Tillping Terms of Service

Version: 2026-11-11-v3.4

Effective date: 11 November 2026

Last updated: 11 November 2026

Thanks for using Tillping. We have tried to keep these terms as clear as we can while still being precise; if anything is unclear, just email us at support@tillping.online.

These Terms of Service (these "Terms") govern your access to and use of Tillping. They form a binding agreement between you and the Operator (as defined in Section 1.1). Please read them carefully. Sections 6 (Authorization to Scan), 10 (Disclaimer of Warranties), 11 (Limitation of Liability), 12 (Indemnification) and 19 (Governing Law and Jurisdiction) limit our liability and affect your legal rights. Nothing in these Terms affects any right you have as a Consumer that cannot be excluded or limited by agreement under applicable law.

1. Introduction and Operator

1.1 Operator. Tillping is operated by Hanna Rynkov, a sole proprietor (Osek Murshe) registered in Israel (the "Operator", "Tillping", "we", "us" or "our").

1.2 Contact. We can be contacted by email only, at support@tillping.online. That address is our designated address for all communications under these Terms, including legal notices (Section 20.7).

2. Definitions

In these Terms, the following capitalized terms have the meanings set out below:

"Account" means a registered user account on the Service.
"AI Content" means any part of a Report that is generated by an artificial-intelligence model, such as a short fix tip. AI Content is labeled as such in the Service.
"Authorization Declaration" means your confirmation that you own each Target you submit or are authorized to test it (Section 6.1). It is given:
- (a) if you have an Account, in the Sign-up Confirmation, and repeated each time you submit a Target or add a domain to your Account;
- (b) if you use a Free Scan without an Account, by submitting the Target after the following notice, shown next to the scan button: "By checking, you confirm this is your app or you have permission to test it."
"Consumer" means an individual who uses the Service for purposes wholly or mainly outside that individual's trade, business, craft or profession, as that term (or its equivalent) is defined under the consumer protection law that applies to that individual.
"Deep Scan" means an extended Scan, purchased as a one-off item under Section 8, of a Target whose hostname is a Verified Domain in your Account (Section 5.4(b)).
"Deep Scan Credit" means the entitlement to one Deep Scan that is added to your Account when payment for a Deep Scan is confirmed. It is used automatically when the Deep Scan starts and is returned in the cases set out in Section 2.4 of the Refund Policy.
"Free Scan" means a Scan, available without payment and with or without an Account, that you submit through the scan form on our website and that requires only an Authorization Declaration and not Verification (Section 5.4(a)), subject to the usage limits in Section 5.3.
"Merchant of Record" means Paddle.com, our online reseller, or the Paddle group company identified as seller at checkout and on your receipt (Paddle's buyer terms are at https://www.paddle.com/legal/invoiced-business-terms), which sells Paid Items to you as authorized reseller and Merchant of Record, as described in Section 8.1.
"Monitoring" means automated, recurring Scans of a Target on a Verified Domain, run on a schedule without a separate request from you. Monitoring is not offered at present (Section 5.4(d)).
"Order Confirmation" means the email that we send to you after each purchase, before the Deep Scan starts, confirming the contract, the Purchase Request and the information required by applicable law, with copies of these Terms and of the Refund Policy in the versions that apply to the purchase.
"Paid Item" means a Deep Scan. The Deep Scan is the only paid item offered under these Terms; we do not offer subscriptions, recurring plans or automatically renewing purchases.
"Performed", in relation to a Deep Scan, means that the Deep Scan has run to completion and its Report has been made available in your Account.
"Policies" means the Acceptable Use Policy at https://tillping.online/acceptable-use (the "AUP") and the Refund Policy at https://tillping.online/refund (the "Refund Policy").
"Privacy Policy" means the Tillping Privacy Policy at https://tillping.online/privacy.
"Purchase Request" means your express request that we start a Deep Scan immediately after payment, during the withdrawal or cancellation period, and your acknowledgement that you will lose your right of withdrawal once the Deep Scan has been Performed. You give it by ticking the box, which is not pre-ticked, shown on the review page before checkout, next to this text: "Start my Deep Scan as soon as I pay, within my 14-day cancellation period. I understand that I lose my right to cancel once it has run and my report is ready."
"Refused Target" means a Target that we decline to scan under Section 6.4, including because it appears on our list of addresses whose owners have asked not to be scanned.
"Report" means the results, findings, severity labels, fix steps and other output that the Service displays or sends to you in respect of a Scan, including any AI Content.
"Re-scan" means a repeat Scan of the Target of a Deep Scan, made available free of charge for the period stated at purchase.
"Scan" means a set of automated test requests that the Service sends to a Target, together with the analysis of the responses, as further described in Section 5.2.
"Service" means the Tillping website at https://tillping.online (including its subdomains) and the scanning, reporting and related features we make available through it.
"Service Failure" means that:
- (a) a Deep Scan does not start within a reasonable time after payment, or does not run to completion, for a reason attributable to the Service; or
- (b) a Deep Scan or its Report is not in conformity with these Terms or with the description given at purchase, including, if you are a Consumer, any lack of conformity within the meaning of applicable law.
"Sign-up Confirmation" means the box, which is not pre-ticked, that you tick when you first sign in, or when we ask you to accept an amended version of these Terms, next to the text set out in Section 3.1.
"Target" means any URL, host, domain, endpoint or system that you submit to the Service for scanning.
"Target Unreachable" means that, during a Deep Scan, the Target returned no HTTP response to any of our requests, for example because its hostname did not resolve or the connection was refused or timed out. A response of any kind, including an error status, a redirect or a block page, is not Target Unreachable.
"Verification" means our ownership-verification procedure, completed by publishing on the domain concerned a DNS TXT record or a verification file that we issue to you; and "Verified Domain" means a domain in your Account for which you have completed Verification.
"you" and "your" mean the individual using the Service or, where that individual uses the Service on behalf of a company or other organization, that organization.

Headings are for convenience only and do not affect interpretation. The words "including" and "for example" are illustrative and do not limit the generality of the preceding words.

3. Acceptance and Policies

3.1 Acceptance. If you create an Account, you accept these Terms, including the AUP, by giving the Sign-up Confirmation, next to this text: "I accept the Terms of Service, including the Acceptable Use Policy, and I have read the Privacy Policy. I'm 18 or older, I'm using Tillping for my work or business, and I'll only submit webhooks that I own or have permission to test." If you use a Free Scan without an Account, these Terms apply to that Free Scan from the time you submit it. If you do not agree to these Terms, you must not use the Service. Your acceptance of these Terms does not constitute a Purchase Request; a Purchase Request is given only as described in Section 8.5.

3.2 Authority. If you use the Service on behalf of an organization, you represent and warrant that you have authority to bind that organization to these Terms.

3.3 Incorporated Policies. The Policies are incorporated into and form part of these Terms. The Privacy Policy describes how we process personal data; it is provided for information and does not form part of these Terms, save to the extent applicable law provides otherwise.

3.4 Order of precedence. In the event of any conflict between these Terms and a Policy, these Terms prevail, except that the Refund Policy prevails on matters of refunds, cancellation and withdrawal.

4. Eligibility

4.1 Age and capacity. You must be at least 18 years of age and have full legal capacity to enter into a binding contract in order to use the Service.

4.2 Business use. The Service is a technical tool designed and offered for developers and businesses, for use in the course of a trade, business, craft or profession. If you nevertheless use the Service as a Consumer, the provisions of these Terms and of the Refund Policy that apply to Consumers apply to you, and nothing in these Terms deprives you of any right that you have as a Consumer under mandatory law.

4.3 Restricted persons. You may not use the Service if you are prohibited from receiving it under the laws of Israel, the United States, the European Union, the United Kingdom or any other applicable jurisdiction, including sanctions and export-control laws.

5. The Service

5.1 Purpose. The Service checks whether a webhook endpoint that you designate as the receiving endpoint for a payment or webhook provider (for example, Stripe, Lemon Squeezy or Paddle) is reachable and correctly protected against unauthenticated requests, and reports its findings together with suggested remediation steps. Tillping is not affiliated with, sponsored by or endorsed by any payment provider whose webhooks it tests. These providers are named only to describe what the Service tests; in that role they are not our service providers and do not process your data for us. How you pay Tillping is described in Section 8 (Paddle's separate role as our Merchant of Record).

5.2 How a Scan works. A Scan sends a small number of automated HTTP requests to the Target from our cloud infrastructure, whose IP addresses may change. These requests identify themselves with the user agent TillpingProbe/1.0 (+https://tillping.online/security). The Service reads a limited portion of each response and inspects the TLS certificate. The Service never sends genuine payment events and never requests or uses your API keys, signing secrets or other credentials.

(a) Free Scan. A Free Scan consists of a small number of light requests to the Target (no more than ten (10), including following up to five (5) redirects): a POST request with a clearly marked test body and no signature; a POST request bearing a deliberately invalid payment-provider signature; a GET request; and, only where the Target answers the first request with a redirect, a repeat of the first request that follows up to five (5) redirects, each of which is re-validated against our network-safety controls. If the first request fails because the Target's TLS certificate cannot be validated, we repeat that request once without certificate validation, and the other requests of the Scan are then also sent without certificate validation, so that the Report can describe both the certificate problem and how the Target responds. Where the Target cannot be reached, no further requests are sent.
(b) Deep Scan. A Deep Scan includes the requests of a Free Scan and, in addition, may include an OPTIONS request, trailing-slash and plain-HTTP variants of the Target, and three (3) response-time samples.

5.3 Usage limits. Free Scans are limited in number per day, and all use of the Service is subject to rate limits, fair-use limits and capacity limits that we may apply to protect the Service and third parties. A Scan may be delayed or refused when a limit has been reached. Current limits are indicated in the Service or on our pricing page.

5.4 Conditions for each type of Scan.

(a) Free Scans. A Free Scan requires an Authorization Declaration, given as described in Section 2. We do not carry out Verification, or otherwise check your ownership or authorization, before a Free Scan; we rely on your Authorization Declaration and on the representations and warranties in Section 6.2.
(b) Deep Scans. A Deep Scan runs only on a Target whose hostname is a Verified Domain in your Account at the time the Deep Scan starts. If that domain is no longer a Verified Domain when your payment is confirmed, the Deep Scan does not start, the Deep Scan Credit remains in your Account, and Section 2.2 of the Refund Policy applies.
(c) Scans of saved domains. A Scan that you start from your Account dashboard for a domain saved in your Account is provided without payment, but runs only once that domain is a Verified Domain.
(d) Monitoring. Monitoring is not offered at present, and nothing in these Terms obliges us to provide it. If we make Monitoring available in the future, it will run only on Verified Domains and on the terms that we publish at that time.
(e) Effect of Verification. Verification evidences that you controlled the domain at the time of Verification. It does not discharge your obligations under Section 6, and it does not replace your Authorization Declaration.

5.5 No credentials. You must not submit API keys, webhook signing secrets, passwords, access tokens, payment card data or other credentials anywhere in the Service, including in a Target URL or in correspondence with us. If you do so, you must rotate the affected credentials without delay. To the maximum extent permitted by applicable law, we are not liable for any loss arising from credentials submitted in breach of this Section 5.5.

5.6 Effects on Targets. Scans are designed to be harmless to a correctly configured endpoint. However, any request may have effects on a system that we do not control, such as logging, alerting or rate limiting or, in the case of an incorrectly configured endpoint, processing the test request as though it were genuine. You are responsible for any such effects on your Targets.

6. Authorization to Scan

6.1 Rule. You may submit a Target only if (a) you own it, or (b) you hold the express authorization of its owner or operator to test it by means of automated HTTP requests of the kind described in Section 5.2. A Target is not yours merely because it is publicly accessible, because you can enter its address, or because you are a customer of the service to which it belongs.

6.2 Representations and warranties. Each time you give an Authorization Declaration or otherwise submit a Target, whether or not Verification is required for the Scan concerned, you represent and warrant that:

(a) the requirements of Section 6.1 are satisfied in respect of that Target, and your Authorization Declaration is true;
(b) the Scan will not infringe any law, contract, terms of service, hosting policy or third-party right applicable to you or to the Target, including computer-misuse legislation such as the Israeli Computers Law, 5755-1995, the U.S. Computer Fraud and Abuse Act and the UK Computer Misuse Act 1990; and
(c) you will, on our request, provide reasonable evidence of your ownership or authorization.

6.3 Withdrawal of authorization. You must cease scanning a Target, and remove any corresponding Verified Domain from your Account, as soon as your ownership or authorization ends.

6.4 Our rights. We may refuse, limit, block or terminate any Scan, Target or host at any time and without liability if we reasonably believe that Section 6.1 is not satisfied, that the owner of the Target objects, or that the Scan may cause harm or expose us or any third party to legal risk. Where the owner of a Target notifies us that a Scan was not authorized, we may inform you of the complaint and, subject to applicable law and the Privacy Policy, disclose information about the relevant Scan to the complainant or to competent authorities.

6.5 Responsibility. You are solely responsible for every Target you submit and for every Scan run through your Account or from your device.

7. Accounts and Security

7.1 Sign-in. We authenticate users by means of a one-time sign-in link sent to their email address, or by Google sign-in. In either case you must provide (or, with Google, permit us to receive) an email address that you control and keep it current.

7.2 Security. You are responsible for maintaining the security of the email account or Google account you use to sign in, and for all activity that occurs under your Account. You must notify us without undue delay at support@tillping.online if you become aware of any unauthorized access to your Account.

7.3 One Account per person. You must not share your Account or create multiple Accounts in order to circumvent usage limits, rate limits or a suspension.

8. Deep Scans: Fees and Payment

8.1 Merchant of Record. Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle is the seller of record for each purchase: it processes your payment, calculates and collects any applicable sales tax or VAT, issues your receipt and invoice, and handles payment disputes. The specific Paddle legal entity that sells to you depends on your location and is identified at checkout and on your receipt (see Paddle's buyer terms at https://www.paddle.com/legal/invoiced-business-terms). Paddle, as Merchant of Record and seller of record, makes its own seller disclosures at checkout and on your receipt. Paddle's buyer terms govern the payment transaction between you and Paddle. We provide the Service to you under these Terms. We do not receive or store your full payment card details.

8.2 Price. The price of a Deep Scan is shown on our pricing page and at checkout, in US dollars (USD) unless the checkout states otherwise. Applicable taxes are added at checkout by the Merchant of Record.

8.3 Payment in advance and start of performance. A Deep Scan is a one-off purchase, paid in full in advance. No subscription is created and nothing renews automatically. The price is paid for the Deep Scan alone, which is supplied in full when it is Performed; Re-scans are provided in addition and free of charge. On confirmation of payment, one Deep Scan Credit is added to your Account and, because you gave the Purchase Request, the Deep Scan starts automatically once we have sent you the Order Confirmation. A Deep Scan Credit that has not been used, or has been returned to you, does not expire while your Account remains open.

8.4 Failed and unperformed Deep Scans. Section 2.4 of the Refund Policy sets out what happens in the event of a Service Failure, a Target Unreachable result or a Refused Target, including your right to a repeat run or a refund.

8.5 Right of withdrawal. If you are a Consumer, you have the statutory rights of withdrawal or cancellation described in the Refund Policy. Before checkout, the Service asks you to give the Purchase Request by ticking a box that is not pre-ticked. We confirm the Purchase Request in the Order Confirmation before the Deep Scan starts. Your right of withdrawal ends only in the circumstances set out in Section 3.2 (European Union, EEA and United Kingdom) or Section 4 (Israel) of the Refund Policy.

8.6 Refunds. Refunds are governed by the Refund Policy and are issued through the Merchant of Record to your original payment method.

8.7 Chargebacks. If you believe that a charge is incorrect, please contact us before initiating a chargeback or payment dispute. If you initiate a chargeback in respect of a valid charge, we may suspend access to the related Deep Scan, Report and Re-scans while the dispute is pending. This Section 8.7 is without prejudice to any rights you have against your card issuer or payment provider.

9. Reports and AI Content

9.1 Nature of a Report. A Report is an automated, point-in-time technical assessment of how a Target responded to our test requests. Severity labels and fix steps constitute general guidance only.

9.2 Limitations. A Report is not a security audit, penetration test, certification, compliance assessment or legal advice. A Report that identifies no problems means only that the specific checks performed did not detect a problem at the time of the Scan. Because the Service never uses your signing secret, it cannot confirm that genuine, correctly signed events are accepted and processed by your endpoint. A Report does not guarantee that any payment, webhook or event will be delivered or processed.

9.3 AI Content. Where a Scan finds a high- or medium-severity issue, we may ask a third-party AI service for a short fix tip. We send it only a short technical description of the finding, and we remove URLs, email addresses, IP addresses and hostnames before sending. This provider may process data outside Israel and the EU. These tips are labeled as AI Content. AI Content is not reviewed by a person before it is displayed, may be incomplete, inaccurate or out of date, and may be shown to other users whose Scans produce the same type of finding. Please check AI Content against your payment provider's documentation before acting on it.

9.4 Your decisions. You are solely responsible for deciding whether and how to act on a Report, for testing any change before deploying it, and for maintaining appropriate backups.

10. Disclaimer of Warranties

10.1 "As is" and "as available". To the maximum extent permitted by applicable law, the Service, all Reports and all AI Content are provided "as is" and "as available", with all faults and without warranty of any kind. We expressly disclaim all warranties, conditions and representations, whether express, implied or statutory, including any implied warranties of merchantability, satisfactory quality, fitness for a particular purpose, accuracy, non-infringement and uninterrupted or error-free operation.

10.2 Scope of Scans. Without limiting Section 10.1, Scans test a limited set of behaviors from a limited set of network locations. They may fail to detect problems, may report problems that do not exist, and may produce results that vary owing to factors outside our control, such as your hosting provider, content delivery network, firewall or DNS configuration.

10.3 Payments and webhooks. We are not responsible for whether your payment provider sends, retries or delivers webhooks, or for whether your systems process them. We are not a party to any transaction between you and your customers or your payment providers.

10.4 Statutory rights. Nothing in these Terms excludes or limits any warranty, condition, guarantee or right that cannot be excluded or limited under applicable law, including, if you are a Consumer in the European Union or the European Economic Area, your statutory remedies for lack of conformity of digital content or digital services.

11. Limitation of Liability

11.1 Excluded losses. To the maximum extent permitted by applicable law, neither party is liable to the other, whether in contract, tort (including negligence), breach of statutory duty or otherwise, for any:

(a) indirect, incidental, special, consequential, exemplary or punitive loss or damage;
(b) loss of profits, revenue, sales, business or anticipated savings, loss of goodwill or business opportunity, or loss or corruption of data, in each case whether direct or indirect; or
(c) loss arising from lost, failed, delayed or duplicated payments, webhooks or events, chargebacks or fraud, whether direct or indirect,

even if that party has been advised of the possibility of such loss or damage.

11.2 Liability cap. To the maximum extent permitted by applicable law, and without prejudice to your statutory rights, our total aggregate liability arising out of or in connection with the Service or these Terms, whether in contract, tort (including negligence), breach of statutory duty or otherwise, shall not exceed the greater of (a) the total amounts paid by you for the Service in the twelve (12) months preceding the event giving rise to the first claim, and (b) fifty US dollars (USD 50).

11.3 Exceptions. Nothing in these Terms excludes or limits any liability that cannot be excluded or limited under applicable law, including liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for gross negligence or willful misconduct. Section 11.1 does not limit your liability under Section 6 (Authorization to Scan), Section 12 (Indemnification) or the AUP.

11.4 Basis of the bargain. The price of the Deep Scan, and the provision of Free Scans without charge, have been set on the basis of the allocation of risk in this Section 11, having regard to the low-cost, automated nature of the Service and to the fact that you, and not we, control your systems and payment flows.

12. Indemnification

12.1 Indemnity. To the maximum extent permitted by applicable law, you shall defend, indemnify and hold harmless the Operator and her contractors and agents from and against any and all third-party or regulatory claims, demands and proceedings, and all resulting losses, damages, fines, penalties, costs and expenses (including reasonable legal fees), arising out of or in connection with:

(a) any Scan of a Target you submitted, including any claim that you lacked the ownership or authorization required by Section 6 or that an Authorization Declaration you gave was false;
(b) your breach of these Terms or the AUP;
(c) your infringement of any law or third-party right; or
(d) any information or material you submit to the Service.

If you are a Consumer, this Section 12.1 applies only to the extent that the claim arises from your breach of Section 6 or the AUP or from your wilful or negligent act or omission, and without prejudice to your statutory rights.

12.2 Procedure. We will notify you promptly of any claim to which Section 12.1 applies (any delay relieving you of your obligations only to the extent that it prejudices you), permit you to control its defense at your expense, and provide reasonable assistance at your expense. You shall not settle any such claim in a manner that imposes any obligation on, or requires any admission from, us without our prior written consent, which shall not be unreasonably withheld. We may participate in the defense with counsel of our choice at our own expense.

13. Acceptable Use

You shall comply with the AUP at all times. In summary, you shall scan only Targets you are authorized to test; you shall not attack, overload or misuse any Target or the Service; you shall not attempt to reach private or internal networks or to circumvent limits or security controls; and you shall not use the Service for any unlawful purpose.

14. Intellectual Property

14.1 Our rights. The Service, including its software, design, text, fix guides, templates and brand, and all intellectual property rights in it, are owned by us or our licensors. Subject to your compliance with these Terms, we grant you a limited, non-exclusive, non-transferable, non-sublicensable and revocable right to use the Service. All rights not expressly granted are reserved.

14.2 Reports. You may use, copy and share Reports relating to your own Targets for your internal business purposes, including with your developers, contractors and hosting providers. You may not resell Reports or represent them as a security audit, certification or endorsement by us. If you withdraw from or cancel the contract for a Deep Scan, or its price is refunded in full, your right to use the detailed Report of that Deep Scan ends. We may then make the detailed Report and any remaining Re-scans unavailable, while keeping a summary of the result in your Account, and you must refrain from using the detailed Report or making it available to third parties. This Section is without prejudice to your rights under applicable law in respect of content that you provided to us.

14.3 Your content. You retain all rights in the information you submit to the Service. You grant us a worldwide, non-exclusive, royalty-free license to host, copy, process and display that information to the extent necessary to provide, secure and improve the Service, to comply with applicable law and to enforce these Terms. We may create and use aggregated or de-identified data that does not identify you or any Target.

14.4 Restrictions. Except to the extent applicable law expressly permits notwithstanding this restriction, you shall not copy, modify, reverse engineer, decompile or disassemble the Service or create derivative works of it, use the Service, Reports or AI Content to develop a competing product, or remove any proprietary notice.

14.5 Feedback. If you provide suggestions or other feedback, we may use it without restriction and without obligation to you.

15. Third-Party Services

The Service relies on carefully chosen third-party service providers, namely cloud hosting and database providers, an email delivery provider and a third-party AI service (described by category in the Privacy Policy), and on Paddle as Merchant of Record for payments (Section 8.1). The Service also tests endpoints hosted by third parties. We do not control and are not responsible for third-party services, the use of which is governed by their own terms.

16. Suspension and Termination

16.1 By you. You may stop using the Service at any time. You may close your Account by emailing support@tillping.online from the email address associated with your Account.

16.2 Suspension by us. We may suspend or restrict your Account, any Scan or any Verified Domain with immediate effect if we reasonably believe that (a) you have breached Section 6, Section 13 (Acceptable Use) or the AUP; (b) your use of the Service poses a security, legal or operational risk to us, to a Target or to any third party; or (c) we are required to do so by law or by a competent authority. We will inform you of the reason for the suspension and give you an opportunity to respond, without undue delay, unless we are prohibited by law or by a competent authority from doing so, or doing so would compromise the security of the Service, a Target or any third party, or an investigation of suspected abuse.

16.3 Termination by us for cause. We may terminate these Terms and close your Account by notice if you materially breach these Terms and, where the breach is capable of remedy, fail to remedy it within seven (7) days of our notice. We may terminate with immediate effect for a serious or repeated breach of Section 6 or the AUP. Without prejudice to your statutory rights, and save as provided in the Refund Policy, amounts paid are not refunded on termination for cause.

16.4 Termination by us without cause. We may discontinue the Service, or terminate these Terms for any other reason, on at least thirty (30) days' notice. In that event we will refund the price of any unused Deep Scan Credits.

16.5 Effect of termination. On termination, your right to use the Service ceases, and we will handle your data as described in the Privacy Policy. Sections 6.5, 9, 10, 11, 12, 14, 16.5, 19 and 20, and any other provision that by its nature is intended to survive, survive termination.

17. Changes to the Service and to These Terms

17.1 Changes to the Service. We may modify, add or remove features of the Service. If a modification materially reduces the functionality of a Deep Scan for which you hold an unused Deep Scan Credit, you may request a refund of that Deep Scan Credit.

17.2 Changes to these Terms. We may amend these Terms from time to time. We will give at least thirty (30) days' notice of any material amendment, by email to the address associated with your Account or by notice in the Service, before it takes effect, unless a shorter period is required to comply with applicable law or to address a security risk or abuse, in which case we will give as much notice as is reasonably practicable.

17.3 Your options. If you do not accept an amendment, you may stop using the Service before the amendment takes effect and request a refund of any unused Deep Scan Credits. If you continue to use the Service after the amendment takes effect, you will be deemed to have accepted the amended Terms.

17.4 No retroactive effect. Amendments do not apply to disputes that arose before the amendment took effect. The Refund Policy in force on the date of your purchase applies to that purchase, without prejudice to your statutory rights.

17.5 Version history. Each version of these Terms and of the Refund Policy carries a version identifier and an effective date. Previous versions, with their version identifiers and the dates on which they were in force, are available at https://tillping.online/legal/archive. The Order Confirmation identifies the version of these Terms and of the Refund Policy that you accepted.

18. Force Majeure

Neither party is liable for any delay in performing or failure to perform its obligations (other than payment obligations) caused by events beyond its reasonable control, including natural disasters, war, hostilities, terrorism, states of emergency, civil unrest, acts of government, epidemics, labor disputes, power or internet failures, cyberattacks, and outages of hosting, cloud, email, artificial-intelligence or payment providers. The affected party shall use reasonable efforts to mitigate the effect of the event and to resume performance. If such an event prevents us from providing the Service for more than thirty (30) consecutive days, either party may terminate these Terms by notice, and we will refund the price of any unused Deep Scan Credits.

19. Governing Law and Jurisdiction

19.1 Prior notice. If you are not a Consumer, you shall, before commencing any proceedings, notify us at support@tillping.online and allow us thirty (30) days to resolve the matter. If you are a Consumer, we invite you to contact us first, but you are not required to do so. This Section 19.1 does not prevent either party from seeking urgent interim relief and does not suspend or shorten any limitation period prescribed by law.

19.2 Governing law. These Terms, and any dispute or claim arising out of or in connection with them or the Service (including non-contractual disputes or claims), are governed by and construed in accordance with the laws of the State of Israel, without regard to its conflict-of-laws rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

19.3 Jurisdiction. Subject to Section 19.4, the competent courts of the Tel Aviv-Jaffa district, Israel, have exclusive jurisdiction over any such dispute or claim, and each party irrevocably submits to their jurisdiction. Either party may seek injunctive or other interim relief in any court of competent jurisdiction to protect its intellectual property rights, to prevent unauthorized Scans or misuse of the Service, or to prevent irreparable harm.

19.4 Mandatory consumer protections. If you are a Consumer, the choice of law in Section 19.2 does not deprive you of the protection afforded to you by the mandatory provisions of the law of your country of habitual residence, and Section 19.3 does not prevent you from bringing proceedings in the courts of your country of habitual residence where the law of that country entitles you to do so. If you are a Consumer in Israel, Section 19.3 does not limit your right to bring proceedings in any Israeli court that has jurisdiction under the applicable rules of civil procedure.

20. General Provisions

20.1 Entire agreement. These Terms, together with the Policies, constitute the entire agreement between you and us concerning the Service and supersede all prior agreements, representations and understandings relating to it. Marketing materials, FAQs and help pages are provided for information only and do not create any warranty or obligation.

20.2 Severability. If any provision of these Terms is held invalid, illegal or unenforceable, that provision shall be enforced to the maximum extent permissible, or modified to the minimum extent necessary to render it enforceable, and the remaining provisions shall continue in full force and effect.

20.3 No waiver. No failure or delay in exercising any right or remedy under these Terms operates as a waiver of it, and no single or partial exercise of any right or remedy precludes any further exercise of it.

20.4 Assignment. You may not assign, transfer or sub-contract any of your rights or obligations under these Terms without our prior written consent. We may assign or transfer these Terms, by notice to you, to an affiliate or to a successor to all or substantially all of the business or assets of Tillping (including a company formed to carry on the business), provided that the assignee undertakes to be bound by these Terms. If you object to such an assignment, you may terminate these Terms and request a refund of the price of any unused Deep Scan Credits.

20.5 Independent parties. Nothing in these Terms creates a partnership, joint venture, agency or employment relationship between the parties.

20.6 No third-party rights. No person other than you and us has any right to enforce these Terms, save for the persons indemnified under Section 12.

20.7 Notices. All notices under these Terms shall be given by email. We will send notices to the email address associated with your Account or, if you have no Account, by notice in the Service. You shall send notices to support@tillping.online, where possible from the email address associated with your Account and with the subject of the notice (for example, "Legal notice") in the subject line. An email notice is deemed received on the first business day in Israel following transmission, unless the sender receives a delivery-failure notification. No notice is required to be given by post or in any other form, save where mandatory law requires otherwise.

20.8 Language. These Terms are drawn up in English. Any translation is provided for convenience only and, to the maximum extent permitted by applicable law, the English version prevails.

20.9 Electronic form. You agree that these Terms, notices, receipts and other communications may be provided electronically and that your electronic acceptance has the same legal effect as a handwritten signature.

21. Founding Offer

21.1 Founding Offer. The first fifty (50) natural persons who sign up to the early-bird list and confirm their email address (each a "Founding Member") are each entitled to one (1) Deep Scan free of charge (the "Founding Offer"). Order is determined by the time at which each confirmation is recorded on our systems. Test, duplicate, automated and fraudulent sign-ups are excluded.

21.2 Delivery and validity. At Launch we will email each Founding Member a personal code. The Founding Offer is provided as one (1) Deep Scan credit on the Founding Member's Tillping account (the "Founding Credit"). The Founding Credit is granted when the Founding Member signs in with the confirmed email address or enters the code in their account. No checkout or payment is involved. The Founding Credit must be claimed and used within thirty (30) days of the Launch email (the "Validity Period"). An unclaimed code and an unused Founding Credit expire at the end of the Validity Period.

21.3 Limitations. One (1) Founding Credit is available per person, per email address and per account. The Founding Credit and the code have no cash value. They cannot be exchanged for money or other credit, cannot be transferred or sold, cannot be redeemed on an account not held by the Founding Member, and cannot be combined with any other offer. We may withhold or cancel a Founding Credit that we reasonably believe was obtained through multiple identities, automation or other abuse.

21.4 Use of the Founding Credit. A Deep Scan run with the Founding Credit is governed by these Terms, the Acceptable Use Policy (including domain verification) and the Refund Policy. Because no price is paid, no monetary refund is due. If the Deep Scan fails for a reason attributable to us (Refund Policy clause 2.4), or the target is unreachable, we will restore the Founding Credit. The restored credit is valid until the later of the end of the Validity Period and fourteen (14) days after the failure.

21.5 Launch. "Launch" means the date on which we make the paid Deep Scan generally available. If we do not launch, no Founding Offer is owed. Once a Founding Member's place has been confirmed to them, we will not otherwise withdraw the Founding Offer from that Founding Member.

21.6 Nothing in this section affects your statutory rights.

22. Contact

Tillping is operated by Hanna Rynkov, a sole proprietor (Osek Murshe) registered in Israel.

Email: support@tillping.online (for all inquiries and notices, including legal notices).

For purchases, the seller of record is our Merchant of Record, Paddle.com (see Section 8.1 and Paddle's buyer terms at https://www.paddle.com/legal/invoiced-business-terms for the Paddle legal entity that applies to your purchase). Paddle, as Merchant of Record and seller of record, makes its own seller disclosures at checkout and on your receipt. Our business postal address is provided in the purchase confirmation email we send you after each purchase.