Terms of service

1. Who we are

These terms are an agreement between you and Qubitron Labs ("we", "us"), registered at 5th Floor, Gordhan Sky Mall, Office 507, Khatipura Rd, Jhotwara, Jaipur, Rajasthan 302012, India. Qubitron Security is the name under which Qubitron Labs provides application security services.

2. The services

We provide application security services: reverse-engineering exposure audits, penetration testing, mobile application security testing, application hardening and smart contract audits. Each engagement is defined by a written proposal or statement of work that sets out scope, deliverables, timeline and price. Where these terms and a signed proposal differ, the proposal applies.

3. Authorization

We test only applications, systems and code that you own or that you are explicitly authorized to have tested. Before any testing starts you confirm in writing that you have that authority, name the systems in scope and name a contact we can reach during testing. You are responsible for obtaining any consent needed from hosting providers, platform owners or third parties whose systems are involved.

4. How we work

• We stay within the agreed scope and time window, and stop and tell you if we find we are about to leave it.
• We take care to avoid disruption, but security testing carries inherent risk. You agree to keep backups and to tell us about fragile systems before we start.
• We report every finding to you and to nobody else, and we do not exploit findings beyond what is needed to demonstrate them.
• Where testing involves third-party services you use, we follow those services' testing policies.

5. Your responsibilities

• Provide the builds, access, test accounts and information agreed in the proposal, on time.
• Make sure testing is lawful for you to authorize in your jurisdiction.
• Use our reports to improve your own security. Do not use them to attack systems you do not own.

6. Fees and payment

Fees, payment schedule and currency are agreed on a call and set out in the written proposal before any work starts. We don't publish prices. Prices exclude taxes that apply where you are. We never ask for card details by email or phone.

7. Confidentiality

Everything we learn about your systems, code and business during an engagement is confidential. We do not name you as a client, publish findings or reuse your materials without your written permission. We keep engagement materials only as long as needed to deliver and support the work, then delete them, unless you ask us to keep them or the law requires it.

8. No guarantee

Security testing finds issues; it cannot prove their absence. Hardening raises the cost of reverse engineering and tampering; it cannot make them impossible. We do our work with reasonable skill and care, and we do not guarantee that your application is or will remain free of vulnerabilities, or that it will not be copied.

9. Liability

To the extent the law allows, our total liability to you under an engagement is limited to the fees you paid us for that engagement, and neither party is liable for indirect or consequential loss. Nothing in these terms limits liability for fraud or for anything that cannot be limited by law.

10. Changes to these terms

We may update these terms. The current version is always on this page, with the date it took effect. Signed proposals keep the terms that were in force when they were signed.

11. Governing law

These terms are governed by the laws of India, and the courts of Jaipur, Rajasthan have exclusive jurisdiction, unless a signed proposal says otherwise.

12. Contact

Questions about these terms: info@qubitronlabs.com.