Terms of Service

Last updated

These terms describe use of Trustpack (trustpack.forage.bot), operated by Jobbot Inc. Review them before ordering or using the service. A purchase is subject to the terms presented when you agree to it. Nothing here removes mandatory consumer rights or replaces a separately agreed contract. The Privacy Policy describes information handling; it is not consent to every possible use of your information.

1. The service

Trustpack turns your company's security-practice answers into draft policies, a questionnaire answer bank, and an optional hosted trust page. Statements are self-attested, not audited or certified.

The description, scope, and price shown for your selection at checkout (listed here as $49 for one security pack, unless otherwise stated) apply to your order.

Later changes do not retroactively reduce an existing order's scope, promised benefits, or accrued rights. Product-specific commitments made when you order are not cancelled by a generic disclaimer in these terms.

2. Eligibility and authority

You must be at least 18 and legally able to enter the applicable agreement. Personal or business use is permitted to the extent described by the product. If acting for an organisation or another person, you must have authority for the purchase and the information or instructions you provide. Using the service does not by itself mean you are acting as a business.

3. Orders, delivery, subscriptions, and cancellation

The selected purchase specifies whether billing is one-time, recurring, credit-based, or usage-based, and the price, currency, included benefits, billing interval, and applicable limits. A one-time purchase does not create a subscription. Do not assume future services or add-ons are included unless the offer says so. A delivery estimate is not a guaranteed deadline unless expressly promised; this does not excuse nondelivery or remove a stated deadline or remedy.

The one-time purchase is delivered through an order dashboard, downloadable document bundle, and delivery email. Publishing the optional trust page is a separate action; review the statements and contact information before making them public.

Where you expressly select recurring billing, charges follow the stated interval until cancellation takes effect. Use the cancellation method described by the product or contact trustpack@forage.bot if it is missing or fails. These instructions do not limit legally available cancellation methods. Pausing content, deleting a local file, or closing a browser does not necessarily cancel a subscription.

The plan specifies when cancellation takes effect and what happens to access and stored outputs. Cancellation does not by itself determine a current-period refund; section 5 and mandatory law govern that question. Any change to a recurring price or material benefit must comply with the agreed plan and applicable notice, agreement, and cancellation requirements.

4. Fees, payment, and taxes

Payments are processed by Stripe. You authorise the amount, currency, and, for a recurring plan, the billing arrangement you expressly select. The total and applicable taxes or discounts are shown before payment. Do not submit card numbers or security codes through product forms, API requests, or support messages; browser card entry belongs in Stripe Checkout.

5. Refunds and mandatory remedies

If Trustpack fails to generate your security pack after retries (a verifiable failure flagged by our validator), you can self-serve a refund for 90 days. If our logs show you never opened the delivered dashboard (verifiable non-use), you can self-serve a refund for 30 days from delivery.

These voluntary conditions do not limit remedies for a faulty, misdescribed, or undelivered service, statutory withdrawal or cancellation rights, or other rights that cannot be waived. Starting digital delivery or downloading a file does not, by these terms alone, waive a statutory withdrawal right; any exception must meet the applicable legal requirements.

If an automatic control rejects or cannot process an eligible request, contact trustpack@forage.bot. An automated decision is not the final determination of your legal rights. Refunds we issue normally return through the original payment method; bank processing times are outside the product's control. Existing more generous commitments remain applicable to the orders made under them.

6. Information you submit; authority and permissions

Provide accurate information for the feature requested and a working contact address where needed. You are responsible for obtaining authority to submit another person's information, a client's material, or an instruction affecting a third party.

You must be authorized to submit the company information and security-practice descriptions and to have them processed by our providers. Answer according to actual practice; planned controls must remain labelled as planned.

7. Submission restrictions and acceptable use

Do not use the pack to imply an audit, certification, completed control, or customer commitment that does not exist.

  • submit payment card information except through Stripe Checkout;
  • Authorized internal security-practice descriptions are permitted. Do not submit credentials, raw customer records, exploit details, health records, government ID numbers, or material whose confidentiality duties prohibit this processing.
  • violate law, infringe rights, impersonate another person, distribute malware, or breach a duty of confidentiality;
  • bypass access controls, access another customer's data, or instruct us to test systems without the necessary authority;
  • disrupt the service, evade published limits, or impose unreasonable load on our systems or a third party's systems; or
  • resell access to the service itself as your own service without an applicable plan or permission. This does not prohibit the permitted use or distribution of purchased outputs described below.

Automated use of documented APIs and public machine-readable surfaces is permitted subject to their authentication requirements, published limits, applicable plan, and law. It does not grant access to private data. Protect API credentials and private access links; report suspected misuse.

8. AI processing and limitations

Trustpack uses third-party AI services, including model requests routed through OpenRouter. Relevant content may be sent to upstream providers as described in the Privacy Policy. Outputs can contain errors, omissions, stale information, or material similar to other users' outputs. Unless expressly included in the offer, no particular model is promised. Provider or method changes remain subject to our existing commitments and applicable data-protection obligations.

9. Your content and our limited permission

You retain your rights in submitted material. You give Jobbot Inc a non-exclusive permission to host, copy, transmit, and process it only as needed to provide requested features, support them, protect the service, and satisfy applicable legal obligations. Providers may perform those tasks on our behalf as described in the Privacy Policy. This permission lasts only as needed for those purposes and lawful retention requirements.

This is not an unrestricted licence to publish private submissions, advertise with them, or train models on them. Sharing and publication follow the product's stated features and your instructions. Any separate agreement and applicable privacy law continue to apply; third-party AI practices are described in the Privacy Policy.

10. Output and permitted use

You may edit, adopt, reproduce, and share the policies and answer bank with staff, advisers, and customers, and publish the trust page. Review and approve every statement before adopting it. The pack does not establish compliance, create a certification, or guarantee acceptance by a customer.

Third-party material remains subject to its owners' rights. A generated output is not a promise of exclusivity, copyright protection, trademark clearance, or permission to use someone else's protected material. Review the output before publication, filing, or reliance.

11. Third-party services

Hosting, payments, delivery, data sources, and optional integrations may depend on third parties. Their independent services can have their own terms, and outages can affect availability. This does not remove our obligations for a service we sold or the remedies available under section 5, an express commitment, or applicable law. The Privacy Policy describes the relevant recipients of information.

12. Disclaimers and review of output

Except for express commitments made with the product and rights imposed by law, the service is provided "as is" and "as available". To the extent lawful, we disclaim implied warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not promise uninterrupted availability or a particular result beyond the stated offer.

Informational outputs, scores, recommendations, or drafts are not by themselves professional advice, certification, regulatory approval, or a guarantee of a business or personal outcome. Obtain appropriately qualified advice for decisions requiring it.

Review important facts, instructions, recipients, and deadlines before acting on output. That responsibility does not excuse inaccurate product descriptions, remove promised quality conditions, or transfer our legal duties to you.

13. Limitation of liability

Where permitted by law, we are not liable for indirect or consequential losses, including lost business profits, arising from the service. Where a monetary cap is lawful, our aggregate liability for the service concerned is limited to the greater of the fees you paid for it during the twelve months before the event giving rise to the claim or US$100.

These limitations do not exclude fraud, deliberate misconduct, gross negligence, death or personal injury caused by negligence where liability cannot be excluded, or any other liability or mandatory consumer remedy that applicable law does not permit us to exclude or limit. They do not reduce an express refund or payment obligation.

14. Business-user indemnity

Only if acting in a business capacity, and to the extent permitted by law, you agree to cover reasonable third-party claims and costs caused by your unlawful submissions, infringement of rights, or intentional misuse of the service. This indemnity does not apply to consumers or losses caused by our own breach, our negligence, or misconduct. We must notify you promptly of a claim, allow a reasonable opportunity to defend it, and reasonably cooperate. Neither party may agree a settlement imposing admissions or non-monetary duties on the other without its consent.

15. Suspension and termination

We may restrict access where reasonably necessary for a material breach, security risk, fraud, or legal requirement. Where lawful and practical, we will explain the reason and an opportunity to resolve the problem. Restriction or discontinuation does not cancel accrued rights, existing payment or refund obligations, or mandatory remedies. You may stop using the product; cancel any recurring plan separately as described in section 3.

Provisions needed to resolve existing matters survive only to that extent, including rights in content, lawful retention, outstanding payments, applicable liability limits, and disputes. Termination is not an indefinite permission to use or retain your submissions.

16. Governing law and disputes

The law of Delaware, USA governs to the extent permitted by applicable law. This does not deprive consumers of mandatory protections in their place of residence or prevent use of a court or regulator available under applicable law. You may contact support to seek a resolution, but doing so is not a prerequisite to a statutory complaint or remedy. These terms impose no mandatory arbitration or class-action waiver.

17. Changes and interpretation

Revisions apply prospectively. Posting a new revision date or sending a notice does not by itself change a completed purchase, accrued right, or permission for previously supplied data. Changes to an ongoing arrangement must meet its valid change provisions and applicable notice, agreement, and cancellation requirements. Product-specific and separately agreed commitments prevail over conflicting generic wording; mandatory law prevails over both. Nothing here excludes reliance on statements that law protects.

If a provision is unenforceable, the rest continues only to the extent it can operate lawfully without it. A failure to enforce a provision on one occasion is not a general waiver of it.

18. Contact

Questions about these terms or a failed control can be sent to trustpack@forage.bot.