Legal
Terms of Use
The agreement between you and FILL THIS IN: registered company name for the use of Data Armour. Using the product means accepting it. If you are accepting it for a company, you are telling us you are allowed to bind that company, and “you” means both of you.
Last updated 17 September 2026
This page is not finished. It is still missing the registered company name, the registered office address, the grievance officer's name. Until those are filled in at app/lib/legal/company.ts, this page must not be treated as published. It should also be read by a lawyer qualified in India before it is.
1. What the product is
Data Armour runs automated security tests against websites, source code and APIs that you own or are authorised to test, and reports what it finds. It is a tool that assists a security assessment. It is not a certification, an audit, a penetration test signed off by a human, an insurance policy, or a statement that a system is secure.
We may change, add to or withdraw any part of the product. If we withdraw something you are paying for, we will tell you and refund the part you have not used.
2. Your account
- You must be 18 or older and able to enter a contract.
- What you tell us about yourself must be true, and kept true.
- Your credentials are yours to protect. Anything done through your account is treated as done by you, and you are responsible for it. Tell us at once if you think somebody else has access.
- One person, one account. Accounts are not to be shared, sold or transferred.
3. What you may test, and what you must not
This is the most important clause on this page. You may only run a test against a system you own, or that the owner has authorised you in writing to test. Adding a target and confirming you may test it in the product is a warranty by you that this is true. We rely on it, we have no practical way of checking it, and we are entitled to rely on it.
You must not use Data Armour to:
- Test, probe or scan any system you do not own or have not been authorised to test.
- Attack, overload or deny service to anything, ours or anybody else's.
- Use what a test finds to harm anybody, or to gain access to a system you are not entitled to access.
- Resell, white label or run the product as a service for other people without a written agreement with us.
- Copy, reverse engineer, scrape or benchmark the product, or use it to build a competing one.
- Get around a limit, a quota or a price, whether by script, by multiple accounts, or by any other means.
- Break any law that applies to you, including the Information Technology Act, 2000.
Testing a system without authorisation is a criminal offence in India and in most other places. We log every test, who started it and what it was pointed at. If we are asked about a test by a law enforcement agency or by the owner of a system, we will answer truthfully and we will give them those logs. Breaking this clause ends your account immediately, without notice and without refund.
4. Ours and yours
The product, the interface, the models and prompts behind it, the way it reports what it finds and everything else we made stay ours. Nothing in these terms gives you any right in them beyond the right to use the product while you are paying for it.
Your code, your targets, your configuration and the findings produced from them stay yours. You give us the permission we need to do the job: to store, copy and process them, and to pass them to the providers named in the Privacy Policy, for as long as it takes to run the product for you. We do not use your code or your findings to train models.
If you send us feedback, an idea or a bug report, we may use it without owing you anything for it.
5. Paying
- Tests are paid for in credits. What a test will cost is shown before it starts, and credits are held when it starts and settled against what it actually used.
- Prices are in the currency shown at checkout. Taxes are on top unless we say otherwise.
- Credits buy capacity on our testing infrastructure. They are not money, they cannot be transferred, and they cannot be exchanged for cash.
- We may change prices. A change never applies to credits you have already bought.
- If a payment fails or is reversed, we may suspend the account until it is settled.
- When and how a payment is refunded is in the Refunds and Cancellation Policy, which is part of these terms.
6. What we do not promise
A finding is a finding. The absence of one is not proof that nothing is there. Automated testing finds what it is able to find, and no tool, ours included, finds everything. You must not treat a clean report as a statement that a system is secure, and you must not represent it to anybody else as one. Deciding what to do about a finding, and whether the finding is right, is your decision and your responsibility.
The product is provided as it is and as it is available. To the extent the law allows, we make no warranty of any kind about it, express or implied, including any implied warranty of merchantability, fitness for a particular purpose, accuracy, or that it will be uninterrupted or error free. A test may fail, time out, miss something, or produce a finding that turns out on inspection to be wrong.
A test exercises a real system, which can slow it down or, rarely, disturb it. You choose what to point it at and when, and you are responsible for taking a backup and for choosing a sensible time. We are not responsible for the effect on your systems of a test you asked us to run.
Anything we mark as beta, preview or experimental is there to be tried, not relied on, and may change or disappear without notice.
7. Liability
To the extent the law allows, neither side is liable to the other for indirect, incidental, special or consequential loss, or for lost profits, lost business, lost opportunity, lost data, or the cost of substitute services, whether or not either side was told such loss was possible.
To the extent the law allows, our total liability to you for all claims taken together, whatever they are founded on, is limited to the amount you actually paid us in the three months before the claim arose.
Nothing here limits liability for fraud, for death or personal injury caused by negligence, or for anything else that cannot be limited by law.
Any claim under these terms must be brought within twelve months of the day you first knew of it, or not at all.
8. If we are sued because of what you tested
You will defend us, and cover our losses, damages, penalties and reasonable legal costs, for any claim, demand, investigation or proceeding brought against us that arises out of:
- a test you started against a system you did not own or were not authorised to test;
- the effect of a test you started on any system, yours or anybody else's;
- your breach of these terms or of any law;
- content, code or credentials you gave us that you had no right to give us.
We will tell you promptly about any such claim, and we will not settle it without asking you first. You may take over the defence, provided we approve the lawyer, and we can join in with our own at our cost.
9. Suspending and ending it
You can stop at any time by erasing your account from your profile, which is described in the Privacy Policy.
We may suspend or end an account, without notice where the reason makes notice unreasonable, if it breaks section 3, if it does not pay, if it puts our infrastructure or another customer at risk, or if the law requires us to stop serving it. Where we can give notice first, we will. We may also stop offering the product to everybody, with thirty days' notice and a refund of what is unused.
Sections 4, 6, 7, 8, 10 and this sentence survive the end of this agreement.
10. Law and disputes
These terms are governed by the laws of India. The courts at the place of our registered office have exclusive jurisdiction, and both sides agree to that. Before going to court, write to us: most things are settled faster that way.
11. The rest
- Changes. We may change these terms. If a change is material we will email you before it takes effect, and continuing to use the product after that is accepting it. The date at the top is when this last changed.
- Notices. Ours to you go to the email on your account and count as received the day they are sent. Yours to us go to support@deepsoch.ai.
- Assignment. We may transfer this agreement to a company that buys our business. You may not transfer it without our written consent.
- Force majeure. Neither side is in breach for a delay caused by something outside its reasonable control, including a failure at a provider we depend on.
- Severability. If a clause cannot be enforced, the rest still stands and that clause is read as narrowly as it needs to be to work.
- No waiver. Not enforcing something once does not mean giving it up.
- Whole agreement. These terms, the Privacy Policy and the Refunds and Cancellation Policy are the whole agreement between us, and replace anything said before.
- No partnership. Nothing here makes either side the other's agent, partner or employee.