The small print.
Three short parts: the terms for working with me, what happens to your information, and how refunds and cancellations work. Plain English, all of it.
DRAFT: for Tim's review before publishing. This is a draft of legal text, not legal advice. Have a lawyer read it before it goes live, especially the liability and security-work sections.
Effective date: to be set
Terms of service
Who this is
Sasaron Web Solutions is a sole proprietorship run by Timothy Morgan. "I" and "me" mean Tim. "You" means the person or organization hiring me.
What these terms cover
They apply when you buy anything from this website or hire me for work. If we sign a separate written agreement for a project, that agreement wins wherever the two disagree.
How work gets agreed
Prices on this site are real, but the configurator produces an estimate, not a contract. Before any work starts I confirm the scope in writing, usually an email that lists what I'm building, what it costs, and roughly when. That written confirmation is the scope. Anything outside it is new work, and I'll quote it before I do it.
What you give me
You'll need to give me your content, your images, and access to the things I'm working on. You confirm that you have the right to use everything you send me, and that you're allowed to authorize work on the sites, domains, and accounts you point me at. I don't do security work on anything you don't control.
Passwords and access
I'll never ask you for a password in a form or in an email. Where I need access, you add me as my own user on your own systems, and you can remove me at any time.
What you own
Your content is yours. The finished site is yours. On builds where I set up a code repository, the repository is yours: you own it and you can take it to any other developer at any time, with no permission from me and no charge. I keep no hold over it. Third-party components used inside the site stay under their own open-source licenses.
What I can reference
I may show your finished site in my portfolio and refer to you as a client. If you'd rather I didn't, just tell me and I won't. No form, no deadline for saying so, and it applies retroactively. I never publish anything I found while doing security work on your systems.
What I do and don't promise
I do careful work, and I'll re-do anything I get wrong. But there are things nobody can honestly promise, so I don't:
- Security work is risk reduction, not a guarantee. Removing plugins, hardening a site, authenticating a domain, and monitoring for changes all lower the chance and the impact of something going wrong. None of it makes a site, a business, or a person impossible to attack, and I never describe my work that way.
- Compliance documentation is evidence, not certification. An insurance-ready security summary documents your controls. It is not a certification, an audit opinion, or a legal determination that you comply with anything. A website that stores nothing is out of scope for certain rules; that is a description of the site, not a compliance opinion about your organization.
- No promise about search rankings or AI mentions. I can't control search engines or AI assistants, and neither can anyone else. What I promise is the work described under SEO & AI Search on the consulting page, done properly.
- No uptime promise beyond reasonable effort. Hosting, domain registrars, DNS, email providers, and certificate authorities are all run by other companies. I'll use reasonable effort to keep your site up and to get it back quickly when something breaks, and I'll be straight with you about what happened.
- Response times, not resolution times. Where I publish a response time, that's how fast I reply. How long a fix takes depends on what's broken.
If something goes wrong
If I make a mistake in my work, tell me and I'll fix it. My total liability to you, for anything arising out of our work together, is limited to the fees you paid me for the work in question during the 12 months before the claim. I'm not liable for indirect or consequential losses, lost profit, lost data, lost business, or the cost of someone else's time, even if I knew they were possible. Nothing here limits liability that can't be limited by law, including for fraud.
Third parties
Payments are handled by Stripe on Stripe's own pages, and call booking happens on a booking provider's own page. Those companies have their own terms and their own privacy practices, and I'm not responsible for how they run their services.
Ending things
Ongoing plans are month to month and either of us can stop them at any time. Project work can be stopped by either of us in writing; you pay for the work done to that point, and I hand over everything I've produced. See refunds and cancellations for the money side.
Changes to these terms
If I change them, the new version goes up here with a new date. Changes don't apply backwards to work already agreed.
Law and disputes
These terms are governed by the law of the state where I do business, and we'll try a phone call before anything else.
Questions
Privacy
The short version
This website sets no cookies, loads nothing from any other company, and stores nothing you type into it. There is no analytics script, no tracking pixel, no embedded chat, no advertising tag, and no outside font. That isn't a policy I wrote to sound good; it's how the site is built, and you can check it in your browser.
Cookies
None. The site doesn't set any, so there's no cookie banner to click through.
The site does keep what you picked (a build from the price configurator, or an offer you clicked) in your browser tab's session storage until you close the tab or press "Start fresh" on the contact page, and nothing is sent to me until you send the form.
Third-party code
None runs on this site. Everything the page loads comes from this domain.
The contact form
What you type into the form is delivered to me as an email and nothing else. It is not stored on this website: there's no database here to store it in. Once it arrives, it lives in my email inbox like any other message from a client, and I keep it as long as it's useful to the conversation. If you'd rather it didn't exist, email me and I'll delete it.
Hosting and server logs
Cloudflare serves this website. Like any web host, Cloudflare records standard request logs, things like IP address, the page requested, the time, and basic browser information, for delivery, security, and abuse prevention. I don't use those logs to build a profile of you, and I don't combine them with anything else. Cloudflare's own privacy terms cover what they do with them.
Payments
Payments are handled by Stripe, on Stripe's own pages. When you click a payment button you leave this site. I never see or hold your card number. Stripe tells me who paid, for what, and when, and sends the receipt. Stripe's privacy policy covers everything on their side.
Booking a call
Call booking happens on a booking provider's page, not here. What you enter there is covered by their privacy policy, and what reaches me is your name, your contact details, and whatever you wrote in the notes.
Client work
When I work on your site, I may see information inside your systems: accounts, contact records, whatever your site collects. I don't copy it, export it, or use it for anything other than the work you hired me for.
What I don't do
I don't sell information, share it with advertisers, or send marketing email to people who didn't ask for it.
Your choices
Email me and I'll tell you what I have about you, correct it, or delete it. There's no form for this and no waiting period beyond how long it takes me to read the email.
Children
This site isn't aimed at children and I don't knowingly collect anything from them.
Changes
If this changes, the new version goes up here with a new date.
Questions
Refunds and cancellations
Why this page is short
Nothing I sell needs a complicated refund policy. Here's all of it.
The $100 build deposit
Refundable any time before we kick off the build. Email me and say so. You don't need a reason. Once the build has started, the deposit comes off the project total instead.
The Site Audit, $495 (nonprofit $295)
The fee is credited in full toward a build or a care plan if you start within 90 days of the report. You don't have to claim the credit; I apply it.
Once I've delivered the report and the walkthrough call, the audit isn't refundable. The work is done and it's yours. If I haven't started yet and you want to call it off, email me and I'll refund you. If you think the report missed something, tell me and I'll go back and look again at no charge.
Site Care Plus ($200/mo) and Ongoing Website Care ($75/mo)
Month to month. Cancel any time by emailing me. No contract, no notice period, and no phone call to talk you out of it.
Cancelling stops the next payment. There's no refund for the month already in progress. You keep the rest of that month, including your included hour if you haven't used it. Unused hours don't roll over and aren't refundable.
If I've clearly failed to do the work in a given month, tell me and I'll refund that month. I'd rather do that than argue about it.
Interim hardening ($750)
If you bought it on its own and later decide to rebuild, the full fee is credited toward a Nothing-to-Hack rebuild within 12 months. Once the 90-day hardening work has started, the fee itself isn't refundable.
Care plan fees toward a rebuild
If you've been on a care plan and decide to rebuild, up to 3 months of care fees are credited toward a Nothing-to-Hack rebuild within 12 months. This doesn't stack on top of the interim hardening credit. You take whichever is larger.
Build projects
You can stop a project in writing at any time. You pay for the work done up to that point, and I hand over everything I've produced, including the repository. If you stop before I've started, you get everything back except the deposit rules above.
SEO & AI Search Setup ($750) and Search Growth ($250/mo)
Setup is refundable before the research work begins. After that it's billable as delivered. Growth is month to month on the same terms as the care plans.
How to ask
Email tim@sasaron.com, or call 248.245.2796. Refunds go back to the card you paid with, through Stripe, usually within a few business days of me approving them.
If we disagree
Call me. I've never enjoyed winning an argument with a client, and I'd rather refund something borderline than have you tell people I didn't.