01Acceptance of these terms

These terms govern your use of the DeXpose website, free tools, customer platform and API (together, the "Services"), provided by DeXpose of Block B-B26-049, Sharjah, United Arab Emirates. By using the Services you agree to these terms and to our Privacy Policy. If you use the Services on behalf of an organization, you confirm that you are authorized to bind that organization, and "you" includes that organization.

If you have signed a separate agreement with DeXpose, such as a subscription order or partnership agreement, that agreement prevails over these terms where they conflict.

02What DeXpose provides

DeXpose is a cyber threat intelligence service. We collect information from public breaches, infostealer logs, credential dumps, dark web marketplaces and forums, ransomware leak sites and chat platforms, analyze it, and report to you when it relates to the domains, applications, brands, people or infrastructure you are entitled to monitor.

The Services include the free dark web report, the email breach scan and the Oracle breach check available on our website; the customer platform with monitoring, alerts and reporting; and the data API for partners who integrate DeXpose intelligence into their own products.

03Eligibility and authorization

You may only use the Services to monitor or query domains, email addresses, brands and assets that you own, that you are authorized to protect on behalf of the owner, or that belong to you personally. We verify ownership before releasing detailed results for a domain and may ask for evidence at any time.

You must be at least eighteen years old and able to enter into a binding contract. You may not use the Services if you are located in, or acting for, a country or entity subject to sanctions that prohibit us from serving you.

04Free tools

The free dark web report, email breach scan and Oracle breach check are provided as a courtesy to help you understand your exposure. Results are summaries produced from the data we hold at the time of the request and may be incomplete. Free tools are rate limited, protected by reCAPTCHA, and may be changed, suspended or withdrawn at any time.

When you use a free tool, you agree that we may store the domain or email you submitted and, if you provide contact details to request a full report, that we may contact you about DeXpose services as described in our Privacy Policy.

05Accounts and access

Customer accounts are created by DeXpose or by a partner on your behalf. You are responsible for keeping login credentials confidential, for enabling multi-factor authentication where offered, and for all activity under your account. Tell us immediately at info@dexpose.io if you suspect unauthorized access.

Each customer runs in a dedicated environment. You may invite users from your organization and are responsible for their compliance with these terms.

06Acceptable use

You agree not to:

• use the Services to monitor, look up or target any person, organization or asset that you are not authorized to monitor;
• use intelligence obtained from DeXpose to access any account, system or data without authorization, or to harass, extort, defraud or harm any person;
• attempt to reverse engineer, scrape, bulk export or resell the Services or the data in them except as expressly permitted in your agreement;
• probe, bypass or interfere with the security, rate limits or integrity of the Services;
• upload malicious code or use the Services to distribute it;
• share access credentials or API keys with anyone outside your authorized users;
• use the Services in breach of any law, including data protection, export control and computer misuse laws.

We may suspend or terminate access immediately if we reasonably believe these rules have been broken, and we may report unlawful activity to the authorities.

07Data API and partners

Access to the DeXpose data API is granted under a partnership or subscription agreement that sets out permitted use, volumes, billing model and support. Unless that agreement says otherwise: API keys are confidential and may not be shared; data received through the API may be used only inside your own product for your own customers and may not be resold or redistributed as a standalone dataset; you must apply security controls to protect the data that are at least as strong as those required by our Privacy Policy; and you must delete data on termination except where retention is required by law.

We may throttle or suspend API access to protect the platform, and we will give reasonable notice of changes to endpoints or formats where we can.

08Fees and payment

Free tools are provided at no charge. The customer platform and API are provided under paid plans, including pay-as-you-go, query-based and per-client models, as described in your order. Fees are stated exclusive of taxes, are payable in the currency and on the schedule in your order, and are non-refundable except where required by law or agreed in writing. We may suspend paid Services for accounts that are more than thirty days overdue after notice.

09Your data and our data

You keep ownership of the assets, configuration and content you provide to the platform ("Customer Data"). You grant us the right to process Customer Data to deliver, secure and improve the Services and as described in our Privacy Policy.

DeXpose and its licensors own the Services, the platform, the software, the methods used to collect and analyze data, and the compiled intelligence ("DeXpose Data"). Subject to these terms and your agreement, we grant you a limited, non-exclusive, non-transferable licence to use DeXpose Data for your internal security purposes or, for partners, within the scope of your partnership agreement.

Breach and dark web data that we surface originates from third parties. We provide it so that you can protect your organization and the people connected to it. You must handle any personal data it contains lawfully and in confidence.

10Confidentiality

Each party will keep the other party's non-public information confidential and use it only for the purposes of the Services. This includes alert details, exposed credentials, pricing and security information. Disclosure is permitted to staff, advisers and providers who need to know and are bound by confidentiality, and where required by law with notice to the other party where lawful.

11Nature of intelligence and disclaimers

Threat intelligence is inherently incomplete. Sources appear and disappear, data may be old, duplicated, falsified or mislabelled, and a credential that we report as exposed may already have been changed. The Services help you find and prioritize risk; they do not guarantee that you will be notified of every exposure, that every result is accurate, or that acting on results will prevent an incident.

Except as expressly stated in your agreement, the Services are provided "as is" and "as available" without warranties of any kind, whether express or implied, including merchantability, fitness for a particular purpose and non-infringement.

12Limitation of liability

To the fullest extent permitted by law, DeXpose will not be liable for any indirect, incidental, special, consequential or punitive damages, or for any loss of profits, revenue, data, goodwill or business, arising out of or in connection with the Services, even if advised of the possibility of such damages.

Our total liability for all claims arising out of or relating to the Services in any twelve-month period will not exceed the fees you paid to DeXpose in that period or, for free Services, one thousand UAE dirhams. Nothing in these terms limits liability that cannot be limited by law.

13Indemnity

You will defend and indemnify DeXpose against claims, losses and costs arising from your breach of these terms, your unlawful use of the Services or of data obtained through them, or any claim that Customer Data infringes the rights of a third party.

14Suspension and termination

You may stop using the Services at any time. Paid subscriptions end according to your order. We may suspend or terminate the Services for breach of these terms, for non-payment, where required by law, or where continued provision would create a security risk. On termination your access ends, you must stop using DeXpose Data as required by your agreement, and the sections of these terms that by their nature should survive will survive, including ownership, confidentiality, disclaimers, limitation of liability and governing law.

15Changes to the Services and these terms

We improve the Services continuously and may add, change or remove features. We may update these terms from time to time; the date at the top of this page shows the latest version. For material changes we will give notice by email or through the platform. Continued use after the effective date means you accept the new terms.

16Governing law

These terms are governed by the laws of the Emirate of Sharjah and the federal laws of the United Arab Emirates. The courts of Sharjah have exclusive jurisdiction over any dispute, except that either party may seek injunctive relief in any competent court to protect its intellectual property or confidential information.

17Contact

Questions about these terms can be sent to info@dexpose.io or by post to DeXpose, Block B-B26-049, Sharjah, United Arab Emirates.