Fix Squad Service Agreement

Last updated: October 30, 2026

This agreement covers Fix Squad, the done-for-you fixes you can order from a SniffPup report. It is between you (the customer) and Ember and Saru LLC, a North Carolina limited liability company doing business as SniffPup ("we", "us", "the SniffPup team"). It adds to our Terms of Service, Privacy Policy and Refund Policy. If this agreement and those documents conflict about a Fix Squad order, this agreement controls. By ticking the box and paying, you agree to it.

1. What you're buying (the scope)

Each order covers only the fix you chose, for one site, as written on the order page and in the scope email we send after payment. Prices are one-time: security headers $19; exposed .env or .git files $29; a leaked key in JavaScript $39; Supabase open tables (Row Level Security for up to about 10 tables) $59; and "Fix everything on this site" $99, which covers every finding on that one report plus the free re-check described in section 6. If you already bought the $9 Full Fix Report (Unlock) for the same site, $9 is credited toward one Fix Squad order for that site, once. Anything outside the written scope isn't included unless we agree in writing on a new price.

2. You own or control the site

You promise that you own the site and project, or are authorized by the owner to have us change them, and that the changes you ask for are lawful. We only take orders for sites you have verified in your SniffPup account. If that turns out not to be true, we may stop the work, and you are responsible for any claims that result.

3. How we work and what access we use

• Default: we send you the exact fix to paste (host settings, SQL to review, or a prompt for your builder's chat). You apply it.
• Or: you invite us to that one project (for example a Supabase project member, a Vercel or Netlify project, or a Lovable or Bolt collaborator). We use that access only for the job and remove it, or ask you to remove it, when the job is done, and we tell you in writing.
• We never ask for your password or secret keys. If a key leaked, you make the new key yourself in your provider's dashboard. Please don't send us passwords or keys; if you do, we won't use them and will tell you to rotate them.
• Database and policy changes are shown to you before they're applied, and we don't change production data without your consent for that step.

4. Backups and your data

Before any change, please make a backup of your database and project; we recommend it every time and will ask you to confirm it before a database change. You remain responsible for your backups, your production data and your site's operation, including testing after a change.

5. Turnaround

We aim to finish within 3 business days after we get access (or, for paste-only fixes, after you send the intake form). Business days are Monday to Friday, excluding U.S. federal holidays, in Eastern Time. Waiting on access, answers or a change you need to apply pauses the clock. We take up to 5 jobs a week; when those are taken we offer a waitlist and don't charge you. If we miss the turnaround, you can ask for a full refund, or let us keep going.

6. When a fix is done, and the re-check

A fix is done when a new SniffPup scan of the same site no longer shows the agreed finding. For the $99 "Fix everything on this site" order, we re-check the site once, about one week later, for free. That re-check covers only the findings we fixed: if any of them has come back, we fix it again at no extra cost. New, unrelated issues are not included; we'll quote them separately if you want.

7. No fix, no pay

If the re-scan doesn't show the agreed finding fixed, or we miss the turnaround in section 5, you get a full refund of that order on request to support@sniffpup.com within 30 days of payment. Refunds go back to your original payment method through Stripe. Once a fix is verified done, the order isn't refundable except where the law requires. If a fix later breaks because of changes made by you or someone else, that isn't covered, but tell us and we'll help where we can.

8. No guarantee of total security; warranty disclaimer

We fix the specific findings in the scope. We don't promise that your site, app or data is secure or free of other issues, and SniffPup's scan only sees what's publicly visible. We do the work with reasonable care and skill. Apart from that and what this agreement says, the service is provided "as is", and to the fullest extent the law allows we disclaim all other warranties, express or implied, including merchantability, fitness for a particular purpose and non-infringement.

9. Limit of liability

To the fullest extent the law allows, our total liability for any claim about a Fix Squad order is limited to the amount you paid for that order, and neither side is liable for indirect, incidental, special, consequential or punitive damages, or lost profits, revenue or data. Nothing here limits liability that can't be limited under North Carolina law, such as for fraud or willful misconduct.

10. Confidentiality

We keep your code, configuration and data confidential. We use what we see only to do your job, we don't copy your data out of your project, we don't keep keys, and we don't share anything with others except the service providers we need (such as Stripe for payment and our email provider) or where the law requires. Job notes are kept for the refund window and our records, as described in the Privacy Policy. Access you gave us is removed after the job.

11. Taxes

Prices are in U.S. dollars. Fix Squad work is a service on your own custom-built app and its hosting settings, so we don't currently charge sales tax on it. If a job would include work that North Carolina taxes, such as repairing or installing off-the-shelf (prewritten) software for a North Carolina customer, we'll tell you and add the tax before you pay. If you're outside North Carolina, you're responsible for any use tax your own state or country may charge.

12. Problems and disputes

If something isn't right, email support@sniffpup.com first and give us the chance to fix it or refund you. For any formal claim, the informal 30-day notice process, binding individual arbitration (with its opt-out) and class-action waiver in section 11 of our Terms of Service apply. This agreement is governed by the laws of the State of North Carolina, without regard to conflict-of-law rules, and any claim that isn't arbitrated goes to the state or federal courts in Mecklenburg County, North Carolina.

13. Other terms

We may update this agreement for future orders; an order you already paid for keeps the version in effect when you paid. If part of this agreement is unenforceable, the rest still applies. This page is our standard agreement, not legal advice to you.

14. Contact

support@sniffpup.com · Ember and Saru LLC, 10850 Providence Rd #1370, Charlotte, NC 28277, USA