Terms

What Locksoup does

Locksoup connects to a Supabase project through a read-only login that you create, reads how the database is set up (tables, policies, functions, grants), and reports settings that could let other people read or change your data. It suggests SQL to fix what it finds.

Locksoup never changes your database. The fix SQL is text for you to review and run yourself.

Your account

Use a real email address and keep your password to yourself. You are responsible for what happens under your account. You must be at least 18.

Projects you may connect

Connect only projects that you own or are authorized to audit. You confirm this each time you add a project.

Connect with the read-only sentinel_auditor role from the setup step. Never give Locksoup the postgres login or a service-role key.

What the results are, and are not

Locksoup uses automated checks and an AI model. It can miss real problems and it can flag things that are fine. A clean report is not a guarantee that your database is secure.

Suggested SQL can be wrong for your application. Read it, test it, and take a backup before you run it. Your database, and the decisions about it, stay your responsibility.

AI processing

To analyze a project, Locksoup sends its schema metadata (names, policies, function bodies, grants) to a third-party AI provider. Table rows are not sent. You agree to this when you connect a project. The Privacy page has the details.

Plans and limits

Each plan has limits on projects, checks per day and features. Your current limits are shown at the top of every signed-in page and on your profile. Limits can change; if a change reduces what you have, we will tell you first.

Promo access comes from a signup link, lasts for the stated number of days, applies once per person and only to new accounts. A promo link can be stopped at any time; access already granted runs to its end date.

Paid billing is not open yet. When it opens, Pro will be a monthly subscription that renews until you cancel. If you cancel, Pro runs to the end of the paid period and the account then moves to Free.

When an account moves to Free, daily checks become weekly, email alerts stop, and only your oldest projects within the Free limit keep a schedule. No project or report is deleted.

Acceptable use

• Don’t connect databases you have no right to audit.
• Don’t create extra accounts to get around limits or to reuse a promo.
• Don’t probe, overload or try to break the service or other people’s accounts.
• Don’t resell the hosted service without written permission.

Your data

You can download your data, delete a project, or delete your account from the app at any time. Deleting an account removes the account, its projects, saved logins and reports immediately and cannot be undone.

Availability

Locksoup is an early product, provided as is and as available. It may be slow, interrupted or changed. Scheduled checks can run late or be skipped. Don’t rely on Locksoup as your only security control.

Liability

To the extent the law allows, Locksoup is provided without warranties of any kind, including any warranty that it detects every issue.

To the extent the law allows, Paarth Jha is not liable for indirect or consequential loss, lost data, lost profit, or a security incident in your systems, and total liability for any claim is limited to the fees you paid in the 12 months before the claim. Nothing here limits liability that cannot be limited by law.

Suspension and ending

You can stop using Locksoup and delete your account at any time. We may suspend or close an account that breaks these terms or puts the service or other users at risk.

Open source

The audit engine is open source and available under its own licences. These terms cover the hosted service only.

Changes to these terms

When these terms change, the date at the top changes. For changes that matter, we will tell you in the app or by email before they apply. Using Locksoup after that means you accept them.

Governing law

These terms are governed by the laws of India, and the courts of India have jurisdiction over disputes about them.

Contact

Questions or requests: hello@locksoup.com.