Terms of Service

Effective: 16 April 2026 · These Terms may be updated; material changes will be notified 30 days in advance by email.

1. Who we are

"SecurityAlert.ai" (referred to as "we," "us," or "the Service") is operated by CIA Development ("the Company"). By creating an account or using our Services, you ("you," "Customer") agree to these Terms of Service ("Terms"). If you're agreeing on behalf of a company, you warrant you have authority to bind it.

2. What we provide

The Service is a hosted monitoring and security platform that includes, depending on your subscription tier, uptime monitoring, third-party service status aggregation, brand protection, certificate lifecycle monitoring, vulnerability scanning, incident management, and threat intelligence feeds. Features, limits, and pricing are described on our pricing page.

3. Your account

• You are responsible for the accuracy of the information you provide and for activity that occurs under your account.
• You are responsible for keeping credentials confidential and notifying us promptly if you suspect compromise.
• Accounts on Team, Business, or Enterprise plans allow you to add team members; the account holder is responsible for team members' compliance with these Terms.

4. Acceptable use

You agree not to use the Service to:

• Monitor or attempt to monitor hosts, domains, or services you do not own or have explicit written permission to monitor.
• Perform denial-of-service, exhaustive vulnerability scanning, or credential-stuffing against third parties. Our monitoring is designed for light polling of status endpoints, not penetration testing.
• Circumvent rate limits, plan limits, or access controls.
• Resell, sublicense, or white-label the Service without a written reseller agreement.
• Violate applicable law, export controls, or the rights of third parties.

We may suspend or terminate accounts that violate this section without refund, with commercially reasonable notice where circumstances allow.

5. Fees and payment

• Billing cycle. Paid plans are billed monthly or annually in advance via Stripe. Fees are non-refundable except as required by law or where expressly stated.
• Upgrades and downgrades. Mid-cycle upgrades are prorated; downgrades take effect at the next renewal.
• Taxes. Fees exclude applicable sales, VAT, or similar taxes. Where required, you will pay those in addition.
• Late payment. Accounts past due by more than 14 days may be suspended until payment is received.
• Free tier. We may change free-tier limits with 30 days' notice. We will not downgrade an actively-paid plan without notice.

6. Service availability

We aim to maintain 99.9% monthly availability for the hosted platform. Live operational status is published at status.servicealert.ai. Enterprise customers with a signed SLA receive service credits for qualifying downtime, as described in the SLA document. This Terms document does not itself create SLA obligations.

7. Data and privacy

How we handle data is described in our Privacy Notice, Data Retention Policy, and Trust page. A Data Processing Addendum (DPA) with Standard Contractual Clauses is available on request for Business and Enterprise customers.

8. Customer data & ownership

• You retain ownership of the data you provide (monitor configurations, brand domains, incident records).
• We retain ownership of the Service, the software, and all related intellectual property.
• You grant us a limited licence to process your data to provide the Service. We do not sell customer data.
• Aggregated, anonymised metrics (e.g. "X% of services monitored were degraded this week") may be published for reliability research without identifying you.

9. Third-party services

The Service integrates with third parties (e.g. Slack, Microsoft Teams, PagerDuty, Opsgenie, Stripe, Auth0, Postmark, Twilio). Their terms and availability are outside our control; we are not liable for their failures. You are responsible for maintaining your own credentials with them.

10. Warranties and disclaimers

The Service is provided "as is." Except as expressly stated in these Terms or a written order form, we disclaim all implied warranties including merchantability, fitness for a particular purpose, and non-infringement. You acknowledge that monitoring is best-effort and that no monitoring tool guarantees detection of every incident.

11. Limitation of liability

To the maximum extent permitted by law, our aggregate liability in any 12-month period is limited to the greater of (a) fees paid by you to us in that period or (b) USD 100. Neither party is liable for indirect, consequential, incidental, or punitive damages, or for loss of profits, revenue, or data. These limits do not apply to willful misconduct, gross negligence, or liability that cannot be limited by law.

12. Indemnification

You agree to defend and indemnify us against third-party claims arising from your breach of these Terms, your misuse of the Service, or your violation of law. We agree to defend and indemnify you against third-party claims that the Service infringes a valid US patent, copyright, or trade secret, subject to our right to modify or replace the Service to avoid infringement.

13. Termination

You may cancel any time from the billing portal. Cancellation stops future renewals; fees already paid are non-refundable unless law requires otherwise. We may terminate for material breach with 30 days' notice, or immediately for violation of Section 4 (acceptable use) or non-payment past 14 days. Upon termination we will delete your data within 30 days, subject to legal retention obligations. Export your data before cancellation if needed.

14. Changes to the Service or these Terms

We may add, modify, or remove features. Material reductions in functionality will be announced in advance. We may update these Terms; material changes will be notified by email 30 days in advance and posted on this page with a revised effective date. Continued use after the effective date constitutes acceptance.

15. Governing law and disputes

These Terms are governed by the laws of the State of Delaware, USA, without regard to conflict-of-laws rules. Disputes shall be resolved in the state or federal courts located in Delaware, and the parties consent to exclusive jurisdiction there, except that either party may seek injunctive relief in any competent court.

16. Miscellaneous

• Entire agreement. These Terms, the Privacy Notice, DPA (if executed), and any signed order form are the entire agreement.
• No assignment without written consent, except in connection with a merger, acquisition, or sale of substantially all assets.
• Severability. If any provision is held unenforceable, the remainder stands.
• Notices to the Company must be sent to legal@securityalert.ai.

17. Contact

Questions about these Terms: legal@securityalert.ai. Security issues: security@securityalert.ai. Billing: billing@securityalert.ai.