These Terms of Service ("Terms") are a binding agreement between you and the organization you represent ("you", "Customer") and Great Falls Ventures LLC, a Delaware limited liability company, operating the ThreatVec product ("ThreatVec", "we", "us"). They govern your access to and use of the ThreatVec web application at app.threatvec.com, the ThreatVec browser extension and agents, our APIs and SDK, and related services (together, the "Service").
By clicking "Sign up" (or a similar control), checking a box indicating acceptance, or accessing or using the Service, you agree to these Terms (including the binding arbitration agreement and class-action waiver in Section 14) and to our Privacy Policy. If you do not agree, do not use the Service. If you are accepting on behalf of an organization, you represent that you have authority to bind that organization.
You must be at least 18 years old and able to form a binding contract. You are responsible for the accuracy of your account information, for activity under your account and any agent keys or credentials we issue, and for keeping those credentials confidential. Notify us promptly at support@threatvec.com of any unauthorized use.
ThreatVec helps organizations discover, monitor, and govern AI agents, MCP servers, and shadow-AI usage, and produces security signals, posture scores, red-team scenarios, and compliance evidence. The specific features available to you depend on your plan and may change over time. The Service is intended for use by organizations for their own internal security purposes.
The Service — or specific features within it — is currently offered on a beta, pre-release, free, trial, or evaluation basis ("Beta Services"). The following terms apply to the Beta Services and, to the extent of any conflict, control over the rest of these Terms for so long as the Service is offered as Beta Services.
THE BETA SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE," WITH ALL FAULTS AND WITHOUT WARRANTY OF ANY KIND. TO THE MAXIMUM EXTENT PERMITTED BY LAW, THREATVEC EXPRESSLY DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.
The Beta Services may contain bugs, errors, and other issues, are provided for evaluation and not for production-critical reliance, and are not subject to any service-level agreement, uptime commitment, or maintenance or support obligation.
You acknowledge and agree that:
We may offer a free trial for a stated period. Unless otherwise agreed in writing, your use during the beta and trial is free. We may change pricing and introduce or modify fees for the Service prospectively; any paid plan will be governed by the order or plan terms you accept at the time of purchase. You are responsible for any taxes other than taxes on our income.
You agree not to, and not to permit anyone to:
We may suspend or terminate access for conduct we reasonably believe violates this section or creates risk or legal exposure for us or others.
Our handling of personal data is described in our Privacy Policy. For enterprise customers, our Data Processing Agreement (GDPR / UK GDPR / HIPAA aligned) governs our processing of personal data on your behalf, and you are the data controller for that data. You are responsible for having the rights and lawful basis necessary for the data you submit to the Service.
As between the parties, we own the Service and all related intellectual property; you own your data. We grant you a limited, non-exclusive, non-transferable, revocable right to use the Service during the term in accordance with these Terms. You grant us the rights to your data necessary to provide, secure, and improve the Service consistent with the Privacy Policy and DPA.
EXCEPT AS EXPRESSLY STATED IN A SEPARATE WRITTEN AGREEMENT SIGNED BY US, THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE," AND THREATVEC DISCLAIMS ALL WARRANTIES, EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.
ThreatVec is a security tool that surfaces signals and findings; it does not guarantee that it will detect every threat, agent, or data-loss event, or that it will be error-free, uninterrupted, or secure. You remain responsible for your own security program and decisions.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, THREATVEC WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF DATA, PROFITS, REVENUE, OR GOODWILL, ARISING OUT OF OR RELATING TO THE SERVICE OR THESE TERMS, WHETHER IN CONTRACT, TORT, OR OTHERWISE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
FOR USE OF THE BETA SERVICES (OR ANY FREE OR TRIAL USE), OUR TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THE SERVICE WILL NOT EXCEED ONE HUNDRED U.S. DOLLARS (US $100). FOR PAID USE, OUR TOTAL AGGREGATE LIABILITY WILL NOT EXCEED THE AMOUNTS YOU PAID US FOR THE SERVICE IN THE TWELVE (12) MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM.
Some jurisdictions do not allow certain limitations, so some of the above may not apply to you. Nothing in these Terms limits liability that cannot be limited by law.
You will defend, indemnify, and hold harmless ThreatVec from third-party claims and related losses arising from your data, your use of the Service in violation of these Terms or law, or your use of the offensive-security capabilities against systems you were not authorized to test.
These Terms apply while you use the Service. You may stop using the Service at any time. We may suspend or terminate your access as described in Sections 3 and 5, or if you breach these Terms. On termination, your right to use the Service ends; sections that by their nature should survive — including Sections 3 (Beta Services), 7 (Intellectual Property), 8 (Disclaimers), 9 (Limitation of Liability), 10 (Indemnification), 13 (Changes to these Terms), 14 (Governing Law, Arbitration & Class Waiver), and 15 (General) — will survive.
We are continuously developing the Service and may add, change, or remove features at any time. During the beta this may happen frequently and without notice, as described in Section 3.
We may update these Terms from time to time. When we make material changes, we will update the "Version" and "Effective date" above and, where appropriate, ask you to re-accept. Your continued use of the Service after an update means you accept the updated Terms; the version you accepted at sign-up or last re-acceptance governs until then.
These Terms are governed by the laws of the State of Delaware, without regard to its conflict-of-laws rules.
PLEASE READ THIS SECTION CAREFULLY. IT REQUIRES DISPUTES TO BE RESOLVED BY BINDING INDIVIDUAL ARBITRATION; YOU AND THREATVEC KNOWINGLY AND VOLUNTARILY WAIVE THE RIGHT TO A JURY TRIAL AND TO BRING OR PARTICIPATE IN A CLASS ACTION, AND UNDERSTAND THAT YOU ARE GIVING UP THE RIGHT TO SUE IN COURT AND HAVE A JURY DECIDE YOUR CASE.
Binding arbitration. Except for the carve-outs below, any dispute, claim, or controversy arising out of or relating to these Terms or the Service will be resolved by final and binding arbitration administered by the American Arbitration Association ("AAA") under its Commercial Arbitration Rules and, where applicable, its Mass Arbitration Supplementary Rules. The seat and location of the arbitration will be Wilmington, Delaware; the arbitration will be governed by the Federal Arbitration Act; and judgment on the award may be entered in any court of competent jurisdiction.
Delegation. The arbitrator — not any court — has exclusive authority to resolve any dispute about the interpretation, scope, applicability, enforceability, or formation of this arbitration agreement, including whether a claim is subject to arbitration, except that a court (not the arbitrator) decides whether the class-action waiver below is enforceable.
CLASS-ACTION WAIVER. YOU AND THREATVEC AGREE THAT DISPUTES WILL BE ARBITRATED ONLY ON AN INDIVIDUAL BASIS. YOU AND THREATVEC WAIVE ANY RIGHT TO BRING OR PARTICIPATE IN A CLASS, COLLECTIVE, CONSOLIDATED, OR REPRESENTATIVE ACTION, AND THE ARBITRATOR MAY NOT CONSOLIDATE MORE THAN ONE PARTY'S CLAIMS OR PRESIDE OVER ANY CLASS OR REPRESENTATIVE PROCEEDING.
Severability of this agreement. If the class-action waiver is found unenforceable as to a particular claim, that claim (and only that claim) will proceed in court rather than arbitration; the rest of this arbitration agreement remains in effect for all other claims. If any other provision of this arbitration agreement is found unenforceable, it will be severed and the remainder will continue in full force, so that disputes continue to be resolved by individual arbitration.
Carve-outs. Either party may (a) bring an individual claim in small-claims court; (b) seek injunctive or other equitable relief in the Delaware Court of Chancery (or, for a federal claim, the U.S. District Court for the District of Delaware) to protect intellectual property or confidential information; and (c) bring an action in court to compel or enforce arbitration or to confirm, vacate, or enforce an arbitration award. These carve-outs are not subject to arbitration.
30-day opt-out. You may opt out of this arbitration agreement and class-action waiver by emailing support@threatvec.com within 30 days of first accepting these Terms, stating your name, your organization, and that you intend to opt out. Opting out does not affect any other part of these Terms.
This arbitration and class-waiver language is a draft starting point and must be reviewed by qualified counsel — including its enforceability across your customers' jurisdictions and any consumer-vs-business distinctions — before you rely on it.
Entire agreement. These Terms, together with the Privacy Policy, the Data Processing Agreement (for enterprise customers), and any order you accept, are the entire agreement between you and ThreatVec regarding the Service and supersede all prior or contemporaneous understandings, whether written or oral.
Severability. If any provision of these Terms is held invalid or unenforceable, it will be enforced to the maximum extent permitted, and the remaining provisions will continue in full force.
Assignment. You may not assign or transfer these Terms or your rights without our prior written consent. We may assign these Terms in connection with a merger, acquisition, reorganization, or sale of all or substantially all of our assets, provided the assignee assumes these obligations. These Terms bind the parties' permitted successors and assigns.
Force majeure. Neither party is liable for any failure or delay caused by events beyond its reasonable control (including acts of God, natural disaster, war, terrorism, civil unrest, pandemic, labor disputes, government action, or failures of networks, hosting, or third-party services). We may suspend the Service during such events without liability.
Notices. Legal notices to us must be sent to support@threatvec.com (Great Falls Ventures LLC). Notices to you may be sent to the email address on your account or posted within the Service, and are effective when sent or posted.
No waiver. Our failure to enforce any right or provision is not a waiver of it, and no waiver is effective unless made in writing.
No third-party beneficiaries. These Terms confer no rights or remedies on any third party.
Export & sanctions. You will comply with all applicable U.S. and other export-control and economic-sanctions laws (including the U.S. Export Administration Regulations and OFAC sanctions). You represent that you are not located in, or a national or resident of, an embargoed country and are not on any U.S. government restricted-party list.
Independent contractors. The parties are independent contractors; these Terms create no partnership, joint venture, agency, or employment relationship.
Questions about these Terms: support@threatvec.com. Privacy questions: privacy@threatvec.com.