Business service terms
Terms version: b2b-terms-2026-10-15-v1. Protection Review Pilot and Agency Protection.
Seller and business customers
Wonderhive - Unipessoal Lda, trading as WonderHive. Registered address: Lugar Dom Constantino de Bragança, Nº 3 Rc e 2720-162 Amadora. Fiscal identifier: PT518378837. Contact: pedro.abrantes@wonderhive.org.
These offers are for business and professional use. The buyer confirms authority to act for the named business. Mandatory legal rights remain unaffected if a buyer legally qualifies as a consumer. A business checkbox cannot waive those rights.
Your order and acceptance
Before payment, the order identifies the customer, selected offer, price, applicable tax, currency and billing interval. These terms are available before the buyer expressly accepts their stated version. We retain the accepted version with the order reference.
A custom proposal may specify agreed scope and dates. It does not remove mandatory rights. Changes do not retroactively alter an accepted paid order.
Protection Review Pilot — EUR249 once
The pilot covers one authorized business domain. It includes a client-specific report, prioritized action plan, a 45-minute review and one retest within 30 days. It excludes remediation, ongoing monitoring and additional retests.
The authorized start date begins the 30-day pilot period. We agree the start, review and retest schedule with you before work starts. We deliver the report within two business days after the authorized start and complete the review within five business days after report delivery. We complete one retest on the agreed date within the 30-day period. Business days exclude weekends and Portuguese public holidays.
Pilot refunds
We refund the pilot in full if you cancel before work starts or we miss the agreed delivery date. A changed delivery date requires agreement and cannot retroactively remove an earned refund entitlement.
After the review is delivered on time, there is no discretionary change-of-mind refund. This does not remove remedies for missing or defective performance, misrepresentation or mandatory legal rights. Send cancellation or refund requests to pedro.abrantes@wonderhive.org and identify the order.
Agency Protection — EUR749 per month
Agency Protection covers up to 10 authorized domains. It includes monitoring, alerts, monthly reports and one quarterly review. Remediation and additional domains require a separately agreed scope and price. A portfolio of 11 to 50 domains receives a custom quote.
The order identifies the monthly billing date and recurring amount. The plan renews until cancellation. Cancel through the authenticated Stripe Billing Portal. Ordinary customer cancellation takes effect at the end of the current billing period without proration. If the portal is unavailable, send a dated request to pedro.abrantes@wonderhive.org. Preserve the same effective date and confirm cancellation. No later renewal is due after that effective date. These rules do not exclude remedies for WonderHive breach or mandatory rights.
Billing, currency and tax
Checkout shows the final presentment currency, applicable tax and total charge before payment. Stripe selects an initial currency. The buyer can change it before payment where the currency selector is available. Supply accurate legal-business, billing and tax information.
Stripe processes payments and invoices. The invoice identifies the supplier and applicable tax treatment. Tax calculation does not establish VAT exemption or reverse-charge eligibility. Do not add an undisclosed fee or change the price for an accepted paid period.
Domain authorization and permitted checks
The customer must own the target or hold written authority from its owner for the agreed checks. A matching work email verifies the requester but does not replace target authorization. Record the permitted domain, methods, timing, access and exclusions.
Light checks read public responses only. Deep testing requires separate written permission naming its targets and scope. No destructive testing, denial-of-service activity, social engineering or access to unrelated systems is included. Pause checks if authority expires or safety is uncertain.
Reports and customer responsibilities
Findings reflect the checks performed and the observed time. Code updates and new vulnerability disclosures may change the result. A report is not a guarantee of complete security, availability, accessibility conformance, legal compliance or vulnerability discovery.
The customer remains responsible for operating its website, backups and remediation decisions. The customer may use its paid report for its business and share it with authorized clients and stakeholders. WonderHive retains its tools and methods. Neither party may publish confidential findings, customer evidence, a case study or the other party’s logo without permission.
Confidentiality and personal data
Each party limits nonpublic findings, credentials and business information to people who need them for the agreed service. Each party applies safeguards appropriate to the data and scope.
The privacy notice explains business-contact, account and billing data. Before we process personal data on your instructions, we agree a binding processing scope and agreement with you. It defines the roles, data, purposes, recipients, retention, security and any transfer arrangements. Do not send unnecessary personal records, sensitive data or private access credentials outside that agreed process.
Responsibility and disputes
Each party is responsible for breach and resulting loss under applicable law. These standard terms impose no blanket damages exclusion, indemnity or monetary liability cap. They do not exclude fraud, intentional wrongdoing, gross negligence or nonexcludable responsibility.
Portuguese law applies, subject to mandatory applicable rules. Disputes go to the courts competent under the applicable jurisdiction rules. No exclusive distant forum is imposed. First send a documented complaint to pedro.abrantes@wonderhive.org so the parties can try to resolve it.