Master Services Terms

1. Who these terms are for

These Master Services Terms (the Terms) apply when a company, or a person acting for a business (the Customer), buys piperlink services: the subscription “Your QA team without hiring”, pilots and one-off testing. They supplement the Public Offer at https://piperlink.com/public-offer; for business customers, where the two differ, these Terms prevail. The Data Processing Agreement and, for vulnerability testing, the Security Testing Authorization form part of these Terms.

The Provider is the Ukrainian sole proprietor named at the end of this page, trading as piperlink. The person who accepts these Terms confirms that they may bind the Customer. The Customer accepts them by placing an order at checkout or by accepting the Order Form in its project; no paper signature is needed.

2. Order Form and scope

Each subscription or order has an Order Form in the Customer’s project: the app and platforms, the tier or package, the number of release tests a month, report and answer deadlines, included work, the price, the billing period and the start date. Order of precedence: the Order Form, then the Data Processing Agreement for personal data, then these Terms, then the Public Offer.

A release test covers one platform: a regression of up to 10 main scenarios and what is new or changed in the release — up to 5 screens or one feature. A bigger release takes another test for each further 5 screens or feature or 10 regression scenarios; the same release on two platforms takes two tests. Unused release tests carry over to the next 30 days, up to one month’s norm. Business days and hours are Monday to Friday, 9:00–19:00 Kyiv time.

The Customer gives access to a test environment or test accounts, keeps logins only in the encrypted field of its project and answers questions in the project chat. All communication is written, in the project chat.

3. Deadlines and the deadline guarantee

Reports are due as stated in the Order Form. For the subscription, a release-test report is due by the end of the next business day after the release is sent; on the Team tier, the same day for a release sent by 12:00 Kyiv time. If a release-test report is late, that test does not count against the month’s limit; this is the Customer’s sole remedy for a late report. A critical bug or vulnerability is reported in the chat the same business day it is reproduced.

4. Fees, billing and taxes

Prices are in US dollars and fixed for the paid period. The subscription is paid monthly in advance from the first month by card through the checkout; with the Customer’s separate consent the monthly payment is charged automatically until it is cancelled. An invoice and an acceptance act are available on request. Fees exclude taxes the Customer must pay in its own country; the Provider is not registered for VAT.

One more release test above the month’s limit is paid in the project chat at the price shown there. Nothing else is charged without the Customer confirming the amount.

5. Term, cancellation and refunds

The subscription runs month to month. The Customer cancels the monthly payment with one button in the project details; the paid month runs to its end and nothing more is charged. Until the team takes a new subscription into work, the Customer may cancel it with a 100% refund. Other refunds follow the Refund Policy; one-off packages keep the guarantee described there.

Either party may end these Terms if the other materially breaches them and does not cure the breach within 15 days of written notice. When the services end, the Provider deletes the Customer’s test access within 14 days and keeps only the records described in the Data Processing Agreement.

6. Acceptance of reports

A report is accepted if the Customer raises no reasoned objection in the project chat within 5 business days. The Provider answers objections in writing and, where they are justified, corrects the report free of charge.

7. Confidentiality

Each party keeps the other’s confidential information secret, uses it only to provide or receive the services and shares it only with people who need it and are bound by the same duty. The Customer’s apps, code, findings, reports and access details are the Customer’s confidential information. The duty lasts for three years after these Terms end and, for trade secrets, for as long as they remain secret. It does not cover information that is public, was already known lawfully, is developed independently or must be disclosed by law (with notice where allowed).

8. Ownership of results

Once paid for, the reports, test plans, test cases, regression suite and automated test code made for the Customer belong to the Customer and can be exported at any time. The Provider keeps its tools, templates and know-how and grants the Customer a free licence to use any of them included in the results. The Provider may use anonymised statistics that identify neither the Customer nor its app, and never trains AI models on the Customer’s data.

9. People, subcontractors and AI tools

The Provider may use employees and contractors who are bound by confidentiality and the same data protection duties, and it remains responsible for them. AI tools are used only under business terms that exclude training on the Customer’s data; they never receive passwords or keys, and a person reproduces every AI finding before it reaches the Customer.

For 12 months after these Terms end, neither party solicits the other’s staff who worked on the services, except through general job advertisements.

10. Vulnerability testing

Vulnerability testing and deep security testing start only after the Customer accepts the Security Testing Authorization at https://piperlink.com/security-testing-authorization for the systems in scope and confirms that it may authorise testing of them, including under the rules of any hosting or cloud provider. The Customer is responsible for the consequences of authorising testing of systems it may not authorise. Testing is non-destructive and stays within the agreed scope.

11. Warranties and liability

The Provider performs the services with professional care. Testing reduces risk but cannot prove that bugs or vulnerabilities are absent; the letter for security questionnaires is not a certificate, and no auditor’s acceptance of it is promised. Apart from what these Terms state, the services are provided without other warranties.

Each party’s total liability under these Terms is limited to the fees the Customer paid in the 12 months before the event giving rise to the claim. Neither party is liable for lost profits, lost revenue or indirect damages. These limits do not apply to the Customer’s duty to pay, to fraud or wilful misconduct, or where the law does not allow them.

12. Data protection

The Data Processing Agreement at https://piperlink.com/data-processing-agreement governs the personal data the Provider processes for the Customer. The Security page at https://piperlink.com/security describes the Provider’s measures.

13. Changes, law and notices

The Provider may publish a new edition of these Terms with its date. Material changes are e-mailed to the Customer at least 30 days in advance and apply from the next billing month; a paid month continues under the edition it was bought under.

These Terms are governed by the law of Ukraine. The parties first try to settle any dispute by written negotiation for 30 days, and then before the competent court of Ukraine. Notices are given in the project chat or by e-mail — to support@piperlink.com and to the Customer’s account e-mail. This edition applies from 24 October 2026.