Legal

Terms of Use

Last updated: September 2026

These Terms of Use ("Terms") constitute a legally binding agreement between you and TAYNOPIS ("TAYNOPIS", "we", "us" or "our") governing your access to and use of our website, platform, APIs and services (collectively, the "Service"). By accessing, registering for, or using the Service — whether as an individual, a company, or a representative of an organization — you acknowledge that you have read, understood, and agree to be bound by these Terms and our Privacy Policy. If you do not agree to these Terms, you must not access or use the Service.

These Terms apply unless you have entered into a separate written agreement with TAYNOPIS that expressly supersedes them.

1. About the Service and Nature of the Data

TAYNOPIS operates a threat intelligence platform that indexes and correlates information derived from infostealer logs and other compromised-data sources that are already publicly or clandestinely circulating, so that verified organizations and individuals can identify exposures affecting their own assets and take protective action.

Lawful purpose. The Service exists to enable defense, research and awareness — the same lawful purpose served by established commercial threat-intelligence providers. We do not create, commission, or cause the underlying compromise of data; we index data that criminals have already exposed, and make it actionable for prevention (credential resets, fraud monitoring, incident response, threat research). Access is limited to verified organizations and manually vetted researchers, is scoped and audited, and is licensed for informational and defensive use only.

You acknowledge and agree that:

  • the Service aggregates data originating from third parties over whom we exercise no control, and we are not the source or originator of such data;
  • the data is provided solely for defensive security purposes — exposure awareness, incident response, credential hygiene and risk assessment;
  • the absence of your data from our index does not mean your data has not been compromised elsewhere, and the presence of data in the index does not by itself establish that a specific incident occurred;
  • we do not guarantee that the Service identifies every leak, breach or compromise affecting you or your organization.

2. Eligibility and Acceptance

You must be at least 18 years old and capable of forming a binding contract. If you use the Service on behalf of a company or other legal entity, you represent and warrant that you are duly authorized to bind that entity to these Terms, and "you" refers to both you personally and to that entity.

TAYNOPIS is intended for use by verified organizations, security researchers and legitimate individual users. Access may be granted, refused, limited, suspended or terminated at our sole discretion, with or without notice and with or without stating reasons, including where we believe, in our sole judgment, that the Service is being or may be used in violation of these Terms, of any law or regulation, or in a manner adverse to our interests or those of our users.

Researcher accounts. Researcher access (full-index, token-metered) is granted manually after verification. Eligible applicants include security researchers employed by established cybersecurity companies, vetted independent investigative journalists, and accredited academic researchers. By applying you consent to identity and affiliation checks. Researcher access is licensed strictly for research, awareness and defensive purposes — threat analysis, attribution, statistics and publication of aggregate findings. It does not authorize, and you agree not to engage in, any access to third-party accounts or systems using data exposed through the Service.

3. Grant of Rights and Restrictions

Subject to your compliance with these Terms and full payment of any applicable fees, we grant you a limited, revocable, non-exclusive, non-transferable and non-sublicensable right to access and use the Service solely for your internal, lawful and defensive security purposes, and only to the extent necessary to monitor and investigate exposures affecting yourself, your organization or your verified domains.

You shall not, directly or indirectly:

  • use the Service for any unlawful purpose, or in violation of any applicable local, national or international law, regulation or sanction;
  • use the Service to access, view, aggregate, harvest or attempt to obtain data relating to individuals, domains or organizations other than those you are authorized to monitor;
  • use the Service to harass, dox, defame, discriminate against, stalk, threaten or otherwise harm any individual, or to infringe any privacy, intellectual property or other right of any person;
  • exploit the data obtained through the Service to commit, facilitate or further any criminal or malicious activity, including unauthorized access to any account, system or network (e.g., credential stuffing, account takeover, phishing or fraud);
  • reproduce, redistribute, publish, sell, sublicense, lease, lend, rent or otherwise provide access to the Service or any data obtained through it to any third party, whether commercially or not, except as expressly permitted in writing by us;
  • reverse engineer, decompile, disassemble or otherwise attempt to derive the source code, architecture or internal workings of the Service, or to circumvent any technical protection, access control, rate limit or usage restriction;
  • scrape, crawl, spider or use automated means (bots, scripts, headless browsers) to access the Service except through the officially documented API within your plan limits;
  • interfere with or disrupt the integrity, availability or performance of the Service, including by overloading, probing or attacking our infrastructure;
  • remove, obscure or alter any proprietary notice, marking or attribution contained in the Service or the data;
  • use the Service to develop, market or operate a product or service that competes with or is substantially similar to the Service, or for benchmarking purposes.

Any data you access or obtain through the Service remains subject to these Terms even after your subscription ends. Upon termination you must cease all use of the Service and delete all data obtained through it that is within your custody or control, to the extent permitted by law.

4. Account Registration, Verification and Security

  • You agree to provide accurate, current and complete information during registration and to keep it up to date.
  • Corporate accounts are manually reviewed and verified by our team. Domain ownership must be proven (e.g., via DNS TXT record) before domain-scoped data becomes available.
  • You are solely responsible for the confidentiality and security of your credentials, API keys and hardware security keys, and for all activity that occurs under your account.
  • You must notify us immediately at [email protected] of any suspected unauthorized access or use of your account.
  • We strongly recommend enabling two-factor authentication (FIDO2 hardware keys are supported) on every account.
  • Impersonating any person or entity, or misrepresenting your affiliation with any person or entity, is strictly prohibited.

5. Acceptable Use of Intelligence Data

Data obtained through the Service is made available to enable protective action only. Without limiting the generality of Section 3, you agree that any use of credentials, cookies, session tokens or other authentication material visible in the Service for the purpose of unauthorized access — to accounts, systems, networks or data — is strictly prohibited and may constitute a criminal offense in virtually every jurisdiction.

Source fingerprints. Log-source identifiers displayed by the Service (such as MD5 fingerprints of log file paths) are provided for correlation and triage purposes only. They do not grant, imply or enable any right of access to the underlying source files, their location, or their contents beyond what the Service explicitly exposes within your access tier.

Exports. When exporting data, hidden (unrevealed) values remain masked unless you expressly choose to reveal them; any such reveal is metered and billed in tokens as described in Section 6. Downloading an export does not entitle you to masked values you did not pay to reveal.

Where you act as an organization, you are responsible for ensuring that your personnel and contractors ("End Users") comply with these Terms, and for any acts and omissions of your End Users as if they were your own.

6. Fees, Subscriptions and Billing

  • Corporate subscriptions are billed on a monthly basis from the date of activation, unless otherwise stated in your order form or invoice.
  • Usage-based charges (such as per-record access tokens) are metered, deducted from your prepaid balance, and are non-refundable once consumed.
  • Token packs expire. Purchased token packs are valid for the period stated at purchase (typically 30 days). Unused tokens are forfeited at expiry and are non-refundable. Where multiple packs with different expiry dates are active, spending draws from the earliest-expiring pack first; this does not extend the validity of any other pack.
  • Enterprise tiers (e.g., logins-and-links monitoring, credentials monitoring) and any Custom plan scope, grouping, retention or pricing are quoted individually and set out in your order form; publicly stated prices are "from" prices without commitment.
  • All amounts are exclusive of taxes; you are responsible for any applicable VAT, sales, use or similar taxes.
  • Overdue amounts may accrue interest and may result in suspension of access after written notice.
  • You may cancel at any time with written notice; cancellation takes effect at the end of the current billing cycle. No refunds or credits are provided for partial periods or unused tokens, except where required by law.
  • We may change prices for upcoming renewal periods by giving notice (e.g., via the Service or email) in advance of the renewal.

7. Intellectual Property

The Service, including its software, indexes, correlations, analytics, documentation, interfaces, trademarks and design, is owned by TAYNOPIS and its licensors and is protected by intellectual property laws. Except for the limited rights expressly granted in these Terms, no rights or licenses are granted to you, whether by implication, estoppel or otherwise.

Data accessible through the Service originates from third parties and remains the responsibility of the parties from whom it originated. We claim no ownership over such underlying data; your use of it is governed by these Terms and applicable law.

8. Third-Party Services and Links

The Service may contain links to or interoperate with third-party websites, services and tools. These are provided for convenience only. We do not control, endorse or warrant third parties and are not responsible for their content, policies, practices or availability. Your use of third-party services is at your own risk and subject to their terms.

9. Disclaimer of Warranties

THE SERVICE AND ALL DATA, REPORTS AND MATERIALS PROVIDED THROUGH IT ARE PROVIDED STRICTLY "AS IS", "AS AVAILABLE" AND "WITH ALL FAULTS", FOR INFORMATIONAL PURPOSES ONLY. TO THE MAXIMUM EXTENT PERMITTED BY LAW, TAYNOPIS DISCLAIMS ALL WARRANTIES AND REPRESENTATIONS OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, ACCURACY, NON-INFRINGEMENT, AND ANY WARRANTY THAT THE SERVICE WILL BE UNINTERRUPTED, TIMELY, ERROR-FREE OR SECURE.

We do not warrant the accuracy, completeness, reliability, currency or fitness for any particular purpose of any data made available through the Service. Intelligence data is inherently probabilistic and may contain errors, omissions, duplicates or outdated entries. Nothing in the Service constitutes legal, financial, regulatory or professional advice.

10. Limitation of Liability

TO THE FULLEST EXTENT PERMITTED BY LAW, IN NO EVENT SHALL TAYNOPIS, ITS OWNERS, DIRECTORS, OFFICERS, EMPLOYEES, CONTRACTORS, AFFILIATES OR SUPPLIERS BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, GOODWILL, DATA, BUSINESS OR USE, ARISING OUT OF OR IN ANY WAY CONNECTED WITH THESE TERMS OR THE USE (OR INABILITY TO USE) OF THE SERVICE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES AND REGARDLESS OF THE LEGAL THEORY (CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY OR OTHERWISE).

BECAUSE SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF CERTAIN DAMAGES, SOME OF THE ABOVE LIMITATIONS MAY NOT APPLY TO YOU. IN SUCH JURISDICTIONS, OUR AGGREGATE LIABILITY FOR ALL CLAIMS SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNT OF FEES YOU PAID TO US IN THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM, OR (B) ONE HUNDRED US DOLLARS (USD 100).

You accept and assume all risk of use of the Service and any data obtained through it, and agree to independently verify any information before acting on it. We are not responsible for actions taken — or not taken — by you or any third party in reliance on the Service.

11. Indemnification

You agree to indemnify, defend and hold harmless TAYNOPIS, its affiliates and their respective officers, directors, employees and agents from and against any and all claims, demands, actions, liabilities, losses, damages, costs and expenses (including reasonable attorneys' fees) arising out of or relating to: (a) your access to or use (or misuse) of the Service or any data obtained through it; (b) your violation of these Terms or of any law or regulation; (c) your infringement or misappropriation of any right of a third party; or (d) any dispute between you and any third party in connection with data obtained through the Service.

12. Term, Suspension and Termination

  • These Terms take effect when you first access or use the Service and continue while you use it.
  • We may suspend or restrict your access immediately, with or without notice, for suspected violation of these Terms, non-payment, security incidents, legal obligations, or to protect the Service, our users or third parties.
  • You may stop using the Service at any time; corporate customers may terminate as described in Section 6.
  • Upon termination: all rights granted to you cease; you must stop all use of the Service and delete data obtained through it (subject to legal retention requirements); and Sections 1, 3 (as to data), 5–7, 9–11 and 13–18 survive.
  • Termination does not limit any other right or remedy available to us.

13. Modification of the Service and of These Terms

We may modify, improve, add or remove features, limits, data sources or any part of the Service at any time, with or without notice, including for operational, security or legal reasons. Continuation of use after changes are posted constitutes acceptance of the modified Terms. It is your responsibility to review the Terms periodically.

14. Privacy

Our collection and handling of personal data is described in the Privacy Policy, which is incorporated into these Terms by reference.

15. Force Majeure

We shall not be liable for any failure or delay in performance caused by events beyond our reasonable control, including internet or utility outages, hardware or software failures of third parties, natural disasters, epidemics, war, terrorism, civil unrest, strikes, government action or the illegal acts of third parties.

16. Governing Law and Dispute Resolution

These Terms and any dispute arising out of or relating to them or to the Service are governed by the laws of the jurisdiction in which TAYNOPIS is established, without regard to conflict-of-law principles. The United Nations Convention on Contracts for the International Sale of Goods does not apply. The parties shall first attempt to resolve any dispute through good-faith negotiation; any remaining dispute shall be brought exclusively before the competent courts of that jurisdiction, and you consent to their personal jurisdiction.

17. Export Controls and Sanctions

You represent that you are not named on any restricted-party or sanctions list and that you will not access or use the Service in violation of any applicable export control or sanctions laws.

18. Miscellaneous

  • Entire Agreement: these Terms (with the Privacy Policy) are the entire agreement between the parties regarding the Service and supersede all prior or contemporaneous understandings.
  • Assignment: you may not assign or transfer these Terms without our prior written consent; we may assign them freely (e.g., in a merger or acquisition).
  • Severability: if any provision is held invalid or unenforceable, it shall be modified to the minimum extent necessary or severed, without affecting the remainder.
  • No Waiver: our failure to enforce any right is not a waiver of that or any other right.
  • Notices: we may give notice via the Service, by email to your registered address, or by other reasonable means.
  • Independent Contractors: nothing herein creates a partnership, joint venture, agency or employment relationship.
  • Language: these Terms may be provided in multiple languages; in case of conflict, the English version prevails.

19. Contact

Questions about these Terms may be directed to [email protected].