Terms of Use

[DRAFT — not legal advice. See “Still missing from Jorge” list for items requiring review.]

These terms are between you and SEMORA, S.A. de C.V., La Libertad, El Salvador. Contact: [email protected] (general), [email protected] (Done-For-You service). By using ratsweepr.com, the RatSweepr software, the Cleanup Kit or the Done-For-You service, you agree to them.

1. License

RatSweepr Free

Source-available, all rights reserved, © 2026 Jorge Díaz. You may run it on sites you own or are authorized to manage, including client sites. You may share reports (redacted or not) for research. You may not redistribute, fork, rebrand, resell, hand the script to clients, or bundle it into a hosting/security/managed-WordPress offering. NOT open source.

RatSweepr Cleanup Kit

A purchase gives you a personal, non-transferable license to use the Kit on sites you own or are authorized to manage. You may not resell or redistribute the software, the AI skill or any part of the Kit.

2. Software provided “as is”

RatSweepr is provided as is and as available, without warranty of any kind, express or implied, including merchantability, fitness for a particular purpose and non-infringement. No scanner can guarantee that a site is free of malware: heuristics can produce false positives and false negatives, a compromised server can hide things from it, and it cannot see DNS- or hosting-level compromise.

3. You are responsible for backups

Make a complete, tested backup of your files and database before running any cleanup. You are solely responsible for your backups and for the actions you choose to run.

4. Quarantine and destructive commands

Scanning is read-only. Cleanup moves files into a quarantine with a SHA256 manifest so they can be restored; it does not delete them. Some commands (for example neutralizing database users or entries) change data and are destructive; RatSweepr requires you to confirm you have a backup before running them, and you run them at your own risk.

5. Authorized use only

Only scan sites and servers you own or have written permission to work on.

6. Done-For-You cleanup

Process

1. You describe what you’re seeing through the contact form. No payment, no commitment.
2. We reply and gather requirements by email.
3. Once requirements are clear, we send a payment request for Regular ($69 USD per site) or High Priority ($99 USD per site, introductory pricing valid until January 1, 2027).
4. Your queue position starts when payment is received.
5. When we start working on your site, we email “We’ve started working on your site.”
6. We scan and attempt cleanup.
7. You receive a report and post-cleanup checklist.

Payment

Paid through Wompi (payment gateway), in US dollars. The payment link is emailed after requirements are clear. Visa and Mastercard accepted. Your bank may add currency-conversion or foreign-transaction fees.

Refunds

• Before “We’ve started working on your site” email: full refund, any time, any reason.
• After that email: no refunds. A person is already working on your site.
• If we cannot finish due to an issue on our side, we refund. If the issue is on your side (access revoked, undisclosed custom code, etc.), no refund.

30-day conditional re-clean guarantee

If the same infection (same malware family or backdoor listed in our report) comes back within 30 days, we clean it again for free, if you completed every step on the post-cleanup checklist and confirmed it in writing. New compromises (new vulnerabilities, leaked credentials, new plugins/themes, third-party access, another site in the same hosting) are not covered. The remedy is a re-clean, not a refund.

Access

You invite us as a user on your hosting account or create separate wp-admin and SFTP/SSH users. Never share your main password. Where multi-user access is unavailable, we’ll agree on a secure method with you (never by email). You change them as soon as we finish and remove our access (checklist items).

Timeline

We aim to resolve most cases within 2 business days once requirements are clear and payment is received. That’s a goal, not a guarantee.

Custom code and development work

Custom code (plugins/themes built for you, including AI-built, or heavily modified ones) is reviewed before we accept the case. Custom-code review and any development work are quoted separately and only done with your approval.

Third-party data attribution

Vulnerability data provided by Wordfence Intelligence (when the user enables it with their own free API key). Malware signatures from rfxn.hdb (GPLv2), YARA rules using yara-x engine (BSD-3), WordPress.org APIs for checksums.

7. Limitation of liability

To the maximum extent permitted by law, our total liability for any claim is limited to the amount you paid for the product or service in question. We are not liable for data loss, downtime, lost revenue or indirect damages.

You are solely responsible for backups. Make a complete, tested backup of files and database before any cleanup.

8. Governing law

These terms are governed by the laws of the Republic of El Salvador. Currency is USD.

9. Changes

We may update these terms; the date at the top of this page shows the latest version.