Terms and Conditions

These Terms and Conditions ("Terms", "Agreement") constitute a legally binding contract between AstroLinx Technologies ("AstroLinx", "Company", "we", "us", or "our") and the entity or individual ("Client", "you", or "your") accessing our website, contracting our custom software engineering, AI deployment, or cybersecurity services.

By accessing our digital interfaces, executing a Statement of Work (SOW), or commissioning technical security testing, you explicitly confirm that you have read, understood, and agree to be bound by these Terms in their entirety. If you are entering into this Agreement on behalf of a corporation or other legal entity, you represent and warrant that you possess the full legal authority to bind said entity.

AstroLinx provides high-tier digital engineering and security services across three core pillars:

• Custom Software & Web Architecture: Full-stack web application development, high-concurrency microservices, cloud infrastructure provisioning, API ecosystems, and security-first frontend/backend engineering.
• Artificial Intelligence Systems Integration: Custom LLM pipeline integration, RAG architecture engineering, automated reasoning workflows, AI agent guardrailing, and prompt injection defense.
• Cybersecurity & Defensive Engineering: Offensive penetration testing (web, mobile, network, cloud API), automated vulnerability assessments, zero-trust code reviews, attack surface mapping, and incident mitigation advisory.

Security assessments and penetration tests involve simulated cyber-attacks to detect and remediate vulnerabilities. To ensure complete legal safety and operational stability:

• Rules of Engagement (RoE): Prior to launching offensive tests, both parties must execute an RoE defining in-scope targets, out-of-scope assets, testing schedules, emergency escalation contacts, and prohibited attack vectors (e.g., permanent destructive payloads or uncoordinated physical intrusion).
• Non-Destructive Standard: AstroLinx exercises rigorous technical care to prevent service disruption, data loss, or server crashes. In the event an anomalous instability occurs, testing is halted immediately and Client technical leads are notified.

To ensure project milestones and security deliverables are fulfilled without delay, Client agrees to:

• Access Provisioning: Provide timely, secure access to relevant source code repositories, staging environments, API credentials, and architecture documentation.
• Infrastructure Backups: Maintain verified, recent backups of all production databases and infrastructure prior to commencing major software deployments or deep security testing.
• Designated Technical Lead: Appoint a technical point of contact authorized to review deliverables, grant operational approvals, and coordinate emergency remediations.

Given the sensitive nature of cybersecurity engagements and bespoke software architectures, both parties agree to maintain strict confidentiality:

• Non-Disclosure: Each party agrees to protect the other's Confidential Information using at least the same degree of care it uses for its own sensitive data, and in no event less than a reasonable degree of care.
• Vulnerability Findings: Security reports, proof-of-concept exploits, and discovered vulnerabilities are treated as top-secret Confidential Information. AstroLinx will not disclose or publish vulnerability details without explicit written Client authorization.
• Responsible Coordinated Disclosure: If a previously unknown zero-day flaw is uncovered in a public third-party dependency during testing, AstroLinx will adhere to a responsible 90-day vendor notification standard to ensure ecosystem safety without attributing Client systems.

• Milestone Invoicing: Software engineering and penetration testing projects are invoiced based on agreed milestones or time-and-materials schedules articulated in the SOW.
• Retainers & Deposits: Engagements typically require a non-refundable commencement deposit before dedicated engineering or red-team resources are allocated.
• Payment Terms: Invoices are payable within fourteen (14) business days of issuance unless otherwise stipulated in the SOW. Overdue balances may incur a late surcharge of 1.5% per month.
• Taxes: All fees are exclusive of applicable value-added, sales, withholding, or services taxes, which shall be the responsibility of the Client.

AstroLinx warrants that all engineering and security services will be executed in a professional, workmanlike manner consistent with prevailing industry standards (OWASP, NIST, ISO 27001).

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:

• Exclusion of Consequential Damages: IN NO EVENT SHALL EITHER PARTY BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE, EXEMPLARY, OR CONSEQUENTIAL DAMAGES, INCLUDING LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS INTERRUPTION, ARISING OUT OF OR IN CONNECTION WITH THIS AGREEMENT.
• Total Aggregate Cap: EACH PARTY'S TOTAL AGGREGATE LIABILITY UNDER OR ARISING FROM ANY STATEMENT OF WORK SHALL BE STRICTLY LIMITED TO THE TOTAL FEES ACTUALLY PAID BY CLIENT TO ASTROLINX UNDER THAT SPECIFIC STATEMENT OF WORK IN THE SIX (6) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO LIABILITY.

By AstroLinx: AstroLinx agrees to defend, indemnify, and hold harmless Client against third-party claims alleging that custom software authored by AstroLinx infringes a valid patent, copyright, or trade secret.

By Client: Client agrees to defend, indemnify, and hold harmless AstroLinx and its personnel against any claims, losses, or legal sanctions arising from: (a) Client's breach of authorization warranties regarding target systems during security testing; or (b) unlawful materials provided by Client for integration into deliverables.

• Termination for Cause: Either party may terminate an engagement immediately upon written notice if the other party materially breaches this Agreement and fails to cure such breach within thirty (30) days of written notice.
• Immediate Suspension: AstroLinx reserves the right to suspend security assessments immediately if in-scope systems exhibit unexpected systemic collapse or if third-party cloud hosts revoke authorization.
• Post-Termination Handover: Upon termination, Client shall pay for all work completed up to the effective termination date. AstroLinx will promptly deliver all completed source artifacts and execute data purge protocols.

Software deliverables and cryptographic technologies supplied by AstroLinx may be subject to international export control laws, cyber munitions restrictions, and economic sanctions. Client agrees not to export, re-export, transfer, or utilize deliverables in violation of applicable international sanction regimes.

This Agreement shall be governed by and construed in accordance with the laws of the Islamic Republic of Pakistan, without regard to its conflict of law principles.

In the event of any controversy or claim arising out of or relating to this Agreement, the parties shall first attempt in good faith to resolve the dispute via senior executive negotiation within thirty (30) days. If unresolved, disputes shall be submitted to binding arbitration in Lahore, Pakistan under the Arbitration Act, conducted in the English language.

• Severability: If any provision of these Terms is found to be unenforceable or invalid, that provision will be modified to reflect the parties' intention, and all other provisions will remain in full force.
• Force Majeure: Neither party shall be liable for delays or failures resulting from events beyond reasonable control (acts of God, widespread telecommunications failure, geopolitical embargoes, or national cyber infrastructure outages).
• Entire Agreement: These Terms, together with any active SOWs, RoEs, and DPAs, represent the entire agreement between the parties concerning the subject matter hereof.

All formal legal notices, contract escalations, or Safe Harbor communications must be directed in writing to: