Terms of Service

Tidehawk discovers, monitors, and alerts on SSL/TLS certificates and domain registrations across the end-clients of a managed service provider (“MSP”, “you”), and can raise tickets in your connected PSA platform. These terms form the agreement between you and Tidehawk when you create an account.

You must provide accurate signup information and keep credentials secure. You may only monitor domains and infrastructure that you manage or are authorised to monitor. You must not use the service to scan or probe systems without authorisation, resell access without our written agreement, or attempt to circumvent tenant isolation or rate limits.

New accounts receive a 14-day free trial with no card required; at the end of the trial the account becomes read-only for 7 days and is then suspended unless a subscription is started. Paid plans are billed monthly in GBP via Stripe. Plan limits (such as client counts) and any overage charges are described on the pricing page at the time of purchase. You can cancel at any time; service continues to the end of the paid period.

You retain all rights to the data you put into Tidehawk. We process it only to provide the service, as described in the Privacy Policy and the Data Processing Agreement. All customer data is stored and primarily processed in the UK/EU; the third parties that may process it are listed in our sub-processor register, and international transfers are safeguarded as set out there. After cancellation your data is retained for 30 days and then permanently deleted.

We aim for high availability but the service is provided “as is” without a guaranteed uptime level on standard plans. Monitoring depends on third-party sources (Certificate Transparency logs, WHOIS/RDAP registries, your PSA’s API) whose availability we do not control. Alerts are an aid, not a substitute for your own renewal processes. Support is provided by email during UK business hours.

Nothing in these terms limits liability that cannot be limited under English law. Subject to that, we are not liable for indirect or consequential loss (including loss arising from an expired certificate or domain that was not renewed), and our total liability in any 12-month period is limited to the fees you paid in that period.

We may suspend accounts that breach these terms, present a security risk, or have unpaid invoices, and will tell you why. You may delete your account at any time from Settings; deletion follows the GDPR erasure process described in the Privacy Policy.

We may update these terms; material changes will be notified to account owners by email at least 14 days in advance. These terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction.