Terms of Service

Last updated: October 20, 2026

1. Acceptance of Terms

CertNotify ("the Service") at certnotify.com is a product operated by Mallah Software Services Private Limited, a company incorporated in India ("we", "us", "our"). By accessing or using the Service, you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, do not use the Service. These Terms constitute a binding legal agreement between you and Mallah Software Services Private Limited.

2. Description of Service

The Service provides security monitoring across your external infrastructure and your code, including SSL/TLS certificate monitoring, domain expiry tracking, TLS configuration auditing, DNS and DNSSEC health checking, email authentication (SPF, DKIM, DMARC) validation, security header and open-port analysis, and scanning of submitted code for hardcoded secrets, vulnerable dependencies and infrastructure-as-code misconfigurations. The Service includes both free and paid subscription tiers. Features and limits vary by subscription plan as described on our Pricing page.

3. Account Registration

Features beyond the free public tools require an account. You may register with an email address and password, or sign in with a valid Google account. You are responsible for maintaining the security of your credentials and for all activity that occurs under your CertNotify account. You must notify us immediately of any unauthorized use at support@certnotify.com.

You must be at least 16 years old to create an account. By creating an account, you represent that you meet this age requirement.

4. Acceptable Use

You agree not to:

  • Use the Service to monitor domains you do not own or have authorization to monitor
  • Attempt to bypass rate limits, access restrictions, or authentication mechanisms
  • Use the Service to conduct automated scans at a volume that degrades service for other users
  • Reverse engineer, decompile, or attempt to extract source code from the Service
  • Use the Service for any illegal purpose or in violation of any applicable laws
  • Transmit malware, viruses, or other malicious code through the Service
  • Misrepresent your identity or affiliation with any organization
  • Submit code, configuration or manifests to our scanning tools that you do not own or have authorization to submit

5. Code and Configuration You Submit

Some features let you paste source code, dependency manifests, or infrastructure-as-code configuration for analysis. You retain all ownership of the content you submit, and you grant us a limited licence to process it solely to produce your scan results.

We do not store the code you paste. It is analysed in memory to generate the result and then discarded. Where you save a scan as a dashboard asset, we store only the resulting findings and summary counts — never the submitted content itself — so that a later scan can be compared against them. We do not use your submitted content to train models and we do not disclose it to other users.

Do not paste secrets, private keys, or credentials that are still live — rotate anything the scanner reports as exposed. Saved findings persist until you delete the asset or your account.

6. Subscription and Payment

Paid plans. Pro and Business are sold online as subscriptions, billed in advance monthly or yearly at the price shown at checkout. Payments are processed by our payment partner, Cashfree Payments; we do not receive or store your card or bank details. Subscriptions are charged in Indian rupees (INR) or US dollars (USD). Prices on our Pricing page in other currencies are a guide.

Automatic renewal. By subscribing you authorise us, through Cashfree, to charge the same amount at the start of each billing period until you cancel. Your bank or UPI app notifies you before each renewal is debited. If we change the price of a plan, the new price applies to your subscription only after we have told you by email and you have agreed to it.

Cancellation. You may cancel at any time in Settings, or by revoking the mandate with your bank or UPI app. Cancelling stops future charges immediately. Your plan stays active until the end of the period already paid for, and the account then moves to the Free plan.

Refunds. Subscription payments are non-refundable, including for unused time and partial periods. Charges made in error, such as a duplicate charge or a charge after cancellation, are refunded in full. See our Refund Policy.

Failed payments. If a renewal cannot be collected, your plan continues for a short grace period while payment is retried, after which the account moves to the Free plan.

Free Pro trial. Each account may activate one 14-day Pro trial, once. It requires no payment method. When the trial ends your account returns to the Free plan automatically — there is nothing to cancel and nothing will be billed. Domains you added during the trial are retained and continue to be monitored, but you cannot add another domain until you are back within the Free plan's limit.

Enterprise is arranged directly with Mallah Software Services Private Limited. Its price, currency, billing period and refund terms are agreed in writing before any payment is taken.

7. Service Availability

We strive to maintain high availability but do not guarantee uninterrupted or error-free operation. CertNotify is provided "as is" without warranty of any kind, express or implied. We are not liable for damages resulting from service interruptions, monitoring failures, or missed alerts.

8. Limitation of Liability

To the maximum extent permitted by law, Mallah Software Services Private Limited shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the Service, including but not limited to: website downtime caused by SSL certificate expiry, data loss, loss of revenue, or any security issue that our scanning did not detect. Our total liability for any claim shall not exceed the amount you paid us in the 12 months preceding the claim.

9. Intellectual Property

The CertNotify platform, including all software, designs, text, and trademarks, is the intellectual property of Mallah Software Services Private Limited. You may not copy, reproduce, or distribute any part of the Service without prior written permission, except for personal, non-commercial use of the public tools.

10. Termination

We reserve the right to suspend or terminate your account immediately if you violate these Terms. Upon termination, your right to use the Service ceases immediately. You may ask us to delete your account at any time, from Settings or the contact page; the Privacy Policy says how long deletion takes.

11. Governing Law

These Terms are governed by the laws of India, without regard to conflict of law principles. Any disputes shall be subject to the exclusive jurisdiction of the courts of India.

12. Contact

For questions about these Terms: legal@certnotify.com

Mallah Software Services Private Limited, operator of CertNotify, incorporated in India. Registered office: Plot No. 347, Flat No. 301, Status-2 CHSL, Santacruz (East), Mumbai 400055, Maharashtra, India.