Skip to content

Legal

Terms and Conditions

Version 2.0 · Effective 19 October 2026

This is the contract for the Horda platform. How personal data is handled is set out in the Privacy Policy.

These Terms and Conditions (the “Terms”) are a contract between NoBuzz (“Horda”, “we”) and the customer that accesses the Horda platform (“Customer”, “you”). They cover the hosted service at app.horda.si, any deployment supplied under an order, and related documentation and support. If you accept for a company or other entity, you confirm that you can bind it. A written order, or an online order we accept, is part of these Terms. If these Terms are an offer, acceptance is limited to them.

By creating an account, signing in, or using the Services, you confirm that you have read and agree to these Terms. Where the Brazilian Consumer Defense Code applies, nothing here waives a right that cannot be waived.

1. Definitions

“Authorized User” means an employee, consultant, contractor, or agent whom the Customer allows to use the Service and for whom access was contracted. “Customer Data” means content the Customer or an Authorized User submits through the Service, and does not include account data or usage data. “Personal Data” means information about an identified or identifiable natural person, including personal data under Brazil’s General Data Protection Law (Law 13.709/2018, the “LGPD”), the EU General Data Protection Regulation (the “GDPR”), and similar laws. “Sensitive Data” means the categories in LGPD article 5, II, the special categories in GDPR article 9, health data, payment-card or financial-account data, government identifiers, children’s data, and equivalent categories under applicable law. “Service” means the Horda platform named in the order, including the console, agents, reports, and related support. “Order” means the order that incorporates these Terms. “Scope” means the systems, applications, and data the Customer owns or has prior written authorization to test. “Usage Data” means logs and telemetry collected to run, secure, and improve the Service. “Harmful Code” means code or a technique whose purpose or effect is unauthorized access or to damage, disrupt, or impair a system or data. “Documentation” means the user documentation Horda supplies for the Service.

2. Access and permitted use

If the Customer complies with these Terms, the limits on the Order, and the Scope, Horda grants a limited, non-exclusive, non-transferable, non-sublicensable license to access and use the Service during the Order, for the Customer’s internal security purposes and only inside the Scope, in accordance with the Documentation. Each Authorized User needs a separate account and must not share credentials. The Customer is responsible for its Authorized Users and for all use of those accounts. The Service may be used to assess a system only when the Customer has valid, prior, written authorization from the owner. Results support defense and remediation. They are not a guarantee that a system is secure.

3. Prohibited conduct

  1. Do not scan, probe, exploit, or test any system, application, or data outside the Scope, or any asset you do not own and are not expressly authorized in writing to test.
  2. Do not use the Service for unauthorized access, data theft, extortion, denial of service, or any crime where you or the target are located, including unlawful access to a computer device under article 154-A of the Brazilian Penal Code.
  3. Do not reverse engineer, copy, resell, or use the Service to build a competing product, except where a mandatory law, including an interoperability right, forbids that restriction. Do not remove proprietary notices or bypass access controls.
  4. Do not upload Harmful Code, interfere with the Service, share accounts, or submit Sensitive Data, cardholder data, or children’s personal data. The Service is not designed to store those categories.
  5. Do not use the Service where a failure could cause death, personal injury, or serious environmental harm, or in violation of export, privacy, or computer-misuse laws that apply to you.

4. Intellectual property and feedback

As between the parties, Horda and its licensors own the Service, the documentation, the software, the agent orchestration, and Usage Data, and the related intellectual property. No right is granted except as these Terms state. The Customer keeps all rights in Customer Data and grants Horda a worldwide, non-exclusive license to host, process, and display that data only to provide, secure, and support the Service and as these Terms describe. Horda may use suggestions and comments without payment. Third-party and open-source components included in the Service stay under their own licenses. Those licenses govern only those components and do not license the Horda platform as a whole. The Customer must not remove notices those licenses require.

5. Personal data and security

When the Customer submits personal data through the Service, the Customer is the controller under the LGPD and the GDPR, and Horda is the operator or processor. Horda processes that data only to provide the Service, on the Customer’s documented instructions, under these Terms, and under the data-processing terms that form part of the contract. Horda also processes account data and Usage Data as an independent controller to run accounts, secure the Service, prevent abuse, bill, and comply with law. Horda does not sell personal data. International transfers follow LGPD Chapter V and, where the GDPR applies, a valid transfer mechanism. Horda will keep technical and organizational measures appropriate to the risk and will tell the Customer about a security incident that may cause relevant risk or harm within a reasonable time and, where the GDPR applies, without undue delay. The Customer is responsible for the legal basis, for notices to data subjects, and for making sure that testing an authorized system does not unlawfully expose another person’s personal data. Brazil’s Civil Rights Framework for the Internet applies to personal data collected in Brazil. After the contract ends, Customer Data is deleted or returned within a reasonable time, except where the law requires retention or retention is needed to defend a claim.

6. Fees, confidentiality, and suspension

Fees, currency, and billing cadence are those on the Order. Unless the Order says otherwise, fees are invoiced in advance and due within 30 days. Fees exclude taxes. Customers in Brazil are responsible for applicable indirect taxes, including ISS, PIS, COFINS, and withholding when the law places that duty on the customer. If a payment is late and is not disputed in good faith in writing within 10 days, Horda may charge a late fee of 2% and simple interest of 1% per month, pro rata, without compounding, or any lower maximum set by mandatory law, plus reasonable collection costs. Horda may suspend access if payment is more than 10 days overdue after notice, if use threatens the Service or another customer, if use is unlawful or outside the Scope, if the law prohibits the Service, or if the Customer enters insolvency proceedings, and will restore access when the cause is cured. Each party will protect the other’s confidential information for three years after the contract ends, and for as long as a trade secret remains a trade secret, and will disclose it only to representatives who need to know it or when the law requires disclosure, with prior notice when the law allows that notice.

The Customer represents that it has written authorization for every target in the Scope and will keep that authorization for the whole engagement. Horda may ask for evidence of that authorization and may suspend testing if it is not provided.

7. Warranties, liability, and indemnity

Horda warrants that it will perform the Service in a professional manner and that the Service will materially conform to the Documentation. A warranty claim must be made in writing within 30 days. The remedy is to re-perform the affected Service or, if Horda chooses, to refund unused prepaid fees for that Service. A security test cannot find every weakness. Except for this warranty, the Service and the findings are provided “as is” and “as available.” To the maximum extent the law allows, Horda disclaims implied warranties of merchantability, fitness for a particular purpose, and non-infringement. Neither party is liable for lost profits, lost data, or indirect or consequential damages, to the extent that exclusion is valid. Horda’s total liability for direct damages arising out of these Terms is limited to the fees the Customer paid Horda for the Service in the 12 months before the claim. These limits do not apply to liability the law does not allow a party to limit, including willful misconduct (dolo), gross negligence (culpa grave), death or personal injury caused by a party, or fraud, and they do not waive a consumer’s non-waivable rights under the Brazilian Consumer Defense Code. The Customer will defend and indemnify Horda against third-party claims arising from Customer Data, from testing outside the Scope, or from use of the Service in breach of these Terms. Horda will defend the Customer against a third-party claim that the Service, used as permitted, infringes that party’s intellectual property, and may modify the Service, obtain a license, or end the affected part and refund unused prepaid fees. That intellectual-property remedy is the Customer’s exclusive remedy for that kind of claim, except where mandatory law provides otherwise.

8. Term, governing law, and changes

These Terms start when the Customer first accepts them or when the first Order starts, and they last until the subscriptions end or the contract is terminated. Either party may terminate for a material breach that is not cured within 30 days after written notice. Horda may terminate on written notice if the Customer does not pay amounts due within 10 days after notice, or if the Customer breaches the use restrictions or confidentiality. Provisions that by nature should survive, including payment, intellectual property, confidentiality, liability limits, and this article, survive. These Terms are governed by the laws of the Federative Republic of Brazil, without its conflict-of-law rules. The courts of the district of São Paulo, State of São Paulo, are the exclusive venue, except that a consumer protected by the Brazilian Consumer Defense Code may sue in the court of the consumer’s domicile, and except that mandatory data-protection or consumer rules of another country apply to a Customer established there when those rules cannot be waived. In a contract of adhesion, doubt is resolved in favor of the adhering party, under article 423 of the Brazilian Civil Code and, where it applies, the Consumer Defense Code. If a clause is invalid, it is changed only as far as needed to make it valid, and the rest remains in force. Horda may update these Terms by publishing a new version in the product. A material change takes effect on the date stated in the notice, and not before publication. Continued use after that date is acceptance. A consumer may refuse a material change and stop using the Service. The Portuguese text prevails for Customers established in Brazil. The English text prevails for other Customers. Notices may be sent by email to the address on the Order or the account, and to horda@nobuzz.io for Horda. Neither party may assign the contract without consent, except to a successor to substantially all of the relevant business. Neither party is liable for delay caused by an event beyond its reasonable control. These Terms and the Orders are the entire agreement on this subject.