Terms and Conditions

1. Introduction and Acceptance

Welcome to AstralGuard Ltd ("AstralGuard," "we," "us," or "our"). These Terms and Conditions ("Terms") constitute a legally binding agreement between you (the "Client," "you," or "your") and AstralGuard governing your access to and use of our website, platform, services, and related offerings.

By accessing our website at www.astralguard.online, engaging our services, or creating an account on our platform, you acknowledge that you have read, understood, and agree to be bound by these Terms in their entirety. If you do not agree with any provision of these Terms, you must immediately discontinue use of our services.

2. Definitions

For the purposes of these Terms, the following definitions shall apply:

• "Services" means all cybersecurity services, consulting, training, platform access, tools, software, and solutions provided by AstralGuard.
• "Platform" refers to AstralGuard's web-based systems including the Academy, Labs, CTF Arena, and related infrastructure.
• "Client Data" means any data, information, or materials provided by you to AstralGuard in connection with the Services.
• "Deliverables" means any reports, assessments, recommendations, or other work products provided by AstralGuard.
• "Agreement" means these Terms together with any applicable service-specific agreements, statements of work, or order forms.
• "Confidential Information" means non-public information disclosed by either party that is designated as confidential or should reasonably be understood to be confidential.

3. Services Overview

AstralGuard provides comprehensive enterprise-grade cybersecurity services designed to protect, assess, and enhance your organization's security posture. Our services include but are not limited to:

3.1 Security Assessment Services

• Penetration Testing and Vulnerability Assessments
• Security Audits and Compliance Reviews
• Code Review and Secure Development Lifecycle Assessment
• Network Security Analysis
• Cloud Security Assessments (AWS, Azure, GCP)

3.2 Managed Security Services

• Security Operations Center (SOC) Monitoring
• Threat Intelligence and Analysis
• Incident Response and Forensics
• Dark Web Monitoring
• Continuous Security Monitoring

3.3 Consulting and Advisory Services

• Compliance and Governance (GDPR, PCI-DSS, HIPAA, ISO 27001)
• Security Architecture and Design
• Risk Assessment and Management
• Security Strategy Development

3.4 Training and Education

• Security Awareness Training
• Phishing Simulation Campaigns
• Technical Training Programs
• Access to AstralGuard Academy and Practice Labs

Service Scope: All services are provided strictly for lawful, ethical, and authorized purposes. Any testing or assessment activities will only be performed on systems and networks for which you have explicit authorization and ownership rights.

4. Eligibility and Account Registration

4.1 Eligibility Requirements

To use our Services, you must:

• Be at least 18 years of age or the age of majority in your jurisdiction
• Have the legal authority to enter into binding contracts
• Represent a legitimate business entity or organization when procuring enterprise services
• Provide accurate and complete information during registration
• Comply with all applicable laws and regulations in your jurisdiction

4.2 Account Security

You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. You agree to:

• Use strong, unique passwords for your account
• Notify us immediately of any unauthorized access or security breach
• Not share your account credentials with unauthorized parties
• Ensure that your account information remains accurate and up to date

5. Acceptable Use Policy

AstralGuard is committed to ethical cybersecurity practices. By using our Services, you explicitly agree to the following restrictions:

5.1 Prohibited Activities

You shall NOT:

• Use our Services, tools, or techniques for any unauthorized, illegal, or malicious purposes
• Deploy any tools, scripts, or methodologies provided by AstralGuard on systems you do not own or have explicit written authorization to test
• Engage in any activities that violate local, national, or international laws, including but not limited to the Computer Misuse Act of Uganda
• Attempt to gain unauthorized access to AstralGuard's systems, networks, or infrastructure
• Reverse engineer, decompile, or disassemble any proprietary software or tools provided by AstralGuard
• Redistribute, sell, license, or sublicense any AstralGuard materials, tools, or content without explicit written permission
• Use our platform to transmit malware, viruses, or any malicious code
• Engage in any form of harassment, abuse, or threatening behavior toward AstralGuard staff, clients, or community members
• Interfere with or disrupt the integrity or performance of our Services
• Violate any intellectual property rights of AstralGuard or third parties

5.2 Ethical Use Requirements

All security testing tools, techniques, and methodologies provided through our platform or training programs must be used exclusively for:

• Educational and skill development purposes in controlled environments
• Authorized security assessments with documented permission
• Improving your organization's security posture through lawful means

6. Intellectual Property Rights

6.1 AstralGuard Intellectual Property

All content, materials, software, tools, methodologies, reports, templates, training materials, and other intellectual property provided by AstralGuard remain the exclusive property of AstralGuard Ltd. This includes but is not limited to:

• Proprietary security tools and software
• Assessment methodologies and frameworks
• Training curricula and course materials
• Report templates and formats
• Branding, logos, and trademarks
• Website content and design

Unless explicitly stated otherwise in writing, you are granted a limited, non-exclusive, non-transferable license to use our materials solely for the purposes of receiving and benefiting from the Services.

6.2 Client Intellectual Property

You retain all ownership rights to your Client Data, systems, networks, and pre-existing intellectual property. AstralGuard claims no ownership over your data or systems.

6.3 Deliverables

Upon full payment for Services, you will receive a non-exclusive license to use any Deliverables (such as security assessment reports) for your internal business purposes. AstralGuard retains the right to use anonymized, non-identifying information from engagements for research, methodology improvement, and case study purposes.

7. Confidentiality and Data Protection

7.1 Mutual Confidentiality Obligations

Both parties agree to maintain the confidentiality of all Confidential Information disclosed during the course of our engagement. AstralGuard will:

• Treat all Client Data and engagement information with the highest level of confidentiality
• Implement industry-standard security measures to protect your data
• Limit access to your information only to personnel who require it to perform the Services
• Not disclose, share, or sell your information to third parties without your explicit written consent
• Use your data solely for the purposes of delivering the agreed Services

7.2 Data Protection Compliance

While Uganda does not currently have comprehensive data protection legislation, AstralGuard voluntarily adheres to internationally recognized data protection principles, including:

• Data minimization and purpose limitation
• Encryption of sensitive data in transit and at rest
• Regular security audits and assessments of our own infrastructure
• Secure data disposal practices
• Alignment with GDPR principles for international clients

7.3 Data Retention

Client Data will be retained only for as long as necessary to fulfill the Services and comply with legal obligations. Upon request and completion of service obligations, we will securely delete or return your data as mutually agreed.

7.4 Exceptions to Confidentiality

Confidential Information may be disclosed if:

• Required by law, court order, or regulatory authority
• Necessary to defend AstralGuard's legal rights
• The information becomes publicly available through no fault of AstralGuard
• You provide explicit written authorization for disclosure

8. Service Delivery and Performance

8.1 Scope of Work

All Services will be performed in accordance with a mutually agreed scope of work, statement of work (SOW), or service agreement. The scope will define:

• Specific systems, networks, or applications to be assessed
• Testing methodologies and approaches
• Deliverables and reporting formats
• Timeline and milestones
• Testing windows and constraints

8.2 Client Responsibilities

To facilitate effective service delivery, you agree to:

• Provide timely access to systems, networks, documentation, and personnel
• Ensure that all necessary authorizations and approvals are obtained
• Designate a primary point of contact for the engagement
• Notify relevant stakeholders about scheduled testing activities
• Provide accurate information about your environment and infrastructure
• Back up critical systems and data before testing commences

8.3 Deliverables and Reporting

For assessment services:

• Comprehensive reports will be delivered within 5-7 business days after testing completion
• Reports will include executive summaries, detailed findings, risk ratings, and remediation recommendations
• Optional debriefing sessions or presentations can be arranged
• We provide support for clarification of findings for up to 30 days after report delivery

8.4 Service Standards

AstralGuard commits to performing all Services with professional skill, care, and diligence in accordance with industry best practices and recognized standards including OWASP, PTES, OSSTMM, and NIST frameworks.

9. Payment Terms and Billing

9.1 Fees and Pricing

Service fees will be as specified in your service agreement, proposal, or order form. All prices are in United States Dollars (USD) unless otherwise specified.

9.2 Payment Methods

We accept the following payment methods:

• Bank Transfer (Wire Transfer)
• Mobile Money (MTN Uganda, Airtel Money)
• PayPal
• Cryptocurrency (Bitcoin, USDT, Ethereum)
• Credit/Debit Card (for certain services)

9.3 Payment Terms

• Project-Based Services: 50% deposit required before work commences, with the remaining 50% due upon completion and delivery of Deliverables
• Retainer Services: Payment due monthly in advance
• Training Services: Full payment required at least 5 business days before the training session
• All invoices are due within 14 days of issuance unless otherwise agreed in writing

9.4 Late Payments

Late payments may be subject to:

• Interest charges at a rate of 1.5% per month on overdue amounts
• Suspension of ongoing services until payment is received
• Withholding of Deliverables until full payment is made

9.5 Refund Policy

• Refunds are available only for services not yet commenced or delivered
• Once work has begun on a project (testing, analysis, or consulting), no refunds will be issued
• Deposits are non-refundable once the project scope has been confirmed and work has started
• For training cancellations made with less than 7 days notice, no refund will be provided

9.6 Taxes

All fees are exclusive of applicable taxes. You are responsible for all sales, use, value-added, or similar taxes associated with your purchase of Services, except for taxes based on AstralGuard's income.

10. Limitation of Liability

To the maximum extent permitted by applicable law:

10.1 Service Limitations

• AstralGuard's Services are performed within a defined scope and timeframe. No security assessment can guarantee the discovery of all vulnerabilities or threats.
• We are not responsible for any damages, disruptions, or losses that occur outside the agreed scope of work.
• Security testing may involve risks to system stability. While we take precautions to minimize such risks, you acknowledge and accept these inherent risks.

10.2 Disclaimer of Consequential Damages

AstralGuard shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to:

• Loss of profits, revenue, or business opportunities
• Business interruption or downtime
• Data loss or corruption
• Reputational damage
• Third-party claims

10.3 Liability Cap

AstralGuard's total aggregate liability for any claims arising out of or related to these Terms or the Services shall not exceed the total amount paid by you to AstralGuard in the 12 months preceding the claim, or USD $10,000, whichever is less.

10.4 Client Acknowledgment

You acknowledge that:

• You are ultimately responsible for your organization's security posture
• Our Services provide recommendations and findings, but implementation is your responsibility
• You should maintain appropriate backups and disaster recovery capabilities
• No security solution can provide absolute protection against all threats

11. Warranties and Disclaimers

11.1 AstralGuard Warranties

AstralGuard warrants that:

• Services will be performed with professional skill and care
• Our personnel are qualified and experienced in their respective fields
• We will comply with applicable laws and professional standards
• We maintain appropriate insurance coverage for our operations

11.2 Disclaimers

EXCEPT AS EXPRESSLY STATED IN THESE TERMS:

• ALL SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE"
• WE MAKE NO WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT
• WE DO NOT WARRANT THAT OUR SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR COMPLETELY SECURE
• WE DO NOT GUARANTEE SPECIFIC RESULTS OR OUTCOMES FROM OUR SERVICES

11.3 Third-Party Tools and Services

Our Services may utilize third-party tools, software, or services. We make no warranties regarding such third-party components and are not responsible for their performance, availability, or security.

12. Indemnification

You agree to indemnify, defend, and hold harmless AstralGuard, its officers, directors, employees, agents, and affiliates from and against any claims, liabilities, damages, losses, costs, or expenses (including reasonable attorneys' fees) arising out of or related to:

• Your violation of these Terms
• Your misuse of our Services, tools, or methodologies
• Your violation of any laws or regulations
• Your infringement of any intellectual property or other rights of third parties
• Unauthorized testing or security activities conducted using our tools or knowledge
• Any false or misleading information you provide to AstralGuard
• Your failure to obtain necessary authorizations for testing activities

This indemnification obligation will survive the termination of these Terms and your use of our Services.

13. Termination and Suspension

13.1 Termination by Client

You may terminate these Terms or any service agreement by providing 30 days written notice. You will remain responsible for all fees incurred up to the termination date and any work performed.

13.2 Termination by AstralGuard

We reserve the right to terminate or suspend your access to our Services immediately, without prior notice, if:

• You breach any provision of these Terms
• You fail to make timely payments
• Your use of Services poses a security risk to AstralGuard or other clients
• We are required to do so by law or regulatory authority
• We discontinue offering certain Services

13.3 Effect of Termination

Upon termination:

• All outstanding fees become immediately due and payable
• Your access to our platform and Services will be revoked
• You must cease using any AstralGuard materials, tools, or intellectual property
• AstralGuard will return or securely destroy Client Data as mutually agreed
• Provisions relating to confidentiality, intellectual property, indemnification, and liability limitations will survive termination

14. Force Majeure

Neither party shall be liable for any failure to perform its obligations under these Terms if such failure results from circumstances beyond its reasonable control, including but not limited to:

• Acts of God, natural disasters, pandemics, or epidemics
• War, terrorism, civil unrest, or government actions
• Internet or telecommunications failures
• Power outages or infrastructure failures
• Labor disputes or strikes
• Cyberattacks affecting critical infrastructure

In the event of a force majeure situation, the affected party will promptly notify the other party and make reasonable efforts to resume performance as soon as practicable.

15. Dispute Resolution

15.1 Informal Resolution

In the event of any dispute, controversy, or claim arising out of or relating to these Terms, the parties agree to first attempt to resolve the matter through good faith negotiations.

15.2 Mediation

If informal negotiations do not resolve the dispute within 30 days, the parties agree to participate in mediation administered by a mutually agreed mediator in Kampala, Uganda before pursuing litigation.

15.3 Litigation

If mediation is unsuccessful, any legal action shall be brought exclusively in the courts of Uganda, and both parties consent to the jurisdiction of such courts.

15.4 Costs

The prevailing party in any legal proceeding shall be entitled to recover its reasonable attorneys' fees and costs from the non-prevailing party.

16. Governing Law

These Terms and Conditions shall be governed by and construed in accordance with the laws of the Republic of Uganda, without regard to its conflict of law provisions.

Any legal proceedings arising from these Terms shall be subject to the exclusive jurisdiction of the courts located in Kampala, Uganda.

For international clients, where Uganda law may conflict with mandatory consumer protection laws in your jurisdiction, such mandatory provisions shall prevail solely to the extent required by law.

17. Modifications to Terms

AstralGuard reserves the right to modify, update, or revise these Terms at any time at our sole discretion. Changes will be effective upon posting to our website with a revised effective date.

Notification of Changes: We will make reasonable efforts to notify you of material changes through email or prominent notice on our website. However, it is your responsibility to review these Terms periodically.

Acceptance of Modifications: Your continued use of our Services after changes have been posted constitutes your acceptance of the modified Terms. If you do not agree with the modifications, you must discontinue use of our Services.

Active Engagements: For ongoing service agreements, material changes will not apply retroactively without mutual written agreement.

18. General Provisions

18.1 Entire Agreement

These Terms, together with any service-specific agreements and statements of work, constitute the entire agreement between you and AstralGuard regarding the Services and supersede all prior agreements and understandings.

18.2 Severability

If any provision of these Terms is found to be invalid or unenforceable, the remaining provisions shall remain in full force and effect. The invalid provision shall be modified to the minimum extent necessary to make it valid and enforceable.

18.3 Waiver

No waiver of any provision of these Terms shall be deemed a further or continuing waiver of such provision or any other provision. AstralGuard's failure to assert any right or provision under these Terms shall not constitute a waiver of such right or provision.

18.4 Assignment

You may not assign or transfer these Terms or any rights granted hereunder without AstralGuard's prior written consent. AstralGuard may assign these Terms in connection with a merger, acquisition, or sale of all or substantially all of its assets.

18.5 Independent Contractors

The parties are independent contractors. These Terms do not create a partnership, joint venture, employment, or agency relationship between the parties.

18.6 Notices

All notices required under these Terms shall be in writing and sent to the addresses specified in the contact section or as updated by either party in writing.

18.7 Language

These Terms are drafted in English. In the event of any translation, the English version shall prevail in case of discrepancy.