Terms of Service

1. Acceptance of Terms

By accessing and using the website at safestacks.org and the SafeStack platform (collectively, the "Service"), you accept and agree to be bound by these Terms of Service ("Terms"). If you are using the Service on behalf of a company or organisation, you represent and warrant that you have the authority to bind that entity to these Terms.

2. Description of Service

SafeStack provides application security training, tooling, and workflow integrations for software engineering teams. This includes self-paced training modules, collaborative threat modeling tools, SDLC security gate templates, and team management dashboards (collectively, the "Platform").

3. Account Registration

To access the Platform, you must create an account. You agree to:

• Provide accurate, current, and complete information during registration;
• Maintain the security of your account credentials;
• Notify us immediately of any unauthorised access to your account;
• Be responsible for all activities that occur under your account.

4. Subscription Plans and Payment

SafeStack offers a free Individual plan and paid Team and Enterprise plans. By subscribing to a paid plan, you agree to pay the applicable fees as described on our Pricing page. All fees are exclusive of GST for NZ-based customers; GST will be added where applicable. Payments are processed by our third-party payment provider. We do not store full payment card details.

You may cancel your subscription at any time. Cancellation takes effect at the end of the current billing period. No refunds are provided for partial billing periods unless required by NZ consumer law.

5. Acceptable Use

You agree to use the Service only for lawful purposes. You must not:

• Use the Service in any way that violates applicable NZ or international laws;
• Attempt to gain unauthorised access to any part of the Service or its infrastructure;
• Use the Service to distribute malware, conduct phishing, or engage in any other harmful or deceptive activity;
• Reverse engineer, decompile, or attempt to extract the source code of the Platform;
• Share your account credentials with third parties outside your licensed team;
• Use the Service in a manner that could damage, disable, or impair SafeStack's systems.

6. Intellectual Property

All content, features, and functionality of the Service — including training modules, documentation, software, and visual designs — are owned by SafeStack Ltd and are protected by NZ and international copyright, trademark, and intellectual property law. You are granted a limited, non-exclusive, non-transferable licence to use the Service for your internal business purposes during your subscription term. This licence does not permit resale or redistribution of SafeStack content.

7. User Content

You retain ownership of any content you create or upload to the Service (such as threat models, custom training notes, or configuration files). By uploading content, you grant SafeStack a limited licence to process, store, and display that content solely for the purpose of providing the Service to you.

8. Privacy

Your use of the Service is governed by our Privacy Policy, which is incorporated into these Terms by reference. SafeStack processes personal data in accordance with the New Zealand Privacy Act 2020 and, for EEA users, the GDPR.

9. Disclaimer of Warranties

The Service is provided on an "as is" and "as available" basis. To the fullest extent permitted by NZ law, SafeStack disclaims all warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, and non-infringement. SafeStack does not warrant that the Service will be uninterrupted, error-free, or free of viruses or other harmful components.

10. Limitation of Liability

To the fullest extent permitted by the Consumer Guarantees Act 1993 and other applicable NZ law, SafeStack's total liability to you for any claims arising from these Terms or the Service will not exceed the amounts paid by you to SafeStack in the 12 months preceding the claim. SafeStack will not be liable for any indirect, incidental, special, consequential, or punitive damages. Nothing in these Terms limits liability for fraud, gross negligence, or death or personal injury caused by negligence.

11. Indemnification

You agree to indemnify and hold harmless SafeStack, its officers, directors, employees, and agents from any claims, damages, losses, or expenses arising out of your use of the Service in breach of these Terms or applicable law.

12. Third-Party Services and Links

The Service integrates with and links to third-party services (such as GitHub, GitLab, JIRA, Slack). These integrations are governed by those parties' own terms. SafeStack is not responsible for third-party services, their availability, or their content.

13. Changes to Terms

SafeStack reserves the right to modify these Terms at any time. We will provide at least 30 days' notice of material changes by email (for account holders) and by posting a notice on safestacks.org. Your continued use of the Service after the effective date of changes constitutes acceptance of the revised Terms.

14. Termination

Either party may terminate your account at any time. SafeStack may suspend or terminate your account immediately if you breach these Terms. Upon termination, your licence to use the Service ends and you must cease all use. Sections 6, 9, 10, 11, and 15 survive termination.

15. Governing Law and Dispute Resolution

These Terms are governed by the laws of New Zealand. Any disputes arising from these Terms or the Service will be subject to the exclusive jurisdiction of the courts of New Zealand, except where applicable consumer law provides otherwise. We encourage you to contact us first at [email protected] to resolve any dispute informally.

16. Contact

For questions about these Terms:
SafeStack Ltd
12 Madden Street, Wynyard Quarter, Auckland 1010, New Zealand
Email: [email protected]