Terms of Service
Last updated 26 September 2026.
Who we are
GoodToLaunch is a service of Zero Harbor Security LLC, a Georgia limited liability company ("we", "us"). You can reach us at hello@goodtolaunch.com. These terms cover this website and every pass we sell. If a signed engagement letter for your pass says something different, the engagement letter wins for that pass.
What each pass covers
Each pass covers the checks listed for it on our pricing section on the day you buy, for one app:
- Grants Fix ($149, 24 hours): diagnose "permission denied" (42501) errors, a least-privilege grant migration with row level security kept on, and one retest.
- Launch Pass ($499, 48 hours): the grants and row level security fix with two-account proof, Stripe webhooks fixed and proven with event replays, and auth redirects, site URL and email settings checked. Delivered as one pull request with tests and a plain-language proof report.
- Launch Pass Pro ($1,200, 24 to 48 hours): everything in the Launch Pass, plus AI route auth, rate limits and spend caps, a 30-day retest, and handoff notes.
- Retest ($149 a month): we rerun your proofs after deploys, up to twice a month, and send a short report of what changed.
Anything outside the listed checks is extra scope. We quote it before starting, at $110 an hour, and only do it if you agree in writing.
Before we start
We don't test anything until you sign our testing authorization. By signing it, you confirm that you own or control the app and the accounts involved, and that you're allowed to authorize the testing. We work on a staging copy with test accounts and Stripe test mode. We never need your production database password or live payment keys. Please keep your own backups before giving us access.
Some platforms have their own rules for security testing of apps they host. You agree to follow any rules that apply to your accounts, and we'll follow the ones you tell us about or that we know of.
Timing and delivery
The delivery time for each pass starts when we have your signed authorization and working staging access. You receive a pull request and a proof report. You review the pull request, decide whether to merge it, and deploy it yourself. If a delay on our side means we miss the delivery time, tell us and we'll agree a fair fix, which may be a partial refund.
What a pass is not
A pass is a test of the listed checks on your app as of the date of the pass. It is not a guarantee that your app is secure, can never be breached, or meets any law or standard. Apps change, and new code can bring back old problems. That's what the Retest is for.
Fees and payment
Prices are fixed, in US dollars, and paid in advance unless we agree otherwise in writing. The founding price of $399 for the Launch Pass applies only to the first five customers. Taxes, if any apply, are added at checkout.
Refunds
If we find no reproducible issue in the listed checks, you get a full refund. A reproducible issue is one we can demonstrate on your staging app with test accounts, with steps you can repeat yourself.
To ask for a refund, reply to your report email within 14 days of delivery. We refund to the original payment method within 5 business days of agreeing the refund.
If you cancel before we receive your signed authorization and staging access, we refund in full. If we don't receive access within 30 days of payment, we'll refund you unless you ask us to wait.
The monthly Retest
The Retest renews every month at $149 until you cancel. You can cancel at any time by emailing hello@goodtolaunch.com. Cancelling stops future charges, and the Retest ends at the end of the month you've already paid for. We don't refund part of a month.
Confidentiality
We keep your code, data, findings and report confidential and use them only to deliver your pass. We don't publish anything about your app. We may share an anonymized example, with every identifying detail removed, only if you agree in writing first. We'll sign a mutual NDA on request.
Who owns what
Once you've paid, you own the code in the pull request we deliver. We keep ownership of our own tools, scripts, templates and general know-how. You may use your report inside your company and share it with investors, customers and auditors.
Your data
We handle personal information as described in our Privacy page. Test data and access you give us are deleted within 14 days of delivering your report. We keep the report and invoice for our records.
Problems in other companies' platforms
If we find a security problem in a platform your app relies on, such as your database, hosting or payment provider, we'll tell you first. We may then report it to that company through its disclosure program, without your confidential information.
Limit of liability
As far as the law allows, our total liability for any pass is limited to the fees you paid for that pass. We aren't liable for indirect or consequential losses, such as lost profits, lost data or lost business. Nothing in these terms limits liability that can't be limited by law.
This website
The information on this site is general and provided as is. Supabase, Stripe, Lovable, Bolt, Cursor and Claude Code are trademarks of their owners. GoodToLaunch is independent and not affiliated with them.
Governing law and disputes
These terms are governed by the laws of the State of Georgia, USA. If something goes wrong, email us first and we'll try to resolve it within 30 days. If we can't, disputes will be handled by the courts in Georgia.
Changes to these terms
We may update these terms. The version in place when you bought a pass applies to that pass. The date at the top shows the latest update.