Terms & Conditions • Privacy Policy • Refund Policy

1) Agreement & Scope

These Terms govern your use of razzsecurity.com and any services provided by Razz Security IT Services LLP (“Services”). By using our site or engaging our Services, you accept these Terms.

2) Services

We provide cybersecurity services including Application Security, Network Security, IT Security, Cloud Security, and Secure Software Development. Specific deliverables, timelines, and fees are defined in a written proposal, quotation, or Statement of Work (“SOW”).

3) Eligibility & Accounts

• You must have authority to bind the organization you represent.
• You are responsible for safeguarding credentials and for all activity under your account.

4) Acceptable Use

• No unauthorized scanning, exploitation, or testing outside the agreed scope.
• No activity that violates applicable laws, third-party rights, or causes service disruption.
• For security assessments, you must provide written authorization and evidence of ownership/control.

5) Client Materials & Confidentiality

• Client Data and systems you disclose remain your property. You grant us a limited license to use them to deliver the Services.
• Both parties must protect each other’s Confidential Information and use it only for the engagement.

6) Deliverables & Intellectual Property

• Upon full payment, you receive a non-exclusive, perpetual license to Deliverables created for you, except our pre-existing IP, tools, and methodologies which remain ours.
• We may reuse generalized know-how that does not reveal your Confidential Information.

7) Fees, Taxes & Invoicing

• Fees are as per the SOW/quote and are exclusive of taxes. Applicable taxes (e.g., GST) are your responsibility.
• Invoices are due as stated in the SOW. Late payments may attract interest or suspension of work.

8) Warranties & Disclaimers

• We provide Services using reasonable skill and care. However, cybersecurity risk cannot be eliminated.
• Except as expressly stated, Services are provided “as-is” without warranties of merchantability, fitness, or non-infringement.

9) Limitation of Liability

• To the maximum extent permitted by law, we are not liable for indirect, incidental, special, or consequential damages.
• Our aggregate liability under an engagement is limited to the fees paid for the Services giving rise to the claim in the preceding 6 months.

10) Indemnity

You agree to indemnify us against claims arising from your misuse of the Services or violation of these Terms.

11) Termination

• Either party may terminate for convenience per the SOW or for cause upon material breach not cured within 15 days.
• On termination, you must pay for work performed and authorized expenses incurred up to the termination date.

12) Compliance

You are responsible for obtaining necessary approvals for testing. We comply with applicable Indian laws including the Information Technology Act, 2000, Rules thereunder, and the Digital Personal Data Protection Act, 2023 (as applicable).

13) Governing Law & Dispute Resolution

These Terms are governed by the laws of India. Courts in Bengaluru, Karnataka shall have exclusive jurisdiction. Parties may mutually agree to resolve disputes through arbitration seated in Bengaluru under the Arbitration & Conciliation Act, 1996.

14) Changes

We may update these Terms. Material changes will be indicated by updating the “Effective date”.

1) Overview

This Privacy Policy explains how we collect, use, share, and protect personal data processed through razzsecurity.com and in the course of delivering Services.

2) Data We Collect

• Contact data: name, email, phone, company, role.
• Engagement data: project details, SOW information, billing details, communications.
• Technical data: logs, IP address, device/browser info, cookies or similar identifiers.
• Candidate/Training data (if applicable): CV, certificates, attendance, assessments.

3) How We Use Data

• Provide and improve Services; fulfill contracts/SOWs; invoicing and support.
• Security monitoring, incident response, and legal compliance.
• Communications about proposals, updates, webinars or training (you can opt-out of marketing anytime).

4) Lawful Bases

We process data based on consent, performance of a contract, compliance with legal obligations, and our legitimate interests in delivering secure services.

5) Cookies & Analytics

We may use essential cookies for site functionality and optional analytics cookies to improve performance. You can control cookies via your browser settings.

6) Sharing & Transfers

• Service providers (hosting, email, payment, analytics) under confidentiality obligations.
• Legal/regulatory authorities where required by law.
• Business transfers (e.g., merger/reorganization) with appropriate safeguards.

7) Security

We implement administrative, technical, and organizational measures to protect data (e.g., access controls, encryption in transit where applicable, and least-privilege principles). No method is 100% secure; we continuously improve our posture.

8) Retention

We retain personal data only as long as needed for the purposes stated or as required by law/contractual obligations.

9) Your Rights

Subject to applicable law (including India’s DPDP Act, 2023), you may request access, correction, deletion, or withdrawal of consent. We will respond within a reasonable time.

10) Children

Our site and Services are not directed to children under 18. We do not knowingly collect their data.

11) Contact & Grievance

For privacy questions or requests, contact: contact@razzsecurity.com.
You may write to us at: Razz Security IT Services LLP, Bengaluru, Karnataka, India.

12) Changes

We may update this Privacy Policy. Material changes will be indicated by updating the “Effective date”.

1) General

Our work is professional, time-bound, and involves specialized expertise. This policy explains when refunds may apply for cybersecurity Services and related offerings.

2) Consulting/Assessment/Implementation Services

• Before kickoff: If you cancel after acceptance but before kickoff, we will refund amounts paid minus non-recoverable costs (e.g., onboarding, scheduling, third-party bookings) and a 10% administrative fee.
• After kickoff: Once work starts, fees for completed milestones and allocated efforts are non-refundable. Any prepaid unused portion may be refunded pro-rata at our discretion.

3) Secure Software Development

• Discovery, architecture, and initial sprint fees are non-refundable after delivery of artifacts.
• For multi-sprint projects, any prepaid future sprints not started may be refunded less a 10% administrative fee.

4) Subscriptions/Managed Services

• Charges already incurred in the current billing cycle are non-refundable.
• Cancel anytime to stop future renewals per the plan’s terms.

5) Digital Deliverables

Reports, scripts, tooling, licenses, and downloadable materials are non-returnable and non-refundable once delivered or accessed.

6) How to Request a Refund

Email contact@razzsecurity.com with your company name, invoice/PO number, engagement details, and the reason for the request. We usually respond within 7 business days.

7) Timelines

Approved refunds are processed to the original payment method within 7–14 business days. Bank/processor delays may apply.

8) Exceptions

No refunds where work cannot proceed due to missing access, dependencies, or client delays beyond 14 days, or where misuse or out-of-scope actions caused issues.