What does Canary check?

Your homepage, sign-up and login pages and their forms, and that your checkout link or script is reachable. Checks are read-only: no real accounts or payments are created.

Does it work with apps built in Lovable, Bolt, Cursor, Replit or Claude?

Yes. Canary checks the live app at its public URL, so it works no matter which tool built it.

How often are apps checked?

Free checks one app once a day. Starter checks one app every hour. Pro checks up to 5 apps every hour.

Does Canary create accounts or make payments?

No. Checks are read-only: Canary confirms pages and forms load and that checkout is reachable. It never submits real sign-ups, logins or payments, and needs no passwords.

When do I get alerted?

Right away if the first check of your app fails. After that, after 2 failed checks in a row, and once more when it recovers.

A screenshot, the exact error, a plain-English explanation and a fix prompt you can paste into your AI builder.

Is the security scan safe?

Yes. It only reads what your site already shows to every visitor, such as exposed keys, open files and missing headers. It never attacks your app.

Do I need to install anything or give you access?

No. Paste your public URL. No code snippet, no repo access, no passwords. Canary looks at your live app the way a new visitor does.

What if Canary gets it wrong?

Alerts only fire after a failure is confirmed, and every alert shows the screenshot and the exact error, so you can judge it in seconds. Reply to any alert and a human reads it.

We store your email, your app URL and check results. We never store passwords or your users' data. You can delete everything from your dashboard in one click.

Can I cancel anytime?

Yes. Cancel from the customer portal and you move back to the Free plan at the end of your billing period.

Legal

Terms of Service

Draft: this policy is not final yet and is shown for transparency. Questions? hello@trycanary.net

DRAFT. Not legal advice. This document must be reviewed by a qualified lawyer (Israeli law, plus any jurisdiction where you sell) before publication. Placeholders in {{DOUBLE_BRACES}} must be completed.

Last updated: {{EFFECTIVE_DATE}}

1. Who we are

Canary ("Canary", "we", "us") is operated by {{COMPANY_NAME}}, {{COMPANY_LEGAL_FORM_AND_REG_NUMBER}}, located at {{ADDRESS}}, Israel. You can contact us at {{CONTACT_EMAIL}}.

These Terms of Service ("Terms") govern your use of the Canary website at {{SITE_URL}}, the free check, the free security scan, the dashboard, monitoring, alerts and related services (together, the "Service"). By using the Service you agree to these Terms, the [Acceptable Use Policy](acceptable-use-policy.md) and the [Refund Policy](refund-policy.md). Our [Privacy Policy](privacy-policy.md) explains how we handle personal data.

If you use the Service on behalf of a company or other organization, you confirm that you have authority to bind it, and "you" includes that organization.

2. Eligibility

You must be at least {{MINIMUM_AGE}} years old and able to form a binding contract to use the Service.

3. The Service

Canary is a website monitoring tool. Depending on your plan, the Service may:

open the publicly reachable pages of an app you submit in an automated browser, and check that the homepage loads, that no uncaught JavaScript errors occur on load, that sign-up and login pages are reachable, and that a Stripe or Lemon Squeezy checkout link or script is reachable;
repeat these checks on a schedule (currently once every 24 hours on the Free plan and hourly on paid plans) and email you (and, on the Pro plan, notify a Slack channel) when the result changes, including screenshots, error details and a suggested "fix prompt";
run a passive, read-only security scan of what the app publicly serves (for example, exposed keys in frontend code, publicly readable configuration files, missing security headers, and whether Supabase tables can be read with a public key).

The Service is read-only: it does not intentionally submit forms, create accounts, log in or make payments in your app. The features, check types, frequencies and limits of each plan are described on our pricing page and in our help center and may change as described in Section 13.

4. Your account

You can use the free check without an account. To use the dashboard, you log in with a one-time link sent to your email address. You are responsible for keeping access to your email account secure and for all activity under your account. Tell us promptly at {{CONTACT_EMAIL}} if you believe your account has been used without permission.

5. Apps you may monitor or scan

You may submit, check, monitor or scan only apps and URLs that you own or that you are explicitly authorized by the owner to test. By submitting a URL you represent and warrant that you have that right. You are solely responsible for any submission you make, and you must comply with the [Acceptable Use Policy](acceptable-use-policy.md). We may refuse, stop or remove monitoring of any URL at our discretion, including on a complaint from the site owner.

6. Plans, payment and renewal

6.1 Plans. We offer a free plan and paid subscription plans. Current prices are shown on {{SITE_URL}}/pricing.

6.2 Merchant of Record. Paid plans are sold through Lemon Squeezy (operated by {{LEMON_SQUEEZY_LEGAL_ENTITY}}), which acts as our reseller and Merchant of Record. Your purchase is a transaction with Lemon Squeezy and is also subject to Lemon Squeezy's own terms and privacy policy. Lemon Squeezy processes your payment, issues receipts and is responsible for collecting and remitting applicable sales tax or VAT. We do not receive or store your full payment card details.

6.3 Automatic renewal. Paid plans are billed in advance on a recurring monthly basis and renew automatically until cancelled. By subscribing you authorize the recurring charge for your plan's price, plus applicable taxes.

6.4 Failed payments. If a payment fails, paid features (including scheduled monitoring of your apps) may be paused or ended until payment is completed.

6.5 Price changes. We may change prices for future billing periods. We will give you at least {{PRICE_CHANGE_NOTICE_DAYS}} days' notice by email before a price change takes effect for your subscription, and you may cancel before it applies.

7. Cancellation and refunds

You may cancel at any time through the Lemon Squeezy customer portal (reachable from your dashboard or your receipt email) or by emailing {{CONTACT_EMAIL}}. {{CANCELLATION_EFFECT_LEGAL}} Refunds are governed by our [Refund Policy](refund-policy.md). Nothing in these Terms limits any non-waivable rights you have as a consumer under applicable law, including the Israeli Consumer Protection Law, 5741-1981.

8. No guarantee; not a security audit

8.1 The Service is an automated, best-effort tool. Checks run from outside your app and can produce false positives (reporting a problem that does not exist) and false negatives (missing a real problem), for example because of bot protection, pop-ups, unusual page structures, network issues or outages of our providers. Checks may be delayed or skipped.

8.2 The security scan is a limited, passive signal. It is not a penetration test, a security audit or a certification. A clean result does not mean your app is secure.

8.3 Alerts and fix prompts are generated automatically from templates and the data our checks observe. They are suggestions only. You are responsible for reviewing any change before applying it to your app, including changes produced by third-party AI tools, and for keeping backups. We are not responsible for the output of third-party AI tools.

8.4 You remain responsible for the operation, security and legal compliance of your own app.

9. Your content and data

You keep all rights in the URLs and information you submit. You grant us a non-exclusive, worldwide license to access the submitted URLs and to process, store and display the resulting data (such as check results, screenshots and scan reports) only as needed to provide, secure and improve the Service. Our handling of personal data is described in the [Privacy Policy](privacy-policy.md).

10. Our intellectual property

The Service, including its software, design, text and the "Canary" name and logo, is owned by {{COMPANY_NAME}} or its licensors. Subject to these Terms, we grant you a limited, non-exclusive, non-transferable right to use the Service for your own internal purposes. You may freely use alert texts, reports and fix prompts generated for your own apps. Third-party names and logos shown on the site (such as Lovable, Bolt, Cursor, Replit, v0, Claude, ChatGPT, Supabase and Stripe) belong to their owners; Canary is not affiliated with or endorsed by them.

If you send us feedback or suggestions, we may use them without obligation to you.

11. Third-party services

The Service relies on third-party services (for example hosting, database, email delivery, payments and, if you connect it, Slack). Your use of third-party services you choose to connect is governed by their terms. We are not responsible for third-party services.

12. Suspension and termination

We may suspend or terminate your access to the Service, with or without notice, if you breach these Terms or the Acceptable Use Policy, if required by law, or if your use creates risk or harm for us, other users or third parties. You may stop using the Service at any time. Sections that by their nature should survive termination (including 8, 10, 14, 15, 16 and 17) survive.

13. Changes to the Service and these Terms

We may change, add or remove features. We may update these Terms; if a change is material, we will notify you by email or on the site at least {{TERMS_CHANGE_NOTICE_DAYS}} days before it takes effect. Continuing to use the Service after the effective date means you accept the updated Terms.

14. Disclaimer of warranties

To the maximum extent permitted by law, the Service is provided "as is" and "as available", without warranties of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, accuracy, uninterrupted availability and non-infringement.

15. Limitation of liability

To the maximum extent permitted by law: (a) we will not be liable for any indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, data, goodwill or business opportunities, including losses from downtime of your app or from issues the Service did not detect; and (b) our total liability for all claims relating to the Service will not exceed {{LIABILITY_CAP}}. Nothing in these Terms limits liability that cannot be limited by law.

16. Indemnity

You will defend, indemnify and hold harmless {{COMPANY_NAME}} and its owners and personnel from claims, damages and costs (including reasonable legal fees) arising from your breach of these Terms or the Acceptable Use Policy, or from your checking, monitoring or scanning a URL you were not authorized to test.

17. Governing law and disputes

These Terms are governed by the laws of the State of Israel, without regard to conflict-of-law rules. The competent courts of {{JURISDICTION_CITY}}, Israel will have exclusive jurisdiction, except where mandatory consumer law gives you the right to bring proceedings in your country of residence. {{CONSUMER_JURISDICTION_CARVEOUT_REVIEW}}

18. General

These Terms, together with the policies referenced in them, are the entire agreement between you and us regarding the Service. If any provision is found unenforceable, the rest remains in effect. Our failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; we may assign them in connection with a merger, acquisition or sale of assets. In case of conflict between a translation and the English version, the English version prevails.

19. Contact

{{COMPANY_NAME}}, {{ADDRESS}}. Email: {{CONTACT_EMAIL}}.