Terms of Service

1. Account terms

1.1 You are responsible for maintaining the security of your account and password. The Company is not liable for loss or damage from your failure to meet this obligation.

1.2 You are responsible for all activity that occurs under your account, including activity by others with logins under your account.

1.3 You may not use the Service for any illegal purpose or in violation of laws in your jurisdiction.

1.4 You must provide a valid email address and any other information required to complete signup.

1.5 Accounts registered by bots or automated methods are not permitted.

2. Payment and usage

2.1 The Service is billed monthly. Each invoice has two parts: a base fee for the coming month, charged in advance, and a usage charge for metered usage over the measurement period ending at the invoice date, charged in arrears. Add-ons are charged with the base fee, in advance.

2.2 The base fee includes a starting allowance on each usage meter. Usage is measured on three meters: active users, packages scanned, and downloads served. The largest of the three sets your plan size for the cycle, and the other two are included up to that same size, so one organization is not billed three times for the same size measured three ways. Current allowances, meter definitions, and the measurement period are published at bytesafe.dev/pricing.

2.3 Usage above the starting allowance is charged in arrears on your next invoice, at the rates published at bytesafe.dev/pricing. If your usage stays within the allowance, the next invoice is the base fee alone. Recent heavier activity raises the invoice while it remains within the measurement period, and the charge decreases as that activity ages out. Nothing blocks or throttles when usage rises, and there is no capacity to buy in advance.

2.4 Usage is measured by the Company's systems, using the meters and measurement period described on the pricing page. The Company may refine how a meter is measured or reported on 30 days' notice by email or in the Service.

2.5 Usage during a free trial is not billed. The first invoice after a trial converts to a paid subscription is the base fee only. The first usage charge appears on the following invoice.

2.6 Your plan size follows your usage up and down each cycle. There is no plan tier to choose and nothing to cancel to reduce it. Add-ons take effect from the next cycle when added, and stop at the end of the current cycle when removed. Removing an add-on, or moving from an Enterprise agreement to Cloud, may reduce your account's capability. The Company accepts no liability for that loss.

2.7 Enterprise agreements set usage limits and pricing by contract, rather than by the meters and ranges published on the pricing page.

2.8 Failure to pay an invoice will lock your account until payment is made.

2.9 Account credits and promotional discounts apply on the terms and for the period stated when they are granted. Unused credits have no cash value and are not refundable.

2.10 All fees are exclusive of value added tax and any other applicable taxes, levies, or duties. You are responsible for all such amounts, other than taxes on the Company's income. Where the Company is required to collect a tax, it will be added to the invoice at the applicable rate.

2.11 Fees already incurred are payable in full. Purchases are otherwise non-refundable, except where your account was charged incorrectly or you did not receive the features you paid for. Contact support@bytesafe.dev and we will put it right.

2.12 Payment processing involves third-party services (Stripe). Information you provide to those services is subject to their terms.

3. Cancellation and termination

3.1 You are responsible for canceling your account through the account settings. Email requests are not considered cancellation.

3.2 Paid features become inaccessible immediately upon cancellation, add-on removal, or a move from an Enterprise agreement to Cloud.

3.3 You can export your data during your subscription and for 30 days after it ends. We then delete it from our production systems within 30 days, and from routine encrypted backups within 90 days of the end of that export period. Deletion cannot be undone. Personal data is handled as set out in our Data Processing Agreement.

3.4 If you cancel before the end of a paid month, the cancellation takes effect immediately with no prorated refund. This includes where you terminate because of an unresolved objection to a new subprocessor under our Data Processing Agreement: termination is your remedy, not a refund.

3.5 The Company may suspend or terminate an account (a) for breach of these Terms, (b) for non-payment, (c) where use threatens the security, integrity, or availability of the Service or of other customers, or (d) where required by law. The Company may otherwise terminate an account on 30 days' written notice, refunding any prepaid fees for the unused remainder of the then-current billing period.

3.6 On cancellation or termination, a final invoice covers usage for the current cycle up to the date it takes effect, charged in arrears. Base fees and add-on fees already paid for the cycle are not refunded, except where Section 3.5 provides otherwise.

4. Changes to the service and prices

4.1 The Company may modify the Service from time to time. The Company will not materially reduce the core functionality of the Service during a period for which you have prepaid. Where the Company intends to discontinue the Service, it will give at least 90 days' notice by email and on the site.

4.2 Changes to the base fee, add-on prices, usage rates, or starting allowances take effect after 30 days' notice, posted on the site or in the Service. The routine month-to-month movement of your own usage within the published rates is not a price change.

4.3 The Company is not liable to you or any third party for modifications, price changes, or service discontinuation.

5. Content and intellectual property

5.1 You retain ownership of content you upload to the Service, such as configuration files and package policy rules.

5.2 You warrant that uploading and using such content does not violate applicable law, copyright, trademarks, or third-party rights.

5.3 The Company claims no intellectual property rights over material you provide.

5.4 The Company may remove content that violates these terms.

5.5 The look, feel, and code of the Service are copyright Bitfront AB. You may not duplicate or reuse any part without written permission.

6. Acceptable use

6.1 You may not resell the Service, provide it to a third party as a hosted or managed service, use it as a general-purpose package proxy for content unrelated to your own use, or run load or performance testing against it without the Company's prior written consent.

6.2 Where the Company provides the Service to you free of charge, including under a sponsorship such as our open source programme, Section 3.5's thirty (30) day notice and refund do not apply, since no fee has been paid. That access is instead governed by the term, review, and suspension terms published for the programme under which it was granted.

7. General conditions

7.1 The Service is provided for business use. By using it you confirm that you are acting for a business or professional purpose and are authorized to bind the organization you represent.

7.2 The Service is provided "as is" and "as available". Use is at your own risk.

7.3 Technical support is provided primarily via email.

7.4 You may not modify, adapt, or hack the Service, or reverse-engineer any part of it.

7.5 Unauthorized security testing is not permitted. If you discover a vulnerability, report it to security@bytesafe.dev. Unauthorized testing may result in legal action.

7.6 The Company is not liable for indirect, incidental, special, or consequential damages, including loss of profits or data, arising from use or inability to use the Service. The Company's total aggregate liability arising out of or in connection with these Terms, whether in contract, tort (including negligence), or otherwise, will not exceed the greater of (a) the fees you paid in the 12 months before the event giving rise to the liability, and (b) EUR 100. Nothing in these Terms limits liability for death or personal injury caused by negligence, for fraud, or for any other liability that cannot be limited under Swedish law.

7.7 The Company's failure to enforce any provision is not a waiver of that right. Subject to the precedence rule at the top of these Terms, these Terms constitute the entire agreement between you and the Company for use of the Service.

7.8 Questions: support@bytesafe.dev.

7.9 Continued use of the Service after changes to these Terms constitutes acceptance of the new Terms.

7.10 The Service applies your policy to third-party packages using intelligence data and detection techniques that are necessarily incomplete and evolving. The Company does not warrant that the Service will identify, block, quarantine, or delay every vulnerable, malicious, non-compliant, or otherwise undesirable package, version, or component, that intelligence data will be complete, accurate, or timely, or that use of the Service will prevent any security incident, compromise, or breach. The Service is one control within your security program and does not replace it.

7.11 Packages, package metadata, registries, and advisories originating from third parties are not owned or licensed by the Company. The Company makes no representation as to your right to use any such content, and its passage through the Service does not make the Company its distributor, licensor, or warrantor. Your use of such content is governed by the terms applicable to it.

8. Governing law

These Terms are governed by the laws of Sweden. Disputes that cannot be resolved amicably will be settled in a Swedish court of general jurisdiction, with the Stockholm District Court as the court of first instance.