Terms of Service

1. Who these terms are with

These Terms of Service (the "Terms") govern your access to and use of the RADECTI platform and services (the "Services"). They form a binding agreement between you (the "Customer") and RADECTI.

Pre-incorporation notice. RADECTI is being incorporated. Until then the Services are provided by the operator of RADECTI, a sole trader acting in a professional capacity in Greece. On incorporation, this agreement will transfer to the RADECTI company on its formation, and you agree to that transfer of the contract on the same terms. The legal form of that company has not been finalised.

2. The Services

RADECTI provides threat intelligence, brand and domain monitoring, scanning and static malware analysis. Digital forensics and incident response (DFIR) engagements are under development and not yet generally available. We do not operate a monitoring desk: where a plan includes case management or ticketing, that is software you operate, and no RADECTI analyst triages findings on your behalf. We offer:

• Researcher (available now) — an analysis subscription (€25/month including VAT): scanning and IOC lookup for IP addresses, domains, URLs and file hashes; static malware analysis with a reverse-engineering workspace, technical reporting and YARA rule drafts; YARA family matching; the threat-actor and ransomware landscape view; and threat-news digests and report export. Subject to a daily file limit stated on the pricing page. This tier does not include monitoring of your own domains, assets or brand, and does not include an API key or findings feed.
• Analyst (available now) — the Researcher analysis subscription with more room to work in (€49/month including VAT): everything in Researcher, up to 250 files a day, results kept 14 days, and priority in the analysis queue. Priority is a place further up the queue, not the whole queue — a fixed share of the analysis pool stays reserved for lower plans. Like Researcher, this plan is analysis only: it does not include monitoring of your own domains, assets or brand, and does not include case management.
• Analyst Pro (available now) — Analyst with colleagues and a way in that is not the dashboard (€89/month including VAT): everything in Analyst, up to 500 files a day, results kept 30 days, a programmatic API for submitting files and indicators and retrieving results on a key you issue and revoke yourself, and 3 seats including your own. Three seats means three logins on one account sharing one scan history; it is not case management or ticketing. Like Analyst, this plan is analysis only and does not include monitoring of your own domains, assets or brand.
• Brand Watch (available now) — everything in Researcher, plus continuous monitoring of your registered domains and brand (€149/month excluding VAT): external attack-surface monitoring, look-alike/typosquat detection and email-spoofability (SPF/DKIM/DMARC) assessment, delivered to your own systems as a feed via a scoped API key. Monitoring runs at least daily; on-demand scans are available at any time. Ransomware leak-site exposure is reported as the victim organisation, source and date first seen only; we do not retrieve, store or supply the contents of any leaked dataset.
• Surface and Estate (planned) — described on the pricing page as being on our roadmap. They are not offered for sale, cannot be ordered, and we will not accept payment or a deposit against them. Estate, when available, will be scoped and quoted individually under a separate order or statement of work incorporating these Terms, and will require a data-processing agreement before any processing begins.

We may improve, change or discontinue features. The Services are provided as an ongoing service, not as a licensed software product you install.

3. Eligibility and accounts

The Services are sold both to individuals and to organisations. The Researcher, Analyst and Analyst Pro plans are priced and sold as consumer products — VAT included, with the statutory right of withdrawal in section 5 — because the people who buy them are largely analysts paying from their own pocket. That applies to all three: Analyst Pro's three seats do not make it a business plan. The business plans (Brand Watch, and Estate when available) are sold to organisations acting in the course of a trade or profession. Which set of rules protects you follows from what you actually are, not from which plan you picked or what this page calls you. You must be at least 18 and able to enter a binding contract. You are responsible for the security of your account credentials and API keys, for all activity under your account, and for keeping your contact and billing details accurate. Notify us promptly at support@radecti.com of any suspected unauthorised use.

4. Acceptable use and your authorisation

This is the most important obligation you take on. By registering an asset for monitoring, you represent and warrant that:

• You own, or are otherwise lawfully entitled to monitor, every domain, brand, trademark, email address and other asset you register or ask us to monitor, and you have the authority to instruct us to do so.
• You will not register or submit assets belonging to a third party without their authorisation, and you will not use the Services to harass, surveil or target any individual or organisation unlawfully.
• Where the Services process personal data of your employees, executives or other individuals (for example in executive or credential-leak monitoring), you have a lawful basis to have us do so and have provided any notices those individuals are owed.

You also agree not to:

• use the Services in breach of any law, or to infringe anyone's rights;
• attempt to gain unauthorised access to the platform, other customers' data, or any system, or to disrupt, overload or reverse-engineer the Services;
• resell, sublicense or provide the Services to third parties except as expressly agreed;
• use findings we deliver to conduct any intrusive testing or active attack against third-party systems.

Any active scanning or intrusive testing of your assets under the Enterprise tier is performed only under a separate, signed authorisation (Rules of Engagement) defining scope. We may suspend or terminate the Services for a breach of this section, including where we reasonably believe an asset is not yours to monitor.

5. Subscription, fees and payment

• Billing. Paid subscriptions are billed in advance on a recurring basis (monthly unless otherwise agreed) through our payment processor, Stripe. By subscribing you authorise us, via Stripe, to charge your payment method for the applicable fees until you cancel.
• Prices and VAT. Plans sold to consumers — currently Researcher (€25), Analyst (€49) and Analyst Pro (€89) — are displayed including VAT: the price you see is the price you pay, with no tax added at checkout. Plans sold to businesses — currently Brand Watch (€149) — are displayed excluding VAT. Where you are a VAT-registered business in an EU member state other than Greece and you supply a valid VAT number, the supply is reverse-charged and you account for VAT yourself; otherwise Greek VAT applies. We may change prices with reasonable prior notice, effective from your next billing cycle.
• Renewal and cancellation. Paid plans renew automatically each cycle and can be cancelled at any time, effective at the end of the current paid period. Estate terms follow the applicable order or statement of work. When a subscription ends, monitoring stops that day and we hold your data for 90 days before erasing it; you can sign in and export it throughout, and subscribing again within the 90 days restores the account. Section 6.2 of the Privacy Policy sets out that period in full.
• Non-payment. If a charge fails or fees are overdue, we may suspend or terminate the Services after reasonable notice. A failed payment or an expired card ends the subscription on the same terms as a cancellation, including the 90-day hold on your data described above.
• Your right to withdraw (consumers). This applies to every plan sold to consumers — Researcher, Analyst and Analyst Pro. If you are a consumer in the EU you have 14 days from the day the contract is concluded to withdraw, without giving a reason and without penalty. Because this is a digital service supplied immediately, we ask you at sign-up to expressly request that we begin at once and to acknowledge that doing so ends the withdrawal right once the service has been fully performed; if you withdraw after we have begun but before full performance, you pay only for what was supplied up to that point. To withdraw, tell us at support@radecti.com — a clear statement is enough, no form required.
• Refunds (business customers). Where you contract as a business, and except where mandatory law says otherwise, fees already paid for a started billing period are non-refundable; cancelling stops future charges rather than refunding the current period. This does not apply to consumers, whose withdrawal right above takes precedence.

The distinction above is not presentational. A term that removes a consumer’s statutory withdrawal right is void against them regardless of what they clicked, and a price shown to a consumer without VAT included is not enforceable for the missing amount — the tax would be owed to the state and could not be recovered from you. We would rather write that down than discover it in a dispute.

6. Your data and privacy

Our handling of personal data is described in our Privacy Policy, which forms part of these Terms, and how long we keep it is set out in section 6 of that policy. Where we process personal data on your behalf as a processor (for example in MDR/DFIR), we sign a data processing agreement with you under Article 28 GDPR before that processing begins, and it applies in addition to these Terms.

Subprocessors. To run the service we rely on a small number of third-party providers, which may process data on our behalf. The current list, what each does and where it operates is maintained in our Privacy Policy. At the date of these Terms it is: Contabo (hosting and compute, Germany, EU), Cloudflare (edge delivery and DDoS protection; a US company operating a global edge), Zoho (email, EU data centre), Backblaze (encrypted off-site backups; a US company) and Stripe (payment processing, United States), the last used only once paid subscriptions are enabled. We will give notice of a change to this list as set out in the Privacy Policy before a new subprocessor starts processing your data.

7. Intellectual property

The platform, our software, methodologies, and the intelligence reports, analysis and content we produce are and remain the property of RADECTI (or, before incorporation, of its founder) and its licensors. We grant you a non-exclusive, non-transferable right to use the Services and to use the findings and reports we deliver for your own internal security purposes for the duration of your subscription. You retain ownership of the data and assets you provide to us. You may not copy, redistribute or resell our intelligence content outside your organisation without our written consent. Some components of our platform are third-party open-source software used under their own licences.

8. Service levels and availability

We work to keep the Services available and accurate, but except for any specific service levels stated in an Enterprise order, the Services are provided on a commercially reasonable "as available" basis. We may carry out maintenance and may need to suspend the Services temporarily.

9. Disclaimers

Cybersecurity monitoring reduces risk; it cannot eliminate it. We do not warrant that the Services will detect every threat, leak or malicious domain, that findings will be complete or free of false positives, or that using the Services guarantees your security or your compliance with any law or framework. To the fullest extent permitted by law, the Services and all findings are provided without warranties of any kind, whether express or implied, including fitness for a particular purpose. You remain responsible for your own security decisions and legal and regulatory obligations. Nothing we provide is legal advice.

10. Limitation of liability

To the fullest extent permitted by applicable law:

• Neither party is liable for indirect, incidental, special or consequential loss, or for loss of profits, revenue, data, goodwill or business, arising out of or relating to the Services.
• RADECTI's total aggregate liability arising out of or relating to these Terms and the Services is limited to the fees you paid for the Services in the twelve (12) months before the event giving rise to the claim.
• Nothing in these Terms limits or excludes liability that cannot be limited or excluded under mandatory Greek or EU law — including liability for fraud, for gross negligence or wilful misconduct, or for death or personal injury caused by negligence.

You agree to indemnify us against third-party claims arising from your breach of the acceptable-use obligations in section 4, including registering an asset you were not entitled to monitor.

11. Term, suspension and termination

These Terms apply for as long as you use the Services. You may stop using and cancel as described in section 5. We may suspend or terminate your access for a material or repeated breach of these Terms (including section 4), for non-payment, or where required by law. On termination your right to use the Services ends.

What happens to your data. Monitoring stops on the day the subscription ends and we collect nothing further for you. We then hold your data for 90 days, during which you can sign in, read everything we found for you and export it, and subscribing again restores the account. At the end of the 90 days we erase it. Section 6.2 of the Privacy Policy states the whole of that period, what an erasure removes, what it keeps and why, and which copy is removed by hand rather than automatically. You can ask us to erase your account earlier at any point, and that request overrides the 90 days. Where we have signed a data processing agreement with you, its terms on the return and deletion of your data apply in addition.

12. Changes to these Terms

We may update these Terms as the Services and our legal footing evolve — in particular on incorporation of the company. We will give reasonable notice of material changes (for example by email or a notice in the platform). Continued use after changes take effect means you accept the updated Terms. The date at the top shows when they were last changed.

13. Governing law and jurisdiction

These Terms are governed by the laws of Greece, without regard to conflict- of-law rules, and subject to any mandatory consumer-protection or other law that applies to you. The courts of Athens, Greece have jurisdiction over any dispute, without prejudice to any mandatory right you may have to bring proceedings, or to be sued, in the courts of your own place of establishment. We will always try to resolve a dispute with you informally first — contact support@radecti.com.