Boundline

Terms and privacy

The terms that apply to template purchases and to this website, and what we do with information you share. Effective October 12, 2026.

Who we are

Boundline is an independent security practice operated by Bharath Srividhya in the United States. In these terms, "we" and "us" mean Boundline, and "you" means the person or company using this site or buying from us.

Templates

When you buy a template, you receive a non-exclusive, non-transferable licence to use and adapt it within your own organization. You may not resell, sublicense or publicly distribute the templates, in original or modified form.

Payments are processed by Stripe. We do not receive or store your card details. Prices are in US dollars, and any applicable tax is shown at checkout.

If a template does not match its description, email us within 14 days of purchase for a full refund.

Services

Security reviews, readiness packages and the security partner service are governed by a separate written engagement agreement, which sets out scope, fees, confidentiality and limits of liability. Nothing on this site creates an engagement. We do not test any system without the owner's written authorization.

What our work is not

Our templates, reports and advice are not legal advice, an audit, a certification or an attestation of compliance with any standard, including SOC 2 or ISO 27001. A security review reduces risk; it cannot guarantee that a system is free of vulnerabilities.

Templates and field notes are provided as they are, without warranties of any kind. To the extent permitted by law, our liability for a template purchase is limited to the amount you paid for it.

Privacy

This site sets no cookies and runs no analytics or advertising trackers.

  • Email. When you write to us, we keep your message and address to reply and, if we work together, to run the engagement.
  • Purchases. Stripe shares your name, email and purchase details with us so we can deliver your files and honour refunds and credits.
  • Scheduling. If you book a call, the booking service processes the details you enter under its own privacy policy.
  • Fonts. This site loads its typefaces from Google Fonts, which receives your IP address when a page loads.

We do not sell personal information or share it for marketing. Client information from engagements is kept confidential and deleted when the engagement agreement says it should be. To see or delete what we hold about you, email us and we will respond within 30 days.

Reporting a security issue

If you find a vulnerability in this site, please write to hello@boundline.dev. Our security.txt has the details.

Changes

We may update these terms. The effective date above shows when they last changed.