives in the footer on the home page privacy section; the formal processors list is requestable by emailing sigila@polsia.app.

We process only the public URL you point the scanner at and the findings it returns. We do not log into your site. We do not set cookies on it. We do not enrich the data with third-party advertising data. We do not resell it.

These terms are governed by the laws of Finland (the operator’s EU seat). The exclusive forum is the District Court of Helsinki, subject to your mandatory consumer-rights jurisdiction where you reside.

Pre-litigation: email sigila@polsia.app first. We will read it personally and respond inside 30 days. Many disputes resolve on a plain email exchange — please give us the chance first.

• Material changes get a 30-day notice via the email on your Stripe customer record, and we’ll bump the “Last updated” line above.
• Non-material changes (typos, language clarifications, link fixes) get a refreshed “Last updated” line and no email.
• Continued use of the Service after a change takes effect counts as acceptance of the updated terms.

Questions, refund requests and disputes go to sigila@polsia.app. Pauliina reads every message and a reply usually goes out inside a working day. The operator’s EU seat is in Finland — there is no in-app live-chat support, by design.