Terms of Sales

This English version is provided for information only. In accordance with section 9 below, only the French text is authoritative in the event of a dispute.

1. Scope

These Terms of Sales (ToS) apply, without restriction or reservation, to all subscriptions to the SaaS services offered by Zyre on the zyre.fr website. The Service is primarily aimed at professionals; consumers additionally benefit from the protective provisions of the French Consumer Code recalled in section 6.

2. Services offered

Zyre offers SaaS cybersecurity protection solutions, including depending on the subscribed plan:

• Real-time threat monitoring and traffic filtering (WAF)
• Vulnerability scanning and technology detection
• Uptime and SSL certificate monitoring
• Vulnerability intelligence (CVE) and automated audit reports

The history of the vulnerability intelligence feed is kept for 12 rolling months, after which alerts are deleted automatically. This duration is a service commitment and is independent from the retention of threat logs, which depends on the subscribed plan and is described in the privacy policy.

3. Pricing

The services are provided at the prices in force displayed on the pricing page and summarized on the order page at the time of subscription, in euros, excluding and including taxes. Only the prices displayed at the time of the order are authoritative. Billing is monthly or annual depending on the chosen cycle; annual billing benefits from a reduced rate.

Prices are firm for the current subscription period. Zyre may change them for subsequent periods, provided it informs the Customer at least 30 days before renewal; the Customer remains free to terminate before the new price takes effect.

4. Payment terms

Payment is due immediately upon order. Payment is made by credit card via our secure payment provider Stripe. Payments made will not be considered final until the amounts due have actually been collected. The subscription renews tacitly at each due date; it may be terminated at any time from the subscription management portal, the termination taking effect at the end of the period already paid for.

5. End of subscription, payment default and suspension of protection

5.1 — Principle: protection stops, the site keeps being served. The Service operates as a reverse proxy: the Customer's visitor traffic transits Zyre's infrastructure before reaching the Customer's servers. Consequently, the end of a subscription does not interrupt traffic relaying: Zyre keeps forwarding requests to the Customer's servers so that their sites do not become unreachable. Only the security services (WAF filtering, firewall rules, blocking, threat logging) are disabled.

5.2 — Grace period. After the paid period ends, or upon a failed payment, protection is maintained for a 15-day grace period. The Customer is notified by email before and at the time of suspension. Restoring payment during this period restores protection with no further action.

5.3 — Suspension. Once the grace period has elapsed, protection is suspended. From the first day of suspension: traffic keeps being relayed (section 5.1), no security obligation under section 7 applies to Zyre, paid features are unavailable, no new site may be added, and Zyre no longer issues TLS certificates for hostnames registered after the suspension. Certificates already issued for the Customer's existing sites keep being renewed for as long as relaying continues: letting them lapse would make those sites unreachable over HTTPS, which section 5.1 exists to prevent.

5.4 — Customer's obligation to redirect DNS. The relaying provided by Zyre after the end of the subscription is a continuity measure, not a service owed. It is the Customer's responsibility, as soon as their subscription ends, to point their DNS records directly at their own servers. Zyre may end the relaying subject to 30 days' notice sent by email to the account holder's address. Zyre cannot be held liable for unavailability resulting from the Customer keeping DNS pointed at its infrastructure after that notice.

5.5 — Downgrade. Where the number of configured sites exceeds the new plan's quota, no site is deleted: the sites in excess keep being relayed but are no longer protected. The Customer chooses, from their dashboard, which sites keep protection.

5.6 — Data retention. Suspension does not entail deletion of account data. It remains accessible and is retained for the periods set out in the Privacy Policy. Deletion of the account, at the Customer's initiative, has the effects described therein; accounting records are kept for 10 years in accordance with article L123-22 of the French Commercial Code.

6. Right of withdrawal

Professional customers: in accordance with article L221-3 of the French Consumer Code, the right of withdrawal does not apply to services subscribed to within the Customer's main professional activity.

Consumer customers: you have a period of 14 days from subscription to withdraw. By subscribing, you expressly request immediate performance of the Service before the end of this period and acknowledge that in case of withdrawal, an amount proportional to the service already provided will remain due (article L221-25 of the French Consumer Code). To exercise this right, contact support from your account or by email.

7. Liability and warranty

Zyre provides the Service diligently and in accordance with the state of the art, as a best-efforts obligation. No security solution can guarantee absolute protection: the Service significantly reduces exposure to threats but cannot constitute a guarantee of the inviolability of the Customer's systems.

The obligations under this section apply only to periods during which protection is active. During a suspension within the meaning of section 5.3, Zyre provides no security service and assumes no liability in that respect.

Zyre's liability cannot be engaged in the following cases:

• use of the Service not compliant with the ToS (in particular on unauthorized domains);
• failure attributable to the Customer's systems, their host or a third party;
• force majeure within the meaning of article 1218 of the French Civil Code;
• the Customer's non-compliance with the legislation applicable in the country of use of the Service.

In any event, Zyre's liability, for all causes combined, is capped at the amount of the sums actually paid by the Customer for the last 12 months of subscription.

8. Data protection and subprocessing

Within the Service, Zyre processes on behalf of the Customer technical data relating to visitors of the protected sites (IP addresses, user-agents, request paths). For this processing, the Customer is the controller and Zyre acts as a processor within the meaning of article 28 of the GDPR. This relationship is governed by the Data Processing Agreement (DPA), which is an integral part of these ToS. It is the Customer's responsibility to inform the visitors of their sites of the use of Zyre in their own privacy policy.

9. Governing law and language

These ToS are governed by and subject to French law. They are drafted in French; should they be translated, only the French text shall be authoritative in the event of a dispute. For consumer customers, consumer mediation is possible before any legal action.