§ 1Scope
(1) These Terms govern the contract between Pixel & Process UG (haftungsbeschränkt), operator of the Scampilot service ("we", "us"), and you ("user") for the use of the Scampilot service at scampilot.de, the REST API, the MCP server, the Telegram bot, and the browser extension.
(2) Conflicting, deviating, or supplemental terms do not become part of the contract unless we agree to them in writing.
§ 2What we provide
(1) Scampilot is an online service that analyzes messages for potential fraud (phishing, smishing, scam). It returns an automatic verdict (safe, warn, danger), a confidence score (0–100), a plain-language explanation, and concrete next steps.
(2) Scampilot is a technical aid, not legal, banking, or security advice. The verdict is an algorithmic estimate. The final decision on how to act on a message always rests with the user.
(3) Current scope: paste-and-check, personal forwarding inbox with primary and burner aliases, Telegram bot, browser extension, REST API, MCP server. We may adjust the feature set when technically or economically necessary.
§ 3Contract formation & anonymous use
(1) The paste-and-check function at /check is usable without an account and free. This forms a no-charge usage contract with reduced scope (max. five checks per hour, identified by hashed IP).
(2) All other functions require a free account. Minimum age is 16, or consent of a legal guardian.
§ 4Pricing
(1) Scampilot is currently free for individuals. We reserve the right to introduce paid business tiers in the future.
(2) If we introduce paid tiers, we will notify you at least 30 days in advance. Features previously offered for free will not retroactively become paid for existing personal users.
§ 5User obligations
(1) You agree not to misuse Scampilot. In particular, you may not:
- circumvent technical safeguards (rate limits, authentication);
- overload the infrastructure with automated or bulk requests;
- submit third-party content you have no rights to;
- use Scampilot for unlawful purposes - especially to build, test, or disguise scam or phishing campaigns;
- reverse-engineer the service to build a competing product.
(2) You warrant that submitted content does not infringe third-party rights.
§ 6Availability
(1) We aim for high availability but do not guarantee it on the free tier. Maintenance windows and short outages may occur.
(2) On AI-provider outage Scampilot falls back to a rule-based heuristic. The verdict is then less precise and is flagged in the report as model_used = "heuristic-fallback".
§ 7Liability
(1) For damages caused by intent or gross negligence we are liable without limit under statutory law.
(2) For simple negligence we are liable only for breach of essential contractual duties, capped at the contract-typical, foreseeable damage.
(3) We are not liable for damages arising because a user relied on a Scampilot verdict that turned out wrong. Responsibility for how to act on a message rests with the user.
(4) These limits do not apply to damages to life, body, or health, or to claims under the German Product Liability Act.
§ 8Data protection
Personal data processing is governed by our Privacy Notice, which is part of this contract.
§ 9Term & termination
(1) The contract runs indefinitely and can be terminated by you at any time - by deleting your account at /settings/security/delete.
(2) We may terminate with 30 days' notice, or immediately for cause.
(3) On termination all personal data is deleted. A tombstone audit entry with a pseudonymized user ID remains as deletion proof.
§ 10Right of withdrawal
Because the contract concerns the free provision of digital services (§ 327q BGB), there is no statutory right of withdrawal. You may terminate at any time per § 9.
§ 11Changes to these terms
We may change these terms to adapt to changed legal or technical conditions. We will notify you by email at least 30 days before changes take effect.
§ 12Final provisions
(1) German law applies, excluding the UN Sales Convention. Mandatory consumer-protection rules of your country of residence remain unaffected.
(2) Exclusive jurisdiction is Lübeck, provided the contract partner is a merchant or public entity.
(3) Should individual provisions be invalid, the validity of the remaining provisions is unaffected.
Pixel & Process UG (haftungsbeschränkt) · Marliring 74, 23566 Lübeck · AG Lübeck HRB 26535 HL · Last updated: May 17, 2026