Terms of Service

These Terms of Service (the Terms) are an agreement between the person or organization accepting them (Customer or you) and RelixQ. They govern access to and use of RelixQ websites, hosted services, APIs, command-line tools, reports, and related support (the Service).

If you use the Service for an organization, you represent that you have authority to accept these Terms for that organization. If you do not have that authority, you may use the Service only in your individual capacity and may not connect or submit that organization's systems or data.

You must be legally capable of entering into this agreement and must meet any minimum age required where you live. You must provide accurate account information, protect authentication credentials, use multi-factor authentication when required, and promptly notify security@relixq.com of suspected unauthorized access.

You are responsible for activity performed through your account and for assigning appropriate roles to members of your organizations. Accounts may not be shared between individuals.

Subject to these Terms, RelixQ grants you a limited, non-exclusive, non-transferable, revocable right to access and use the Service during the applicable subscription term for your internal business or evaluation purposes.

RelixQ may improve or modify the Service. Material reductions to paid functionality will be handled under the applicable order form or subscription terms. Preview, beta, and evaluation features may change or be discontinued and are provided without a production availability commitment.

Customer retains ownership of source code, configuration, repository metadata, evidence, findings, asset information, and other data submitted to the Service (Customer Data). Customer grants RelixQ a limited right to host, copy, process, transmit, and display Customer Data only as needed to provide, secure, support, and improve the Service and to comply with law.

You represent that you have all rights and permissions required to submit Customer Data and to authorize RelixQ to access each connected repository, cloud account, endpoint, or other system. You must remove a connection when that authorization ends.

Creating an account does not authorize active testing of any target. Code analysis and passive assessment may operate on data you lawfully provide. Active probes, penetration testing, traffic generation, or potentially disruptive checks require a separate, target-specific Rules of Engagement authorization in the Service.

You may authorize testing only for assets you own or are expressly permitted to test. RelixQ may pause or stop testing when scope, ownership, safety, or authorization is uncertain.

The RelixQ Acceptable Use Policy is incorporated into these Terms. You must not use the Service to violate law, invade privacy, distribute malware, obtain credentials without authorization, disrupt systems, evade access controls, or assess targets without permission.

The Service may interoperate with GitHub, GitLab, Microsoft Azure, cloud providers, observability platforms, ticketing systems, and other third-party services. Your use of a third-party service remains subject to its terms. RelixQ is not responsible for third-party services, but remains responsible for its own processing of Customer Data as described in the Privacy Notice and applicable data-processing terms.

Paid plans, usage limits, billing intervals, renewal terms, taxes, and cancellation rights are stated in the checkout flow or an order form. RelixQ will not charge a payment method unless the price and recurring nature of the charge are disclosed and expressly accepted. Except where law or an order form requires otherwise, fees already incurred are non-refundable.

RelixQ and its licensors retain all rights in the Service, its software, rules, documentation, trademarks, and aggregated or de-identified operational information that does not identify Customer or disclose Customer Data. No rights are granted except those stated in these Terms.

If you provide feedback, you permit RelixQ to use it without restriction or payment, provided the feedback is not identified publicly as yours without permission.

Each party will protect the other's non-public confidential information using reasonable care and will use it only to perform obligations or exercise rights under the agreement. This duty does not cover information that is public without breach, already known without restriction, independently developed, or lawfully received from another source.

RelixQ maintains administrative, technical, and organizational safeguards appropriate to the Service. No system is completely secure, and Customer remains responsible for secure configuration, access management, backups, and remediation decisions.

RelixQ may suspend access when reasonably necessary to prevent harm, address a security incident, comply with law, enforce the Acceptable Use Policy, or address overdue undisputed fees. Where practicable, RelixQ will provide notice and an opportunity to cure.

You may stop using the Service and close your account subject to applicable subscription commitments. On termination, access ends and Customer Data is handled under the Privacy Notice, order form, and documented retention schedule. Sections intended by their nature to survive will remain in effect.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICE IS PROVIDED AS IS AND AS AVAILABLE. RELIXQ DISCLAIMS IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.

Findings, scores, mappings, and recommendations are technical decision-support information. They are not legal advice, a certification, a guarantee of security, or proof that a law or standard does or does not apply. Customer is responsible for validation, risk decisions, and professional advice.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, GOODWILL, OR DATA, EVEN IF ADVISED OF THE POSSIBILITY.

EXCEPT FOR AMOUNTS THAT CANNOT LAWFULLY BE LIMITED, EACH PARTY'S AGGREGATE LIABILITY ARISING FROM THE SERVICE WILL NOT EXCEED THE AMOUNTS PAID OR PAYABLE FOR THE SERVICE DURING THE TWELVE MONTHS BEFORE THE EVENT GIVING RISE TO LIABILITY, OR USD 100 FOR A FREE SERVICE.

Customer will defend and indemnify RelixQ against third-party claims arising from Customer Data, Customer's unauthorized testing or use of a connected system, or Customer's material violation of the Acceptable Use Policy, except to the extent caused by RelixQ. RelixQ will provide prompt notice and reasonable cooperation, and Customer may not settle a claim in a way that admits fault or imposes obligations on RelixQ without consent.

An executed order form, data-processing addendum, or negotiated enterprise agreement controls over conflicting terms in this online agreement. The governing law, venue, and dispute procedure are those identified in that agreement. If no separate agreement applies, applicable law and competent courts will determine those questions.

RelixQ may update these Terms prospectively. Material changes will receive reasonable notice, and renewed acceptance will be requested when required. Continued use alone will not be treated as acceptance where an affirmative agreement is required.

Questions about these Terms may be sent to legal@relixq.com. Security reports should be sent to security@relixq.com.