The contract, in plain language
Terms of use
What you're actually buying when you upgrade to Pro, who you're contracting with, how refunds work, and the boring-but-necessary liability terms — written to actually be read, not just filed.
Who you're contracting with
These Terms are entered into by Ioannis Afaloniatis, an individual residing in Greece, trading as “Total Security WP” (“we”, “us”, “our”). There is not yet a separate registered company behind the product — if that changes, this page will be updated and the change noted in the plugin's changelog.
By installing the free plugin, creating an account at licensekit.totalsecuritywp.com, or purchasing a Total Security WP Pro license, you agree to these Terms. If you don't agree, don't use the plugin's Pro features or the account portal — the free plugin itself has no purchase requirement and these Terms don't restrict your rights under the GPL (see below).
What these terms cover
Three things, all operated by us:
- The Total Security WP plugin — free tier, distributed through WordPress.org, and Total Security WP Pro, a separate add-on plugin sold and delivered directly through LicenseKit (not distributed through WordPress.org).
- LicenseKit (licensekit.totalsecuritywp.com) — the account portal where a license is purchased, activated, and managed, and the API the plugin calls for license validation, the threat-intelligence feed, cloud reputation, and Sentinel AI.
- Sentinel AI — the credit-metered cloud analysis service, opt-in and consent-gated, described in full on the privacy & data page.
What data each of these actually sends and when is documented separately, in full, on the privacy & data page — these Terms cover the commercial and legal relationship; that page covers what leaves your server.
The GPL, and what you're actually paying for
Total Security WP is licensed under GPLv2 or later — required for the free plugin as anything distributed through WordPress.org must be, and carried through to Total Security WP Pro as well, even though Pro itself isn't distributed there: Pro is a derivative work of WordPress's own GPL'd APIs (reached via the free plugin), the same reasoning that makes every other premium WordPress plugin add-on GPL regardless of how it's sold. That means the code itself — free tier and Pro tier alike — is free to copy, modify, and redistribute under the GPL's terms, same as any other GPL software. A Pro purchase does not change that; we can't and don't restrict what the GPL already grants you over the code.
What a Pro license actually buys is access, not exclusivity over code: a license key that activates Pro features on a defined number of sites, continued updates for as long as the license is active, and access to the services a Pro license unlocks — the live threat-intelligence feed, cloud reputation lookups, Sentinel AI credits, and the LicenseKit account portal itself. Deactivate or let a license lapse and those services stop; the plugin code you already have keeps working under the GPL, just without fresh updates or service access.
Accounts
A LicenseKit account is required to purchase or manage a Pro license. You're responsible for keeping your login credentials secure and for all activity under your account. Tell us promptly (see Contact below) if you believe your account has been compromised.
Purchases & payment
Payments are processed by Dodo Payments, acting as our merchant of record. That means Dodo Payments is the seller on record for tax and invoicing purposes: your statement descriptor, receipt, and invoice will reference Dodo Payments (or a related name) rather than “Total Security WP” directly, and Dodo handles applicable sales tax/VAT collection on the transaction. This arrangement may change (for example, to a different payment processor) as the business structure behind the product changes; any change is reflected here before it takes effect.
Prices are shown before purchase on the pricing page and at checkout. Subscription plans renew automatically at the then-current price for that plan unless cancelled before the renewal date; you can cancel any time from the LicenseKit portal, effective at the end of the current billing period.
Refunds
Not happy with Pro for any reason? Contact us within 14 days of purchase for a full refund, no questions asked. After 14 days, purchases are final except where required otherwise by law (see the EU consumer-rights note below).
Refunds are issued to the original payment method through Dodo Payments and may take a few business days to appear, depending on your bank or card issuer.
Sentinel AI credits
Every Pro plan includes a monthly Sentinel AI credit allowance; additional credits can be purchased as top-up packs from the LicenseKit portal. Credits are consumed as Sentinel AI performs analysis and do not roll over or carry a cash value — they're a usage allowance, not a stored-value account. Running out of credits doesn't disable the plugin or any other Pro feature: Sentinel AI falls back to local, non-AI heuristic triage until credits are topped up or the next monthly allowance arrives, exactly as described on the privacy page.
Acceptable use
You agree not to:
- Share or resell a license key beyond the number of site activations it was purchased for.
- Use the LicenseKit API, the threat-intelligence feed, or Sentinel AI in any way designed to abuse, overload, or circumvent their rate limits or credit metering.
- Use the plugin or its services to attack, scan, or gain unauthorized access to systems you don't own or have explicit permission to test.
None of the above limits your rights over the plugin's code under the GPL — this section is about the hosted services (LicenseKit, the feed, Sentinel AI), not the software license.
Availability & no security guarantee
We aim to keep LicenseKit, the threat-intelligence feed, and Sentinel AI available, but we don't guarantee uninterrupted uptime, and the plugin is deliberately engineered to degrade gracefully rather than depend on it — see “What happens if the firewall itself breaks?” on the docs page for how the firewall fails open if its own configuration is ever missing or unreadable.
No security software can guarantee protection against every attack. Total Security WP is built to significantly reduce risk, not to promise an unbreachable site. Use it as one layer of a broader security practice — backups, strong credentials, timely updates — not as a substitute for all of them.
Intellectual property
“Total Security WP” and its logo are our trademarks. The GPL covers the plugin's code; it does not grant rights to use our name, logo, or branding on a competing product or in a way that implies endorsement.
Termination
You can stop using the services and close your LicenseKit account at any time. We may suspend or terminate access to LicenseKit, the feed, or Sentinel AI for an account that violates the Acceptable Use section above, or if a payment is reversed/charged back. The plugin's free tier and any code you already have are never revoked by an account action — that's what the GPL guarantees, and account termination doesn't override it.
Warranty disclaimer & limitation of liability
The plugin and services are provided “as is,” without warranties of any kind, to the extent permitted by law. We are not liable for indirect, incidental, or consequential damages arising from use of the plugin or services, including but not limited to data loss, downtime, or a security incident on your site — except where such liability cannot be excluded under applicable law (notably, EU consumer protections, which this section does not attempt to override). Where liability can lawfully be limited, our total liability for any claim is limited to the amount you paid us in the 12 months before the claim arose.
Governing law
These Terms are governed by the laws of Greece. If you are a consumer resident in the European Union, this does not deprive you of the protections granted by the mandatory consumer-protection laws of your own country of residence, which continue to apply regardless of this clause.
Changes to these terms
We may update these Terms as the product or business changes — most notably, if a registered company is formed to take over from the individual named above, or if the payment processor changes. Material changes are noted on this page and, where they affect existing Pro customers, in the plugin's changelog.
Contact
Questions about these Terms: [email protected]. Privacy-specific questions go to [email protected] instead — see the privacy & data page. Security vulnerabilities go through the disclosure policy, not either address above.
Last updated alongside plugin version 1.4.10. Material changes are noted in the plugin's changelog on WordPress.org, published with each release.