Terms & Conditions of Service

01. Introduction & Corporate Identity

These Terms & Conditions ("Terms", "Agreement") constitute a legally binding contract between KHODSHIMA SUMN ASSIST LTD ("Company", "we", "us", or "our"), a private limited company incorporated in England and Wales under company registration number 17435961, with its registered office at 128 City Road, London, United Kingdom, EC1V 2NX, and any individual or corporate entity ("Client", "you", or "your") that purchases, commissions, or otherwise engages our services or downloads our digital deliverables.

By placing an order, making payment, downloading a digital script, granting server access, or otherwise engaging our services, you acknowledge that you have read, understood, and agreed to be bound by these Terms in their entirety. If you do not agree to these Terms, you must not use our website, purchase our services, or download our deliverables.

These Terms are issued pursuant to the Companies Act 2006, the Consumer Rights Act 2015 (where applicable to non-business consumers), the Supply of Goods and Services Act 1982, and the Electronic Commerce (EC Directive) Regulations 2002.

02. Definitions & Interpretation

In these Terms, the following definitions apply unless the context otherwise requires:

• "Deliverables" means the digital scripts, configuration files, audit reports, executive summaries, hardened server configurations, and any other tangible or intangible output produced by the Company for the Client under an Order.
• "Order" means a commission placed by the Client for a specific service package or custom engineering engagement, accepted by the Company in accordance with Section 3.
• "Services" means the one-time IT engineering, server hardening, security auditing, and digital script delivery services provided by the Company as described on the website (khodshimasumnassistltd.com).
• "Turnkey Installation" means a service tier in which the Company performs direct configuration on the Client's server infrastructure during a defined maintenance window.
• "Digital Script Product" means a downloadable shell script or configuration artifact delivered electronically without direct server access by the Company.
• "Warranty Period" means the post-delivery period (60 days from completion) during which the Company provides remediation of configuration defects at no additional cost.

03. Order Acceptance & Engagement Process

All service packages displayed on our website constitute invitations to treat, not binding offers. A legally binding contract is formed only when the following sequence is completed:

1. Order Submission: The Client selects a service package, provides project requirements, and completes checkout via our payment gateway.
2. Payment Confirmation: The Company receives confirmation of successful payment from Stripe or Airwallex.
3. Scope Confirmation: For Turnkey Installation tiers, the Company contacts the Client within one business day to schedule the maintenance window and confirm technical prerequisites.
4. Order Acceptance: The Company issues a written confirmation (email) accepting the Order and specifying the delivery timeline. Until this point, the Company reserves the right to decline any Order at its sole discretion, in which case a full refund will be issued.

The Company may refuse any Order where: (a) the requested work falls outside the scope of non-financial IT engineering services; (b) the Client is located in a sanctioned jurisdiction; (c) the requested activity is listed in the Prohibited Activities section; or (d) technical prerequisites are not met and cannot be reasonably remedied.

04. Scope of Services & Business Model

The Company provides exclusively one-time, non-recurring IT engineering services. There are no subscriptions, no recurring billing, no auto-renewals, and no ongoing maintenance contracts unless separately agreed in writing. Enterprise Contract tier is the sole exception: bespoke enterprise contracts may include 1-year ongoing maintenance, quarterly re-audits, priority 24/7 emergency escalation, and dedicated engineering support, all as specified in a separately signed agreement. Specifically, the Company provides:

• Linux server hardening and CIS Benchmark configuration;
• Web stack security configuration (Nginx, PHP, MySQL, Redis);
• Security audit assessments using Lynis and custom vulnerability scanning;
• Digital shell script (.sh) deliverables for self-service deployment;
• Turnkey installation services on Client-owned infrastructure;
• Executive technical reports and configuration documentation.

The Company does not provide and will not accept commissions for:

• Financial services, banking infrastructure, payment gateway integration, or custody of financial instruments;
• Cryptocurrency exchanges, wallet infrastructure, token deployment, or blockchain financial services;
• Gambling, betting, lottery, or gaming platform infrastructure;
• Adult content hosting, distribution platforms, or associated infrastructure;
• Any service requiring authorisation from the Financial Conduct Authority (FCA) or equivalent regulatory body;
• Managed services, ongoing monitoring contracts, or SLA-backed retainer arrangements.

05. Payment Terms & Billing

All prices displayed on the website are in Euros (€) unless otherwise stated and are inclusive of applicable UK VAT where required. Payment terms are as follows:

• One-Time Payment: Each service package is a single, one-time purchase. There are no recurring charges, no subscription fees, and no automatic renewals. You pay for the engineering work, and the resulting configuration is yours to operate.
• Payment Method: Payments are conducted securely via direct Payment Links issued to the Client's email address. We do not host direct credit card input forms on our website. Payment links are generated and processed via Stripe Payments Europe Ltd / Stripe Payments UK or Airwallex (UK) Limited, both PCI-DSS Level 1 certified payment service providers. The Company never stores, processes, or transmits full card numbers, CVVs, or banking credentials.
• Custom Requirements: Where the Client requests work outside standard packages, a bespoke quotation will be issued. The quoted price is valid for 14 days. Custom work commences only after payment confirmation.
• Currency & Taxes: All invoices are issued in the agreed currency. UK VAT is applied where legally required. Clients outside the UK are responsible for any local import, digital services, or consumption taxes applicable in their jurisdiction.
• Chargebacks: The Client agrees not to initiate unjustified chargebacks or payment reversals. In the event of a disputed transaction, the Client must first contact the Company at info@khodshimasumnassistltd.com to seek resolution. The Company reserves the right to dispute fraudulent chargebacks and recover associated costs.

06. Delivery, Acceptance & Warranty

Delivery Method: Digital Script Products are delivered electronically via secure download link or email attachment within the timeframe specified for each package. Turnkey Installation services are delivered during the agreed maintenance window.

Acceptance Criteria: Deliverables are deemed accepted upon:

• For Digital Script Products: successful download by the Client;
• For Turnkey Installation: completion of the maintenance window and issuance of the final executive report, unless the Client notifies the Company of material defects within 48 hours of delivery.

Warranty Period: The Company warrants that Deliverables will conform to the specifications described in the Order for a period of 60 days from the date of delivery. During this period, the Company will remediate any configuration defect or script error attributable to its own work at no additional cost. This warranty does not cover:

• Issues caused by Client modifications, third-party software updates, or changes to the server environment after delivery;
• Force majeure events, including infrastructure outages, upstream provider failures, or natural disasters;
• Issues arising from inaccurate or incomplete information provided by the Client.

07. Ephemeral Server Access & Credential Protocol

For Turnkey Installation services, the Client grants the Company temporary technical access to designated Linux server(s). The following protocol applies:

• Authentication Method: Access is granted exclusively via temporary Ed25519 elliptic-curve SSH public keys, generated specifically for the commissioned maintenance window. The Client must not share plaintext root passwords.
• Scope of Access: Access is limited to the specific server IP address, SSH port, and user account designated by the Client. The Company does not access unrelated systems, databases, or network segments.
• No Permanent Credential Storage: The Company does not store, log, or retain any server credentials, private keys, or authentication tokens in its permanent systems beyond the maintenance window.
• Immediate Revocation: Upon completion and verification, the Client revokes the temporary SSH key. The Company confirms key removal in the final executive report.
• Data Handling: Any diagnostic output, log files, or temporary artifacts generated during the maintenance window are stored in encrypted volumes and permanently deleted following expiration of the Warranty Period.

08. Client Obligations

The Client agrees to the following obligations as a condition of service delivery:

• Accurate Information: Provide complete, accurate, and truthful information regarding server specifications, operating system versions, existing configurations, and project requirements.
• Technical Prerequisites: Ensure that target servers meet the minimum requirements specified by the Company prior to the maintenance window, including SSH accessibility, sufficient disk space, and supported operating system distributions.
• Backup Responsibility: Maintain adequate backups of all critical data, configurations, and system states before granting access. The Company is not liable for data loss resulting from the Client's failure to maintain backups.
• Authorisation: Confirm that the Client owns or has full authority to grant access to the designated server infrastructure and that engaging the Company's services does not violate any third-party agreement, hosting terms of service, or applicable law.
• Timely Cooperation: Respond to technical inquiries, provide necessary access credentials, and confirm scheduling within reasonable timeframes. Delays caused by Client non-responsiveness may extend delivery timelines without penalty to the Company.
• Compliance: Ensure that the server infrastructure and intended use of the Deliverables comply with all applicable laws, regulations, and the Prohibited Activities section of these Terms.

09. Intellectual Property & License Grant

Ownership: All Deliverables, including shell scripts, configuration files, audit methodologies, and documentation, are the original work product of the Company. The Company retains all intellectual property rights, including copyright, in the underlying methodologies, frameworks, and proprietary techniques used to produce the Deliverables.

License Grant: Upon full payment and delivery, the Company grants the Client a perpetual, non-exclusive, non-transferable, worldwide license to use, modify, deploy, and operate the Deliverables on the Client's own server infrastructure for the Client's own internal business purposes.

• Permitted: Modifying the scripts for the Client's own infrastructure; deploying on additional servers owned or controlled by the Client; internal redistribution within the Client's organisation.
• Prohibited: Reselling, sublicensing, redistributing, or commercially exploiting the Deliverables or derivative works to third parties; removing or altering copyright notices; reverse-engineering proprietary methodologies for competitive purposes.

Open Source Components: Where Deliverables incorporate open-source software or configuration snippets derived from publicly available sources (e.g., CIS Benchmarks, Lynis), those components remain subject to their respective original licenses. The Company's license grant applies only to its original work product.

10. Refund Policy

Given the nature of one-time digital engineering services, the following refund policy applies:

• Pre-Delivery Cancellation: If the Client cancels an Order before the Company has commenced work (i.e., before the maintenance window is scheduled or before digital deliverables have been produced), a full refund will be issued within 14 business days.
• Digital Script Products: Due to the immediate electronic delivery and non-returnable nature of digital goods, refunds are not available after successful download, except where the Deliverable is demonstrably defective and the Company fails to remediate within the Warranty Period.
• Turnkey Installation: If the Company fails to perform the agreed services during the scheduled maintenance window due to its own fault, a full refund will be issued. If the Client cancels after the maintenance window has commenced but before completion, a pro-rata refund may be issued at the Company's discretion, reflecting work already performed.
• Order Declined by Company: Where the Company declines an Order under Section 3, a full refund is issued within 14 business days.
• Statutory Rights: Nothing in this section affects the statutory rights of consumers under the Consumer Rights Act 2015 or other applicable UK consumer protection legislation.

11. Prohibited Activities & Acceptable Use

The Client must not use, deploy, or adapt the Deliverables or Services for any of the following purposes. Violation of this section constitutes material breach of these Terms and may result in immediate termination of the license, cessation of services, and legal action:

• Financial & Regulated Services: Banking infrastructure, payment processing systems, lending platforms, insurance products, investment platforms, or any service requiring FCA authorisation;
• Cryptocurrency: Cryptocurrency exchanges, wallet services, ICO/IDO infrastructure, mining pools, DeFi platforms, or token issuance systems;
• Gambling: Online casinos, sports betting platforms, lottery systems, or any gambling infrastructure;
• Adult Content: Adult entertainment hosting, content distribution networks for adult material, or associated monetisation infrastructure;
• Illegal Activity: Any activity prohibited under the laws of England and Wales, the Client's jurisdiction, or international law, including but not limited to money laundering, terrorism financing, sanctions evasion, or distribution of malicious software;
• Infrastructure Abuse: Using hardened configurations to facilitate spam, DDoS attacks, botnet operations, credential stuffing, or unauthorised access to third-party systems;
• Sanctions Evasion: Providing services to, or deploying infrastructure for, individuals or entities subject to UK, UN, EU, or US sanctions.

12. Limitation of Liability

To the maximum extent permitted by applicable law:

• Cap on Liability: The Company's total aggregate liability arising from or related to these Terms or any Order shall not exceed the total amount paid by the Client for the specific Order giving rise to the claim.
• Exclusion of Indirect Loss: The Company shall not be liable for any indirect, incidental, consequential, special, or punitive damages, including loss of profits, loss of data, loss of business, loss of reputation, or cost of substitute services, even if advised of the possibility of such damages.
• No Security Guarantee: While the Company applies industry-standard hardening techniques and CIS Benchmark configurations, no server configuration can be guaranteed to be impervious to all attacks. The Client acknowledges that security is a continuous process requiring ongoing vigilance, patching, and monitoring beyond the scope of a one-time engagement.
• Client Responsibility: The Client is solely responsible for the ongoing operation, monitoring, and maintenance of their server infrastructure following delivery. The Company's Deliverables represent a point-in-time configuration and do not constitute a perpetual security guarantee.

Nothing in these Terms excludes or limits the Company's liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be excluded under English law.

13. Confidentiality & Data Protection

Each party agrees to keep confidential all non-public information received from the other party, including server configurations, business operations, and technical infrastructure details. The Company processes personal data in accordance with its Privacy Policy and the UK Data Protection Act 2018, UK GDPR, and (where applicable) EU GDPR.

The Company does not store Client server credentials, private SSH keys, or plaintext passwords beyond the maintenance window. All diagnostic data is permanently deleted following expiration of the Warranty Period. For full details on data collection, retention, and your statutory rights, please refer to our Privacy Policy.

14. International Sanctions & Anti-Money Laundering (AML) Compliance

In compliance with the UK Office of Financial Sanctions Implementation (OFSI), HM Treasury, the United Nations Security Council, the European Union, and US Office of Foreign Assets Control (OFAC), the Company does not provide services, deliver digital products, or process payments for individuals, entities, or jurisdictions subject to comprehensive international sanctions. This includes but is not limited to the Russian Federation, Belarus, Iran, North Korea, Syria, Cuba, and occupied territories of Ukraine.

The Client warrants that they are not: (a) located in, ordinarily resident in, or organised under the laws of a sanctioned jurisdiction; (b) listed on any UK, UN, EU, or US sanctions list; or (c) acting on behalf of a sanctioned person or entity. The Company reserves the right to conduct sanctions screening checks and to refuse or cancel any Order where screening results indicate a potential sanctions risk.

15. Term & Termination

Duration: These Terms apply from the moment an Order is placed and remain in effect for the duration of the engagement, including the Warranty Period. The license granted under Section 9 is perpetual subject to compliance with these Terms.

Termination by Company: The Company may terminate this Agreement and the license granted hereunder immediately upon written notice if the Client: (a) breaches any provision of these Terms, including the Prohibited Activities section; (b) provides false or misleading information; (c) is identified on a sanctions list; or (d) fails to pay amounts due.

Termination by Client: The Client may cancel an Order in accordance with the Refund Policy (Section 10). Upon termination for cause by the Company, the Client must cease use of all Deliverables and destroy all copies.

Survival: Sections relating to Intellectual Property, Limitation of Liability, Confidentiality, Sanctions Compliance, Dispute Resolution, and Governing Law survive termination of this Agreement.

16. Dispute Resolution & Governing Law

Governing Law: These Terms and any dispute arising from or in connection with them shall be governed by and construed in accordance with the laws of England and Wales.

Pre-Action Resolution: Before commencing formal proceedings, both parties agree to attempt to resolve any dispute through good-faith negotiation. The Client must first submit a written complaint to info@khodshimasumnassistltd.com. The Company will respond within 14 business days.

Jurisdiction: Subject to the paragraph below, the courts of England and Wales shall have exclusive jurisdiction over any dispute or claim arising from or in connection with these Terms. The Client submits to the jurisdiction of these courts.

Consumer Disputes: If the Client is a consumer residing in the United Kingdom or the European Union, the Client may also bring proceedings in the courts of the jurisdiction in which they are domiciled, and may invoke the applicable mandatory consumer protection laws of that jurisdiction. Consumers in the EU may also use the European Commission's Online Dispute Resolution platform at ec.europa.eu/consumers/odr.

17. Amendments to Terms

The Company reserves the right to update or amend these Terms at any time. Changes will be published on this page with an updated revision date. For Orders already accepted and in progress, the Terms in effect at the time of Order Acceptance (Section 3) shall continue to govern. For future Orders, the Terms in effect at the time of Order submission shall apply.

It is the Client's responsibility to review these Terms periodically. Continued use of the Company's services or website following the publication of amended Terms constitutes acceptance of the updated Terms.