// TERMS OF SERVICE

1. Acceptance of Terms

By accessing or using AISEC ("the Service"), operated by FOP Stepanenko Stanislav Ruslanovych (ФОП Степаненко Станіслав Русланович), registered in Ukraine ("we", "us", "our"), you ("User", "you", "your") agree to be bound by these Terms of Service ("Terms"). If you do not agree to all of these Terms, you must not use the Service. These Terms constitute a legally binding agreement between you and the operator.

If you are using the Service on behalf of a company, organization, or other entity, you represent and warrant that you have the authority to bind that entity to these Terms.

You must be at least 18 years old to use the Service.

2. Service Description

AISEC provides AI-powered automated penetration testing and vulnerability scanning services. The Service uses proprietary AI models, automated tools, and proxy infrastructure to identify security vulnerabilities in web applications, APIs, and network infrastructure.

The Service is provided for informational and defensive security purposes only. AISEC does not guarantee the detection of all vulnerabilities, nor does it guarantee that systems tested are secure after scanning. Security testing is inherently limited and point-in-time — new vulnerabilities may be introduced at any moment.

3. Authorization & Domain Verification

Before any scan can be initiated, you MUST verify ownership of the target domain by adding a DNS TXT record to your domain's registrar in the format: aisec-verify=your-unique-token. This record is checked automatically before every scan. Scans will not proceed without a valid verification record.

You represent and warrant that:

• You are the owner of, or have explicit written authorization from the owner of, all systems you scan
• You have added the required DNS TXT verification record to prove domain ownership
• Your authorization to test remains valid for the duration of each scan
• You have notified all relevant stakeholders (hosting providers, cloud vendors, etc.) of the testing
• You accept full legal responsibility for all scanning activities performed under your account
• You will not remove the verification record to bypass authorization checks

CONSENT BY DNS VERIFICATION: By adding the aisec-verify DNS TXT record to your domain, you explicitly consent to and acknowledge the following:

• You authorize AISEC to perform automated penetration testing, vulnerability scanning, and security assessments on the verified domain and its subdomains
• AISEC bears no liability for any damages, downtime, data loss, or disruptions that may result from security testing activities
• Scan results may contain false positives — findings should be independently verified before taking action
• The scan may not detect all vulnerabilities — a clean report does NOT guarantee your system is secure
• AISEC does not create, distribute, or publish exploits — proof-of-concept payloads are provided for verification purposes only and are included solely in your private reports
• AISEC does not store, sell, or distribute any data obtained during scanning to third parties
• The cost of testing may vary based on scan complexity, target size, number of modules, and infrastructure resources consumed
• All scan data is processed in accordance with our Privacy Policy — scan reports are accessible only to your account

AISEC reserves the right to request additional proof of authorization at any time. Failure to provide adequate proof may result in immediate account suspension. Attempting to circumvent the DNS verification system is a violation of these Terms and may be reported to law enforcement.

4. Prohibited Activities

The following activities are strictly prohibited and may result in immediate termination and legal action:

• Scanning any system without proper authorization from the system owner
• Using AISEC to conduct denial-of-service (DoS/DDoS) attacks
• Exploiting discovered vulnerabilities for unauthorized access, data theft, or any malicious purpose
• Sharing, selling, or disclosing vulnerability information to unauthorized parties or on public forums
• Circumventing, bypassing, or tampering with the domain verification system
• Using the Service to violate any applicable law, regulation, or third-party rights
• Reverse-engineering, decompiling, or attempting to extract our AI models, algorithms, or proprietary technology
• Reselling, sublicensing, or redistributing access to the Service
• Using the Service to scan critical infrastructure (power grids, hospitals, emergency services) without explicit engagement agreements
• Automating account creation or abusing credit systems

4a. Export Controls & Sanctions

The Service may not be used from or on behalf of entities in countries subject to comprehensive sanctions by the EU, US, or UN. You represent that you are not located in, or acting on behalf of, a sanctioned country or entity. AISEC reserves the right to restrict access from any jurisdiction at its sole discretion.

5. Credits, Billing & Subscriptions

The Service operates on a credit-based billing system. All prices are listed in euros (EUR). Credits are consumed during scanning operations based on the computational resources used. Payments are processed by Paddle.com Market Ltd ("Paddle"), which acts as our Merchant of Record. Paddle handles all payment processing, invoicing, sales tax, and VAT on our behalf. Your payment details are processed directly by Paddle — we do not store or have access to your card information. By making a purchase, you also agree to Paddle's Terms of Service.

• Credits are non-refundable and non-transferable between accounts
• Unused credits roll over on paid plans; Free plan credits reset monthly
• We reserve the right to modify pricing, credit allocations, and plan features with 30 days notice
• Failed or incomplete scans may still consume credits based on resources used
• You are responsible for monitoring your credit usage

Subscription cancellations take effect at the end of the current billing period. No partial refunds are provided for unused portions of a billing period.

5a. Refund Policy

Credit purchases and subscription payments are generally non-refundable. However, you may request a refund within 14 days of purchase if no credits have been consumed. To request a refund, contact [email protected].

• Unused credit purchases: refundable within 14 days
• Subscription fees: refundable within 14 days if no scans were initiated
• Partially consumed credits: not eligible for refund
• Refunds are processed to the original payment method within 5-10 business days

5b. Free Plan

The Free plan provides 10 credits per month at no cost. Free plan usage is subject to fair use limits. We reserve the right to suspend or limit Free plan accounts that show signs of abuse, including but not limited to:

• Creating multiple accounts to accumulate free credits
• Automated or scripted account creation
• Using free credits for commercial security consulting without a paid plan

6. Intellectual Property

All intellectual property rights in the Service, including but not limited to AI models, algorithms, scanning techniques, software, documentation, and branding, are and remain the exclusive property of AISEC. Nothing in these Terms grants you any rights to our intellectual property except the limited right to use the Service as described herein.

You retain ownership of your scan data and reports generated by the Service. You grant AISEC a limited, non-exclusive license to process your data solely for the purpose of providing the Service and improving our AI models (in anonymized, aggregated form only).

7. Disclaimer of Warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ACCURACY.

WITHOUT LIMITING THE FOREGOING, AISEC DOES NOT WARRANT THAT:

• The Service will detect all vulnerabilities in your systems
• The Service will be uninterrupted, timely, secure, or error-free
• Scan results will be accurate, complete, or reliable
• Any vulnerabilities found represent the full extent of security issues in your systems
• Remediation guidance provided will resolve all security issues
• The Service will not cause any disruption, downtime, or data loss in your target systems

YOU ACKNOWLEDGE THAT SECURITY TESTING INVOLVES SENDING POTENTIALLY DISRUPTIVE PAYLOADS TO YOUR SYSTEMS AND ACCEPT ALL RISKS ASSOCIATED WITH SUCH TESTING.

8. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL AISEC, ITS DIRECTORS, OFFICERS, EMPLOYEES, AGENTS, PARTNERS, OR AFFILIATES BE LIABLE FOR:

• Any indirect, incidental, special, consequential, or punitive damages
• Any loss of profits, revenue, data, goodwill, or business opportunity
• Any damages resulting from service interruptions, data loss, or system downtime
• Any damages resulting from unauthorized access to your account or data
• Any damages resulting from vulnerabilities that were not detected by the Service
• Any damages resulting from actions taken based on scan results or remediation guidance
• Any damages to third-party systems caused by your use of the Service

OUR TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING FROM OR RELATED TO THE SERVICE SHALL NOT EXCEED THE AMOUNT YOU PAID TO AISEC IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF CERTAIN DAMAGES. IN SUCH JURISDICTIONS, OUR LIABILITY SHALL BE LIMITED TO THE MAXIMUM EXTENT PERMITTED BY LAW.

9. Indemnification

You agree to indemnify, defend, and hold harmless AISEC, its directors, officers, employees, agents, and affiliates from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable attorney's fees) arising from or related to:

• Your use or misuse of the Service
• Your violation of these Terms or any applicable law
• Your violation of any rights of a third party
• Any scanning activity conducted under your account
• Any claim that your use of the Service caused damage to a third party
• Your failure to obtain proper authorization before scanning

10. Service Availability

We do not guarantee any specific uptime or availability of the Service. We may suspend or discontinue the Service (or any part thereof) at any time with or without notice. Scheduled maintenance windows will be communicated when possible but are not guaranteed.

We are not liable for any damages or losses resulting from service outages, degraded performance, or discontinuation of features.

11. Account Security

You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. You must notify us immediately of any unauthorized use of your account. AISEC is not liable for any loss or damage arising from your failure to protect your account credentials.

12. Data and Privacy

Our collection and use of your data is governed by our Privacy Policy, which is incorporated into these Terms by reference.

You are solely responsible for ensuring that your use of AISEC complies with applicable data protection laws (including GDPR, CCPA, and equivalent legislation) in your jurisdiction and the jurisdiction of the systems you scan.

13. Force Majeure

AISEC shall not be liable for any failure or delay in performing its obligations under these Terms due to circumstances beyond its reasonable control, including but not limited to acts of God, natural disasters, war, terrorism, riots, embargoes, acts of civil or military authorities, fire, floods, power outages, internet disruptions, cyberattacks on our infrastructure, or pandemics.

14. Governing Law & Disputes

These Terms shall be governed by and construed in accordance with the laws of Ukraine. For users residing in the European Union, mandatory consumer protection laws of your country of residence shall apply to the extent they provide greater protection.

Any dispute arising from or relating to these Terms or the Service shall first be attempted to be resolved through good-faith negotiation. If negotiation fails, the dispute shall be resolved by the competent courts of Ukraine, unless mandatory law requires otherwise.

15. Termination

We reserve the right to suspend or terminate your access to the Service at any time, without prior notice, for any reason, including but not limited to violation of these Terms, suspected unauthorized use, or non-payment.

Upon termination: (a) your right to use the Service ceases immediately; (b) any unused credits are forfeited; (c) we may delete your data in accordance with our retention policy; (d) Sections 6-9 and 14 shall survive termination.

16. Severability

If any provision of these Terms is found to be invalid, illegal, or unenforceable, the remaining provisions shall continue in full force and effect. The invalid provision shall be modified to the minimum extent necessary to make it valid and enforceable.

17. Entire Agreement

These Terms, together with the Privacy Policy and any applicable subscription agreement, constitute the entire agreement between you and AISEC regarding the Service. These Terms supersede all prior agreements, understandings, and communications, whether written or oral.

18. Changes to Terms

We may modify these Terms at any time by posting the updated Terms on our website. Material changes will be communicated via email or through the Service with at least 14 days notice. Continued use of the Service after the effective date of changes constitutes acceptance of the modified Terms. If you do not agree with the changes, you must stop using the Service.

19. Contact

Operator: FOP Stepanenko Stanislav Ruslanovych (ФОП Степаненко Станіслав Русланович), Ukraine.

For questions about these Terms, please contact us at: [email protected]