SECTION 01
Your agreement with DiamondGuards
These terms cover the DiamondGuards website, client portal, cybersecurity assessments, remote scan products, hardware, and related services operated by Diamond Bright LLC (the “Company,” “we,” or “us”). You must be at least 18 and authorized to act for the business placing an order or approving an assessment.
Review these terms before ordering or using the Services. Where we present an acceptance control or signature, your affirmative acceptance records your agreement. Our Privacy Policy explains information handling; reading it or accepting service terms is not consent to optional analytics or marketing.
Order of precedence: mandatory law controls first. A signed service agreement, statement of work, data-processing agreement, business associate agreement, or rules of engagement controls its specific subject matter where it conflicts with these general terms. Purchase-specific terms disclosed and accepted at checkout then apply. These terms do not retroactively replace a signed agreement or change an existing order.
Back to top ↑SECTION 02
What your service includes
Your selected package, accepted order, and applicable agreement define the service, authorized environment, deliverables, billing period, and support arrangements. A one-time remote scan is a separate purchase from a monthly managed service. Free Membership Club enrollment is separate from a paid protection plan; discounts follow the offer shown when you order.
We provide assessments, technical findings, reporting, and related support within the purchased scope. A product name or marketing summary does not add continuous monitoring, remediation, incident response, hardware, or a higher-tier service that is absent from your order.
Service boundaries: we are not an insurer or a guaranteed 24/7 security operations center. Priority handling is not a guaranteed response-time service level unless a separate written SLA says so. Do not rely on a website message, automated assistant, or scan as an emergency response channel.
Back to top ↑SECTION 03
Written authorization & approved scope
Only authorize assessment of systems you own or have the documented legal authority to test. Obtain any required permission from your employer, hosting provider, landlord, customer, or other system owner. Paying, receiving an installer, creating an account, or signing general website terms does not by itself authorize a scan.
- Before testing, provide the approved domains, IP ranges, networks, contact, allowed methods, timing, and exclusions through the applicable authorization process.
- Identify fragile, safety-critical, medical, industrial, and payment systems and any third-party environment requiring separate permission.
- Do not expand scope, move an enrolled node to another client or network, or reuse an installer to authorize a different environment.
- Exploit execution, credential attacks, social engineering, denial-of-service testing, and out-of-scope access require separate express authorization and are not implied by a routine scan order.
Keep scope current. If you need testing stopped or permission withdrawn, contact us promptly by phone and email, identifying the affected node and scope. We may pause work when authority, ownership, safety, or scope is unclear. Withdrawal does not erase work already performed or records we must retain.
Back to top ↑SECTION 04
Client responsibilities & operational risk
Maintain appropriate backups and a recovery plan, notify affected stakeholders, obtain internal approvals, and provide accurate exclusions before an assessment or configuration change. Even authorized testing can trigger alerts, affect performance, or expose an existing fault. Agree on appropriate maintenance windows and escalation contacts.
You control your production environment and implementation decisions unless a written engagement specifically delegates that work. Review recommendations before applying them, test changes, and verify backups and restoration. A backup review does not mean we operate or guarantee your backups. Service completion depends on access, connectivity, authorization, and other prerequisites stated for the engagement.
Back to top ↑SECTION 05
Accounts, access & acceptable use
Use accurate account details, unique credentials, and MFA where available. Authorize each user appropriately, remove departed personnel, and tell us promptly about suspected compromise. We may verify identity or authority before changing access or releasing security material.
- Do not attack other users, evade tenant isolation, bypass authentication, or interfere with service availability.
- Do not submit unlawful material, malicious payloads outside an expressly agreed evidence-handling process, or another party’s secrets without authority.
- Do not resell portal access, impersonate another business, or use reports to misrepresent certification or regulatory approval.
- Do not test our platform without separate written authorization. Report a suspected vulnerability privately with the affected URL and non-sensitive reproduction details; do not access other customers’ records or publish their data.
SECTION 06
Prices, invoices & payment methods
The order, invoice, or accepted proposal states the price, currency, applicable taxes, shipping, deposits, and payment due date. Review the total before paying. Promotions apply only under the displayed eligibility and redemption conditions. Contact us about a suspected billing error with the order or invoice number; never email full card details.
Card payments use the payment provider shown in the checkout. Monthly billing may generate invoices for payment; an automatically generated invoice is not the same as an automatic card debit. We will not treat a one-time payment as authorization for an undisclosed recurring charge. Any automatic-payment arrangement requires the applicable payment authorization.
Late or failed payment may pause services after applicable contractual or legal requirements are met. Suspension does not turn a security service into emergency coverage or remove valid amounts already owed. Nothing here limits a lawful payment dispute or statutory refund right.
Back to top ↑SECTION 07
Monthly plans, renewal & cancellation
Read your service agreement for the billing interval, service term, renewal conditions, and cancellation effect. Monthly pricing alone does not establish the duration of a separately signed engagement. Offers expressly sold as “cancel anytime” retain that commitment; a later general website update does not remove it.
To request cancellation or stop renewal: email [email protected] from your account email, or send a message through your client portal. Include your business name, plan or agreement number, and requested end date. You can also call (618) 936-8308 for help. An email request does not require a phone call to be valid.
We will confirm the effective date, any final invoice, access changes, and equipment-return instructions under your accepted offer and agreement. Cancellation of future service and refund eligibility are separate questions. Removing a node, closing a browser, or not paying an invoice does not reliably communicate cancellation. Mandatory cancellation rights and required notices apply regardless of these terms.
Back to top ↑SECTION 08
Refunds, returns & non-delivery
Purchase-specific refund terms and mandatory law apply. Under the general digital-service policy, paid scan or digital products are normally non-refundable after delivery or performance has begun, or access credentials have been issued, unless a different accepted offer or law provides otherwise. An installer or credential is not proof that an assessment or report has been completed. This policy does not excuse non-delivery, duplicate charges, material misdescription, or other failures requiring a remedy.
Request a review at [email protected] with your order number, the issue, and whether delivery or testing has started. Before work begins, contact us promptly about cancellation. We assess the actual work, accepted terms, and applicable rights; do not assume a payment is forfeited merely because an account exists.
For physical goods, contact us for return instructions and the applicable product terms before shipping a return. No universal return window, restocking fee, or extended hardware warranty is created by this page. Damaged, incorrect, defective, or undelivered goods must be raised promptly so we can investigate; this request does not shorten a legal claim period.
Back to top ↑SECTION 09
Hardware, shipping & refundable deposits
Purchased equipment, loaned equipment, and equipment secured by a refundable deposit are different arrangements. Your order or service agreement identifies which applies. A refundable sensor or appliance deposit is separate from monthly fees and is returned when you cancel and send back the hardware under the offer made to you. Ask for return instructions, included components, shipping arrangements, and any agreed condition requirements; undisclosed penalties are not added by this page.
The product listing or order sets the expected shipping time and charges. If we cannot ship within the applicable promised time, we will provide the delay and cancellation/refund options required by law. Tracking or creation of a label alone does not establish delivery. Do not send equipment containing personal or confidential data without agreeing on appropriate handling.
Hardware requires a suitable environment, correct setup, power, connectivity, updates, and ongoing maintenance. Manufacturer or written product warranties apply according to their terms, together with non-waivable legal rights. A security appliance does not guarantee that all threats will be prevented.
Back to top ↑SECTION 10
Bitcoin & digital-asset payments
Where Bitcoin or another digital asset is offered, use only the asset, network, address, amount, and payment instructions in the current official checkout or invoice. Payment is credited after verification under those instructions; a submitted transaction hash alone is not proof of payment. Network charges, confirmations, exchange-rate changes, expired quotes, and incorrect transfers can affect settlement.
Blockchain transactions are public and generally cannot be reversed by us. Never provide a wallet seed phrase or private key. If a refund is due, contact us to verify the recipient and arrange its method and value under the accepted order and applicable law. Blockchain irreversibility does not remove an otherwise valid refund right.
Back to top ↑SECTION 11
Reports, compliance information & AI
Findings describe the available evidence, tools, permissions, and environment at the time assessed. There can be false positives, false negatives, inaccessible assets, and issues outside the agreed scope. A passing scan, score, badge, or report does not certify compliance, eliminate risk, guarantee insurance coverage, or prove that a breach has not occurred.
Compliance guides and financial-impact estimates are educational or planning material, not legal, accounting, insurance, or regulatory advice. Consult the appropriate qualified professional for a determination affecting your business.
Some support or analysis features may use AI or automated processing. Outputs can be incomplete or incorrect and need appropriate human verification before security, legal, or business decisions. The public support assistant cannot authorize work, change a signed agreement, promise refunds, or guarantee outcomes. Its messages may be processed by an external AI provider as described in our Privacy Policy.
Back to top ↑SECTION 12
Confidentiality & sensitive information
Each party must protect the other’s non-public business and security information using reasonable care, use it for the engagement or another permitted purpose, and disclose it only to authorized personnel or providers with a need to know, or as legally required. Information independently developed, lawfully obtained without restriction, or public without a breach is not confidential on that basis.
Use an agreed secure channel for vulnerability evidence and sensitive records. Do not send passwords, secret keys, payment-card security codes, patient records, biometric identifiers, or production database exports through public forms or the support assistant. Before an engagement involves regulated data, agree on the permitted data, safeguards, and any required data-processing or business associate agreement. General website terms are not a BAA.
Back to top ↑SECTION 13
Your data, reports & platform materials
You retain your rights in the data and materials you provide. You authorize us to process them to deliver the agreed service, support your account, maintain security, and satisfy legal obligations as described in the Privacy Policy and applicable agreement.
The Company and its licensors retain their respective rights in platform software, methods, templates, branding, and pre-existing materials. Third-party and open-source components remain subject to their applicable licenses. This page does not assert exclusive ownership of third-party material.
You may use client-specific deliverables for your business’s security and compliance work under your agreement. Obtain permission before public publication, resale, rebranding, or distribution outside the authorized use, and protect confidential content. No restriction here removes a right that applicable law or an open-source license expressly gives you.
Back to top ↑SECTION 14
Third-party providers
Payment processors, infrastructure providers, email providers, AI tools, and other integrations have their own terms and practices. We are responsible for our own services and commitments; we do not control independent third-party sites linked for information. A third-party link is not a certification or endorsement.
Provider outages and dependencies can affect availability. Any promised redundancy, recovery time, data location, or special security arrangement must be specified in the applicable engagement. See the Privacy Policy for categories of providers and data disclosures.
Back to top ↑SECTION 15
Service warranties & limitations
Except for express commitments in an accepted order or signed agreement and rights that cannot lawfully be excluded, the Services and general website content are provided “as is” and “as available.” To the maximum extent permitted by law, we disclaim implied warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not promise uninterrupted service or discovery or prevention of every vulnerability, outage, incident, or loss.
These limitations do not erase an express promise we made to you, override a product warranty, or waive mandatory consumer protections.
Back to top ↑SECTION 16
Limitation of liability
To the maximum extent permitted by applicable law, the Company will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or lost profits, revenue, data, or goodwill arising from the Services.
Subject to a controlling signed agreement and applicable law, our total liability for a claim relating to the Services is limited to the amounts you paid the Company for the specific service giving rise to the claim during the three months before the event, or US $100 if no fees were paid. This limitation does not apply where liability cannot lawfully be limited. Some jurisdictions do not allow particular exclusions or limitations, so they may not apply to you.
Back to top ↑SECTION 17
Responsibility for unauthorized instructions
To the extent permitted by law, you agree to defend and indemnify the Company against third-party claims arising from your unauthorized scanning instructions, misuse of the Services, violation of these terms, or infringement of third-party rights. This provision is subject to any controlling signed agreement and cannot require a remedy prohibited by law.
We will give reasonable notice of a claim for which we seek indemnity and reasonable cooperation. Do not agree to a settlement admitting fault for, or imposing non-monetary obligations on, another party without that party’s consent.
Back to top ↑SECTION 18
Suspension, termination & offboarding
We may restrict or end access for material breach, non-payment, security risk, unlawful activity, or a legal requirement, subject to your agreement and applicable notice and cure rights. Where safe and appropriate, we will explain the issue and available corrective steps. Urgent threats may require immediate action.
At the end of service, coordinate report exports, node removal, credential revocation, return of loaned hardware, and final billing. Request copies you are entitled to receive before access ends. Account closure does not automatically erase invoices, authorization evidence, security logs, legal holds, or backups; retention is described in the Privacy Policy. Provisions intended to survive, including confidentiality, accrued payment duties, intellectual-property protections, and lawful liability limitations, survive termination.
Back to top ↑SECTION 19
Governing law & resolving concerns
Illinois law governs these terms without regard to conflict-of-law rules, except where mandatory protections require otherwise. Courts located in Illinois have jurisdiction as stated in an applicable agreement and, for these general terms, exclusive jurisdiction to the extent permitted by law. This does not remove a non-waivable right to bring a claim elsewhere or contact a regulator.
Contact [email protected] with your business name, order or agreement reference, and concern so we can try to resolve it. Doing so is not a waiver of rights or a promise that a legal deadline is paused. This page does not add mandatory arbitration or a class-action waiver.
Back to top ↑SECTION 20
Updates, notices & contact
We identify revisions by effective date and version. Material changes will be communicated as required by law or your agreement; any required consent will be obtained separately. Posting new terms does not retroactively amend a signed agreement or an already accepted order. If a provision is unenforceable, the remaining provisions apply to the extent lawful; a failure to enforce a provision once is not a general waiver.
Operator: Diamond Bright LLC · Diamond Bright CyberGuard
Email: [email protected]
Phone: (618) 936-8308
Website: diamondguards.com
For formal notices requiring postal service, request the current legal mailing address. This contact method does not change statutory service requirements.
Back to top ↑