[ /legal/terms // v2.4 ]

Terms of Service.

The rules that govern your use of IntelHarvest. Plain English where possible, defined where it has to be precise.

LAST_REVISED: 2026-04-01
DOC_ID: IH-LEGAL-TOS-002 VERSION: 2.4 EFFECTIVE: 2026-04-01 BINDING: yes

// 01Acceptance

By creating an IntelHarvest account or accessing the API you ("you", "Customer") agree to these Terms. If you are agreeing on behalf of an organization, you represent that you have authority to bind that organization.

// These Terms form a legally binding agreement. If you don't agree, don't use the service.

// 02Accounts

  • You must be at least 18 and legally capable of entering into a contract.
  • One account per person. Sharing credentials is prohibited.
  • You are responsible for any activity under your account. Notify us immediately at security@intelharvest.com of any suspected compromise.
  • We may require email verification before first analysis.

// 03Acceptable use

IntelHarvest is a defensive threat-intelligence tool. You agree NOT to use the service to:

  • Conduct unauthorized scanning, intrusion, or offensive operations against third parties
  • Upload content you do not have legal rights to (PII, classified documents, stolen IP)
  • Attempt to reverse-engineer, resell, or rebrand core platform output
  • Circumvent rate limits, credit metering, or access controls
  • Publish public reports containing illegal content, defamation, or doxxing material
// VIOLATION → immediate suspension. Credits are forfeit. We cooperate with law enforcement where required.

// 04Credits & plans

  • Analysis is metered in credits. Public analysis costs 1 credit; private analysis costs 2 credits.
  • Role changes cost 2 credits (see dashboard).
  • Plan credits reset on each billing cycle. Unused credits do not roll over unless explicitly stated in your plan.
  • Pricing is shown on /pricing and may change with 30 days' notice.
  • Refunds: within 14 days of initial purchase if you have consumed less than 10% of your credits.

// 05Your content

You retain all rights to PDFs you upload and to reports generated from them. By setting a report to public, you grant IntelHarvest and other users a non-exclusive license to display that report on the public feed and via the API, and to derive aggregate threat intelligence from it (dedup, actor correlation, statistics).

You may toggle privacy or delete any report at any time from your dashboard. Public mirrors may retain cached copies for up to 30 days.

// 06Intellectual property

The IntelHarvest platform, including the MITRE ATT&CK enrichment layer, the extraction pipeline, and the UI, is owned by IntelHarvest B.V. and protected by copyright. MITRE ATT&CK is a registered trademark of The MITRE Corporation and is used in accordance with their terms.

Nothing in these Terms transfers platform IP to you. You may use the IntelHarvest brand only with prior written consent.

// 07API usage

  • API keys are tied to your account. Keep them secret; treat a leaked key as a credential breach.
  • Default rate limit: 60 requests/minute per key. Enterprise plans may have higher limits.
  • Abuse of the API (scraping, automated resale of output) is a material breach and will terminate your key without refund.
  • The /api/v1/intel namespace is considered stable; other namespaces are experimental and may change.

// 08Warranty disclaimer

IntelHarvest is provided "as-is". Threat intelligence is produced by automated extraction and may contain errors, false positives, or omissions. You must not make safety-critical or legal decisions based solely on IntelHarvest output without independent verification.

To the maximum extent permitted by law, we disclaim all implied warranties including merchantability, fitness for a particular purpose, and non-infringement.

// 09Liability

Our aggregate liability for any claim arising out of or relating to these Terms is limited to the fees you paid to IntelHarvest in the 12 months preceding the claim. We are not liable for indirect, incidental, consequential, or punitive damages (including lost profits, data, or goodwill).

Nothing in this section limits liability for gross negligence, willful misconduct, or liabilities that cannot be limited under applicable law.

// 10Termination

  • You may terminate at any time by deleting your account from the dashboard.
  • We may suspend or terminate for material breach with reasonable notice where practicable.
  • Upon termination: active sessions are ended, API keys revoked, data retention follows the schedule in the Privacy Policy.

// 11Governing law

These Terms are governed by the laws of the Netherlands, excluding its conflict-of-laws rules. Any dispute will be brought exclusively in the competent courts of Amsterdam, unless mandatory consumer-protection law provides otherwise.

// end_of_document   // hash: sha256:7b12…4a0e   // supersedes v2.3