Licensing

Every extension here is commercial software, whether or not there is a price on it. Getting it gives you the right to use it on your own store; it does not make the code yours to redistribute.

Some are free, and free changes the price rather than the terms. A free extension is proprietary on exactly the same footing as a paid one: the bullets below all hold for a copy nobody paid for. Two things do not reach it, because both are written around a purchase: the one-year update window, which has no date to run from, and the refund section at the end, which has nothing to refund. Updates to a free extension are available, for as long as it is published.

What one purchase covers

• The extensions are proprietary. They are not open source, and no open-source licence applies to them.
• One purchase covers one OpenCart installation (one set of files, one database, one admin), however many storefronts or domains it serves. A multi-store install running six shops is one licence, because it is one install of the extension: one set of settings, one job history.
• A second installation needs a second licence. If you run stores for other people, each of their installs is its own. That is the same restriction as "you may not redistribute it", said from the other side.
• You may modify your own copy. It is PHP on your own server and you are not prevented from editing it. A modified copy is yours to keep running, but it is no longer the thing we can support. Tell us if you have changed something before reporting a problem with it.
• You may not redistribute it. Not resold, not republished, not passed on to another company, not included in a theme or a package you sell. This holds whether or not you charge for it. It has one named exception, written out under reporting a security problem below, and that one is granted to anybody, not only to somebody who bought a copy.
• Copies that are not serving customers are free, and there is no limit on them. Staging, development, a copy on your laptop, a restored backup, a standby that is not taking orders: each is covered by the licence of the install it is a copy of. Keeping the archive and restoring it to your own store is expected use, not redistribution. We tell you to install on a copy first; charging for the copy would be a strange way to mean it.
• The licence follows the store. If you sell or hand over the store, the licence goes with it. Tell us, so that the remaining update entitlement moves too.
• Updates are included for one year from the date you buy, where you bought it. When that year is up, the version you have keeps working. Nothing expires, nothing stops, and no licence check phones home. What ends is the entitlement to new versions. On a free extension there is nothing to count the year from, so nothing ends: see the note above.

Where you bought the extension may hold you to its own terms as well as these. Where the two differ, the ones you agreed to at the till are the ones that govern your purchase.

Warranty

The extensions are provided as they are. They are tested, and their documentation is written to state their limits rather than to flatter them. Each extension's Limits & guarantees page is where the boundaries of what it promises are written down, and that page is the one worth reading before you trust it with a live catalogue.

What that documentation states, we stand behind: if an extension does not do what its documentation says, that is a bug and we want to hear about it. Beyond that, we cannot warrant that it fits a purpose we have not described, and we are not liable for loss arising from use of it. Take a backup before any bulk change, regardless of what the extension promises about reversing one.

Reporting a security problem

If you find a security problem in one of these extensions, or in the sites that document them, reporting a vulnerability is where to send it and what we promise back.

Reporting one means quoting our code, and the code is ours, so this licence grants outright the permission the redistribution bullet above would otherwise withhold:

Anybody acting in good faith may quote our source in a vulnerability report, an advisory or a writeup, through any channel. Not only a licensee: the person who found the problem in a copy they never bought is bound by copyright like everyone else, and is exactly who this is for. It is not conditional on the ninety days we ask for on that page either: asking is a request, and a request with copyright behind it is a demand.

What it covers is bounded by purpose rather than by a line count: quote what a reader needs to understand the problem, and no more. Two limits make that checkable without anybody counting. Never a whole file, and never a runnable copy. An excerpt somebody can drop into a store and run is redistribution however it is framed, and the bullet above still applies to it.

A proof-of-concept you wrote yourself sits outside this altogether. It is your work rather than ours, and not ours to give you permission for.

Refunds

Where you bought the extension determines the refund process, because the marketplace handles the payment. Check its terms. If you bought directly from us, get in touch.

A free extension has no payment and therefore no refund. What it does have is the same support and the same Limits & guarantees page as a paid one. If it does not do what its documentation says, that is still a bug and we still want to hear about it.