Terms of Service
Governing the use of the Clockwork Control self-hosted software platform, the Clockwork Renegade WordPress plugin, and related services provided by Clockwork Web Dev, LLC.
Self-Hosted Data Sovereignty
Clockwork Control is self-hosted software that runs on your hardware. We do not host your databases, store your API credentials, or proxy your client traffic.
Open-Source Freedom
Dual-licensed transparency: Clockwork Control and Clockwork Companion are licensed under the MIT License. Clockwork Renegade is licensed under GPL-2.0-or-later for WordPress.org.
Affirmative Consent Pairing
Zero outbound data transmission occurs until an authorized administrator explicitly generates and connects a 256-bit cryptographic Connection Key in wp-admin.
WordPress.org Guideline Compliant
No arbitrary remote code execution (eval) is present in Clockwork Renegade. All maintenance operations strictly invoke WordPress core’s native upgrader APIs.
Agreement to Terms
These Terms of Service ("Terms") constitute a legally binding agreement between you ("User", "you", or "your", referring to an individual, agency, or corporate entity) and Clockwork Web Dev, LLC ("Company", "we", "us", or "our"), governing your access to and use of:
- The Clockwork Control self-hosted command center software application;
- The Clockwork Renegade WordPress plugin (architected for the WordPress.org Plugin Directory, currently in pre-submission testing; available via GitHub release);
- The Clockwork Companion WordPress plugin (distributed as a managed must-use plugin); and
- The official website at clockworkcontrol.com, along with associated documentation, APIs, and community resources.
By downloading, installing, activating, or using Clockwork Control or any of our WordPress plugins, you acknowledge that you have read, understood, and agree to be bound by these Terms. If you do not agree, you must not install or use the software.
Open-Source Software Licensing & Rights
Clockwork Control is dedicated to open-source transparency and software freedom. Different components of our ecosystem are distributed under established open-source licenses:
Licensed under the permissive MIT License. You are free to inspect, modify, host, and run the software without per-site fees or proprietary lock-in.
Licensed under the GNU General Public License v2.0 or later (GPL-2.0+), in full compliance with the WordPress.org Plugin Directory guidelines and WordPress core licensing.
Licensed under the MIT License for deployment into managed agency hosting clusters (SpinupWP, Pressable, GridPane).
Nothing in these Terms limits, restricts, or supersedes any rights granted to you under the terms of the applicable MIT or GPL open-source licenses.
Self-Hosted Architecture & Customer Responsibility
Clockwork Control is a self-hosted command center software application, not a hosted multi-tenant Software-as-a-Service (SaaS).
When you deploy Clockwork Control:
- You deploy and operate the software on your own computer hardware, local network appliance (e.g., an Apple Silicon Mac Mini or Intel NUC), or private virtual private server (VPS);
- You maintain complete, exclusive custody over all SSH private keys, provider API tokens, database credentials, and client site data;
- Clockwork Web Dev, LLC operates no central data storage, does not act as an intermediary or proxy for your server connections, and has zero access or visibility into your connected servers or client websites;
- You are solely responsible for provisioning, patching, backing up, and securing the host operating system, environment variables, web server software, and local network firewall rules protecting your instance.
Affirmative Consent & Cryptographic Pairing
In strict compliance with WordPress.org Guidelines 6 & 7 regarding third-party services and affirmative consent:
Clockwork → Connection (admin.php?page=clockwork-connection), generate a unique 256-bit cryptographic Connection Key, and paste it into their Clockwork Control dashboard.Authorized Use & Fleet Management Rights
You represent, warrant, and agree that:
- You are the rightful owner of, or have obtained all necessary written authorizations, client agreements, and administrative permissions to manage, monitor, back up, and update any WordPress installation or server you connect to Clockwork Control;
- You will not use Clockwork Control, Clockwork Renegade, or Clockwork Companion to conduct unauthorized surveillance, vulnerability probing, distributed denial-of-service (DDoS) attacks, unauthorized data extraction, or any activity that violates applicable laws or third-party rights;
- You will comply with all applicable local, state, national, and international laws, regulations, and privacy standards (including GDPR, CCPA, and CPRA where applicable).
Centralized Updates, Backups & Maintenance Operations
Clockwork Control provides command-and-control orchestration for routine WordPress site operations:
- Native Upgraders: In Clockwork Renegade, updates strictly invoke WordPress core's native upgrader APIs (e.g.,
Plugin_Upgrader,Theme_Upgrader,Core_Upgrader) as executed by WordPress itself. The plugin does not execute arbitrary remote PHP code, dynamiceval(), or backdoor scripts. - Inherent Risks of Third-Party Code: Updating WordPress plugins, themes, or core files carries inherent risks of software incompatibilities, PHP version deprecations, or third-party regressions. You are solely responsible for implementing backup policies, canary staging verification, and rollback contingencies prior to executing batch operations across client sites.
- Off-Site Backups: Where off-site disaster recovery backups (such as AWS S3 Glacier relays) are configured, backup archives are staged locally and transferred directly between your infrastructure and your designated cloud storage credentials. Clockwork Web Dev, LLC never stores or inspects your backup archives.
Data Disclosures & Transmitted Telemetry
To provide multi-site fleet monitoring, Clockwork Renegade transmits the following telemetry payloads exclusively to your own paired Clockwork Control instance upon scheduled poll or manual dispatch:
Core Environment Specs
Site URL, home URL, PHP version, WordPress version, active theme, and web server software (Nginx, Apache, LiteSpeed).
Plugin & Theme Inventory
List of installed plugins and themes, active or inactive status, version numbers, and update availability flags from WordPress.org or provider APIs.
WP-Cron & Task Schedules
Scheduled cron task execution timestamps, overdue jobs, and recurrence intervals to alert you to stalled background workers.
Storage & Database Metrics
High-level database table sizes, autoload option payload size, and uploads directory disk usage to detect runaway media growth.
Uptime & HTTP Verification
Origin HTTP status receipts, SSL certificate expiration dates, and optional synthetic contact form delivery test results.
Zero Centralized Data Collection
Clockwork Web Dev, LLC does not collect, receive, store, or process any of the above telemetry. All telemetry routes strictly point-to-point from your WordPress installation to your self-hosted Clockwork Control instance via HTTPS.
Third-Party Integrations & Providers
Clockwork Control features a modular integration engine that communicates directly with external third-party services at your election:
- Hosting & Cloud Infrastructure: SpinupWP, GridPane, Pressable, Cloudways, WP Engine, Kinsta, AWS S3, DigitalOcean, Vultr, Linode, and Microsoft Azure;
- Communication & ChatOps: Slack, Mattermost, Twilio, and Mailgun;
- Security & Performance Services: CISA KEV feeds, Sucuri SiteCheck, GTmetrix, Google PageSpeed Insights, and Cloudflare.
Your use of third-party services is governed independently by the terms, service level agreements, and privacy policies of each respective provider. Clockwork Web Dev, LLC is not responsible or liable for any provider’s service availability, rate limits, API modifications, pricing, or security practices.
Automated SMS & Text Messaging Terms (Twilio)
Clockwork Control includes an optional SMS notification feature operated by Clockwork Web Dev, LLC ("we", "us", or "our") via our telecommunications provider Twilio Inc. By providing your mobile phone number and enabling SMS alerts within Clockwork Control, you expressly agree to the following terms and conditions:
- Program Description & Alerts: Clockwork Control Operational Alerts. Text messages sent through this program consist exclusively of operational notifications, including critical website downtime alerts, site recovery notices, maintenance mode transitions, security lockouts, and emergency server health updates for technical administrators and on-call operators.
- Opt-In Consent: Users opt in to receive transactional SMS alerts by voluntarily entering their mobile phone number into the notification settings (
/settings/notifications) of their Clockwork Control dashboard and enabling SMS delivery, or by verbally consenting during account onboarding with an authorized administrator. Message consent is strictly limited to transactional service notifications and will never be shared or used for marketing or commercial promotion. - Message Frequency: Message frequency varies based on the status of your monitored websites, server operational health, and configured alerting rules. When all systems remain healthy, zero messages are transmitted.
- Cancellation & Opt-Out (STOP): You can cancel the SMS service at any time. Simply text STOP, CANCEL, UNSUBSCRIBE, QUIT, or END to our sending number (
+1 (855) 273-3997or your designated Twilio sender), or disable the SMS toggle for your contact in Clockwork Control. After sending STOP, you will receive a single SMS message confirming that you have been unsubscribed. Following that confirmation, you will receive no further SMS messages unless re-enabled. - Customer Support & Help (HELP): If you experience issues with our messaging program or need assistance, reply with the keyword HELP to any message, email support@clockworkcontrol.com, or visit our support desk at clockworkcontrol.com/support.
- Message & Data Rates: Message and data rates may apply for any messages sent to you from us and to us from you. Check with your mobile carrier for details on your plan’s SMS and data rates.
- Carrier Liability: Wireless carriers (including AT&T, T-Mobile, Verizon, Sprint, and regional mobile networks) are not liable for delayed, undelivered, or misdirected messages.
Disclaimer of Warranties
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, CLOCKWORK CONTROL, CLOCKWORK RENEGADE, CLOCKWORK COMPANION, AND ALL ASSOCIATED DOCUMENTATION AND MATERIALS ARE PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS, WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE.
CLOCKWORK WEB DEV, LLC EXPRESSLY DISCLAIMS ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, AND ACCURACY. WE DO NOT WARRANT THAT THE SOFTWARE WILL OPERATE UNINTERRUPTED, SECURE, ERROR-FREE, OR FREE OF DEFECTS OR HARMFUL COMPONENTS.
Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL CLOCKWORK WEB DEV, LLC, ITS MEMBERS, MANAGERS, OFFICERS, EMPLOYEES, AGENTS, OR CONTRIBUTORS BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY INDIRECT, CONSEQUENTIAL, INCIDENTAL, SPECIAL, PUNITIVE, OR EXEMPLARY DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, LOSS OF REVENUE, LOSS OF DATA, REPUTATIONAL DAMAGE, WORK STOPPAGE, SYSTEM CRASHES, OR BUSINESS INTERRUPTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR INABILITY TO USE THE SOFTWARE.
IN NO EVENT SHALL OUR TOTAL AGGREGATE LIABILITY ARISING FROM OR RELATED TO THESE TERMS OR YOUR USE OF THE SOFTWARE EXCEED THE TOTAL AMOUNT PAID BY YOU TO CLOCKWORK WEB DEV, LLC IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR ONE HUNDRED UNITED STATES DOLLARS ($100.00 USD), WHICHEVER IS GREATER.
Clean Uninstallation & Data Purging
In accordance with WordPress.org Plugin Directory Guideline 9 (Clean Uninstallation), when you delete Clockwork Renegade via the WordPress administrative plugins interface, the plugin's automated uninstallation routine (uninstall.php) permanently executes the following cleanup:
- Deletes all WordPress options prefixed with
clockwork_renegade_*; - Deletes all transients and temporary cache objects;
- Drops all custom database tables created by the plugin, including
wp_clockwork_renegade_action_log,wp_clockwork_renegade_auth_failures, andwp_clockwork_renegade_resource_samples.
Modifications to Terms
We reserve the right to revise or modify these Terms at any time in our sole discretion. When changes are made, we will update the "Effective Date" at the top of this document and post the updated Terms at clockworkcontrol.com/terms. Significant architectural changes will be noted in our public changelog and release notes.
Your continued installation or use of Clockwork Control, Clockwork Renegade, or Clockwork Companion following the posting of revised Terms constitutes your acceptance of the revised terms.
Governing Law & Contact Information
These Terms and any dispute arising from or related to the software shall be governed by and construed in accordance with the laws of the State of Georgia, United States, without regard to its conflict of law principles.
