Terms of Service

1. The Service

The Service reads Terraform state files from storage locations you configure (currently Amazon S3, through an AWS IAM role that you create and control), stores encrypted copies of them, and derives from them a resource inventory, a change history, estimated cost impact, notifications and reports.

The Service is intended for business use by people who are at least 18 years old. It is not offered to consumers.

2. Your account

Give accurate information, keep your password confidential and tell us promptly at support@opsfort.com if you suspect unauthorized access. You are responsible for activity under your account and in workspaces you own, including the people you invite and the roles you give them.

3. Your data and Terraform state

"Customer Data" means the Terraform state files, configuration and other content that you or your workspace members provide or connect, and the data derived from it. You keep all rights in Customer Data.

License to operate the Service. You grant us a non-exclusive, worldwide license to access, copy, store, encrypt, parse, analyze, back up and otherwise process Customer Data, only as needed to provide, secure, support and maintain the Service for you, as described in the Privacy Policy and the Data Processing Addendum. We do not sell Customer Data.

State files can contain secrets. You acknowledge that Terraform state commonly contains sensitive values in plain text, such as passwords, access keys, tokens, private keys, connection strings, user-data scripts and personal data. You decide which state you connect, and you are solely responsible for that decision. Before connecting a source you should:

• keep secrets out of state where possible (for example by using a secrets manager and ephemeral or write-only values);
• grant the Service read-only access limited to the state objects you want tracked;
• rotate any secret you believe may have been exposed, wherever it came from.

We encrypt stored state and hide values we recognize as secrets from the interface, but we do not promise that every secret or piece of personal data will be recognized, hidden or removed. To the fullest extent permitted by law, we are not liable for loss or damage arising from secrets, credentials or other sensitive information contained in Customer Data you chose to provide, except to the extent caused by our gross negligence or wilful misconduct.

Your promises. You confirm that you have all rights, permissions and authority needed to provide Customer Data to us (including from your employer or clients), that you have given any notices and obtained any consents required for personal data it contains, and that our processing under these Terms will not breach any law or any obligation you owe to someone else. Do not connect state that contains special categories of personal data, payment card data, health data or data subject to export restrictions.

Usage information. We may collect and use technical and aggregated information about how the Service is used (for example counts of sources, snapshots, resources and emails) to operate, secure, size and improve it. Such information does not identify you or include the contents of your state.

4. Acceptable use

You will not:

• use the Service in breach of law or of anyone's rights;
• connect storage, accounts or data you are not authorized to share;
• try to access other customers' data, probe or bypass security, or overload the Service (including load testing without our written permission);
• copy, resell or reverse engineer the Service, except where the law allows it despite this restriction;
• use the Service to build a competing product.

5. Fees and billing

Each new workspace starts with a free trial of 7 days. When the trial ends without an active subscription, tracking for that workspace pauses: sources are no longer synchronized and no notifications or reports are sent. Data already recorded stays available, and tracking resumes when a subscription starts.

Paid plans are monthly subscriptions per workspace, charged in advance through our payment processor, Stripe. They renew automatically until cancelled. You can cancel at any time from the Billing page; cancellation takes effect at the end of the paid period and the workspace keeps its plan until then. Fees are non-refundable except where the law requires otherwise.

Prices exclude taxes unless stated otherwise; you are responsible for taxes that apply to your purchase. We may change prices with at least 30 days' notice; a change applies from your next billing period after the notice. We may suspend a paid workspace if payment fails and is not resolved.

6. Third-party services

The Service depends on third parties, including Amazon Web Services, Cloudflare and Stripe (see the Privacy Policy). Your use of your own AWS account and of Stripe's checkout is also governed by their terms. We are not responsible for third-party services we do not control.

7. Security and confidentiality

We use reasonable technical and organizational measures to protect Customer Data, described in the Data Processing Addendum. We treat Customer Data as confidential and access it only to operate, support and secure the Service or when the law requires it (in which case we will tell you if we are allowed to). No system is completely secure; we will notify you without undue delay if we become aware of a breach affecting your Customer Data.

8. Changes to the Service

We continually change the Service and may add, change or remove features. Some features may be marked beta or preview and may be less reliable. If we discontinue the Service, we will give at least 30 days' notice and refund any prepaid fees for the unused period.

9. Suspension, termination and deletion

You may stop using the Service and delete your account at any time from Account settings. We may suspend or terminate your access if you breach these Terms, fail to pay, or create a security or legal risk, and we will give notice where reasonable.

When an account or workspace is deleted, the related data is removed from our active systems promptly. Encrypted backups that already contain it expire within 90 days. The Privacy Policy explains what is kept and how to request complete erasure. The Service is not a backup of your state: keep your own copies.

10. Disclaimer

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE". TO THE FULLEST EXTENT PERMITTED BY LAW WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY AND NON-INFRINGEMENT. We do not warrant that the Service will be uninterrupted or error-free, or that it will detect every change. Cost figures are estimates based on public list prices and assumptions; they are not invoices, quotes or financial advice.

11. Limitation of liability

TO THE FULLEST EXTENT PERMITTED BY LAW: (a) NEITHER PARTY IS LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, GOODWILL OR DATA, HOWEVER CAUSED; AND (b) OUR TOTAL LIABILITY ARISING OUT OF OR RELATING TO THE SERVICE OR THESE TERMS IS LIMITED TO THE GREATER OF THE AMOUNTS YOU PAID US FOR THE SERVICE IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM AND USD 100.

These limits do not apply to your payment obligations, your obligations under section 12, or liability that cannot be limited by law.

12. Indemnity

You will defend and indemnify OpsFort against third-party claims, and the related losses, damages, fines and reasonable legal costs, arising from Customer Data (including secrets or personal data contained in it), your breach of these Terms, or your use of the Service in breach of law or of someone else's rights.

13. Changes to these Terms

We may update these Terms, the Privacy Policy and the Data Processing Addendum. For material changes we will notify you by email or in the Service at least 15 days before they take effect (unless a change is required by law sooner), and ask you to accept the new version to keep using the Service. If you do not agree, stop using the Service and delete your account.

14. Governing law and disputes

These Terms are governed by the laws of the State of Florida, United States, without regard to conflict-of-law rules. The state and federal courts located in Florida have exclusive jurisdiction, and each party consents to them. Claims must be brought individually, not as part of a class or representative action. Nothing in these Terms limits rights that mandatory law in your country gives you.

15. General

These Terms, the Privacy Policy and the Data Processing Addendum are the entire agreement about the Service and replace any earlier agreement on the subject. If a provision is unenforceable, the rest remains in effect. Failing to enforce a provision is not a waiver. You may not assign these Terms without our consent; we may assign them to an affiliate or to a successor of the business (for example a company we form to operate the Service) with notice to you. Neither party is liable for delays caused by events beyond its reasonable control. We send notices to your account email; send notices to us at support@opsfort.com.