These terms apply to services sold by TODO_LEGAL_ENTITY ("we", "us"), registered in TODO_JURISDICTION, contactable at TODO_EMAIL. "You" means the person or company buying the service.
We sell fixed-scope technical services: a Launch Diagnosis, a Repair Sprint, a Release Retest, and a monthly Kept Green subscription. Each engagement is defined by a written statement of work naming the tests, the deliverables, the timeline and the price. Anything not named in that statement of work is out of scope.
A diagnosis reports what our named tests found within the agreed scope, access and time. It does not and cannot certify that your application contains no other defects or weaknesses. We do not warrant that your application is secure, compliant, or fit for any particular purpose. Any statement we make about readiness refers only to the tests listed in the statement of work.
If we notice a problem outside the agreed scope, we will tell you in writing. We are under no obligation to repair it without a separate statement of work, and we accept no liability for your decision not to act on it.
You will grant the least access the work needs, and you confirm you are authorised to grant it. We use credentials only for the agreed work, do not share them, and delete our copies within seven days of the engagement ending. You agree to rotate every credential you shared with us once we finish. If we discover exposed credentials or personal data during the work, we will tell you immediately, will not copy or retain that data beyond what is needed to report it, and are not liable for an exposure that already existed.
Fixed-price services are paid before work starts. A Repair Sprint takes 50% before work starts and 50% on delivery. Subscriptions bill monthly in advance and you may cancel at any time; cancellation takes effect at the end of the paid month and we do not pro-rate. Prices are in US dollars. Any taxes shown at checkout are added on top.
If a Launch Diagnosis returns a pass on every named test, we refund it in full. Otherwise, the diagnosis is delivered work and is not refundable once the sheet has been sent. A Repair Sprint may be cancelled before work starts for a full refund of the deposit; after work starts you pay for hours already delivered.
Your code, data and content stay yours. Once you have paid in full, the deliverables we made specifically for you — reports, fixes, tests written against your app — become yours. We keep ownership of our own general tooling, templates and test framework, and may reuse the general knowledge we gained, never your confidential material.
Each of us keeps the other's confidential information private and uses it only for this engagement. This lasts three years after the engagement ends, and indefinitely for anything that is a trade secret. We will not name you as a client without your written permission.
Neither of us is liable for indirect, incidental, special or consequential loss, including lost profit, lost data or business interruption. Our total liability for any claim is capped at the fees you paid us for the engagement the claim arises from. Nothing here limits liability that cannot be limited by law, including our own gross negligence or wilful misconduct.
You remain responsible for your application, your users and your legal obligations to them, including any duty to notify them of a data breach. We are not a data controller for your users' data.
Either of us can end an engagement with seven days' written notice. You pay for work delivered up to that point. Access is revoked immediately when an engagement ends.
These terms are governed by the law of TODO_JURISDICTION. We will both try to resolve a dispute in good faith before starting proceedings. TODO — decide with a lawyer whether to require arbitration; it is usually cheaper to enforce across borders than a court judgment.
We may update these terms for future engagements. The version in force is the one you were shown when you paid.