Terms of Service

1. License & Scope

Subject to these Terms and your payment of applicable fees, Fixpoint grants you a limited, non-exclusive, non-transferable, revocable license to use our SaaS platform solely for automated configuration management and remediation of Windows endpoints you are authorized to operate. "Authorized" means you own the endpoints, manage them under a written contract with the owner, or are employed as IT operations staff with administrative access granted by the endpoint owner.

You may not sublicense, reverse-engineer, decompile, or extract the underlying logic of the Fixpoint platform. You retain full ownership of your infrastructure, configuration baselines, and any remediation scripts generated through the platform for your environment.

MSPs and IT service providers: your license extends to managing endpoints belonging to your end-customer organizations, provided you have authorization from those customers to deploy software and execute remediation on their systems.

2. Endpoint Agent Deployment

The Fixpoint endpoint agent runs as a Windows Service on managed endpoints. By deploying the agent, you represent that you have the authority to install software on those systems. You are solely responsible for ensuring that agent deployment complies with your organization's change management, security policies, and any applicable regulatory requirements (HIPAA, SOC 2, NIST, CIS benchmarks, etc.).

The agent monitors service states, configuration baselines, and registry values using Windows-native APIs (Get-Service, Get-ItemProperty, WMI, WinRM). It does not capture keyboard input, screen content, or user data outside the scope of Windows service configuration metadata.

You are responsible for maintaining the security of agent credentials and ensuring that endpoint systems running the agent are protected against unauthorized access. Fixpoint is not liable for security incidents resulting from misconfigured endpoint permissions or credential exposure on your side.

3. Automated Remediation

Fixpoint's core function is autonomous script generation and deployment. When you enable automated remediation (Professional or Enterprise plan), the platform generates and deploys PowerShell scripts to your managed endpoints without requiring manual approval of each script. You acknowledge and accept the following:

• Script generation is AI-assisted. Scripts are generated by a language model based on endpoint system state. While Fixpoint verifies scripts through a sandbox layer before deployment, you are responsible for reviewing your remediation policies, defining appropriate baselines, and configuring alert thresholds that match your operational risk tolerance.
• Sandbox verification. Scripts that exit with an error in sandbox, modify files outside the remediation scope, or invoke restricted cmdlets (Remove-Item, Stop-Process, Remove-Service, Disable-WindowsOptionalFeature, and similar destructive or security-impacting commands) are blocked and not deployed. This is a safety mechanism, not a guarantee of correctness for all environments.
• Scheduled vs. immediate remediation. You choose remediation timing per policy: immediate (sandbox pass → deploy), next business hour, or a custom maintenance window. You are responsible for setting these windows consistent with your change management policy.
• Rollback and incident response. Fixpoint does not automatically roll back a deployed remediation. You retain full responsibility for your incident response procedures. Fixpoint provides a full audit log of every drift event, generated script, sandbox result, and deployment action — accessible via your dashboard and API.

You may disable automated deployment at any time and operate Fixpoint in detection-only mode.

4. MSP & Multi-Client Clauses

If you are an MSP or IT service provider managing Fixpoint across multiple end-customer environments:

• You are the data controller for your customers' endpoint data. You are responsible for obtaining any required consents or contractual authorizations from end customers for the deployment of monitoring and remediation software on their systems.
• Endpoint metadata and drift event logs are associated with your MSP account. You must handle this data in accordance with your obligations to your end customers, including any data processing agreements in place with them.
• Per-endpoint pricing applies per unique endpoint device across all client environments. You may not pool endpoints across multiple customers to reduce minimum endpoint counts for individual client accounts.
• Fixpoint's liability cap in Section 5 applies to the MSP's total use of the platform across all client environments — it is not a per-client or per-endpoint cap.

5. Acceptable Use

You agree not to use Fixpoint to:

• Deploy the endpoint agent or generate remediation scripts for endpoints you do not have explicit authorization to manage;
• Generate or deploy scripts designed to disrupt, damage, exfiltrate data from, or gain unauthorized access to systems outside your explicitly authorized managed environment;
• Use the platform to conduct illegal activities or violate any applicable law in any jurisdiction where your endpoints operate;
• Attempt to reverse engineer, decompile, or extract the underlying model logic, training data, or proprietary algorithms of the Fixpoint platform;
• Share account credentials with unauthorized parties, or resell access to the platform without a written agreement with Fixpoint;
• Use the platform to circumvent security controls, disable endpoint protections, or access data beyond the scope of Windows service configuration management.

Fixpoint reserves the right to suspend or terminate accounts that violate this section without prior notice. We may also notify affected end-customer organizations if an MSP account is terminated for abuse.

6. Data Collection

Fixpoint processes the following data to deliver the service:

• Endpoint metadata: hostnames, service names, Windows version, and state information from monitored machines;
• Drift event logs: timestamped records of detected deviations, associated system state at time of detection, script hash, and deployment outcome;
• Generated scripts: AI-generated PowerShell output associated with your account and retained for audit purposes;
• Session data: authentication records and API access logs.

We do not sell your data. Drift event logs and generated scripts are retained for the duration of your active subscription and deleted within 30 days of account termination, except where a longer retention period is required by law or your compliance requirements (SOC 2, HIPAA, etc.). You may export your full event history and audit log at any time via the API. See our Privacy Policy for full details.

7. Warranty Disclaimer

FIXPOINT IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR COMPLETELY SECURE.

AI-generated PowerShell remediation scripts are generated from system state at the time of drift detection. While the sandbox verification layer blocks scripts that exit with errors or invoke restricted destructive cmdlets before deployment, Fixpoint makes no representation that any deployed script is correct, safe, or appropriate for your specific environment. You are responsible for defining your remediation baselines, configuring your allowed/restricted cmdlet policies, and setting appropriate sandbox strictness levels via your dashboard before enabling automated deployment. In detection-only mode (Starter plan), no scripts are deployed automatically.

8. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, FIXPOINT AND ITS AFFILIATES SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, USE, OR GOODWILL, ARISING OUT OF OR RELATED TO YOUR USE OF THE SERVICE.

OUR TOTAL AGGREGATE LIABILITY UNDER THESE TERMS SHALL NOT EXCEED THE FEES PAID BY YOU TO US IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM. THIS CAP APPLIES ACROSS ALL ENDPOINT ENVIRONMENTS MANAGED UNDER YOUR ACCOUNT.

Fixpoint shall not be liable for: (a) any system downtime, data loss, or service disruption caused by deployed remediation scripts that pass sandbox verification; (b) any conflict between Fixpoint's automated remediation and your existing change management or configuration management processes; (c) any failure of endpoint hardware, network infrastructure, or Windows operating system components that prevents remediation from executing.

9. Termination

You may cancel your subscription at any time. We may suspend or terminate your access immediately if you breach these Terms, fail to pay fees, or pose a risk to our infrastructure or other customers. Upon termination, your endpoint agents will stop reporting to the platform within 48 hours; the agent binary remains on endpoints but goes dormant. You may uninstall it via your RMM or manually. Endpoint data will be handled as described in our Privacy Policy.

10. Governing Law

These Terms are governed by and construed in accordance with the laws of the State of Delaware, USA, without regard to its conflict of law principles. Any disputes shall be resolved in the courts of Delaware, and you consent to the exclusive jurisdiction of those courts.

11. Changes to These Terms

We may update these Terms from time to time. We will notify you of material changes by posting the revised Terms on this page and updating the "Effective" date. If you continue to use Fixpoint after a change, you accept the revised Terms.

12. Contact

Questions about these Terms? Reach us at fixpoint-3@polsia.app.