Terms of Service

These terms

These terms are an agreement between you and The Sky Floor, LLC, a Michigan limited liability company (“Flowproof”, “we”, “us”), which makes Flowproof. By creating an account, using an API key, or using the Email Flow Grader, you agree to them. If you use Flowproof for a company, you agree for that company and confirm you can.

Our Privacy Policy explains what we collect and how we use it.

[Lawyer to confirm: minimum age, and whether Flowproof is offered to businesses only (which changes several consumer-law points below)]

The service

Flowproof gives your coding agent throwaway email addresses at flowproof.dev, receives the emails your app sends to them, grades the whole flow, and then deletes the test users it created from the systems you connected. It also includes Flow Watch (scheduled replays of a recorded flow), test checkout (letting your app skip payment for a live test user), AI review of email wording, and the free Email Flow Grader. What each plan includes is on the Plans and limits page.

We are improving Flowproof all the time. Features can change, and we may stop offering one. If we remove something you pay for, we’ll tell you first.

Accounts and API keys

• Give us an email address you control. Sign-in is by emailed link, so whoever controls it controls the account.
• An API key lets whoever holds it run tests, read results and manage cleanup connections on your account. Keep keys secret, don’t put them in public code, and revoke any key you think has leaked on the Setup page.
• You are responsible for what happens under your account and keys, including what your agent does with them.
• Tell us promptly if you think someone else has access to your account.

Acceptable use

You may use Flowproof only to test apps and sites you own, or that you are authorized to test. You agree not to:

• use Flowproof addresses to create accounts on, or send test traffic to, any service you aren’t authorized to test;
• use Flowproof addresses to send spam, or to sign up for mailing lists, trials or offers you aren’t testing;
• point a Flow Watch at a site you don’t own or control, or use test checkout to get anything without paying for it outside your own app;
• send real people’s personal data, or anything illegal, to Flowproof addresses;
• try to get around plan limits, rate limits or bot checks, probe or attack our systems, or access anyone else’s data;
• resell Flowproof, or use it to build a competing product, without our written permission.

If you find a security problem, please report it as described on the Security page instead of testing it against other people’s accounts.

The Email Flow Grader

The Grader is free and needs no account, so it has its own rules. It gives out one temporary address per run, open for 10 minutes, and only after a “verify you’re human” check. The number of runs is limited per visitor per day and in total, and we may lower those limits or pause the Grader at any time.

Use a Grader address only to sign up to your own app, or one you are authorized to test. Using the Grader to get throwaway addresses for anything else (creating accounts on other services, getting around another site’s limits, sending spam) is abuse. We may block the visitors, networks and apps involved, and report it where the law requires.

Cleanup you authorize

Cleanup deletes records from your own systems: your database, your Stripe account, your WordPress site, or your own endpoint. That is powerful, so here is exactly who is responsible for what.

• What we promise. Cleanup only ever acts on the exact list of addresses a run created. Never a pattern, a domain match or a wildcard. Every cleanup leaves a receipt of what was sent and what came back.
• What you authorize. A connection does nothing until you arm it, which needs a successful connection test and a preview of what would be deleted. By arming a connection, you authorize Flowproof to delete, in that system, the records tied to the addresses your runs create, and you confirm you are allowed to give that authorization.
• What you are responsible for. Configuring the connection correctly (which tables and columns to use, what each key can do), keeping backups of your systems, and checking the preview before you arm it. The receivers you install (our WordPress plugin, the Supabase Edge Function, or your own webhook) run in your systems.
• Test checkout. If your app skips payment for a live test user, your app makes that decision. We only answer whether an address is a live test address that one of your runs created.

[Lawyer to confirm: how responsibility is divided if a misconfigured connection deletes or misses records, and whether arming needs its own consent wording in the dashboard]

Plans, fees and limits

• Prices are on the pricing table. The Free plan needs no card. A Flow Pass is a one-time payment for 30 days, which you can extend. Flow Watch and Agency are subscriptions that renew until you cancel.
• Payments are handled by Stripe. You can cancel a subscription at any time in Manage subscription on the Billing page; it ends at the close of the period you have paid for.
• Limits are soft. When you reach a plan limit, the run that reached it still finishes, and the next new run is refused with a message saying why. A limit never stops a run that is already open.
• “Unlimited” means fair use. Each paid plan has a published fair-use ceiling; if you reach it, email us and we’ll talk about what you need.
• Cleanup is never paywalled. It runs on every plan, including Free, and after any limit is reached.
• If a paid plan lapses, your account moves to Free’s limits straight away, and your data keeps its paid retention for a 14-day grace period.
• We may change prices. A change applies from your next renewal or purchase, and we’ll tell you at least 30 days before it does.
• Refunds. If Flowproof didn’t work for you, email support@flowproof.dev within 14 days of a payment and we’ll refund that payment in full. After 14 days payments aren’t refundable; cancelling stops the next renewal.
• Prices don’t include tax. Where sales tax or VAT applies, it is worked out at checkout from your location and shown before you pay.

[Lawyer to confirm: the refund and tax wording, including EU and UK consumer withdrawal rights]

Your data

You own the data you bring to Flowproof: your test emails, reports and settings. You give us permission to store, process and display it only as needed to run the service for you, as described in the Privacy Policy.

You grant Flowproof the right to use anonymous, aggregated results of the service for research and publication. These results never include your emails, addresses, domains or anything that identifies you, your app or your runs. You can stop your future runs from being included at any time under Your data on the Billing page. The Privacy Policy says exactly what is kept.

Email Flow Grader score cards are public to anyone with their link. They show the app URL you entered and a redacted summary, so only enter a URL you are happy to show.

Our intellectual property

Flowproof, its software, design, documentation and brand belong to us. You may use them only to use the service under these terms. Snippets, sample code and receivers we publish for you to install (for example the WordPress plugin, which is GPL-2.0-or-later, or the Supabase Edge Function) come with the licence stated alongside them. [Founder to confirm: the licence for the Supabase Edge Function and the sample receivers in the docs]

If you send us feedback or ideas, we may use them without owing you anything.

Other services

Flowproof works with services we don’t control: your coding agent, your app’s hosting and email provider, and the systems you connect for cleanup. Their own terms apply to them, and we aren’t responsible for how they behave. The companies that help us run Flowproof are listed in the Privacy Policy.

Disclaimers

Flowproof helps you find problems in your email flows. It can’t promise to find all of them, and a good grade is not a guarantee that real users will get their email. AI review is a suggestion, not advice. The service is provided “as is” and “as available”, without warranties of any kind, to the extent the law allows.

[Lawyer to confirm: disclaimer wording, including the implied warranties to exclude]

Limitation of liability

To the extent the law allows, we are not liable for indirect or consequential losses, such as lost profits, revenue or data, and our total liability for any claim about Flowproof is limited to [Lawyer to confirm: the cap, for example the fees you paid us in the 12 months before the claim, or $100 if that is more].

Nothing in these terms limits liability that can’t be limited by law. [Lawyer to confirm: whether to include an indemnity from customers (for example for testing services they weren’t authorized to test)]

Suspension and termination

• You can stop using Flowproof at any time, and ask us to close your account by email.
• We may suspend or close an account, revoke API keys, or block Grader use if these terms are broken, if there is a security risk, or if the law requires it. Where we reasonably can, we’ll tell you first and give you a chance to fix it.
• When an account closes, its data is deleted on the schedule in the Privacy Policy. Cleanup receipts, the list of addresses created and project names are kept, so a test address or project name is never issued to anyone else.
• Sections that by their nature should survive closing (such as your data, disclaimers, limitation of liability and governing law) do.

Closing an account doesn’t refund the rest of a paid period, except under the 14-day refund in Plans, fees and limits.

Changes to these terms

If we change these terms, we’ll update the date at the top. If a change matters, we’ll tell account holders by email before it takes effect. Using Flowproof after that means you accept the new terms. [Founder to decide: how much notice, for example 30 days]

Governing law

These terms are governed by the laws of the State of Michigan, and disputes go to the state or federal courts located in Michigan. [Lawyer to confirm: whether to use arbitration or small-claims options, and consumer-law carve-outs]

Contact

The Sky Floor, LLC (Michigan)
10611 Maple Grove Rd, Charlevoix, MI 49720
Questions about these terms: flowproof@theskyfloor.com
Security issues: see Security.