Terms of Service

1. What Fix Pixies does

Fix Pixies provides automated compliance auditing for web products. The service visits a URL you submit, collects publicly available technical evidence using a headless browser, and uses an AI model to evaluate that evidence against compliance frameworks including GDPR, CCPA, WCAG 2.2, CAN-SPAM, and others.

The result is an audit report covering what is visible from the outside of your product — primarily your frontend and network behaviour. Deeper analysis (codebase, infrastructure, internal data flows) is available through a separate deep compliance check engagement.

By using Fix Pixies — submitting a URL, entering your email, or requesting a deep check — you agree to these terms.

2. Acceptable use

You must not use Fix Pixies to:

• Audit websites belonging to third parties without their authorisation
• Probe or scan internal, private, or non-publicly accessible addresses (the service blocks these automatically, but the restriction is yours to respect regardless)
• Circumvent rate limits, authentication, or security controls of third-party services
• Submit URLs that contain, direct to, or serve malicious content
• Use the service to facilitate harassment, fraud, or any unlawful activity

We reserve the right to refuse or terminate audits that appear to violate these rules, without notice or refund.

3. Authenticated audits & credentials

The free audit includes an optional authenticated mode. If you provide a login and password, these are loaded into an isolated browser session to access pages behind a login wall on your product. The credentials are used solely for this purpose and are not stored anywhere after the session ends.

You are responsible for ensuring that any credentials you provide are ones you are authorised to use for testing. Do not provide production admin credentials — use a test account if possible.

Fix Pixies transmits credentials over HTTPS only. We do not log or store them.

4. Scope and accuracy of results

What the free audit covers

The free audit is browser-based. It sees what any browser sees when visiting your URL: HTTP response headers, cookies, page DOM, external scripts, forms, images, accessibility signals, and network requests. It does not access your source code, database, backend logic, infrastructure configuration, or internal documentation.

Codebase estimates

The audit report includes a "Codebase" section. Items in this section are estimates inferred from browser-visible signals, not direct code analysis. They represent what we can reasonably deduce from the outside. They may be incomplete or incorrect. The deep compliance check is required for verified codebase findings.

AI analysis

Compliance verdicts are generated by an AI model analysing the evidence collected by the browser. AI analysis is probabilistic. It can be wrong. Results should be reviewed critically and verified by a human who understands your product.

Result storage

Audit results are not stored in a database. They are returned to your browser session only. However, when you enter your email address to unlock the full report, the audit results are forwarded to us as an internal notification email and retained in our inbox for product improvement purposes. See our Privacy Policy for details.

5. Not legal advice

Fix Pixies is a technical tool. Nothing produced by Fix Pixies — audit reports, certificates, recommendations, checklist results, or any other output — constitutes legal advice.

Compliance with GDPR, CCPA, WCAG, SOC 2, ISO 27001, or any other regulation is a legal determination. If you need a legal opinion on your compliance obligations, consult a qualified lawyer. Fix Pixies can help you understand the technical gaps — it cannot tell you what your legal obligations are in your specific jurisdiction, with your specific product, to your specific users.

6. Third-party processing

OpenAI — AI analysis

Fix Pixies uses OpenAI's models to analyse audit evidence. When you submit a URL for auditing, the publicly visible content of that URL (headers, cookies, DOM, scripts, body text) is sent to OpenAI for processing.

By submitting a URL, you acknowledge and agree that the public-facing content of that URL will be processed by OpenAI. You should not submit URLs for pages that contain or expose sensitive personal data that you do not want processed by a third party.

OpenAI's terms and privacy policy apply to their processing of this data: openai.com/policies.

Google Analytics — website analytics

Fix Pixies uses Google Analytics (Google LLC, USA) to understand how visitors use this website. Google Analytics is loaded only after you explicitly accept analytics cookies via the cookie consent banner shown on your first visit. If you decline or ignore the banner, no Google Analytics cookies or scripts are activated.

When active, Google Analytics collects anonymised usage data (pages visited, session duration, referral source, approximate geographic location). No personal data, audit results, or submitted URLs are sent to Google Analytics.

You can withdraw consent at any time using the "Manage preferences" link in the cookie banner at the bottom of the page. Google's privacy policy applies: policies.google.com/privacy.

7. Intellectual property

The Fix Pixies service, including its software, audit methodology, checklist framework, and website, is the intellectual property of Fix Pixies. You may not copy, reproduce, reverse-engineer, or create derivative works from any part of the service without written permission.

The audit reports produced for your product are yours. You can use them internally, share them with customers or investors, or use them as the basis for remediation work.

8. No warranties

The service is provided "as is" and "as available". Fix Pixies makes no warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, accuracy, completeness, or non-infringement.

We do not warrant that:

• Audit results are accurate, complete, or current
• The service will be uninterrupted or error-free
• Implementing our recommendations will bring your product into legal compliance
• The service will detect all compliance issues present in your product

9. Limitation of liability

To the maximum extent permitted by applicable law, Fix Pixies and its operators shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of — or inability to use — the service.

This includes, without limitation, damages resulting from:

• Reliance on audit results that later prove to be inaccurate or incomplete
• Regulatory fines, penalties, or enforcement actions against your product
• Data breaches, security incidents, or third-party claims related to your product
• Service downtime or unavailability

Our total liability for any claim arising from the service is limited to the amount you paid us in the three months preceding the claim. For users of the free tier, this means our liability is zero.

Nothing in these terms limits liability for fraud, gross negligence, or death or personal injury caused by our negligence, where such limitation is prohibited by law (including Finnish consumer protection law).

10. Changes to the service and these terms

Fix Pixies is in active development. Features, pricing, and availability may change at any time. We will try to give reasonable notice of significant changes but are not obligated to do so for a free service.

We may update these terms at any time. The effective date at the top of this page reflects the latest revision. Continued use of the service after a change constitutes acceptance of the updated terms.

11. Governing law

These terms are governed by the laws of Finland. Any disputes shall be resolved in the competent courts of Finland, unless mandatory consumer protection law in your country of residence provides otherwise.

12. Contact

Questions about these terms:
fixpixies@gmail.com