Purchase & Licensing Conditions

01. Introduction & Corporate Identity

These Purchase & Licensing Conditions ("Conditions") form an integral part of the Terms & Conditions of KHODSHIMA SUMN ASSIST LTD ("Company", "we", "us", or "our"), a private limited company incorporated in England and Wales under company registration number 17435961, with its registered office at 128 City Road, London, United Kingdom, EC1V 2NX.

These Conditions govern the purchase, licensing, deployment, and permitted use of all digital deliverables and services offered by the Company through its website (khodshimasumnassistltd.com). They are issued in accordance with the Companies Act 2006, the Consumer Rights Act 2015, the Supply of Goods and Services Act 1982, the Copyright, Designs and Patents Act 1988 (CDPA), and the Electronic Commerce (EC Directive) Regulations 2002.

02. Definitions & Interpretation

In these Conditions, the following definitions apply:

• "Deliverables" means all digital scripts, configuration files, audit reports, hardened server configurations, documentation, and any other output produced by the Company for the Client.
• "Digital Script Product" means a downloadable shell script (.sh) or configuration artifact delivered electronically without direct server access.
• "Turnkey Installation" means a service tier involving direct configuration on the Client's server during a scheduled maintenance window.
• "Licensee" means the Client who has purchased a Deliverable and received a license grant under Section 5.
• "Derivative Work" means any modification, adaptation, or enhancement of a Deliverable created by the Licensee.
• "Open Source Components" means software or configuration snippets derived from publicly available sources (e.g., CIS Benchmarks, Lynis) that are subject to their respective original licenses.

03. Purchase Model & One-Time Payment Terms

The Company operates exclusively on a one-time purchase model. All catalog service packages (100 €, 250 €, 500 €) and digital products are sold as single, non-recurring transactions. Enterprise Contract tier is the sole exception: bespoke enterprise contracts may include 1-year ongoing maintenance, quarterly re-audits, and recurring support as specified in a separately signed agreement. Specifically:

• No Subscriptions: For catalog packages, there are no recurring fees, no auto-renewals, no recurring billing cycles, and no ongoing maintenance contracts. Enterprise Contract tier may include recurring services as specified in a separately signed agreement;
• No Hidden Charges: The price displayed at checkout is the total amount payable. There are no additional licensing fees, per-server surcharges, or usage-based charges;
• Custom Requirements: Where the Client requests work outside standard packages, a bespoke quotation will be issued. The quoted price is valid for 14 days. Custom work commences only after payment confirmation;
• Payment Processing: All payments are processed via Stripe Payments Europe Ltd / Stripe Payments UK or Airwallex (UK) Limited, both PCI-DSS Level 1 certified. The Company does not store, process, or transmit full card numbers, CVVs, or banking credentials;
• Currency & Taxation: Prices are displayed in Euros (€) unless otherwise stated. UK VAT is applied where legally required. Clients outside the UK are responsible for any local digital services or consumption taxes.

For full details on cancellations and refunds, see our Refund & Cancellation Policy.

04. Delivery & Acceptance

Delivery Method:

• Digital Script Products: Delivered electronically via secure download link or email attachment within the timeframe specified for each package;
• Turnkey Installation: Delivered during the agreed maintenance window, with a final executive report issued upon completion;
• Security Audit Assessments: Delivered as an electronic report (PDF or equivalent) with executive summary and technical findings.

Acceptance: Deliverables are deemed accepted upon successful download (for Digital Script Products) or upon completion of the maintenance window and issuance of the final report (for Turnkey Installation), unless the Client notifies the Company of material defects within 48 hours of delivery.

Warranty: All Deliverables are covered by a 60-day Warranty Period from the date of delivery. The Company will remediate any configuration defect or script error attributable to its own work at no additional cost. This warranty does not cover issues caused by Client modifications, third-party software updates, environment changes, or force majeure events.

05. Intellectual Property Ownership

All Deliverables — including shell scripts, configuration files, audit methodologies, hardening frameworks, and documentation — are the original work product of the Company. The Company retains all intellectual property rights, including but not limited to:

• Copyright: Under the Copyright, Designs and Patents Act 1988 (CDPA), the Company is the first owner of copyright in all Deliverables as the author and creator;
• Methodologies: Proprietary hardening techniques, audit frameworks, configuration patterns, and analytical approaches remain the exclusive intellectual property of the Company;
• Derivative Methods: The Company retains rights in the underlying methods and patterns even where the Client modifies a specific script for their own infrastructure;
• Brand & Trademarks: The Company name, logo, service names, and all associated branding are protected under UK trademark law and may not be used by the Client without written permission.

06. License Grant & Permitted Uses

Upon full payment and delivery, the Company grants the Licensee a perpetual, non-exclusive, non-transferable, non-sublicensable, worldwide license to use, modify, deploy, and operate the Deliverables on the Licensee's own server infrastructure for the Licensee's own internal business purposes.

Permitted uses include:

• Deploying the Deliverables on any server owned, leased, or controlled by the Licensee;
• Modifying or adapting the Deliverables for the Licensee's own infrastructure requirements;
• Creating Derivative Works for internal use on the Licensee's own systems;
• Internal redistribution within the Licensee's organisation (e.g., to employed system administrators);
• Archiving or backing up the Deliverables for disaster recovery purposes.

The license is granted per Licensee, not per server. The Licensee may deploy on multiple servers within their own organisation without purchasing additional licenses.

07. Prohibited Uses & License Restrictions

The Licensee must not engage in any of the following prohibited uses. Violation constitutes material breach of these Conditions and may result in immediate termination of the license, cessation of services, and legal action:

• Resale & Redistribution: Selling, reselling, sublicensing, renting, leasing, or otherwise distributing the Deliverables or Derivative Works to any third party, whether commercially or gratuitously;
• Commercial Exploitation: Using the Deliverables as part of a competing service offering, managed service platform, or outsourced IT service provided to third parties;
• Copyright Removal: Removing, altering, or obscuring copyright notices, license headers, or attribution markers within the Deliverables;
• Reverse Engineering for Competition: Reverse-engineering, decompiling, or analysing the Deliverables to create competing products or methodologies;
• Prohibited Activities: Deploying or adapting the Deliverables for any prohibited activity as defined in our Terms & Conditions, including financial services, cryptocurrency infrastructure, gambling platforms, adult content, or any FCA-regulated activity;
• Illegal Use: Using the Deliverables to facilitate any activity prohibited under the laws of England and Wales, the Licensee's jurisdiction, or international law, including money laundering, terrorism financing, sanctions evasion, or distribution of malicious software;
• Infrastructure Abuse: Using hardened configurations to facilitate spam, DDoS attacks, botnet operations, credential stuffing, or unauthorised access to third-party systems.

08. Open Source Components & Third-Party Licenses

Where Deliverables incorporate Open Source Components — such as CIS Benchmark references, Lynis audit framework configurations, or publicly available security hardening guidelines — those components remain subject to their respective original licenses (e.g., GPL, BSD, MIT, Apache 2.0). The Company's license grant under Section 6 applies only to its original work product and does not override or supersede any underlying open-source license terms.

The Licensee is responsible for complying with the terms of any embedded open-source licenses. A list of major open-source components referenced in each Deliverable is included in the accompanying documentation or executive report where applicable.

09. Ephemeral Server Access & Credential Protocol

For Turnkey Installation services, the Licensee grants the Company temporary technical access to designated Linux server(s). The following protocol applies:

• Authentication: Access is granted exclusively via temporary Ed25519 elliptic-curve SSH public keys, generated specifically for the commissioned maintenance window. The Licensee must not share plaintext root passwords;
• Scope: Access is limited to the specific server IP, SSH port, and user account designated by the Licensee;
• No Permanent Storage: The Company does not store, log, or retain any server credentials, private keys, or authentication tokens beyond the maintenance window;
• Immediate Revocation: Upon completion, the Licensee revokes the temporary SSH key. The Company confirms key removal in the final executive report;
• Data Handling: Diagnostic output and temporary artifacts are stored in encrypted volumes and permanently deleted following expiration of the Warranty Period.

10. License Termination & Consequences

Termination by Company: The Company may terminate the license granted under Section 6 immediately upon written notice if the Licensee: (a) breaches any provision of these Conditions, including the Prohibited Uses section; (b) engages in any prohibited activity listed in Section 7; (c) is identified on a UK, UN, EU, or US sanctions list; or (d) fails to pay amounts due.

Effects of Termination: Upon termination for cause:

• The Licensee must immediately cease all use of the Deliverables and Derivative Works;
• The Licensee must destroy all copies of the Deliverables in their possession or control;
• The Licensee must provide written confirmation of destruction within 7 days of termination;
• The Company reserves the right to pursue legal remedies, including injunction and damages, for breach of these Conditions.

Survival: Sections relating to Intellectual Property Ownership, Prohibited Uses, Limitation of Liability, Sanctions Compliance, and Governing Law survive termination of the license.

11. International Sanctions & AML Compliance

In compliance with the UK Office of Financial Sanctions Implementation (OFSI), HM Treasury, the United Nations Security Council, the European Union, and US OFAC, the Company does not sell, license, or deliver products to individuals, entities, or jurisdictions subject to comprehensive international sanctions. This includes but is not limited to the Russian Federation, Belarus, Iran, North Korea, Syria, Cuba, and occupied territories of Ukraine.

The Licensee warrants that they are not: (a) located in, ordinarily resident in, or organised under the laws of a sanctioned jurisdiction; (b) listed on any UK, UN, EU, or US sanctions list; or (c) acting on behalf of a sanctioned person or entity. If the Company identifies a sanctions risk after purchase, the license will be terminated immediately, no refund will be issued, and the transaction will be reported to the relevant UK authorities.

12. Limitation of Liability

To the maximum extent permitted by applicable law:

• Cap: The Company's total aggregate liability arising from or related to these Conditions or any purchase shall not exceed the total amount paid by the Licensee for the specific Deliverable giving rise to the claim;
• Indirect Loss: The Company shall not be liable for any indirect, incidental, consequential, special, or punitive damages, including loss of profits, loss of data, loss of business, or cost of substitute services;
• No Security Guarantee: While the Company applies industry-standard CIS Benchmark configurations, no server configuration can be guaranteed impervious to all attacks. The Licensee acknowledges that security is a continuous process requiring ongoing vigilance beyond a one-time engagement;
• Licensee Responsibility: The Licensee is solely responsible for the ongoing operation, monitoring, patching, and maintenance of their server infrastructure following delivery.

Nothing in these Conditions excludes or limits the Company's liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be excluded under English law.

13. Data Protection & Cross-Reference

The Company processes personal data in accordance with the UK Data Protection Act 2018, UK GDPR, and (where applicable) EU GDPR. For full details on data collection, retention, lawful bases, and your statutory rights, please refer to our Privacy Policy and Cookie Policy.

The Company does not store Licensee server credentials, private SSH keys, or plaintext passwords beyond the maintenance window. All diagnostic data is permanently deleted following expiration of the Warranty Period.