Terms of Service

These Terms of Service ("Terms") govern your access to and use of the Threatstealth cybersecurity platform and website operated by Threatstealth Ltd ("Threatstealth", "we", "us"). By accessing or using the Platform, you agree to these Terms.

1. Definitions

• "Platform" means the Threatstealth software-as-a-service product accessible at threatstealth.com and its APIs
• "Customer" means the organisation or individual who has accepted these Terms and purchased access to the Platform
• "User" means an individual authorised by the Customer to access the Platform
• "Customer Data" means all data submitted by the Customer or its Users to the Platform

2. Access and accounts

We grant you a limited, non-exclusive, non-transferable right to access and use the Platform during the subscription term, subject to these Terms and your payment of applicable fees.

You are responsible for maintaining the confidentiality of your account credentials, for all activities that occur under your account, and for ensuring all Users comply with these Terms. You must enable multi-factor authentication for all administrator accounts.

3. Acceptable use

You may not use the Platform to:

• Conduct offensive security operations against systems you do not own or have explicit written authorisation to test
• Violate any applicable law or regulation
• Attempt to circumvent security controls, access other customers' data, or probe for vulnerabilities in the Platform itself
• Transmit viruses, malware, or other harmful code
• Resell or sublicense the Platform without our prior written consent
• Use the Platform to build a competing product

4. Data and privacy

You retain ownership of all Customer Data. We process Customer Data only to deliver the Platform services, as described in our Privacy Policy and Data Processing Agreement.

You grant us a limited licence to host, process, and transmit Customer Data solely as necessary to provide the Platform. We will not use Customer Data to train machine learning models without your explicit consent.

5. Service levels and uptime

• Professional plan: 99.9% monthly uptime (approximately 43.8 minutes downtime per month)
• Enterprise plan: 99.99% monthly uptime (approximately 4.38 minutes downtime per month)
• Startup plan: Best-effort; no SLA commitment

Service credits for SLA breaches are described in the Order Form. Current system status is available at /status.

6. Fees and payment

Subscription fees are as described in your Order Form or as communicated by Threatstealth sales. Annual subscriptions are billed upfront. Monthly subscriptions are billed at the start of each billing cycle. Fees are non-refundable except as required by law or as expressly stated in the Order Form.

We will notify you at least 30 days before any price changes. Continued use after the effective date constitutes acceptance.

7. Intellectual property

Threatstealth retains all intellectual property rights in the Platform, including all software, documentation, and trade secrets. You retain all intellectual property rights in Customer Data. We gain no ownership interest in Customer Data.

8. Confidentiality

Each party agrees to keep the other party's confidential information strictly confidential and not to disclose it to third parties without prior written consent, except as required by law.

9. Warranties and disclaimers

We warrant that the Platform will perform materially as described in our documentation during the subscription term. WE PROVIDE NO OTHER WARRANTIES, EXPRESS OR IMPLIED. THE PLATFORM DOES NOT GUARANTEE PREVENTION OF ALL SECURITY INCIDENTS.

10. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY SHALL BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES. EACH PARTY'S TOTAL CUMULATIVE LIABILITY SHALL NOT EXCEED THE FEES PAID IN THE 12 MONTHS PRECEDING THE CLAIM.

11. Term and termination

These Terms commence on the date you first access the Platform and continue for the subscription term. Upon termination, you may export your Customer Data within 30 days. After 30 days, we will delete Customer Data subject to our data retention policies.

12. Governing law

These Terms are governed by the laws of England and Wales. Disputes shall be resolved in the courts of England and Wales, unless you are located in the EU, in which case mandatory consumer protection laws in your jurisdiction may apply.

13. Contact

Legal enquiries: legal@threatstealth.com