Terms of service

1. Who we are

BuildThenTested sp. z o.o., a Polish limited liability company with its registered office in Poland (we, us). Contact: hello@buildthentested.com.

2. What you are buying

A testing package as described on its page under /packages/ at the time of your order: the scope (categories of the failure catalogue), the deliverables, the turnaround and the price shown there. The page text at the time of order forms part of these terms.

Packages currently offered: Pre-launch check, Security sweep, Ready-to-charge check, Full audit, Test suite build, Monthly testing retainer, Agency white-label, Incident response check.

3. Ordering and payment

You order by email. We confirm scope, access needs and start date within 24 hours on business days and send payment details by email. Work starts when payment has been received and we have the access described in section 4. Prices are in US dollars; taxes are added where the law requires.

4. Access you provide

You confirm that you own the app or have the owner's permission to have it tested. You provide a test account and, for packages that include it, read-only repository access. You agree that we may send requests to the app that an ordinary user or an opportunistic attacker could send, within the scope of the package. We do not run denial-of-service tests and we do not test third-party providers.

5. Turnaround

Turnaround is counted from the moment we have payment and working access. If access is incomplete, the clock pauses until it is restored, and we tell you the same day.

6. Deliverables

Deliverables are listed on the package page. The findings report describes what we observed on the version tested, on the date of testing. Changes after that date are not covered until re-checked. Re-checks cover the findings marked critical in the report, within the window stated on the package page.

7. Money-back term

If the report does not contain at least one actionable finding, or you are not satisfied with its depth, tell us within 7 days of delivery and we refund the package in full.

8. What we do not promise

We test against a defined checklist and report what we find. We do not guarantee that an app is free of vulnerabilities. We are not a certified penetration-testing firm and do not issue compliance attestations. We do not rebuild your app; fixes are yours or your developer's, and we re-check them.

A report is not a certification, an attestation, or legal advice. It is not a promise that the app will pass any third party's review.

9. Confidentiality

Everything you share and everything we find is confidential. We do not publish client names, results or case studies. We keep report copies for twelve months for re-checks and then delete them, unless you ask for earlier deletion. We sign your NDA on request.

10. Liability

Our total liability for a package is limited to the price paid for that package. We are not liable for indirect losses, including lost revenue or data, arising from issues a test did not find or from changes made after the test. Nothing here limits liability that cannot be limited by law.

11. Your obligations

You will not use a report to make claims to third parties that exceed what the report says. You are responsible for applying fixes and for the app's operation.

12. Changes and law

We may update these terms; the version on this page at the time of your order applies to that order. Polish law governs these terms. Consumers keep the rights granted by the law of their country of residence.