Terms of Service

1. What StaleSweep does

StaleSweep scans AWS accounts you connect to identify unused, idle, or overprovisioned resources — for example unattached volumes, unused Elastic IPs, idle NAT Gateways, empty VPCs, or low-utilization compute and database instances — and estimates the monthly cost associated with them. StaleSweep produces findings and recommendations. It does not, on its own, delete, modify, stop, or otherwise change anything in your AWS account. Any action you take in AWS as a result of a StaleSweep finding is your action, taken through your own AWS credentials and your own change-management process.

2. Accounts and eligibility

You must be at least 18 years old and able to form a binding contract to use the Service. If you're using the Service on behalf of a company or other organization, you represent that you have authority to bind that organization to these Terms, and "you" refers to that organization.

You're responsible for the accuracy of your account information, for maintaining the security of your account (including any credentials used to sign in via Google, Microsoft, or your organization's SAML identity provider), and for all activity under your account. Tell us promptly at security@stalesweep.com if you suspect unauthorized access.

Accounts support multiple team members with different roles (Owner, Admin, Member). Owners and Admins can invite, remove, and change the roles of other members of their account; only an Owner can grant the Owner role or manage billing. You're responsible for who you invite and what role you give them.

3. Connecting your AWS account

To scan an AWS account, you deploy a CloudFormation template we provide, which creates a read-only IAM role in your account. That role trusts a specific StaleSweep principal and requires a unique, per-account "External ID" we generate — a security control recommended by AWS for exactly this kind of third-party cross-account access, which prevents anyone but you (and StaleSweep, using the External ID you were shown) from being able to have that role assumed. The permissions attached to that role are read-only (AWS's SecurityAudit and ViewOnlyAccess managed policies, plus a narrow set of additional read permissions for CloudWatch metrics, pricing data, and — only for an AWS Organizations management account, if you opt into organization-wide scanning — Organizations listing APIs). StaleSweep never requests write, modify, or delete permissions on your AWS resources, and we never ask for or store AWS access keys, secret keys, or console passwords.

You control this connection at all times. You can revoke it whenever you want by deleting the IAM role or the CloudFormation stack in your AWS account — StaleSweep will simply be unable to assume the role on the next scan and that connection will show as disconnected. You're responsible for the accuracy of the AWS account ID you connect and for ensuring you're authorized to grant this access (for example, if the AWS account belongs to an employer, you need their permission to connect it).

4. Findings are informational, not instructions

StaleSweep's findings, recommendations, and cost estimates are provided for informational purposes only and may be incomplete, delayed, or wrong. A resource that looks "unused" from the metadata and metrics StaleSweep can see (tags, recent activity, attachment state, CloudWatch metrics) may still be load- bearing in ways that aren't visible from that metadata — for example a cold standby, a disaster-recovery resource, a rarely-invoked but critical Lambda dependency, or something intentionally provisioned ahead of a known future need. Estimated monthly savings are estimates based on AWS's published pricing and may not reflect your actual bill (reserved instances, savings plans, and negotiated discounts aren't always reflected).

You use the Service, and act on its findings, entirely at your own risk. You are solely responsible for reviewing every finding and using your own judgment — including consulting whoever owns or depends on a given resource, and testing in a non-production environment where appropriate — before taking any action in AWS. StaleSweep is not liable for downtime, data loss, cost, service disruption, or any other consequence that results from a decision you make (or don't make) based on a StaleSweep finding. See Section 11 (Disclaimers) and Section 12 (Limitation of Liability).

5. Plans, fees, and billing

StaleSweep offers paid plans with different features and limits, as described on our pricing page. New accounts begin with a time-limited free trial of a paid plan; no payment method is required to start the trial. There is no permanent free tier — when the trial ends, continued use of the Service requires a paid subscription.

• Paid subscriptions are billed in advance on a monthly or annual basis and, unless cancelled, automatically renew for successive periods of the same length.
• Payments are processed by Stripe. We don't store your full card number — Stripe handles that, subject to its own terms and privacy policy.
• You can cancel anytime from the billing page; cancellation takes effect at the end of the current billing period and you keep access until then. We don't provide refunds for partial billing periods except where required by law.
• We may change our prices with at least 30 days' notice; changes apply to your next renewal, not to a period you've already paid for.
• Only an account Owner can start, change, or cancel a subscription.
• If a payment fails, we'll notify you and retry it. If it's still unresolved 7 days after that notice, we may suspend the paid features of your account until you update your payment method — we won't delete your data over a billing issue.

6. Support

We provide support by email at help@stalesweep.com during business hours, using commercially reasonable efforts to respond. We don't currently offer a guaranteed uptime, response time, or resolution-time commitment (a Service Level Agreement) — if your organization needs one, contact us to discuss.

7. Acceptable use

You agree not to:

• Use the Service to access, scan, or connect an AWS account you're not authorized to access;
• Attempt to probe, scan, or test the vulnerability of the Service, or breach any security or authentication measures;
• Reverse engineer, decompile, or attempt to extract the source code of the Service, except where applicable law gives you that right despite this restriction;
• Use the Service to build a competing product, or resell or white-label the Service without our written consent;
• Interfere with or disrupt the integrity or performance of the Service, including by circumventing rate limits;
• Submit or expose to the Service, through AWS tags, resource names, or any other metadata it collects, any health information, payment card data, government ID numbers, or other specially-regulated personal information — the Service isn't designed or intended to process that category of data;
• Use the Service in a way that violates any applicable law, including export control and sanctions laws.

8. Ownership

You own your AWS account, its resources, and the data in it. Connecting it to StaleSweep doesn't transfer any ownership to us — we receive a limited, revocable license to access the read-only metadata described in Section 3 solely to provide the Service to you.

We own the Service itself — the software, design, findings engine, and everything else that isn't your data. Subject to these Terms and payment of applicable fees, we grant you a limited, non-exclusive, non-transferable right to access and use the Service for your internal business purposes.

We may use aggregated, de-identified data derived from use of the Service (for example, which resource types are most commonly flagged across our customer base) to improve the Service and for benchmarking — never in a form that identifies you, your organization, or your specific AWS account.

If you send us feedback, suggestions, or feature requests, you agree we can use them to improve the Service without owing you anything, and without any obligation to keep them confidential.

9. Confidentiality

Each party may receive non-public information about the other (for example, the other party's account configuration or, for you, our unreleased features). Each party agrees to protect the other's confidential information with the same degree of care it uses for its own similarly sensitive information, and not to disclose it except to employees, contractors, or service providers who need it to perform under these Terms and are themselves bound to confidentiality, or as required by law.

10. Suspension and termination

You may stop using the Service and delete your account at any time. We may suspend or terminate your access if: you materially breach these Terms and don't cure the breach within a reasonable time after notice; we reasonably believe your account poses a security risk to the Service or other customers (for example, credential abuse or an attempt to access an AWS account you're not authorized to connect); we're required to by law or by a government or regulatory body; or, for a paid plan, your payment remains unresolved as described in Section 5. Either party may also terminate immediately if the other becomes insolvent, files for bankruptcy, or has a receiver appointed.

On termination, your right to use the Service ends; we'll delete or anonymize your account data in line with our Privacy Policy.

11. Disclaimers

THE SERVICE, INCLUDING ALL FINDINGS AND COST ESTIMATES, IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR THAT ANY FINDING IS ACCURATE OR COMPLETE. Some jurisdictions don't allow the exclusion of certain warranties, so some of the above exclusions may not apply to you.

12. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW: NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL, ARISING FROM OR RELATED TO THESE TERMS OR THE SERVICE — INCLUDING, WITHOUT LIMITATION, ANY DAMAGES RESULTING FROM ACTIONS TAKEN OR NOT TAKEN IN YOUR AWS ACCOUNT BASED ON A STALESWEEP FINDING — EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. STALESWEEP'S TOTAL LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS WILL NOT EXCEED THE AMOUNT YOU PAID US IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM (OR $100 IF YOU HAD NOT PAID US ANYTHING IN THAT PERIOD, FOR EXAMPLE DURING A FREE TRIAL). THESE LIMITATIONS APPLY REGARDLESS OF THE LEGAL THEORY THE CLAIM IS BASED ON. Some jurisdictions don't allow certain limitations of liability, so some of the above may not apply to you.

13. Indemnification

You agree to defend, indemnify, and hold StaleSweep harmless from any claim, damages, or expenses (including reasonable attorneys' fees) arising from your breach of these Terms, your misuse of the Service, or your connection of an AWS account you weren't authorized to connect.

14. Governing law and disputes

These Terms are governed by the laws of the State of Delaware, without regard to its conflict-of-laws rules.

Binding arbitration; class action waiver. Any dispute arising out of or relating to these Terms or the Service will be resolved by binding arbitration on an individual basis, rather than in court, except that either party may bring an individual claim in small-claims court if it qualifies. You and StaleSweep each waive any right to a jury trial and to participate in a class action, class arbitration, or representative action. Arbitration will be administered by [Arbitration Provider, e.g. AAA] under its rules then in effect, seated in [City, State]. This arbitration provision doesn't apply to claims for injunctive relief to protect intellectual property or confidential information, which either party may bring in court.

15. Changes to these Terms

We may update these Terms from time to time. If a change is material, we'll notify you by email or through the Service at least 14 days before it takes effect. Continuing to use the Service after a change takes effect means you accept the updated Terms.

16. General

• Entire agreement.These Terms (together with the Privacy Policy and any order form or plan terms you've agreed to) are the entire agreement between you and StaleSweep regarding the Service.
• Severability. If any provision is found unenforceable, the rest of these Terms remain in effect.
• Assignment. You may not assign these Terms without our consent; we may assign them in connection with a merger, acquisition, or sale of assets.
• No waiver.Our failure to enforce a provision isn't a waiver of our right to do so later.
• Force majeure.Neither party is liable for delay or failure to perform caused by events outside its reasonable control, except that this doesn't excuse your obligation to pay fees already due.

17. Contact

Questions about these Terms? Reach us at legal@stalesweep.com.