Last updated: October 2026

Terms of Service

1. Who we are

ShieldPage is operated by Devspace HUB SRL, a limited liability company (societate cu răspundere limitată) incorporated in Romania,, fiscal identification code (CUI) 37960852 ("ShieldPage", "the Company", "we", "us"). You can reach us at contact@shieldpage.com.

These Terms of Service ("Terms") are a binding agreement between the Company and the person or entity using the Services ("you", "Customer"). If you use the Services on behalf of a company, you confirm you are authorised to bind it.

2. Agreement and eligibility

By creating an account, installing our script on a website, using a free tool, or otherwise using shieldpage.com, app.shieldpage.com or our APIs (together, the "Services"), you accept these Terms, our Privacy Policy and our Cookie Policy. If you do not accept them, do not use the Services.

The Services are designed for businesses, organisations and professionals. You must be at least 18 years old. Where the law of your country grants you consumer protections that cannot be waived, nothing in these Terms limits them.

3. What the Services do

Depending on your plan, the Services let you:

• publish and manage a public trust center (certifications, documents, policies, subprocessors, AI governance information), optionally with NDA-gated access to documents;
• install a cookie-consent widget on your websites that presents consent choices to visitors, blocks known third-party tracker scripts until the matching category is accepted, records consent decisions and withdrawals, honours Global Privacy Control, and sends Google Consent Mode v2 signals;
• run automated scans of your websites — security configuration, accessibility (WCAG/EAA), cookies and trackers, and AI-transparency signals — on demand and, on paid plans, on a monthly schedule, with results cross-referenced against the policies you publish through ShieldPage;
• generate policy documents (privacy policy, cookie policy, terms of service, DPA, acceptable-use policy) from questionnaire answers;
• display trust badges and a public verification page;
• use free tools published on shieldpage.com without an account.

We continuously improve the Services and may add, change or retire features. We will give reasonable notice before retiring a feature that materially affects a paid plan.

4. No legal advice, no guarantee of compliance

ShieldPage is a software tool. Nothing we provide — scan results, generated policies, compliance reports, badges, knowledge-base articles, email guidance — is legal advice, and using the Services does not create a lawyer–client relationship.

Scans are automated and detect only what automated checks can detect; they can produce false positives and false negatives and do not cover every legal requirement. Generated policies are templates built from your answers and must be reviewed, completed and approved by you (and, where appropriate, your legal counsel) before publication. Trust badges and compliance reports describe checks performed by our tooling at a point in time; they are not certifications and do not attest that you comply with any law.

You remain solely responsible for your compliance with the GDPR, the ePrivacy rules, the European Accessibility Act, NIS2, the EU AI Act, the CCPA/CPRA and any other law that applies to you, including for the accuracy of the cookie categories, texts and policies you configure.

5. Accounts

You agree to provide accurate registration details, keep your credentials confidential, and tell us promptly at contact@shieldpage.com if you suspect unauthorised access. You are responsible for all activity under your account, including by team members you invite.

6. Plans, fees and billing

Paid plans are described on shieldpage.com/pricing. Prices are in euro and exclude VAT and other applicable taxes, which are added where required. Payments are processed by Stripe; we do not store full payment-card details.

Subscriptions renew automatically at the end of each monthly or annual billing period until cancelled. You can cancel at any time from the billing page; cancellation takes effect at the end of the current period and you keep access until then. Upgrades take effect immediately and are prorated; downgrades take effect at the next renewal. Extra sites on the Shield plan are billed as add-on quantities on the same subscription.

Fees are non-refundable for partial periods, except where the law requires otherwise. Business customers acknowledge the Services are provided for professional use and that statutory consumer withdrawal rights do not apply to them. If a payment fails, we may suspend paid features after notice until payment is received.

We may change prices with at least 30 days' notice; changes apply from your next renewal after the notice period.

7. Free plan and free tools

The Free plan and the free tools on shieldpage.com are provided without charge and may be changed, limited or withdrawn at any time. The consent widget displays "Protected by ShieldPage" branding on the Free, Shield and Starter plans; branding removal is a Professional-plan feature.

Free tools scan the URL you submit; by submitting a URL you confirm you are authorised to have it scanned.

8. Your responsibilities

You agree to:

• install the consent script as instructed (as the first synchronous script in the page head) and keep your cookie categories, descriptions and policy links accurate;
• only add websites and run scans on domains you own or are authorised to manage;
• publish policies only after reviewing them;
• use the Services in accordance with applicable law and these Terms, and not for any unlawful, deceptive or infringing purpose;
• not attempt to circumvent plan limits, rate limits or security measures, reverse-engineer the Services, or resell them without our written agreement.

9. Personal data and roles

For personal data we collect about you as our customer (account, billing, support, our own website analytics), the Company is the controller and our Privacy Policy applies.

For personal data processed through the Services on your behalf — in particular consent records and consent events generated by your website visitors, visitor data in access requests to your trust center, and scan data about your websites — you are the controller and the Company is your processor. We process that data only to provide the Services, on your documented instructions, and under our Data Processing Addendum, which forms part of these Terms and is available on request from contact@shieldpage.com. Our subprocessors include Cloudflare (hosting, storage, edge delivery), Hetzner Online GmbH (scanning infrastructure, Germany), Stripe (payments), Resend (transactional email) and Anthropic (AI-assisted policy and remediation generation, when you use those features).

Consent records are retained for the period you configure (default 24 months) and then deleted. You can export them at any time from the dashboard.

10. Your content and intellectual property

You keep all rights to the content you upload or configure (documents, policies, texts, logos). You grant us a non-exclusive licence to host, process, display and transmit that content solely to provide the Services, including publishing it on your trust center and in your consent widget as you configure.

The Services, the consent script, scanners, templates, designs and documentation are owned by the Company or its licensors and protected by intellectual-property law. You may use them only as permitted by these Terms. You may give us feedback; we may use it without obligation.

11. Availability, support and changes

We aim to keep the Services available continuously and perform maintenance in a way that minimises disruption, but we do not promise uninterrupted or error-free operation and offer no service-level agreement unless one is signed separately. Support is provided by email at contact@shieldpage.com during business days.

12. Warranties and disclaimer

The Services are provided "as is" and "as available". To the fullest extent permitted by law, we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose and non-infringement, and any warranty that the Services will make you compliant with any law, detect every tracker, cookie, vulnerability or accessibility issue, or that generated documents are complete or suitable for your situation.

13. Limitation of liability

To the fullest extent permitted by law: (a) neither party is liable for indirect, consequential, special or punitive damages, loss of profit, revenue, business, goodwill or data, or regulatory fines imposed on the other party; and (b) the Company's total liability arising out of or in connection with the Services in any 12-month period is limited to the fees you paid to the Company for the Services in that period (or EUR 100 if you paid nothing).

Nothing in these Terms excludes or limits liability for intent or gross negligence, for death or personal injury, or for any other liability that cannot be excluded under the applicable law, including under Romanian Civil Code article 1355.

14. Indemnity

You will defend and indemnify the Company against third-party claims, fines and reasonable costs arising from content you publish through the Services, from scans you run on websites you were not authorised to scan, or from your breach of these Terms or applicable law.

15. Suspension and termination

You may close your account at any time. We may suspend or terminate your access with immediate effect if you materially breach these Terms, if required by law, or if your use endangers the Services or other customers; in other cases we will give at least 30 days' notice.

After termination your trust center, consent widget and badges stop being served. Your data remains available for export for 30 days, after which we delete it from active systems (backups are purged on their normal rotation). Sections 4, 9, 10, 12–14, 16 and 17 survive termination.

16. Changes to these Terms

We may update these Terms. For material changes we will give at least 30 days' notice by email or in the dashboard before they take effect. If you do not agree, you may terminate before the effective date; continued use after that date means acceptance. The "Last updated" date at the top shows the current version.

17. Governing law and disputes

These Terms are governed by the laws of Romania, excluding its conflict-of-law rules and the UN Convention on Contracts for the International Sale of Goods. Disputes will be submitted to the competent courts of Romania at the registered office of the Company, without prejudice to mandatory rules that let consumers sue or be sued in their own country. We will try to resolve any dispute amicably first — write to contact@shieldpage.com.

Consumers in Romania may also contact the National Authority for Consumer Protection (ANPC). These Terms are drafted in English; if we provide translations, the English text prevails. If any provision is held invalid, the rest remains in force. These Terms, the Privacy Policy, the Cookie Policy and the Data Processing Addendum are the entire agreement between us regarding the Services.

18. Contact

Devspace HUB SRL (CUI 37960852), Romania — contact@shieldpage.com. We answer every message to this address; privacy@shieldpage.com forwards to it. Full company-registry details are available from the Romanian Trade Registry (ONRC) under the CUI above.