Terms of Service

DRAFT for counsel review. Not legal advice.

Version: 2026-10-03.1

These terms are between [Company legal name], [registered address], company number [number] ("we") and the organization that signs up ("you"). By accepting them at signup the person accepting confirms they may bind that organization.

1. The service

OSINTTotal collects information from public and lawfully accessible sources about a company or person you name, grades the sources, and drafts a due diligence report with an evidence trail. It runs a fixed set of collection and quality rules that you cannot switch off. Analysis may use a large language model (subprocessors.md).

2. Who may use it

• Organizations only, not consumers. Each organization is vetted before its first case (vetting_procedure.md). Until we approve it, you can sign in and set up the organization but cannot create cases or run jobs.
• Your users must be your employees or contractors, use their own accounts, and keep MFA on where the service requires it (owners and admins).
• You are responsible for your users and for every case created under your account.

3. Your obligations

• Use the service only for the purpose your organization was approved for and within the Acceptable Use Policy (aup.md), which is part of these terms.
• For every case, record a true purpose, decision supported, lawful basis and retention date before collection.
• You are the controller of case data. You decide whether a lawful basis exists, give any notice the law requires to the people you investigate, and answer their requests with our help (dpa.md).
• Have a qualified person review each report before relying on it. Do not make a decision about a person based only on automated output.

4. Reports

Reports describe what the searched sources said at the time of collection. Sources can be wrong, out of date or about a different person with a similar name. Each finding carries an identity confidence and a source grade; coverage gaps are listed. We do not guarantee that a report is complete or correct. A report is not a consumer report, a credit report, legal advice or a background check under any screening law.

5. Fees

Fees follow the plan on your order or invoice (pay per report, Team, or White-label). We invoice monthly in arrears from the usage ledger; payment is due in 30 days. Fees exclude VAT and similar taxes. A report counts when a job finishes and produces it, whether or not it has findings.

6. Suspension

We may suspend your organization at once, without notice when needed, if we reasonably believe the AUP or these terms were breached, payment is 30 days late, a regulator or court requires it, or your vetting details turn out to be false. During suspension the account is read-only: queued and running jobs are cancelled and new cases and jobs are refused; you can still read and export your data. We tell you the reason unless the law forbids it.

7. Data

The Data Processing Agreement (dpa.md) applies to case data and is part of these terms. Account and billing data is handled under the Privacy Notice (privacy.md). You may export your reports at any time.

8. Confidentiality and security

Each party keeps the other's non-public information confidential. We keep the security measures in dpa.md Annex 2. Tenancy is enforced in the database: one organization cannot read another's data.

9. Intellectual property

We own the software, templates, scoring rules and documentation. You own your inputs and the reports produced for you, and give us the rights needed to run the service. Third-party source data stays subject to its own licence; some sources forbid redistribution of raw data (aup.md section 3.5).

10. Warranties and liability

The service is provided as is, except as stated in these terms. Neither party limits liability for fraud, death or personal injury caused by negligence, or anything that cannot be limited by law. Otherwise, each party's total liability in any 12 months is capped at the fees paid by you in those 12 months, and neither party is liable for lost profits or indirect loss. The cap does not apply to your breach of the AUP or to your indemnity.

11. Indemnity

You indemnify us against third-party claims arising from your use of the service in breach of the AUP or the law, including claims by people you investigated.

12. Term and end

These terms run until either party ends them with 30 days written notice, or at once for material breach not fixed within 14 days. When they end, access stops, you have 30 days to export, and we then delete your organization's data as dpa.md section 9 describes. Sections 4, 9, 10, 11 and 13 survive.

13. Law and courts

[Governing law: the laws of Israel; courts of Tel Aviv. Counsel to confirm, and whether UK customers need English law.]

14. Changes

We may change these terms by publishing a new version (README.md, Versioning) with 30 days notice for material changes. Continued use after that date, or a new acceptance in the app, means you accept the new version.

Contact: [legal@domain].