Agreement to Terms
These Terms of Service ("Terms") are an agreement between you and the operator of the ValiqAI service at valiqai.com ("ValiqAI", "we", "us", "our"). They govern your access to and use of the ValiqAI website, dashboard, APIs, and automated scanning platform (the "Service").
By creating an account, joining the waitlist, buying credits, starting a scan, or otherwise using ValiqAI, you agree to these Terms. If you do not agree, do not use the Service.
If you use the Service on behalf of an organization, you represent that you have authority to bind that organization, and "you" includes that organization.
We may update these Terms from time to time. If we make material changes, we will notify you by email to your account address or by posting a notice in the application. The "Last updated" date at the top of this page will change. Your continued use of the Service after the updated Terms are posted means you accept them. If you do not agree, you must stop using the Service and may request account deletion.
Related policies
These Terms incorporate the following policies, which are part of your agreement with us:
Data Processing Agreement (to the extent it applies to personal data you ask us to process)
Description of Service
ValiqAI is an automated quality and security testing platform for web applications. When you submit a URL you are authorized to test, the Service may:
Open a real browser, discover signup and onboarding flows, and attempt to create a test account on the target application
Use a disposable email inbox to receive verification messages (such as one-time codes or magic links) so the agent can complete authentication
Navigate the authenticated application, exercise features, and look for functional bugs, accessibility issues, and broken flows
When you enable it, run security and AI-safety probes (for example prompt injection, jailbreak, XSS, and PII-exposure checks) against systems you authorize
Capture evidence: screenshots, page content, console logs, network traces, and session recordings
Generate reports with findings. Findings are informational. They are not a certification, pentest letter, or proof of compliance with any law or standard
Support organizations, team members, scheduled scans, API access, and optional integrations (such as Slack, Jira, or GitHub) as we make those features available
Features, limits, and availability may change. Some capabilities are waitlist-gated or offered as pre-release. We do not promise any particular uptime, scan success rate, or that every issue on a target will be found.
Eligibility and accounts
You must be at least 18 years old, and able to form a binding contract, to use the Service. The Service is a professional testing tool, not a consumer product for children. We do not knowingly provide accounts to anyone under 18.
When you register or are provisioned (including via Google, GitHub, or SSO), you agree to:
Provide accurate, current, and complete information and keep it updated
Keep passwords, API keys, SSO credentials, and session tokens confidential
Notify us immediately of unauthorized access to your account
Not share login credentials or sell access to the Service
You are responsible for all activity under your account and organization, including scans started by team members. We are not liable for loss arising from unauthorized use of credentials you failed to protect.
Waitlist and early access
Access to the Service, or to purchases, may be limited to a waitlist or invite. Joining the waitlist does not guarantee an account, a scan slot, or any credits. We may approve, delay, or refuse access at our discretion.
While the Service is in early access, features may change, break, or be withdrawn without a service-level agreement. Prepaid credits, when purchases are enabled, are still governed by the credits section below.
Authorization to scan
You may only use ValiqAI against websites and applications you own, operate, or have explicit written permission to test. Before each scan you must confirm that authorization. Domain verification (such as a DNS TXT record) is a technical control we use to reduce abuse. It is not independent legal proof that you have the right to test a target, and it does not replace your obligation to have that right.
You represent and warrant that:
You have all rights, consents, and authority needed to instruct ValiqAI to access, crawl, authenticate to, and test the target, including under the Computer Fraud and Abuse Act and any similar computer-misuse, unauthorized-access, or anti-hacking laws that apply
The scan will not violate the target's own terms of service, acceptable use rules, or robots policies, except to the extent the target's owner (you or your client) has authorized the test
If the target uses third-party services (for example Auth0, Clerk, Google, GitHub, Stripe, or similar), you are responsible for whether creating test accounts or exercising those services is allowed under those providers' terms
You will not use ValiqAI to gather competitive intelligence, to test systems you do not own without written permission, or to attack, exploit, or extort anyone
You are the party accessing the target. ValiqAI is software acting on your documented instructions. We do not independently investigate whether you own a URL. If a target owner, regulator, or third party complains, we may pause or terminate the scan and your account and share information as required by law.
What the agent may do
By starting a scan, you instruct and authorize ValiqAI to interact with the target as a user of that application, including to:
Create accounts using synthetic identities and a disposable mailbox we provision for the scan
Fill forms, click buttons, accept the target's in-product terms or checkboxes where needed to complete a test signup, and complete onboarding
Receive and use verification emails, one-time codes, and magic links sent to the test inbox
Capture and store screenshots, DOM snapshots, network traffic, console output, and session replay for the report
If you enable AI security or similar options, send adversarial or unexpected inputs designed to test how the target behaves
Scans can have side effects on production or staging systems. Those may include leftover test accounts, emails or notifications sent by the target, rate-limit or bot-detection triggers, writes or deletes of data, charges if the target bills on signup, or load on the target. You are responsible for those effects, for choosing staging versus production, and for cleaning up test accounts and data. Enable adversarial testing only on systems you are authorized to security-test.
We may throttle, queue, refuse, or abort scans (for example for budget caps, abuse, infrastructure health, or suspected unauthorized targets). Unused reserved credits are handled as described in Credits and payments.
Acceptable Use
You agree to use ValiqAI only for lawful purposes, only on systems you own or are authorized to test, and in accordance with these Terms and our Acceptable Use Policy. The Acceptable Use Policy is the detailed rulebook for scanning conduct; if there is any conflict on that subject, it controls. Without limiting that policy, you agree not to:
Unauthorized scanning
Scan websites you do not own or have documented permission to scan
Use ValiqAI to perform security testing without authorization from the system owner
Probe third-party services embedded in a target (such as OAuth, payments, or hosted chat) unless that vendor has authorized the test
Scan websites in a way that violates their terms of service, except as authorized by the owner for a test you are running
Use ValiqAI to gather competitive intelligence on websites you do not own
Harmful activities
Use the Service to distribute malware, viruses, or other harmful code
Attempt to gain unauthorized access to our systems or other users' accounts
Interfere with or disrupt the Service or servers, or circumvent security measures or rate limits we set on the Service
Use ValiqAI as a denial-of-service or load-testing tool, or use scan results to attack, exploit, threaten, or extort a target or any person
Illegal content and abuse
Scan websites containing illegal content, or use ValiqAI for any purpose that violates applicable law
Infringe intellectual property rights of others
Create multiple accounts to circumvent usage limits, or resell the Service without our written permission
Reverse engineer, decompile, or disassemble the Service except as allowed by law
We may suspend or terminate your account if you violate these Terms or the Acceptable Use Policy.
Credits and payments
ValiqAI is billed with prepaid credits, not a monthly scan subscription. Current pack sizes and typical scan costs are shown on our pricing page. We may change prices and pack contents going forward; credits you already hold keep their credit balance.
Free End-to-End scan
We may grant a limited free End-to-End scan (or an equivalent credit grant) as configured in the product. The free grant is provided as-is, may be modified or discontinued, and is not unused cash. Additional scan types, including AI security testing, generally require purchased credits.
Buying credits
When purchases are enabled, you may buy one-time credit packs through Stripe. By buying credits you agree to provide valid payment information and authorize us (and Stripe) to charge the amount shown at checkout, including applicable taxes. Purchases may be paused; if they are, the product will say so and may send you to the waitlist instead of checkout.
How credits are used
Before a billable scan starts, we reserve (hold) credits up to the amount quoted for that scan type. When the scan finishes, we settle the credits actually used and return unused reserved credits to the workspace. Credits are not a stored-value account or gift card, are not transferable except as we allow inside your organization, and have no cash value except through a refund we approve under the Refund Policy.
Unused credits remain in the organization and do not expire while the workspace exists. They are not transferable to another workspace. Deleting the organization or account forfeits the balance unless you first obtain a refund under the Refund Policy.
Auto-refill
If you turn on auto-refill and save a payment method, you authorize Stripe to charge that method for a catalog pack when a scan would otherwise lack enough credits, up to the cap you set in billing settings. Auto-refill is not a subscription plan. You can turn it off at any time. A declined card does not retry as a subscription; the scan does not start until you update payment details or add credits.
Taxes
Prices are listed in US dollars. Taxes (such as VAT or sales tax) may be added at checkout depending on your location. Currency-conversion fees charged by your bank are your responsibility.
Refunds
Please see our Refund Policy for details. Unused prepaid credits may be refundable to the original payment method for a limited time after the charge if they have not been used. Settled credits for completed scans are not refundable as cash. This is not a monthly subscription and is not prorated as one.
Organizations and team members
Scans, credits, domains, and reports typically belong to an organization. Members with appropriate roles may see scan history, results, evidence, and billing status for that organization. Administrators are responsible for who they invite and for their use of the Service.
If you are provisioned through SSO, your organization's administrator may control your access. We may auto-approve waitlist gates for SSO users as described in product behavior, because those users are already gated by their IdP.
API access
If we provide API keys, they are credentials. You must keep them secret, rotate them if exposed, and use them only as documented. We may rate-limit, suspend, or revoke API access to protect the Service or enforce these Terms. You may not wrap, resell, or provide the API as a competing service without our written permission. Automated access to the Service is allowed only through APIs we publish, not by scraping the dashboard.
AI processing
The Service uses third-party AI providers (currently including Anthropic and OpenAI, as listed on our Subprocessors page) to reason about the public scan data you submit. Those providers only receive that public data — such as the target URL and other public content from that target needed to return a response. They do not receive your private ValiqAI account data (passwords, payment details, API keys, billing records, or similar).
Under those providers' API terms as we understand them, they do not use API customer data to train their models. We do not sell your scan results. We may use anonymized and aggregated data to improve the Service.
AI-generated findings can be incomplete, incorrect, or miss issues. They are not legal, security, accessibility, or compliance advice, and they are not a substitute for a human review, a professional pentest, or an audit (including SOC 2, PCI, HIPAA, or WCAG certification). You must independently verify anything you act on.
Intellectual Property
Our Content
The Service, including its design, features, functionality, code, documentation, prompts, and content (excluding your data), is owned by ValiqAI and protected by intellectual property laws. You may not copy, modify, distribute, sell, or lease any part of the Service without our written permission.
Your Content and license to operate scans
You retain ownership of the URLs you submit, the applications you scan, and content you upload. You grant us a limited, worldwide license to access, host, store, process, transmit, and display that content, and to interact with the target as described in these Terms, solely to provide and protect the Service.
Scan Results
Scan results, findings, and reports generated for you belong to you. You may use, share, and export them as you see fit, subject to confidentiality obligations you owe others (for example, if a report contains personal data from your own users). We will not share your specific scan results with third parties except as needed to run the Service (subprocessors), as you configure (integrations), with your consent, or as required by law. AI subprocessors receive public scan data such as the URL you submit, not your private account data.
Feedback
If you provide feedback, suggestions, or ideas about the Service, you grant us the right to use that feedback without restriction or compensation to you.
Publicity
We will not use your name or logo in marketing without your permission.
Confidentiality
Scan reports and evidence may contain sensitive information about your application, including security findings. We will treat that customer scan data as confidential and use it only to provide the Service, to protect the Service, or as these Terms allow. You agree not to use the Service to obtain or disclose another customer's data.
This does not apply to information that is public, already known to us without duty of confidence, independently developed, or that we must disclose by law (in which case we will try to notify you if legally permitted).
Third-party services
ValiqAI uses subprocessors and may offer integrations (Slack, Jira, GitHub, Stripe, and others). Your use of those services is governed by their terms. We are not responsible for their content, privacy practices, or operations. When you connect an integration, you authorize us to access and use information from that service as needed for the features you enable. You can disconnect integrations from your settings.
Separately, the target you scan may itself load third-party widgets, auth providers, payment forms, and analytics. Interacting with those systems is part of testing the target. You are responsible for that interaction. See Authorization to scan.
Disclaimer of Warranties
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE. WE DISCLAIM ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO:
Implied warranties of merchantability, fitness for a particular purpose, and non-infringement
Warranties that the Service will be uninterrupted, error-free, or secure
Warranties regarding the accuracy, completeness, or reliability of scan results
Warranties that the Service will meet your specific requirements, or that a scan will succeed in signing up, bypassing bot detection, or covering every feature
ValiqAI is a tool to help you find issues. We cannot guarantee that scans will catch every bug, vulnerability, or accessibility problem. You remain responsible for the quality, security, and legality of your own applications and of the tests you run.
Scan results are provided for informational purposes only. They are not a guarantee, certification, or professional assurance that your application is secure, bug-free, accessible, or compliant with any law, standard, or regulation. You should independently verify findings and should not rely on ValiqAI as your sole means of assessing the security or quality of your applications.
Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, VALIQAI AND ITS OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS SHALL NOT BE LIABLE FOR:
Any indirect, incidental, special, consequential, or punitive damages
Loss of profits, revenue, data, or business opportunities
Damages arising from bugs or issues that our scans failed to detect, or from your reliance on scan results
Damages to a scanned system, including leftover accounts, emails sent, data changed or deleted, downtime, rate-limiting, bot-blocking, or third-party charges triggered by a scan
Claims by the owner of a scanned site, or by a third-party service used on that site, arising from a scan you instructed
Damages resulting from unauthorized access to your account
IN NO EVENT SHALL OUR TOTAL LIABILITY EXCEED THE AMOUNT YOU PAID US FOR CREDITS IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR $100, WHICHEVER IS GREATER.
Some jurisdictions do not allow the exclusion of certain warranties or limitation of liability, so some of the above may not apply to you.
Indemnification
You agree to indemnify, defend, and hold harmless ValiqAI and its officers, directors, employees, and agents from any claims, damages, losses, liabilities, and expenses (including legal fees) arising from:
Your use of the Service, including scans you start
Your violation of these Terms or the Acceptable Use Policy
Your violation of any rights of another party, including a target-site owner or a third-party auth or payments provider
Scanning of websites without proper authorization, or in violation of computer-misuse or similar laws
Personal data or other content that appears in scan evidence because it was present on the systems you asked us to test
Account termination
We may suspend or terminate your account at any time if:
You violate these Terms or our Acceptable Use Policy
We are required to do so by law
Your account has been inactive for an extended period
We discontinue the Service (with reasonable notice where practicable)
You can delete your account by contacting us or, where the product allows it, from account settings. Upon termination, your right to use the Service ends immediately. Unused credits are forfeited except where law requires otherwise. We may delete your data according to our Privacy Policy and, where it applies, the DPA. You should export reports you need before you delete the account.
Export controls and sanctions
You may not use the Service if you are located in, or are a resident or national of, a country or region subject to comprehensive U.S. sanctions, or if you are on a U.S. or other applicable denied-party list. You may not use the Service to export or re-export encryption or security-testing capabilities in violation of export-control laws. You represent that you are not barred from using the Service under those laws.
Copyright complaints
The Service may store screenshots and recordings of pages you ask us to scan. If you believe material stored in the Service infringes your copyright, email abhi@valiqai.com with the information reasonably required to identify the work, the material, your contact details, and a statement of good-faith belief and accuracy. We will respond as required by applicable law. We may remove or disable access to the material and, in appropriate cases, terminate repeat infringers.
Governing Law and Disputes
These Terms are governed by the laws of the State of Delaware, United States, without regard to conflict of law principles, except that the Federal Arbitration Act governs interpretation and enforcement of the arbitration agreement.
Before filing a claim, you agree to email abhi@valiqai.com and try to resolve the dispute informally for 30 days. If we cannot resolve it, any dispute arising from these Terms or the Service will be resolved by binding individual arbitration administered by the American Arbitration Association under its applicable rules. The arbitration may be conducted remotely. Either party may instead bring an individual action in small claims court for disputes that qualify.
Either party may seek injunctive or other equitable relief in court for intellectual property or unauthorized-access claims. You agree to resolve disputes on an individual basis and waive any right to participate in a class action, class-wide arbitration, or representative proceeding, to the extent permitted by law.
You may opt out of arbitration within 30 days of first accepting these Terms by emailing abhi@valiqai.com with the subject line "Arbitration opt-out" and your account email. If you opt out, or if a court finds the arbitration agreement unenforceable, exclusive venue for disputes is the state or federal courts located in Delaware, and you consent to that jurisdiction, except that you may still use small claims court in a county where you reside if the claim qualifies.
If you are a consumer in a jurisdiction that does not allow these dispute terms to apply in full, they apply to the maximum extent permitted, and nothing here limits non-waivable rights.
General Provisions
Entire Agreement: These Terms, together with the policies listed in Related policies, constitute the entire agreement between you and ValiqAI and supersede prior agreements on this subject.
Severability: If any provision of these Terms is found invalid or unenforceable, the remaining provisions will continue in effect.
Waiver: Our failure to enforce any right or provision of these Terms does not constitute a waiver of that right or provision.
Assignment: You may not assign or transfer your rights under these Terms without our consent. We may assign our rights to an affiliate, successor, or acquirer.
Force Majeure: We are not liable for delays or failures caused by events beyond our reasonable control, including natural disasters, wars, strikes, internet outages, or cloud-provider failures.
Notices: We may notify you by email to the address on your account, or by posting in the Service. Notices to us must be sent to abhi@valiqai.com. You consent to receive agreements and notices electronically.
Survival: Provisions that by their nature should survive termination will survive, including ownership, scan authorization and indemnification, disclaimers, limits of liability, confidentiality, and dispute terms.
Contact Us
If you have questions about these Terms, contact us at abhi@valiqai.com.