Terms of Service

These Terms of Service ("Terms") govern your access to and use of the BeeraSafe platform, operated by BeeraSafe ("we," "us," or "our"), including the Bolt security workspace, Rampart organization workspaces, and any managed services we deliver (together, "the platform"). By creating an account, signing in, or using any part of the platform, you agree to be bound by these Terms and our Privacy Policy. If you do not agree, do not create an account or use the platform.

You must be at least 18 years old (or the age of legal majority in your jurisdiction) to use the platform. By using the platform, you represent and warrant that you meet this requirement and that you have the legal capacity to enter into a binding agreement in your jurisdiction.

BeeraSafe is a security company that plans, runs, and reports offensive, defensive, and governance work, and ships software under two live products. Bolt is a security-operations workspace: a place to store evidence, run scoped analysis with AI-assisted workflow support, record decisions, and coordinate incident response. Rampart is a developer security platform for GitHub teams: it connects repositories and reports vulnerabilities, secrets, and misconfigurations with remediation guidance your reviewers can check. Where a workflow is AI-assisted, the platform may route prompts and evidence to a third-party inference subprocessor, contracted by us and bound to process your content only for that purpose. All generated output is provided for review and must be independently verified by a qualified human operator before any consequential action is taken.

You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. You agree to: (a) choose a strong, unique password and change it periodically; (b) enable two-factor authentication when it is made available; (c) not share your account credentials or session tokens with any third party; (d) notify support immediately if you become aware of any unauthorized use of your account or any other security breach. We are not liable for any loss or damage arising from your failure to comply with this section. We may suspend or deactivate accounts that we reasonably believe have been compromised or are being misused.

You may use the platform only to investigate, analyze, detect, defend, and otherwise act on systems, networks, applications, and data that you own or are lawfully authorized to assess. It is your sole responsibility to confirm authorization, scope, and applicable law before beginning any engagement. Offensive-security analysis functions must be limited to systems you own, lab environments you control, or targets for which you hold explicit, documented authorization from the system owner. You must not use the platform to facilitate credential theft, persistence, exfiltration, ransomware, attacks against uninvolved systems, or any activity that violates applicable law or your customer's authorization boundaries. We reserve the right to suspend or terminate accounts that violate this section, without prior notice and without refund.

Platform usage is controlled by token credits ("tokens"). Tokens are consumed based on the combined size of your prompts, attached evidence, and generated output. Purchased token balances do not expire. One token balance covers Bolt investigations and Rampart scans on the same account. We reserve the right to adjust token balances to correct system errors, to reverse credits obtained through fraud or abuse, and, as a courtesy, to honor legitimate refund requests where required by applicable consumer-protection law. Free, promotional, or bonus tokens (including trial balances and sandbox simulation credits) may expire or be revoked at our discretion and carry no cash value. We are not obligated to provide advance notice of changes to token pricing, token-per-unit rates, or package composition.

All purchases are processed by Nylon Pay in Ugandan shillings (UGX). Your token balance is credited only after we receive and verify a successful payment confirmation from Nylon Pay. You agree to provide accurate billing information and authorize Nylon Pay to charge the applicable amount to your selected payment method. All fees are stated in UGX and are non-refundable except where required by applicable law (see Section 17 below). We do not store your payment card details. All payment processing is governed by Nylon Pay's own terms of service and privacy policy. You are responsible for any applicable taxes, duties, or fees imposed by your jurisdiction.

You retain all ownership rights in the evidence, prompts, analysis requests, and other materials you submit to the platform ("your content"). By using the platform, you grant us a limited, non-exclusive license to process your content solely for the purpose of operating, maintaining, and improving the platform and as otherwise described in these Terms. We do not sell your data. We store your prompts, their token usage, and related metadata for audit, billing, abuse-prevention, and service-improvement purposes. We may use aggregated, de-identified data derived from your usage (that cannot be linked back to you or your organization) for analytics, benchmarking, and product development. Our subprocessors currently include: an inference infrastructure provider (which receives prompts and evidence where a workflow is AI-assisted), Nylon Pay (payment processing), Vercel (application hosting), and Resend (transactional email). We may change subprocessors from time to time; we will maintain an up-to-date list upon request.

Output generated by AI-assisted features may contain errors, omissions, inaccuracies, or material that is inappropriate for your use case. All output is provided for review and decision-support purposes only and is not a substitute for the professional judgment of a qualified human operator. AI-generated output does not constitute professional security advice, legal advice, medical advice, or any other form of professional advice. You are solely responsible for independently verifying all output before relying on it and for all decisions and actions taken on the basis of platform output. We make no representations or warranties regarding the accuracy, completeness, reliability, or fitness for a particular purpose of any AI-generated output.

The platform, including its design, interface, code, branding, and documentation, is owned by us and protected by applicable intellectual-property laws. These Terms do not grant you any right, title, or interest in the platform's intellectual property beyond the limited right to use the platform as permitted herein. You may not copy, modify, distribute, reverse-engineer, decompile, or create derivative works from any part of the platform without our prior written consent. Our name, logo, and product names are trademarks of BeeraSafe and may not be used without written permission.

In addition to the authorized-use requirements in Section 5, you agree not to: (a) use the platform for any unlawful purpose or in violation of any applicable law or regulation; (b) attempt to gain unauthorized access to the platform, other accounts, or any connected systems; (c) use automated scripts, scrapers, or crawlers to extract data from the platform without our written permission; (d) interfere with, disrupt, or overload the platform's infrastructure; (e) resell, sublicense, or provide access to the platform to any third party; (f) use the platform to generate content that is unlawful, harmful, threatening, harassing, defamatory, or otherwise objectionable; (g) attempt to bypass, disable, or interfere with any security controls, rate limits, or usage caps; (h) use the platform to build a competing product or service. We may monitor usage and take administrative action (including suspension, termination, and token adjustment) where necessary to protect the platform and its users.

The platform integrates with and relies on third-party services, including our payment processor, application host, and transactional email provider. We are not responsible for the availability, performance, security, or practices of any third-party service. Your use of third-party services is governed by their respective terms of service and privacy policies. We disclaim all liability for any loss or damage arising from or related to any third-party service.

The platform is provided on an "as is" and "as available" basis without warranties of any kind, whether express, implied, or statutory, including but not limited to warranties of merchantability, fitness for a particular purpose, accuracy, completeness, reliability, non-infringement, or uninterrupted availability. We do not warrant that the platform will be error-free, secure, or available at all times. We may perform maintenance, suspend features, or modify the platform at any time without prior notice. We are not responsible for any loss of data, interruption of service, or damage resulting from platform downtime, maintenance, or third-party outages.

To the maximum extent permitted by applicable law, in no event will we, our directors, officers, employees, agents, or affiliates be liable to you for any indirect, incidental, special, consequential, punitive, or exemplary damages, including but not limited to damages for loss of revenue, profits, data, business opportunities, goodwill, or anticipated savings, arising out of or in connection with these Terms or your use of (or inability to use) the platform, regardless of the theory of liability (whether in contract, tort, strict liability, or otherwise) and even if we have been advised of the possibility of such damages. Our total aggregate liability to you under or in connection with these Terms and the platform will not exceed the total amount you paid to us for the platform during the twelve (12) months immediately preceding the event giving rise to the claim.

You agree to indemnify, defend, and hold harmless us, our directors, officers, employees, agents, and affiliates from and against any and all claims, liabilities, damages, losses, costs, and expenses (including reasonable attorneys' fees) arising out of or relating to: (a) your use of the platform; (b) your content; (c) your violation of these Terms; (d) your violation of any applicable law, regulation, or third-party right; or (e) any unauthorized or prohibited use of the platform conducted through your account.

You may stop using the platform and close your account at any time by contacting support. We may suspend or terminate your access to the platform, without prior notice and at our sole discretion, if we reasonably believe you have violated these Terms, engaged in conduct that poses a risk to the platform or its users, or if required by law. Upon termination, your right to access and use the platform ceases immediately. We may retain your content and data as described in our Privacy Policy and these Terms. Any tokens remaining in your account at the time of termination will be handled in accordance with applicable consumer-protection law.

You may cancel your account at any time; no further charges will be incurred after cancellation. Purchased token balances are non-refundable, except where required by applicable Ugandan consumer-protection law or other mandatory law in your jurisdiction. If you believe you are entitled to a refund, you must contact support within thirty (30) days of the relevant transaction, providing a reasonable explanation. We will review refund requests in good faith and respond within a reasonable time. Free, promotional, or bonus tokens carry no cash value and are not eligible for refunds under any circumstance.

These Terms and any dispute arising out of or relating to them are governed by the laws of the Republic of Uganda, without regard to conflict-of-law principles. Any dispute arising out of or relating to these Terms or the platform must first be addressed through good-faith negotiation between the parties for a period of at least thirty (30) days. If the dispute is not resolved through negotiation, either party may initiate formal dispute resolution under the Arbitration and Conciliation Act of the Republic of Uganda, to be conducted in Kampala. The arbitration will be conducted in English and the decision of the arbitrator will be final and binding. Notwithstanding the foregoing, either party may seek injunctive or other equitable relief from a court of competent jurisdiction to prevent irreparable harm pending the outcome of arbitration. You agree that any proceedings must be conducted on an individual basis and not as part of a class, consolidated, or representative action.

We may update these Terms from time to time. When a change is material, we will provide at least thirty (30) days' advance notice by email (to the address associated with your account) and/or by prominent notice within the platform. The updated Terms will include a revised effective date at the top of this page. Your continued use of the platform after the effective date of any material change constitutes your acceptance of the updated Terms. If you do not agree with the updated Terms, you must stop using the platform and contact support to close your account before the effective date.

If any provision of these Terms is found to be invalid, illegal, or unenforceable, the remaining provisions will continue in full force and effect. These Terms, together with the Privacy Policy, constitute the entire agreement between you and us regarding the platform and supersede all prior agreements, understandings, and representations. Our failure to enforce any provision of these Terms does not constitute a waiver of that provision or any other provision. You may not assign your rights or obligations under these Terms without our prior written consent. We may assign our rights and obligations without restriction. Neither party will be liable for any delay or failure to perform resulting from causes beyond its reasonable control, including but not limited to acts of God, war, terrorism, pandemic, failure of third-party services, internet or infrastructure outages, or governmental action (a "force majeure event").

Questions, requests, or complaints about these Terms, the Privacy Policy, or your account may be directed to the contact information published on the platform, or by email to support@beerasafe.com.