L3Digital Standard Commercial Terms

Version 1.0, effective 2026-10-13. L3Digital LLC, an Indiana limited liability company doing business as Project Feldspar ("L3Digital"), provides products and services under these terms (the "Terms") and an order form, quote, statement of work, invoice, or checkout (an "Order") accepted by the customer it names ("Customer"). The Order and these Terms together are the "Agreement".

1. Formation and authority

1.1 Acceptance and electronic agent. An Order binds both parties once L3Digital has issued it and Customer accepts it by signature, click, reply, or payment. For a self-serve product, the product page and the checkout are the Order, and payment is acceptance. Schedule A is used for quoted work. L3Digital operates Project Feldspar through an AI agent, which may issue and accept Orders for L3Digital as an electronic agent. Electronic records and signatures, including the agent's, are valid and enforceable.

1.2 Limits on the agent's authority. Unless a human manager or member of L3Digital LLC signs it, nothing the agent agrees to binds L3Digital to: (a) an Order, or related Orders, with total value above US$2,000, counting all amounts over the term or, if recurring, the first 12 months; (b) any indemnity by L3Digital, liquidated damages, service credits, or a change to Section 8; (c) exclusivity, non-competition, non-solicitation, or most-favored-customer terms; (d) an assignment of intellectual property beyond Section 5.1; (e) processing personal or regulated data (Section 6.1); (f) any purchase or payment by L3Digital; or (g) any change to Sections 1, 2.3, 2.5, 3.6, or 5 through 11.

1.3 Precedence and scope. The Order controls for the work, price, schedule, payment timing, and its Special terms, subject to Section 1.2; these Terms control everything else. Terms in Customer's purchase orders or portals do not apply, even if L3Digital accepts them. These Terms apply to business customers and to Consumers. Section 11 contains terms that apply only to Consumers and prevails for them.

2. The work

2.1 Scope and delivery. L3Digital will provide the services ("Services") and deliver the work product and products ("Deliverables") described in the Order. Anything else is out of scope. Changes to scope, schedule, or price need a change order both parties accept; email is enough. A Deliverable is delivered when L3Digital sends it or makes it available.

2.2 Customer cooperation. Customer will provide the access, information, and decisions the work needs. Delays Customer causes extend the schedule. If Customer does not provide something within 30 days after L3Digital's written request, L3Digital may treat the Order as cancelled by Customer under Section 9.2.

2.3 AI performance. The Services are performed primarily by AI systems that L3Digital operates, using third-party AI model, compute, and software providers ("Service Providers"). L3Digital is responsible for its Service Providers' compliance with this Agreement. Customer should review Deliverables before relying on them.

2.4 Standard products. A standard product, such as software, a template, a dataset, or a publication, is licensed, not sold, under the license in the Order or the product's published license. If neither states one, Customer receives a non-exclusive, non-transferable license for internal business use or, for a Consumer, personal use.

2.5 Free services. The free discovery scan, its API and MCP endpoint, the GitHub Action, and other free tools are provided without charge, as is, with no warranty or support commitment, and may be changed or withdrawn at any time. Use them only on code you may lawfully scan. To the extent the law allows, L3Digital has no liability for free services.

3. Security services

This Section applies when an Order includes a security review, source-code audit, penetration test, or similar work.

3.1 Authorization. Customer authorizes L3Digital to perform the work on the code, systems, and assets listed in the Order ("In-Scope Targets") during the dates and by the methods the Order states. Reviewing publicly available source code requires no permission from its owner, and Customer need not own it. All other work (testing a running system that Customer or a third party operates, reviewing non-public code, or using credentials) covers only targets Customer owns or is authorized to have tested. For that work, Customer represents that it has that authority and every required third-party consent, such as from hosting providers.

3.2 Rules of engagement. L3Digital will test only In-Scope Targets, by permitted methods, within the stated window, and will stop promptly on request. Unless the Order says otherwise, work is limited to source-code review and non-production testing, with no denial-of-service, social-engineering, physical, or production testing. L3Digital will tell Customer if it learns it accessed anything out of scope.

3.3 Limits. Security testing is a point-in-time review. It cannot find every vulnerability or establish that a system is secure, and it carries some risk of disruption, so Customer will keep backups. Customer decides what to remediate.

3.4 Findings and third-party vulnerabilities. Findings and reports are Customer's Confidential Information, and L3Digital will not publish or disclose them without Customer's written consent, except as Section 6 permits. If L3Digital finds a vulnerability in software Customer does not own or control, such as an upstream dependency or a public library under review, it will tell Customer first. After Customer consents, or 30 days after that notice, L3Digital may report it privately to the affected maintainer or vendor without identifying Customer or disclosing its other Confidential Information. This does not permit public disclosure.

3.5 Credentials. Customer should provide least-privilege, revocable credentials. L3Digital will use them only for the Order, protect them as Confidential Information, and delete them at completion; Customer should then revoke them.

3.6 Customer indemnity. Customer will defend L3Digital against third-party claims arising from an inaccuracy in Section 3.1's representations and pay resulting damages, costs, and reasonable attorneys' fees finally awarded or agreed in settlement. L3Digital will give prompt notice and reasonable cooperation at Customer's expense. Customer controls the defense but may not settle in a way that imposes an obligation or admission on L3Digital without its consent.

4. Fees and payment

4.1 Payment. Fees are in U.S. dollars and, unless the Order says otherwise, are due in full before work begins or a product is delivered. If the Order allows invoicing, invoices are due within 15 days, and L3Digital may suspend work on 5 days' notice while any amount is overdue. Fees exclude taxes; Customer pays any sales, use, or similar tax other than taxes on L3Digital's income. The checkout total shown to a Consumer includes any tax that L3Digital or Link must collect.

4.2 Refunds and disputes. Fees are non-refundable except under Sections 7.1, 9.1, 9.2, 9.3, and 11.3, or where the law requires. Customer will raise billing disputes with L3Digital before disputing a charge with its card issuer or payment provider.

4.3 No automatic renewal. A recurring Order states its service period and does not renew automatically.

4.4 Purchases sold through Link. When Customer buys through a payment page marked "Sold through Link", Sold through Link, LLC, a Stripe affiliate, is the merchant of record. It charges Customer and collects any tax. Its refund policy (https://support.link.com/questions/sold-through-link-refunds) also applies and controls where it is more generous than these Terms. L3Digital provides the product or service under these Terms. A refund of a purchase, whether from Link or L3Digital, counts toward any refund owed for it under these Terms.

5. Intellectual property

5.1 Deliverables. When Customer has paid an Order in full, L3Digital assigns to Customer its rights in the Deliverables created specifically for Customer under it, excluding L3Digital Materials and third-party components.

5.2 L3Digital Materials. L3Digital keeps its pre-existing and independently developed tools, code, methods, templates, prompts, and know-how ("L3Digital Materials"). Customer receives a non-exclusive, perpetual, royalty-free license to use, copy, and modify any L3Digital Materials incorporated in a Deliverable as part of that Deliverable. Nothing in this Agreement prevents L3Digital from using general skills, knowledge, and techniques of general application acquired in performing the Services, provided it does not disclose Customer's Confidential Information or identify Customer.

5.3 AI-generated and third-party material. Deliverables may be wholly or partly AI-generated, and such material may not be protectable by copyright. L3Digital transfers only the rights it has. Third-party and open-source components remain under their own licenses, which L3Digital will identify where practicable.

5.4 Customer Materials. Customer keeps its rights in the code, data, and materials it provides ("Customer Materials") and licenses them to L3Digital only to perform the Order.

6. Data and confidentiality

6.1 No personal or regulated data. Customer will not provide personal data or regulated data, such as health information, payment card data, government identifiers, or export-controlled technical data. Personal data that unavoidably appears in Customer Materials, such as names in commit history, is excepted; L3Digital will use it only to perform the Order and treat it as Confidential Information. The privacy notice at https://project-feldspar.com/privacy describes how L3Digital handles Customer's own personal data.

6.2 Confidential Information. "Confidential Information" is non-public information one party (the "Discloser") gives the other (the "Recipient") under this Agreement that is marked confidential or would reasonably be understood to be. It excludes information that is or becomes public through no fault of the Recipient, that the Recipient already knew or develops independently, or that the Recipient receives from a third party without a duty of confidentiality. Code in a public repository is not confidential, but non-public findings about it are.

6.3 Use and protection. The Recipient will use Confidential Information only for this Agreement, protect it with reasonable care, and share it only with personnel, Service Providers, and advisors who need it and are bound to similar confidentiality; it is responsible for their compliance. L3Digital will use only AI Service Providers whose terms, or settings as L3Digital configures them, do not permit training on Customer's Confidential Information for models offered to others, and on request will identify those providers and the countries where it stores Customer Materials.

6.4 Compelled disclosure. The Recipient may disclose Confidential Information as law requires, after prompt notice to the Discloser where lawful, and only to the extent required.

6.5 Deletion. After an Order is complete, the Recipient will delete or return the Discloser's Confidential Information within 30 days of a written request, except copies in routine backups, required records, and Service Providers' standard retention, which stay confidential until deleted.

6.6 Incidents. L3Digital will notify Customer without undue delay after confirming unauthorized access to Customer's Confidential Information held by L3Digital or its Service Providers, and will share what it reasonably knows.

6.7 Duration and other NDAs. These obligations last 3 years after the last Order ends, and for trade secrets as long as they remain trade secrets. A separate NDA between the parties continues to govern information exchanged before the first Order.

6.8 Publicity. Neither party will use the other's name or logo, or publicly describe the work, without written consent; email is enough.

7. Warranty and disclaimer

7.1 Warranty. L3Digital warrants that the Services will be performed in a professional and workmanlike manner and that Deliverables will materially conform to the Order. If Customer reports a specific nonconformity within 30 days after delivery, L3Digital will re-perform or correct it, or, if it cannot within a reasonable time, refund the fees for the nonconforming portion. This is Customer's exclusive remedy for breach of this warranty.

7.2 Disclaimer. EXCEPT AS STATED IN SECTION 7.1, ALL SERVICES, DELIVERABLES, AND PRODUCTS ARE PROVIDED "AS IS," AND L3DIGITAL DISCLAIMS ALL OTHER WARRANTIES, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, AND THE ACCURACY OF AI-GENERATED OUTPUT. L3DIGITAL DOES NOT WARRANT THAT ANY SYSTEM IS SECURE OR THAT ANY RESULT WILL BE ACHIEVED, AND DOES NOT PROVIDE LEGAL, TAX, ACCOUNTING, INVESTMENT, OR LICENSED ENGINEERING ADVICE.

8. Limitation of liability

8.1 Excluded damages. NEITHER PARTY IS LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR LOST PROFITS, REVENUE, OR DATA, ARISING OUT OF OR RELATING TO THE AGREEMENT, EVEN IF ADVISED OF THEIR POSSIBILITY.

8.2 Cap. EACH PARTY'S TOTAL LIABILITY ARISING OUT OF OR RELATING TO THE AGREEMENT IS LIMITED TO THE FEES PAID AND PAYABLE UNDER THE ORDER OR ORDERS GIVING RISE TO THE CLAIM OR, FOR A RECURRING ORDER, UNDER IT FOR THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM. THESE LIMITS APPLY EVEN IF A LIMITED REMEDY FAILS OF ITS ESSENTIAL PURPOSE.

8.3 Exceptions. Sections 8.1 and 8.2 do not limit Customer's payment obligations, Customer's obligations under Section 3.6, or either party's liability for fraud or willful misconduct.

9. Termination

9.1 Breach. Either party may terminate an Order if the other materially breaches it and does not cure within 10 days after written notice. If Customer terminates for L3Digital's breach, L3Digital will refund prepaid fees for work not yet performed.

9.2 Customer cancellation. Customer may cancel an Order by written notice. Before work begins, L3Digital will refund prepaid fees in full; after that, fees paid or due are non-refundable and L3Digital will deliver the work in progress.

9.3 L3Digital termination. L3Digital may terminate an Order if it reasonably determines it cannot perform lawfully or safely, including when Customer's authority under Section 3.1 is not confirmed, and will refund prepaid fees for work not yet performed.

9.4 Survival. Sections 3.4, 3.6, 4, and 5 through 11, and accrued payment obligations, survive termination.

10. General

Subject to Section 11.6, Indiana law governs the Agreement, without regard to conflict-of-laws rules, and the state and federal courts in Indiana have exclusive jurisdiction, except that either party may use a small-claims court with jurisdiction. Notices are written. Notices to Customer go to the email address in the Order. Notices to L3Digital go to legal@project-feldspar.com, and legal notices also go to L3Digital LLC, 1143 E. Ireland Rd. #1173, South Bend, IN 46614. An emailed notice is given the next business day. The parties are independent contractors. Neither may assign the Agreement without consent, except to a successor to the business it concerns. Neither is liable for delays, other than in payment, caused by events beyond its reasonable control. Customer represents that it is not subject to U.S. sanctions or export restrictions. The Agreement is the parties' entire agreement on its subject and may be amended only in a writing both accept, subject to Section 1.2. Unenforceable provisions are enforced to the extent permitted, waivers must be written, and there are no third-party beneficiaries. L3Digital may publish new versions of these Terms for future Orders; each Order is governed by the version it names or, if none, the version current when Customer accepted it.

11. Consumers

11.1 Consumer. A "Consumer" is an individual who buys for purposes outside their trade, business, craft, or profession.

11.2 Statutory rights. Nothing in these Terms excludes or limits a right under the consumer law of the Consumer's country or state of residence that the law does not allow to be excluded, including guarantees that services are performed with reasonable care and skill and that digital content conforms to the contract. Where these Terms conflict with such a right, the right prevails.

11.3 Cancellation. Where the law gives a Consumer a right to cancel, the Consumer may cancel within 14 days after the contract is made, as Schedule B describes. A Consumer who asks at checkout for work to start immediately loses the right to cancel once the work is fully performed. A Consumer who cancels in time receives a refund of the price, less a proportionate amount for any work already done at their request.

11.4 Liability. Section 8 does not limit liability for death or personal injury caused by negligence, for fraud, or for any other liability that cannot lawfully be limited. Section 8.1 does not exclude loss that was a foreseeable result of L3Digital's breach.

11.5 Indemnity. Section 3.6 does not apply to Consumers.

11.6 Law and courts. Indiana law governs, but a Consumer keeps the protection of the mandatory laws of their country or state of residence, and may bring proceedings in the courts there where that law gives them that right.

11.7 Complaints. A Consumer may complain to support@project-feldspar.com. L3Digital replies within 5 business days.

---

Schedule A — Order form (quoted and custom work)

Order <ORDER-ID> · Date <DATE> · Governed by L3Digital Standard Commercial Terms v1.0, published at https://project-feldspar.com/terms/v1.0 and incorporated into this Order.

• Services and Deliverables: <DESCRIPTION>; out of scope: <EXCLUSIONS-OR-NONE>
• Schedule: <START-DATE>; delivery <DATE-OR-MILESTONES>
• Product license (Section 2.4): <LICENSE-OR-NOT-APPLICABLE>
• Security Services (Section 3): targets <REPOSITORIES-HOSTS-APPLICATIONS-WITH-VERSIONS>; methods <METHODS> (default: source-code review and non-production testing); window <START> to <END> <TIME-ZONE>; emergency contact <NAME-EMAIL-PHONE>
• Price: US$<AMOUNT> plus tax; due in full before work begins (Section 4.1) | <OTHER-TIMING>
• Recurring period: <PERIOD-OR-NOT-APPLICABLE>; total contract value US$<TOTAL>
• Consumers: If Customer is a Consumer, Section 11 and Schedule B apply. Customer asks L3Digital to start work on <DATE> and acknowledges that the right to cancel ends once the work is fully performed.
• Special terms: None. A term within Section 1.2 binds L3Digital only if a human manager or member of L3Digital LLC signs this Order.

---

Schedule B — Consumer cancellation information

This Schedule applies to Consumers who have a legal right to cancel (Section 11.3).

Who to notify. L3Digital LLC d/b/a Project Feldspar, 1143 E. Ireland Rd. #1173, South Bend, IN 46614, support@project-feldspar.com.

Your right to cancel. You may cancel your contract within 14 days after the day the contract is made, without giving a reason.

How to cancel. Send us a clear statement of your decision, by email or by post, before the 14 days end. You may use the model form below, but you do not have to.

Your refund. If you cancel, we refund the full price you paid. If you asked us to start work during the cancellation period, we refund the price less a proportionate amount for the work done before you told us you were cancelling. We refund you within 14 days after we receive your cancellation, to the payment method you used, unless you expressly agree otherwise. You pay no fee for the refund.

When the right ends. If you asked us to start work immediately, you lose the right to cancel once the work has been fully performed.

Model cancellation form

Complete and return this form only if you wish to cancel the contract.

To: L3Digital LLC d/b/a Project Feldspar, 1143 E. Ireland Rd. #1173, South Bend, IN 46614, support@project-feldspar.com

I hereby give notice that I cancel my contract for the provision of the following service: __________

Ordered on: __________

Name: __________

Address: __________

Signature (only if this form is sent on paper): __________

Date: __________