Terms of Use | DarkWebSonar

These Terms of Use ("Terms") govern your access to and use of the services, websites, APIs, and related software provided by DarkWebSonar, LLC (collectively, the "Service," "we," "us," or "our"). By accessing or using the Service, you agree to be bound by these Terms. If you do not agree, do not use the Service.

1. Eligibility and Account Registration

1.1 Eligibility. You must be at least the age of majority in your jurisdiction and capable of entering into a binding contract to use the Service.

1.2 Account. You must provide accurate account information and keep it updated. You are responsible for all activities that occur under your account. Keep your credentials secure and notify us promptly of any unauthorized use.

1.3 Account Sharing. Account credentials, API keys, and access tokens are issued to a single subscribing entity and may not be shared with, transferred to, or used by third parties outside your organization. Each API key or access token may only be used by the entity to which it was issued. Sharing credentials with external parties—including contractors, partners, affiliates, or customers—requires a separate subscription or written authorization from us.

1A. Scope of Operations; Data Sourcing; Purpose

(a) Scope of Operations. DarkWebSonar does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.

(b) Data Sourcing and Integrity. The Service aggregates publicly visible threat intelligence from dark web, deep web, and surface web sources—including data breaches, leaks, defacements, DDoS attacks, and other cyber threat activity. DarkWebSonar does not create, originate, or alter any threat data.

(c) Unverified Claims. Threat alerts in the Service reflect claims made by third‑party threat actors. Unless otherwise stated, these claims are unverified and should not be treated as confirmed incidents.

(d) Purpose. The Service is provided to support public awareness, legitimate research, and cyber‑resilience.

(e) No Stolen Data. No stolen personal or confidential data is collected or distributed via the Service. DarkWebSonar operates in accordance with responsible disclosure and ethical threat intelligence principles.

2. Description of the Service

2.1 Overview. The Service provides threat intelligence, monitoring, and related capabilities that may include collecting or surfacing information from third‑party sources (e.g., forums, paste sites, marketplaces, and public or semi‑public blogs) and notifying you about potential exposures affecting your organization, domains, or assets.

2.2 Third‑Party Content. We do not control or verify third‑party content and make no representations regarding its accuracy, completeness, or legality. You are solely responsible for your use of such content and any actions you take based on it.

2.3 Temporary Caching and Excerpts. To deliver notifications and context, the Service may temporarily cache, transform, or display limited excerpts or metadata from third‑party sources.

2A. Data Categories and Roles

(a) Customer Data means data you or your authorized users submit to the Service (e.g., account details, monitored domains, queries, alert settings, tickets, or uploads). You retain all rights in Customer Data.

(b) Service Data means logs, telemetry, diagnostics, product usage metrics, and derived or aggregated data generated by operation of the Service — including usage telemetry collected within the authenticated application (e.g., via first-party analytics tooling) — which is necessary for us to operate, secure, and improve the Service under this contract. We own Service Data and may use it to operate, secure, analyze, and improve the Service.

(c) Third‑Party Source Data means content retrieved from external sources, which we do not control or verify. We provide access solely to support the Service's features.

(d) Data Protection Roles. For Customer Data, you act as "controller" (or equivalent) and we act as "processor," except that we act as "controller" for Service Data and for any processing where we determine purposes and means (e.g., security analytics, billing, and compliance).

(e) Privacy Policy and DPA. Processing is further described in our Privacy Policy and, where applicable, our Data Processing Addendum ("DPA"), which are incorporated by reference. Where required by law, we will execute a DPA upon request.

(f) Cookies and Tracking. The Service uses cookies and similar technologies as described in our Privacy Policy. Product usage telemetry collected within the authenticated, logged-in application is necessary Service Data under Section 2A(b) and is not subject to the public-page cookie consent banner. Where required by law, we will obtain consent before setting non‑essential cookies on our public, unauthenticated pages.

(g) Sub-processors. We may engage third-party sub-processors to assist in delivering the Service (e.g., cloud infrastructure, analytics providers). A current list of sub-processors is available upon request. We remain responsible for our sub-processors' compliance with obligations materially equivalent to those in these Terms.

3. Your Responsibilities

3.1 Configuration. You are responsible for configuring monitored entities (e.g., domains, email addresses, brands, assets) and setting alert thresholds appropriate for your use case.

3.2 Compliance. You are responsible for ensuring your use of the Service complies with applicable laws, industry standards, and internal policies.

3.3 Systems. You must provide and maintain compatible hardware, software, connectivity, and security controls to access the Service.

4. Access and License

4.1 License. Subject to these Terms, we grant you a limited, non‑exclusive, non‑transferable license to access and use the Service during your subscription term as follows:

(a) All plans. You may access and use the Service for your own internal business purposes — meaning use by your own employees and authorized users for the benefit of your own organization.

(b) Managed service delivery (Pro plan and above). If you provide security, IT, or technology services to third-party clients as a core part of your business, you may additionally use the Service to monitor, configure, and generate reports or alerts on behalf of those clients, and share such reports or alerts directly with them, provided that: (i) you retain sole access to your account and credentials; (ii) you do not grant your clients direct access to the Service or any API; and (iii) the Service is not embedded into or presented as a feature of any product you offer. This permitted use does not authorize embedded integrations, white-labeling, or API-powered third-party-facing products, which require an Enterprise plan or separate written agreement under Section 4A.3.

4.2 Restrictions. You may not:

(a) reverse engineer, decompile, or attempt to derive the source code of the Service;

(b) copy, modify, or create derivative works;

(d) access or use the Service for competitive analysis, competitive evaluation, benchmarking, or research purposes by competing entities;

(e) replicate, imitate, or reverse engineer features, functionality, or methodologies of the Service;

(f) use automated means to extract, scrape, or harvest data from the Service except through our officially provided API methods and within published rate limits;

(g) remove proprietary notices;

(h) redistribute, resell, or commercially exploit any data, alerts, intelligence, or outputs obtained from the Service—in whole or in part—to third parties, whether directly or as a component of another product or service, except that sharing reports or alerts with your own clients is permitted under Section 4.1(b);

(i) embed, integrate, or white-label the Service or any data obtained through it into a product or service offered to third parties, unless expressly authorized under an Enterprise plan or separate written agreement with us;

(j) use any data or outputs from the Service to train, fine-tune, benchmark, or evaluate any artificial intelligence or machine learning model, or to build datasets for such purposes; or

(k) use the Service in a manner that imposes an unreasonable or disproportionately large load on our infrastructure, as determined by us in our reasonable discretion.

4A. API Access

4A.1 General. Use of any API is subject to published documentation, authentication, and rate limits. We may monitor API usage and throttle, suspend, or revoke keys that (i) exceed limits, (ii) degrade Service stability, or (iii) are used in breach of these Terms.

4A.2 API Use — Pro Plan and Below. API access provided under the Pro plan and below is for use by your organization only. You may not use the API to (i) deliver data or intelligence programmatically to external customers or end users; (ii) power any third-party-facing application, dashboard, or automated pipeline; or (iii) redistribute raw API query results outside your organization. For the avoidance of doubt, manually sharing reports or alerts generated through the Service with your clients is permitted under Section 4.1(b) and does not require Enterprise access.

4A.3 Commercial and Embedded Integrations. If you intend to integrate the API into a product or service delivered to third parties—including customers, partners, or end users—you must be subscribed to an Enterprise plan or hold a separate written OEM or reseller agreement with us. Unauthorized commercial integrations are a material breach of these Terms and may result in immediate suspension or termination.

4A.4 Audit Rights. We reserve the right to audit API usage patterns to verify compliance with these Terms. You agree to cooperate with reasonable audit requests and to provide documentation of your integration architecture upon written request.

4A.5 Attribution. Where we expressly authorize embedded or integrated use under an Enterprise plan or written agreement, you must display a clear attribution to DarkWebSonar as the data source in any end-user-facing interface or report, in the form we specify.

5. Acceptable Use Policy

You may not use information obtained from the Service for any unlawful, unethical, or malicious purposes, including but not limited to fraud, identity theft, harassment, or exploitation of vulnerabilities. You will not use the Service to: (a) violate any law; (b) infringe intellectual property, privacy, or other rights; (c) upload malware or perform security testing without authorization; (d) attempt to gain unauthorized access to any system; (e) send spam or abusive content; or (f) interfere with or disrupt the Service.

5B. Compliance Assurances

You represent and warrant that: (i) you have authority and a lawful basis to monitor the organizations, domains, or assets you configure in the Service; (ii) your use of any intelligence or notifications complies with applicable laws (including computer misuse, anti‑hacking, privacy, employment, and consumer protection laws); (iii) you will not use the Service to target individuals or to facilitate unauthorized access to any system; and (iv) you will comply with all applicable sanctions, embargo, and export control laws and will not use the Service in, or for the benefit of, any restricted person or jurisdiction.

5C. Government and Law‑Enforcement Requests

We may respond to lawful requests for information. Where legally permitted, we will provide you with notice to allow you to seek protection. Nothing in this Section limits our obligations under the DPA (if applicable).

5A. Security and Confidentiality

(a) Security. We implement reasonable and appropriate technical and organizational measures designed to protect Customer Data against unauthorized access, use, or disclosure.

(b) Confidentiality. Each party will (i) protect the other party's Confidential Information with at least the same degree of care it uses for its own confidential information (but in no event less than reasonable care), and (ii) use it only as necessary to perform under these Terms. "Confidential Information" means non‑public information disclosed by a party that is designated confidential or that should reasonably be understood to be confidential given the nature of the information and the circumstances of disclosure. Confidential Information excludes information that is public without breach, was known without duty, is independently developed, or is rightfully received from a third party without duty of confidentiality.

(c) Disclosure. A party may disclose Confidential Information if required by law, subpoena, or court order, provided it gives prompt notice where legally permitted.

(d) Security Incident Notification. In the event we become aware of a confirmed security incident that materially affects the confidentiality, integrity, or availability of Customer Data, we will notify you without undue delay and in any event within seventy-two (72) hours of confirmation, to the extent permitted by law. Notification will be provided to the email address associated with your account. You agree to notify us promptly at security@darkwebsonar.io if you become aware of any unauthorized access to or use of your account credentials or API keys.

6. Fees and Payment

6.1 Fees. You agree to pay the fees described at purchase or in an Order Form. Unless otherwise stated, fees are non‑refundable.

6.2 Term and Renewal. Subscriptions renew automatically for successive periods equal to the initial term unless canceled in accordance with the Service's cancellation process or your Order Form.

6.3 Late Payments. We may suspend or terminate access for unpaid amounts after reasonable notice.

6.4 Taxes. Fees are exclusive of taxes. You are responsible for taxes, duties, and similar charges (excluding our income taxes).

6.5 Price Changes. We may change fees upon at least 30 days' notice, effective upon the next renewal.

6.6 Trials. If you register for a free trial, access will convert to a paid subscription at the end of the trial if you do not cancel; applicable fees will be disclosed at signup.

7. Intellectual Property; Feedback

7.1 Our IP. We (and our licensors) own all rights, title, and interest in and to the Service, including software, interfaces, designs, documentation, and the compilation, structure, and presentation of threat intelligence data made available through the Service. No rights are granted to you except as expressly set forth in these Terms.

7.2 Customer Data License. You retain all rights in Customer Data. You grant us a worldwide, non‑exclusive, royalty‑free license to host, process, transmit, and display Customer Data solely to provide, maintain, secure, and improve the Service and to comply with law. This license terminates when Customer Data is deleted from our systems, except for permitted backups and as otherwise required by law.

7.3 Usage Data. We may use Service Data and de‑identified or aggregated data for analytics, benchmarking, security, and to improve the Service, provided no Customer Data is disclosed in identifiable form.

7.4 No Implied License. Nothing in these Terms grants you any right to use our trademarks, trade names, logos, or other brand features without our prior written consent, except as expressly permitted in writing for authorized integrations under Section 4A.5.

7A. Feedback

You grant us a perpetual, irrevocable, worldwide, royalty‑free license to use suggestions, ideas, or feedback you provide to improve the Service with no obligation to you.

8. Third‑Party Services and Content

The Service may enable access to third‑party services, content, or sites. Your use of third parties is subject to their terms and privacy policies. We are not responsible for third‑party services and disclaim all liability related thereto.

9. Disclaimers; Beta Features

9.1 No Warranties. THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON‑INFRINGEMENT.

9.2 No Guarantee of Results. Threat intelligence and monitoring inherently involve unpredictable third‑party behavior. We do not guarantee that the Service will detect or prevent all threats, exposures, or incidents.

9.3 No Reliance for Legal or Compliance Purposes. Intelligence surfaced by the Service is intended as informational input for security teams and does not constitute legal advice, regulatory compliance certification, or confirmation of any specific security posture. You are solely responsible for decisions made based on Service outputs.

9A. Beta Features

We may offer features labeled alpha, beta, preview, or similar ("Beta Features"). Beta Features are provided AS IS, may be modified or discontinued at any time, and are excluded from any service level or support commitments.

9B. Service Availability; Force Majeure

We strive for high availability but do not guarantee uninterrupted Service. Neither party is liable for delays or failures caused by events beyond its reasonable control (including internet or widespread outages, DDoS, acts of God, war, labor disputes, governmental actions, and failures of third‑party providers).

10. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT WILL EITHER PARTY BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS INTERRUPTION, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

EXCEPT FOR (A) YOUR PAYMENT OBLIGATIONS; (B) EITHER PARTY'S BREACH OF CONFIDENTIALITY OR ACCEPTABLE USE; OR (C) YOUR INDEMNITY OBLIGATIONS, EACH PARTY'S AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THE SERVICE SHALL NOT EXCEED THE FEES PAID OR PAYABLE BY YOU FOR THE SERVICE IN THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO LIABILITY.

Some jurisdictions do not allow certain limitations; in such cases, the limitations apply to the fullest extent permitted by law.

11. Indemnification

11.1 By You. You will defend, indemnify, and hold us harmless from and against any third‑party claims, damages, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from your (a) use of the Service in violation of these Terms or law; (b) Customer Data; (c) infringement or misappropriation of third‑party rights by you or your users; or (d) unauthorized redistribution, resale, or commercial exploitation of Service data or outputs.

11.2 Optional IP Indemnity by Us (Enterprise Plans). For paid enterprise plans where expressly stated in an Order Form, we will defend you against any third‑party claim that the Service, as provided by us, directly infringes a valid intellectual property right, and we will pay damages finally awarded (or settlement approved by us), provided that you promptly notify us, give us sole control of the defense, and cooperate. We may (i) modify the Service; (ii) replace the allegedly infringing component; or (iii) terminate affected subscriptions and refund any prepaid, unused fees. This Section does not apply to claims based on combinations with non‑our products, modifications not made by us, or use not in accordance with documentation.

12. Suspension and Termination

12.1 Suspension and Termination by Us. We may suspend or terminate your access immediately if you materially breach these Terms, including for non‑payment, security risks, misuse, or unauthorized redistribution of Service data. We may also suspend access (without terminating) if we reasonably suspect a violation is under investigation.

12.2 Termination by You. You may terminate at any time as provided in your account or Order Form.

12.3 Effect of Termination. Upon termination, your license ends and you must immediately cease all use of the Service and destroy or delete any cached or stored Service data in your possession. We may retain limited backups and Service Data as permitted by law and our retention policies. We delete unconfirmed signups after 14 days. Confirmed accounts with no active entitlement are deleted after 90 days of inactivity, after a 14-day warning email. Details are in the Privacy Policy.

12.4 Survival. Sections 4.2, 5, 5A, 7.1, 7.4, 10, 11, 12.3, 15, and any accrued payment obligations will survive termination.

13. Export, Sanctions, and Anti‑Corruption

You represent that you are not a restricted party and will not use the Service in a restricted jurisdiction or for a prohibited end‑use. You will comply with all applicable export control, sanctions, and anti‑corruption laws.

14. Changes to the Service or Terms

We may modify the Service or these Terms from time to time. If changes are material, we will provide notice (e.g., via the Service or email) at least 14 days before the changes take effect. Continued use after the effective date constitutes acceptance. If you do not agree, you must stop using the Service before the effective date.

15. Governing Law; Dispute Resolution; Miscellaneous

15.1 Governing Law; Venue. These Terms are governed by the laws of the State of Wyoming, without regard to conflict‑of‑laws rules. The state and federal courts located in Wyoming shall have exclusive jurisdiction, and the parties consent to personal jurisdiction and venue there, except that either party may seek injunctive relief in any court of competent jurisdiction.

15.2 Order of Precedence. If you have a separate signed agreement or Order Form with us, that document controls to the extent of conflict with these Terms.

15.3 Assignment. You may not assign these Terms without our prior written consent, except to an affiliate or in connection with a merger, acquisition, or sale of assets with written notice to us. We may assign these Terms without consent. Any unauthorized assignment is void.

15.4 Notices. We may provide notices via the Service, email, or to your account address. Notices to us must be sent to legal@darkwebsonar.io.

15.5 Severability; Waiver. If any provision is held invalid, the remainder will remain in effect. Failure to enforce any provision is not a waiver.

15.6 Entire Agreement. These Terms, together with the Privacy Policy (including the cookies section at /privacy-policy#cookies), DPA (if applicable), and applicable Order Form(s), constitute the entire agreement between the parties and supersede all prior agreements concerning the Service.

15.7 Injunctive Relief. You acknowledge that a breach of Sections 4.2, 4A, or 7 may cause irreparable harm for which monetary damages would be an inadequate remedy, and that we are therefore entitled to seek equitable relief, including injunctive relief, without the requirement to post bond or other security.

16. Contact

If you have questions about these Terms, contact us at legal@darkwebsonar.io.

Last updated: July 2026