Terms of Service

These Terms govern your use of BotPass. Read section 6 (what BotPass changes on your website), section 8 (what we do not promise) and section 12 (liability) even if you read nothing else. They are the ones that decide who carries which risk.

1. Who we are#

BotPass is operated by:

"BotPass", "we" and "us" mean San Mateo Capital, S.L. "You" and "Customer" mean the company or self-employed professional that opens an account.

2. Business customers only#

BotPass is sold exclusively to businesses, self-employed professionals and organisations acting within their trade or profession. It is not offered to consumers, and by opening an account you confirm you are not acting as one.

If you are a consumer as defined in Spanish Royal Legislative Decree 1/2007, do not open an account. Consumer law grants rights that these Terms are not written around, and we would rather turn away the sale than sell you a contract that does not fit you.

3. What BotPass does#

BotPass is a controlled-experiment engine for websites. In plain terms:

1. It measures how often AI assistants read your pages and how often they cite them.
2. It proposes a change to a defined subset of your pages, drawn at random.
3. A plugin you install applies that change to the pages we name, and only those.
4. We ask AI providers a set of questions over a measurement window and record whether your pages are cited.
5. If the result clears a pre-declared statistical bar, the change enters a playbook that is applied to other customers' sites of the same type.

Two consequences of that design are contractual, not incidental:

• Some of your pages are deliberately left unchanged. An experiment needs a control group. Treating every page would produce a number that means nothing.
• Your results contribute to a shared playbook. See section 7.

4. Account, plans and payment#

Plans, caps and prices are those published at https://botpass.io at the time you subscribe. Each plan carries limits on sites, concurrent experiments, pages per experiment and measured AI providers. The service enforces those limits before an experiment is assigned, not after it has run.

Fees are billed in advance for the period stated in your plan. Prices are exclusive of VAT and any other applicable tax. Payments are processed by Stripe; we do not store your card details.

Where a plan carries a minimum term (a three-month commitment on the experiment plans), that term exists because a single experiment takes about eight weeks to produce a result. Cancelling earlier does not produce a partial result; it produces no result.

Late payment allows us to suspend the service after written notice and a cure period of fifteen days.

5. Your account, your responsibility#

You are responsible for:

• The accuracy of the account details you give us.
• Keeping your API keys and credentials secret. Anything done with your key is treated as done by you.
• Only adding domains you own or are authorised to modify. This is not a formality: adding a domain to BotPass authorises us to instruct changes to the pages of that domain. You warrant that you hold that authority for every domain you add, and you indemnify us against claims arising from a domain you added without it.
• The lawfulness of the content on the sites you connect.

Agency and Enterprise accounts add sites belonging to their own clients. If you are an agency, you warrant that each of your clients has authorised you to connect their site and to allow the changes described in section 6, and that you have a contract with them that permits it.

6. Changes to your website#

This is the part that carries the most risk, so it is the part written most plainly.

BotPass instructs changes to pages on your live website. The changes are applied by a plugin that you install, on your infrastructure, using credentials you control. We do not have direct write access to your site; the plugin pulls a task list and applies it.

• Every change comes from a closed catalogue of interventions. We do not invent changes, and the plugin will not apply anything that is not in the catalogue.
• Each intervention carries a risk level. Level 1 is invisible to a human reader (structured data, markup, internal links). Levels 2 and 3 alter text a reader can see. Your plan sets the highest level that may be applied without asking you first; anything above it waits for your approval.
• Every intervention is revertible, and reverting is part of the catalogue entry, not an afterthought.
• You may pause or disable BotPass on any site at any time, and you may remove the plugin, which stops all further changes.

You are responsible for maintaining your own backups. We strongly recommend taking one before the first application on any site. BotPass keeps a record of what it applied and when, but it is not a backup service and cannot restore content it never held.

You remain the publisher of your website. You are responsible for what it says, including after an intervention has been applied to it, and for compliance with the terms of any third party (search engines, AI providers, advertising networks) whose policies apply to you.

BotPass serves the same content to machines and to people. We do not implement cloaking, and the parity report exists so that you can verify that. If you or a third party configure your site to serve different content to bots, that is outside BotPass and outside these Terms.

7. Shared evidence — read this before you sign#

BotPass works because results are pooled. When an experiment on your site closes, the aggregate outcome — the intervention, the page type, the measured effect and its confidence interval — is added to a shared evidence grid, and once a cell clears the bar it is applied to other customers' sites.

You grant us a perpetual, worldwide, royalty-free licence to use the aggregate, de-identified results of experiments run on your sites for that purpose.

What we do not put into the shared grid, and will not:

• Your domain names, company name or any identifier of you or your sites.
• Your page content, your traffic figures or your commercial data.
• Anything from which a third party could reasonably identify you as the source of a result.

The trade is explicit and it goes both ways: your sites receive the interventions proven on everyone else's. If you do not want your results pooled, BotPass is not the right product for you, because a playbook built from one site is not a playbook.

8. What we do not promise#

We do not promise that BotPass will increase how often AI assistants cite your pages, that it will improve your ranking, your traffic, your revenue or your visibility in any system, or that any individual experiment will produce a usable result.

That is not a lawyer's hedge; it is what a controlled experiment is. An honest experiment can come back inconclusive, or negative, and the product is built to report that rather than hide it. A result that says "this change does nothing" is a correct output of the service, and it is a delivered service.

We also do not control the AI providers. They change their models, their crawlers, their citation behaviour and their terms without notice and without consulting us. A measurement is a measurement of how those systems behaved during a window, not a prediction of how they will behave afterwards.

Statistical outputs are estimates with stated uncertainty. Confidence intervals mean what they mean: a range, not a guarantee.

9. Availability#

We aim to keep BotPass available and will give reasonable notice of planned maintenance, but the service is provided without a contractual uptime commitment unless one is agreed in writing in an Enterprise order form.

An outage in BotPass does not change your website. If our servers are unreachable, the plugin simply has no task list to fetch; your site continues to serve what it was serving.

10. Acceptable use#

You may not:

• Connect a domain you are not authorised to modify.
• Use BotPass to serve different content to AI crawlers than to human readers.
• Attempt to influence the shared evidence grid by reporting applications or re-crawls that did not happen, or by treating control pages.
• Resell, sublicense or provide the service to third parties except under an Agency or Enterprise plan that permits it.
• Reverse engineer the service, probe it for vulnerabilities without written authorisation, or interfere with its operation.
• Use the service to process content that is unlawful, infringing or that you have no right to publish.

Breach of this section allows us to suspend the account immediately, and to disregard or remove the affected results from the evidence grid.

11. Intellectual property#

We own BotPass: the software, the intervention catalogue, the evidence grid, the playbook, the methodology and all documentation. Nothing in these Terms transfers any of it to you. You receive a non-exclusive, non-transferable right to use the service during your subscription.

You own your website and its content. You grant us the limited licence needed to run the service: to fetch, render, analyse and store copies of your pages, to instruct the changes described in section 6, and to use aggregate results as described in section 7.

Reports we generate for you are yours to use. Agency and Enterprise plans may brand them.

Feedback you send us we may use freely.

12. Liability#

Nothing in these Terms excludes or limits liability for wilful misconduct or gross negligence, for death or personal injury, or for anything that cannot be excluded under Spanish law. Article 1102 of the Spanish Civil Code does not let us do it, and we are not going to pretend otherwise.

Subject to that:

• Cap. Our total aggregate liability arising out of or in connection with these Terms, in contract, tort or otherwise, is limited to the fees you paid us in the twelve months preceding the event giving rise to the claim.
• Excluded losses. We are not liable for loss of profit, loss of revenue, loss of anticipated savings, loss of business or goodwill, loss of traffic, loss of ranking or visibility in any third-party system, or for indirect or consequential loss of any kind.
• Third parties. We are not liable for the acts, omissions, outages, policy changes or pricing changes of AI providers, search engines, hosting providers or any other third party.
• Your infrastructure. We are not liable for changes applied by a plugin running on infrastructure you control where the cause is a configuration, conflict, theme, caching layer or other plugin on your side, provided the task list we issued was within the catalogue and within the risk level your plan permits.

You indemnify us against third-party claims arising from your content, from a domain you connected without authority, or from your breach of section 10.

13. Term, suspension and termination#

The contract runs for the period stated in your plan and renews for equal periods unless either party gives notice before the end of the current period.

Either party may terminate for material breach that is not cured within thirty days of written notice. We may suspend immediately for a breach of section 10 or for non-payment after the cure period in section 4.

On termination:

• Your access ends and running experiments are aborted.
• The plugin should be removed. Interventions already applied to your pages remain applied — they are changes to your own content, on your own server, and we cannot and will not reach in to undo them. You can revert them yourself through the plugin before you remove it, and we recommend doing so if that is what you want.
• Personal data is handled as set out in the Data Processing Agreement.
• Aggregate results already contributed to the evidence grid remain there, per section 7. They contain no identifier of you.

14. Changes to these Terms#

We may change these Terms. Material changes take effect thirty days after we notify you by email or in the application. If you do not accept a material change, you may terminate before it takes effect and we will refund the unused portion of any prepaid fee.

Changes required by law or to address a security risk may take effect immediately.

15. Confidentiality#

Each party will keep the other's non-public information confidential and use it only for the purposes of the contract. This does not apply to information that is public through no breach, was already known, is independently developed, or must be disclosed by law.

16. Miscellaneous#

Assignment. You may not assign without our written consent. We may assign to an affiliate or in connection with a merger or sale of the business.

Subcontracting. We may use subcontractors and sub-processors. We remain responsible for their performance. Sub-processors handling personal data are listed in the Data Processing Agreement.

Force majeure. Neither party is liable for failure caused by events beyond its reasonable control.

Entire agreement. These Terms, the Privacy Policy, the Data Processing Agreement and any order form are the whole agreement. In case of conflict, an order form prevails over these Terms, and the Data Processing Agreement prevails on matters of personal data.

Severability. If a clause is unenforceable, the rest survives and the clause is read down to the extent needed to make it enforceable.

No waiver. Not enforcing a right is not a waiver of it.

17. Governing law and jurisdiction#

These Terms are governed by Spanish law. The courts of Barcelona, Spain have exclusive jurisdiction, and both parties waive any other venue to which they might otherwise be entitled.

18. Contact#

hello@botpass.io — San Mateo Capital, S.L., C/ Roger de Lluria 137, 08037 Barcelona, Spain.