Contract & Policy Changelog

2022-07-19

terms-of-service

Removed Foqal from data subprocessors

We formerly used Foqal to consolidate customer Slack channels for customer support, but we have built out this functionality internally using our existing data subprocessors.

2022-06-08

terms-of-service

Simplified Reference Architecture Terms

We cleaned up the headings for our Reference Architecture features and clarified some standard limitations we wanted to make explicit.

2022-06-06

vulnerability-disclosure-policy

Removed bug bounty

Unfortunately, our informal bug bounty greatly decreased the signal-to-noise ratio in our vulnerability reports. We remain fully committed to security and highly appreciative of any vulnerability reports made in good faith, which we continue to encourage and strive to address in a timely manner according to their urgency.

2022-05-05

terms-of-service

Removed our security alerts service

Prior to this change, we emailed customers about critical security vulnerabilities. But since we began offering this service, many third parties have emerged that provide a better version of this functionality (in many cases at no cost), and customers have told us they do not receive much value from our notifications. For these reasons, we are removing this from our offering.

2022-05-02

vulnerability-disclosure-policy

Added Our Vulnerability Disclosure Policy

As a reflection of our ongoing commitment to security, and in the interest of full transparency, we’ve created a Vulnerability Disclosure Policy. This establishes a formal commitment to our customers, as well as procedures through which any security concerns may be reported to Gruntwork.

2022-02-24

terms-of-service

Remove vestigial $500 deposit from Terms of Service

In the past, we charged a one-time deposit of $500 upon signing up. We no longer do this on our current website checkout, so we have removed mention of this from our terms of service.

2021-12-14

data-processing-agreement

Update Data Processing Agreement

We've updated our Data Processing Agreement to use a more standardized set of terms and the latest Standard Contractual Clauses.

2021-09-08

subprocessors

Replace "fork" with "clone" in certain instances

Our documentation recommend cloning our repos instead of forking them in the event you terminate your license so that you don't lose your forks once we revoke your access. This update makes our terms consistent with our docs.

2021-09-01

subprocessors

Added Foqal to Data Subprocessor List

We are using Foqal's Slack aggregator to pull all support requests into a single view

2021-07-22

terms-of-service

Reflect our use of HubSpot for gruntwork.io analytics and to collect customer information as part of our CRM

We've started using HubSpot (https://hubspot.com) internally, which means we are now storing customer information with a new data sub-processor. As a result, we've updated our Cookie Policy and Data Subprocessors list.

2021-06-04

terms-of-service

Update Terms of Service to address our new developer portal

We've released a new developer portal at https://app.gruntwork.io! We've updated our Terms of Service to reflect the new agreement between us and our customers.

2021-06-04

website-terms

Update Website Terms to address our new developer portal

We’ve released a new developer portal at https://app.gruntwork.io! We've updated our Website Terms to reflect new usage guidelines that result from its release.

2021-06-03

privacy-policy

Update Privacy Policy to address our new developer portal

We’ve released a new developer portal at https://app.gruntwork.io! We've updated our Privacy Policy to address any privacy and data implications that come from its release.

2020-12-07

cookie-policy

Remove Intercom from cookie policy

We've updated our cookie policy to remove Intercom, a vendor we previously used to enable real-time chat via our website.

2020-09-29

privacy-policy

Update privacy policy and Data Processing Agreement to reflect revocation of the Privacy Shield Framework

Because the European Court of Justice has revoked the Privacy Shield Framework, we need to update our privacy policy and Data Processing Agreement to remove reference to it.

2020-09-10

terms-of-service

Update definition of an Authorized User

We updated the definition of an Authorized User to more accurately reflect our concept of "access." In our current thinking, an Authorized User is someone who either directly accesses the code by reading or executing it on their local computer, or someone who indirectly accesses the code by triggering a process that reads or executes the code. We do not see this as a material expansion of the definition of an Authorized User from our original definition, only a more precise clarification.

2020-07-22

terms-of-service

Update Terms of Service to clean up and professionalize terms

We removed DevOps Bootcamps and Gruntwork Professional Services since we are no longer offering these services. While we have always required that you agree to an annual subscription, we’ve cleaned up a few legal provisions around billing practices and termination rights to make this crystal clear. We also clarified that the authorized users of your affiliated companies can use the services. In addition, we’ve put into writing our current policies and cleaned up a few legal positions around;

• how we expect both you and us to behave when you use our website (see our Site Terms);
• how we use your data to help provide the services to you (see our updated Privacy Policy);
• how we use your anonymized data to improve the services;
• what we do to keep your data private and secure (see our updated Privacy Policy and, for our European Union customers, our recently added Data Processing Agreement);
• the fact that we can’t control third-party websites, services and products, and when you use them through our services you should check their terms and conditions;
• how we use (see our Open Source Usage Policy);
• specific corrective steps we will take if someone claims they own part of the services and we did not have their permission to use it;
• when we need to defend and cover you if something goes wrong and it’s our fault; and, similarly, when we you need to defend and cover us - if something goes wrong and it’s your fault;
• our expectation that if something goes wrong between us and we can’t resolve the issue even after trying our best, you will need to come to where we are in Maricopa County, Arizona to sue us (and the local laws in Arizona will apply); and
• a few minor legal positions around minimum age; deposits, billing and taxes; and export control.

2020-06-15

subprocessors

Added Data Processing Agreement and Data Subprocessor List.

As part of our ongoing efforts to achieve GDPR compliance, we have publicly posted our Data Processing Agreement and Data Subprocessors List.

2020-06-15

cookie-policy

Updated Cookie Policy.

As part of our ongoing efforts to achieve GDPR compliance, we have updated our cookie policy to better comply with GDPR and CCPA regulations and reflect our latest data collection practices.

2020-06-15

privacy-policy

Updated Privacy Policy.

As part of our ongoing efforts to achieve GDPR compliance, we have updated our privacy policy to better comply with GDPR and CCPA regulations and reflect our latest data collection practices.

2020-04-22

privacy-policy

We now have an RSS feed for all Gruntwork legal and privacy updates!

Going forward, all updates to the Gruntwork terms of service, privacy policy, open source policy, and other policies relating to data processing will be posted here on our our RSS feed

2020-02-10

terms-of-service

Add terms for new services: CIS compliance and Professional services. Add various legal clean up.

We've added terms for two new services: CIS compliance and professional services. We've also removed Houston for now since we are not currently accepting new Houston customers. Finally, we've cleaned up a few minor legal positions around our billing practices, termination, and handling your feedback.

2019-10-15

terms-of-service

Update all termination periods to 30 days

For consistency, update the termination period for all parts of the subscription to 30 days.

2019-05-09

terms-of-service

Add support for Google Cloud Platform (GCP)

Gruntwork now offers support for Google Cloud Platform (GCP)!

2019-05-08

terms-of-service

Introduce Professional Support, Enterprise Support, and Houston Pro

We now offer three support tiers: Community, Professional, and Enterprise. In addition, the Terms of Service now offer terms for using Houston Pro and annual payment is now allowed. Plain language summaries and various sections were also updated for accuracy and clarity.

2019-03-05

terms-of-service

Introduce Community Support

All customers now receive access to our Community Support Tier at no additional cost.

2019-02-25

terms-of-service

Update SLA on Dedicated Support to 2 Business Days

We now commit to a Service Level Agreement (SLA) where we will respond to Dedicated Support requests within 2 business days.

2019-01-23

terms-of-service

Added 30-day trial period

Customers can now receive 100% of their money back if they choose to cancel within the first 30 days of subscribing.