Terms and conditions

1. Provider

The ExplAI service is provided by [DOPLNIŤ: business name, registered office, company ID, tax ID, register entry] (the provider). The client is the person who orders the service.

2. Subject

The provider performs automated security tests of websites and online shops and passive checks of publicly available settings, issues a report and, on request, a confirmation. Active tests are carried out by a third-party tool under the provider's supervision.

3. Authorisation and domain ownership

An active test starts only when both conditions are met: the client has signed the authorisation and has verified domain ownership with a DNS TXT record.

The client declares that they own the tested domain or are authorised to consent to the test, and is responsible for the accuracy of this declaration.

4. Order, price and payment

Prices are listed in the pricing page on the website. [DOPLNIŤ: VAT information]. Payment is possible by card through Stripe or by invoice with a bank transfer.

The contract is formed when the order is confirmed. [DOPLNIŤ: invoice due dates, payment terms of the Guard subscription and its cancellation].

5. Test result

The report and the confirmation describe the state as of the test date. They are not a guarantee of website security nor a certificate under Slovak Act No. 69/2018 Coll.

The provider does not promise that a test will find all vulnerabilities. A confirmation is issued only if no critical finding remains open.

6. Client obligations

• Back up the website and data before the test.
• Obtain the consent of third parties where needed, for example the hosting provider.
• Provide accurate data and test accounts without real personal data, where they are part of the package.

7. Risk and liability

In rare cases an active test may cause downtime or a change of data in the tested system. The client acknowledges this.

The provider's liability for damage is limited to the price of the ordered package, to the extent the law allows. The limit does not apply to damage caused intentionally or by gross negligence. [DOPLNIŤ: review by a lawyer].

8. Confirmation and badge

A confirmation is valid for 90 days. The provider may revoke it if misuse or misrepresentation of its content is found. The badge is bound to the client's domain and shows the current status of the confirmation.

9. Data

Test outputs are deleted after 90 days. Client data is not sent to Chinese models. Details are in the privacy policy and in the data processing agreement.

10. Withdrawal from the contract

[DOPLNIŤ: consumer withdrawal notice and the exception for services whose performance began with the consumer's consent].

11. Dispute resolution

[DOPLNIŤ: information on alternative consumer dispute resolution and the competent body].

12. Final provisions

The contract is governed by the law of the Slovak Republic. The provider may change the terms; the new wording applies to orders placed after it is published. [DOPLNIŤ: effective date].