Terms of service

Who you are contracting with

Musterproof is operated by Tigran Avakov, Mirzo-Ulugbek 45A, 100007 Tashkent, Uzbekistan. Payments are collected by Paddle.com Market Ltd, who act as the merchant of record and appear as the seller on your receipt and card statement. Questions about the service, your subscription or an invoice go to support@musterproof.com.

What the service does

Musterproof keeps a register of your products and their software bills of materials, watches public vulnerability sources for components you ship, runs the reporting workflow against the deadlines set by Regulation (EU) 2024/2847, records what you did in a tamper-evident journal, and generates the documents the regulation expects you to hold.

The service does not file anything with a regulator on your behalf. It assembles the package and shows you the deadline; submitting it to the relevant authority remains yours to do, and the legal obligation to report stays with you as the manufacturer. Any deadline, timer or reminder we show you is our reading of the regulation applied to the dates you entered, and it is not a substitute for your own legal advice. This material is generated from your own product data and public sources. It is not legal advice. Have a qualified adviser review your compliance documentation before you rely on it.

Your account

You sign in with a link sent to your email address, so keeping that mailbox secure is what keeps your account secure. You are responsible for what happens under your account and for the accuracy of what you enter. A scope classification or a market date you got wrong will produce a deadline that is wrong in the same direction.

You may not use the service to store material you have no right to, to attack anyone (including through the vulnerability data we show you), or to resell access under a different name unless you are on the Partner plan, which exists for exactly that.

Plans, billing and price changes

Plans are billed monthly in advance, in US dollars, and renew automatically until cancelled. There is no annual commitment and no minimum term. The plan you are on sets how many products and seats you may use; going over the limit does not create a charge, it stops you adding more until you move up.

We may change prices, and if we do, the new price applies to your next renewal and never retroactively. We will tell you by email at least 30 days beforehand, and cancelling before that renewal costs you nothing.

Cancelling

Email support@musterproof.com and we will cancel the same working day. Cancelling stops the next renewal; it does not delete anything. Your products, uploads and journal stay where they are, and the account drops to the trial plan, so coming back a month later means finding your work intact rather than starting over.

There is no cancel button inside the product. Being able to press one would require us to hold a Paddle API key that can act on your subscription, and we would rather not hold a key that powerful for a button an email replaces. If that changes, this paragraph changes with it.

Refunds

30 days, no conditions attached. The full policy, including how long the money takes to come back, is on the refund policy page.

Your data, and ours

What you upload stays yours. We store it to run the service for you, we encrypt it before it reaches storage, and we do not sell it, mine it for other customers or use it to train anything. A dependency map of your product is an attack plan against you, so we treat it as one. The detail is on the privacy page.

The software, the interface and the document templates stay ours. Documents the service generates for you (your disclosure policy, your security.txt, your technical file) are yours to publish, modify and keep after you leave, with no licence back to us.

Availability and liability

We do not promise an uptime figure, because a one-person company promising four nines is promising something it cannot enforce. What we do commit to is that vulnerability alerts are the last thing to degrade and that outages are visible rather than quiet.

The service is provided as it is. To the extent the law allows, our total liability for any claim is limited to what you paid us in the twelve months before it arose, and we are not liable for indirect or consequential loss, including a fine imposed on you by a regulator. Nothing here limits liability that cannot be limited by law.

Ending the agreement

You may stop using the service at any time. We may suspend or close an account that is being used to break these terms or the law, and where the situation allows it we will tell you first and give you a chance to export. If we ever shut the service down, you get at least 90 days' notice, a full export of your journal in a form that verifies without us, and a refund of anything you paid for time you will not get.

Law, and changes to these terms

These terms are governed by the laws of Uzbekistan, where the seller is established. This does not take away any right you have as a consumer under the law of the country you live in. Your payment is also subject to the buyer terms of Paddle.com Market Ltd, who process it.

When we change these terms we change the date at the top of this page, and if the change affects your rights in a way that matters we email you before it takes effect rather than letting you discover it.