Vulnotes – Terms of Sale (CGV)

1. Identity of the Provider

The Service is provided by:

Hippolyte QUERE, acting as a sole trader (micro-entrepreneur / auto-entrepreneur) under French law, operating under the trade name Vulnotes ("Vulnotes", "we", "us").

Legal information, including registered address and SIREN, is available in the Legal Notice on the website https://vulnotes.com (the "Website").

2. Scope and Hierarchy of Documents

These Terms of Sale apply to all paid subscriptions to the Service, including:

• the Hosted SaaS subscription, and
• the Self-Hosted subscription, granting access to a self-hosted Docker image and related license.

The following hierarchy applies in case of conflict:

1. Any specific order form or written agreement accepted by Vulnotes and you,
2. These Terms of Sale,
3. The Terms of Use (CGU),
4. Any other policy or document referred to above.

3. Offers and Plans

3.1 Types of Subscriptions

Vulnotes offers:

• a standard subscription plan (the "Standard Plan"), and
• custom enterprise plans ("Enterprise Plans") for customers with more than 30 users or specific needs.

Both the Hosted Service and the Self-Hosted Version are offered on a subscription basis (no perpetual license), subject to recurring fees.

3.2 Target Customers

The Service is primarily designed for professional customers (business users, companies, organizations), but may also be used by individual users, including consumers, where permitted by law. Some specific provisions of these Terms of Sale apply only to consumers within the meaning of applicable EU law.

3.3 No Free Trial

Unless expressly stated otherwise on the Website or in a specific offer, no free trial is provided. Access to the paid Service starts after successful payment of the first subscription period.

4. Ordering Process and Contract Formation

4.1 Online Self-Service via Stripe

Orders for standard subscriptions are placed online through the Website:

1. You select the desired plan (Hosted or Self-Hosted, Standard or Enterprise where applicable), number of users and billing frequency.
2. You provide billing and payment information (processed via Stripe).
3. You confirm your order and accept these Terms of Sale and the Terms of Use.
4. Payment is processed via Stripe.

The contract is formed once payment has been successfully processed and you receive an order confirmation email or other confirmation message.

For custom Enterprise Plans, additional terms may be agreed in writing; in case of conflict, those will prevail over these Terms of Sale.

5. Prices, Currency and Taxes

5.1 Currency

Unless otherwise stated on the Website or in a specific commercial proposal, all prices are expressed in euros (EUR).

5.2 Prices

Applicable prices are those indicated on the Website at the time of your order or in a written proposal from Vulnotes.

Unless clearly stated otherwise, prices are shown as final amounts for the customer.

At the time of drafting these Terms of Sale, Vulnotes operates under the French micro-entrepreneur regime with the mention:

"VAT not applicable pursuant to Article 293 B of the French General Tax Code."

As a result, no VAT is currently invoiced. If Vulnotes' tax status changes, prices and invoicing may be adapted accordingly, and you will be informed in accordance with Section 5.4.

5.3 No Guarantee of Future Prices

Prices may vary over time. The subscription price applicable to a given billing period is the one indicated at the time of renewal, subject to any notice requirements below.

5.4 Price Changes

Vulnotes may modify subscription prices for future billing periods. In such case:

• you will be informed by email sent to the address associated with your Account, and/or by in-app notification,
• price changes will apply from the next renewal period, and
• you may cancel your subscription before the renewal date if you do not agree with the new prices.

Vulnotes will use reasonable efforts to provide at least 30 days' notice for significant price changes.

6. Duration, Renewal and Cancellation

6.1 Billing Periods

You may choose between:

• monthly subscriptions (billed every month in advance), or
• yearly subscriptions (billed every 12 months in advance).

No automatic discount is granted for yearly billing unless explicitly stated in an offer or order form.

6.2 Automatic Renewal

Unless you cancel your subscription in accordance with Section 6.3, subscriptions are automatically renewed at the end of each billing period for a new period of the same duration (month-to-month or year-to-year).

The payment method registered via Stripe will be charged automatically at each renewal.

6.3 Cancellation by the Customer

You may cancel your subscription at any time from your Account or via the mechanisms provided in the Service. Cancellation prevents future automatic renewal, but does not automatically trigger a refund for the current period (see Section 9).

To avoid being charged for the next billing period, you must cancel before the renewal date. Vulnotes recommends that you cancel at least 24 hours before the scheduled renewal to ensure processing in time.

7. Delivery and Access to the Service

7.1 Hosted SaaS Subscription

For the Hosted Service:

• Access is typically granted shortly after payment, once the infrastructure has finished provisioning your workspace and user accounts (usually within a few minutes).
• The Service is deemed "delivered" once your Account is created and you can log in to the Service.

Minor delays due to technical processing or verification do not invalidate the delivery.

7.2 Self-Hosted Subscription

For the Self-Hosted Version:

• After successful payment, you receive access to the Docker image and/or associated repository or download link, as well as a license key if applicable.
• The Self-Hosted Version is deemed "delivered" when these access details are provided.

You are responsible for downloading, deploying and operating the Self-Hosted Version on your own infrastructure (see Terms of Use for detailed responsibilities).

8. Payment Terms

8.1 Payment Methods

Payments are processed via Stripe, using payment methods supported by Stripe (such as credit or debit cards, depending on availability in your country).

By providing payment information, you represent that you are authorized to use the selected payment method and authorize Vulnotes (and Stripe as processor) to charge the applicable subscription fees.

8.2 Payment in Advance

All subscription fees are due in advance for the corresponding billing period (monthly or yearly), unless otherwise agreed in writing.

8.3 Failed or Late Payments

In case of payment failure (e.g. expired card, insufficient funds):

• Stripe or Vulnotes may attempt to reprocess the payment using the same method and/or request that you update your payment details.
• If payment has not been successfully completed within seven (7) days from the due date, Vulnotes may suspend access to the Service (Hosted and/or Self-Hosted license updates), until payment is regularised.
• Vulnotes may terminate the subscription for non-payment in accordance with the Terms of Use.

Any bank fees, currency conversion or additional costs charged by your bank or payment provider are at your expense.

9. Right of Withdrawal (EU Consumers)

This Section applies only if you are a consumer within the meaning of EU law and reside in the EU/EEA. If you are a business customer, you have no statutory right of withdrawal under consumer law.

9.1 Legal Right of Withdrawal

If you are a consumer in the EU/EEA, you generally have a 14-day right of withdrawal from the conclusion of the contract, without giving any reason.

To exercise this right, you must notify Vulnotes of your decision to withdraw within 14 days from the date of conclusion of the subscription contract (i.e. from the date of the first payment), by an explicit statement (for example by email to contact@vulnotes.com).

9.2 Digital Services and Immediate Performance

By subscribing to the Service, you may request or accept that the Service start immediately (access is granted as soon as payment is confirmed).

In such case, and in line with EU rules on digital services:

• if you withdraw before we start providing the Service, you are entitled to a full refund;
• if you withdraw after we have started providing the Service at your request, we are allowed to request payment proportional to what has been provided until the time of your withdrawal.

However, as a commercial policy and subject to abuse, Vulnotes may offer a full refund if you exercise your right of withdrawal within 14 days and have only used the Service in a limited way for evaluation (without heavy or extensive usage). Vulnotes will assess "limited use" in good faith on a case-by-case basis.

If you have requested or enabled delivery of the Self-Hosted Version and fully downloaded or deployed the Docker image, you acknowledge that the digital content has been supplied and that your statutory withdrawal rights may be affected in accordance with applicable law.

10. Refund Policy (Outside Legal Withdrawal)

Outside the legal right of withdrawal for consumers described in Section 9, the following refund rules apply:

10.1 Hosted SaaS Subscription

• As a general rule, fees already paid for a started billing period (month or year) are non-refundable, even if you cancel before the end of the period.
• Vulnotes may, at its sole discretion, grant partial or full refunds in exceptional cases (for example, significant service disruption, manifest technical problem on Vulnotes' side, or other specific circumstances). Nothing in these Terms obliges Vulnotes to do so.

10.2 Self-Hosted Subscription

For the Self-Hosted Version:

• Once the Docker image access and/or license has been provided (i.e. from delivery), no refund is due, except where required by mandatory consumer law.
• Please evaluate your needs and the documentation carefully before ordering a Self-Hosted subscription.

11. Use of the Service, Warranties and Liability

The use of the Service, including the Hosted and Self-Hosted versions, is governed by the Terms of Use, which describe:

• permitted and prohibited uses,
• intellectual property rights,
• responsibilities for security and backup (especially for Self-Hosted),
• limitations of liability.

To the maximum extent permitted by law, Vulnotes' liability cap as set out in the Terms of Use (in particular, the limitation to fees paid over the last three (3) months for business users) also applies to disputes arising from or related to these Terms of Sale.

Nothing in these Terms of Sale excludes mandatory consumer rights if you qualify as a consumer under applicable law.

12. Governing Law and Jurisdiction

These Terms of Sale are governed by French law, without prejudice to any mandatory consumer protection rules that may apply in your country of residence (if you are a consumer in the EU/EEA).

Subject to such mandatory provisions and after any attempt at amicable resolution:

• any dispute relating to the interpretation, performance or validity of these Terms of Sale shall fall within the jurisdiction of the courts of Rennes, France.

13. Changes to the Terms of Sale

Vulnotes may amend these Terms of Sale from time to time, for example to reflect changes in the Service, pricing or applicable law.

• When changes are material, Vulnotes will inform you by email and/or in-app notification.
• The updated Terms of Sale will apply from the next renewal of your subscription or from a date indicated in the notice.
• If you do not agree to the new Terms of Sale, you may cancel your subscription before the changes take effect.

Your continued subscription after the effective date of the updated Terms of Sale constitutes your acceptance of those changes.

14. Contact

For any question regarding these Terms of Sale, billing or subscriptions, you may contact:

Vulnotes / Hippolyte QUERE

Email: contact@vulnotes.com