Terms of Service

By accessing or using the Carbon6 Security Platform ("Service"), you agree to be bound by these Terms of Service ("Terms"). If you disagree with any part of these terms, you may not access the Service.

These Terms apply to all visitors, users, and others who access or use the Service.

Carbon6 provides enterprise security infrastructure in three phases:

• Phase 1 (Foundation): Free tier - Git secret scanning, dependency vulnerability scanning, CI/CD integration
• Phase 2 (Production): Free tier - Security headers, rate limiting, API security, SSL/TLS management
• Phase 3A (SOC 2 Ready): Paid tier ($500/month + $2,000 setup) - Full SOC 2 compliance, policies, SIEM, dedicated consultant

We reserve the right to modify, suspend, or discontinue any part of the Service at any time with 30 days' notice to paid customers.

Account Creation

• You must be 18 years or older to use this Service
• You must provide accurate and complete registration information
• You are responsible for maintaining the security of your account and password
• You are responsible for all activity that occurs under your account
• One account per organization (no duplicate accounts for rate limit avoidance)

Account Responsibilities

• Notify us immediately of any unauthorized account access
• Do not share your API keys or credentials
• Enable two-factor authentication (2FA) when available
• Maintain accurate billing and contact information

You May

• Use the Service to secure systems you own or have explicit authorization to test
• Integrate the Service with your development and production environments
• Share security findings within your organization
• Use our API within documented rate limits

You May Not

• Unauthorized Access: Test systems you don't own without explicit written permission
• Service Disruption: Attempt to disrupt, damage, or overwhelm our infrastructure
• Rate Limit Abuse: Circumvent rate limits or create multiple accounts
• Reverse Engineering: Attempt to reverse engineer our proprietary scanning techniques
• Illegal Activity: Use the Service for any unlawful purpose
• Data Mining: Scrape, harvest, or collect user information without consent
• Malware Distribution: Upload, transmit, or distribute malicious code

Pricing

Billing Terms

• Monthly subscriptions renew automatically on the same day each month
• Annual subscriptions renew automatically every 12 months
• Setup fees are one-time charges billed immediately upon Phase 3A activation
• All prices are in USD and exclude applicable taxes
• Payment is processed via Stripe (PCI DSS Level 1 certified)

Refund Policy

• 30-Day Money-Back Guarantee: Full refund (excluding setup fee) if requested within 30 days of Phase 3A activation
• Setup Fee: Non-refundable after onboarding begins (typically within 48 hours of payment)
• Pro-Rated Refunds: Not available after 30-day window
• Free Tiers: No refunds applicable (service is free)

Failed Payments

If payment fails, we will attempt to charge your card up to 3 times over 10 days. After 3 failed attempts, your Phase 3A service will be downgraded to Phase 2 (free tier) until payment is updated.

Our IP

The Service, including all content, features, and functionality (including but not limited to scanning algorithms, policy templates, software code, design, and logos), is owned by VLTRN Family Office and protected by United States and international copyright, trademark, patent, trade secret, and other intellectual property laws.

Your IP

You retain all rights to your source code, data, and content ("Your Content"). By using the Service, you grant us a limited license to:

• Scan Your Content for security vulnerabilities
• Store scan results and metadata
• Display findings in your dashboard
• Generate reports and compliance documentation

We do NOT claim ownership of Your Content and will not share it with third parties except as required by law or with your explicit permission.

Policy Templates

Phase 3A includes a 60+ page SOC 2 policy suite. These templates are licensed to you for use within your organization. You may customize them but may not resell or redistribute them as standalone products.

Service Warranty

We warrant that the Service will perform substantially as described in our documentation. If it doesn't, we'll work with you to fix it or provide a refund under our 30-day money-back guarantee.

Disclaimer of Warranties

Security Tools Disclaimer

Our security scanning tools are aids, not guarantees. No security tool can detect 100% of vulnerabilities. You remain solely responsible for your own security posture, compliance, and incident response.

Exceptions

Some jurisdictions do not allow the exclusion of certain warranties or limitation of liability. In such cases, our liability is limited to the maximum extent permitted by law.

By You

You may cancel your account at any time by:

• Logging into your dashboard and clicking "Cancel Subscription"
• Emailing support@carbon6.agency
• Cancellation takes effect at the end of your current billing period
• No refunds for partial months (except 30-day money-back guarantee)

By Us

We may suspend or terminate your account immediately if:

• You violate these Terms or our Acceptable Use Policy
• Your account is used for illegal activity
• Payment fails after 3 attempts (paid tiers only)
• You engage in abusive behavior toward our team

We will provide 7 days' notice before termination unless immediate termination is required for legal or security reasons.

Data Retention After Termination

• Free Tiers: Data deleted 30 days after account closure
• Paid Tiers: Data retained for 90 days in case of reactivation
• Legal Holds: Data subject to legal requirements retained as required by law
• Backups: Backup copies may persist for up to 180 days

Informal Resolution

Before filing a claim, please contact us at legal@carbon6.agency to attempt informal resolution. Most disputes can be resolved quickly through good-faith communication.

Arbitration Agreement

If informal resolution fails, you agree to resolve disputes through binding arbitration rather than in court, except:

• Small claims court actions (under $10,000)
• Intellectual property disputes
• Requests for injunctive relief

Arbitration Rules

• Administrator: American Arbitration Association (AAA)
• Rules: AAA Commercial Arbitration Rules
• Location: Wilmington, Delaware, USA
• Fees: We pay arbitration fees for claims under $10,000
• Class Action Waiver: No class or collective arbitrations

Governing Law

These Terms are governed by the laws of the State of Delaware, USA, without regard to conflict of law principles.

We may update these Terms from time to time. When we do:

• We will update the "Last updated" date at the top of this page
• We will notify you via email for material changes
• Paid customers receive 30 days' notice before changes take effect
• Continued use of the Service after changes constitutes acceptance

If you disagree with changes, you may cancel your account before the effective date.

For questions about these Terms, please contact: