API Terms of Service

Effective 30 September 2026

1. Who we are and what these terms cover

These terms apply to the SafeHop Scam-Check API at api.safehop.app (the "API"), provided by SafeHop ("we", "us"). By creating an API key, or by paying for a plan, you ("you", the customer) agree to these terms on behalf of yourself and the organisation you represent. The free SafeHop browser extension and website checker are covered by the Privacy Policy, not by these terms.

2. Your API key

• Keep your key secret. Anyone with your key can use your credits. If it leaks, email [email protected] and we will replace it.
• Use the API from your servers, not from code shipped to end users' browsers or apps.
• One organisation per key. Creating many free trial keys to avoid plan limits is not allowed.

3. Plans, credits and limits

• Each plan includes a number of credits per calendar month (UTC) and a requests-per-minute limit, as listed on the pricing page. A link or message check uses 1 credit; a page scan uses 5.
• Unused credits do not carry over. When the credits run out, requests are refused until the next month or until you upgrade.
• We may change prices or plans with at least 30 days' notice by email. A change never applies to a month you have already paid for.

4. Payment, renewal and cancellation

• Paid plans are billed monthly in US dollars, in advance, through our payment processor Razorpay. Your plan renews automatically each month until you cancel.
• You can cancel at any time on your account page. Your plan stays active until the end of the month you have paid for, then returns to the free trial plan. We don't charge you again after cancelling.
• If a renewal payment fails, the payment processor will retry. If it still fails, your key returns to the free trial plan.
• Payments are not refundable for partial months, except where the law requires a refund or where the API was unavailable for a significant part of the month because of a fault on our side; in that case, email us within 30 days and we will refund that month.
• Prices do not include taxes that may apply in your country; where we are required to charge tax, it will be shown before you pay.

5. What the results mean

The API gives an automated risk assessment ("safe", "suspicious" or "dangerous") with the reasons behind it. Scams change constantly: no service can detect every scam, and a legitimate site can occasionally be rated suspicious. Results are provided "as is", without a guarantee that they are complete or correct. You decide how to use them in your product, and you are responsible for the decisions your product makes. Don't present a "safe" result to your users as a guarantee that something is safe.

6. Acceptable use

You must not use the API to:

• build, test or improve scams, phishing, malware or ways to avoid detection;
• attack, overload or scan websites you are not allowed to (page scans are for checking suspected scams, not for crawling);
• resell or publish the raw results as a competing list or feed without a written agreement;
• send personal data that is not needed for the check (send the link or message, not customer names, account numbers or passwords);
• break the law, or get around rate limits or credit limits.

We may suspend a key that breaks these rules, or that puts the service or others at risk. Where possible, we will contact you first.

7. Your data

• Links, messages and pages you send are checked and then discarded. We do not store or log them, and we don't use them for advertising or to train anything.
• We keep your organisation name, contact email, plan, subscription and payment status, and how many credits you use each month, to run your account and for accounting.
• Card and payment details are handled by Razorpay; we never see or store card numbers.
• If a page scan finds a hidden scam loader, the scam site's address may be added to SafeHop's blocklist so that all SafeHop users are protected. Nothing about you or your users is shared.
• More details: Privacy Policy.

8. Availability and changes

We aim to keep the API available and fast but do not guarantee uninterrupted service. We may improve detection, add fields to responses or retire an endpoint; for breaking changes we will give at least 30 days' notice by email.

9. Liability

To the maximum extent permitted by law, we are not liable for indirect or consequential losses, including losses caused by a scam that the API did not detect or by a legitimate site that was rated suspicious. Our total liability for any claim relating to the API is limited to the amount you paid us in the 3 months before the claim. Nothing in these terms limits liability that cannot be limited by law.

10. Ending these terms

You can stop using the API and cancel at any time. We may end these terms with 30 days' notice, or immediately if you seriously break them. Sections 5, 7 and 9 continue to apply after the terms end.

11. Law and contact

These terms are governed by the laws of India. If a dispute arises, please email us first; most issues can be solved quickly. Questions: [email protected].