Legal & Developer Docs

Quickstart Terms of Service Privacy Policy

The Terms of Service and Privacy Policy below are a first draft, written to accurately describe what this system actually does — they have not been reviewed by a lawyer. Do not treat them as final legal protection, especially once real payments are involved, until an actual attorney has reviewed them. The Quickstart section is technical documentation, not a legal document, and every command in it has been run against the real system.

Developer Quickstart

Three steps: create an account, get a monitoring key, register and check an endpoint.

1. Register

curl -X POST https://www.schemadiffapp.com/api/auth/register \
  -H "Content-Type: application/json" \
  -d '{"company_name":"Acme","email":"you@example.com","password":"a-real-password"}'
# -> {"token": "...", "company_id": "...", "user_id": "..."}

2. Create a monitoring key

curl -X POST https://www.schemadiffapp.com/api/companies/COMPANY_ID/keys \
  -H "Authorization: Bearer TOKEN" -H "Content-Type: application/json" \
  -d '{"label":"my first key"}'
# -> {"id": "...", "key": "tmk_..."}   the raw key is shown ONCE - save it now

3. Register and check an endpoint

curl -X POST https://www.schemadiffapp.com/api/companies/COMPANY_ID/endpoints \
  -H "Authorization: Bearer TOKEN" -H "Content-Type: application/json" \
  -d '{"name":"my-api","method":"GET","url":"https://api.example.com/v1/status"}'

curl -X POST https://www.schemadiffapp.com/api/companies/COMPANY_ID/endpoints/ENDPOINT_ID/check \
  -H "Authorization: Bearer MONITORING_KEY"
# first check sets the baseline automatically; every check after that alerts only on a real structural change

Full route list: the interactive API reference at /docs.

Terms of Service

Draft — not reviewed by a lawyer.

The service

Schema Diff Monitor watches the structure of API responses you register and alerts you when that structure changes (a field removed, a type changed). It does not inspect or store the actual data values in those responses beyond what's needed to compute a structural fingerprint.

Accounts and billing

Paid plans are billed monthly in advance through Stripe. We do not receive or store your card details - Stripe handles payment collection directly. If a renewal payment fails, your account's paid features are deactivated immediately; there is currently no grace period. Reactivating requires a new successful payment.

Refunds

Refunds are not automatic and are considered on a case-by-case basis. Contact gcdigitalssoftware@gmail.com to request one.

Cancellation

You may stop using the service at any time. An in-product cancellation flow does not exist yet; contact gcdigitalssoftware@gmail.com to cancel a subscription.

No warranty

This is an early-stage, independently-run service with no uptime guarantee and no formal security audit completed. It is provided "as is," without warranty of any kind. Do not rely on it for anything where an undetected outage or bug would cause serious harm.

Acceptable use

Don't use this service to monitor endpoints you don't have the right to access, or to abuse, overload, or attempt to gain unauthorized access to this system or any system it connects to.

Changes

These terms may change as the product changes. Continued use after a change means you accept the update.

Privacy Policy

Draft — not reviewed by a lawyer.

What we collect

Account info: company name, email address, and a password (stored as a bcrypt hash - we cannot see or recover your actual password).
The URLs and configuration of endpoints you register for monitoring.
Monitoring keys: shown to you once at creation, then stored only as a salted HMAC hash - we cannot recover the raw key either.
Billing metadata from Stripe (customer ID, subscription ID, subscription status) - never your card number or other payment details, which Stripe collects and stores directly, not us.

How we use it

To operate the service you signed up for: running your checks, sending alerts, and processing payments through Stripe.

Who we share it with

Stripe, to process payments. We don't sell or share your data with anyone else.

Data deletion

An automated "delete my account and data" flow does not exist yet. Contact gcdigitalssoftware@gmail.com to request deletion and it will be handled manually in the meantime.

Security

Passwords are hashed with bcrypt; monitoring keys are never stored in recoverable form. This is a young, independently-run product that has not yet had a formal third-party security review.

Contact

gcdigitalssoftware@gmail.com