Terms of Service · signupbouncer

Who we are

These terms are a contract between you and Final Dynamics LLC, a Pennsylvania limited liability company doing business as SignupBouncer ("SignupBouncer", "we", "us"). They cover the website at signupbouncer.com, the API, the Supabase hook, the MCP server, the dashboard and the burner-domain feed (together, "the service").

Postal address: c/o Northwest Registered Agent, LLC, 502 W 7th St, Ste 100, Erie, PA 16502-1333, USA. Email: support@signupbouncer.com.

By creating an account or using the service, you agree to these terms. If you accept them for a company or other organisation, you confirm that you have the authority to bind it, and "you" means that organisation. Our Privacy Policy explains what we collect and how long we keep it.

Accounts

The service is for businesses and developers who check signups to apps they run. You must be 18 or older to create an account.
Give us an email address you read. We send account, security and billing notices to it, and a notice we send there counts as delivered.
The person who creates the account is its owner. On the Scale plan the owner can invite team members. The owner is responsible for what team members do with the account.
Keep your password safe. If you think someone else has used your account, change the password and email support@signupbouncer.com at once.

The service and its limits

For each signup you send, the service returns a result (allow, challenge or block), a score and the reasons for it, based on the email address, the IP address and the data we hold at that moment.
A result is a signal and can be wrong. A real person can be scored as a throwaway signup, and a throwaway signup can pass. We do not promise that the service will stop every fake signup, or that it will never block a real person.
You decide what happens to each signup, through your app's settings (shadow or enforce mode, score thresholds, overrides) or your own code. A new app starts in shadow mode, which blocks nothing.
Our data changes every hour as we add new burner domains and remove wrong ones, so the same address can get a different result on another day.
The Supabase hook goes through a Cloudflare Worker. When our server hits an error, is down or takes longer than 1.5 seconds to answer, the Worker answers allow and the signup goes through unchecked. If Cloudflare fails, or Supabase cannot reach the Worker, Supabase refuses the signup, as it does for any hook that fails. When you call the API, your code decides what happens when a call fails or times out.
Past your plan's monthly allowance, or past your cap on extra checks, signups are let through unchecked, as the billing rules say.
We offer no service level agreement and no uptime guarantee. The current state of the service is on our status page.
We may change, add or remove features. Before we remove a feature of a paid plan, we email account owners on that plan at least 30 days ahead, and you may cancel.

Acceptable use

You must not:

use the service for anything unlawful.
send us personal data you have no right or lawful basis to send.
send us data the service does not ask for. It asks for signup email addresses, IP addresses, user agents and sign-in provider names, plus the settings and overrides you enter. Never send passwords, payment details, government ids or health data.
resell, rent or give others access to the API, the hook or its answers as a service of your own. If you build apps for clients, you may check signups to those apps.
collect our data in bulk through the free checker, the signup audit, the MCP server or the burner pages, or get around their rate limits or your plan's limits, for example by opening extra accounts or rotating IP addresses.
copy or pass on the burner-domain feed beyond what the "Our data" section allows.
probe, scan, load test or attack the service, try to get past its security, or try to reach another customer's data. If you find a security problem, email support@signupbouncer.com.
use the audit's "Email me this report" to send email to people who did not ask for it.

Your end users

The signups you send us belong to your end users, the people who sign up to your app. For that data you are the controller, or you act for one, and we process it for you.
You are responsible for having a lawful basis to send it to us and for telling your end users. Your privacy notice must say that you send signup details (email address, IP address and, if you send it, user agent) to a service provider that checks signups for fraud and abuse.
You decide what happens to a signup we score. Where a law gives your end users rights about decisions made by automated means, such as asking a person to review a refused signup, you provide them.
If one of your end users contacts us about their data, we refer them to you and help you answer.

Processing your end users' data

This section covers the personal data of your end users that we process for you.

We process it only to provide the service to you: to score signups, show you your check log, apply your settings and limits, and count and bill your checks. Your use of the API, the hook and the dashboard settings are your instructions to us. We also count checks, results and response times across all accounts to run and improve the service. Those counts identify none of your end users.
We keep it only for the periods in our Privacy Policy and delete it when you delete your account. Encrypted backups that hold it are deleted within 30 days.
Everyone who can access it is bound to keep it confidential.
We protect it with the measures under Security in our Privacy Policy.
We use the providers listed under Who handles data in our Privacy Policy. We email account owners at least 30 days before we add or replace a provider that handles your end users' data. If you object, you may cancel your plan or delete your account.
We help you answer your end users' requests to see or delete their data, as far as the service allows.
If we learn of a security breach that affects your end users' data, we tell you without undue delay, with what we know.
We answer reasonable written questions about how we process the data, and give you the information you need to show that this section is followed.
Our server is in the United States, so the data is processed there.

Plans and billing

The Free plan needs no card. You buy a paid plan from your dashboard and pay by card through Stripe. We never see your card details. What each plan includes is on the pricing page.

Billing rules

Prices are in US dollars, per account. Checks are pooled across all your apps, and allowances reset on the 1st of each month (UTC).
On monthly plans, checking continues past the allowance. Extra checks cost $2 per 1,000 (0.2 cents each), billed after use on the next monthly invoice.
Extra checks have a monthly cap. By default it is twice the monthly plan price ($38 on the Starter plan, $98 on the Pro plan, $258 on the Scale plan). The account owner can raise or lower it on the dashboard, or set it to $0 for no extra checks. The dashboard shows a notice at 80% of the cap and when it is reached.
Once extra checks reach the cap, signups are let through unchecked until the month ends, and nothing above the cap is billed. Checking resumes only if you raise the cap above the extra checks already made this month. Signups let through unchecked are never billed. If you lower the cap to or below the extra checks already made, extra checks stop at once. Those already made stay billed.
Yearly plans cost 10 months, so 2 months are free. They have no extra checks and are never billed for usage. Over the monthly allowance, signups are let through unchecked until the month ends. For more checks, choose a bigger plan or switch to monthly billing.
Changing plan within the same billing period (monthly to monthly, yearly to yearly) takes effect at once. An upgrade charges the difference for the rest of the period, and a downgrade credits the unused time to your next invoices.
Switching between monthly and yearly starts a new billing period that day. The new period is charged at once, minus a credit for the unused part of the old one, and your billing date moves to that day. Going from monthly to yearly, the extra checks made so far are billed first, on their own invoice, and the switch waits until they have been reported and counted.
Extra checks are counted against the largest allowance you had in the month, so a downgrade keeps the higher allowance until the month ends. Extra checks already reported before an upgrade stay billed.
If a payment fails, your plan stays on while the card is retried, for up to 21 days, then the account moves to the Free plan.
You can cancel any time. Your plan runs to the end of the period you paid for, then the account moves to the Free plan. Nothing more is charged after that, except extra checks already used.
Deleting your account cancels your plan at once. The rest of the period is not refunded, and extra checks already used are billed on a final invoice.
Payments are not refunded automatically. If something went wrong, email support@signupbouncer.com.

Renewal, taxes and price changes

A paid plan renews automatically at the end of each monthly or yearly period, and your card is charged, until you cancel. You cancel, change plan, update your card and download invoices from the dashboard.
Prices do not include taxes. If we must collect sales tax, VAT or a similar tax on your purchase, we add it to the invoice.
We may change prices. We email account owners at least 30 days before a new price applies, and it applies from your first billing period that starts after that.
If you dispute a payment with your bank or card issuer, we cancel the plan at once and the account moves to the Free plan.
You pay for the extra checks made with your API keys and hook secrets, up to your cap, including checks made by someone who got hold of a key or secret of yours.
We may change the Free plan's allowance or features, or end the Free plan, after emailing account owners at least 30 days ahead.

API keys and secrets

API keys and hook secrets give access to your account. Keep them secret and out of public code and public repositories.
We show an API key once, when you create it. We store only a hash of it, so we cannot show it again. If a key leaks, revoke it in the dashboard and create a new one. If a hook secret leaks, rotate it.
You are responsible for the checks made with your keys and hook secrets until you revoke them.
We may revoke a key or rotate a secret that we find in public or see being misused. If we do, we tell the account owner.

Our data and the burner lists

The public burner list. We publish part of our burner-domain list in a public repository. Our own contribution to it is dedicated to the public domain under CC0 1.0, so you may use it for anything. The list also holds data from other open lists, which stays under their own licences. The repository carries their notices.
The burner feed (Scale plan). Each download of the feed lists the open lists it contains and carries their licence notices. Data from those lists stays under their licences. Domains that are also on our public list may be used under CC0. You may use the rest of the feed, which is our own data, to check signups and email addresses in your own products and services. You must not publish it, or sell, license or give it to others as a list or as a data product. If you leave the Scale plan, you may keep using the copies you downloaded, on these same terms.
Results, scores and API answers are for use in your own products under these terms. Do not combine them into a list of domains or addresses to sell or publish.

Ownership and feedback

The service, its software, our data and the site belong to us or our licensors. These terms give you the right to use the service while your account is open. They transfer no ownership.
Your data stays yours. You give us the right to use it to provide the service, as these terms and the Privacy Policy describe.
If you send us ideas or suggestions, we may use them freely and owe you nothing for them.

Confidentiality

Each of us may receive the other's non-public information. For us, that includes your settings, check log and account details. For you, it includes anything we mark as confidential or that is clearly so. Each of us uses the other's confidential information only for these terms, protects it with reasonable care, and shares it only with people and providers who need it and are bound to keep it confidential. This does not cover information that is public through no fault of the receiver, that the receiver already knew, or that the receiver developed without it. Either of us may disclose it when the law requires, after telling the other where the law allows.

Suspension and ending

You may stop using the service at any time. Cancelling a paid plan works as the billing rules say. The account then stays on the Free plan until you delete it.
The account owner can delete the account from the Account tab of the dashboard, or by emailing support@signupbouncer.com from the account's address. Team members cannot delete it. Deleting the account cancels a paid plan at once. The rest of the period is not refunded, and extra checks already used are billed on a final invoice. We then delete your data as the Privacy Policy says. We keep payment records, because tax and accounting law requires them.
We may suspend or limit your account, keys or apps if you break these terms, if your use threatens the security or running of the service or of other customers, or if the law requires it. We tell you why, unless the law or security prevents it, and restore access once the problem is fixed.
We may close your account for a serious or repeated breach of these terms, with notice where we can give it. We may also close your account, or stop offering the service, for any other reason, after emailing you at least 30 days ahead. If we do that and you have not broken these terms, we refund the unused part of any period you paid for.
The sections on our data, ownership, confidentiality, disclaimers, limits of liability, indemnity and law and disputes continue after these terms end, as do any amounts you owe.

Disclaimers

The service is provided "as is" and "as available". To the fullest extent the law allows, we make no warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, accuracy and non-infringement. We do not warrant that the service will be uninterrupted or free of errors, that results will be correct, or that the service will stop fraud or abuse.

Limits of liability

To the fullest extent the law allows, neither you nor we are liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, signups, customers, goodwill or data, even if told they were possible. Our total liability for all claims about the service or these terms is limited to the fees you paid us in the 12 months before the event that gave rise to the claim.

These limits do not reduce what you owe us in fees or under the indemnity below. Where a law does not allow a limit, the limit applies as far as that law allows.

Indemnity

You will defend us against claims by third parties, including your end users and data protection authorities, and pay the damages, fines, costs and reasonable legal fees that result, where the claim arises from your use of the service in breach of these terms, from the data you send us (including data sent without a lawful basis or a privacy notice that covers it), or from what you decide to do with the signups we score. We tell you promptly about such a claim, let you control the defence, and help you as reasonably needed, at your cost.

Changes to these terms

We may change these terms. For a change that reduces your rights or adds to your obligations, we email account owners and post the new terms here at least 30 days before it takes effect. Other changes, such as clearer wording or terms for a new feature, take effect when we post them. The date at the top of this page shows the latest change. If you do not agree to a change, stop using the service and cancel before it takes effect. If you keep using the service after that, you accept the new terms.

Law and disputes

The law of the Commonwealth of Pennsylvania, US, governs these terms and any dispute about them or the service, without regard to its conflict of laws rules. The UN Convention on Contracts for the International Sale of Goods does not apply.
Before starting a claim, email support@signupbouncer.com with what went wrong, and give us 30 days to try to settle it with you.
The state and federal courts located in Pennsylvania have exclusive jurisdiction over any dispute, and you and we consent to them. Either of us may still ask any court for an urgent order to protect intellectual property or confidential information.

General

These terms, with the pages they link to, are the whole agreement between you and us about the service. They replace any earlier terms.
If a court finds part of these terms unenforceable, the rest stays in force.
If we do not enforce a term at once, we can still enforce it later.
You may not transfer these terms without our written consent. We may transfer them to a company that takes over the service or our business, and we tell you when we do.
Neither of us is liable for a delay or failure caused by events beyond reasonable control, such as an outage at a provider we depend on, a natural disaster or a war. This does not excuse paying fees.
You must not use the service if you are located in, or acting for someone in, a country or on a list under United States sanctions.
You and we are independent parties. These terms create no partnership or agency, and no rights for anyone else.
We send notices to the account owner's email address. Send notices to us at support@signupbouncer.com.

Contact

Final Dynamics LLC, doing business as SignupBouncer
c/o Northwest Registered Agent, LLC, 502 W 7th St, Ste 100, Erie, PA 16502-1333, USA
support@signupbouncer.com