Skip to content
riffraff

Legal

terms of service.

The agreement between you and us for using riffraff. Short, because a long one nobody reads protects nobody.

In effect from 9 September 2026

Who we are

riffraff is operated by Registered company name to be confirmed , registered in England and Wales, company number Company number to be confirmed , registered office Registered address to be confirmed . In these terms, "we" and "us" mean that company, and "you" means whoever holds the account.

What riffraff does

You send us the text of a form submission. We run it through a set of rules, each carrying a weight, and return a score, a verdict and the reasons behind every point awarded. What you do with that verdict is entirely up to you: we do not block anything, delete anything or send anything on your behalf.

The rules are deterministic and hand written. There is no model, and no part of the decision is hidden from you.

Your account

  • You must be 18 or over and give us accurate details
  • Your API tokens are yours to look after. Anything done with a valid token is treated as done by you, so revoke one the moment you think it has leaked
  • You are responsible for what everyone on your team does with the account
  • We strongly recommend turning on two-factor authentication

Acceptable use

Do not use riffraff to:

  • Send us data you have no right to send
  • Test or tune spam campaigns against our scoring
  • Attempt to break, overload or reverse engineer the service, or work around your plan's limits
  • Resell the API as your own product without a written agreement with us

We may suspend an account that is doing any of the above, and we will tell you why.

Your data

We do not store the body of the messages you send us. We keep a record of the sender, the subject, the score and the reasons, and we delete that record after the period set out in the privacy policy.

For those submissions we act as your processor and you act as controller, which means telling the people who fill in your forms that their submission is scored is your job, not ours. The privacy policy sets out the detail, including our sub-processors.

We do not use your data to train anything, and we do not sell it.

Plans and payment

  • Each plan carries a monthly allowance of evaluations. Go past it and the API returns a 402 with your limit and usage until you upgrade or the month rolls over
  • Paid plans are billed monthly in advance through our payment processor. Prices are in pounds sterling and exclude VAT where it applies
  • Upgrade and the change takes effect immediately. Downgrade or cancel and it takes effect at the end of the period you have paid for
  • We do not refund part months, but if something has gone genuinely wrong, ask
  • We will give at least 30 days' notice by email before changing a price

Accuracy

riffraff will get things wrong. It will occasionally flag a genuine enquiry, and it will occasionally let spam through. No scoring service avoids both, and we would rather say so here than imply otherwise.

Because of that, the verdict is advice, not an instruction. If you delete flagged submissions automatically, that is your decision and its consequences are yours. We give you the borderline alerts and the reporting tools precisely so a person can be in the loop, and we tune the rules from the reports you send us.

Availability

We aim to keep the service running at all times but we do not offer a contractual uptime guarantee on standard plans. We may take it down for maintenance, and we will give notice where we reasonably can.

Build your integration to fail open. If we are unreachable, let the submission through rather than losing it. Our own client integrations do exactly that.

Liability

Nothing here limits our liability for death or personal injury caused by our negligence, for fraud, or for anything else that cannot be limited by law.

Subject to that, our total liability to you in any twelve month period is limited to the amount you paid us in that period, and we are not liable for lost profits, lost business, lost goodwill, or for any enquiry that was wrongly flagged or wrongly let through.

The service is provided as it is. We give no warranty that it will detect any particular proportion of spam.

Ending the agreement

You can close your account whenever you like, from your settings. We can end this agreement on 30 days' notice, or immediately if you breach the acceptable use section or do not pay.

When an account closes we delete it and its evaluation records, keeping only what tax and accounting law requires.

Changes

We may change these terms. If a change materially affects you we will email you at least 30 days beforehand, and carrying on using riffraff after it takes effect means you accept it. If you would rather not, close your account and we will refund the unused part of your current period.

Governing law

These terms are governed by the law of England and Wales, and the courts of England and Wales have exclusive jurisdiction.

Questions about any of this go to [email protected].