Terms of Service

These Terms of Service ("Terms") are an agreement between you and Fire Innovations and its affiliated operating entities (collectively, "Fire Innovations," "we," "us," or "our"). By accessing our website or engaging us to design, build, or support software, you agree to these Terms. If you are accepting on behalf of a company, you represent that you have authority to bind that company.

Client engagements are governed by a master services agreement, statement of work, data processing agreement, or similar written contract (each, a "Client Agreement"). If these Terms conflict with a Client Agreement, the Client Agreement controls.

Fire Innovations is a software development firm. We design, build, deploy, and maintain custom software for clients, including blockchain applications, smart contracts, stablecoin and payment infrastructure, and tokenized asset platforms. The scope, deliverables, timelines, fees, and acceptance criteria for each engagement are defined in the applicable Client Agreement.

Unless expressly stated in a Client Agreement, Fire Innovations does not operate the software we build, does not offer financial, investment, custody, or money transmission services to the public, and is not a party to transactions conducted by end users of client applications.

Our website is provided for general informational purposes. You agree not to:

• Attempt to gain unauthorized access to our website, systems, or networks, or to probe, scan, or test their vulnerability outside of our responsible disclosure process.
• Interfere with or disrupt the website, including through denial-of-service attacks, malware, or automated scraping that imposes an unreasonable load.
• Use the website in violation of any applicable law, including export control and sanctions laws.
• Misrepresent your affiliation with Fire Innovations or use our name, logo, or trademarks without written permission.

Clients that deploy and operate software we build are responsible for how that software is used in production, including:

• Determining what personal information is collected and providing appropriate privacy notices and consents to their users.
• Obtaining and maintaining any licenses, registrations, or regulatory approvals required to operate their business, including for KYC, AML, sanctions, securities, and payments compliance.
• Configuring user access, managing credentials and keys they control, and promptly revoking access for departed personnel.
• Reviewing and accepting deliverables, and approving production releases in accordance with agreed change management procedures.
• Providing accurate requirements, timely feedback, and access to systems or information reasonably needed to perform the work.

We maintain a documented information security program designed to align with the AICPA Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy. In performing our services, we commit to:

• Follow a secure software development lifecycle, including threat modeling, peer code review, automated vulnerability scanning, and documented change approvals.
• Restrict access to client systems, source code, and data to authorized personnel on a least-privilege basis, protected by multi-factor authentication and reviewed at least quarterly.
• Encrypt client data in transit using TLS 1.2 or higher and sensitive data at rest using AES-256 or equivalent.
• Segregate development, testing, and production environments, and not use production personal information for testing without client authorization.
• Conduct background checks on personnel with access to sensitive systems and provide security and privacy training at onboarding and at least annually.
• Assess the security of subprocessors and vendors before engagement and periodically thereafter.
• Maintain and periodically test business continuity, backup, and disaster recovery procedures for any systems we host.

Additional or more specific security obligations, including service level commitments, may be set out in a Client Agreement.

Fire Innovations does not directly collect personal information from website visitors or from end users of the software we build. Where we access or process personal information on a client's behalf, we act only as a processor or service provider, process it only on the client's documented instructions, and are bound by the data protection terms in the applicable Client Agreement. Our handling of information is further described in our Privacy Policy, available at /privacy-policy.

Each party will protect the other's non-public business, technical, and financial information with at least the same degree of care it uses for its own confidential information, and no less than reasonable care. Confidential information will be used only to perform or receive the services and disclosed only to personnel and contractors who need to know it and are bound by written confidentiality obligations. On completion of an engagement, or on request, we will return or securely destroy client confidential information unless retention is required by law.

If we become aware of a security incident that affects client data in our possession or systems we host or maintain, we will notify the affected client without undue delay and within the timeframe required by applicable law or the Client Agreement. We will provide available information about the nature and scope of the incident, take reasonable steps to contain and remediate it, and cooperate with the client's investigation and any required notifications.

If you believe you have found a security vulnerability in our website or in software we build, please report it to security@fireinnovations.com with enough detail for us to reproduce it. Please do not access or modify data that does not belong to you, degrade service availability, or publicly disclose the issue before we have had a reasonable opportunity to address it. We will not pursue legal action against good-faith research conducted in accordance with these guidelines.

Ownership of and license rights to software, source code, and other deliverables created for a client are defined in the applicable Client Agreement. Fire Innovations retains ownership of its pre-existing tools, frameworks, libraries, know-how, and general-purpose components, and grants clients the license rights needed to use deliverables as described in the Client Agreement. Open-source components remain subject to their respective licenses.

All content on our website, including text, graphics, and logos, is owned by or licensed to Fire Innovations and may not be reproduced without our written permission.

Software that interacts with public blockchains involves inherent risks, including irreversible transactions, smart contract vulnerabilities, network congestion or forks, changes in protocol rules, loss of private keys, and evolving regulation. Although we apply secure development practices and recommend independent audits, no smart contract or blockchain integration can be guaranteed free of defects. Clients are responsible for evaluating these risks before deploying software to production.

Except as expressly provided in a Client Agreement, our website and services are provided "as is" and "as available." To the fullest extent permitted by law, we disclaim all implied warranties, including warranties of merchantability, fitness for a particular purpose, title, and non-infringement. Nothing on our website constitutes legal, financial, tax, or investment advice.

To the fullest extent permitted by law, Fire Innovations will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, data, or digital assets, arising from use of our website or services. Except as otherwise provided in a Client Agreement, our total liability for any claim relating to our services will not exceed the fees paid to us for the services giving rise to the claim during the twelve months before the claim arose.

You agree to indemnify and hold harmless Fire Innovations and its personnel from claims, damages, and expenses, including reasonable attorneys' fees, arising from your violation of these Terms, your misuse of our website, or, for clients, the operation of software in production in a manner not authorized by the Client Agreement or in violation of applicable law.

We may suspend or restrict access to our website at any time for security reasons or violation of these Terms. Termination of client engagements is governed by the Client Agreement. On termination, we will revoke our access to client systems, return or securely delete client data and confidential information, and provide reasonable transition assistance as agreed.

These Terms are governed by the laws of the State of Delaware, without regard to its conflict of laws principles, unless a Client Agreement specifies otherwise. The parties will first attempt to resolve any dispute through good-faith negotiation before pursuing formal proceedings.

We may update these Terms from time to time. We will post the revised Terms with a new effective date and, for material changes affecting clients, provide notice as required by the Client Agreement. Continued use of our website after changes take effect constitutes acceptance of the revised Terms.

For questions about these Terms, contact legal@fireinnovations.com. To report a security concern, contact security@fireinnovations.com.