Refunds — PCI DSS products

When a refund is issued automatically, when billing is stopped, and what is not refundable.

One-time packs

The remediation pack and the requirement 5.4.1 add-on are prepared after payment when you supply the page or domain to evaluate. The paid obligation remains recorded if the browser closes. If no complete pack is delivered within 48 hours, the service automatically issues a full refund during reconciliation; you do not need to ask. A delivered pack is not refundable simply because you disagree with a finding.

The evidence ledger

If a paid monitor produces no successful evaluation within 48 hours of purchase, the refund is issued automatically — you do not need to ask. The service reconciles every paid monitor against the evaluations it actually delivered and refunds those that delivered none.

If monitoring stops later

If a monitor that was working stops producing evaluations for more than 7 days, we cancel the subscription so you are not billed again, and record the reason. That is not a refund of periods already served; if you believe one is owed, reply to your receipt.

Asking

If you believe a refund is owed and have not received one within 14 days of purchase, email qi@toledotechnologies.com with the Polar receipt or order reference. That path is a backstop for what the automatic reconciliation could not resolve, not the normal route.

Not a delivery failure

An observation you disagree with, a later change to your site, or an assessor reaching a different judgment is not by itself a failure to deliver. These products supply software-generated evidence and guidance, not a compliance outcome. Cancelling a subscription is a separate action from a refund and ordinarily takes effect at the end of the paid period.

These pages cover Tessera's PCI DSS products.