Last updated: July 2026
By using Nopea, you agree to these terms. If you are using Nopea on behalf of a company, you confirm you have authority to bind that company to these terms.
Nopea provides three products: (a) Consentea — cookie and consent management, covering GDPR, CCPA/CPRA, India's DPDP Act, and other privacy frameworks; (b) Scanea — compliance readiness monitoring and evidence collection for SOC 2, HIPAA, CMMC, ISO 27001, and CIS Controls; (c) Maskea — a hosted edge proxy that detects and redacts PII and API tokens from requests and responses, and separately, @nopeatech/maskea — an MIT-licensed, self-hosted npm package developers install to add retries, budget tracking, and secret/PII redaction to their own AI calls locally, with no Nopea account required. @nopeatech/maskea sends anonymous product telemetry by default, disclosed in full and disableable per our Privacy Policy (nopea.tech/privacy) and nopea.tech/klaroshield/privacy. All pricing is quoted and billed in USD unless a specific agreement states otherwise. We reserve the right to modify or discontinue features with reasonable notice.
You are responsible for maintaining the security of your account credentials. Notify us immediately at security@klaro.services if you suspect unauthorised access. Each subscription covers the domains, assets, or request volume specified in your plan.
Subscriptions are billed via Razorpay, currently on an annual basis for Consentea and Scanea. Maskea is metered by monthly request volume with a free tier. Invoices are issued at the start of each billing period. Accounts with failed payments may be downgraded to a free or paused tier until payment is resolved; your data is preserved during this period.
You own the data you send to Nopea's products — your domains and configuration in Consentea, your assets and scan artifacts in Scanea, and the traffic that passes through Maskea. We do not claim any rights over your data. On account termination, you may request an export within 30 days.
Nopea may not be used for unlawful purposes, to store or process content that violates applicable law, or to attempt to breach the security of the platform or of other customers' data. Violation may result in immediate account suspension.
When you use Consentea on your website, you (our customer) are the data controller for your own site visitors, and Nopea acts as a data processor for the consent-decision records Consentea generates on your behalf. You are responsible for configuring Consentea correctly for the jurisdictions your visitors are in.
Scanea provides automated readiness scanning, gap identification, and evidence organization. It is a tool to help you prepare for a compliance audit — it does not itself certify compliance, and results should be reviewed by your own compliance team or auditor before being relied on for an actual certification (SOC 2, HIPAA, etc.).
Nopea's products are software tools, not legal, compliance, or security advice. Outputs from scans, scoring, and automated checks are for reference only — always verify with a qualified professional before making compliance or legal decisions. Our liability is limited to the amount paid by you in the 3 months preceding any claim.
These terms are governed by the laws of the jurisdiction in which Nopea is incorporated, without regard to conflict-of-law principles. This does not limit any statutory rights you may have under the mandatory laws of your own country (e.g. as a Consentea end-user data subject).
vc@nopea.tech