Account Security and Fraud Disclaimer

1. The principle

Any sign-in made with the correct verification code sent to your e-mail address, or through your account with the sign-in provider you linked (Google, Facebook or Hawees), is treated as authorized by you, and every action, operation and payment made through it is attributed to you, unless it is shown that the compromise came from a fault in the company's own systems.

2. Your obligations

• Protect your e-mail and your account with the sign-in provider with a strong, unique password and their two-step verification, and never disclose verification codes to anyone, including anyone claiming to be from Sure INSTANT or Sure Execution.
• Keep the account's e-mail address under your control; it is your means of sign-in and recovery.
• Secure and update your devices, avoid signing in on public or untrusted devices, and sign out after use on any shared device.
• Check the address before entering your details: the only official sign-in pages are on sureinstant.net.
• Never respond to messages asking for your verification codes, card details or a money transfer, even if they seem to come from someone you know.
• Tell us immediately at support@sureinstant.net or through support if you lose a device or suspect any unusual sign-in or activity.

3. What the company does

• We store no passwords: sign-in uses a short-lived one-time code with limited attempts, or a sign-in provider.
• Encrypted connections (HTTPS/TLS), encrypted sensitive secrets and sign-in history.
• Never asking for your verification code by any channel, and never storing card numbers.
• Handling reports with reasonable care: temporarily freezing an account on suspicion and helping the genuine owner recover it after verifying their identity.

4. Disclaimer for fraud cases

Sure Execution accepts no liability for any financial loss, data loss or damage to you or others resulting from:

• Someone else getting into your e-mail, verification codes or account with the sign-in provider in any way not caused by a fault in the company's systems, including disclosure, phishing, social engineering, spyware, or a leak from another site.
• Being defrauded by someone contacting you by email or outside the service while posing as us or as anyone else, or sending money or data because of a message you received.
• Losing an unprotected device.
• Your delay in telling us after you knew or suspected a compromise.

In these cases, operations run and payments made from your account remain valid and attributed to you as far as the company is concerned. On request and after verification, we can give the competent authorities the available sign-in and audit logs to help pursue the attacker.

5. Unauthorized payments

Payments are made on a licensed gateway's page and after your card issuer's authentication (such as 3-D Secure). If you believe your card was used without permission, tell your bank immediately and tell us; we will cooperate with you and the bank under the gateway's procedures. Filing a bank dispute against a valid payment made from your account breaches the Payment Terms.

6. Account recovery

Recovery uses the account's e-mail address, the linked sign-in provider, or identity verification. We may refuse or delay recovery if ownership is not sufficiently shown, to protect the real owner, and we are not responsible if recovery is impossible because you lost access to your e-mail.