Terms of Service

These terms apply when you sign up for and use Stackurity Cloud, the hosted Stackurity service at app.stackurity.dev.

Stackurity, stackurity.dev and Stackurity Cloud are owned and operated by OUTDO INC ("we", "us"), 35, 5th B Cross, 16th Main, BTM 2nd Stage, Bangalore, Karnataka, India 560076. Contact: info@stackurity.dev.

The Stackurity software you download and run yourself is not covered by these terms: the open-source edition is under the Apache License 2.0, and a licensed edition is under the licence agreement that comes with it.

1. Accepting these terms

• You accept these terms when you tick the box on the sign-up form. If you sign up for an organisation, you confirm that you may accept them on its behalf; "you" then means that organisation.
• You must be at least 18 years old and able to enter into a binding contract.

2. Your account

• Give accurate details and keep them up to date. Keep your password and API tokens secret; you are responsible for what is done with them.
• The administrators of your organisation decide who else gets access and what they can see. Tell us at once if you think someone has used your account without permission.

3. What the service does

• Stackurity Cloud keeps an inventory of the software on the servers, applications, repositories and images you connect, and reports known vulnerabilities and end-of-life components with suggested fixes.
• Findings come from public and vendor advisory sources and from what your systems report. They can be incomplete, late or wrong. The service helps you decide what to fix; it does not replace your own judgement, testing or other security controls, and it does not guarantee that your systems are secure.
• We may change, add or remove features. If we remove something you pay for, we will tell you first.

4. Acceptable use

You may connect only systems, repositories and accounts that you own or are authorised to assess. You must not:

• use the service to scan, probe or attack systems you are not authorised to;
• try to get around the asset limits, rate limits or access controls, or to see another organisation's data;
• test the security of the service itself without our written agreement (report weaknesses as described on the Security page);
• upload malware or content that is unlawful or that you have no right to share;
• resell the service, or overload it on purpose.

5. Plans, prices and payment

• Free trial. A new organisation can use Stackurity Cloud free for 14 days, with no card needed. During the trial, reports are shortened and watermarked. The self-hosted Community edition is free and is not covered by these terms.
• Paid plans include a number of projects and monitored assets for a month or a year, as shown on the pricing page and on the Plan and billing page before you subscribe. Customers in India pay in rupees plus 18% GST. Customers outside India pay in US dollars with no GST.
• Payments are processed by Razorpay on its own payment page. We never see or store your card or UPI details.
• A subscription renews automatically at the end of each period until it is cancelled.
• Changes. More assets or a higher plan take effect at once, and Razorpay charges the difference for the rest of the period. Fewer assets or a lower plan take effect at the end of the current period.
• Failed payments. If a renewal payment fails, your paid limit stays for 7 days from the first failure while the payment is retried. After that your organisation becomes read-only, as described below, until it pays again.
• Reaching a plan’s limit never deletes your data and never stops alerts for the assets you already have. Only new assets are refused until you move to a bigger plan or remove assets.
• Without a plan. When a trial ends, or a cancelled or unpaid plan runs out, the organisation becomes read-only: you can still sign in and see your data, but nothing new is collected and no alerts are sent. We keep the data for 30 days so you can choose a plan and carry on, then delete it.
• We may change prices with at least 30 days' notice by email. A new price applies from your next period after the notice ends.

6. Cancellation and refunds

• An administrator can cancel at any time on the Plan and billing page. The paid plan runs to the end of the period already paid for, then the organisation becomes read-only as described above.
• Payments are not refunded for the unused part of a period, except where the law requires it or where we charged you in error. See Cancellation and refunds for details and how to ask.

7. Your data

• The data your systems and users send to the service (inventories, findings, settings, notes and the like) remains yours. You give us permission to store and process it only to provide the service to you, to keep it secure and to meet legal obligations.
• We do not sell your data and do not use it to train AI models or for advertising. We do not look at it except to provide the service, fix a problem you report, or where the law requires it.
• Your organisation's data is stored and processed in India. An encrypted backup copy, readable only with a key we hold, may be kept outside India, as described in the Privacy Policy, which also explains how we handle personal data.
• You can export your data through the API and reports while your account is active. When you ask us to close your organisation, we delete its data within 30 days, and it leaves our backups as they expire (within a further 30 days).

8. Availability and support

• We work to keep the service available and secure, but we do not promise that it will be uninterrupted or free of errors. We may need to stop it for maintenance; where we can, we announce planned work in advance.
• Support is by email at info@stackurity.dev.

9. Suspension and termination

• You can stop using the service and close your organisation at any time.
• We may suspend or close an account that breaks these terms, puts the service or other customers at risk, or is used unlawfully. Except where there is an urgent risk or a legal reason not to, we will tell you first and give you a chance to fix the problem.
• We may stop offering the service with at least 90 days' notice. Prepaid fees for the period after it stops will be refunded.

10. Disclaimers and liability

• Apart from what these terms say, the service is provided "as is", without warranties of any kind, to the extent the law allows.
• We are not liable for indirect or consequential loss, or for loss of profit, revenue, data or goodwill.
• Our total liability for all claims about the service is limited to the amount you paid us for it in the 12 months before the claim arose.
• Nothing in these terms limits liability that cannot be limited by law, such as for fraud.

11. Changes to these terms

If we change these terms, we will update the date and version below and email the administrators of each organisation at least 30 days before a material change takes effect. If you keep using the service after that, the new terms apply. If you do not agree to them, you can cancel before they take effect.

12. Law and disputes

These terms are governed by the laws of India. The courts at Bangalore, Karnataka, India, have exclusive jurisdiction. Before going to court, please write to us so that we can try to settle the matter.

13. Contact and grievances

For questions, complaints or grievances about the service: info@stackurity.dev, or by post to the address above. We acknowledge grievances within 48 hours and aim to resolve them within 30 days.

Version 2026-10. Last updated 29 October 2026.