Terms & Conditions

01Acceptance of these Terms

By creating an account, requesting access, joining the waitlist, or otherwise using Veylum (the "Service"), operated by Ekos Cyber Labs, LLC, a limited liability company organized under the laws of the State of Delaware, United States ("Ekos Cyber Labs", "Veylum", "we", "us", "our"), you ("Customer", "you") agree to be bound by these Terms & Conditions ("Terms") and by our Privacy Policy, which is incorporated by reference. If you are entering into these Terms on behalf of an organization, you represent that you have authority to bind that organization, and "you" refers to that organization. If you do not agree, do not register for or use the Service.

Where Ekos Cyber Labs and Customer execute a separate written agreement, order form, data processing addendum or service level agreement, that document supplements these Terms and prevails over them to the extent of any conflict. No such document is offered or implied by the mere use of the Service.

02Description of the Service

Veylum is a brand-protection and threat-intelligence platform. It generates and evaluates domain-name variants of a protected brand (typosquatting, homoglyph/IDN abuse, TLD variation, combosquatting, bitsquatting, and AI-suggested variants) and cross-references them against newly registered domains, Certificate Transparency logs, public search results and the publicly reachable content of suspected sites for signs of brand impersonation. Findings are scored by a deterministic rules engine and, for medium/high-severity findings on plans that include it, by an AI-assisted verification step ("Ekos AI") that produces an informational verdict and narrative.

On plans that include it, the Service also assists you in requesting the takedown of infringing sites through editable abuse notices, reviewed and confirmed by you, sent to the registrar, hosting provider or platform believed responsible, and tracks the resulting case and any replies. The Service does not guarantee the detection of every existing or future risk to your brand, the accuracy of any specific finding, or the removal of any content it helps you report. Capabilities not described in this Section — whatever our website may announce as planned — are not part of the Service until these Terms are updated to include them.

03Eligibility and Brand Authorization

The Service exists to help organizations protect brands they own or are authorized to act for. By requesting monitoring for a brand, you represent and warrant that:

• (a) you are acting on behalf of the organization that owns that brand, or of a company with a legitimate business relationship to it (parent company, subsidiary, distributor, licensee, franchisee, or similar);
• (b) you are the person within your organization competent to make this request; and
• (c) all information you provide in connection with that request is truthful and current.

The confirmations you give at registration — including the brand-authorization confirmation and any explanation you provide when the domain you register does not match your email domain — are recorded with the date, time and network address of the request and form part of the evidence of your authorization. Veylum may request supporting evidence of your authorization at any time, before or after approving a request, and may reject, suspend, or terminate access to any brand where that authorization is reasonably in doubt. You are solely responsible for ensuring you have the right to request monitoring of, and to authorize takedown actions concerning, any brand or domain you submit to the Service.

04Account Registration and Security

You must provide accurate registration information and keep your account's contact details current. You are responsible for maintaining the confidentiality of your login credentials and of any API or integration keys issued for your account, and for all activity that occurs under them, whether or not you authorized it, except to the extent caused by Veylum's own breach of these Terms. Notify us promptly of any suspected unauthorized use. Accounts are provisioned manually by our team after review of a registration request; submitting a request through the public sign-up page or the waitlist does not by itself create an account or grant access to the Service.

05Plans, Pricing, Payment and Refunds

The Service is offered under the plans published on our website at the time of your request. At the date of these Terms the paid plan is Tier 1, priced at USD 500 per month per protected brand, billed monthly in advance; this is a launch price and may change prospectively under the rule below. A Free plan with a reduced feature set may be offered on a waitlist basis (Section 7). Submitting a registration request or joining the waitlist carries no charge; a paid plan is activated only after our team has reviewed your request and confirmed the terms with you in writing, and the invoice or order confirmation issued at that time supplements these Terms.

All fees are stated in U.S. dollars and exclude value-added, sales, use, withholding and similar taxes, which Customer bears. If Customer is required by law to withhold any amount from a payment, Customer pays such additional amount as is necessary for Ekos Cyber Labs to receive the full invoiced fee. Prices — particularly any marked "temporary" or "launch" pricing — may change prospectively with at least 30 days' notice to existing customers before their next billing cycle.

Cancellation and refunds. You may cancel a paid plan at any time from your account or by writing to support@veylum.ai; cancellation takes effect at the end of the billing period already paid, and you keep access until then. Fees already invoiced or paid are non-refundable, except (a) where applicable law requires a refund, (b) where Ekos Cyber Labs terminates your plan for convenience under Section 16, in which case prepaid fees for the unused period are refunded pro rata, or (c) as expressly agreed in writing.

06Failed Payment and Grace Period

If a payment for a paid plan cannot be processed when due, the following applies automatically:

• (a) Processing stops. From the moment the payment fails, the Service suspends scanning, enrichment, AI classification and takedown dispatch for the account. Findings and data processed before that moment are preserved.
• (b) Access is suspended. Users of the account cannot use the Service until the outstanding payment is received.
• (c) Fifteen-day grace period. Customer has fifteen (15) calendar days from the failed payment to settle it. If payment is received within that period, the account is reactivated and processing resumes.
• (d) Deletion. If payment is not received within the grace period, the account is terminated and all of its data is deleted irreversibly, as described in the Privacy Policy. The only exception is the retained takedown case records described in Section 11, which are kept for the period stated there.

Ekos Cyber Labs notifies the account's administrative contact by email when a payment fails and again before the grace period ends. Fees for the period before the failed payment remain due.

07Free Plan and Waitlist

The Free plan, where offered, is provided on a waitlist basis at Veylum's discretion, with a reduced feature set that excludes AI-assisted verdicts and takedown assistance. We may modify, limit, or discontinue the Free plan, or change waitlist criteria, at any time. Nothing in this section obligates Veylum to grant Free-plan access to any specific registration request. Joining the waitlist on our website only registers your interest; it creates no account and no obligation on either party.

08Acceptable Use

You agree not to, and not to permit any third party to:

• (a) use the Service for any brand, domain, or entity you are not authorized to represent;
• (b) use information or evidence obtained through the Service for any purpose other than protecting the brand(s) you are authorized to monitor — including harassment, competitive intelligence unrelated to brand protection, or any offensive rather than defensive use of the infrastructure or threat-actor information the Service surfaces;
• (c) submit, confirm or send a takedown notice you know or should know to be false, abusive, retaliatory, or made in bad faith, or against a site, domain or content that does not infringe the rights of the brand you represent;
• (d) attempt to reverse-engineer, scrape, or extract the Service's underlying scoring logic, prompts, or datasets, or use the Service to build a competing product;
• (e) interfere with or overload the Service's infrastructure, or attempt to circumvent its rate limits, authentication, or access controls;
• (f) resell, sublicense, or provide access to the Service to any third party without our prior written consent; or
• (g) use the Service in violation of any applicable law, including data-protection, computer-fraud, and export-control law.

Any violation of paragraphs (a), (b) or (c) is a material breach and results in immediate suspension of the account, without prior notice and without any right to a refund of fees paid or prepaid. Other violations may lead to suspension or termination, with or without notice, depending on severity.

09Nature of OSINT Findings; No Warranty of Accuracy

Findings generated by the Service are derived from public and semi-public sources — DNS records, registrar RDAP/WHOIS responses, TLS certificate transparency logs, public search results and the publicly reachable content of suspected sites — combined with automated heuristics and, where applicable, AI-assisted classification. These sources are outside Veylum's control and may be incomplete, delayed, rate-limited, or themselves inaccurate; automated classification, including AI-generated verdicts and narratives, may contain errors or fail to reflect the true nature of a given domain or site.

Findings are provided "as is" as an investigative aid, not as legal advice. You are responsible for independently verifying any finding before relying on it for legal, contractual, regulatory, or takedown purposes, and Veylum disclaims liability for decisions made on the basis of an unverified finding.

10Ekos AI — Informational Use Only

Where the Service uses a large-language-model provider to produce a verdict, confidence score, or narrative about a finding ("Ekos AI"), that output is an automated, probabilistic estimate produced by third-party models that Ekos Cyber Labs does not train, intended to help you prioritize manual review — it is not a certification, a guarantee, or a substitute for human judgment.

11Takedown Assistance — Your Notice, Your Responsibility

On plans that include it, the Service helps you prepare abuse or takedown notices addressed to the registrar, hosting provider, or platform associated with an infringing domain or site, using contact information Veylum resolves through public OSINT sources, and transmits the notice for you. The following rules govern every notice.

• (a) Human review and confirmation. A notice is transmitted only after a human user of your account with the appropriate role has read the complete text of the notice as it will be sent and has expressly confirmed it in the Service. The identity of that user, the date and time, the network address and the exact text confirmed are recorded. No automated process, integration, API client or AI assistant may transmit a notice without that confirmation.
• (b) Sent in your name. By confirming a notice you appoint Ekos Cyber Labs as your agent for the limited purpose of transmitting that notice to its recipient, in your name and on your behalf, and receiving any reply. The notice identifies you as the complaining party and Ekos Cyber Labs as the transmitting agent. The notice is your statement, not Ekos Cyber Labs'; Ekos Cyber Labs does not verify the claims it contains and may decline to transmit a notice it reasonably believes to be unfounded, abusive or unlawful.
• (c) Acceptance on each notice. Each time you confirm a notice you accept this Section 11 again for that notice: you confirm that you hold or represent the rights asserted, that the facts stated are true to the best of your knowledge, that you have reviewed the evidence attached, and that you grant Ekos Cyber Labs a limited license to reproduce your trademarks and brand assets in the notice.
• (d) Full responsibility. To the maximum extent permitted by applicable law, you assume complete and exclusive responsibility for every notice confirmed from your account — for its content, accuracy, legal sufficiency and consequences, including any claim by the registrant, operator or owner of the domain, site or content that was its subject, any claim of misrepresentation under 17 U.S.C. § 512(f) or equivalent law, and any loss suffered by a third party as a result of the notice. Section 19 (Indemnification) applies.
• (e) Abuse. Confirming or sending a notice in bad faith, against a site you know not to infringe, or for any purpose other than the protection of a brand you are authorized to represent, results in immediate suspension of the account without prior notice and without any refund, as provided in Section 8.
• (f) No guaranteed outcome, no legal advice. Transmitting a notice does not constitute legal advice, does not create an attorney-client relationship, and does not guarantee that the recipient will act, that the content will be removed, or that removal will occur within any timeframe. You remain responsible for compliance with any formal requirements applicable to your claim (for example, those of the U.S. Digital Millennium Copyright Act, the Lanham Act, or equivalent notice-and-takedown regimes elsewhere). We recommend consulting qualified legal counsel before relying on a notice as your sole remedy.
• (g) Retention of takedown records. Because a notice can give rise to claims by third parties long after it is sent, the record of every notice — the text sent, the recipient, the evidence attached, the confirmation record and the replies received — is kept for the life of your account and, after the account is deleted or terminated for any reason, for a further thirty-six (36) months in a blocked state, accessible only to Ekos Cyber Labs for the purpose of establishing or defending liabilities arising from the notice, after which it is erased. The Privacy Policy describes this retention.

12Third-Party Services and Dependencies

The Service depends on and integrates with third-party providers — including, without limitation, domain-registration and certificate-transparency data sources, registrar and registry lookup services, web-content capture and screenshot infrastructure, search providers, large-language-model providers, cloud hosting, and email infrastructure used to send transactional messages and to transmit takedown notices on your behalf. The categories of providers that process personal data are described in the Privacy Policy.

Veylum does not control these third parties, does not warrant their continued availability, accuracy, or terms of service, and is not liable for their acts, omissions, downtime, or policy changes, including any resulting gap in monitoring coverage.

13Intellectual Property

The Service's software, the "Veylum" and "Ekos AI" names and marks, and all associated documentation and materials are and remain the property of Ekos Cyber Labs or its licensors. Except for the limited right to access and use the Service under these Terms for its intended purpose, no intellectual-property rights are granted to you. You retain all rights to your own brand assets, trademarks, and any content you submit to the Service (such as brand names, domains, and logos used for monitoring configuration). If you send us suggestions or feedback about the Service, you grant us a perpetual, royalty-free license to use them without obligation to you.

14Customer Data License

You grant Veylum a non-exclusive, worldwide license to use the brand information, keywords, logos, and other content you submit solely to operate, maintain, secure and improve the Service for your account — including generating domain variants, performing OSINT lookups, producing screenshots and AI verdicts, and preparing the notices you confirm. Ekos Cyber Labs may also use data about how the Service is used, in a form that does not identify you, your brand or your users, to measure and improve the Service. Where the content you submit includes personal data, the Privacy Policy governs our processing of it.

15Confidentiality

Each party agrees to protect the other's non-public information disclosed in connection with the Service with the same degree of care it uses for its own confidential information of a similar nature, and not less than reasonable care, and to use it only for purposes of this relationship. This section does not apply to information that is or becomes public through no fault of the receiving party, was already known to it, or is required to be disclosed by law (in which case the disclosing party will, where legally permitted, be given prior notice). Neither party will name the other as a customer or supplier in marketing materials without the other's prior written consent.

16Suspension and Termination

Customer may terminate at any time as described in Section 5 (cancellation) or by deleting the account from the Service. Ekos Cyber Labs may terminate a plan for convenience with 30 days' written notice, refunding prepaid fees for the unused period. Ekos Cyber Labs may suspend or terminate access immediately, without prior notice and without refund, where necessary to prevent harm to the Service, other customers, or third parties — including suspected fraud, a violation of Section 8 (Acceptable Use) or Section 11 (Takedown Assistance), or a reasonable doubt about brand authorization under Section 3 — and may suspend access for non-payment as provided in Section 6.

Upon termination, your right to access the Service ends and your data is deleted in accordance with the Privacy Policy, subject to the retained takedown records described in Section 11. Sections 9, 10, 11(d), 11(g), 13, 15, 17, 18, 19, 21 and 24 survive termination.

17Disclaimer of Warranties

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WITHOUT LIMITATION ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, THAT ANY FINDING IS ACCURATE OR COMPLETE, OR THAT THE SERVICE WILL DETECT OR PREVENT ANY PARTICULAR THREAT, FRAUD, OR IMPERSONATION ATTEMPT. EKOS CYBER LABS MAKES NO AVAILABILITY COMMITMENT EXCEPT AS STATED IN A SERVICE LEVEL AGREEMENT EXECUTED IN WRITING.

18Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL, ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

EKOS CYBER LABS' TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICE WILL NOT EXCEED THE GREATER OF (I) THE FEES YOU PAID TO EKOS CYBER LABS FOR THE SERVICE IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM AND (II) ONE THOUSAND U.S. DOLLARS (USD 1,000).

The limitations in this Section do not apply to (a) Customer's indemnification obligations under Section 19, (b) Customer's liability for a breach of Section 8 (Acceptable Use) or Section 11 (Takedown Assistance), (c) either party's breach of Section 15 (Confidentiality), (d) Customer's payment obligations, or (e) either party's gross negligence, willful misconduct, fraud, or any liability that cannot be limited under applicable law.

19Indemnification

You agree to defend, indemnify and hold harmless Ekos Cyber Labs and its officers, directors, employees and agents from and against any third-party claim, demand, liability, damage, loss or expense (including reasonable attorneys' fees) arising out of or related to: (a) your breach of Section 3 (Eligibility and Brand Authorization), Section 8 (Acceptable Use) or Section 11 (Takedown Assistance); (b) any takedown notice confirmed from your account, including any claim by the registrant, operator or owner of the domain, site or content that was its subject; (c) any content or brand data you submit through the Service; or (d) your violation of applicable law in connection with your use of the Service.

Ekos Cyber Labs will notify you promptly of any such claim, allow you to control its defense and settlement (provided that no settlement imposes any obligation or admission on Ekos Cyber Labs without its written consent), and cooperate at your expense. Ekos Cyber Labs may participate in the defense with counsel of its choice at its own cost.

20Compliance with Law; Export Control and Sanctions

You represent that you are not located in, organized under the laws of, or otherwise subject to comprehensive trade sanctions administered by the United States, the European Union, or any other jurisdiction with authority over the Service, that you are not listed on any U.S. government restricted-party list, and that you will not use the Service in violation of applicable export-control, sanctions, or anti-corruption law. Because the Service performs internet reconnaissance against domains and infrastructure that may be operated by malicious actors, you agree to use it only for lawful defensive brand-protection purposes and not to direct it at any target for an unlawful purpose.

21Governing Law and Dispute Resolution

These Terms are governed by the laws of the State of Delaware, United States, without regard to its conflict-of-laws principles, and excluding the United Nations Convention on Contracts for the International Sale of Goods. The parties submit to the exclusive jurisdiction of the state and federal courts located in the State of Delaware for any dispute arising out of or relating to these Terms or the Service, and waive any objection to venue there. To the extent permitted by law, each party waives trial by jury. Nothing in this Section deprives you of the protection of any consumer-protection or data-protection rule of your own jurisdiction that cannot be waived by contract, or of any right to bring a claim before a competent data-protection or consumer-protection authority there.

22Changes to these Terms

We may update these Terms from time to time to reflect changes to the Service, legal requirements, or our practices. Every version is published with a new "Last updated" date. For a material change we give at least 15 days' notice by email to the account's administrative contact and in the Service before it takes effect, and we may require users of the account to accept the new version in the Service in order to continue using it. If you do not agree to a material change, you may cancel before it takes effect and receive a pro-rata refund of prepaid fees for the unused period; continued use of the Service after the effective date constitutes acceptance of the revised Terms.

23Notices and Contact

Notices to Ekos Cyber Labs under these Terms should be sent to legal@veylum.ai, or through the support or account-contact channel provided to you when your account was activated; formal notices may also be sent by mail to Ekos Cyber Labs, LLC, 2810 N Church St STE 90685, Wilmington, DE 19802, United States. Notices to you will be sent to the email address on file for your account. Customer support: support@veylum.ai.

24Miscellaneous

If any provision of these Terms is held unenforceable, the remaining provisions remain in full force. Veylum's failure to enforce any provision is not a waiver of its right to do so later. You may not assign these Terms without our prior written consent; Veylum may assign these Terms in connection with a merger, acquisition, reorganization or sale of assets. The parties are independent contractors, and these Terms create no partnership, joint venture, employment or — except for the limited agency in Section 11(b) — agency relationship. There are no third-party beneficiaries of these Terms. Neither party is liable for delay or failure to perform caused by circumstances beyond its reasonable control. These Terms, together with the Privacy Policy and any order form or written agreement executed by the parties, constitute the entire agreement between you and Veylum regarding the Service and supersede any prior agreements on the subject.