Terms of Service
These Terms of Service ("Terms") govern access to and use of ConfigTrace (the "Service"), operated by Rohan Shah ("ConfigTrace," "we," "us," or "our"). By creating an account or using the Service, you agree to these Terms on behalf of yourself and the organization you represent.
1. The Service
ConfigTrace is a configuration security and drift-monitoring service. It connects, on a read-only basis, to third-party cloud, SaaS, identity, and developer-infrastructure providers you authorize, and presents configuration changes, security posture, and identity/access risk on a timeline, with alerting and remediation-guidance features. The Service does not modify settings in a connected provider except where you explicitly initiate an admin-gated remediation action (such as a draft pull request) that requires your separate authorization.
2. Account Eligibility and Responsibilities
- You must be at least 18 years old and able to form a binding contract to create an account. If you are creating an account on behalf of a company or other legal entity, you represent that you have the authority to bind that entity to these Terms.
- You are responsible for the accuracy of the information you provide, for maintaining the confidentiality of your login credentials, and for all activity that occurs under your account.
- You must notify us promptly at support@configtrace.org if you become aware of unauthorized access to your account.
- Workspace Owners and Admins are responsible for managing member access within their workspace, including timely removal of members who should no longer have access.
- You are solely responsible for the credentials and permissions you grant ConfigTrace to connect to your third-party providers, and for ensuring you have the right to grant such access.
3. Subscriptions, Billing, Renewals, Cancellation, and Taxes
ConfigTrace offers Free, Pro, and Team subscription plans, described on our Pricing page. Paid subscriptions are billed in advance on a recurring monthly basis and automatically renew for successive periods until cancelled.
Paid subscriptions are processed by Paddle.com Market Limited ("Paddle"), acting as our authorized payment provider and merchant of record. Paddle is the merchant of record for these transactions, handles payment collection, invoicing, and any applicable sales tax, VAT, or similar transaction taxes, and its own terms and privacy policy apply to the checkout process in addition to these Terms.
You may cancel your subscription at any time from Settings → Workspace → Billing, or by contacting support@configtrace.org. Cancellation stops future renewals; unless otherwise stated at checkout or required by law, access continues through the end of the then-current paid billing period. See our Refund Policy for how refund requests are handled.
If a workspace exceeds the plan and add-on limits described on the Pricing page (including additional billable workspace members on the Team plan), we may bill the applicable overage charges or require an upgrade to continue using the affected feature.
4. Acceptable Use
You agree not to, and not to permit others to:
- Use the Service to access, monitor, or connect provider accounts or infrastructure you are not authorized to access;
- Reverse-engineer, decompile, or attempt to extract the source code of the Service, except as permitted by law;
- Probe, scan, or test the vulnerability of the Service, or interfere with its normal operation or that of other users;
- Use the Service to store or transmit unlawful, infringing, or malicious content;
- Resell, sublicense, or provide the Service to third parties on a standalone basis without our prior written consent;
- Use the Service in a way that violates the terms of service of any connected third-party provider.
5. Third-Party Integrations
The Service integrates with third-party providers (for example, AWS, Google Cloud, Microsoft Azure and Entra ID, Kubernetes, Okta, GitHub, GitLab, Cloudflare, Vercel, Firebase, Supabase, Stripe, Shopify, Datadog, PagerDuty, and others) that you choose to connect. These integrations are governed by the applicable provider's own terms and privacy policy, which you are responsible for reviewing and complying with. We are not responsible for the availability, accuracy, or conduct of third-party providers, or for changes they make to their APIs that affect the Service.
6. Suspension and Termination
We may suspend or terminate your access to the Service, in whole or in part, if we reasonably believe you have violated these Terms, if required by law, to prevent harm to the Service or other users, or for non-payment of applicable fees. Where practical, we will provide notice before or promptly after suspension. You may terminate your account at any time by contacting support@configtrace.org. Upon termination, your right to use the Service ends, and we may delete your workspace data in accordance with our Privacy Policy.
7. Intellectual Property
ConfigTrace and its licensors retain all right, title, and interest in and to the Service, including its software, design, and branding. These Terms do not grant you any rights to our trademarks or branding. As between you and us, you retain ownership of the data you connect to or store in the Service ("Customer Data"). You grant us a limited license to access, process, and display Customer Data solely to provide and improve the Service for you.
8. Confidentiality and Security
Each party agrees to protect the other's confidential information with the same degree of care it uses for its own similarly sensitive information, and not to disclose it except to personnel or subprocessors who need it to perform under these Terms, or as required by law. We maintain security measures designed to protect Customer Data, including encrypting stored connector credentials at rest and transmitting data over encrypted connections, as described in our Privacy Policy. You are responsible for maintaining the confidentiality of your own account credentials and for the security configuration of the third-party providers you connect.
9. Disclaimers
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR THAT IT WILL DETECT OR PREVENT EVERY CONFIGURATION RISK OR SECURITY ISSUE IN YOUR CONNECTED PROVIDERS. YOU REMAIN RESPONSIBLE FOR YOUR OWN SECURITY DECISIONS AND FOR REMEDIATING ISSUES IN YOUR OWN INFRASTRUCTURE.
10. Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL, ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. EACH PARTY'S TOTAL LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS WILL NOT EXCEED THE AMOUNT YOU PAID US FOR THE SERVICE IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM. NOTHING IN THESE TERMS LIMITS LIABILITY THAT CANNOT BE LIMITED UNDER APPLICABLE LAW.
11. Indemnification
You agree to indemnify and hold us harmless from any third-party claims, damages, and expenses (including reasonable legal fees) arising from your breach of these Terms, your misuse of the Service, or your violation of any law or third-party right, including any provider's terms of service, in connection with your use of the Service.
12. Governing Law
These Terms are governed by the mandatory applicable law of the jurisdiction in which ConfigTrace's operator is established, together with any mandatory consumer-protection or other law that applies to you regardless of choice of law. This section is under legal review and may be updated to designate a specific governing law and venue.
13. Changes to These Terms
We may update these Terms from time to time. If we make material changes, we will provide reasonable notice, such as by email or an in-product notice, before the changes take effect. Continued use of the Service after changes take effect constitutes acceptance of the updated Terms.
14. Contact
Questions about these Terms can be sent to support@configtrace.org.
See also: Privacy Policy · Refund Policy · Pricing