Terms of use

These terms govern your use of the DisclosureLens website and API (the “Service”), operated by [PLACEHOLDER: legal entity name, legal form, and registered address]. By using the Service you agree to them. If you do not agree, do not use the Service.

1. What the Service is

DisclosureLens aggregates and structures publicly available information about data-breach disclosures: filings published by regulators, threat-actor leak-site claims, and press reports. Records are produced by an automated pipeline that uses language models to extract structured fields from source documents, with a per-record audit trail. How this works is documented on the methodology page.

2. Accuracy, and the limits of it

This section is the most important one, so it is stated plainly rather than buried:

• The Service is informational. It is not legal advice, compliance advice, investment advice, underwriting advice, or a substitute for your own investigation.
• Records are machine-extracted and can be wrong. Fields may be missing, mis-parsed, attributed to the wrong organization, or derived from a source that is itself incomplete. Every record links to its source; verify against the source before you rely on it.
• Derived values are ours, not the regulator’s. Incident clustering, entity resolution, severity scoring, aggregate counts, and notification-timing indicators are computed by DisclosureLens. They are indicative estimates, not legal determinations, and they are not part of any regulator’s filing.
• Threat-actor claims are unverified allegations. Leak-site content is published by criminal groups and republished here labelled as unverified. Its appearance is not confirmation that a breach occurred or that the named organization was affected.
• Accuracy figures published on the methodology page are design targets, not audited performance guarantees.

If you believe a record is wrong, tell us via the report / removal page.

3. No warranty

The Service is provided “as is” and “as available”, without warranties of any kind, whether express, implied, or statutory, including any implied warranties of merchantability, fitness for a particular purpose, accuracy, completeness, timeliness, or non-infringement. We do not warrant that the Service will be uninterrupted, error-free, or that any record is accurate or current.

4. No reliance

You are solely responsible for any decision you make using the Service, and for verifying any record against its underlying source before relying on it. Nothing in the Service creates a professional, advisory, or fiduciary relationship between you and us.

5. Limitation of liability

To the maximum extent permitted by law, we will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, revenue, data, goodwill, or business opportunity, arising out of or relating to your use of (or inability to use) the Service — even if advised of the possibility.

To the maximum extent permitted by law, our total aggregate liability arising out of or relating to the Service will not exceed [PLACEHOLDER: liability cap — e.g. the greater of amounts paid to us in the preceding 12 months, or a fixed sum].

Some jurisdictions do not allow certain exclusions or limitations, in which case those exclusions apply only to the extent permitted.

6. Acceptable use

You agree not to:

• circumvent, disable, or attempt to defeat any access control, authentication, rate limit, or paid-tier gate;
• scrape or bulk-download the Service outside the documented API and its published rate limits, or in a manner that degrades it for others;
• redistribute raw source artifacts obtained through the Service, or resell or sublicense the data other than as expressly permitted;
• use the Service to harass, defame, or unlawfully profile any person or organization, or in any way that violates applicable law — including sanctions law;
• share account credentials or API keys, or use them on behalf of an undisclosed third party.

We may suspend or terminate access that breaches these terms, or that threatens the availability or integrity of the Service.

7. Accounts and API keys

You are responsible for activity under your account and API keys, and for keeping them confidential. Notify us promptly at security@disclosurelens.com if you believe a key has been exposed. [PLACEHOLDER: tier, quota, and any fee terms, once billing is offered — no payment processing is currently integrated]

8. Third-party content and sources

The Service reproduces and links to material published by regulators, news outlets, and third-party aggregators. Those materials remain the property of their respective owners and may carry their own terms. Links are provided for verification and are not an endorsement. Rights-holders may contact us via the report / removal page.

9. Your feedback

If you send us corrections, suggestions, or other feedback, you allow us to use it to improve the Service without obligation to you.

10. Changes

We may update these terms. Material changes will be posted here with a revised effective date; continued use after that constitutes acceptance. [PLACEHOLDER: effective date]

11. Governing law and disputes

[PLACEHOLDER: governing law and exclusive venue] [PLACEHOLDER: decide whether to require arbitration and include a class-action waiver — this is a substantive choice with consumer-law implications and should be made with counsel]

12. Contact

contact@disclosurelens.com — or the report / removal page for corrections, removal requests, personal-data requests, and copyright notices. See also our privacy notice.