Terms of Service

Who we are

ControlLoop provides the service. You can reach us at controlloop.security@gmail.com.

The ControlLoop command-line scanner is open-source software published at github.com/controlloop-security/controlloop under the Apache License 2.0. Your use of the scanner itself is governed by that license, not by these terms. These terms apply to the hosted Team service and this website.

Your account

You sign in with GitHub. You are responsible for your GitHub account, for the people you invite into your organization, and for keeping API and CI tokens secret. Tell us promptly if you believe a token or account has been compromised; you can revoke tokens in the portal at any time.

You must be at least 18 and able to agree to these terms for your organization.

Free trial

Each organization can start one 7-day free trial of Team. A payment card is required to start it. You won't be charged during the trial. If you don't cancel before the trial ends, your subscription starts automatically and your card is charged the monthly price.

Stripe emails you a reminder before a trial converts to a paid subscription.

Subscription and billing

Team costs $199 per organization per month, plus any applicable taxes, billed in US dollars. Payments are processed by Stripe. Your subscription renews automatically each month on the same date until you cancel.

If a payment fails, Stripe retries it and we may suspend access to Team features until it succeeds. We'll give you at least 30 days' notice by email before changing the price of an existing subscription; the new price applies from your next renewal after that notice.

Cancellation

You can cancel at any time in the portal, under Billing, which opens Stripe's customer portal. Cancelling stops the next renewal. You keep access until the end of the period you've paid for, or until the end of your trial, and you won't be charged again.

Refunds are covered by our Cancellation and Refund Policy.

Acceptable use

You agree not to:

• use the service to break the law or to violate anyone's rights;
• upload content you don't have the right to share, or secrets such as passwords and private keys on purpose;
• try to access another organization's data, probe or disrupt the service, or get around its limits or security;
• resell the hosted service or let people outside your organization use your subscription;
• use the service to build a competing hosted product by copying its features or interface.

Your data

You keep all rights to the repositories, findings, and other content you or your CI send to the service. You give us permission to store and process that content only to provide, secure, and support the service for you. Our Privacy Policy explains what we collect and how long we keep it.

The scanner runs on your machine or in your CI. In Team mode it sends structured results, such as findings and capability summaries, to the service. It is designed not to send your source code.

Our service

We work to keep the service available and secure, but we don't promise it will be uninterrupted or error-free. We may change or improve features. If we ever discontinue Team, we'll give you at least 30 days' notice.

ControlLoop reports on capability changes and applies the policies you configure. It is one control among the ones your organization uses, and you remain responsible for the decisions you make about your own software.

Suspension and termination

We may suspend or end access to the service if you seriously or repeatedly break these terms, if a payment remains unpaid after retries, or if we must to protect the service or other customers. Where we reasonably can, we'll tell you first and give you a chance to fix the problem.

When your subscription ends, Team features stop. Your organization's data is kept so you can resubscribe, and we delete it when you ask, as described in the Privacy Policy.

Disclaimers

Except as these terms expressly say, the service is provided "as is" and "as available", without warranties of any kind, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement, to the extent the law allows.

Limitation of liability

To the extent the law allows, neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data, arising from these terms or the service. Our total liability for any claim relating to the service is limited to the amount you paid us for it in the 12 months before the claim arose.

Changes to these terms

We may update these terms. We'll post the new version here with a new effective date, and for material changes we'll email the billing contact of each active subscription at least 30 days before they take effect. Continuing to use the service after that means you accept the new terms.

Governing law

These terms are governed by the laws of the State of Texas, without regard to its conflict-of-laws rules. Any dispute will be resolved in the state or federal courts located in Texas, and both parties consent to their jurisdiction.

Contact

Questions about these terms: controlloop.security@gmail.com.