1. Acceptance
By creating an account or using the Service, you agree to these Terms.
2. Service description
SynaptoSec provides the AI Firewall and Training Data Audit security services. The AI Firewall is an API-based proxy service that scans inbound prompts, agentic tool interactions, and outbound responses for security threats. Training Data Audit scans pre-training datasets for backdoors, data poisoning, and trigger patterns.
A detection aid, not a guarantee. The Service is provided "as is." We do not warrant that the Service will detect all security threats, including zero-day attacks, novel attack vectors, or attacks that bypass all known detection methods. We also do not warrant that the Service will never block a legitimate request (false positives). No security product can guarantee 100% detection.
3. Account & API keys
Accounts are created with Google sign-in (OpenID Connect) or GitHub sign-in. At first sign-in you accept the Terms of Service (v0.2-draft) and the Privacy Policy (v0.2-draft); the acceptance is recorded in your account's audit trail.
Manual key issuance. API keys are issued manually by our team after you request one in the cabinet. Each workspace receives one key on the free plan.
The secret is shown once. When a key is provisioned, its secret is revealed exactly once in the cabinet. Store it securely: afterwards only the key prefix remains on our side, and the secret is never stored in your browser.
Your responsibility. You are responsible for maintaining the confidentiality of your API keys and for all activity that occurs under your account.
Compromise and revocation. Notify us immediately at synaptosec@gmail.com if you suspect unauthorized access. A key reported as compromised is revoked manually by our team, so revocation takes effect after a delay — treat the secret as exposed until we confirm the revocation.
4. Acceptable use
You agree not to:
- Use the Service for any illegal purpose.
- Reverse engineer, decompile, or attempt to extract source code.
- Resell the Service without an explicit written reseller agreement.
- Use the Service to attack, scan, or disrupt third-party systems.
5. Payment & billing
During early access there is nothing to pay: access is provisioned manually and no paid subscriptions are active. Payments are not live during early access. When billing launches, payments will run through Stripe as payment processor: subscriptions will be billed monthly, and overage usage will be billed at the published rate for your tier. All prices exclude VAT. No refunds are issued for partial months.
[DRAFT — pending the owner's commercial decision (docs/legal/OPEN_FACTS.md #8): whether a refund guarantee for first-time customers applies from the launch of paid plans, and for how long. The Refund and Cancellation Policy will carry the final rule; no amounts or periods are committed here.]
6. Service level
Early-access services are provided without any service-level agreement. Availability during early access is best-effort. Formal SLA commitments with uptime credits apply to Enterprise tier agreements only upon general availability.
7. Suspension
We may suspend access immediately where we reasonably believe the Service is being misused, a key is compromised, or suspension is needed to protect the Service or other customers. We notify you of the reason and the expected duration as soon as practicable.
8. Limitation of liability
[PLACEHOLDER for the lawyer: exclusion of indirect damages and the liability cap. No cap or exclusion is agreed in this draft.]
9. Termination
You may cancel at any time. We may terminate for material breach of these Terms with [PLACEHOLDER: notice period] notice. On termination your account data is handled per the Privacy Policy (deletion window).
10. Intellectual property and feedback
The Service and its documentation remain our property. You keep all rights to your content. Feedback you send us may be used to improve the Service without obligation or attribution [DRAFT: confirm the feedback clause with counsel].
11. Business customers
The Service is offered to business customers (professionals) only. Consumer-specific rights (including the 14-day withdrawal right of Book VI of the Belgian Code of Economic Law) do not apply. [DRAFT: have counsel confirm the B2B characterization.]
12. Governing law and jurisdiction
[PLACEHOLDER for the lawyer: governing law and competent courts. Belgian law and the courts of Antwerp are the current expectation, but this is not agreed in this draft.]
13. Changes
We notify users at least 30 days before any material change takes effect. Every change bumps the version at the top of this document and is listed in the .