// TermsPage — scan service terms and conditions.

function TermsPage() {
  const { React } = window;

  return (
    <React.Fragment>
      <header className="hero-nav">
        <div className="nav-brand">
          <a href="#">
            <img src="branding/sekura-logo.svg" alt="sekura" height="28" />
          </a>
        </div>
        <nav className="nav-links">
          <a href="#">the story</a>
          <a href="#product">product</a>
          <a href="#team">team</a>
          <a href="#login" className="nav-login">log in</a>
        </nav>
      </header>

      <div className="intake-page">
        <div className="intake-inner legal-page">
          <h1 className="intake-title">terms &amp; conditions</h1>
          <p className="legal-updated">last updated: may 2026</p>

          <div className="legal-body">
            <h3>1. scope of services</h3>
            <p>
              Sekura AI ("Sekura," "we," "us") provides managed autonomous penetration testing services
              ("Services") that deploy scanner infrastructure into your cloud environment to identify
              security vulnerabilities. By using our Services, you ("Customer," "you") agree to these Terms.
            </p>

            <h3>2. authorization &amp; scope</h3>
            <p>
              You represent and warrant that you are authorized to commission security testing on the
              targets and cloud accounts specified in your scan authorization document. Sekura will only
              scan the targets explicitly authorized. You are responsible for ensuring all necessary
              internal approvals have been obtained.
            </p>

            <h3>3. scanner deployment</h3>
            <p>
              Sekura deploys scanner infrastructure into your designated cloud account using
              infrastructure-as-code (Terraform). The scanner operates within your environment and
              communicates only with authorized targets and Sekura's management infrastructure. You are
              responsible for any cloud infrastructure costs incurred by the scanner instance.
            </p>

            <h3>4. testing methodology</h3>
            <p>
              Sekura's autonomous scanner performs network discovery, vulnerability assessment, and
              non-destructive exploitation attempts. The scanner is designed to avoid service disruption,
              but security testing inherently carries risk. Sekura is not liable for any service
              interruptions that may result from authorized testing activities.
            </p>

            <h3>5. data handling</h3>
            <p>
              Scan results and findings are stored within your cloud environment at
              <code>/opt/sekura/results/</code>. Sekura retains scan metadata (target CIDRs, scan
              timestamps, finding summaries) for service improvement and reporting purposes. No customer
              application data or credentials discovered during scanning are transmitted outside your
              environment.
            </p>

            <h3>6. confidentiality</h3>
            <p>
              All scan findings and vulnerability data are treated as confidential. Sekura will not
              disclose your scan results to third parties without your written consent, except as
              required by law. You agree not to publicly disclose details of Sekura's scanning
              methodology or proprietary techniques.
            </p>

            <h3>7. limitation of liability</h3>
            <p>
              Sekura's total liability for any claims arising from the Services is limited to the fees
              paid for the specific scan engagement giving rise to the claim. Sekura is not liable for
              indirect, incidental, consequential, or punitive damages, including lost profits or data.
            </p>

            <h3>8. term &amp; termination</h3>
            <p>
              Each scan authorization is valid for the period specified in the authorization document
              (default: 30 days). Either party may terminate the engagement at any time by written
              notice. Upon termination, Sekura will remove all scanner infrastructure from your
              environment within 2 business days.
            </p>

            <h3>9. modifications</h3>
            <p>
              Sekura may update these Terms from time to time. Material changes will be communicated
              via email to the address associated with your account. Continued use of the Services
              after notification constitutes acceptance of the updated Terms.
            </p>

            <h3>10. governing law</h3>
            <p>
              These Terms are governed by the laws of the State of Delaware, USA, without regard to
              conflict of law principles.
            </p>

            <h3>11. contact</h3>
            <p>
              Questions about these Terms should be directed to{' '}
              <a href="mailto:legal@sekura.ai">legal@sekura.ai</a>.
            </p>
          </div>

          <a href="#managed-scan" className="success-back">← back to managed scan</a>
        </div>
      </div>
    </React.Fragment>
  );
}

window.TermsPage = TermsPage;