Terms & Conditions

1. About us

The ThreatHelm platform ("Service") is operated by Threat Helm vCISO ("we", "us", "our"). By using the Service, you enter into a binding agreement with Threat Helm vCISO.

2. Acceptance

By creating an account or continuing to use the Service, you agree to be bound by these Terms. If you do not agree, do not use the Service. If you are using the Service on behalf of an organization, you represent that you have authority to bind that organization.

3. The Service

ThreatHelm provides a security and compliance program tool for small and midsized businesses: context-aware risk registers, multi-framework gap analysis, live posture, and an AI vCISO chat. Outputs are informational and are not a substitute for qualified legal, audit, or regulatory advice.

4. Acceptable use

You must not misuse the Service. In particular, you may not:

• Use the Service for any unlawful purpose or in violation of any applicable law or regulation.
• Engage in fraud, spam, phishing, or abuse.
• Infringe any intellectual property or privacy right.
• Interfere with, probe, scan, or attempt to compromise the security of the Service (including uploading malware, scraping, or bypassing rate limits).
• Attempt to reverse engineer, decompile, or resell the Service.
• Circumvent technical limits or usage restrictions.

5. Generative AI features

The Service uses generative AI to produce risk narratives, control mappings, gap analyses, and chat responses. You are responsible for your prompts, for how you use the outputs, and for verifying accuracy before relying on them. Outputs may contain errors and are not suitable for use as regulated professional advice without human oversight. You must have the rights to any content you submit as input. We may filter or refuse outputs and may suspend accounts for repeated policy violations or infringement.

6. Accounts

You must provide accurate information and keep it updated. You are responsible for keeping your credentials confidential and for all activity under your account.

7. Intellectual property

The Service, including all software, documentation, and branding, is owned by Threat Helm vCISO and its licensors. We grant you a limited, non-exclusive, non-transferable right to use the Service within the plan you have subscribed to. You retain ownership of content you submit; you grant us a limited license to host and process that content solely to provide the Service.

8. Payments and subscriptions

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns. Payment, billing, tax, cancellation, and refund mechanics are governed by Paddle's Buyer Terms and our Refund Policy.

9. Service level

We work hard to keep the Service running, but we do not guarantee that it will be uninterrupted, timely, secure, or error-free. To the fullest extent permitted by law, all implied warranties (including merchantability and fitness for a particular purpose) are disclaimed.

10. Liability

To the fullest extent permitted by law, our aggregate liability for any claim arising from or related to the Service is limited to the fees paid by you to Paddle for the Service in the twelve (12) months preceding the claim. We are not liable for indirect, consequential, or special damages (including loss of profits, data, or goodwill). Nothing in these Terms excludes liability for fraud, death, or personal injury caused by negligence where such exclusion is not permitted by law.

11. Suspension and termination

We may suspend or terminate your access to the Service if you materially breach these Terms, fail to pay, present a security or fraud risk, or repeatedly or seriously violate our policies. On termination, your right to use the Service ends and we may delete your data after a reasonable export window.

12. Indemnity

You will indemnify and hold Threat Helm vCISO harmless from claims arising out of your content, your unlawful use of the Service, or your breach of these Terms.

13. Changes

We may update these Terms from time to time. Material changes will be notified via the Service or by email. Continued use after changes take effect constitutes acceptance.

14. Governing law

These Terms are governed by the laws of the jurisdiction in which Threat Helm vCISO is established. Disputes will be resolved by the competent courts of that jurisdiction, unless local mandatory law provides otherwise.

15. Contact

Questions about these Terms: contact Threat Helm vCISO via the in-app support chat or the contact channel listed on threathelm.com.