Terms of Service

These Terms of Service (“Terms”) govern your use of Sketch Audit (“App”), operated by Maple and Sketch Inc., a federally incorporated Canadian corporation. By installing, accessing, or using Sketch Audit, you agree to be bound by these Terms.

If you do not agree to these Terms, do not install or use Sketch Audit.

Your use of Sketch Audit is also governed by:

• Privacy Policy
• Shopify’s Terms of Service
• Shopify App Store Terms

In case of conflict, these Terms take precedence for Sketch Audit-specific usage.

• “App” — Sketch Audit, including the Shopify embedded dashboard and all associated services
• “You” or “User” — the Shopify store owner or authorized representative who installs Sketch Audit
• “Shop” or “Store” — your Shopify store registered with the App
• “Subscription” — your active plan (Basic or Pro)
• “Content” — theme files, scan results, findings, and alerts generated by the App
• “Service” — security scanning, threat detection, alerting, and analysis services provided by Sketch Audit

3.1 Billing and pricing

Current subscription pricing is available at mapleandsketch.com/products/sketch-audit#pricing. We reserve the right to change prices at any time. If we increase prices, we will notify you at least 30 days in advance. You will have the opportunity to accept or decline the price increase before it takes effect. If you decline, your subscription will remain at the current price for your current billing cycle, and you can cancel anytime after that.

3.2 Billing mechanics

• Billing is handled through Shopify’s App Pricing system
• Charges are processed on a monthly basis on your Shopify billing date
• You authorize Shopify to charge your registered payment method
• Sketch Audit does not store your payment information — Shopify does

3.3 Trial period

• Free Trial: 7 days of Pro features, available once per shop
• Trial eligibility is one-time per shop domain (reinstalls do not reset the trial)
• Switching plans during trial does not reset the trial period
• On day 8, your chosen plan is charged at the regular rate unless you cancel

3.4 Refunds — non-refundable

All subscription fees are non-refundable once charged. This includes:

• Partial months if you cancel mid-cycle
• Unused service time
• Trial period (if converted to paid)
• Prior billing cycles

Billing error exception: if you believe you were charged in error (duplicate charge, billing system error, incorrect tier charged, etc.), contact [email protected] within 30 days. We will review your specific case and may issue a credit or refund at our discretion for genuine billing errors only.

3.5 Cancellation

• You can cancel your subscription anytime from your dashboard
• Cancellation is effective immediately
• Your shop data will be permanently deleted within 30 days of receiving Shopify’s shop/redact webhook (see Section 9)
• You must manually uninstall the App from your Shopify admin if you wish to remove it

4.1 What Sketch Audit does

Sketch Audit scans your Shopify store theme for:

• Malicious scripts and code injection — code patterns associated with skimmers, trojans, or known malware
• Hidden checkout overlays and card skimmers — invisible elements that capture payment information
• Unexpected code changes to your theme — files that differ from your previous scan baseline
• Suspicious domains and URLs — scripts or links pointing to known malicious or untrusted external domains

How we detect suspicious domains:

• Comparison against industry-standard threat intelligence and malware databases
• Identification of obfuscated or encoded URLs
• Detection of domains used in past skimming campaigns
• Flagging of uncommon TLDs or recently registered domains in payment-critical code

Limitations:

• New domains not yet in malware databases may not be flagged
• Legitimate third-party services may share characteristics with malicious domains
• Context matters — a domain’s legitimacy depends on where it’s used in your code

4.2 What Sketch Audit does not do

Sketch Audit is a detection tool, not a guarantee of security. We do not:

• Automatically fix detected threats
• Prevent all malware or compromises
• Monitor network traffic or customer data
• Replace Shopify’s built-in security
• Guarantee a 100% detection rate
• Monitor apps or Shopify admin accounts

4.3 Service limitations

• Nightly scans: run once per day, typically between 2–4 AM UTC
• On-demand scans: Basic: none (nightly only); Pro: 30 scans per month
• Scan results: retained for 7 days (Basic and Pro)
• Detection quality: depends on code patterns, threat databases, and AI analysis
• Uptime: we aim for 99.9% uptime but do not guarantee zero downtime

4.4 Fair usage policy

On-demand scans are subject to fair usage limits. We reserve the right to throttle, suspend, or limit access if a single shop’s usage patterns are determined to be unreasonable, including but not limited to automated abuse, bot activity, commercial resale, or use for purposes other than security monitoring of your own store.

Enforcement: if we identify fair usage violations, we may take any of the following actions at our discretion:

• Notify you of excessive usage and request reduction
• Throttle API responses or limit scan frequency
• Temporarily or permanently suspend on-demand scanning
• Discuss custom solutions based on your specific situation

We will notify you when enforcement actions are taken.

4.5 SMS alerts and carrier charges

SMS alerts are included in the Pro plan (opt-in required).

What you’ll receive: SMS alerts are sent only when a theme scan detects a suspected malicious code or security problem that requires your attention. We do not send SMS for:

• All-clear scan results
• Marketing messages or promotional offers
• General notifications or feature announcements
• Scheduled reminders

An “alert” is defined as a Sketch Audit detection of suspected malicious code, hidden overlays, unauthorized modifications, or other security threats in your store theme.

Opt-in: SMS alerts require explicit consent and phone verification. To receive SMS alerts, you must:

• Check the consent checkbox agreeing to receive SMS alerts
• Enter and verify your phone number with a 4-digit code
• Save SMS settings

SMS alerts are disabled by default. Phone verification alone does not enable SMS — both the consent checkbox and verification are required.

Carrier charges: you may incur charges from your mobile carrier for SMS messaging. Sketch Audit is not responsible for SMS messaging rates charged by your carrier, data usage from receiving SMS notifications, delivery delays or failures from your carrier, or carrier blocking or filtering of SMS messages.

You can disable SMS alerts anytime in your dashboard settings. Standard SMS message and data rates apply based on your carrier’s plan. Reply “STOP” to any SMS to unsubscribe from alerts.

4.6 Acceptable use

You agree not to:

• Use Sketch Audit to scan stores you do not own or operate
• Attempt to reverse-engineer, decompile, or modify the App
• Use the App for any illegal or harmful purpose
• Circumvent rate limits or abuse the scanning feature
• Share your App access token with unauthorized users
• Use the App to scan non-Shopify stores or websites
• Resell, redistribute, or commercialize the App’s functionality

5.1 Your obligations

You agree to:

• Maintain accurate account information
• Keep your Shopify login credentials secure
• Review scan results and act on critical threats
• Verify all findings before taking action
• Follow Shopify’s security best practices
• Not hold Sketch Audit responsible for delayed responses to alerts
• Report security vulnerabilities to [email protected] (not publicly)

5.2 Your sole responsibility

Sketch Audit provides information; you make decisions.

• Sketch Audit identifies potential threats
• You are responsible for verifying findings and taking corrective action
• You decide whether to remove code, disable apps, or restore backups
• You assume all risk of acting on or ignoring Sketch Audit findings

6.1 Sketch Audit IP

• Sketch Audit logo, name, design, and software are owned by Maple and Sketch Inc.
• All code, algorithms, detection methods, and UI are proprietary
• You are granted a limited, non-exclusive license to use Sketch Audit for security monitoring of your store only

You may not:

• Copy, modify, or create derivative works
• License, distribute, or resell the App
• Use Sketch Audit’s technology in competing products

6.2 Your content

• You retain ownership of your theme files and store data
• By using Sketch Audit, you grant us a license to access, scan, and analyze your theme files; store scan results for the retention period specified; and use scan results to improve our detection algorithms (anonymized)

6.3 Feedback

• Any feedback, suggestions, or bug reports you provide become our property
• We may use your feedback to improve Sketch Audit without compensation

7.1 Disclaimer of warranties

Sketch Audit is provided “AS-IS” without warranties. We do not warrant that:

• The App will detect all malware or threats
• Scan results are 100% accurate
• The App will prevent store compromise
• The App will be error-free or uninterrupted
• Alerts will arrive instantaneously
• AI analysis is infallible

7.2 Limitation of liability

To the maximum extent permitted by law, Sketch Audit shall not be liable for:

• Loss of revenue or profits
• Loss of customers or sales
• Loss of data or backups
• Store downtime or interruption
• Damages from undetected malware
• Consequential, indirect, or punitive damages
• Any damages exceeding your total payments in the past 12 months

This limitation applies even if we have been advised of the possibility of such damages.

7.3 Your indemnity

You agree to indemnify, defend, and hold harmless Sketch Audit from any claims arising from:

• Your use of the App in violation of these Terms
• Your failure to act on alerts or findings
• Third-party claims related to your store’s content or data
• Your violations of Shopify’s terms or applicable law

8.1 Data we collect

See our Privacy Policy for full details on what data we collect, how we use it, how long we retain it, and your rights to access, delete, or export data.

8.2 Your right to download your data

You can download all your scan data anytime:

• Log into your Sketch Audit dashboard
• Go to Settings → Data & Privacy → Download My Data
• Export includes: scan history, findings, analysis results (up to 7 days of current data)
• File format: JSON or CSV
• No time limit — download anytime, even without deleting your account

Before deleting your account: if you want to keep your scan history, download your data first. Once you uninstall the app or delete your account, all data is permanently deleted within 30 days and cannot be recovered.

8.3 Data security

We implement industry-standard security measures:

• Encryption in transit: all communication uses TLS 1.2 or higher (HTTPS)
• Access controls: role-based access control and strong authentication
• Monitoring: continuous security monitoring and regular updates

What we process:

• Theme scan data is processed to produce findings and available as dashboard history and JSON/CSV downloads
• OAuth tokens are used only to authenticate requests to Shopify’s API
• SMS phone numbers are used only to send alert notifications

Data retention: scan results are retained for 7 days (Basic and Pro), as described in Section 4.3 and the Privacy Policy. OAuth tokens and phone numbers are tied to your active installation and settings. We do not request or store Shopify customer checkout data.

Limitations:

• We cannot guarantee 100% security against all possible attacks
• Security depends on your account password strength
• You are responsible for keeping your login credentials confidential

8.4 International data transfer

• Your data is stored in Canada
• Code analysis may be processed in the United States by third-party AI services
• By using Sketch Audit, you consent to this international data transfer
• See the Privacy Policy for full details on AI data processing

8.5 GDPR and CCPA rights

If you are in the EU (GDPR): you have the right to access, correct, delete, or port your data, and to lodge a complaint with your data protection authority. See the Privacy Policy for GDPR-specific information.

If you are in California (CCPA): you have the right to know, delete, and opt out of data sharing. Sketch Audit does not sell personal information. See the Privacy Policy for CCPA-specific information.

9.1 Term

These Terms are effective when you install Sketch Audit and continue for as long as you maintain an active subscription.

9.2 Termination by you

• You may terminate your subscription and these Terms by uninstalling Sketch Audit from your Shopify admin or canceling your subscription in your dashboard
• Termination is effective immediately

9.3 Termination by us

We may terminate your access if:

• You violate these Terms or our Acceptable Use Policy
• You engage in illegal or harmful activity
• Your subscription payment fails and is not resolved within 7 days
• You repeatedly abuse the scanning feature
• We discontinue the App

Termination by us will include a notice period of 30 days unless immediate termination is necessary for legal or security reasons.

9.4 Effect of termination and data deletion

Upon termination or uninstallation:

• Your subscription ends immediately
• Your scan results are deleted within 30 days
• Shopify sends a shop/redact webhook within 48 hours of uninstall
• We delete all shop data within 30 days of receiving the shop/redact webhook (as required by GDPR)
• You may request full data deletion by contacting [email protected]
• You must uninstall the App from Shopify to trigger data deletion

Note: data deletion timing depends on Shopify’s webhook delivery (48 hours after uninstall), not immediate. We comply with all GDPR and CCPA data deletion requirements within legal timeframes.

10.1 How we communicate with you

We may communicate important updates, announcements, and notices to you through:

• In-app notifications — banners or messages in your Sketch Audit dashboard
• Email — sent to your registered account email address
• Shopify admin notifications — messages in your Shopify admin account

10.2 Types of communications

Communications may include:

• Pricing changes or plan updates
• Service updates, maintenance, or downtime notices
• Security alerts or urgent account issues
• Policy changes or Terms of Service updates
• Feature announcements or new capabilities
• Billing and subscription reminders
• Support responses to your inquiries

10.3 Your communication preferences

You can manage your communication preferences in your dashboard Settings, but you cannot opt out of:

• Critical security alerts
• Billing and payment notifications
• Legal notices or Terms of Service changes
• Responses to support requests you initiated

For non-critical announcements, you can adjust notification settings to reduce frequency if available.

11.1 Changes to Terms

We may modify these Terms at any time. Changes will be effective immediately for new users upon installation, and 30 days after notice for existing users. Continued use of Sketch Audit after changes means acceptance.

We will notify you of material changes via:

• Email to your registered account email
• In-app notification in your dashboard

11.2 Changes to the App

• We may add, remove, or modify features at any time
• We may discontinue Sketch Audit with at least 30 days’ notice to merchants with active installations
• We will provide technical support to existing users until the discontinuation date
• We may suspend service without notice for security or legal reasons

12.1 Customer support

• Email support: [email protected]
• Response time: we aim to respond within 48 business hours
• Note: Sketch Audit does not provide email-based support for general questions; we respond to inquiries about billing, technical issues, and account management
• For general questions, see our help documentation at mapleandsketch.com

12.2 Dispute resolution

If a dispute arises:

• Contact us at [email protected] with details
• We will attempt to resolve within 30 days
• If unresolved, either party may pursue legal action

Governing law: these Terms are governed by the laws of Ontario, Canada. You consent to the exclusive jurisdiction of courts in Toronto, Ontario.

Arbitration (optional): either party may elect binding arbitration instead of litigation. Arbitration will be conducted in Toronto, Ontario under Canadian Arbitration Act rules.

13.1 Applicable laws

Sketch Audit complies with:

• Canadian privacy laws (PIPEDA)
• US privacy laws (CCPA, FTC Act)
• EU privacy laws (GDPR)
• Shopify’s Partner Program Agreement
• Shopify App Store Requirements

13.2 Export compliance

Sketch Audit uses US-based AI services. By using Sketch Audit, you acknowledge and comply with all applicable export control laws and sanctions regulations in your jurisdiction.

13.3 Acceptable use

Sketch Audit may not be used:

• To monitor stores you do not own
• To access, scan, or compromise third-party stores
• For any illegal activity
• To bypass security controls or authentication
• To harass, threaten, or abuse other users

14.1 Entire agreement

These Terms, along with the Privacy Policy and Shopify’s terms, constitute the entire agreement between you and Sketch Audit regarding the App.

14.2 Severability

If any provision of these Terms is invalid or unenforceable, the remaining provisions continue in full force.

14.3 Waiver

Failure to enforce any provision does not waive that provision or any other provision.

14.4 Assignment

You may not assign these Terms or your rights under them. Sketch Audit may assign these Terms to successor organizations.

14.5 Notices

Notices to you will be sent to:

• Your registered email address in your Sketch Audit account
• Your Shopify admin account email

Notices to Sketch Audit should be sent to Legal: [email protected] (subject: “Legal Notice”).

For questions about these Terms, contact:

• Email: [email protected]
• Website: mapleandsketch.com

Sketch Audit is available in two subscription tiers. For current pricing, visit mapleandsketch.com/products/sketch-audit#pricing.

*On-demand usage is subject to fair usage policy (Section 4.4).