Terms of Service

These terms govern your use of Closeout (the "Service"), provided by [[RELLENAR: razón social o nombre completo del autónomo]] ([[RELLENAR: NIF/CIF / NIF-IVA]]), [[RELLENAR: dirección postal completa]] ("we"). By creating an account you agree to them on behalf of the business you represent ("Customer"). The Service is for businesses only, not consumers.

1. The Service

Closeout helps security-testing firms track findings, share them with their clients through a remediation portal, re-test reported fixes and produce remediation attestations.

2. Authorization to test

This clause is essential: automated retests send requests to systems owned by third parties.

• Customer represents and warrants that, for every engagement, it holds valid written authorization from the owner of each target system to perform security testing, including automated re-testing, for the hosts and time window entered in the Service.
• Retests run only against hosts in the engagement's scope, within its testing window, and after the client has acknowledged that scope in the portal. Customer must keep scope and windows accurate and stop retests (per finding or firm-wide) if authorization is withdrawn.
• Customer is solely responsible for the requests it configures and for any consequences of testing it initiates. Customer will indemnify us against third-party claims arising from testing performed without valid authorization.

3. Acceptable use

You must not use the Service to:

• test, scan or send requests to any system without its owner's authorization;
• perform denial-of-service, mass scanning, or attacks against the Service or its infrastructure;
• store malware or content that is unlawful;
• resell or provide the Service to third parties outside your own engagements;
• circumvent plan limits, rate limits or security controls.

We may suspend accounts or individual retests immediately if we reasonably believe these rules are being broken, and will tell you why unless the law prevents it.

4. Accounts and security

You are responsible for your users and their credentials. Staff accounts must use two-factor authentication. Tell us promptly at [[RELLENAR: security@tudominio.com]] if you suspect unauthorized access.

5. Subscriptions, trial and payment

• New firms get a 14-day free trial with no card required. When it ends without a subscription, the workspace becomes read-only until you subscribe.
• Subscriptions are billed monthly in advance through our payment processor, Stripe, and renew automatically until cancelled.
• Prices are shown on our website and exclude taxes, which are added where applicable.
• If a payment fails we will retry it; if it still fails, the workspace becomes read-only. Your data is not deleted because of non-payment for at least 30 days.
• Cancellation and refunds are covered by our Cancellation & refunds policy.

6. Customer data

Customer owns all data it puts into the Service, including findings, evidence and client information. We process it only to provide the Service and act as Customer's data processor; our Privacy policy describes how. A Data Processing Agreement is available on request at [[RELLENAR: privacidad@tudominio.com]]. You can export your data at any time while your account is active and for 30 days after it ends, after which we delete it.

7. Availability and changes

We aim for high availability but do not guarantee uninterrupted service. We may change features; we will give at least 30 days' notice of changes that materially reduce the Service or of price increases, and you may cancel before they apply.

8. Warranties and liability

• A retest result ("appears fixed" or "still vulnerable") is an automated signal confirmed by your staff, not a guarantee that a system is secure.
• The Service is provided "as is" to the extent permitted by law.
• Except for indemnities, breach of section 2 or 3, or liability that cannot be limited by law, each party's total liability is limited to the fees paid by Customer in the 12 months before the claim, and neither party is liable for indirect or consequential losses or lost profits.

9. Term and termination

You can cancel at any time from the Billing page. We may terminate for material breach not cured within 15 days of notice, or immediately for breach of sections 2 or 3.

10. Governing law

These terms are governed by [[RELLENAR: p. ej. las leyes de España, tribunales de Madrid]].

11. Contact

[[RELLENAR: razón social o nombre completo del autónomo]], [[RELLENAR: dirección postal completa]], [[RELLENAR: país]]. Email: [[RELLENAR: soporte@tudominio.com]].