# Runtrace Terms

## Service
Runtrace provides software inventory and vulnerability management for enrolled developer workstations. The service includes the hosted administration console, macOS agent, scheduled scans, vulnerability grouping, remediation workflow, reports, and controlled remote scan requests.

The applicable order form identifies the plan, subscription term, device limit, price, support level, and any Enterprise deployment terms. If an order form conflicts with these terms, the order form controls for that subscription.

## Subscription and fees
Business pricing is EUR 19 per active developer device per month, billed annually, with a standard limit of 100 active devices.
Scans, findings, remediation workflows, and standard reports are not metered separately. A device consumes a seat while it is enrolled and active. Deactivating a device releases the seat and prevents further authentication while retaining its history according to the retention policy.

Fees are due according to the selected billing period and order form. Access to paid operations may be suspended while payment is overdue or the subscription is inactive.

## Customer responsibilities
- Enroll only devices that the customer is authorized to manage.
- Provide appropriate notice to people whose devices are enrolled.
- Limit administrator and billing roles to authorized personnel.
- Protect enrollment credentials and report suspected compromise promptly.
- Use remote scan profiles only for legitimate security administration.

## Data and security
Runtrace processes customer data according to the Privacy Notice and Data Processing Addendum. The customer retains ownership of customer data. Runtrace uses customer data only to provide, secure, support, and operate the service, meet legal obligations, and process billing.

The security overview and data inventory describe the product data boundary and technical controls. Runtrace does not use customer data to train general-purpose machine learning models and does not sell customer data.

## Availability and support
Support requests may be sent to sales@runtrace.co. Standard response targets are described in the Support Policy. Contractual service levels, service credits, and dedicated escalation procedures apply only when included in an Enterprise order form.

## Suspension and termination
Either party may terminate as stated in the order form. Runtrace may suspend access when necessary to address a security risk, unlawful use, or material payment failure. Before account deletion, authorized administrators can request an export of organization data. Retention and deletion follow the published Retention Policy and any applicable order form.

## Changes
Runtrace may update these terms to reflect product, legal, or operational changes. Material changes will be published with an updated effective date. Changes do not override a signed order form during its current term unless required by law or agreed by both parties.