Terms of Service

• "Services" means the DarkStream platform, the website, and any related monitoring, alerting, and cybersecurity services we provide.
• "DarkStream" means our credential-exposure and leak-monitoring platform.
• "Verified Asset" means a digital asset, such as a domain, that you have registered and whose ownership or control you have demonstrated to our satisfaction.
• "Exposure Data" means data we surface to you indicating that an identifier associated with a Verified Asset has appeared in a breach, leak, or other source we monitor.
• "Credits" means the units consumed to perform certain actions on the platform, as described in your plan.
• "Subscription" means a recurring paid plan, for example Essential, Business, or Enterprise.

Registration requires a corporate email address; accounts created with public email providers are not permitted. You are responsible for maintaining the confidentiality of your login credentials and for all activity under your account. You must promptly notify us at legal@ictlcorp.com of any suspected unauthorised access.

DarkStream aggregates and surfaces breach and leak intelligence relevant to a customer's Verified Assets, and provides monitoring, alerting, and reporting features described on our pricing page and in your order. We may update, add to, or remove features of the Services from time to time, provided that we will not materially reduce core functionality of an active paid plan without reasonable notice.

Access to Exposure Data is limited to Verified Assets. We enforce this scoping server-side. We do not permit, and you must not attempt, searching for or accessing exposure data relating to assets you have not verified. We may request additional evidence of ownership or control at our discretion, including for government or institutional customers, and may suspend access pending verification.

Historical Exposure Data existing at the time your account is verified is unlocked using Credits, consumed automatically as data is revealed. New Exposure Data arising after your baseline verification timestamp is delivered through alerts at no Credit cost, for the duration of an active Subscription. If your Subscription lapses or your Credits are exhausted, previously unlocked data may be presented in masked or teaser form until reactivation.

Subscriptions renew automatically for successive periods matching your billing cycle, monthly or annual, unless cancelled before the renewal date. You may cancel at any time through the console or by contacting legal@ictlcorp.com; cancellation takes effect at the end of the current billing period, and we do not provide refunds for partial periods except where required by law. Credit top-ups are one-time purchases and are non-refundable once Credits have been consumed. Payments are processed by our third-party payment provider; we do not store full card numbers.

You must not, and must not permit others to, use the Services to attempt unauthorised access to any account or system, to circumvent Verified Asset scoping, to resell or sublicense access without our written consent, to reverse engineer the platform, or to use the Services for any unlawful purpose. We may suspend or terminate accounts that violate this section.

By unlocking Exposure Data, you confirm that you are acting on behalf of, and with the authority of, the organisation that owns or controls the associated Verified Asset, and that you will use the data solely for legitimate defensive and remediation purposes, such as securing accounts, rotating credentials, and investigating exposure. You must not use unlocked data to access any account, system, or service without authorisation. You are solely responsible for how your organisation uses data once it has been unlocked, and we may suspend or terminate your account if we become aware of misuse.

We and our licensors retain all rights in the Services, including the platform, software, and underlying methodology. Subject to these Terms, we grant you a limited, non-exclusive, non-transferable licence to access and use the Services during your Subscription for your internal business purposes.

Each party will protect the other's confidential information with reasonable care and use it only to perform its obligations under these Terms. This does not apply to information that is public, independently developed, or required to be disclosed by law.

The Services are provided on an "as is" and "as available" basis. Exposure Data is sourced from third-party breach and leak sources and open-source intelligence; we do not guarantee its completeness, accuracy, or timeliness, and the free leak-check tool is a preliminary indicator only, not a comprehensive security audit. To the maximum extent permitted by law, we disclaim all implied warranties, including merchantability, fitness for a particular purpose, and non-infringement.

To the maximum extent permitted by law, neither party will be liable for indirect, incidental, special, consequential, or punitive damages, or for loss of profits, revenue, or data, arising out of or relating to these Terms. Each party's total liability arising out of or relating to these Terms will not exceed the amounts paid by the Customer for the Services in the twelve months preceding the claim, except for liability arising from a party's confidentiality breach, wilful misconduct, or gross negligence, or for amounts owed under Section 6.

You agree to indemnify and hold us harmless from claims arising out of your misuse of the Services, your breach of these Terms, or your violation of applicable law, including any unauthorised use of unlocked Exposure Data.

These Terms remain in effect while you maintain an account. We may suspend or terminate your account for breach of these Terms, non-payment, or as required by law, with notice where reasonably practicable. Upon termination, your right to access the Services ends, and provisions that by their nature should survive, including confidentiality, disclaimers, limitation of liability, and indemnification, will survive.

These Terms are governed by the laws applicable in the Dubai International Financial Centre (DIFC), without regard to conflict-of-law principles. The courts of the DIFC have exclusive jurisdiction over any dispute arising out of or relating to these Terms, except where mandatory local law provides otherwise.

These Terms, together with any applicable order form or statement of work, the Privacy Policy, and the DPA, constitute the entire agreement between the parties regarding the Services. If any provision is held unenforceable, the remainder continues in effect. Our failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; we may assign them in connection with a corporate transaction.

For any question about these Terms, contact legal@ictlcorp.com. Registered location: DIFC, Dubai, United Arab Emirates.