Refund & Security Policy
Last Updated: October 2026 · Effective Date: October 24, 2026
Part I: Subscription & Quota Package Refund Policy
We strive for absolute transparency in our developer billing. Our refund framework is structured as follows:
If you purchase a Growth Pro ($19.90) or Enterprise Scale ($149.00) package and determine that the service does not meet your technical requirements, you may request a pro-rata or full refund within 14 calendar days of purchase, provided that the majority of the API calls remain unconsumed.
The Starter Pack ($0.00 / 100 API Calls) is 100% complimentary and requires no payment method. Because no monetary charge is incurred, no refund process applies.
Transactions broadcast to the Monad Testnet (such as contract deployments, liquidity staking, or DEX trading fees) consume decentralized validator gas and execute via immutable smart contracts. On-chain gas fees and realized trading PnL cannot be refunded or reversed.
developer@koliance.io. Requests are processed within 3 business days.Part II: Security Engineering & Risk Architecture
Security and cryptographic solvency are paramount in Koliance. Our protocol enforces rigorous defensive engineering principles:
- Strict BigInt Math Parity: Off-chain liquidation calculations in TypeScript and Go match on-chain smart contract thresholds with zero truncation drift (GAP-06 / GAP-14 compliance).
- Session Key Circuit Breakers: Every EIP-712 delegated session key is bound by strict parameters (
maxPerTxUSD,dailyLimitUSD). Account owners can freeze or revoke keys on-chain immediately in the event of an agent anomaly. - Database Least Privilege: High-concurrency backend services operate with stripped database privileges; client-facing endpoints cannot directly alter user trust tiers or credit balances.
Part III: Vulnerability Disclosure & Bug Bounty (Safe Harbor)
We welcome independent security researchers, smart contract auditors, and developers to test our infrastructure. We commit to a comprehensive Safe Harbor policy for whitehat disclosures.
- Report discovered vulnerabilities confidentially to
developer@koliance.iooriasi777work@gmail.combefore making any public disclosure. - Include a reproducible proof of concept (PoC) and clear technical steps.
- Avoid privacy violations, destruction of data, or interruption of service to other network participants.
- Allow our engineering team up to 48 hours for initial triage and assessment.
Critical vulnerabilities in smart contracts or solvency mechanisms that are reported in accordance with this policy are eligible for rewards and public recognition in our security acknowledgements.