Last updated: 14 August 2026
These terms govern quality assurance services provided by Can Hacioglu, Pacelliallee 20, 36043 Fulda, Germany ("we", "us"), trading as Vibeless QA, to the person or company commissioning a check ("you").
We perform functional quality assurance and basic security checks against the specific build of the application you nominate, limited to the user flows agreed at intake. Our work combines automated probing with human verification of serious findings.
This is not a penetration test, a security audit, a code review, or a compliance certification, and we do not present it as one. If you need certified penetration testing or a formal audit, we will tell you and decline the engagement.
A verdict of SHIP means that no unresolved blocking defects were found within the tested scope on the tested build. It is not a warranty that the application is free of defects, that it is secure, or that it is fit for any particular purpose.
Testing is a sampling activity. The absence of a finding is not proof of the absence of a defect. Any change you make to the application after we test it invalidates the verdict for that build.
By submitting a URL you confirm that you own the application or are otherwise authorised to commission testing against it and against any third-party infrastructure it depends on. You are responsible for obtaining any permission your hosting provider requires. You will indemnify us against third-party claims arising from a lack of that authorisation.
You agree to provide test or seed data rather than production personal data in any environment we are asked to test. You will provide working test credentials and a description of your critical flows at intake.
Payment flows are exercised only in sandbox or test mode. We will not perform destructive actions against a production system, and will not attempt denial-of-service, social engineering, or physical intrusion, without your prior written authorisation for a specifically named action.
Stated turnaround times (24, 48 or 72 hours) begin once we have received complete intake information including working credentials, and run over business days. Incomplete or broken intake pauses the clock until resolved. If your application is unavailable during the testing window, we will agree a new window with you.
Package prices are fixed and stated in euros, net of VAT.
Invoices are payable within 14 days of the invoice date unless agreed otherwise. We begin work once payment or a purchase commitment is confirmed.
If you are a consumer within the meaning of § 13 BGB, you have the right to withdraw from the contract within 14 days without giving reasons. To do so, inform us by an unambiguous statement at contact@vibelessqa.com.
If you ask us to begin testing before that period expires, you owe us a proportionate amount for the work already performed. The right to withdraw lapses entirely once we have fully performed the service, provided you expressly requested early performance and acknowledged the loss of the withdrawal right. Most of our customers contract as businesses, in which case this section does not apply.
We treat your application, credentials, evidence and findings as confidential and will not disclose them to third parties except to processors bound by equivalent obligations. Anonymised findings may be published only where they cannot reasonably be traced back to you.
You retain all rights in your application. On payment, you receive an unrestricted right to use the report and the fix prompts we deliver, internally and with your own contractors and AI tooling. We retain rights in our methodology, templates and tooling.
We are liable without limitation for damage arising from intent or gross negligence, and for injury to life, body or health. We are also liable under the German Product Liability Act where applicable.
For slight negligence, we are liable only for breach of a material contractual obligation (a duty whose fulfilment makes proper performance possible and on whose observance you may routinely rely), and in that case only for foreseeable damage typical of this type of contract.
Subject to the paragraph above, our total liability arising from any engagement is capped at the fees you paid for that engagement. We are not liable for indirect or consequential loss, including lost revenue, lost profits, or reputational damage, and we are not liable for defects we did not find.
These terms are governed by the law of the Federal Republic of Germany, excluding the UN Convention on Contracts for the International Sale of Goods. Where you are a merchant, a legal entity under public law, or a special fund under public law, the exclusive place of jurisdiction is Fulda, Germany. Mandatory consumer protection provisions of your country of residence remain unaffected.
If any provision of these terms is or becomes invalid, the validity of the remaining provisions is unaffected.