Agreement to Terms: By installing and using ThunderSweep, you agree to be bound by these Terms
of Service. If you do not agree to these terms, do not install or use the extension.
1. Acceptance of Terms
These Terms of Service ("Terms") govern your use of ThunderSweep ("the Extension"), a Chrome browser extension
provided by ThunderSecurity LLC ("we," "us," or "our"). By accessing or using the Extension, you agree to comply
with and be bound by these Terms.
2. Description of Service
ThunderSweep is a privacy scanner for Gmail and Google Drive that helps users identify sensitive documents across
their Google account. The Extension offers:
Free Plan: Limited scans (2 per week) with partial results (3 visible)
Clean Sweep: One-time purchase to unlock all results from a single scan
Shield Plan: Subscription for unlimited scans and monitoring (1 account)
Family Plan: Subscription for unlimited scans and monitoring (up to 5 accounts)
7-Day Free Trial: All new users receive 7 days of Shield features
3. Account Registration and Google Account Access
3.1 Google Account Authentication
To use ThunderSweep, you must connect your Google account via Google OAuth. Google's consent screen will show you
the following three permissions being granted:
View your email messages and settings — Read email metadata and content for local
sensitive-data scanning. No content leaves your device.
Read, compose, and send emails from your Gmail account — Required to modify emails at your
explicit request (e.g., delete emails, mark as read). ThunderSweep never composes or sends any email on
your behalf.
See, edit, create, and delete all of your Google Drive files — Used to scan Drive files
locally for sensitive-data detection, to read and write files inside your ThunderSweep Vault folder, and
to delete the original unencrypted file from Drive when you vault it (secure move). ThunderSweep only
modifies or deletes Drive files in direct response to actions you explicitly trigger.
3.2 Data Processing
All data processing happens locally in your browser. We do NOT:
Upload your emails or Drive files to our servers
Store your email or Drive file content
Transmit your data to third parties
Read the body of your emails beyond scanning for sensitive patterns
3.3 TS Share (Encrypted File Transfer)
TS Share is an optional feature that lets you send encrypted Vault files directly to another ThunderSweep
user. By using TS Share you agree to the following:
End-to-end encryption: Files are re-encrypted with a PBKDF2-derived transfer key on
your device before upload. The decryption key is shared only via the URL fragment (#) of the recipient's link, which browsers never transmit to our servers. ThunderSecurity LLC cannot decrypt the contents at any point.
Temporary cloud storage: Re-encrypted blobs are stored on Cloudflare R2 (operated by
ThunderSecurity LLC) for up to 7 days or until claimed, whichever is sooner. After that they are
permanently deleted.
Recipient notification: The recipient's email address is used solely to send a
one-time claim email. We do not use it for marketing or share it with third parties beyond Resend
(our transactional email provider).
Send limits: TS Share is limited to 5 transfers per calendar month per sender to
prevent abuse. This limit applies to Shield and Family plan subscribers; Free plan users cannot
initiate transfers.
You are responsible for ensuring you have the recipient's correct email address and
the right to share the files you transmit.
See our Privacy Policy for full details on how transfer data is handled.
4. Pricing and Payments
4.1 Free Trial
New users automatically receive a 7-day free trial of Shield features upon completing their first scan. The trial
requires no credit card and automatically expires after 7 days.
4.2 Paid Plans
Clean Sweep: $14.99 one-time payment. Unlocks all results from ONE scan. No refunds after
results are viewed.
Family Monthly: $9.99/month for up to 5 Gmail accounts, billed monthly. Cancel anytime.
Family Yearly: $99.99/year for up to 5 Gmail accounts, billed annually (equivalent to 10
months, 2 months free).
4.3 Payment Processing and License Keys
All payments are processed securely through Gumroad (gumroad.com), our third-party payment and
licensing platform. We do not store your payment information. By purchasing, you agree to Gumroad's Terms of Service.
Upon purchase, Gumroad issues you a license key. This key must be entered into ThunderSweep to
activate your paid features. License keys are subject to activation limits per plan (see Section 5).
ThunderSweep validates your license key against Gumroad's systems at activation and periodically thereafter.
4.4 Refund Policy
Important: ThunderSweep does not issue refunds for monthly subscription charges. All billing is
managed through Gumroad. If you have a billing dispute, contact [email protected] and we will work with
Gumroad on your behalf.
Clean Sweep (one-time): No refunds. The license is consumed upon activation and cannot be
reused or transferred.
Monthly Subscriptions (Shield/Family): No refunds for any monthly charge already processed.
You must cancel your subscription on Gumroad before your next billing date to avoid future charges.
Cancellation stops future billing only — it does not reverse charges already made.
Annual Subscriptions (Shield/Family): If you cancel within 14 days of purchase and have not
materially used the service, contact [email protected] to request a prorated refund. Refunds are
calculated based on unused full months remaining, minus the annual discount savings and any Gumroad
processing fees. After 14 days, no refunds are available.
Trial Users: The 7-day free trial requires no payment. No charges apply.
4.5 Subscription Cancellation
You must cancel your subscription directly on Gumroad. The "Unsubscribe" option within the
ThunderSweep extension does not cancel your billing — it only provides instructions to complete cancellation on
Gumroad. If you do not complete cancellation on Gumroad, you will continue to be charged on your next billing
date.
To cancel your subscription:
Open the ThunderSweep extension and click Unsubscribe to access your direct Gumroad
cancellation link, OR
Find your original Gumroad receipt email → click "subscription settings" → follow the magic
link → click "Cancel membership", OR
Email [email protected] with your license key and we will assist you
Upon cancellation on Gumroad:
You retain ThunderSweep access until the end of your current paid billing period
No further charges will be made after the current period ends
Your account reverts to the Free plan when the billing period expires
You may re-enter your license key at any time before expiration to continue using paid features
Vault Access After Cancellation: If your paid subscription expires or is cancelled, your Vault
enters read-only mode. You can still open, view, and download your encrypted files using your
vault password, but you cannot add new files. ThunderSweep cannot decrypt your files on your
behalf — your vault password never leaves your device and is never known to us. We strongly recommend
exporting any files you wish to keep in plaintext before your subscription ends.
5. License Grant
5.1 Limited License
Subject to your compliance with these Terms, we grant you a limited, non-exclusive, non-transferable, revocable
license to:
Install and use ThunderSweep for personal or internal business use
Use the Extension on devices where you have authorized Gmail accounts
5.2 License Activation Limits
Each license key has a maximum number of activations per plan to prevent unauthorized sharing while accommodating
legitimate reinstalls (e.g., browser resets, profile changes). Clean Sweep licenses are permanently consumed
upon activation and cannot be reused or transferred.
If you believe you have reached your activation limit due to an unusual circumstance (e.g., data loss, device
replacement), contact [email protected] with your license
key and proof of purchase.
5.3 License Restrictions
You may NOT:
Share your license key with others outside the intended plan (e.g., sharing a Shield key with a second
person)
Reverse engineer, decompile, or disassemble the Extension
Remove or modify any copyright notices
Use the Extension for illegal purposes
Attempt to bypass payment or trial limitations
Resell or redistribute the Extension
6. Account Limits
Free & Clean Sweep: 1 Google account per license (covers Gmail + Drive for that account)
Shield: 1 Google account per license (covers Gmail + Drive for that account)
Family: Up to 5 Google accounts per license (covers Gmail + Drive for each account)
Attempting to use a license key beyond its account limit will result in license deactivation.
7. Acceptable Use
7.1 Prohibited Activities
You agree NOT to:
Use the Extension to violate any laws or regulations
Scan emails you do not have permission to access
Use the Extension to harass, abuse, or harm others
Attempt to hack, compromise, or abuse the Extension's systems
Use automated tools to manipulate trial or scan limits
8. Intellectual Property
ThunderSweep, including all software, documentation, trademarks, and content, is owned by ThunderSecurity LLC and
protected by copyright and intellectual property laws. You acknowledge that no ownership rights are transferred
to you.
9. Disclaimers and Limitations of Liability
9.1 No Warranty
THE EXTENSION IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED
TO:
Warranties of merchantability or fitness for a particular purpose
Guarantees that the Extension will detect all sensitive documents
Warranties that the Extension will be error-free or uninterrupted
9.2 Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, THUNDERSECURITY LLC SHALL NOT BE LIABLE FOR:
Any indirect, incidental, special, or consequential damages
Loss of data, profits, or business opportunities
Damages resulting from use or inability to use the Extension
Data loss resulting from forgotten or lost Vault passwords, as our zero-knowledge architecture ensures we do not possess your password and cannot recover your files
Any damages exceeding the amount you paid for the Extension in the past 12 months
9.3 Acknowledgment
You acknowledge that:
ThunderSweep is a tool to help identify sensitive documents in Gmail and Google Drive, but may not detect
all instances
You are solely responsible for decisions about deleting emails or Drive files
We are not responsible for data loss if you delete important emails or files
You should back up important data before using bulk delete features
We are not responsible for the loss of your encryption key or data if your Google Drive account is
compromised
During the Google OAuth connection process, Google may display an "Unverified App" warning while our annual CASA lab security assessment is pending. You acknowledge this and assume the risk of proceeding.
10. Data and Privacy
Your use of the Extension is also governed by our Privacy Policy, which is
incorporated into these Terms by reference. Please review our Privacy Policy to understand our data practices.
11. Modifications to Service and Terms
11.1 Service Changes
We reserve the right to:
Modify, suspend, or discontinue the Extension at any time
Change pricing for future purchases (existing subscriptions unaffected)
Add or remove features
11.2 Terms Updates
We may update these Terms from time to time. We will notify you of material changes by:
Updating the "Last Updated" date at the top of this page
Displaying a notice in the Extension (for significant changes)
Your continued use of the Extension after changes constitutes acceptance of the updated Terms.
12. Termination
12.1 Termination by You
You may stop using the Extension at any time by:
Uninstalling the Extension from your browser
Canceling your subscription (if applicable)
Disconnecting your Gmail account
12.2 Termination by Us
We may suspend or terminate your access if you:
Violate these Terms
Engage in fraudulent activity
Abuse the trial or refund system
Use the Extension in a harmful manner
12.3 Effect of Termination
Upon termination:
Your license to use the Extension immediately ends
You must uninstall the Extension
Subscription fees are non-refundable except as stated in our Refund Policy
13. Governing Law and Dispute Resolution
13.1 Governing Law
These Terms are governed by the laws of the State of New York, United States, without regard to conflict of law
principles.
13.2 Dispute Resolution
For any disputes arising from these Terms or your use of the Extension:
This summary is for your convenience and is not part of the legal Terms.
Use ThunderSweep to scan your Gmail and Google Drive for sensitive documents
Get 7 days free trial, then choose Free or paid plans
All scanning happens locally — we never see your emails or Drive files
Drive access is read for scanning and write for Vault — ThunderSweep only writes encrypted Vault files to a dedicated ThunderSweep Vault folder in your Drive; all other Drive files are never modified
TS Share lets you send encrypted Vault files to other ThunderSweep users — files are re-encrypted end-to-end before upload; ThunderSecurity LLC cannot read them; blobs auto-delete after 7 days
Cancel subscriptions anytime — you keep access until the billing period ends
You must cancel billing directly on Gumroad — the in-app Unsubscribe does not stop charges
No refunds on monthly plans; annual plans within 14 days only
Do not share license keys or bypass limitations
We are not liable if you accidentally delete important emails or files
No guarantees we will detect every sensitive document