Terms of Service

Last updated: 2026-10-03

Who we are

Scrutyn is operated by Cloud Manager SRL (Trade Register J2022002716130, CUI RO46566106), with its registered office at Str. S3, No. 16, Năvodari, Constanța County, Romania ("we", "us"). These Terms of Service ("Terms") are the agreement between you and us for using Scrutyn: the package registry at registry.scrutyn.com, the MCP server at mcp.scrutyn.com, the website and dashboard at scrutyn.com, the scrutyn command-line tool and our agent integrations (together, the "Service").

By creating an account or using the Service you accept these Terms. If you use the Service for an organisation, you confirm that you may bind it, and "you" includes that organisation.

What the Service does

Scrutyn is a hosted registry for npm and PyPI packages. Your package managers fetch packages from us instead of from the public registries. We fetch each package from the public registry, scan it with several open-source scanners (and, where they disagree, an AI judge), hold new versions in the Lazaretto, our quarantine, for a period you choose, and serve you our own verified copy. We record which packages each of your devices installs in an install ledger, and we alert you (a "recall") if a package you installed is later found to be malicious.

Private beta and beta access requests

Scrutyn is in a private beta today. Until it opens to the public, you can ask for access with the form on our website.

• A request does not give you access to the beta, and it does not create an account or a contract for the Service. We decide whether and when to offer access, in small groups, and we may decline or close a request.
• If we offer you access, these Terms apply from when you accept the offer and start using the Service.
• During the beta the Service may be incomplete, may change or be interrupted, and may be withdrawn, with or without notice. Do not rely on it as your only protection.
• Our Privacy Policy explains what we do with the data in your request. Product updates are a separate, optional choice that never affects your request.

Public beta

The Service launches as a public beta. We may add, change or remove features. When a change materially reduces a paid feature, we give reasonable notice first. Paid features are provided as described on the pricing page at the time you pay.

What the Service does not promise

Scanning reduces risk; it does not eliminate it. No scanner, quarantine or AI model catches every malicious package, and some safe packages may be held or blocked by mistake. You remain responsible for the software you install and run, for reviewing a held or blocked package before you override our decision, and for your own backups and security practices. The Service does not replace your own review of licences or vulnerabilities.

Accounts, devices and tokens

• You need an account to use the registry. Give accurate information and keep your sign-in method secure.
• Each device gets its own access token (prefix scr_live_). One token protects one device. Do not share a token between devices or people, and never commit it to a repository; our setup reads it from the SCRUTYN_TOKEN environment variable for this reason.
• Your plan sets how many devices you can connect. We enforce the limit and tell you how to upgrade when you reach it.
• Tell us promptly at security@scrutyn.com if you believe a token or your account has been compromised. You can revoke any token in the dashboard.

Plans, trials and the founding member offer

• Current plans and prices are on our pricing page. Prices are in US dollars and exclude taxes, which are added at checkout where they apply.
• Trials. Some offers include a free trial of Pro for 14 days. Unless you cancel before the trial ends, the subscription starts and you are charged when the trial ends. We remind you by email before that happens.
• Founding member. The founding member offer is a one-time payment of $199 for the Pro plan with 3 devices for the life of the Service, limited to the first 500 accounts. "Life of the Service" means for as long as we operate Scrutyn as a hosted service; if we shut it down, we give at least 90 days' notice. The offer belongs to the account that bought it, is subject to the fair use rules in our Acceptable Use Policy, and cannot be transferred or resold.
• Team plans are billed per seat, with a minimum of 2 seats.

Payment

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns.

Paddle's Buyer Terms also apply to your purchase. Subscriptions renew automatically at the end of each billing period until cancelled. Paddle charges your payment method and issues invoices and receipts. We may change prices for future billing periods with at least 30 days' notice by email; a change never affects a period you have already paid for.

Cancellation, failed payments and refunds

• You can cancel a subscription at any time in the dashboard or through the link in your Paddle receipt. Cancelling stops renewal; you keep paid features until the end of the current period.
• If a renewal payment fails, you keep your plan for a 7-day grace period while Paddle retries. After that your account moves to the Free plan. Devices above the Free limit are suspended, not deleted, and come back when you upgrade.
• Refunds follow our Refund Policy: every payment has a 30-day money-back guarantee.

Acceptable use

You must follow our Acceptable Use Policy. We may limit or suspend access that breaks it, as described there.

Your data

• Our Privacy Policy explains what personal data we process and why, and our Cookie Policy lists what the website stores and loads.
• For Team accounts, and for any business customer that asks, our Data Processing Agreement applies to the personal data we process on your behalf. It forms part of these Terms.
• You own your data. You can export your install ledger (Team) and delete your account at any time.
• Verdicts, scan results and other information we produce about public packages are ours. We may publish them, for example on public package pages and our public feed, without any information that identifies you or your devices.

Our intellectual property and open source

We own the Service and its content, except for open-source components, which remain under their own licences. We give you a limited, non-exclusive, non-transferable right to use the Service under these Terms while your account is active. The scrutyn command-line tool and our agent integrations are licensed under the licence shipped with them. Packages we serve remain under their authors' licences, and we never modify them.

If you send us feedback, we may use it without any obligation to you.

Availability

We aim for the registry to be available at least 99.9% of each month. If we make a public status page available, we will publish live status there. This is a target, not a service-level guarantee with credits, unless a separate written agreement says otherwise. If our scanning is unavailable, we serve only versions that already have a clean verdict. If a public registry is unavailable, we serve our stored copies.

Suspension and termination

You can stop using the Service and delete your account at any time. We may suspend or terminate your access if you materially break these Terms or the Acceptable Use Policy, if the law requires it, or to protect the Service or others from harm. Where it is reasonable, we give notice and a chance to fix the problem first. If we terminate your account without cause, we refund the unused part of any prepaid fees; for the founding member payment, the unused part is calculated over five years from the purchase.

Disclaimers

Except as these Terms expressly say, and to the extent the law allows, the Service is provided "as is" and "as available", without warranties of any kind, including merchantability, fitness for a particular purpose and non-infringement. Nothing in these Terms limits rights you have as a consumer that the law does not allow a contract to limit.

Limitation of liability

To the extent the law allows:

• neither party is liable for indirect, incidental, special or consequential damages, or for lost profits, revenue or data;
• our total liability for all claims relating to the Service in any 12-month period is limited to the greater of the amount you paid for the Service in that period and 100 US dollars.

These limits do not apply to liability that the law does not allow to be limited, including liability for death or personal injury caused by negligence, for fraud, or for gross negligence or wilful misconduct.

Indemnity

If you use the Service for a business, you will defend and indemnify us against third-party claims arising from your breach of these Terms or the Acceptable Use Policy.

Governing law and disputes

These Terms are governed by the law of Romania, and disputes go to the competent courts of Romania for the registered office of Cloud Manager SRL. If you are a consumer, you also keep the protection of the mandatory laws of the country where you live and may bring claims in your local courts.

Changes to these Terms

We may update these Terms. For material changes we give at least 30 days' notice by email or in the dashboard before they take effect. The date at the top shows the current version. If you keep using the Service after a change takes effect, the new Terms apply. If you do not agree, you can cancel before then and ask for a refund of the unused part of a prepaid period.

Contact

Questions about these Terms: support@scrutyn.com. You can also write to Cloud Manager SRL, Str. S3, No. 16, Năvodari, Constanța County, Romania. See also our contact page.