Terms of Service

1. Acceptance of these terms

By creating a Breachrr account, submitting a domain or email address to the free audit tool, or otherwise using the service, you agree to these Terms of Service (including the Acceptable Use Policy in Section 3) and our Privacy Policy. If you do not agree, do not use Breachrr.

Breachrr is a product of Breachrr Ltd. Where these Terms refer to “Breachrr”, “we”, “us”, or “our”, they refer to Breachrr Ltd.

If you are using Breachrr on behalf of a company or other legal entity, you represent that you have authority to bind that entity to these terms. In that case, “you” refers to that entity.

2. The service

Breachrr provides continuous exposure monitoring and threat intelligence across four capability areas: credential and breach exposure monitoring, infostealer intelligence, lookalike domain detection, and compliance reporting (including risk scoring and periodic reports). We search third-party sources for evidence that a domain, email address, or credential associated with an account you have registered has appeared in publicly known compromises, and surface findings and remediation guidance based on what our sources contain at scan time.

We do not guarantee completeness. Data is indexed with variable delay and coverage differs by source. A clean result means our current sources do not contain a match at scan time — it does not mean that no exposure exists. You should not treat Breachrr as your only line of defence against credential compromise.

Some features (such as compliance reports, team accounts, and takedown assistance) are available only on paid plans. Feature availability and quota limits are described on the pricing page and in your account.

We may modify, add, or discontinue features from time to time. Where we materially reduce the advertised functionality of a paid plan, we will give you at least 30 days' notice by email to the address associated with your account before the change takes effect.

3. Acceptable Use Policy

This Acceptable Use Policy (“AUP”) is part of these Terms. Violating the AUP is a material breach of these Terms and may result in immediate account termination, referral to law enforcement, and legal action to recover losses.

3.1 Authorisation requirement

You may only add domains, email addresses, or other assets to Breachrr that you either (a) own, (b) operate under express authorisation from the owner, (c) are employed by the owner to protect, or (d) are contracted by the owner to protect as a service provider. You may not use Breachrr to monitor, audit, or investigate assets belonging to third parties for whom you have no authorisation relationship.

At the point of adding a domain or submitting an audit request, you will be asked to affirmatively confirm your authorisation to monitor that asset. This confirmation is recorded along with a timestamp and network identifier and forms part of your representations under these Terms. A false or reckless confirmation is a material breach. Your authorisation confirmation, together with the timestamp and network identifier at which it was made, forms part of our records and may be relied on by us in any dispute concerning your use of the service.

3.2 Prohibited activities

You may not, and may not permit any user of your account to:

• Add, audit, or investigate any domain, email address, or other asset without the authorisation described in Section 3.1;
• Use Breachrr findings to attempt unauthorised access to any system, account, or data, whether belonging to you or anyone else;
• Use Breachrr to compile or maintain a database of credentials, personal data, or breach exposures relating to individuals or organisations for whom you have no lawful basis to process such data;
• Reverse engineer, decompile, or attempt to extract the source code of Breachrr, except to the extent that this restriction is prohibited by law;
• Circumvent, interfere with, or attempt to defeat any authentication, rate limiting, quota, or verification mechanism, including but not limited to the audit email-confirmation flow;
• Automate, scrape, or scale requests to Breachrr beyond what your plan permits, or use any bot, spider, or harvester against Breachrr not expressly authorised;
• Resell, sublicense, white-label, or provide access to Breachrr to third parties outside your own organisation unless expressly authorised in writing by us;
• Use Breachrr to conduct unauthorised security testing, penetration testing, or vulnerability research against any target;
• Use Breachrr for any purpose that is unlawful under applicable law, that infringes another party's rights, or that is intended to harass, defame, or defraud any person or organisation;
• Misrepresent your identity, affiliation, or authority when interacting with Breachrr staff or automated systems;
• Share, transfer, or lend your account credentials to any other person. Team member accounts must each have their own login.

3.3 Compliance with law

You are solely responsible for ensuring that your use of Breachrr complies with all laws and regulations applicable to you, to the assets you monitor, and to the individuals whose data may appear in findings. This includes but is not limited to data protection laws, computer misuse and anti-hacking laws, and any laws governing surveillance, monitoring, or investigative activities.

3.4 Individual targeting and the free audit tool

The free audit tool is intended for you to check exposure of (a) your own email address, (b) an email address at a domain you are authorised to protect under Section 3.1, or (c) your own organisation's domain. It is not intended for auditing individuals with whom you have no protective relationship.

You may not use Breachrr — including but not limited to the free audit tool — to investigate, surveil, or gather information about a current or former intimate partner, family member, colleague, or any other individual for purposes of harassment, stalking, coercion, doxxing, or facilitating unauthorised access to that person's accounts. This is a strict prohibition. We reserve the right to terminate any account we reasonably believe has been used for these purposes and to cooperate with law enforcement or with the individual concerned.

4. Registration, account security, and service providers

To use Breachrr beyond the free audit tool you must register an account and verify your email address. You are responsible for keeping your login credentials secure and for all activity that occurs under your account. You must notify us promptly at info@breachrr.com if you become aware of any unauthorised use of your account.

We reserve the right to require additional authentication (including multi-factor authentication) for accounts accessing sensitive functions.

Third-party service providers

We use third-party service providers to operate Breachrr, including for infrastructure and database hosting, transactional email delivery, payment processing, and product analytics. A current list of service providers is available on request to info@breachrr.com. Where a customer's use of Breachrr requires a formal Data Processing Agreement, we will enter into one on request.

5. Subscriptions and billing

Paid Breachrr plans are billed in advance on a monthly or annual cycle. Your subscription automatically renews at the end of each billing cycle unless you cancel before the renewal date. Cancellation takes effect at the end of the current billing cycle; you continue to have access until that date.

We do not offer refunds for partial billing periods. If you believe you have been charged in error, contact us at info@breachrr.com and we will investigate.

We may change our pricing at any time. Any change to the price of your existing subscription will take effect at the next renewal date, and we will notify you at least 30 days in advance. Continued use of a paid plan after a price change takes effect constitutes acceptance of the new price.

6. Your data

You retain all rights in and to the data you submit to Breachrr — including the domains and email addresses you register for monitoring and the remediation notes you make. You grant us a limited licence to process that data for the sole purpose of providing the service to you.

Findings surfaced through Breachrr, together with your remediation notes and other account data, remain accessible to you while your account is active. Deletion and retention of your data on termination of your account are handled in accordance with our Privacy Policy.

We may retain aggregated, de-identified statistics about service usage indefinitely. We handle personal data in accordance with our Privacy Policy and applicable data protection laws.

7. Termination

You may terminate your Breachrr account at any time by emailing info@breachrr.com from the address associated with your account. Prior to termination you may export your findings and remediation notes via the export function in your dashboard.

We may suspend or terminate your account, immediately and without prior notice, if we reasonably believe that you have breached these Terms — including but not limited to the Acceptable Use Policy in Section 3. Where a breach involves unauthorised monitoring, misrepresentation of authorisation, or activities that we believe may be unlawful, we reserve the right to preserve relevant evidence, cooperate with law enforcement, and pursue legal remedies to recover losses arising from the breach.

Sections that by their nature should survive termination (including Sections 6, 8, 9, 10, 12, 13, and 14) will do so.

8. Disclaimer of warranties

Breachrr is provided “as is” and “as available” without warranties of any kind, whether express or implied. We disclaim, to the fullest extent permitted by law, all warranties including implied warranties of merchantability, fitness for a particular purpose, non-infringement, and any warranties arising from course of dealing or usage of trade.

We do not warrant that Breachrr will detect every credential exposure, that findings will be timely or complete, or that the service will be uninterrupted, error-free, or free of harmful components.

9. Limitation of liability

To the maximum extent permitted by law, Breachrr will not be liable for any indirect, incidental, special, consequential, or exemplary damages, or for any loss of profits, revenue, data, or business opportunity, arising out of or in connection with your use of the service — regardless of the legal theory and even if we have been advised of the possibility of such damages.

Our total aggregate liability to you for any claim arising out of or relating to Breachrr will not exceed the greater of US$100 or the amount you paid to Breachrr in the 12 months preceding the event giving rise to the claim.

Nothing in these Terms excludes or limits our liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot be excluded or limited by applicable law.

10. Indemnification

You agree to defend, indemnify, and hold harmless Breachrr, its officers, employees, contractors, and agents from any claim, demand, loss, liability, or expense (including reasonable legal fees) arising out of or related to (a) your breach of these Terms, including the Acceptable Use Policy; (b) your misuse of the service, particularly any unauthorised monitoring or investigation of assets you were not entitled to monitor; and (c) your violation of any applicable law or the rights of any third party.

11. Changes to these Terms

We may update these Terms from time to time. Material changes will be announced at least 30 days in advance by email to the address associated with your account and by notice within the service. Non-material changes (such as clarifications) take effect on posting. Continued use of Breachrr after changes take effect constitutes acceptance.

12. Intellectual property

Breachrr Ltd. owns all rights, title, and interest in and to the Breachrr platform, including the software, source code, algorithms, user interface, documentation, trademarks, logos, and any content we publish. Nothing in these Terms transfers any of those rights to you. Your use of the service grants you a limited, non-exclusive, non-transferable right to access and use Breachrr for its intended purpose in accordance with these Terms, and nothing more.

Any feedback, suggestions, or ideas you provide about Breachrr may be used by us without obligation to you.

13. Governing law and disputes

These Terms and any dispute or claim arising out of or in connection with them (including non-contractual disputes or claims) are governed by and construed in accordance with the laws of England and Wales.

The courts of England and Wales have non-exclusive jurisdiction to hear any such dispute. Non-exclusive jurisdiction means that either party retains the right to bring proceedings in any other court of competent jurisdiction where such proceedings are properly brought.

Nothing in this section prevents either party from bringing a qualifying claim in the small claims track of a competent court in the plaintiff's place of residence or place of business.

Any claim you bring against us must be brought individually, in your personal or corporate capacity, and not as part of any class action, collective action, or representative proceeding.

14. General

Entire agreement

These Terms, together with our Privacy Policy and any documents expressly incorporated by reference, constitute the entire agreement between you and Breachrr Ltd. regarding your use of the service and supersede any prior agreements or understandings on the subject.

Severability

If any provision of these Terms is held to be invalid or unenforceable, that provision will be modified to the minimum extent necessary to make it enforceable, and the remaining provisions will continue in full force and effect.

No waiver

Our failure to enforce any right or provision of these Terms will not be treated as a waiver of that right or provision. Any waiver must be given in writing to be effective.

Assignment

You may not assign or transfer these Terms or any rights or obligations under them without our prior written consent. We may assign these Terms to a successor entity in connection with a merger, acquisition, corporate reorganisation, or sale of all or substantially all of our assets. Any assignment in breach of this section is void.

Force majeure

Neither party will be liable for any failure or delay in performing its obligations under these Terms (other than payment obligations) caused by circumstances beyond its reasonable control, including but not limited to acts of God, war, terrorism, civil unrest, government action, epidemic or pandemic, labour disputes, internet or telecommunications failures, or failures of third-party service providers.

No third-party beneficiaries

These Terms are for the benefit of you and Breachrr Ltd. only. No other person or entity has any right to enforce any provision of these Terms.

15. Contact

Questions about these Terms, requests to exercise data rights, and reports of misuse: info@breachrr.com. Security vulnerability reports: see our security policy.