Legal

This page explains the terms of use for Scoreba's services and how we handle personal data.

This document is being updated.

1. Terms of Service(v1.0 (2026-08-21))

1. Parties and Definitions

This agreement is between [Company Legal Name] ([Address], [Registration No.], "Scoreba") and the individual or entity purchasing the service ("Customer").

Service: the evaluation of the Customer's designated website against web accessibility standards (WCAG) using automated and semi-automated tools, the reporting of findings, and monitoring for the agreed period.

Accessibility Audit: a one-time, comprehensive evaluation and report.

Monitoring: a monthly change check performed for twelve months after the Accessibility Audit, starting from the purchase date.

Accessibility Score: a numeric indicator calculated from findings detected through automated and semi-automated methods.

2. Scope of the Service

Scoreba evaluates the publicly accessible pages of the website designated by the Customer. The evaluation consists of automated test tools, Scoreba's own checks, AI-assisted evaluation, and criteria based on the Customer's own declarations.

The Report contains the findings identified, their relation to the relevant standard's provisions, and suggested remediation approaches.

3. Scope Limitations

The Customer acknowledges and accepts the following limitations:

  • The evaluation is limited to the number of pages determined by the purchased package. On sites exceeding this limit, pages are grouped by template and representative sampling is applied. Not every page of the site is individually evaluated.
  • Scoreba cannot access areas that require authentication. Membership areas, order tracking, admin panels, reseller portals, and other areas behind a login are outside the scope and the score.
  • Some accessibility criteria cannot be measured by automated tools. These criteria are put to the Customer as questions, and the Customer's declaration is relied upon. Scoreba does not verify these declarations; the Customer is responsible for their accuracy. Self-declared criteria are not included in the Accessibility Score.
  • On multilingual sites, the evaluation is performed on the language version specified in the Report. Other language versions are out of scope.
  • The Report reflects the state of the site as of the date it was issued. Changes made to the site afterward are not covered by the Report.
  • The Monitoring service operates on the page set determined at the initial evaluation together with the pages listed in the sitemap. Pages not listed in the sitemap and not reachable via a link may fall outside the scope of Monitoring.

4. Customer's Obligations

  • The Customer represents that it has the authority to act with respect to the site it requests to be evaluated, or has obtained the site owner's permission. The Customer bears full responsibility for any inaccuracy in this representation.
  • Where necessary, the Customer grants the required permission in its security settings so that Scoreba's scanning infrastructure can access the site. If access cannot be established, the evaluation is not started.
  • The Customer is responsible for answering the questions put to it accurately and completely.
  • Whether and how the findings in the Report are remediated is entirely the Customer's decision. Scoreba does not perform remediation work.

5. Fees and Taxes

Prices are exclusive of applicable sales, use or similar taxes, which are applied and remitted by our payment provider acting as Merchant of Record.

The fee covers the Accessibility Audit and twelve months of Monitoring together. There is no automatic renewal; the Customer is asked whether to continue at the end of the twelve months.

Cancellation and refunds:

  • Cancellation requests made before the Accessibility Audit begins are refunded in full.
  • For cancellations made after the Accessibility Audit has begun but before the Report is delivered, the Accessibility Audit fee is not refunded; the unused Monitoring months are refunded on a pro-rata basis.
  • Once the Report has been delivered, the Accessibility Audit fee is not refunded. The Monitoring service may be cancelled; unused months are refunded on a pro-rata basis.
  • Refund requests are made via [contact address] and are resolved within [X] business days.

Scoreba's total liability under this clause is unaffected by the above where Scoreba is unable to provide the Service for technical reasons — in that case the fee is refunded in full.

6. Disclaimer and Limitation of Liability

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE". SCOREBA DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY AND NON-INFRINGEMENT.

Scoreba does not warrant that the Service will result in compliance with the Americans with Disabilities Act, Section 508 of the Rehabilitation Act, or any state or local accessibility requirement, and does not warrant that the Customer will not be the subject of a demand letter, complaint or lawsuit.

The Accessibility Score is a progress indicator based on the findings detected. A given score does not mean the site complies with any regulation.

IN NO EVENT SHALL SCOREBA'S AGGREGATE LIABILITY EXCEED THE AMOUNT PAID BY THE CUSTOMER FOR THE SERVICE GIVING RISE TO THE CLAIM. SCOREBA SHALL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR FOR LOST PROFITS OR BUSINESS.

The limitations in this clause do not apply in the case of Scoreba's willful misconduct or gross negligence.

7. Intellectual Property and Usage Restrictions

The Report, its appendices, and the evaluation method, criteria mappings and templates used by Scoreba belong to Scoreba. The Customer may use the Report for its own internal purposes and to meet its legal obligations, and may share it with third parties.

The Customer may not reverse-engineer the Service, use its outputs to develop a competing service, gain bulk access to the system through automated means, or share its assigned access key with third parties.

8. Use on Behalf of Third Parties

Where the Customer purchases the Service on behalf of its own customer (e.g. an agency or consultant), the Customer alone is a party to this agreement. No contractual relationship arises between Scoreba and the end user.

Where the Report is presented to an end user, Scoreba assumes no liability whatsoever toward the end user. It is the Customer's obligation to inform the end user of the scope limitations and liability terms.

The Customer agrees to indemnify Scoreba against claims brought by the end user or third parties against Scoreba.

9. Term, Suspension and Termination

The agreement begins upon purchase and ends when the Monitoring period expires. Scoreba may suspend the Service or terminate the agreement in the event of use contrary to these terms.

10. Governing Law and Dispute Resolution

Governed by the laws of [Türkiye], without regard to conflict-of-law principles.

2. Privacy Policy(v1.0 (2026-08-21))

1. Our Roles

Scoreba acts in two distinct roles:

As a business for account information, order records, contact requests, and prospect data collected for marketing purposes.

As a service provider processing data on the Customer's instruction for content obtained from the website scanned at the Customer's direction. The Customer is the business responsible for that content.

2. Data We Process

2.1 Account and order data: name or company name, email address, country, contact language preference, domain information, order and payment records (excluding card details), and the Customer's own declared answers.

2.2 Data obtained during scanning: the content of publicly accessible pages, page addresses, code snippets relating to findings, and summary values (hashes) used to detect content changes.

Even where the scanned pages are publicly accessible, elements they contain — such as names, photographs, or contact details — may constitute personal data. This data is processed on the Customer's instruction.

2.3 Data we do not process: Card and payment details never reach Scoreba at any stage; they are processed by the payment infrastructure. Areas requiring authentication are not accessed.

2.4 Data we do not retain: Screenshots taken during scanning are not retained permanently.

3. Purposes and Legal Bases

Data is processed to deliver the Service, generate reports and Monitoring, meet accounting/legal obligations, maintain dispute evidence, provide support, and — based on legitimate business interest — for business-to-business outreach.

4. Sub-processors

The following service providers are used to deliver the Service:

ProviderPurposeRegion
Hetzner Online GmbHApplication server hostingGermany (Nuremberg)
Cloudflare, Inc.Content delivery network (CDN) / reverse proxy, DDoS protection, market detectionGlobal network (US-headquartered)
Cloudflare, Inc. (R2)Encrypted backup storageGlobal (US-headquartered)
Anthropic, PBCAI-assisted accessibility finding evaluationUnited States
Paddle.com Market LtdPayment collection and billing — Merchant of RecordUnited Kingdom
ResendTransactional email delivery (verification, reports, notifications)United States

5. International Transfers

Some service providers are located outside the Customer's country. Data sent to the AI evaluation provider is deleted within 30 days in accordance with that provider's policy and is not used to train models.

Content sent to the AI is limited to what is necessary for evaluation: excerpts of page text, images on the page, and structural information. Account information, payment information and identity information are not sent.

6. Retention Periods

At the end of the applicable period, data is deleted or anonymized.

Exception: send-suppression (opt-out) records are outside the general rule above — they are kept indefinitely so the same address/domain is not contacted again by mistake; this is necessary to honor the opt-out request itself.

Data typePeriodStart of period
Account informationWhile the account is active, plus 12 months after account closureDate the account is closed
Order and payment records10 years (legal record-keeping obligation)Order date
Audit reports and scan data3 yearsReport date
Content hashes (monitoring)Monitoring period + 3 monthsEnd of monitoring
ScreenshotsNot stored persistently
BackupsLocal: 14 days. Remote (R2): 30 daysBackup creation date
Content sent to the AI provider30 days — not used to train modelsDate sent
Contact form records24 monthsSubmission date
Cold email prospect data24 monthsLast contact/record date
Send-suppression (opt-out) recordsIndefinite — cannot be deleted in order to honor the request

7. Your Rights

Depending on your state of residence, you may have rights under applicable state privacy laws (e.g. the CCPA/CPRA): the right to know, right to delete, right to correct, right to opt out of sale/sharing (not applicable, as we do not sell or share personal information), and the right to non-discrimination.

We do not sell or share personal information as those terms are defined under the CCPA. We do not use personal information for cross-context behavioural advertising.

Requests can be sent to [contact address] and are answered within 45 days.

Commercial email: marketing emails comply with the CAN-SPAM Act. Every message identifies the sender, includes a valid physical postal address, and a functioning opt-out mechanism. Opt-out requests are processed immediately.

Requests relating to the content of a scanned site must be directed to the Customer who owns that site; with respect to that data, Scoreba acts as a service provider processing data on the Customer's instruction, not as the responsible business.

8. Security

Data is transmitted over encrypted connections, backups are stored encrypted, access to the admin panel is protected by multi-factor authentication, and administrative actions are logged. In the event of a data breach, notification is made to affected individuals and the competent authority within the period required by applicable law.

3. On Competitor Comparisons

Some providers claim that adding a single code snippet achieves full compliance. Such a claim is inconsistent with how these standards are structured; a significant portion of accessibility criteria can only be determined through human evaluation.

Questions: [email protected]