Version 2026-08-23.1. These terms apply to the purchase of a Kwistech Secure evidence pack licence. The version above is printed on every pack you generate, so a reader can always tell which terms applied.
Kwistech, a business operating in Alberta, Canada. Contact info@kwistech.ca for anything about your order or this software.
A licence for one website, valid for one year from the date of issue. While it is
current you can generate the Insurance / broker evidence pack — a PDF plus a
matching machine-readable JSON file — as often as you need, each one dated at
the moment you generate it. There is no per-report charge and no usage limit.
The hardening half of the plugin is free, requires no licence, and is not part of
this purchase. It continues to work whether or not you ever buy a licence, and
whether or not your licence later expires.
$149 CAD. That is the total. No tax is added at checkout and there
are no other charges.
Kwistech is a small supplier for GST/HST purposes and is not registered, so no
GST/HST is charged on this sale and none is shown on your receipt. If that changes
we will say so here before it applies to any new purchase; it will not be applied
retroactively to a licence you have already bought.
Payment is processed by Stripe. Kwistech never sees or stores your card details.
Your licence key is sent by email to the address you give at checkout, normally
within one business day. Keys are issued manually, so if you buy at 2am on a
Saturday it will not arrive at 2:01am.
You must give your website address at checkout, and it must be
correct. A licence works only on the site it was issued for. If you are unsure what
to enter, install the free plugin first — the Settings screen prints the exact
hostname your site presents.
If your site moves to a new domain, email us and we will reissue the licence for the
new address at no charge. Reissuing is a support task, not a new purchase.
Kwistech is not an insurer, a broker, or an agent. Buying this pack does not create, extend, or guarantee any insurance coverage, and it is not advice about what coverage you need.
The pack is not CyberSecure Canada certification and it is not a Canadian Centre for Cyber Security (CCCS) assessment, endorsement, or accreditation. Where it references CCCS baseline control numbers, it does so only to show which of that baseline's topics the WordPress-local checks touch. It says nothing about controls outside your WordPress site.
Insurers and brokers set their own evidence requirements. We make no claim that any broker, underwriter, or insurer will accept this document, treat it as sufficient, or offer you better terms because of it.
Only what can be observed from inside your WordPress installation. It does not scan
for malware, test your firewall, inspect your host, review your email or identity
provider, or verify anything about devices, staff, or networks. Items it cannot
determine are reported as “unknown” rather than guessed.
The pack describes your site at the moment you generated it. It is not a continuing
statement and it does not update itself.
The licence covers one website at one hostname. A subdomain is a different site. The
licence is personal to you and may not be resold, sublicensed, or transferred to
another party.
A licence cannot be revoked once issued. It is verified by your own
server checking a cryptographic signature, with no connection back to us, so there
is no mechanism by which we could withdraw one. It simply stops working on its
expiry date. We consider this a feature — it is what makes the no-telemetry
promise in section 11 possible — but you should understand it is also why
section 10 is worded the way it is.
The plugin itself is licensed GPL-2.0-or-later, as WordPress requires. The licence
key governs access to the evidence pack feature, not your rights to the code.
If you were charged and your licence key never arrived, or never worked on the site
you bought it for, you get a full refund. That is the refund condition, and we will
not argue about it.
Once a licence has been used to generate a pack, the product has been delivered and
there is no refund. Because a licence cannot be revoked, a refund after delivery
would mean giving away a working licence.
The plugin sends nothing about your site to Kwistech or to anyone else, ever. Your
licence is verified by checking a cryptographic signature on your own server —
there is no activation call, no licence check, no usage reporting and no remote
access. It will keep working exactly as it does today if Kwistech disappears
tomorrow.
The only network requests the plugin makes are to your own website address: an
HTTPS request to your home page to check for a security header, and a one-off
request to a new sign-in address to confirm it works before saving it. Nothing else
leaves your server, and neither request carries anything about you.
What we collect when you buy: your name, email address, billing
address and the website address you enter, all via Stripe; plus the order reference.
We use them to issue your licence, to provide support, and to meet Canadian tax
record-keeping obligations. We do not sell or share them, and we do not send
marketing you did not ask for.
What we never collect: anything from inside your WordPress site.
Not your users, not your configuration, not your packs. There is no channel for it
to reach us.
What the pack contains: the user accounts on your site, including
staff names, email addresses, roles, and last sign-in dates. That is personal
information under PIPEDA, and it stays on your server — the plugin never puts
it at a public web address and never transmits it. It contains no passwords, no
password hashes, and no application password values. Your copy is deleted
automatically after 90 days; delete any copies you sent onward when you no longer
need them.
To ask what we hold about you, or to have it corrected or deleted, email
info@kwistech.ca. Note that tax records we are legally required to
retain cannot be deleted on request.
The plugin and the evidence pack are provided as-is. We have built and tested them
carefully, and we publish our security process, but we do not warrant that the
software is error-free, that it will secure your site against every threat, or that
the pack will satisfy any particular third party.
To the extent permitted by law, Kwistech's total liability arising from this
purchase is limited to the amount you paid for it. We are not liable for indirect or
consequential losses, including lost business, lost data, or a declined or
unfavourable insurance outcome.
Nothing here limits any right you have under applicable consumer protection law that
cannot be limited by agreement.
If you find a security problem in the plugin, email info@kwistech.ca. We will acknowledge it, tell you honestly what we can and cannot fix, and credit you in the changelog if you would like. We will not threaten you and we will not ask you to stay quiet indefinitely.
We may change these terms for future purchases. The version that applied to your purchase is the one shown at checkout, and it is recorded in every pack you generate. Changes are not applied retroactively to a licence you have already bought.
These terms are governed by the laws of the Province of Alberta and the federal laws of Canada applicable there.