Terms of Service

1. The Service

AbuseGraph provides account-protection capabilities that help customers evaluate risk associated with account lifecycle activity, receive recommendations, and monitor related exposure signals. The Service returns informational outputs such as scores, verdicts, reasons, and alerts. You remain solely responsible for how you interpret those outputs and for any enforcement, authentication, or user-facing decisions in your own products and systems.

Where the Service evaluates phone numbers or related telecom signals, those capabilities are provided solely to help you detect fraud, abuse, and account takeover involving users of your own applications — not for list cleaning, lead generation, bulk verification, data brokerage, or resale. The Service is not a consumer reporting agency and its outputs are not consumer reports under the Fair Credit Reporting Act (FCRA) or similar laws. You may not use the Service for credit, employment, tenant, insurance, or other FCRA-regulated eligibility decisions.

We may modify, improve, or discontinue features with reasonable notice when material to paying customers. Beta, preview, or free features may change or end without the same notice commitments.

2. Accounts and access

• • You must provide accurate registration information and keep credentials confidential.
• • You are responsible for activity under your accounts, API keys, and workspace memberships.
• • You must promptly revoke compromised credentials and notify us of suspected unauthorized access.
• • Seat, role, and domain controls in the console are binding operational instructions for access within your workspace.

3. Customer responsibilities

You agree that you will:

• • Use the Service only for lawful purposes and only in connection with applications, sites, or services you own or are authorized to protect
• • Submit phone numbers and other identifiers only in connection with live account lifecycle events involving your own end users (for example signup, login, password reset, or email change) — not for offline list hygiene, prospecting, or enrichment of third-party contact databases
• • Obtain and maintain all notices, consents, and legal bases required to submit personal data to the Service, including a legitimate interest in fraud prevention or a contractual basis with the end user whose data you submit
• • Not submit sensitive categories of data unless expressly permitted in writing (including government IDs, full payment card data, or special-category personal data)
• • Configure enforcement, user messaging, and appeals processes in your own systems
• • Comply with export, sanctions, privacy, consumer-protection, and anti-discrimination laws applicable to your use

4. Acceptable use

You may not, and may not allow others to:

• • Probe, scan, or test the vulnerability of the Service except as expressly authorized in a coordinated disclosure arrangement
• • Attempt to bypass rate limits, authentication, domain verification, or other access controls
• • Reverse engineer, decompile, or extract source code, models, datasets, or non-public technical details of the Service except to the limited extent such restriction is prohibited by law
• • Use the Service to build a competing product by systematically copying outputs, benchmarks, or documentation
• • Resell, sublicense, or provide the Service to third parties as a standalone offering without our prior written consent
• • Use the Service or its outputs for list cleaning, contact hygiene, lead scoring unrelated to account abuse, marketing audience building, or any bulk phone or email verification not tied to a live account event on your platform
• • Use the Service or its outputs for credit, employment, tenant, insurance, or other eligibility screening governed by the FCRA or analogous consumer-reporting laws
• • Use outputs as the sole basis for unlawful discrimination or other illegal decisioning
• • Interfere with or degrade the Service, or use it to transmit malware or abusive traffic

5. Plans, fees, and taxes

Current plan features, usage allowances, and pricing are described on our pricing page or in an order form. Free usage (monthly live check credits on one domain) may be offered without charge and may be modified or withdrawn. Paid plans are billed through our payment processor according to the selected plan or written order. Fees are non-refundable except where required by law or expressly stated otherwise. You are responsible for applicable taxes. We publish overage rates on our pricing page (or in an order form). We will not charge overage fees beyond those disclosed rates without updated commercial terms.

6. Data processing and privacy

For personal data you submit through the Service for evaluation or monitoring, you are the controller (or business) and AbuseGraph is the processor (or service provider), except for data we process as a controller as described in our Privacy Policy (such as your account and billing data). We process customer personal data only to provide and secure the Service, in accordance with your documented instructions, our Privacy Policy, and any Data Processing Agreement executed with you. A standard DPA is available upon request at legal@abusegraph.com or privacy@abusegraph.com and incorporates these Terms by reference.

We apply data-minimization practices designed for account protection: phone numbers you submit are normalized and stored using one-way hashing where persistent retention is required; we do not store profile avatars, caller-name (CNAM) records, or persistent raw phone directories as part of the Service; enrichment responses are cached only for a short operational window before deletion or reduction. You are responsible for not sending unnecessary sensitive fields.

For numbers associated with the European Economic Area, Switzerland, or the United Kingdom, directory or social "footprint" enrichment may be unavailable until we complete additional privacy review. Basic telecom metadata (such as line type or carrier classification) may still be returned where supported. We will update documentation when availability changes.

Customer workspaces are siloed. We do not cross-share, pool, or otherwise make one customer's event data, identifiers, fingerprints, visit history, scores, or console content available to another customer — including where doing so might improve detection, rematch, or risk scoring for others. Rematch, history, and modeling that use customer-submitted data run within that customer's workspace only, except for aggregated or de-identified operational metrics that cannot reasonably identify a customer or an end user. This commitment does not limit disclosures required by law or our use of subprocessors under written agreements to host and operate the Service for you.

7. Intellectual property and feedback

We and our licensors own all right, title, and interest in the Service, including software, documentation, interfaces, branding, and related intellectual property. Subject to these Terms, we grant you a limited, non-exclusive, non-transferable right to access and use the Service during your subscription. You retain ownership of your content and application data. You grant us a worldwide, royalty-free license to host, process, transmit, and display that content solely as needed to provide the Service to you.

If you provide feedback or suggestions, we may use them without restriction or obligation to you.

8. Confidentiality

Each party may receive non-public information from the other that is marked confidential or should reasonably be understood as confidential ("Confidential Information"). The receiving party will use Confidential Information only to perform under these Terms and will protect it with at least reasonable care. These obligations do not apply to information that is or becomes public through no fault of the receiving party, was independently developed, or was rightfully received from a third party without duty of confidentiality. API credentials, non-public product documentation, and security materials are Confidential Information.

9. Third-party services

The Service may interoperate with third-party products you choose to use (for example authentication platforms, cloud hosts, or messaging tools). We also use managed infrastructure and service providers under written agreements to host, secure, communicate, bill, and enrich the Service. Our subprocessors generally fall into the following categories: cloud hosting and edge compute; database, object storage, and logging; email and notification delivery; payment processing; and contracted enrichment or threat intelligence providers. A current subprocessor list is available on request at privacy@abusegraph.com. Third-party products are governed by their own terms. We are not responsible for third-party services we do not control.

Some risk signals — including certain phone or telecom enrichments — are assembled by contracted data providers acting under our instructions. AbuseGraph does not operate consumer-facing scraping or crawling against end-user profiles on your behalf. If a provider becomes unavailable, restricted, or terminates service, we may modify, suspend, or remove affected enrichments without liability. Your indemnification obligations in Section 13 include claims arising from your submissions and use of outputs; they do not shift provider unavailability to AbuseGraph beyond our obligation to use commercially reasonable efforts to maintain the Service.

10. Public demo and SDKs

The public demo and browser SDK are provided for evaluation. You may not use the demo or related APIs to load-test, scrape, or probe the Service beyond ordinary interactive use, and you may not submit personal data of others without a lawful basis. Demo outputs are illustrative and omit some production enrichments. SDK and CDN scripts are licensed only for use with the Service under these Terms.

11. Warranties and disclaimers

We provide the Service using commercially reasonable skill and care. EXCEPT AS EXPRESSLY STATED IN THESE TERMS OR A SEPARATE WRITTEN AGREEMENT, THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL DETECT OR PREVENT ALL FRAUD, ABUSE, OR UNAUTHORIZED ACCESS, OR THAT OUTPUTS WILL BE ERROR-FREE OR UNINTERRUPTED. THE SERVICE AND ITS OUTPUTS ARE NOT "CONSUMER REPORTS" AND ABUSEGRAPH IS NOT A CONSUMER REPORTING AGENCY UNDER THE FCRA OR SIMILAR LAWS.

12. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, COVER, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, GOODWILL, OR DATA, EVEN IF ADVISED OF THE POSSIBILITY. EXCEPT FOR YOUR PAYMENT OBLIGATIONS, YOUR BREACH OF SECTION 4 (ACCEPTABLE USE), OR A PARTY'S GROSS NEGLIGENCE, WILLFUL MISCONDUCT, OR INFRINGEMENT OF THE OTHER PARTY'S INTELLECTUAL PROPERTY, EACH PARTY'S AGGREGATE LIABILITY ARISING OUT OF THESE TERMS IS LIMITED TO THE AMOUNTS PAID OR PAYABLE BY YOU TO ABUSEGRAPH FOR THE SERVICE IN THE TWELVE (12) MONTHS BEFORE THE EVENT GIVING RISE TO LIABILITY. FOR FREE USAGE, OUR AGGREGATE LIABILITY IS LIMITED TO ONE HUNDRED U.S. DOLLARS (US $100).

13. Indemnification

You will defend and indemnify AbuseGraph against third-party claims arising from your applications, your submissions of personal data, your enforcement decisions, or your unlawful use of the Service, and will pay resulting damages and reasonable attorneys' fees finally awarded, provided we give prompt notice and reasonable cooperation.

14. Suspension and termination

You may stop using the Service and close your account at any time. We may suspend or terminate access immediately for material breach, legal risk, non-payment, or threat to the security or integrity of the Service. Upon termination, your right to use the Service ends, and we will delete or anonymize customer personal data in accordance with our Privacy Policy and any DPA, subject to legal retention requirements.

15. Governing law

These Terms are governed by the laws of the State of Delaware, excluding conflict-of-law rules. Courts located in Delaware will have exclusive jurisdiction, except that either party may seek injunctive relief in any jurisdiction to protect intellectual property or Confidential Information. If a mandatory consumer protection law in your country gives you non-waivable rights, those rights still apply.

16. Miscellaneous

• • These Terms, plus any order form and DPA, are the entire agreement regarding the Service and supersede prior proposals on the same subject.
• • If any provision is unenforceable, the remainder remains in effect.
• • Failure to enforce a provision is not a waiver.
• • You may not assign these Terms without our consent, except to an affiliate or successor in connection with a corporate transaction; we may assign them in connection with a reorganization or sale of assets.
• • Notices may be sent to the email on your account and to legal@abusegraph.com.
• • We may update these Terms by posting a revised version. Material changes for paying customers will be communicated with reasonable advance notice where practicable. Continued use after the effective date constitutes acceptance.

17. Contact

Legal notices and questions: legal@abusegraph.com

Privacy and DPA requests: privacy@abusegraph.com