Public offer

1. Provider and contact details

Services under the trade name piperlink (the piperlink service) at https://piperlink.com/ are supplied by Ukrainian sole proprietor Andrii Vasylovych Vdovyn, taxpayer registration number (RNOKPP) 3503802498, not registered for VAT (the Provider). Registered and operating address: 1 Franka Street, Honcharivka village, Chortkiv district, Ternopil region, 48332, Ukraine.

Orders, complaints and questions: [email protected], +380680380812. This version applies from 15 October 2026.

2. What we provide

The Provider performs bug testing and vulnerability testing of web and mobile apps, including apps built with Claude Code, Codex, Lovable, Cursor and other AI tools. Desktop apps are not tested.

Standard packages have the fixed scope and price described below. The Customer chooses a package and platforms and provides a link to the app. Our team writes the test plan within one business day of payment; no separate agreement on scope or price is needed. The price follows from the package, the number of platforms and the chosen options and does not change after payment.

3. Placing an order

An order is placed on the website: choose a package and platforms, add the link to the app and an optional wish, sign in with Google or with a code sent by e-mail, confirm the terms and continue to the WayForPay payment page. No charge occurs before the payment is confirmed. A created order can be paid within 24 hours; after that it must be placed again at the current prices.

By pressing “Pay”, the Customer asks for work to start immediately after payment and confirms that once work has begun the payment is not refunded (except under the guarantee and where the law requires a refund). If the order includes vulnerability testing, the Customer also separately confirms their rights to the app and permission for testing (section 6). These confirmations are stored with the order.

The Customer accepts this offer by confirming the terms and completing payment. As soon as the payment is made, an order confirmation is sent to the account e-mail: the order number, package, price and links to the documents; it can be saved. Anyone ordering for a company or an app owner must have authority to do so. The Customer may be an adult with full legal capacity, or a legal entity or sole proprietor acting through an authorised representative.

4. Packages and prices

Bug testing — $299 per platform: the whole app as users see it (every app screen or site page and every button, up to 25 screens; pages built from one template count as one screen; for larger apps the 25 most important ones, the rest listed in the test plan), in-depth testing of five main scenarios and of all user roles (up to three). Result: a report with a verdict and reproducible bugs (priority, environment, steps to reproduce, expected and actual result, screenshot, a prompt for an AI tool) in the project chat and/or as a PDF. Report within five business days of the test plan; retest of fixes within 14 days of the report.

Bugs + vulnerabilities — $499 per platform (separately $299 + $349): bug testing plus vulnerability testing, that is, security testing with the owner’s permission — non-destructive checks that imitate an attacker’s actions: database access rules, keys and secrets in the code, admin functions and APIs without login, other users’ files, forged payments, limited password guessing on test accounts. Vulnerability testing is not a full penetration test and is performed only on the Customer’s app, with their permission (section 6). Deadlines are the same as for bug testing.

Vulnerability testing on its own — $349 per app, in the same scope, without bug testing; additional platforms are included in the price. Report within five business days of the test plan; retest within 14 days.

Update testing — $149 per platform for an app that has had bug testing: what is new as described by the Customer and a regression of the main scenarios. Report within two business days of the test plan; retest within 14 days.

Testing subscription — $399 per 30 days for one app and one platform: up to four tests (if the app has not been tested yet, the first is bug testing in the scope of the Bug testing package), a report for each update test within two business days, retests included, one initial diagnosis of an outage in the live app per period (symptoms, available logs, the likely cause, a fix prompt; we start within 4 business hours of the request, Monday to Friday, 10:00–18:00 UTC; there is no 24/7 on-call, no code repair and no guaranteed time to fix) and a period summary. Unused tests do not carry over; this does not limit refund rights under the law and the refund policy.

Options: each additional platform — $149 ($99 for update testing; $149 per 30 days for the subscription; included for vulnerability testing on its own); rush report for Bug testing and Bugs + vulnerabilities — $99 (report within 1–2 business days of the test plan); 25 more screens (up to 50) for Bug testing, Bugs + vulnerabilities and the subscription — $149; vulnerability testing added to a subscription — $249 for the current paid period. After paying for Bug testing and before testing starts, vulnerability testing can be added for $200 (together, the price of Bugs + vulnerabilities). Options and platforms can also be added after payment, before testing starts, at the same prices. Before payment we show the price of each part, the total if bought separately, the bundle saving and the amount due.

5. Payment, deadlines and delivery

Prices are set in US dollars. Payment is by card on the secure WayForPay page. Your card is charged in Ukrainian hryvnias (UAH) at the exchange rate at the time of payment; the payment page shows the amount before you confirm, and your bank converts it and may add a fee. Your card issuer may apply its own rate or fee. Card details never reach the Provider. There are no hidden charges. VAT is not charged.

Packages and options are paid once. The first subscription period is paid once, without automatic charges. Five days before the period ends the Customer chooses in the project chat: pay for another 30 days once, or set up a monthly payment. A monthly payment is set up only with the Customer’s separate explicit consent: WayForPay charges the subscription price every month on the date shown before payment until the Customer cancels (the technical term of the payment schedule is 5 years). The monthly payment can be cancelled at any time with one button in the project details or in the WayForPay account; the paid period runs to its end and no further charges are made. We send a reminder at least three days before each charge.

The test plan, the report and all correspondence are delivered in the project chat on the website; the Customer is notified by e-mail of team messages they have not yet seen in the chat. Business days are Monday to Friday.

Deadlines run from the moment access to the app is provided, but not earlier than payment. If the app is unavailable or the access needed has not been provided, the deadline pauses until it is; we let you know in the chat. If a rush report is not delivered on time, we refund the price of the Rush report option.

The service is considered provided when the report is published in the project chat. If the Customer sends no reasoned objections within five business days, the report is considered accepted; this does not affect retests, the guarantee or statutory rights. An invoice and a certificate of services rendered are provided electronically on request.

6. Permission to test, access, confidentiality and ownership

The Customer warrants that they own the app or hold the owner’s written authority, and grants the Provider permission for non-destructive testing within the test plan. Third-party systems (hosting, databases, payment and other services the app uses) are not tested. The Provider does not start vulnerability testing until ownership is confirmed and the testing rules are agreed. The Customer compensates the Provider for losses and costs caused by this assurance being untrue.

The rules for vulnerability testing are agreed in the test plan before it starts: the environment (preferably a test one), test accounts, no real payments and no mass e-mails, a limited number of password attempts on test accounts. Before testing, the Customer backs up their data, provides a test environment and test accounts where possible, and does not provide keys to live payment systems.

Test logins are provided only in the encrypted test-access field of the project, with the minimum necessary permissions; do not send passwords, API keys or your customers’ personal data in chat messages or in the order wish. We delete supplied test access after testing is completed, no later than 14 days afterwards; the Customer revokes the permissions granted.

Ownership of the app, code and data remains with the respective owners. The Customer receives a perpetual non-exclusive right to use the paid report, including sharing it with their developers, contractors, investors and auditors. The Provider keeps findings and supplied materials confidential, uses them only to fulfil the order and does not publish them as a case study without separate permission; it may use anonymised statistics without identifying the Customer. We report a critical vulnerability that exposes users’ data in the chat at once, without waiting for the report. Contact and order data are handled as described in the privacy policy.

7. Scope and responsibility

Testing covers the app and version provided by the Customer and the scenarios described in the test plan. A report is not a security certification or a guarantee that there are no defects, of uninterrupted operation, or of App Store or Google Play approval. A full penetration test, feature development, code changes and 24/7 response are not included. Prompts for AI tools are auxiliary: we do not guarantee that a fix made with them will be complete and recommend checking the changes.

The Customer decides when to release and how to implement fixes. This allocation of responsibilities does not remove the Provider’s responsibility to perform the agreed service properly or limit mandatory consumer rights.

The parties are not liable for delays caused by force majeure (including hostilities and prolonged power or communication outages). The Provider reports such circumstances in the project chat; deadlines are extended for their duration. If the delay exceeds 10 business days, the Customer may cancel the order and receive a refund for the unperformed portion.

8. Cancellation, guarantee, complaints and updates

Cancellation, refunds and the guarantee “No bug found — 100% back” follow the published refund policy. The guarantee applies to bug testing, Bugs + vulnerabilities, update testing and the first test of a subscription period. Contact [email protected] with the order number and a description of the issue. We respond within two business days, without shortening statutory remedies or deadlines.

Ukrainian law applies without excluding mandatory consumer protections applicable to the particular order. We first seek to resolve concerns through direct contact, but your right to contact a competent authority or court remains. Updated terms do not change an already paid order without separate agreement.

The documents are published in Ukrainian and English; in case of any discrepancy, the Ukrainian version prevails.