Terms of Use

1. Acceptance of terms

By accessing or using the Azure Resource Audit service ("Service") provided by Lensory ("we", "us", "our"), you agree to be bound by these Terms of Use ("Terms"). If you do not agree to these Terms, do not use the Service.

These Terms are governed by the laws of New Zealand. By using the Service, you consent to the exclusive jurisdiction of the courts of New Zealand for any disputes arising from your use of the Service.

2. Description of the service

The Service is a read-only Azure infrastructure auditing tool that allows authenticated users to:

• Connect to Azure Resource Manager using a short-lived Cloud Shell access token;
• Query resource configuration data from Azure subscriptions and resource groups they are authorised to access;
• Generate and export structured Excel, CSV, and JSON reports of that configuration data locally in their browser;
• Check resource settings against built-in compliance policy templates (CIS Azure Benchmark, Microsoft Security Baseline) and view per-finding remediation guidance;
• Optionally save audit snapshots to browser local storage (opt-in, off by default) to enable configuration drift detection across sessions; and
• View a history of past audit runs.

The Service does not write, modify, or delete any data in your Azure tenancy. All Azure API calls are read-only (HTTP GET).

3. Eligibility and account registration

You must be at least 16 years of age to use the Service. By using the Service, you represent that you meet this requirement.

You register for the Service by authenticating via Google or GitHub OAuth. You are responsible for maintaining the confidentiality of your account. You agree to notify us immediately at support@lensory.io if you become aware of any unauthorised use of your account.

4. Acceptable use

4.1 Permitted use

You may use the Service only to audit Azure resources that you are personally and lawfully authorised to access under your organisation's Azure RBAC policies and any applicable laws and agreements.

4.2 Prohibited conduct

You must not:

• Use the Service to access Azure resources for which you do not have authorisation;
• Share your Azure Cloud Shell access token with Lensory, third parties, or other users (the token is handled client-side and should never be transmitted outside your browser);
• Attempt to circumvent rate limits, authentication mechanisms, or other security controls of the Service;
• Use automated scripts, bots, or crawlers to access the Service at a volume that places unreasonable load on our infrastructure;
• Reverse engineer, decompile, or attempt to extract source code of the Service beyond what is already publicly available;
• Use the Service for any unlawful purpose or in violation of any applicable law or regulation;
• Resell, sublicense, or commercialise access to the Service without our prior written consent.

5. Azure access tokens

The Service requires you to paste an Azure Cloud Shell access token to authenticate with Azure Resource Manager. You acknowledge and agree that:

• You are solely responsible for the security of your access token;
• Access tokens grant read access to your Azure tenancy scoped to your existing permissions and should be treated as sensitive credentials;
• The Service processes the token in-memory solely to make authorised API calls to Azure and to extract your Azure identity — the token is never persisted to our servers;
• Tokens retrieved from Azure Cloud Shell are short-lived and expire automatically; and
• We accept no liability for any loss or harm arising from your failure to keep your access token secure.

6. Intellectual property

The Service, including its source code, design, user interface, and content created by Lensory, is owned by Lensory and protected by copyright and other intellectual property laws. Nothing in these Terms transfers any intellectual property rights to you.

You retain ownership of any data you import into or export from the Service, including audit reports generated from your Azure resource data.

7. Disclaimer of warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE. TO THE FULLEST EXTENT PERMITTED BY LAW, LENSORY DISCLAIMS ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO:

• WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT;
• ANY WARRANTY THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS;
• ANY WARRANTY AS TO THE ACCURACY, COMPLETENESS, OR RELIABILITY OF AUDIT RESULTS OR EXPORTED REPORTS.

Audit results reflect the state of your Azure resources at the time of the audit and depend on the accuracy of data returned by the Azure Resource Manager API. You should not rely solely on audit output for compliance, security, or operational decisions without independent verification.

8. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY THE NEW ZEALAND CONSUMER GUARANTEES ACT 1993 AND OTHER APPLICABLE LAW, IN NO EVENT SHALL LENSORY BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOSS OF PROFITS, LOSS OF DATA, BUSINESS INTERRUPTION, OR ANY OTHER LOSS ARISING FROM YOUR USE OF OR INABILITY TO USE THE SERVICE.

Where liability cannot be fully excluded by law, our total liability to you for any claim arising from these Terms or the Service shall not exceed the greater of: (a) NZD $100; or (b) the amount you paid us in the 12 months preceding the claim.

Nothing in these Terms limits any rights you may have under New Zealand consumer law that cannot be lawfully excluded.

8a. Browser local storage (optional feature)

The Service includes an optional drift detection feature that, when enabled by you, saves a snapshot of your most recent audit to your browser's local storage. This feature is disabled by default. By enabling it, you acknowledge that:

• Audit snapshot data (resource names, setting names, and their observed values) is stored on your device in your browser's local storage under the azcheck.dev origin;
• This data is never transmitted to Lensory's servers;
• You are responsible for managing and clearing this data from your browser if you no longer wish to retain it;
• Lensory is not responsible for the security of data stored on your device; and
• The feature can be disabled at any time via the Settings panel in the application.

For a full description of what is stored and how to clear it, see our Data Storage page.

9. Third-party services

The Service relies on third-party services including Microsoft Azure, Google, GitHub, Railway, and Cloudflare. Your use of those services is governed by their respective terms. We are not responsible for the availability, accuracy, or conduct of any third-party service.

10. Account termination

You may delete your account at any time through the application. Deletion removes all associated personal data as described in our Privacy Policy.

We reserve the right to suspend or terminate your access to the Service, with or without notice, if we reasonably believe you have violated these Terms, abused the Service, or pose a risk to other users or our infrastructure. In the case of termination, we will make reasonable efforts to notify you via the email address on your account.

11. Changes to these terms

We may update these Terms from time to time. We will post the revised Terms with an updated "Last updated" date. If you continue to use the Service after the effective date of any change, you are deemed to have accepted the revised Terms. We encourage you to review this page periodically.

For material changes that affect your rights, we will make reasonable efforts to notify you via email before the change takes effect.

12. Governing law and jurisdiction

These Terms are governed by and construed in accordance with the laws of New Zealand, including the Contract and Commercial Law Act 2017. You agree that any disputes arising from these Terms or your use of the Service shall be subject to the exclusive jurisdiction of the courts of New Zealand.

13. Contact us

For questions about these Terms, contact us at:

• Email: support@lensory.io
• Contact form: azcheck.dev/contact