Terms of Service

GrantLock (“we,” “us,” “the service”). Reach us at hello@grantlock.ai.

The service has three tiers, each with different terms:

• OSS scanner — source code published under the Apache License 2.0 in the public GrantLock repository. The license, not these terms, governs your use of the source-built scanner. These terms still apply to the website itself.
• Free Binary — a signed pre-built binary distributed via this website for personal use, individual developer use, and use inside the organization that downloaded it. Redistribution, resale, or use as a paid managed service to third parties requires written permission.
• Cloud product — a hosted dashboard and premium ruleset accessed via app.grantlock.ai under a separate subscription. Cloud users are also bound by the order form or online subscription terms they accept at signup.

You agree not to use any tier of GrantLock to scan systems you don't have authorization to assess; to circumvent the scanner's telemetry settings on someone else's machine; to redistribute the Free Binary outside the scope above; or to attempt to extract premium ruleset content beyond what your subscription grants.

The website (download, contact, waitlist forms) is rate-limited and protected by anti-abuse measures. Automated scraping or circumvention of those measures is not authorized use.

Cloud product accounts are issued through our identity provider (Clerk). You are responsible for keeping your sign-in credentials confidential and for actions taken under your account. Notify us immediately at hello@grantlock.ai if you suspect unauthorized access.

What we collect, why, and how to delete it is on /privacy. By using the service you consent to the processing described there.

OSS and Free Binary are free of charge. The Cloud product is paid; pricing, billing cadence, and refund policy are presented at checkout and in your subscription terms. Taxes are added where required by law.

We aim for high availability of the website, the binary download path, and the Cloud product, but we do not warrant uninterrupted service. Planned maintenance is announced where reasonable. The Free Binary, once installed, runs locally and does not require our servers to function.

GrantLock is provided as is, without warranty of any kind, express or implied. The scanner may produce false negatives (real risks not detected) and false positives (flagged conditions not actually exploitable). To the fullest extent permitted by law:

• We make no warranty of merchantability, fitness for a particular purpose, or non-infringement.
• Findings are informational and complement — do not replace — a professional security assessment.
• Compliance reports generated by the scanner are informational artifacts, not certifications, and do not constitute attestation of compliance.

To the maximum extent permitted by applicable law, GrantLock and its operators are not liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of profits, data, or use, arising out of or related to your use of the service. We make no warranties beyond those expressly stated; the service is provided “as is.” Where applicable law requires liability allocation, our aggregate liability for any matter is limited to the amounts you paid us in the twelve months preceding the claim, or US$0 if no payments have been made. The Apache License 2.0 governing the OSS source code carries its own warranty and liability terms; where they conflict with this section for source-built use, the license controls.

You will defend, indemnify, and hold us harmless from any claim arising out of your use of the service in violation of these terms, applicable law, or the rights of a third party. We will notify you promptly of any covered claim and cooperate in your defense.

You may stop using the service at any time. We may suspend or terminate access for material breach of these terms; for paid Cloud subscriptions, we will refund the unused portion of any prepaid period unless the termination is for abuse or non-payment.

We may update these terms; the current version is always the one served at grantlock.ai/terms. Material changes are announced by email to active Cloud accounts and active marketing opt-ins. Your continued use after the effective date constitutes acceptance.

These terms are governed by the laws of United States, without regard to conflict-of-laws rules. The parties consent to the exclusive jurisdiction of state and federal courts located in United States for any dispute that cannot be resolved by mutual agreement.

Pending incorporation, the specific state for jurisdiction is to be confirmed on the GrantLock, Inc. founding documents.

If any provision of these terms is held unenforceable, the rest remain in effect. We may assign these terms in connection with a merger, acquisition, or sale of substantially all our assets; you may not assign without our prior written consent. These terms are the entire agreement between us regarding the service, and supersede prior discussions.