These Terms of Service ("Terms") apply to the Hoqo website and to the services provided by Ryoya Kubo, a sole proprietor based in Japan, trading as Hoqo ("Hoqo", "we", "us"). By requesting a free check or ordering a plan, you agree to these Terms on behalf of yourself and the organization you represent ("you").
1. Our services
Hoqo tests AI agents and chatbots for security weaknesses ("red teaming"). We offer a free check and paid plans (Hoqo Scan, Scan Pro, Hoqo Guard and Guard Pro). For paid plans, the exact scope, deliverables, schedule and fees are set out in a written order or statement of work ("Order"). If an Order conflicts with these Terms, the Order applies.
The free check is a short, limited review of a few key risks. It is not a full test, and you are under no obligation to buy anything afterwards. We may decline any request.
"Business day" means a weekday that is not a public holiday in Japan, based on Japan Standard Time.
2. Authorization and scope
You confirm that you own the AI system to be tested, or that you have the owner's permission to have it tested, and that you have the authority to agree to these Terms.
- We start testing only after the scope (which systems, accounts, techniques and time window) has been confirmed in writing, including by email.
- We test only within the agreed scope, and we stop as soon as you ask us to.
- You are responsible for any notice or approval your own providers require (for example, your hosting, cloud or AI model provider).
- We may pause or stop testing at any time if we have doubts about authorization.
3. Your responsibilities
- Provide the test accounts, environments and information we agree on.
- Use a test or staging environment and test data where possible, and keep backups of anything important.
- Tell us in advance about anything fragile, costly to run, or connected to real customers or payments.
- Apply fixes yourself. Hoqo recommends fixes but does not change your systems.
4. Testing risks
Security testing can cause unexpected behavior, errors, extra usage costs (for example, AI model or API fees) or temporary disruption. We take reasonable care to avoid this and to stay within the agreed scope, and you accept these risks for testing performed within that scope.
5. No guarantee
Testing is a point-in-time assessment of the agreed scope. A test that finds no issues does not mean your system is secure, and we cannot guarantee that every weakness will be found or that a fix will prevent future attacks. AI systems and attack techniques change over time.
6. Confidentiality
We keep your confidential information, including your system details, data, findings and reports, confidential, and use it only to provide the services. We will sign an NDA on request before you share anything sensitive. We will not publish your findings or name you as a client without your written permission. Where we work with a native-speaking partner for a language, that partner is bound by a confidentiality agreement.
7. Fees and payment
- Fees are as shown on our website or in your Order, in US dollars, excluding applicable taxes.
- You pay only after we have agreed on the scope. We then send you a secure payment link to pay by card through our payment provider Stripe, or an invoice if you prefer. Testing starts once payment is received.
- Hoqo Scan and Scan Pro are one-time payments.
- Each plan includes a set number of languages and tools. Additional languages are charged as shown on our website, up to 6 languages per agent. Hoqo Scan and Hoqo Guard cover up to 3 tools, and Scan Pro and Guard Pro up to 10. More languages, tools or agents are quoted separately.
- Hoqo Guard and Guard Pro have a minimum term of 3 months and then continue month to month until either party cancels with 30 days' written notice.
- Invoices are due within 14 days.
- For Hoqo Guard and Guard Pro, the first 3 months are paid in advance once the scope is agreed. After that, each month is billed in advance.
- You may upgrade from Hoqo Scan to Scan Pro within one week of your Scan Order by paying the difference in price. If you start Hoqo Guard or Guard Pro after a Scan, one month's fee is waived.
8. Intellectual property
You keep all rights to your systems and data. You may use our reports freely within your organization. We keep the rights to our own methods, tools and general know-how, including the attack techniques we develop during testing. We may keep and use those techniques, and results with anything that identifies you, your systems or your users removed, to improve our testing.
9. Limitation of liability
To the maximum extent permitted by law, our total liability arising from the services is limited to the fees you paid us in the 12 months before the claim, and we are not liable for indirect or consequential losses, such as lost profits or lost data. Nothing in these Terms limits liability that cannot be limited under applicable law, including liability for intentional misconduct or gross negligence.
10. Ending the services
Either party may end an Order if the other party seriously breaches these Terms and does not fix the breach within 14 days of notice. Sections 5, 6, 8 and 9 continue to apply after the services end.
11. Independence
Hoqo is independent and is not affiliated with, endorsed by or certified by OWASP or MITRE. We refer to their frameworks only to describe and map our findings.
12. Governing law
These Terms are governed by the laws of Japan. The Fukuoka District Court has exclusive jurisdiction over any dispute, unless the Order says otherwise.
13. Changes to these Terms
We may update these Terms from time to time. The effective date at the top shows when they last changed. Changes do not affect an Order already signed unless both parties agree.
14. Contact
Ryoya Kubo (Hoqo)
1-8-23 Akasaka, Chuo-ku, Fukuoka 810-0042, Japan
hello@hoqo.ai
END OF TERMS OF SERVICE