Terms of Service & License Agreement
This Master Terms of Service Agreement ("Agreement") governs your access to and use of PrivacyScrubber across all four operational environments: the In-Browser Web Workspace, the Manifest V3 Chrome Extension, the PII MCP Server (@privacyscrubber/mcp-server), and the Developer SDK (@privacyscrubber/sdk).
Zero raw data intake or cloud storage
Web, Extension, MCP Server & SDK
Paddle.com (MoR) & PayPal Zero-Server
Full protection on all PRO & TEAMS plans
1. Scope of Agreement & Zero-Server Operating Model
PrivacyScrubber operates exclusively as an endpoint-executed sanitization software utility. By loading privacyscrubber.com, installing the Chrome Extension, launching the MCP Server daemon, or importing the Developer SDK, you acknowledge and agree that all data processing occurs entirely within your local device's memory.
PrivacyScrubber maintains zero application servers, databases, or cloud proxies to receive, inspect, or log your confidential inputs. Consequently, PrivacyScrubber does not act as a custodian, processor, or transmitter of your raw data.
2. License Grants, Editions & Permitted Use
Subject to your compliance with this Agreement and timely payment of applicable fees, PrivacyScrubber grants you a worldwide, non-exclusive, non-transferable license to use the software under the following tier designations:
Granted for personal, educational, and evaluation purposes. Limited to single-snippet web workspace sanitization and core general detection profiles.
Single-user commercial license. Unlocks all 24+ specialized industry profiles, batch document OCR (PDF, Word, Excel, CSV), custom regex rulesets, and Chrome Extension MV3 shield.
Multi-seat enterprise license. Unlocks centralized dashboard synchronization, encrypted session handoffs, full PII MCP Server access, developer SDK distribution, and priority SLA.
3. Offline Verification & Air-Gapped Deployment Rights
PrivacyScrubber does not utilize phone-home Digital Rights Management (DRM) or heartbeat telemetry. License keys for PRO, TEAMS, and ENTERPRISE tiers are cryptographically verified in-memory using asymmetric JWT signatures.
4. Billing, Merchant of Record (Paddle) & PayPal Payments
All financial transactions for PrivacyScrubber are processed through certified, PCI-DSS Level 1 compliant financial infrastructure:
- Paddle.com (Merchant of Record):Paddle.com Market Ltd acts as our Merchant of Record for credit/debit card transactions and recurring subscriptions. Paddle manages global sales tax, VAT calculation, invoicing, and customer billing support.
- PayPal Direct:PayPal transactions are executed via direct zero-server capture. Payment authorization occurs entirely within the PayPal SDK window.
- TEAMS Subscriptions & Cancellations:Recurring TEAMS subscriptions ($99/mo) can be cancelled at any time via the self-service billing portal or PayPal settings. Cancellations take effect at the conclusion of the current prepaid billing cycle.
5. Ephemeral Memory Lifecycle & Cryptographic Reversibility
The translation dictionary linking real PII entities to synthetic tokens (the SessionMap) exists solely in volatile random-access memory (RAM).
Reloading or closing your browser tab permanently purges the in-memory translation map. Reversal of masked tokens back to original values cannot occur without an active session or a user-saved encrypted session file.
Exported .pssession files are encrypted client-side using XChaCha20-Poly1305 and Argon2id. You are solely responsible for safeguarding your session passwords.
6. Data Processing Agreements (DPA) & Non-Processor Status
Under global privacy frameworks (including GDPR Article 28, UK GDPR, and CCPA/CPRA), PrivacyScrubber does not act as a "Data Processor", "Service Provider", or "Business Associate" because our infrastructure never ingests, transmits, or stores your personal data.
Your enterprise maintains exclusive, sovereign custody of all customer data as the sole Data Controller. For formal procurement documentation, review our dedicated Zero DPA Guidance Memorandum.
7. Host Security, Third-Party Extensions & User Responsibilities
Because PrivacyScrubber executes on your local workstation, you are responsible for maintaining basic endpoint security hygiene:
- Ensure workstations are free of malware, keyloggers, and unapproved screen-capture utilities.
- Audit installed third-party browser extensions that possess broad DOM read permissions.
- Review visual highlight badges in the interface before copying text into third-party AI interfaces.
8. Warranty Disclaimers & Limitation of Liability
PRIVACYSCRUBBER IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED. WHILE OUR DETECTION ENGINES ARE RIGOROUSLY BENCHMARKED ACROSS 24+ INDUSTRY PROFILES, WE DO NOT GUARANTEE THAT AUTOMATED NER OR REGEX PATTERNS WILL CAPTURE 100% OF UNUSUAL OR OBFUSCATED PROPRIETARY STRINGS.
IN NO EVENT SHALL PRIVACYSCRUBBER, BRANDMEWEB, OR ITS OFFICERS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE TRANSMISSION OF DATA TO THIRD-PARTY ARTIFICIAL INTELLIGENCE PLATFORMS (INCLUDING OPENAI, ANTHROPIC, OR GOOGLE) OUTSIDE OUR APPLICATION BOUNDARY.
9. Governing Law, Severability & Revision Log
This Agreement shall be governed by and construed in accordance with applicable commercial laws. For enterprise licensing disputes, parties agree to first seek informal dispute resolution via written notice to legal@privacyscrubber.com.
