Terms of Service

1. Who we are and key meanings

WebWatch is operated by JR Digital, an Exeter-based web agency. You can contact us at info@jj-digital.uk. In these terms, "WebWatch", "we", "us" and "our" mean JR Digital.

"Service" means the WebWatch website at web-watch.uk, its account area, monitoring, alerts, status pages, security scans, API and connected mobile app. "You" means the individual using the Service and, where applicable, the organisation for which that individual acts. A "target" is a URL, origin or site submitted to the Service.

2. Eligibility and authority to agree

• You must be legally capable of agreeing to these terms. If you are under 18, you may use free, non-security features only with a parent, guardian or responsible adult's permission and supervision.
• You must be at least 18 and legally capable of contracting to buy Premium or confirm authority for a security scan.
• If you use WebWatch for an organisation, you confirm that you have authority to bind it. The organisation is responsible for activity carried out through its account.

3. What WebWatch provides

WebWatch provides automated, point-in-time and scheduled checks of publicly reachable websites. Depending on the feature and plan, the Service may report availability, response timing, DNS and TCP timing, redirects, SSL certificates, selected browser security headers, page metadata, SEO indicators, incidents and bounded security findings. Registered users can save sites, configure alerts and webhooks, create public status pages, use supported app and API functions, and retain limited history.

Features, limits and availability can differ by plan, device and deployment. Any preview, beta, early-access or disabled feature may be incomplete, changed or withdrawn.

4. Accounts and credentials

• You must provide accurate current information and keep your email address up to date.
• You are responsible for your password, API tokens, webhook signing secrets, security verification tokens, devices and all activity authorised through them.
• You must not share an individual account or allow another person to use your credentials. An organisation must assign access only to authorised people.
• You must tell us promptly if you suspect compromise or unauthorised activity.
• We may apply rate limits, require re-authentication, revoke tokens or take other proportionate steps to protect users and the Service.

5. Ordinary checks and saved-site monitoring

You may submit a public HTTPS URL for an on-demand check, comparison, SSL check or SEO audit. You may save a site for recurring monitoring only where you have a lawful basis and any permission needed to cause repeated automated requests to it.

You must not submit a URL or monitoring path if doing so breaches law, contract, access controls, a site's published restrictions or another person's rights. You are responsible for the targets, paths, keywords, labels and settings you provide, and for responding to complaints from a target-site operator.

Ordinary checks can follow a limited number of redirects and inspect a bounded public response. WebWatch blocks known private, loopback, link-local and reserved network targets, but these technical controls do not replace your legal responsibility.

6. Security scans and your warranty of authority

When security scanning is enabled, it is available only to Premium accounts and is deliberately narrower than penetration testing. It is available only for an exact HTTPS origin saved to your account and only after you give the versioned authority confirmation shown by the Service.

• An overview makes one direct read-only request to the exact origin, without following redirects, and reviews a capped public response.
• A verified scan first requires an exact live token at /.well-known/webwatch-verify.txt, then checks only the fixed, bounded paths and methods defined by WebWatch.
• Scans do not submit forms, attempt logins, guess passwords, send exploit payloads, scan ports or subdomains, follow redirected hosts, or provide unrestricted crawling.

Each time you confirm authority, publish a verification token or request a scan, you warrant that you own the exact target origin or have the owner's express authority to conduct the full scan mode requested. You must be able to produce evidence of that authority if reasonably asked. A saved-site record or successful verification file is a technical control, not proof of legal authority.

You must revoke authority promptly if it ends. Changing a saved origin revokes existing scan authority. WebWatch may rotate tokens, cancel queued work, refuse a target, limit scan frequency, retain evidence of your confirmation, or disclose relevant records where lawfully required to investigate suspected unauthorised scanning.

You are responsible for reasonably foreseeable claims, losses and costs caused by a false authority confirmation or an unlawful scan request. If you use the Service in business, the indemnity in section 17 also applies.

7. Webhooks, API, alerts and public status pages

Webhooks. At your instruction, WebWatch sends JSON event payloads to a URL you control. Deliveries are HMAC-SHA256 signed, but signing proves authenticity and does not encrypt the payload. You must secure the endpoint and signing secret, use the payload lawfully, authorise every recipient and avoid putting credentials or unnecessary personal information in the URL. WebWatch may disable an endpoint after repeated failures.

API and app. You must keep bearer tokens and registered devices secure, obey published limits and use only documented interfaces. We may revoke a compromised, abused or obsolete token.

Alerts. Email, push, digest, escalation and webhook delivery depend on external networks and providers. You are responsible for recipient accuracy, local notification settings, spam filtering, endpoint availability and an independent response process.

Public status pages. Anything you deliberately publish on a status page, badge or public status API can be viewed, copied, cached and indexed by others. You must have the right to publish the title, description, site label and incident information. Disabling or deleting a page stops WebWatch serving it but cannot recall third-party copies.

8. Acceptable use

You must not use or help another person use WebWatch to:

• break the law, infringe rights or test a system without adequate authority;
• attack, exploit, overload, disrupt, harass or damage a person, site, service or network;
• bypass access controls, rate limits, scan boundaries, payment controls or technical safeguards;
• probe internal or private networks, cloud metadata, ports, subdomains, credentials or authentication systems;
• upload or transmit malware, secrets, unlawful material or personal information you have no right to use;
• resell, mirror, scrape or systematically extract the Service or its data without written permission;
• misrepresent WebWatch output as a certification, penetration test, legal conclusion or guarantee; or
• interfere with another user's account, public page, alerts or integrations.

We may investigate suspected abuse and preserve or disclose relevant information where lawful. Attempting a prohibited action is itself a breach, whether or not it succeeds.

9. Free and Premium plans

The standard free plan currently supports up to 10 saved sites with automatic checks targeted every 5 minutes and displays advertising on eligible pages. The standard Premium plan currently supports up to 50 saved sites, allows 1-minute or 5-minute check settings, removes WebWatch advertising and may provide earlier access to selected features. Other limits shown in the Service, including status-page and webhook limits, also apply.

Premium is a single payment of £5.99 GBP, subject to any promotion shown at checkout. It is not a subscription and does not automatically renew. Stripe processes checkout. Premium activates only after WebWatch receives confirmation that payment is paid.

"One-time" means there is no recurring Premium charge for the same account. Premium remains attached to that account while it exists and while WebWatch continues to offer the applicable Premium service, subject to these terms. It is not a promise that WebWatch, every feature or any particular capacity will operate forever.

If payment fails, is refunded, reversed, disputed or charged back, Premium access can be withheld or removed and saved-site check intervals can return to the free-plan setting. Contact us if a status change is wrong.

10. Consumer cancellation, refunds and statutory rights

If you buy Premium as a consumer at a distance, you normally have a legal right to cancel within 14 days after the contract is made. To cancel, send a clear statement to info@jj-digital.uk from the account email address. Include enough information to identify the purchase. You do not need to give a reason.

Premium is normally activated promptly after payment. Immediate activation does not remove a mandatory cancellation right unless the legal requirements for losing that right have been met. Where a valid cancellation right is exercised, we will provide the refund required by law, normally to the original payment method and without an added refund fee.

After any statutory cooling-off period, we do not normally refund a one-time payment merely because you stop using the Service or delete the account. We will, however, provide any repair, repeat performance, price reduction, refund or other remedy required by the Consumer Rights Act 2015 or other applicable law. Nothing in these terms excludes those rights.

If you purchase wholly or mainly for business purposes, consumer cancellation rights do not apply. Business purchases are non-refundable except where required by law, where a payment was duplicated or unauthorised, or where we expressly agree otherwise.

11. Monitoring frequency, availability and no SLA

Displayed check intervals are scheduling targets, not guarantees that a check starts or completes at an exact second. Checks, scans and alerts may be late, skipped, rate-limited or unavailable because of maintenance, queueing, deployment, provider failure, target behaviour, network conditions, security controls or events outside our reasonable control.

WebWatch is provided on an "as available" basis. No service-level agreement, guaranteed uptime, response time, recovery time, alert-delivery time or support-response time applies unless JR Digital signs a separate written agreement that expressly says it is an SLA.

We may maintain, secure, update, suspend, limit or withdraw any part of the Service. Where reasonably practicable, we will give registered users advance notice of a material planned withdrawal, but urgent security, legal or operational changes may take effect immediately.

12. Important limits of monitoring and scan results

• A successful check shows what WebWatch observed from one request path and time. It does not prove that every visitor, page, region or function is working.
• A failed check can be caused by transient routing, rate limiting, blocking or WebWatch itself. False positives and false negatives can occur.
• An alert can be missed, delayed, duplicated or delivered after conditions change. Check frequency creates an unavoidable detection window.
• An SSL, SEO or security result is informational. It is not professional advice, a compliance audit, a search-ranking promise, a penetration test, a vulnerability-free certificate or a guarantee of security.
• A bounded security scan cannot find every weakness and does not replace secure development, patching, backups, access control, independent testing or incident response.

Do not use WebWatch as the sole control for emergency, life-safety, medical, financial, critical-infrastructure or other high-risk systems. You remain responsible for your site, independent monitoring, backups, security and decisions made from results.

13. Third-party services and targets

WebWatch depends on services including hosting, email delivery, Stripe, Apple Push Notification service, Google advertising and analytics, and content-delivery providers. Their terms, availability and privacy practices are outside our control. Your target websites and webhook endpoints are also third-party systems from WebWatch's perspective.

We are not responsible for third-party content, changes, security, availability or decisions. A link or integration does not mean JR Digital endorses or controls that third party.

14. Intellectual property and information you provide

JR Digital and its licensors own the Service, software, design, branding and documentation. We give you a limited, personal, non-exclusive, non-transferable and revocable right to use the Service in accordance with these terms. No source code, trade mark or other right is transferred to you.

You keep rights in labels, descriptions and other information you provide. You grant JR Digital a worldwide, non-exclusive, royalty-free licence to host, copy, process, transmit and display that information only as needed to operate, secure and improve the Service, follow your public-page and integration instructions, and comply with law.

If you send feedback or suggestions, we may use them without payment or an obligation to implement them, provided we do not identify you publicly without permission.

15. Suspension, termination and deletion

You may stop using WebWatch and delete your account through Settings. Deletion removes the account and associated records from the live application database as described in the Privacy Policy. It does not recall delivered emails, push messages or webhook payloads, remove third-party caches or automatically erase Stripe's independent transaction records.

We may limit, suspend or terminate access if you breach these terms, create risk, use a target without authority, fail or reverse payment, threaten the Service or another person, or if law requires it. We will use proportionate notice and an opportunity to remedy where appropriate. We may act immediately for serious abuse, security risk, illegality or urgent operational need.

Termination ends your right to use the Service. Terms that by nature should continue, including payment, intellectual property, disclaimers, liability, indemnity, dispute and general provisions, survive. Account deletion does not itself create a refund right.

16. Liability where you are a consumer

Nothing in these terms excludes or limits liability that cannot lawfully be excluded, including liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or your mandatory consumer rights.

If you are a consumer, JR Digital is responsible for loss or damage that is a foreseeable result of our breach of these terms or failure to use reasonable care and skill. We are not responsible for loss that was not foreseeable, was caused by information or instructions you supplied, could reasonably have been avoided by following our instructions, or results from a third party or event outside our reasonable control.

WebWatch is intended primarily for website and business monitoring. If you use it as a consumer, we are not liable under consumer law for business losses, including lost profit, revenue, contracts, opportunities, goodwill or business interruption.

17. Liability and indemnity where you use WebWatch for business

If you use WebWatch wholly or mainly for trade, business, craft or professional purposes, this section applies. Subject to liabilities that cannot be limited by law:

• JR Digital is not liable for indirect or consequential loss, or loss of profit, revenue, savings, business, contracts, opportunity, goodwill, reputation or data.
• JR Digital is not liable for target-site failure, missed or delayed checks or alerts, false results, unauthorised use of your credentials, webhook-recipient acts, or a decision made in reliance on a result, except to the extent directly caused by our breach and not otherwise excluded lawfully.
• JR Digital's total aggregate liability arising out of the Service in any 12-month period is limited to the greater of £100 and the amount you paid JR Digital for WebWatch in that period.

You will indemnify JR Digital against third-party claims, damages, penalties and reasonable legal costs arising from your false warranty of scan authority, unlawful target or webhook instruction, infringement by information you provide, or deliberate breach of section 8. This indemnity applies only to the extent caused by your act or omission. We must notify you promptly, allow you reasonable control of the defence and settlement, and provide reasonable cooperation at your cost. You may not settle a claim in a way that admits fault by or imposes an obligation on JR Digital without our written consent.

18. Changes to the Service or these terms

We may update these terms for legal, security, operational or product reasons. We will post the revised terms and update the date above. For a material change affecting registered users, we will also use a proportionate notice, such as email or an account notice, before it takes effect where reasonably practicable.

Changes apply prospectively and do not remove rights or liabilities that already arose. If you do not agree to revised terms, you must stop using the Service and may delete your account. Continued use after the effective date constitutes acceptance only to the extent permitted by law.

19. Governing law, courts and complaints

Please raise a complaint first at info@jj-digital.uk so we can try to resolve it.

These terms and any non-contractual dispute are governed by the law of England and Wales. If you are a consumer, this does not remove mandatory rights under the law of the part of the United Kingdom or other country where you live, and you may bring proceedings in any court available to you under mandatory law. If you use WebWatch for business, the courts of England and Wales have exclusive jurisdiction.

20. General terms

• If a court finds part of these terms unlawful or unenforceable, the rest continues to apply.
• A delay in enforcing a right is not a waiver of it.
• You may not assign or transfer your agreement without our written consent. We may transfer it as part of a sale, restructuring or transfer of the Service, provided your rights are not reduced.
• These terms, the Privacy Policy and any separate written terms we expressly agree form the entire agreement about the Service. Nothing excludes liability for fraud.
• Except where these terms expressly say otherwise, no person other than you and JR Digital has a right to enforce them under the Contracts (Rights of Third Parties) Act 1999.

21. Contact

JR Digital, Exeter, England. Email: info@jj-digital.uk. Website: jj-digital.uk.