Terms of Service

Last updated: August 3, 2026

PLEASE READ THESE TERMS CAREFULLY.

WELCOME. STARIS AI, INC. (“STARIS,” “WE,” “US,” OR “OUR”) OFFERS AN AI-POWERED APPLICATION SECURITY PLATFORM (THE “PLATFORM”). THESE TERMS OF SERVICE (“TERMS”) FORM A BINDING LEGAL AGREEMENT BETWEEN YOU AND STARIS AND GOVERN YOUR ACCESS TO AND USE OF THE PLATFORM, INCLUDING OUR MARKETING WEBSITE, ACCOUNT REGISTRATION AND ONBOARDING PAGES, AND THE STARIS CONSOLE APPLICATION. THESE TERMS COVER THE ENTIRE STARIS PLATFORM: THE MARKETING SITE (SECTION 2), ACCOUNT REGISTRATION AND SELF-SERVE CHECKOUT (SECTIONS 3 AND 4), AND THE CONSOLE AND PLATFORM (SECTIONS 5 THROUGH 13). IF YOU ARE ACCESSING THE PLATFORM ON BEHALF OF A COMPANY OR OTHER LEGAL ENTITY, YOU REPRESENT THAT YOU HAVE AUTHORITY TO BIND THAT ENTITY TO THESE TERMS, AND “YOU” AND “YOUR” REFER TO THAT ENTITY.

WE’VE DESIGNED THESE TERMS TO BE AS CLEAR AND ACCESSIBLE AS POSSIBLE. THAT SAID, CERTAIN SECTIONS CONTAIN LEGAL LANGUAGE REQUIRED TO ENSURE BOTH PARTIES ARE PROPERLY PROTECTED. BY ACCESSING OR USING ANY PART OF THE STARIS PLATFORM, INCLUDING THE MARKETING WEBSITE AT STARIS.TECH, THE ACCOUNT SIGNUP AND PAYMENT PAGES, OR THE STARIS CONSOLE, YOU AGREE TO BE BOUND BY THESE TERMS. WE MAY UPDATE THEM PERIODICALLY, AND CONTINUED USE CONSTITUTES ACCEPTANCE OF ANY MODIFICATIONS.

1. Definitions

The following terms have the meanings given below wherever they are used in these Terms:

1.1 “Affiliate” means any entity that directly or indirectly controls, is controlled by, or is under common control with a party to these Terms. “Control” means the direct or indirect ownership of more than 50% of the voting interests of the applicable entity.

1.2 “Application” means the specific software application, codebase, or system that you identify and submit for a Security Review Cycle, as configured during the Console onboarding flow for that Cycle.

1.3 “Annual Plan” means a Pro or Validated subscription purchased for a twelve-month Term, as described on the Pricing Page, whether acquired through the Self-Serve Checkout or an Order.

1.4 “Authorized Payment Method” means any payment method accepted by Staris, as may be updated from time to time at our sole discretion.

1.5 “Beta Access” means early or experimental access to certain features or functionality of Staris that are under active development. Beta Access may be offered to select Users solely for testing, feedback, or evaluation purposes, at our sole discretion. Features offered under Beta Access are provided “as is” without warranty of any kind, may be discontinued or materially changed at any time without notice, and are expressly excluded from any service level commitments or uptime representations in these Terms. Any Feedback you provide in connection with Beta Access is subject to Section 7.3. Staris’s liability in connection with Beta Access is subject to the limitations set forth in Section 11.

1.6 “Console” means the Staris web-based application security platform accessible at staris.ai and related sub-domains, through which registered Users may upload materials, configure and run security reviews, and access reports and remediation outputs.

1.7 “Credit” means a prepaid unit of Console access that entitles the purchaser to one Security Review Cycle for one Application, subject to the scope limitations and expiration terms set forth in Section 4.1.

1.8 “Customer Data” means all information, code, documentation, credentials, and other materials that you submit, upload, or otherwise make available to us through the Platform.

1.9 “Confidential Information” means all non-public information disclosed by one party (“Disclosing Party”) to the other (“Receiving Party”) that is designated as confidential or that should reasonably be understood to be confidential under the circumstances. Confidential Information includes product roadmaps, business plans, technology and security specifications, financial data, and these Terms. Confidential Information does not include information that (i) is or becomes generally available to the public through no fault of the Receiving Party, (ii) was lawfully known to the Receiving Party before disclosure, (iii) is lawfully received from a third party without restriction, or (iv) is independently developed by the Receiving Party without use of the Disclosing Party’s Confidential Information. Subject to the foregoing, Customer Data is deemed Confidential Information of the User.

1.10 “Feedback” means any suggestions, ideas, improvements, or recommendations provided by you relating to Staris or its functionality.

1.11 “Marketing Site” means the public-facing Staris website at https://staris.tech/, including its sub-pages (such as /pricing, /demo, /blog, and /contact), which is available to all visitors without registration.

1.12 “Order” means a Staris-approved written order form or subscription agreement executed by you and Staris through a sales-assisted process, specifying the applicable tier of Platform access, applicable fees, and Term.

1.13 “Platform” means, collectively, the Marketing Site, the account signup and onboarding pages, the payment processing pages, and the Console.

1.14 “Pricing Page” means the Staris pricing information published at https://staris.tech/pricing, as updated by Staris from time to time.

1.15 “Privacy Policy” means the Staris Privacy Policy, available at https://staris.tech/privacy-policy/, as updated by us from time to time.

1.16 “Report Acceptance” means the in-Console action by which you click “Accept Report” to acknowledge receipt and delivery of a completed Security Review Report.

1.17 “Security Review Cycle” means one complete application security review process for one Application, encompassing ingestion, analysis, report generation, and delivery of findings and remediation outputs.

1.18 “Self-Serve Checkout” means the web-based account registration, payment, and onboarding flow through which Users may purchase a Credit or an Annual Plan without sales-team involvement.

1.19 “Term” means: (a) for Annual Plans, the subscription period specified in the applicable Order or Self-Serve Checkout confirmation, as renewed pursuant to Section 4.2; and (b) for Credit purchases, the period commencing on the date of Credit purchase and ending upon the later of: (i) expiration or redemption of the Credit in accordance with Section 4.1; or (ii) completion of all obligations arising from the applicable Security Review Cycle, including expiration of the Decision Window.

1.20 “True Positive” means a verified security vulnerability identified in a Security Review Cycle that is confirmed as exploitable in your running application, as determined by Staris in its reasonable technical judgment. Staris’s determination will be documented in the Security Review Report, which will identify each True Positive finding together with the evidence supporting its classification as exploitable.

1.21 “User,” “you,” or “your” means the individual or entity accessing or using any part of the Platform.

2. Marketing Site

2.1 Access and Permitted Use. The Marketing Site is available to the general public for informational purposes. You may browse the Marketing Site, read public content, request a demo, and initiate account registration. You agree not to: (a) use automated tools to scrape, crawl, or systematically download content from the Marketing Site; (b) attempt to probe, scan, or test the security of the Marketing Site; (c) submit false or misleading information through any Marketing Site contact or inquiry form; or (d) use the Marketing Site in any manner that could damage, disable, or impair its operation.

2.2 No Warranties for Marketing Site Content. The information on the Marketing Site is provided for general informational purposes only and does not constitute a binding offer or representation. Staris reserves the right to update, correct, or remove Marketing Site content at any time without notice.

3. Account Registration and Eligibility

3.1 Eligibility. To register for an account, you must: (a) be at least eighteen (18) years of age; (b) have the legal capacity to enter into a binding contract; and (c) register using a valid corporate or business email address. Staris reserves the right to decline or cancel registrations from personal email domains or accounts that do not meet Staris’s then-current vetting criteria, in its sole discretion.

3.2 Geographic Restrictions. Self-serve account registration and the Self-Serve Checkout are currently available only to users located in, and registering on behalf of entities organized under the laws of, the United States, Canada, and Mexico. Users from other jurisdictions will be directed to contact the Staris sales team. Staris may modify the list of supported territories at any time.

3.3 Account Creation. To create an account, you must provide a valid email address, your full name, and your country. You agree to provide accurate, current, and complete information and to keep your account information up to date. You are responsible for all activity occurring under your account and for maintaining the confidentiality of your login credentials.

3.4 Email Verification. Account creation requires email verification. Until your email address is verified, certain Console features, including creating a Project, will not be available. Staris may send reminder communications if verification is not completed promptly.

3.5 Acceptance of Terms. By clicking “Create Account” or “I Accept” at account registration or any TOS acceptance screen, you acknowledge that you have read, understood, and agree to be bound by these Terms and our Privacy Policy, as they exist at the time of acceptance. Staris logs the date, time, and version of these Terms accepted at registration for each account. If you do not agree to these Terms, you must not register or use the Platform.

3.6 Submission Authorization Gate. Prior to initiating any upload of Customer Data through the Console, you will be required to complete an in-Console authorization confirmation step in which you affirmatively confirm that: (a) you own or are authorized to submit all materials in the upload; and (b) the submission complies with Sections 5.5 and 5.7 of these Terms. Staris will log the date, time, and account associated with each such confirmation. Your completion of the authorization confirmation is a condition precedent to Staris’s obligation to process the submitted Customer Data. If you cannot truthfully make the confirmation, you must not proceed with the upload.

4. Credits, Self-Serve Checkout, and Payment

4.1 Credits. Each Credit purchased through the Self-Serve Checkout entitles you to one Security Review Cycle for one Application, subject to the following limitations: (a) a scope cap of the lesser of 2,500 files or 8 GB of submitted material; and (b) the scope and configuration parameters you select during the Console onboarding flow. Credits may not be combined, transferred, or applied to multiple Applications or Projects. The current price per Credit is $4,900 USD, subject to applicable taxes; Staris reserves the right to change Credit pricing at any time, but any change will not affect Credits already purchased. Once purchased, you have thirty (30) days from the date of purchase to initiate a Security Review Cycle. If no Security Review Cycle is initiated within that 30-day window, the Credit converts to a twelve-month rolling credit redeemable for one Security Review Cycle at any time within the following eleven (11) calendar months. Credits not redeemed within that extended period expire with no refund or rollover.

4.2 Annual Plans. Staris offers annual subscription plans (“Pro” and “Validated”), with pricing as listed on the Pricing Page. Annual Plans may be purchased through the Self-Serve Checkout or through an Order; the features included in each tier are described on the Pricing Page and incorporated into these Terms by reference. If you purchase a Credit and subsequently enter into an Annual Plan within the Decision Window described in Section 4.6, the Credit fee paid by you will be applied as a credit toward your first annual contract fee. Following the initial Term, your Annual Plan will automatically renew for successive twelve-month terms at the then-current list price, unless either party provides written notice of non-renewal at least thirty (30) days before the end of the then-current Term.

4.3 Payment Processing. All payments are processed through Stripe, Inc. (“Stripe”) as Staris’s third-party payment processor. By submitting payment information through the Platform, you agree to Stripe’s terms of service (available at https://stripe.com/legal) in addition to these Terms. Staris does not store your full credit card number and is not responsible for any errors or failures in Stripe’s payment processing systems. When you provide credit card information during account registration or profile setup, Staris or Stripe may place an authorization hold on your card to verify validity and sufficient funds. An authorization hold is not a charge; it will appear as a pending transaction and will be released if no purchase is completed. The authorization will be converted to an actual charge only when you purchase a Credit or Annual Plan.

4.4 Payment Representations. You represent and warrant that: (i) the payment information you provide is accurate and complete; (ii) you are duly authorized to use the selected payment method; (iii) all charges incurred will be honored by your payment provider; and (iv) you will pay all fees and applicable taxes. You agree to keep your payment information current.

4.5 Chargeback Policy. You agree that initiating a chargeback or payment dispute with your card issuer or financial institution, other than in connection with a valid refund claim made pursuant to Section 4.6, constitutes a material breach of these Terms. If you have a concern about a charge, you must contact Staris at legal@staris.tech before initiating any dispute with your payment provider. Staris reserves the right to suspend or terminate your account upon initiation of an unauthorized chargeback and to pursue all available remedies. Staris may add additional Authorized Payment Methods (such as ACH, PayPal, or Orders) in future releases; the availability of any specific payment method is not guaranteed.

4.6 Refund Policy. A refund of the Credit fee paid by you is available only if: (a) you submit a written refund request to legal@staris.tech within the fifteen (15)-day period commencing on the date Staris sends you a delivery notification by email and in-Console alert confirming that your completed Security Review Report is available (the “Decision Window”), regardless of whether the report was accessible in the Console before that notification; and (b) your completed Security Review Cycle produced zero True Positives. Staris will send the delivery notification by email and in-Console notification when your report is ready. Report Acceptance within the Decision Window does not by itself waive your right to request a refund, but Report Acceptance after a refund request has been submitted will be treated as withdrawal of that request. If the Decision Window expires without a refund request, the Credit fee is non-refundable regardless of subsequent Report Acceptance. The following are not grounds for a refund: (i) dissatisfaction with the number or severity of True Positives found; (ii) scope limitations resulting from the materials you submitted; (iii) your failure to initiate a Security Review Cycle within the 30-day window described in Section 4.1; or (iv) your election to continue using the Platform or upgrade to an Annual Plan.

4.7 Annual Plan Fees. FEES FOR ANNUAL PLANS ARE NON-REFUNDABLE EXCEPT AS SET FORTH IN SECTION 9.5 (EFFECT OF TERMINATION). FOR CREDIT REFUNDS, SEE SECTION 4.6.

4.8 Account Review and Vetting. Staris reserves the right to review all new account registrations before granting full Console access. Until an account is approved, certain Console features, including creating a Project, will not be available. Staris may decline registrations from individuals or entities that, in Staris’s reasonable judgment, present compliance, reputational, or fraud risk. A registration decline under this Section is not a termination for cause and is not subject to the notice or cure provisions of Section 9.2.

5. Use of Platform

5.1 Access. Subject to these Terms, Staris grants you a limited, non-exclusive, non-transferable, and non-sublicensable right to access and use the Console solely in accordance with its intended purpose and your selected tier. You are responsible for ensuring that all access and use of the Console by you or your authorized users complies with these Terms.

5.2 API Access. If you access the Console via an integration or API, your use must comply with any access limitations, authentication requirements, and functional scope set by us. You may not resell, re-expose, or provide programmatic access to the Console to any third party except as we expressly permit in writing.

5.3 Restrictions. You agree not to, and will not permit others to: (a) copy, modify, adapt, or create derivative works based on the Console or its outputs; (b) rent, lease, distribute, sell, sublicense, assign, or otherwise provide unauthorized access to the Console to any third party; (c) use the Console on behalf of, or for the benefit of, any third party except as expressly permitted by Staris; (d) incorporate the Console into any other software, product, or service offering; (e) interfere with or circumvent any security, performance, or usage-limiting features of the Console; (f) reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code, structure, or logic of the Console, except as expressly permitted by applicable law and only upon prior written notice; (g) remove, obscure, or alter any proprietary notices, disclaimers, or branding; (h) use the Console for competitive analysis or to develop a competing product or service; or (i) encourage or assist any third party in engaging in any of the foregoing activities.

5.4 Authorization to Submit Customer Data. By uploading any Customer Data to the Console, you represent and warrant that: (a) you own all rights in and to the Customer Data, or have obtained all necessary authorizations, licenses, and consents from the applicable rights holders to submit the Customer Data to Staris for processing as described in these Terms; (b) the Customer Data does not include any source code, credentials, or other materials that you are prohibited from sharing under any applicable law, regulation, contractual obligation, or employer policy; (c) your submission of the Customer Data does not and will not infringe, misappropriate, or violate the intellectual property rights, privacy rights, or other rights of any third party; and (d) you have the authority to grant the processing license set forth in Section 6.1. These representations and warranties are made at the time of each upload and are a material inducement for Staris to process your Customer Data.

5.5 Prohibited Submissions. You agree not to upload, submit, or otherwise make available through the Console any Customer Data that: (a) you do not own or are not authorized to submit, including source code belonging to a third party without the third party’s express written consent; (b) contains classified, export-controlled, or government-restricted information, including materials subject to the International Traffic in Arms Regulations (ITAR) or Export Administration Regulations (EAR); (c) contains personal data or protected health information of individuals, except to the extent strictly incidental and necessary for the security review; (d) includes malware, malicious code, or any content designed to disrupt, damage, or gain unauthorized access to systems; or (e) is subject to a contractual confidentiality obligation that prohibits its disclosure to a third-party security vendor without prior consent. Staris reserves the right to reject, quarantine, or delete any Customer Data that Staris reasonably believes violates this Section, without liability to you, and to suspend or terminate your account if a violation is confirmed.

5.6 Prohibited Use of Outputs. You agree not to use any Security Review Report, remediation output, vulnerability finding, test artifact, or other output generated by the Console (collectively, “Outputs”) to: (a) develop, enhance, or deploy offensive security tools, exploits, malware, or any software or technique designed to attack, compromise, or gain unauthorized access to systems, networks, or data; (b) conduct or facilitate any unauthorized security testing, penetration testing, or attack against any system, network, or application that you do not own or have express written authorization to test; (c) exploit or disclose identified vulnerabilities in any application or system owned or operated by a third party without that party’s prior written consent; or (d) circumvent, defeat, or probe the security controls of Staris or any third-party system. A violation of this Section is a material breach of these Terms and grounds for immediate termination or suspension under Section 9.3.

5.7 Necessary Rights. YOU REPRESENT AND WARRANT THAT YOU OWN OR HAVE ALL NECESSARY RIGHTS AND AUTHORIZATIONS TO SUBMIT CUSTOMER DATA TO THE PLATFORM FOR SECURITY TESTING, AND THAT YOUR USE OF THE PLATFORM WITH RESPECT TO ANY APPLICATION, SYSTEM, OR CODEBASE COMPLIES WITH ALL APPLICABLE LAWS AND THE TERMS OF ANY AGREEMENT GOVERNING YOUR ACCESS TO THAT APPLICATION OR SYSTEM. SUBMITTING MATERIALS FOR WHICH YOU LACK AUTHORIZATION IS A MATERIAL BREACH OF THESE TERMS.

6. Customer Data

6.1 Ownership and Processing License. You retain all ownership rights in and to your Customer Data. These Terms do not grant Staris any ownership interest in your Customer Data. Subject to these Terms, you grant Staris a limited, non-exclusive, revocable license to access, store, process, and analyze your Customer Data solely to: (a) perform the Security Review Cycle; (b) generate your Security Review Report; and (c) operate and maintain the technical infrastructure of the Platform as strictly necessary to deliver (a) and (b). This license does not permit Staris to use your Customer Data — or any derivative, embedding, output, or abstraction thereof — for any other purpose, including to train, fine-tune, benchmark, evaluate, or otherwise improve any Staris AI model, algorithm, or product, or any third-party model or system.

6.2 Restrictions on Use of Customer Data. Staris will not use your Customer Data for any purpose beyond those expressly licensed in Section 6.1. In particular, and without limiting the foregoing, Staris will not: (a) share your Customer Data with any third party except as strictly necessary to perform the Platform or as required by applicable law; or (b) use your Customer Data — or any derivative, embedding, output, or abstraction thereof to train machine learning models, whether operated by Staris or any third party. The restrictions in this Section 6.2 survive termination or expiration of these Terms.

6.3 Data Retention and Deletion. Staris will retain uploaded Customer Data (including source code, credentials files, and other submitted materials) for thirty (30) days following the earlier of: (a) completion of a Security Review Cycle; or (b) termination or expiration of your account. Upon expiration of that retention period, Staris will permanently delete your Customer Data, including all copies, Security Review Reports to the extent they contain Customer Data verbatim, derived outputs, system logs containing Customer Data, and backup copies, from Staris’s systems and those of any subprocessors. Staris will provide you with written confirmation of deletion within ten (10) business days of the deletion date, either by email or in-Console notification. You may request earlier deletion by contacting legal@staris.tech; Staris will complete such deletion within ten (10) business days of receiving your request and provide written confirmation. Staris is not responsible for lost or unrecoverable Customer Data resulting from your failure to maintain your own copies.

6.4 Security. Staris uses commercially reasonable technical and organizational measures to protect Customer Data from unauthorized access, disclosure, or loss. These measures include encrypted storage, access controls, and secure transmission protocols. However, no system is completely secure, and Staris does not guarantee the absolute security of Customer Data.

6.5 Usage Data; No Model Training on Customer Data. Staris may collect and analyze data relating to your access and use of the Console, including performance metrics, activity logs, and interaction patterns that do not contain or derive from your Customer Data. Staris may use such usage data to monitor system performance, improve product functionality, and generate aggregated insights, provided that such data does not identify you or any individual and is used in accordance with our Privacy Policy. Notwithstanding anything to the contrary in these Terms, Staris will not use your Customer Data, including source code, credentials, documentation, or any derivative, embedding, or abstraction thereof, to train machine learning models, whether operated by Staris or any third party.

7. Intellectual Property

7.1 Staris IP. These Terms grant you the right to access and use the Platform, but do not convey any license or ownership interest in any underlying software or technology. Staris and its licensors retain all rights, title, and interest in and to the Platform, including all related intellectual property, technologies, interfaces, documentation, and content.

7.2 Your IP in Outputs. Security Review Reports and remediation outputs generated by the Console are derived from your Customer Data. You retain ownership of the portions of such outputs that constitute direct derivatives of your Customer Data. Staris retains ownership of the methodologies, tools, algorithms, and formatting used to produce those outputs.

7.3 Feedback. By submitting any Feedback to Staris, you assign to Staris all rights, title, and interest in and to that Feedback. Where assignment is not permitted by applicable law, you grant Staris a non-exclusive, perpetual, irrevocable, worldwide, royalty-free, sublicensable, and transferable license to use, reproduce, modify, distribute, and incorporate your Feedback into the Platform or other products without compensation or attribution. Staris is under no obligation to use or act on any Feedback.

7.4 Publicity Rights. Staris may use your company name, logo, and trademarks to identify you as a Staris customer in customer lists, marketing materials, and press releases, unless you opt out by providing written notice to legal@staris.tech. Staris will remove such references within a commercially reasonable period following receipt of an opt-out notice. This Section does not permit Staris to publish detailed case studies or quotes attributable to you without your prior written consent.

8. Confidentiality

8.1 Obligations. Each Receiving Party agrees to: (i) protect the Disclosing Party’s Confidential Information using the same degree of care it uses to protect its own confidential information of a similar nature, but in no event less than reasonable care; (ii) use the Confidential Information solely as permitted under these Terms; (iii) not disclose the Confidential Information to any third party except as expressly authorized herein; and (iv) restrict access to the Confidential Information to employees, contractors, and agents who need access for purposes consistent with these Terms and who are bound by written confidentiality obligations no less protective than those in this Section.

8.2 Compelled Disclosure. If either party is required by law, regulation, subpoena, or other legal process to disclose Confidential Information, it will: (i) provide prompt written notice to the other party, unless legally prohibited, to allow an opportunity to seek a protective order; (ii) cooperate reasonably in opposing disclosure at the other party’s expense; and (iii) if disclosure is ultimately required, disclose only the minimum amount necessary. In no event will a party disclose Confidential Information to any non-governmental party unless required by a valid and enforceable court order.

9. Term and Termination

9.1 Term. For Credit purchases, these Terms remain in effect from account creation through the end of the applicable Decision Window and any outstanding obligations. For Annual Plans, the Term is specified in the applicable Order or Self-Serve Checkout confirmation and renews as described in Section 4.2.

9.2 Termination for Cause. Either party may terminate these Terms for cause with thirty (30) days’ written notice if the other party materially breaches these Terms and fails to cure within that period; provided, however, that the foregoing notice and cure period does not apply to: (i) termination or suspension by Staris under Section 9.3, which is governed exclusively by that Section; or (ii) termination or suspension arising from an unauthorized chargeback under Section 4.5. Staris may also terminate with thirty (30) days’ notice if your actions, in Staris’s reasonable judgment, pose reputational, legal, or operational risks to Staris or its users. For the avoidance of doubt, Section 9.3 governs all of Staris’s termination and suspension rights and takes precedence over this Section 9.2 with respect to any trigger covered therein.

9.3 Termination and Suspension by Staris. Staris may terminate these Terms or suspend or restrict your access to all or any part of the Platform, in whole or in part, at any time, immediately and without prior notice, opportunity to cure, or liability of any kind, in Staris’s sole and absolute discretion, including without limitation upon: (i) any violation of, or reasonable grounds to believe a violation of, Section 5.5 (Prohibited Submissions), Section 5.6 (Prohibited Use of Outputs), or Section 5.7 (Necessary Rights); (ii) any use or suspected use of the Platform for any unlawful purpose or in any manner that poses any security, legal, reputational, commercial, or operational risk to Staris or any third party, as determined by Staris in its sole discretion; (iii) any material breach of these Terms; (iv) your insolvency, bankruptcy, receivership, liquidation, dissolution, or general assignment for the benefit of creditors; (v) any order or request by a government authority or court; or (vi) any other reason or no reason whatsoever. Any suspension may be partial or complete and temporary or indefinite, and shall not entitle you to any refund, credit, or reduction in fees.

9.4 Suspension for Non-Payment. If any payment due under these Terms remains unpaid after written notice from Staris specifying the overdue amount, Staris may suspend your Console access ten (10) days after such notice; provided that the foregoing notice requirement does not apply to suspension or termination arising from an unauthorized chargeback under Section 4.5, which may be effected immediately pursuant to that Section and Section 9.3. Suspension under this Section is a provisional remedy and does not constitute or require a termination for cause under Section 9.2; the 30-day cure period in Section 9.2 does not apply to a suspension for non-payment. Staris will not suspend access if you are in good faith disputing the charges and actively cooperating to resolve the dispute. Staris’s right to terminate for cause under Section 9.2 remains available independently of any suspension under this Section.

9.5 Effect of Termination. Upon termination or expiration: (a) you must cease all use of the Platform; (b) Staris will delete your Customer Data in accordance with Section 6.3; (c) if you terminate for cause, Staris will refund any prepaid, unused Annual Plan fees for the remainder of your then-current Term; (d) if Staris terminates for cause, all outstanding fees through the end of the Term become immediately due. Except as expressly provided, all fees are non-refundable. For Credit purchases, refunds remain subject solely to the conditions in Section 4.6.

10. Indemnification

You agree to indemnify, defend, and hold harmless Staris, its Affiliates, and each of their respective officers, directors, employees, contractors, agents, and representatives from and against any and all claims, demands, liabilities, damages, losses, costs, and expenses (including reasonable attorneys’ fees and any regulatory fines or penalties) arising out of or related to: (i) your breach of these Terms; (ii) your use of the Platform in violation of any applicable law, regulation, or third-party right; or (iii) any Customer Data you provide that infringes or misappropriates the rights of a third party.

11. Limitation of Liability

11.1 Cap on Liability. TO THE FULLEST EXTENT PERMITTED BY LAW, IN NO EVENT SHALL STARIS, ITS AFFILIATES, OR ANY OF THEIR RESPECTIVE OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, CONTRACTORS, OR REPRESENTATIVES BE LIABLE FOR ANY AMOUNT EXCEEDING THE GREATER OF: (A) THE TOTAL FEES PAID BY YOU TO STARIS IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM; OR (B) THE CREDIT FEE PAID BY YOU, IF THE CLAIM ARISES FROM A SINGLE CREDIT PURCHASE.

11.2 Exclusion of Consequential Damages. IN NO EVENT SHALL STARIS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOST PROFITS, LOST BUSINESS OPPORTUNITIES, LOSS OF GOODWILL, OR LOSS OF DATA, WHETHER BASED IN CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY, OR OTHERWISE, EVEN IF STARIS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES OR THE REMEDY OTHERWISE FAILS OF ITS ESSENTIAL PURPOSE. SOME JURISDICTIONS DO NOT ALLOW CERTAIN LIMITATIONS, SO THE ABOVE MAY NOT APPLY TO YOU IN FULL.

11.3 Essential Basis. YOU ACKNOWLEDGE AND AGREE THAT THESE LIMITATIONS ARE AN ESSENTIAL PART OF THE BASIS OF THE BARGAIN BETWEEN YOU AND STARIS AND THAT STARIS WOULD NOT PROVIDE THE PLATFORM TO YOU WITHOUT YOUR AGREEMENT TO THESE LIMITATIONS.

12. No Warranties; Risk Disclosures

12.1 Disclaimer. THE PLATFORM IS PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS WITHOUT WARRANTIES OF ANY KIND, EXPRESS, IMPLIED, OR STATUTORY. TO THE MAXIMUM EXTENT PERMITTED BY LAW, STARIS SPECIFICALLY DISCLAIMS ALL IMPLIED WARRANTIES, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, TITLE, OR QUIET ENJOYMENT. STARIS DOES NOT WARRANT THAT THE PLATFORM WILL BE SECURE, UNINTERRUPTED, TIMELY, ERROR-FREE, OR MEET YOUR EXPECTATIONS.

12.2 Security Review Disclaimers. WITHOUT LIMITING THE FOREGOING: (A) STARIS DOES NOT WARRANT THAT ANY SECURITY REVIEW CYCLE WILL IDENTIFY ALL VULNERABILITIES IN YOUR APPLICATION. THE PLATFORM OPERATES ON THE MATERIALS YOU SUBMIT AND CANNOT DETECT VULNERABILITIES NOT REASONABLY DISCOVERABLE FROM THOSE MATERIALS; (B) THE PLATFORM DOES NOT GUARANTEE THE ABSENCE OF FALSE NEGATIVES (UNDETECTED VULNERABILITIES) OR FALSE POSITIVES (FINDINGS THAT ARE NOT GENUINE VULNERABILITIES). YOU ARE SOLELY RESPONSIBLE FOR INDEPENDENTLY VERIFYING FINDINGS AND FOR ALL REMEDIATION DECISIONS; (C) STARIS MAKES NO WARRANTY THAT APPLYING ANY REMEDIATION OUTPUT PROVIDED THROUGH THE PLATFORM WILL FULLY REMEDIATE ANY VULNERABILITY OR THAT YOUR APPLICATION WILL BE FREE FROM SECURITY RISKS FOLLOWING REMEDIATION; AND (D) STARIS SHALL NOT BE LIABLE FOR ANY LOSS OR DAMAGE RESULTING FROM: (I) MALICIOUS SOFTWARE, VIRUSES, OR SYSTEM COMPROMISE ARISING FROM YOUR ACCESS TO THE PLATFORM OR THIRD-PARTY LINKS; (II) BUGS, GLITCHES, OR FUNCTIONAL INACCURACIES IN THE PLATFORM; OR (III) SUSPENSION, TERMINATION, OR RESTRICTION OF YOUR CONSOLE ACCESS.

13. Dispute Resolution

13.1 Informal Resolution. Before initiating any formal proceeding, the party asserting a dispute must provide the other party with written notice describing the nature and basis of the claim and the specific relief sought. The parties agree to negotiate in good faith for a period of thirty (30) days following such notice (the “Informal Resolution Period”) before either party may initiate arbitration or, where arbitration does not apply, litigation. This Section does not prevent either party from seeking emergency injunctive or other equitable relief from a court of competent jurisdiction where the party seeking relief demonstrates that: (a) it will suffer irreparable harm absent immediate relief; and (b) the delay required to complete the Informal Resolution Period would cause material prejudice to the moving party’s ability to obtain meaningful relief. Seeking such emergency relief does not waive either party’s obligation to complete the Informal Resolution Period with respect to any remaining claims.

13.2 Binding Arbitration. EXCEPT AS PROVIDED IN SECTION 13.4, ANY DISPUTE, CLAIM, OR CONTROVERSY ARISING OUT OF OR RELATING TO THESE TERMS, THE PLATFORM, OR THE BREACH, TERMINATION, ENFORCEMENT, INTERPRETATION, OR VALIDITY OF THESE TERMS, INCLUDING THE DETERMINATION OF THE SCOPE OR APPLICABILITY OF THIS ARBITRATION AGREEMENT, SHALL BE DETERMINED BY BINDING ARBITRATION ADMINISTERED BY THE AMERICAN ARBITRATION ASSOCIATION (“AAA”) UNDER ITS COMMERCIAL ARBITRATION RULES IN EFFECT AT THE TIME THE ARBITRATION IS INITIATED. THE ARBITRATION SHALL BE CONDUCTED BY A SINGLE ARBITRATOR. THE SEAT AND PLACE OF ARBITRATION SHALL BE SEATTLE, WASHINGTON. THE LANGUAGE OF ARBITRATION SHALL BE ENGLISH. THE ARBITRATOR’S AWARD SHALL BE FINAL AND BINDING AND MAY BE ENTERED AS A JUDGMENT IN ANY COURT OF COMPETENT JURISDICTION. THE FEDERAL ARBITRATION ACT (9 U.S.C. §§ 1 ET SEQ.) GOVERNS THE INTERPRETATION AND ENFORCEMENT OF THIS SECTION.

13.3 Class Action Waiver. YOU AND STARIS EACH AGREE THAT ANY PROCEEDING TO RESOLVE A DISPUTE, WHETHER IN ARBITRATION OR OTHERWISE, WILL BE CONDUCTED ONLY ON AN INDIVIDUAL BASIS AND NOT IN A CLASS, CONSOLIDATED, REPRESENTATIVE, OR PRIVATE ATTORNEY GENERAL ACTION. THE ARBITRATOR MAY NOT CONSOLIDATE MORE THAN ONE PARTY’S CLAIMS AND MAY NOT OTHERWISE PRESIDE OVER ANY FORM OF REPRESENTATIVE OR CLASS PROCEEDING. IF THIS SPECIFIC PROVISION IS FOUND UNENFORCEABLE WITH RESPECT TO A PARTICULAR CLAIM, THAT CLAIM SHALL BE SEVERED AND PROCEED IN COURT PURSUANT TO SECTION 14.1, WITH ALL REMAINING CLAIMS PROCEEDING IN ARBITRATION.

13.4 Exceptions to Arbitration. Either party may bring an individual action in small claims court for disputes within that court’s jurisdiction. Either party may also seek preliminary injunctive or other emergency equitable relief from a court of competent jurisdiction to preserve the status quo pending arbitration, without waiving its right to arbitrate the merits.

13.5 Arbitration Costs. AAA filing fees and arbitrator compensation will be allocated in accordance with the AAA Commercial Arbitration Rules. Each party will bear its own attorneys’ fees and costs in connection with arbitration, unless the arbitrator determines that a claim or defense was frivolous or brought in bad faith, in which case the arbitrator may award fees and costs to the prevailing party.

14. Miscellaneous

14.1 Governing Law; Venue. These Terms are governed by and construed in accordance with the laws of the State of Washington, without regard to its conflict-of-laws principles. Any legal action or proceeding not subject to arbitration under Section 13 shall be brought exclusively in the state or federal courts located in Seattle, Washington, and each party irrevocably consents to the jurisdiction of such courts and waives any objection to venue therein, including any claim of forum non conveniens.

14.2 Compliance with Laws; Export Controls. Each party will comply with all applicable U.S. federal, state, and international laws in its operation and use of the Platform. You agree not to export, re-export, or otherwise transfer access to the Platform to any country, entity, or individual prohibited by applicable export control laws or sanctions programs. Staris reserves the right to disclose information as necessary to comply with legal obligations.

14.3 Updates to These Terms. Staris may modify these Terms at any time by posting the updated version to the Platform and updating the “Last updated” date. For material changes, Staris will provide at least thirty (30) days’ advance notice via email or in-Console notification to registered Users. Your continued use of the Platform following the effective date of any update constitutes your acceptance of the updated Terms. If you do not agree to the updated Terms, you must stop using the Platform and, for Annual Plan subscribers, provide notice of non-renewal pursuant to Section 4.2.

14.4 Entire Agreement. These Terms, together with our Privacy Policy and any applicable Order or Self-Serve Checkout confirmation, constitute the entire agreement between you and Staris regarding the Platform and supersede all prior and contemporaneous proposals, agreements, or understandings — oral, written, or electronic. In the event of a conflict between an Order and these Terms, the Order controls. Staris expressly objects to and rejects any additional or conflicting terms you propose.

14.5 Severability. If any provision of these Terms is found invalid or unenforceable, that provision will be replaced by a valid and enforceable provision that most closely reflects the intent of the original, and the remainder of these Terms will remain in full force.

14.6 Notices. For legal notices to Staris, contact legal@staris.tech or use any contact method listed on the Marketing Site. Staris may provide notices to you via email, in-Console messaging, or through contact information associated with your account. You are responsible for keeping your contact details current.

14.7 Assignment. You may not assign or transfer these Terms without Staris’s prior written consent, except in connection with a merger, acquisition, or sale of all or substantially all of your assets, provided the assignee is not a competitor of Staris. Staris may assign these Terms without restriction in connection with a merger, reorganization, change of control, or asset sale.

14.8 Force Majeure. Except for payment obligations, neither party will be responsible for failure or delay of performance if caused by an act of war, hostility, or sabotage; act of God; electrical, internet, or telecommunications outage not caused by the obligated party; government restrictions; pandemic; or other event outside the reasonable control of the obligated party. Each party will use commercially reasonable efforts to mitigate the effect of any force majeure event.

14.9 No Third-Party Beneficiaries. Nothing in these Terms confers any rights, remedies, or benefits on any third party unless expressly stated.

14.10 Contract for Services. These Terms are for the provision of services and not a sale of goods. The Uniform Commercial Code, the Uniform Computer Information Transactions Act, and the United Nations Convention on Contracts for the International Sale of Goods do not apply to these Terms.

14.11 Authority. Each party represents that it has full authority to enter into these Terms and to bind itself and, where applicable, its Affiliates to its terms.

14.12 Relationship of the Parties. No joint venture, partnership, employment, or agency relationship exists between you and Staris.

14.13 Survival. Any provisions that by their nature should survive termination or expiration — including payment obligations, disclaimers, limitations of liability, indemnification, confidentiality, and governing law — will survive.