Terms of use

Version 2026-09-27 · These terms are between you (and the company you sign up for) and GateClash ("we"), Singapore.

1. What GateClash does

GateClash runs automated, non-destructive health checks on websites and phone app files that you own, and explains what it finds in plain English. It also offers a readiness quiz and reports to help you prepare for CSA's Cyber Essentials mark and meet your obligations under Singapore's Personal Data Protection Act (PDPA).

What it is not. GateClash is not a penetration test, an audit, a certification or a guarantee. Automated checks can miss problems and can occasionally report something that isn't a real problem. A good result does not mean your systems cannot be attacked. Cyber Essentials certification can only be granted by a CSA-appointed certification body.

2. Only check what you own

• You may only add websites and apps that your company owns or runs, or that you have the owner's written permission to have checked.
• Before we check a website, you must prove you control it (for example with a DNS record or a file on the site). For phone apps, you confirm ownership when you add them. We keep a record of these confirmations.
• Checking systems without permission can be an offence under Singapore's Computer Misuse Act 1993. If we believe GateClash is being used to check something without permission, we will stop the checks, may suspend the account, and may share information with the owner of that system or the authorities.
• If you give us a test account for behind-the-login checks, it must be a test account created for this purpose — never a real person's or an administrator's account.

3. How checks behave

Checks are designed to be gentle: they identify themselves as "GateClash-Scanner", limit how fast they send requests and only contact the website you verified. Most checks only look. The deeper checks (the Web weakness scan and the Behind-the-login scan) safely try out common attacks, the way a careful security tester would: for example, they may send test entries through your website's forms. They never try to take over or damage your website, but you may see test entries or extra log records afterwards. Even so, any check adds some traffic. You should tell your web host or developer that you use GateClash, and you can pause or cancel checks at any time.

4. Your account and team

• Give accurate details, keep your password safe and switch on two-step sign-in. Tell us straight away if you think your account has been misused.
• The Owner of each company is responsible for the people they invite and the roles they give them.
• You're responsible for what happens under your company's account, and for how you use the results.

5. Plans, payment and cancelling

• Prices are in Singapore dollars and shown on the pricing page. Paid plans renew automatically each month or year until cancelled.
• Upgrades start straight away. We take off the unused part of what you already paid for your current plan.
• Downgrades and cancellations take effect at the end of the period you've paid for. You keep everything until then and can undo the change before it happens.
• Except where the law requires otherwise, payments are not refundable for part-used periods. If money reaches us for an invoice that was cancelled or had expired, we refund it.
• If a renewal payment fails, we email you a pay link and keep the plan working for 7 days. After that the company moves to the Free plan. Nothing is deleted when you move to a smaller plan; websites or apps over the new limit are paused.
• We'll give at least 30 days' notice by email before changing the price of your plan. The new price applies from your next renewal after that.
• Card payments are handled by our payment provider. GateClash never sees or stores your full card number.

6. Your information

Your company owns its data: the websites and apps you add, check results, quiz answers and reports. We use it only to provide GateClash to you, as explained in our privacy policy. You can download everything (Company settings → Export all data) and delete your company or account at any time; deletion is final after 14 days.

7. Fair use

Don't try to get around plan limits or security controls, use GateClash to harm others, overload it, copy or resell it, or use it to build a competing service. Share-report links are for the people you choose to send them to.

8. Availability and changes

We work to keep GateClash available and accurate, but it's provided "as is" and "as available". We may improve, change or remove checks and features. If we remove something important from a paid plan, we'll tell you in advance and you may cancel.

9. Liability

To the extent the law allows: we are not responsible for indirect or consequential losses (such as lost profits, lost data or business interruption), or for security incidents that GateClash did not detect; and our total liability to you for any claim is limited to the amount you paid GateClash in the 12 months before the claim. Nothing in these terms limits liability that cannot be limited by law.

10. Suspension and ending

You can stop using GateClash at any time. We may suspend or close an account that breaks these terms, puts others at risk or has an overdue payment, and we'll tell you why unless the law prevents it.

11. Changes to these terms

If we change these terms we'll update the version above and ask you to accept the new version the next time you sign in. Important changes will also be emailed at least 14 days ahead.

12. Law

These terms are governed by the laws of Singapore, and the courts of Singapore have jurisdiction.

13. Contact

Questions: support@gateclash.com. Personal data questions: privacy@gateclash.com.