These Terms of Service (the "Terms") form a binding agreement between SSLGuru, LLC, a California limited liability company with its principal place of business at 133 North Altadena Drive, Suite 402, Pasadena, CA 91107, United States ("SSLGuru", "we", "us", "our"), and the individual or entity that purchases or uses our Services ("you", "your", "Customer").
"Services" means the digital certificate resale, provisioning, management and support services, the SSL tools, and the websites at sslguru.com and its subdomains.
The following documents are incorporated into these Terms by reference and form part of your agreement with us:
If there is a conflict, the order of precedence is: (1) a signed written agreement between us, (2) the applicable Certificate Authority Subscriber Agreement in respect of the certificate itself, (3) the Data Processing Addendum in respect of personal data, (4) these Terms, (5) all other incorporated policies.
You must be at least 18 years old and legally able to enter into contracts. If you accept these Terms on behalf of an organisation, you represent that you are authorised to bind that organisation, and "you" means that organisation.
We do not provide Services to persons or entities located in, ordinarily resident in, or organised under the laws of a country or territory subject to comprehensive U.S. sanctions, nor to any person on the U.S. Treasury Department's Specially Designated Nationals and Blocked Persons List, the Denied Persons List, the Entity List, or any equivalent restricted party list maintained by the United States, the United Kingdom or the European Union. You represent that you are not such a person and that you will not use the Services in breach of applicable export control or sanctions laws.
You must provide accurate, current and complete information when you register and keep it current. You are responsible for all activity under your account. You must protect your credentials, enable multi-factor authentication where we offer it, and notify us at [email protected] without undue delay if you suspect unauthorised access.
We are not liable for losses you suffer from unauthorised use of your account that results from your failure to safeguard your credentials. You are not liable for unauthorised use that results from our failure to meet our own security obligations under Section 12.
SSLGuru is a reseller. Digital certificates are issued by third-party Certification Authorities ("CAs"), not by SSLGuru. Your rights in the certificate itself, and the CA's obligations to you, are governed by that CA's Subscriber Agreement and Certification Practice Statement, which we make available to you before purchase and which you must accept.
Because CAs are bound by the CA/Browser Forum Baseline Requirements, you agree that you will:
Under CA/Browser Forum Ballot SC-081v3, the maximum lifetime of a publicly trusted TLS certificate is being reduced on the following schedule, and you acknowledge that the certificate you receive will be subject to the limit in force on its issuance date:
Where you have purchased a multi-year subscription, we will reissue the certificate as required within the paid term at no additional certificate cost. You are responsible for installing each reissued certificate.
We strongly recommend automating renewal and installation.
A CA may revoke a certificate, and a browser or operating system vendor may distrust a CA, for reasons entirely outside our control. If a certificate you purchased is revoked through no fault of yours, or the issuing CA is distrusted by major root programmes, we will use commercially reasonable efforts to obtain a replacement certificate of equivalent type from an alternative CA for the remainder of your paid term at no additional charge. This is your sole remedy in respect of such an event, except where the loss results from our own negligence.
We will use commercially reasonable efforts to make the Services available 24 hours a day, 7 days a week, except during planned maintenance, for which we will give at least 48 hours' notice where practicable, and except for events outside our reasonable control.
We may make pre-release features available as "Beta Services". Beta Services are provided as-is, are not covered by any service level commitment, and should not be used in production. We may modify or withdraw Beta Services at any time. Feedback you choose to give us about Beta Services may be used by us without restriction and without payment; we do not, however, claim ownership of your intellectual property, and you grant us only a non-exclusive, perpetual, royalty-free licence to use the feedback.
Prices are stated on the Site and are exclusive of VAT, GST, sales tax and other applicable taxes, which will be added where required. Transactions are processed in U.S. dollars unless another supported currency is offered; where you pay in another currency, your bank may apply conversion charges and the converted amount may differ from the estimate shown at checkout.
You acknowledge that your payment method may be charged by SSLGuru, LLC or by an affiliated entity within our group (Ionblade Web Hosting; Plenty of Pixels). The charge descriptor will identify the entity charging you.
Most Services renew automatically. Before you complete a purchase that includes automatic renewal, we will disclose, clearly and conspicuously and immediately adjacent to the point at which you consent:
We will obtain your separate affirmative consent to the automatic renewal terms before charging you.
Renewal reminders. We will email you a reminder before each renewal charge: at least 30 days in advance for terms of one year or longer, and at least 7 days in advance for terms shorter than one year.
The reminder will state the renewal date, the amount, and a direct link to cancel. Where a promotional or trial price converts to a standard price, we will notify you at least 7 days before the first standard-price charge.
Cancelling is easy. You may turn off automatic renewal at any time from your account dashboard in the same medium in which you signed up, in no more steps than it took to subscribe, without speaking to anyone. You may also cancel by emailing [email protected]. Cancellation takes effect at the end of the current paid term unless you are entitled to a refund under the Refund Policy.
Price changes. If the renewal price will be higher than the price you last paid, we will tell you the new price in the renewal reminder and give you at least 30 days to cancel before the change takes effect.
Card updater services. Where your card issuer participates in an account updater programme, your updated card details may be supplied to us automatically so that renewals do not fail. You may opt out by removing the payment method from your account.
If we cannot collect payment, we may suspend the Services and, after notice, cancel certificates issued or renewed on your behalf. We may charge a reasonable administrative fee only where we have first notified you of the amount and the reason, and only for work genuinely outside the normal scope of the Services (for example, formal legal or accounting work caused by a payment dispute you initiated without cause). We will not charge such a fee where the dispute is resolved in your favour.
Refunds are governed by the Refund Policy. Where a refund is due, we will refund to the original payment method. Where your payment provider does not permit a refund to the original method, we will issue the refund by cheque or account credit at your election.
All material on the Site other than material you supply, including text, graphics, software and their selection and arrangement, is owned by SSLGuru or its licensors and may not be copied, scraped, reverse-engineered or exploited except as expressly permitted.
You retain all rights in material you supply to us. You grant us a non-exclusive, worldwide, royalty-free licence to host, copy, transmit and display that material solely to the extent necessary to provide the Services and to comply with law.
You may use the Services only for lawful purposes. You may not use the Services, or any certificate obtained through them, to facilitate phishing, malware distribution, fraud, or any activity that would cause a certificate to be revoked under the CA/Browser Forum Baseline Requirements. We may suspend Services and request revocation of a certificate where we have a reasonable, good-faith belief that this Section has been breached. Except where immediate action is required by law, by a CA, or to prevent imminent harm, we will notify you first and give you a reasonable opportunity to remedy.
Notices of alleged copyright or trademark infringement should be sent to our designated agent as set out in our Copyright and Trademark Policy. For users established in the European Union, our notice-and-action mechanism under Article 16 of Regulation (EU) 2022/2065 (the Digital Services Act) is described in that policy, and we will provide a statement of reasons for any restriction we impose.
The Site may link to sites we do not control. We are not responsible for their content or practices. Third-party products we resell are subject to that provider's terms, and your remedies in respect of them are those the provider gives you.
Our handling of personal data is described in the Privacy Policy. Where we process personal data on your behalf as a processor, our Data Processing Addendum applies and forms part of these Terms. It includes the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum where those are required for a transfer.
We do not use Customer Content to train generative artificial intelligence models. Where we use AI tools to assist with support, we do so under contractual terms that prohibit the provider from training on your data.
We maintain administrative, technical and physical safeguards designed to protect personal data and Customer Content, including encryption of data in transit using current TLS versions, encryption at rest for sensitive data, role-based access control, multi-factor authentication for administrative access, logging and monitoring, and a documented incident response plan. We do not store full payment card numbers; card data is handled by PCI DSS validated payment processors.
If we become aware of a personal data breach affecting your data, we will notify you without undue delay and, where we act as your processor, within 48 hours of becoming aware, and will provide the information you need to meet your own notification obligations.
We may change the Services. If we discontinue a Service you have paid for, we will give you at least 30 days' notice and will, at your election, migrate you to a comparable Service for the remainder of your term or refund the unused portion of your fees on a pro-rata basis.
We may suspend or terminate the Services if you materially breach these Terms and, where the breach is capable of remedy, fail to remedy it within 10 days of notice; if you fail to pay; if required by law or by a CA; or if your use presents an imminent risk of harm to us, our other customers or the public. We will give notice before suspension unless immediate suspension is necessary.
You may terminate at any time as described in Section 6.2.
On termination, you must cease using any certificate obtained through us that we or the CA revoke.
Sections 7, 11, 12, 16, 17, 18, 20 and 21 survive termination.
You warrant that the information you give us is accurate, that you own or control every domain for which you request a certificate, and that your use of the Services complies with applicable law.
EXCEPT AS EXPRESSLY STATED IN THESE TERMS AND TO THE FULLEST EXTENT PERMITTED BY LAW, THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE", AND SSLGURU DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT.
Nothing in these Terms excludes or limits any warranty, right or remedy that cannot lawfully be excluded or limited. If you are a consumer, you may have statutory rights that these Terms do not affect, including under the laws of your country of residence and, in California, under the Consumers Legal Remedies Act and the Song-Beverly Consumer Warranty Act.
TO THE FULLEST EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE OR CONSEQUENTIAL DAMAGES, OR FOR LOST PROFITS, LOST REVENUE OR LOSS OF DATA, EVEN IF ADVISED OF THE POSSIBILITY.
SSLGURU'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS WILL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU PAID TO SSLGURU FOR THE SERVICES IN THE TWELVE MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM, AND (B) ONE HUNDRED U.S. DOLLARS ($100).
The exclusions and limits in this Section do not apply to:
Time limit. Any claim must be brought within one year after the cause of action accrues, except where a longer period is required by law and except for claims for non-payment.
You will defend, indemnify and hold harmless SSLGuru and its officers, directors, employees and agents from third-party claims arising out of your use of the Services, your breach of these Terms, or your violation of any third-party right, and from the resulting damages, losses and reasonable legal fees. We will notify you promptly of any such claim, give you control of the defence (subject to our right to participate with our own counsel at our cost), and cooperate reasonably. You may not settle a claim in a way that imposes an obligation on us without our consent.
We may change these Terms. For changes that are material and adverse to you, we will give at least 30 days' advance notice by email to the address on your account and by posting on the Site, and the change will not take effect until the end of that period. If you do not accept the change, you may cancel before it takes effect and we will refund the unused portion of any prepaid fees on a pro-rata basis. Continuing to use the Services after the change takes effect means you accept it.
Non-material changes and changes required by law take effect on posting.
Before starting a formal proceeding, you agree to contact us at [email protected] with a description of the dispute and the relief you seek. We will do the same. If the dispute is not resolved within 60 days, either party may proceed.
Any dispute that is not resolved informally will be settled by binding arbitration administered by the American Arbitration Association under its Consumer Arbitration Rules (for consumers) or its Commercial Arbitration Rules (for businesses), before a single arbitrator selected in accordance with those Rules. The Federal Arbitration Act governs.
The arbitration will be conducted by videoconference or by documents only, unless you elect an in-person hearing, in which case it will be held in the county of your residence or principal place of business, or another location we agree. Fees are allocated under the applicable AAA rules; where you demonstrate that the costs would be prohibitive compared with litigation, we will pay the portion of your filing, administrative and arbitrator fees that the arbitrator considers necessary to prevent that.
Either party may instead bring an individual claim in small claims court if it qualifies.
Arbitration will be on an individual basis only. Neither party may bring claims as a class, collective, consolidated or representative action. If this waiver is held unenforceable as to a particular claim, that claim will proceed in court and the rest of this Section will continue to apply.
If 25 or more similar claims are filed by or with the coordination of the same counsel, the parties will cooperate with the AAA to apply its Supplementary Rules for Multiple Case Filings.
You may opt out of Sections 20.2 to 20.6 by emailing [email protected] with your name, account email and the words "arbitration opt-out" within 30 days of first accepting these Terms. Opting out will not affect any other part of these Terms.
Either party may seek injunctive relief in a court of competent jurisdiction to protect intellectual property or confidential information.
These Terms are governed by the laws of the State of California, excluding its conflict-of-laws rules and the United Nations Convention on Contracts for the International Sale of Goods. Where Section 20 does not apply, the state and federal courts located in Los Angeles County, California have exclusive jurisdiction.
If you are a consumer resident in the European Union, the United Kingdom or another jurisdiction whose law gives you the protection of mandatory local consumer rules and the right to bring proceedings in your local courts, nothing in this Section deprives you of that protection or that right. EU consumers may also use the European Commission's online dispute resolution platform.
The parties are independent contractors; nothing creates a partnership, joint venture or agency.
You may not assign these Terms without our written consent. We may assign to an affiliate or in connection with a merger or sale of assets, on notice to you.
We will give notice by email to the address on your account or by posting on the Site. You must give notice to [email protected] and, for formal legal notices, also by post to the address in Section 1.
You consent to receive communications from us electronically and agree that electronic records and signatures satisfy any legal requirement that communications be in writing.
Neither party is liable for delay or failure (other than a failure to pay) caused by events beyond its reasonable control.
If any provision is held unenforceable, it will be modified to the minimum extent necessary and the remainder will continue in force.
A failure to enforce a provision is not a waiver of it.
These Terms and the documents incorporated by reference are the entire agreement between us on their subject matter.
These Terms are made in English. Any translation is provided for convenience; the English version prevails.
SSLGuru, LLC · 133 North Altadena Drive, Suite 402, Pasadena, CA 91107, United States
General: [email protected] · Billing: [email protected] · Legal: [email protected] · Security: [email protected]
Telephone: 1-855-775-4878 (1-855-SSLGURU) · Direct: +1 626-377-9979
