Terms of Sale (CGV)
Version: v1
These terms cover the Trust Scan (free) and the Founding Member Trust Report (paid, one-time) offered on this site. By checking "I accept the CGV" at the Terms step, before payment, you agree to the version above.
What the scan does
The Trust Scan runs entirely in your browser (WebAssembly). Your source code is read locally to produce a report; it is never uploaded, transmitted, or stored by us. Nothing derived from your code leaves your machine unless and until your payment actually succeeds — see "What we receive, and when" below.
Becoming a Founding Member (€349, one-time)
Founding Member is a status, not a subscription. For a single, one-time payment of €349 you get: one automated Trust Report, generated using Mik's framework, one optional 20–30 minute debrief call, and the right to re-run the Scan and unlock its complete automated findings and remedies for as long as this service is operated ("lifetime automated rescans"). A later automated rescan does not include a new debrief call. The purchase does not include additional debrief calls, future products or courses, or community access. Payment is handled by Stripe; we do not see or store your card details. There is no recurring charge and nothing renews. To ask about a refund, email hello@mikbry.com.
After you pay: your report, and booking a call
There is no pre-payment application or approval — payment is the one paid front door. As soon as payment succeeds, your report bundle (see below) is sent to us automatically, and you're shown a way to pick a time for your optional 20–30 minute debrief (a real booking link is a separate rollout still in progress — until then, Mik will reach out directly to schedule). Before confirming your debrief slot, we check that your scope is one Mik can serve; if it isn't, you are refunded in full.
The 14-day withdrawal right, and the waiver
If you are a consumer (not purchasing in a professional capacity), French law normally gives you 14 days after payment to withdraw and get a full refund, with no reason required. Because the Trust Report is a digital service we can perform quickly, at the Terms step — before you ever reach payment — you are asked to check two separate boxes, neither pre-checked:
- that you accept these CGV, and
- that you expressly request immediate delivery of your Trust Report and acknowledge that you lose the 14-day withdrawal right once the service has been fully performed.
Without both boxes checked, we do not start the paid service before the 14-day period ends. If you buy in a professional capacity, this statutory withdrawal right may not apply to your purchase in the same way; that flag is informational only and never used, by itself, as a substitute for the waiver above.
Our own confidence guarantee (separate from the withdrawal right)
Independently of the legal withdrawal right above, if you don't feel confident after your debrief call with Mik, you can ask for a full refund, no justification needed, within 14 days of that call. This guarantee is about your confidence, not the number of findings, and it adds to — never replaces — any right the law already gives you.
What we receive, and when
Before payment, we build a bundle of your report data locally, in your browser — scores, category ratings, and findings with file paths. We never send your source code or secret strings our scanner recognizes and matches; findings and evidence are anonymized on a best-effort basis (see "Anonymize by default" below) and may still contain an incidental identifier. The "Privacy" dialog you can open from the Terms step describes, in plain language, what that bundle contains; it does not display or offer a download of your actual report data before you pay, so there is nothing to inspect field-by-field pre-payment beyond that description. Nothing is sent anywhere at that point. You provide the email address your report should go to at the same Terms step (or earlier, if you already gave it to unlock a free preview finding — we never ask twice). Only once payment actually succeeds does the bundle reach us, automatically. No result data crosses the network before that.
Anonymize by default
Your report bundle is anonymized by default, automatically — a best-effort minimization pass: known file-path fields, cross-references, any free-form text token that contains a path separator, and secret-like patterns our scanner recognizes (API keys, tokens, and the like) are redacted before the report is sent. This meaningfully reduces what leaves your machine, but it is not a cryptographic anonymity guarantee — an internal class name, codename, bare filename, or a secret string our scanner didn't recognize as one, mentioned in ordinary finding text, may still survive, since redacting every possible identifier from free-form prose would gut the report's actual content. If you plan to share the report outside your own team, review it first once you receive it. There is no extra opt-in — anonymization always applies the same way; nothing about what's sent changes based on a choice you make in the Privacy dialog.
What we do with your data
Your email and the report bundle you confirmed are used solely to prepare and deliver your Trust Report and, if you accept, to follow up about your debrief. We do not sell your data or share it with third parties beyond the processors needed to run this service (Stripe for payment; our hosting provider to run this site).
Your OWN browser keeps one partial Report in local storage so the flow survives a refresh. Before payment it contains the score digest, project name, the static example-category teaser and — once unlocked — your email and first finding. After payment it adds the categories and findings shown on screen plus the checkout session identifier and delivery status. It never contains the technical upload bundle, payment token, source code, or full emailed PDF; it never leaves your machine and remains entirely separate from the bundle above. "Scan another project" erases the whole Report. Entering an email to unlock a free preview finding is likewise local-only — the anonymized report bundle is sent only after payment succeeds, and your source code never leaves your browser.
No warranty
The Trust Scan and Trust Report are informational tools reflecting an automated assessment (with, for Founding Members, an optional debrief) at a point in time. They are not a guarantee of security, compliance, or fitness for any particular purpose, and do not constitute legal, security, or professional advice. Only the separate, signed Trust Audit is described as certified.
Changes to these terms
We may update these terms as the service evolves; the version string above will change when we do. Continuing to use the service after a terms update does not retroactively change what you already agreed to for a Report already delivered.
Contact
Questions about these terms, your data, or a report you received: email hello@mikbry.com.
This page is the operator's own plain-language template, written to describe what the service actually does — not a substitute for review by a qualified consumer-law practitioner before a wider public launch.