Terms and conditions

These terms apply to gravexlabs.dev and to work GravexLabs ("we", "us") does for clients ("you"). We are a development and security studio based in Accra, Ghana. By using the site or hiring us, you agree to these terms.

1. How we take on work

Every project starts with a written proposal or statement of work. It sets out the scope, the price, the timeline and what we will hand over. If the proposal and these terms disagree, the proposal wins.

A quote is valid for 30 days unless it says otherwise. Work starts once you accept the proposal in writing and pay any deposit it names.

2. Changes to scope

If you ask for something outside the agreed scope, we will tell you what it costs and how it affects the timeline before we start on it. We do not bill for extra work you have not approved.

3. Payment

The proposal states the amounts and when they are due. Invoices are payable within 14 days unless the proposal says otherwise. We may pause work on an account that is more than 14 days overdue, and we will tell you before we do.

4. Who owns the work

Once you have paid in full, you own what we built for you: the source code, the designs and the content we created for the project. We hand over the repository and the accounts it runs on.

Three things stay outside that transfer:

• Open source and third-party components, which stay under their own licences.
• Tools, libraries and methods we built before or outside your project. You get a permanent licence to use any of these that are part of your product.
• Our testing tools and report templates.

We may mention that we worked with you and show the public parts of the work, unless you ask us in writing not to.

5. Hosting and uptime

Where we host or deploy your product, we set it up with SSL and choose providers that target 99.9% uptime. That figure is the provider's target. It becomes a commitment from us only if your proposal includes a service level agreement.

There is no monthly lock-in. You can move your product to another provider or another team at any time, and we will hand over what you need to do so.

6. Security testing

We run vulnerability assessments and penetration tests only against systems you own or have written permission to test. Before a test starts, you sign an authorisation that lists the targets, the dates and what is out of bounds. See the acceptable use policy.

A penetration test is a time-boxed attempt to find weaknesses. It reduces risk. It cannot prove that a system has no vulnerabilities, and a clean report is not a guarantee against future attacks.

Testing can affect live systems. We agree the testing window with you and take care to avoid disruption, and you agree to keep current backups of anything in scope.

7. Confidentiality

We keep your business information, credentials, source code and test findings confidential. We share them only with the people on our team who need them for your project. Findings from a security test go only to the contacts you name.

This duty continues after the project ends. It does not cover information that is already public or that the law requires us to disclose.

8. What you are responsible for

• Giving us accurate information and timely feedback.
• Having the right to use the content, data and accounts you give us.
• Keeping your own passwords and admin access secure after handover.

9. Warranty and fixes

We fix defects in work we delivered, at no charge, if you report them within 30 days of delivery. This does not cover problems caused by changes made by someone else, by third-party services or by use outside what the proposal describes.

Beyond that, the site and our services are provided as they are, without other warranties, to the extent the law allows.

10. Liability

To the extent the law allows, our total liability for a project is limited to the fees you paid us for that project. We are not liable for indirect losses such as lost profit, lost data or lost business.

Nothing in these terms limits liability that cannot be limited by law.

11. Ending a project

Either of us can end a project with 14 days' written notice. You pay for the work done up to the end date, and we hand over that work once it is paid for.

12. Using this website

You may read and share the content on this site. You may not attack the site, scrape it in a way that disrupts it, or use it to break the law. The notes we publish are for education and for testing systems you are allowed to test.

13. Governing law

These terms are governed by the laws of Ghana. Any dispute goes first to good-faith discussion between us, and then to the courts of Ghana.

14. Changes

We may update these terms. The date at the top shows the latest version. Work under a signed proposal stays under the terms that applied when you signed it.

15. Contact

Questions about these terms: hello@gravexlabs.dev or +233 54 548 2961.