Terms of Service
1. Definitions
- "Company" (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) means the operator of the ZeroLeaks service. ZeroLeaks is the name of the service. It is not a registered company.
- "Services" refers to the ZeroLeaks website, applications, AI security assessment tools, and all related services offered by the Company.
- "User" (referred to as either "You" or "Your") refers to the individual or legal entity accessing or using the Services.
- "Subscription" refers to the recurring payment plan that grants access to our premium Services.
- "AI System Data" means the agent configuration, runtime instructions, tool definitions, skill files, and scan transcripts you submit or that a scan records.
2. Services Description
ZeroLeaks provides AI agent security services, including but not limited to: comprehensive vulnerability assessments, data leakage prevention strategies, intellectual property protection for AI systems, and rapid response to security incidents. Our current service offering includes automated AI agent security scans, prompt injection testing, data leakage testing, remediation guidance, reporting, and API and SDK access for running scans from your own pipelines.
The Services also include the Shield API and Shield models, which classify text as prompt injection or jailbreak attempts. The Shield model is available with a free API key; Shield Base, Shield Large and Shield Tiered are included in paid plans. The free tier is offered under fair use: we do not publish fixed rate limits, but we may limit, suspend, or revoke access for usage that degrades the Services for others or that we reasonably believe is abusive. Where we publish Shield model weights, their use is governed by the license published with them.
The Company reserves the right to modify, suspend, or discontinue any aspect of the Services at any time, with reasonable notice to active subscribers where practicable.
3. Subscription and Payment Terms
3.1 Subscription Plans
Our Services are offered on a subscription basis. The current plans include a Pro Plan at $149 USD per month, a Team Plan at $499 USD per month (5 seats included; additional seats at $79 USD per seat per month), and a Business Plan at $1,999 USD per month (15 seats included; additional seats at $99 USD per seat per month). Each plan may instead be billed annually at ten times its monthly price. All paid plans include unlimited scans subject to our fair-use policy: each plan limits how many scans run at once and how many start per hour, as listed on our pricing page, scans must relate to your own good-faith security testing, and we may contact accounts with automated abuse or resale-scale usage. Eligible new customers may receive a 14-day Pro trial, limited to 10 scans, before recurring billing begins. Enterprise plans start at $50,000 USD per year under a separate agreement. We reserve the right to modify pricing for new subscriptions; however, existing subscribers will be notified at least thirty (30) days in advance of any price changes affecting their subscription.
3.2 Billing
Subscriptions are billed in advance on a monthly or annual basis, according to the billing period you choose. By providing payment information, you authorize us to charge the designated payment method for all applicable fees. You are responsible for maintaining accurate and current billing information.
3.3 Automatic Renewal
Subscriptions automatically renew at the end of each billing period unless cancelled. To cancel your subscription, you must provide written notice at least thirty (30) days before the end of the current billing period by contacting us at support@zeroleaks.ai.
3.4 Refund Policy
Subscription fees are non-refundable except where required by applicable law. If you cancel your subscription, you will continue to have access to the Services until the end of your current billing period.
4. User Obligations and Responsibilities
By using our Services, you agree to:
- Maintain the confidentiality of your account credentials and notify us immediately of any unauthorized access or security breach.
- Provide accurate, current, and complete information during registration and throughout your use of the Services.
- Use the Services only for lawful purposes and in compliance with all applicable laws, regulations, and industry standards.
- Ensure you have all necessary rights and authorizations to submit AI System Data for security assessment.
- Not attempt to reverse engineer, decompile, or derive source code from any aspect of our Services.
- Not use the Services to develop competing products or services.
5. Intellectual Property Rights
5.1 Company Intellectual Property
All content, features, functionality, software, and underlying technology of our Services are owned by the operator of ZeroLeaks or its licensors and are protected by international copyright, trademark, patent, trade secret, and other intellectual property laws. You may not reproduce, distribute, modify, create derivative works from, publicly display, or otherwise exploit any Company intellectual property without our prior written consent.
5.2 Your Intellectual Property
You retain all rights to your AI System Data. We do not use it to train foundation models. What we store, and for how long, is described in Section 6.
6. Confidentiality and Data Handling
6.1 What we store
Scores, findings, recommendations, and remediation stay for the life of the account. A daily job then deletes conversation transcripts, tool logs, campaign checkpoints, uploaded skill archives, and runtime-scan instructions. The window is 365 days. Business and Enterprise plans can choose 30, 90, or 180 days in Settings → Security → Data retention. Saved endpoint configurations stay until you remove the agent. An endpoint scan does not receive the agent's instructions. A runtime scan stores the instructions you submit until the retention window above. While a scan runs, Cloudflare Workflows keep the job, which can include probe messages and agent replies. We delete our database copy of that launch payload once the worker accepts the job. Cloudflare keeps its own workflow history.
6.2 Deletion requests
Email support@zeroleaks.ai to delete scan data. We delete prompt scans, endpoint scans, runtime scans, skill scans, their reports, skill archives, and campaign checkpoints for that account. The user profile, saved agent configurations, learned attack prompts, and defense fingerprints stay unless you ask us to delete those as well.
6.3 Shield API Data
Text you submit to the Shield API remains yours. The request log does not contain that text. It records the date, the time the request finished, and the classification score. Those logs are deleted after thirty (30) days. On a free plan, the free Shield model may store a redacted excerpt of a flagged request when you agreed to that at key creation, as described in the Privacy Policy, for security research for up to twelve (12) months. Paid plans do not store the text, and we do not train models on Shield submissions. Do not send personal data or confidential information to the free Shield model.
7. Warranties and Disclaimers
THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ANY WARRANTIES ARISING OUT OF COURSE OF DEALING OR USAGE OF TRADE.
While we strive to identify security vulnerabilities in your AI systems, we do not warrant that our assessments will identify all potential vulnerabilities or that your systems will be completely secure following our recommendations.
Shield classifications are probabilistic. Shield models may fail to flag an attack or may flag legitimate text, and published accuracy figures describe performance on specific benchmarks, not a guarantee for your inputs. You are responsible for how you use Shield results, and Shield should be one layer of your security controls rather than the only one.
8. Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL ZEROLEAKS, ITS AFFILIATES, DIRECTORS, OFFICERS, EMPLOYEES, AGENTS, OR LICENSORS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING WITHOUT LIMITATION DAMAGES FOR LOSS OF PROFITS, GOODWILL, USE, DATA, OR OTHER INTANGIBLE LOSSES, ARISING OUT OF OR IN CONNECTION WITH YOUR USE OF THE SERVICES.
OUR TOTAL CUMULATIVE LIABILITY FOR ANY AND ALL CLAIMS ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICES SHALL NOT EXCEED THE TOTAL AMOUNT PAID BY YOU TO US DURING THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM.
SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF CERTAIN DAMAGES. IF THESE LAWS APPLY TO YOU, SOME OR ALL OF THE ABOVE EXCLUSIONS OR LIMITATIONS MAY NOT APPLY, AND YOU MAY HAVE ADDITIONAL RIGHTS.
9. Indemnification
You agree to indemnify, defend, and hold harmless ZeroLeaks, its affiliates, and their respective officers, directors, employees, agents, and successors from and against any and all claims, liabilities, damages, losses, costs, and expenses (including reasonable attorneys' fees) arising out of or relating to:
- Your use of the Services;
- Your violation of these Terms;
- Your violation of any rights of a third party, including intellectual property rights;
- Any AI System Data you submit that infringes upon or violates the rights of any third party.
10. Termination
We may terminate or suspend your access to the Services immediately, without prior notice or liability, for any reason, including without limitation if you breach these Terms. Upon termination, your right to use the Services will cease immediately.
All provisions of these Terms which by their nature should survive termination shall survive, including but not limited to confidentiality obligations, intellectual property provisions, warranty disclaimers, indemnification, and limitations of liability.
11. Modifications to Terms
We reserve the right to modify these Terms at any time. We will provide notice of material changes by posting the updated Terms on our website and updating the "Last updated" date. For material changes affecting active subscriptions, we will provide at least thirty (30) days' advance notice via email. Your continued use of the Services following the posting of revised Terms constitutes your acceptance of those changes. If you do not agree to the modified Terms, you must discontinue use of the Services.
12. Governing Law and Dispute Resolution
These Terms do not choose the law of a US state. ZeroLeaks is not a registered company, so there is no US entity whose law would apply. Consumer and privacy laws that apply where you live still apply. A dispute that is not resolved by discussion within thirty (30) days may be brought in a court that has jurisdiction. These Terms do not require arbitration.
13. Severability
If any provision of these Terms is held to be invalid, illegal, or unenforceable, the remaining provisions shall continue in full force and effect. The invalid or unenforceable provision shall be modified to the minimum extent necessary to make it valid, legal, and enforceable while preserving its original intent.
14. Entire Agreement
These Terms, together with our Privacy Policy and any other agreements or policies referenced herein, constitute the entire agreement between you and ZeroLeaks regarding the use of our Services and supersede all prior and contemporaneous agreements, proposals, or representations, written or oral, concerning the subject matter hereof.
15. Contact Information
For questions, concerns, or notices regarding these Terms of Service, please contact us at support@zeroleaks.ai or visit https://zeroleaks.ai.