DoodadLabs Universal Terms of Service

Last Updated: 8th August 2025 (08/08/2025)

1. Acceptance & Scope

By accessing or using any website, software, API, or digital service (collectively, "Services") provided by DoodadLabs ("we," "us," "our"), you ("User") agree to these legally binding terms. If you disagree, do not use our Services.

2. Open-Source & Self-Hosted Software

Self-Hosted Use:

Some Services are provided as open-source software that you may host and modify independently.

No Support/Warranty: We are not responsible for configuration errors, security flaws, or damages caused by self-hosted deployments.
Compliance Required: You must adhere to the applicable open-source license (e.g., AGPL, MIT) and all laws.

Paid Features: Certain advanced features may require a subscription; terms for paid plans apply separately.

3. Eligibility & Account Security

You must be 18+ (or the legal age of majority in your jurisdiction).
If using on behalf of an entity, you warrant authority to bind them.
You are solely responsible for account credentials, API keys, and usage.

4. Permitted Use

Our Services may be used only:

With explicit authorization from all relevant parties (e.g., for security testing, data processing).
In compliance with all applicable laws (e.g., privacy, cybersecurity, and intellectual property laws).

5. Prohibited Activities

You must not:

Use our Services without authorization (e.g., unauthorized scanning, attacks).
Falsify your identity or the origin of any request.
Disrupt systems (e.g., excessive traffic, brute-force attempts).
Modify or fork our open-source software to circumvent paywalls or licensing terms.
Use self-hosted versions to violate laws (e.g., launch attacks, process illegal data).
Misrepresent ownership of our open-source software or paid tools.

6. Data Handling & Privacy

What We Process:

User-Submitted Data: Inputs, configurations, and requests sent to our Tools.
Technical Metadata: IPs, timestamps, error logs, and aggregated statistics (e.g., "X threats detected").
Account Data: Email, payment info (if applicable), and service settings.

What We Do Not Store Long-Term:

Raw sensitive data (e.g., exploit payloads, personally identifiable information).
End-user content beyond transient processing (unless explicitly required for functionality).

How We Use Data:

Service Operation: Real-time analysis, threat detection, and debugging.
Improvements: Aggregated, anonymized analytics (e.g., "30% of attacks were SQLi").
Security: Abuse prevention and compliance with legal requests.

Third Parties:

We do not sell data, but may share with:

Infrastructure providers (e.g., cloud hosting, email services).
Legal authorities (if compelled by law).

7. Liability Disclaimer

Self-Hosted Software:

Your Responsibility: You assume all risks for self-hosted deployments (e.g., data breaches, downtime).
No Liability: We disclaim all liability for modified or misconfigured self-hosted instances.

Paid Services:

Subscriptions are non-refundable unless legally required.
We may terminate access to paid features for abuse or non-payment.

8. Intellectual Property

All Services, logos, and content are owned by DoodadLabs or licensors. No rights granted except limited use per these terms.

9. Termination

We may suspend or terminate access for violations, non-payment, or legal compliance.

10. Dispute Resolution

Governing Law: These terms shall be governed by and construed in accordance with the laws of England and Wales. The courts of England and Wales shall have exclusive jurisdiction.
Arbitration: Disputes resolved via binding arbitration (no class actions) in London, UK.

11. Changes & Contact

We may update these terms; continued use = acceptance.
Contact: legal@doodadlabs.org for questions or data deletion requests.