Legal draft — attorney review required
Legal & privacy
These sections are product placeholders, not legal advice and not in-force contracts. Counsel must review before public billing.
Attorney review required: Autopilot always-on operation, Sentinel telemetry, traffic proxying for Mirage, automatic restoration, and evidence retention language below.
Terms of Service
GhostHue provides website integrity monitoring and automatic recovery for supported public deployments. It does not guarantee that a website is secure, compliant, or free of unauthorized change. Subscriptions are $9.99 USD per protected website per month with a 14-day trial that begins on first verified protection.
After required setup, GhostHue Autopilot is the normal operating model. GhostHue may automatically prepare a verified shadow, restore an exact previously verified provider release, or serve a read-only shadow when the origin cannot remain trustworthy. Emergency pause and Mirage hold are temporary incident controls, not a permanent manual plan. GitHub is required. Protection is sold only for certified GitHub-to-host combinations.
GhostHue verifies configured public assets and supported browser behavior. It does not replace account security, secure development, a WAF, vulnerability management, backups, or incident investigation.
Privacy
Placeholder for counsel. GhostHue is designed to minimize collected data: no private source upload, no visitor harvesting on customer sites, default storage of hashes and bounded metadata rather than full fetched bodies, and 30-day detailed monitoring history.
GhostHue Preserve retains expected and observed SHA-256 fingerprints, byte counts, safe HTTP metadata, release and provider identifiers, provider-reported audit associations when available, and integrity timestamps. It does not intentionally retain altered public response bodies, visitor data, cookies, authentication values, form submissions, or malware files. Signed Incident Records are kept for 365 days while a subscription is active, then a documented 30-day export grace after cancellation. An Incident Record does not establish who caused a change or guarantee legal admissibility.
Sentinel, when enabled, may send aggregated runtime observations such as unexpected script hosts or form-policy changes. It does not collect form values, keystrokes, or authentication tokens. Mirage may route visitor requests for a verified static shadow; GhostHue does not use that path to harvest visitor identity.
Acceptable use
GhostHue may only be used to monitor websites the customer owns or is authorized to protect. Domain ownership verification is required. Scanning unrelated third-party properties is prohibited.