Skip to content

Terms of Service

Effective date: · Last updated:

Important arbitration notice: please read section 17 carefully. Except for the limited exceptions it describes, it requires you and us to resolve disputes by binding individual arbitration instead of in court, waives the right to bring or join a class action or other representative proceeding, and, to the maximum extent permitted by law, waives the right to a jury trial. You may opt out of arbitration within 30 days after you first accept these Terms, as explained in section 17.

1. Agreement and who we are

These Terms of Service (“Terms”) are an agreement between you and Techtonic Innovations LLC, a Virginia limited liability company based in Reston, Virginia, USA (“Techtonic”, “we”, “us”), which operates NexGen QA. They govern your use of the Services (section 2). By using the Services, creating an account or clicking to accept, you agree to these Terms and acknowledge our Privacy Policy.

If you use the Services for an organization, you agree on its behalf and confirm you have authority to bind it; “you” then means that organization. You must be at least 18 years old. If you and we have signed an order form or master agreement for the Platform, it controls over these Terms where the two conflict.

2. The Services

“Services” means, together:

  • the website at qa-automation.com (the “Website”);
  • the free Website Audit tool at /tools/website-audit (the “Audit Tool”);
  • the NexGen QA platform at app.qa-automation.com, including its AI-assisted features and the Bring-Your-Own-Key (BYOK) GitHub Actions runner (the “Platform”); and
  • related demos, documentation and support.

We may change, add or remove features. If we remove a material feature of a paid plan during your subscription term, we will tell you in advance.

3. Accounts

Keep your credentials confidential, enable multi-factor authentication where offered, and tell us promptly at contact@qa-automation.com about any unauthorized use. You are responsible for activity under your account and for the users you invite. Information you give us must be accurate.

4. Acceptable use

You must not, and must not help anyone else to:

  • test, scan, audit or load-test any system, application or website that you do not own or are not authorized in writing to test;
  • use the Services to attack, disrupt, overload or gain unauthorized access to any system, or to find vulnerabilities to exploit them;
  • bypass or probe authentication, rate limits, usage limits or other security controls of the Services;
  • reverse engineer the Services except where the law expressly permits it despite this restriction;
  • upload malware, or content that is unlawful, infringing or that you have no right to process;
  • use AI features to generate unlawful, deceptive or harmful content;
  • share account credentials or API keys with unauthorized people, or resell the Services without our written consent; or
  • use the Services in violation of U.S. export-control or sanctions laws, or from or for a sanctioned country or person.

5. Free Website Audit tool

  • Only audit websites you own or are authorized to test. By submitting a URL you confirm that you own the site or have the owner’s permission for it to be checked.
  • Do not use the Audit Tool as part of an attack, to scan third-party websites at scale, to map or enumerate other people’s infrastructure, or to circumvent its rate limit (for example by rotating IP addresses or automating requests).
  • Results are automated and informational. They are generated by software from a limited number of requests at one point in time, may be incomplete or wrong, are not a security assessment, penetration test, legal or compliance opinion, and are not reviewed by a person. Verify any change before relying on it.
  • The Audit Tool is free and provided “as is” with no warranty and no service commitment. We may limit, block or suspend access (including by IP address or network) where we suspect abuse, and may change or withdraw the tool at any time.
  • How we handle audit requests is described in section 2.3 of our Privacy Policy.

6. AI features and automated output

The Platform uses automated analysis and third-party AI models to generate tests, findings, code suggestions, repairs, summaries, compliance mappings and other output (“Output”). Output is produced probabilistically, may be inaccurate, incomplete or similar to output produced for others, and is not reviewed by us. You are responsible for reviewing Output and for decisions you make with it, including before deploying code or relying on a passing test. Output is not legal, security, accessibility or compliance advice, and a passing check does not mean a system is free of defects or vulnerabilities or complies with any law or standard.

Features that map results to frameworks such as NIST 800-53, FedRAMP, FISMA, SOC 2, ISO 27001, HIPAA, PCI-DSS, GDPR or WCAG help you gather evidence; they do not certify compliance. Descriptions of the Services as “aligned” with, “ready” for or “designed for” a framework describe their design and controls. They are not a statement that we hold a FedRAMP authorization, a FedRAMP Ready designation, a DoD Impact Level authorization, or any third-party certification or attestation unless that is stated in a signed agreement.

7. BYOK runner and third-party services

When your organization uses the BYOK runner, tests and AI calls run in your own GitHub Actions workflows using AI-provider keys you store as GitHub secrets; the Platform stores the names of those secrets, not their values. You are responsible for your GitHub and AI-provider accounts, for their terms and charges, and for the data you send to them. Third-party services you connect (such as GitHub, AI providers, identity providers and Stripe) are governed by their own terms, and we are not responsible for them.

8. Your content and our property

You keep all rights in the content you submit to the Platform and in your Output (“Customer Content”). You grant us a limited license to host, process and transmit Customer Content only to provide, secure and support the Services and as described in our Privacy Policy. You are responsible for having the rights and permissions needed for Customer Content and for any systems you point the Services at.

We and our licensors own the Services, including the software, models, designs and documentation. We may use aggregated or de-identified information about use of the Services to operate and improve them. If you send us feedback, we may use it without obligation to you.

9. Subscriptions, automatic renewal and cancellation

  • Paid plans are billed in advance, monthly or annually as selected at checkout, through Stripe. Usage beyond your plan’s included allowance (such as additional AI credits) is billed at the rates shown on our Pricing page or in your order form. Prices exclude taxes, which you are responsible for.
  • Your subscription renews automatically for successive periods of the same length at the then-current price, and you authorize us (through Stripe) to charge your payment method at each renewal, until you cancel. We will give you at least 30 days’ notice of a price increase, which applies from your next renewal.
  • Cancelling: you can cancel at any time from the subscription portal (“Manage Your Subscription” on the Pricing page) or by emailing contact@qa-automation.com. Cancellation takes effect at the end of the current billing period, and you keep access until then. Where the law requires, we will send renewal reminders.
  • If we offer a free plan or trial, the terms shown when you sign up apply, and we may change or end free plans. If a trial converts to a paid plan, you will be told before you are charged.
  • If a payment fails, we may suspend paid features after notice until it is resolved.

10. Refunds

All sales are final. Fees are non-refundable and we do not give refunds or credits for partial periods, unused credits or downgrades, except where required by law or expressly stated in a signed order form. If we terminate the Services for convenience under section 12, we will refund prepaid fees for the unused period.

11. Beta features and service levels

Features labeled beta, preview, early access or similar are provided for evaluation, may change or be withdrawn at any time, may be less reliable, and are excluded from any service-level commitment. Uptime and performance figures described on the Website are targets, not guarantees. A service-level agreement with remedies applies only if it is set out in a signed order form or SLA for your plan.

12. Suspension and termination

You may stop using the Services at any time. We may suspend or terminate your access immediately if you breach these Terms, fail to pay, create a security or legal risk, or if required by law; and we may terminate a paid plan for convenience on 30 days’ notice. After a paid account ends you may export your Customer Content for 30 days; we then delete or de-identify it within the periods in our Privacy Policy. Sections that by their nature should survive (including 5, 6, 8, 10 and 13 to 19) survive termination.

13. Disclaimers

To the maximum extent permitted by law, the Services, the Audit Tool, beta features and all Output are provided “as is” and “as available”, with all faults and without warranties of any kind, whether express, implied or statutory, including warranties of merchantability, fitness for a particular purpose, title, non-infringement and accuracy, and any warranties arising from course of dealing or usage of trade. We do not warrant that the Services will be uninterrupted, secure or error-free, or that they will detect every defect, vulnerability or compliance gap.

14. Limitation of liability

To the maximum extent permitted by law: (a) neither party will be liable for any indirect, incidental, special, consequential, exemplary or punitive damages, or for lost profits, revenue, data or goodwill, even if advised of their possibility; and (b) our total liability arising out of or relating to the Services or these Terms, however arising, will not exceed the greater of the fees you paid us for the Services in the 12 months before the event giving rise to the claim, or US$100.

These limits apply to all theories of liability and even if a remedy fails of its essential purpose. They do not limit liability that cannot be limited under applicable law, such as liability for fraud or, where applicable, for death or personal injury caused by negligence, or your payment obligations and indemnity obligations.

15. Indemnity

To the extent permitted by law, you will defend, indemnify and hold harmless Techtonic and its members, officers, employees and agents from third-party claims, and related losses, damages, fines and reasonable legal fees, arising from: your Customer Content; your use of the Services in breach of these Terms or the law; testing, scanning or auditing any system or website without authorization; or your use of third-party services connected to the Services.

16. Government customers

The Platform is commercial computer software and documentation provided to U.S. government users under these Terms, consistent with FAR 12.212 and DFARS 227.7202. If you are a government entity and a provision of these Terms (such as indemnity, automatic renewal, governing law or arbitration) is prohibited by law that applies to you, that provision applies only to the extent permitted, and the remaining Terms continue to apply.

17. Disputes: governing law, arbitration, class-action and jury waiver

Governing law. These Terms are governed by the laws of the Commonwealth of Virginia, without regard to its conflict-of-laws rules. The Federal Arbitration Act governs this section 17.

Informal resolution first. Before starting arbitration or a court case, the party with a dispute must send the other a written notice describing it and the relief sought (to us at contact@qa-automation.com), and both parties will try in good faith to resolve it for 60 days after the notice is received.

Binding individual arbitration. Any dispute, claim or controversy arising out of or relating to these Terms or the Services that is not resolved informally will be resolved by binding arbitration administered by the American Arbitration Association (“AAA”), before a single arbitrator, under the AAA Commercial Arbitration Rules if you use the Services for a business or organization, or under the AAA Consumer Arbitration Rules if you are an individual using them for personal purposes. Hearings will take place in Fairfax County, Virginia, or by video conference; for consumers, in the county where you live or by video conference. The arbitrator may award the same individual relief a court could, and judgment on the award may be entered in any court with jurisdiction. The arbitrator, not a court, decides questions of arbitrability, except as stated in the class-action waiver below.

Class-action and jury waiver. You and we may bring claims only in an individual capacity, not as a plaintiff or class member in any class, collective, consolidated or representative proceeding, and the arbitrator may not consolidate claims or award relief to anyone other than the individual parties. To the maximum extent permitted by law, you and we each waive the right to a jury trial. If this class-action waiver is found unenforceable for a claim, that claim (and only that claim) must be decided by a court under the venue clause below, after any individual claims are arbitrated.

Mass arbitration. If 25 or more similar demands for arbitration are filed against us by the same or coordinated counsel, they will be administered in batches of up to 50 demands under the AAA’s mass-arbitration procedures (including its Mass Arbitration Supplementary Rules, where they apply). Demands not in the current batch are held in abeyance, and limitations periods are tolled for those demands while they are held. You and we agree to cooperate to resolve batches efficiently.

Exceptions. Either party may bring an individual claim in small-claims court if it qualifies, and either party may ask a court for an injunction to stop infringement or misuse of its intellectual property or unauthorized use of the Services.

30-day opt-out. You may opt out of arbitration by emailing contact@qa-automation.com within 30 days after you first accept these Terms, with the subject “Arbitration opt-out” and your name, the email address associated with your use of the Services, and a clear statement that you opt out. Opting out does not affect any other part of these Terms.

Venue. Any claim not subject to arbitration (including after an opt-out) must be brought exclusively in the state or federal courts located in or serving Fairfax County, Virginia, and both parties consent to their personal jurisdiction and venue there.

Changes. If we change this section 17, the change will not apply to a dispute of which either party had notice before the change took effect.

18. Changes to these Terms

We may update these Terms. We will post the new version here with a new effective date and, for material changes, give account holders at least 30 days’ notice by email or in the Platform before they take effect. Continuing to use the Services after the effective date means you accept the updated Terms; if you do not agree, stop using the Services and cancel your subscription.

19. General

These Terms (with any signed order form and the documents they reference) are the entire agreement about their subject matter. If a provision is unenforceable, it will be enforced to the maximum extent permitted and the rest remain in effect. Failure to enforce a provision is not a waiver. You may not assign these Terms without our written consent; we may assign them to an affiliate or a successor in a merger, acquisition or sale of assets. Neither party is liable for delays caused by events beyond its reasonable control. The parties are independent contractors. We may send notices to the email address on your account; you may send notices to contact@qa-automation.com.

20. Contact

Techtonic Innovations LLC
Reston, Virginia, USA
Email: contact@qa-automation.com