Terms of Service

1. Agreement and legal operator

These Terms of Service (the “Terms”) govern access to and use of the CyberNet AI website, accounts, cybersecurity tools, reports, subscriptions, and related services (collectively, the “Services”). “CyberNet”, “we”, “us”, and “our” refer to the person or legal entity that operates the CyberNet AI brand.

By accessing the Services, creating an account, submitting content, connecting an API key, or purchasing a subscription, you confirm that you have read and agree to these Terms, the Privacy Policy, the Refund and Cancellation Policy, and the Acceptable Use Policy.

CyberNet records the version and time of legal acceptance associated with authenticated accounts. Acceptance records may be retained to demonstrate the contract, payment authorisation, legal compliance, or resolution of disputes.

2. Eligibility, age, and authority

You must be at least 13 years old to create an account. If you are below the age of legal majority where you live, a parent or legal guardian must review and accept these Terms for you. Paid subscriptions may only be purchased by a person with legal capacity or with permission from the payment-method holder.

If you use CyberNet for a school, employer, company, client, or other organisation, you confirm that you are authorised to accept these Terms and submit the relevant information on its behalf.

3. Accounts and security

You must provide accurate information, maintain a secure password, protect your devices and email account, and promptly report suspected unauthorised access. You are responsible for activity performed through your account except where applicable law provides otherwise.

CyberNet may require email verification, security checks, re-authentication, or additional information before allowing sensitive account, billing, export, or deletion actions. You must not share accounts, bypass usage limits, or allow another person to use your account unlawfully.

4. Description of the Services

Depending on availability and plan, CyberNet may provide:

• Quick Scan: rule-based and AI-assisted analysis of suspicious text, messages, links, images, screenshots, QR codes, email headers, and multi-artifact investigations.
• Analysis AI: account-based text, link, and image analysis, explanations, risk scoring, recommended defensive actions, and optional use of a user-provided OpenAI API key.
• Recovery Mode: guided, case-based incident-response support for account takeovers, phishing, scams, and related cybersecurity incidents, including a recovery plan, task checklist, and case updates.
• Account and Pro features: usage limits, saved reports, downloadable reports, billing controls, history, support, and legal or privacy controls.
• Learning content: general cybersecurity education and practical defensive guidance.

5. Automated analysis and AI limitations

CyberNet relies on automated rules, artificial intelligence, third-party infrastructure, available reputation information, and the content supplied by the user. Results may be inaccurate, incomplete, delayed, outdated, inconsistent, misleading, or affected by missing context. False positives, false negatives, incorrect classifications, unsupported inferences, and service errors may occur.

CyberNet is decision-support software, not antivirus software, endpoint protection, identity-theft insurance, a bank, a law firm, a managed security service, law enforcement, or an emergency-response service. It does not continuously monitor every device, account, inbox, network, or transaction.

6. No guarantee against hacking, scams, or loss

CyberNet cannot guarantee that you will avoid phishing, fraud, hacking, malware, identity theft, account takeover, data loss, financial loss, reputational harm, or other cyber incidents. Threat actors may conceal evidence, change tactics, exploit unknown vulnerabilities, or use content that automated systems cannot reliably evaluate.

You remain responsible for strong unique passwords, multi-factor authentication, software updates, backups, access controls, device protection, independent verification, and prompt incident response. Do not rely solely on CyberNet when money, credentials, legal rights, sensitive data, or account access may be at risk.

7. Submitted content and user permissions

You may submit text, URLs, screenshots, QR codes, images, headers, files supported by the interface, and investigation notes (“Submitted Content”). You confirm that you have the lawful right and authority to submit it and that processing it does not violate privacy, confidentiality, intellectual-property, employment, contractual, or other rights.

Redact unnecessary personal or confidential information. Do not submit passwords, one-time codes, full payment-card details, private keys, recovery phrases, government identifiers, medical records, intimate content, or trade secrets unless strictly necessary, legally permitted, and appropriately protected.

You grant CyberNet a limited licence to process, transmit, transform, analyse, and display Submitted Content only as reasonably necessary to provide, secure, troubleshoot, and improve the Services, enforce these Terms, and comply with law, as described in the Privacy Policy.

8. User-provided API keys

CyberNet may allow you to connect your own OpenAI API key (“BYOK”). You must own or be authorised to use the key, comply with the provider’s terms, and protect it from disclosure. API use is billed directly by the provider to the account connected to that key, not included in CyberNet subscription fees, and remains your responsibility.

CyberNet stores a validated BYOK key only in the current browser tab’s session storage and does not intentionally save it to your CyberNet account or Supabase database. The key is temporarily transmitted over HTTPS through CyberNet’s Netlify function to validate it and send requests to OpenAI. Provider-side processing and temporary retention are governed by the provider’s terms and privacy documentation.

Use a separate restricted project key with suitable permissions, budgets, and spending limits. CyberNet is not responsible for provider charges, quota use, revoked keys, project restrictions, or losses caused by exposing or misconfiguring a key, except where liability cannot lawfully be excluded.

9. Defensive and lawful use only

CyberNet is intended for defensive, educational, and authorised security use. You must comply with the Acceptable Use Policy. You may not attack systems, steal credentials, distribute malware, evade safeguards, test targets without permission, harass others, conceal criminal activity, or use CyberNet in violation of law.

10. Free, Pro, and Business plans

CyberNet may offer Free, Pro, and Business plans with different features, limits, models, storage, or response priority. Current advertised allowances may include 3 AI analyses per day for Free and 15 per day for Pro. Business allowances are per team and depend on the seat tier purchased, as described below. Limits are shared across supported analysis types and may be adjusted for security, capacity, abuse prevention, provider costs, or future plan changes.

Pro features may include advanced analysis, saved history, reports, and faster processing. Features described as planned or coming soon may not be available at the time of purchase unless the checkout page expressly states otherwise.

10.1 Business team accounts

A Business subscription creates a team account. The person who purchases the subscription is the team owner. The owner may invite other people to join the team as members, up to the seat limit of the tier purchased. Each member signs in with their own separate CyberNet AI account; a Business subscription is not a shared login and must not be used as one.

Business seat tiers are currently advertised at 5 seats, 10 seats, and 20 seats. The seat limit counts active members together with invitations that have been sent but not yet accepted. For team sizes or arrangements outside these tiers, contact [email protected].

Shared allowances. Business daily allowances belong to the team as a whole, not to each individual member. All members draw from the same daily pool, so usage by one member reduces what remains for the rest of the team that day. Advertised pools are 50 analyses and 20 Recovery Mode cases per day at 5 seats, 90 and 36 at 10 seats, and 160 and 64 at 20 seats. Analysis allowances reset at UTC midnight; Recovery Mode allowances reset daily at 12:00 PM Gulf Standard Time.

Owner visibility. The team owner can view the activity of every member of their team, including the stored results of each member's Quick Scan, Analysis AI, and Recovery Mode use. Anyone accepting an invitation is shown this before they join. If you do not want your activity visible to the team owner, do not accept the invitation, and use a separate personal account instead.

Joining and leaving. Membership begins only when the invited person accepts the invitation from their own signed-in account. Once a member has joined, only the team owner can remove that member from the team — members cannot remove themselves. A member who wishes to leave must ask the team owner to remove them. A removed member immediately loses Business access and returns to whatever plan their own account holds.

Owner responsibility. The team owner is responsible for who they invite, for removing members who should no longer have access, and for all use of the Services under their team account. Members remain bound by these Terms and by the Acceptable Use Policy in their own right.

11. Subscription pricing and automatic renewal

CyberNet AI Pro is currently advertised at USD $9.99 per month or USD $95.90 per year, unless a different amount is clearly shown at checkout. CyberNet AI Business is currently advertised per seat tier: 5 seats at USD $40 per month or $384 per year, 10 seats at USD $80 per month or $768 per year, and 20 seats at USD $160 per month or $1,536 per year. A paid subscription renews automatically at the displayed interval until cancelled.

Before checkout, CyberNet displays the amount, billing interval, automatic-renewal notice, and required acceptance. By continuing, you authorise CyberNet and Stripe to charge the selected payment method for the initial term and each renewal, including applicable taxes, until cancellation takes effect.

CyberNet may change future pricing with reasonable advance notice where required. A price change applies no earlier than the next renewal unless you expressly agree otherwise.

12. Payments, taxes, and failed charges

Payments are processed by Stripe or another disclosed payment provider. CyberNet does not intentionally store complete payment-card numbers. You authorise the provider to collect and process payment, billing, fraud-prevention, and transaction information under its own terms.

You are responsible for applicable taxes, bank fees, currency-conversion charges, and accurate billing information. Failed, disputed, reversed, or overdue payments may result in retries, restricted access, suspension, cancellation, or return to the Free plan.

13. Cancellation

You may cancel through Account → Manage Billing or by contacting support when self-service cancellation is unavailable. Unless the checkout flow or applicable law states otherwise, cancellation takes effect at the end of the current paid billing period and Pro access continues until that date.

Deleting your CyberNet account does not by itself cancel a Stripe subscription. Cancel the subscription before requesting account deletion. CyberNet may prevent account deletion while a subscription remains active, trialling, or past due so that billing obligations can be resolved.

Business team accounts. Only the team owner can cancel a Business subscription, because the subscription belongs to the owner's account. When a Business subscription is cancelled, lapses, or goes unpaid, every member of that team loses Business access at the end of the paid period, not just the owner. Each member's own account returns to whatever plan it holds independently. Members cannot cancel the team subscription and cannot remove themselves from the team; see section 10.1.

14. Refunds and billing disputes

Fees are generally non-refundable after a billing period begins, and partial or prorated refunds are not normally provided, except for duplicate charges, confirmed billing errors, a material failure to provide the purchased service, refunds approved by CyberNet, or refunds required by applicable law.

The complete rules appear in the Refund and Cancellation Policy. Nothing limits mandatory consumer rights or lawful rights concerning unauthorised transactions.

15. Saved reports, history, and deletion

Saved reports or history may be stored in the browser, CyberNet’s database, or both. Browser data may be lost when site data is cleared, private browsing ends, the device changes, or the browser removes storage. CyberNet does not guarantee permanent retention or recovery.

Account controls may allow you to export available data, delete individual or all saved history, and request account deletion. Deletion requests are subject to technical processing periods, backups, security investigations, payment records, legal holds, fraud prevention, and information CyberNet must retain by law.

Reports are informational and are not certified forensic, legal, compliance, insurance, or expert-witness reports.

16. Privacy and data protection

The Privacy Policy explains the categories of information CyberNet processes, purposes, service providers, browser storage, international processing, retention schedule, legal-acceptance records, security measures, and privacy rights.

17. Third-party providers and external services

CyberNet depends on services that may include Supabase, Netlify, Stripe, OpenAI, browser-isolation providers, reputation services, hosting, email, domain, and internet infrastructure. Their outages, errors, policy changes, service limits, and security incidents may affect CyberNet.

CyberNet may display or analyse external links but does not control or endorse third-party destinations. Opening a link, contacting a sender, downloading content, or following an external recommendation is at your own risk and should be independently verified.

18. Availability, maintenance, and changes

The Services are provided on an on-demand and “as available” basis. CyberNet may be unavailable because of maintenance, updates, attacks, provider outages, capacity limits, security controls, legal restrictions, or events outside reasonable control.

CyberNet may add, remove, pause, redesign, or modify features, interfaces, providers, models, usage limits, plans, and integrations. CyberNet does not guarantee a release date for planned features or permanent compatibility with every browser, device, provider, or file type.

19. Support and user communications

CyberNet may send essential account, security, legal, payment, renewal, cancellation, verification, or service messages. Optional marketing messages, if introduced, will be handled separately where consent is required.

Support information must not include passwords, one-time codes, API keys, private keys, recovery phrases, or full card details.

20. Intellectual property

CyberNet’s name, logos, interface, source code, designs, documentation, educational content, report formats, and original materials are protected by intellectual-property laws. Except for the limited right to use the Services under these Terms, no rights are transferred to you.

You may download reports for your own lawful use. You may not copy, resell, scrape, reverse engineer, remove notices from, or create a competing service from CyberNet except where applicable law expressly permits it.

21. Suspension and termination

CyberNet may warn, restrict, suspend, or terminate access if you breach these Terms, fail to pay, create security or legal risk, misuse the Services, interfere with operations, or expose CyberNet or others to harm. CyberNet may preserve relevant records and cooperate with providers or lawful authorities where required.

22. Disclaimer of warranties

To the maximum extent permitted by applicable law, CyberNet is provided “as is” and “as available” without express, implied, or statutory warranties, including warranties of accuracy, reliability, availability, merchantability, fitness for a particular purpose, non-infringement, security, or freedom from harmful components.

Nothing in these Terms excludes warranties or consumer protections that cannot lawfully be excluded.

23. Limitation of liability

To the maximum extent permitted by applicable law, CyberNet and its operator, contractors, suppliers, and service providers will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for loss of money, profits, revenue, data, access, accounts, reputation, opportunities, devices, or goodwill arising from or connected with:

• use of, inability to use, or reliance on CyberNet;
• incorrect, incomplete, delayed, unavailable, or misleading analysis;
• false positives, false negatives, hacking, scams, phishing, malware, identity theft, account compromise, or data loss;
• user actions, Submitted Content, connected API keys, provider charges, third-party services, external websites, or payment disputes; or
• service interruption, deletion, corruption, disclosure, or loss of information.

Where liability cannot be fully excluded, aggregate liability arising from the Services will, to the maximum extent permitted by law, not exceed the greater of the amount you paid CyberNet during the 12 months before the event giving rise to the claim or USD $100.

These limits do not apply to fraud, wilful misconduct, or liability that cannot lawfully be excluded or limited.

24. Indemnity

To the extent permitted by law, you agree to defend, indemnify, and hold harmless CyberNet and its operator from claims, losses, liabilities, costs, and reasonable legal fees arising from your unlawful or unauthorised use, Submitted Content, connected API keys, infringement of third-party rights, breach of these Terms, or misuse of analysis results.

25. Governing law and disputes

Unless the final legal-operator notice states otherwise, these Terms are governed by the laws of the United Arab Emirates, without prejudice to mandatory consumer rights that apply in your country of residence. Subject to mandatory forums or consumer rights, disputes will be submitted to the competent courts of the United Arab Emirates.

Before filing a formal claim, contact [email protected] and allow a reasonable opportunity to resolve the issue informally. This does not prevent urgent protective relief or a legally protected complaint.

26. General terms

If a provision is unenforceable, it will be modified or removed only to the minimum extent necessary and the remaining provisions remain effective. Failure to enforce a provision is not a waiver. You may not transfer your account or rights without permission. CyberNet may transfer these Terms as part of a restructuring, financing, acquisition, or sale.

These Terms and incorporated policies are the entire agreement concerning the Services. Headings are for convenience. The English version controls unless applicable law requires otherwise.

27. Changes to these Terms

CyberNet may update these Terms to reflect product, provider, security, legal, pricing, or business changes. The version and effective date will be updated. Material changes may be communicated through the website, account, or email. When law requires renewed acceptance, CyberNet will request it before continued use or a new purchase.

28. Contact

Questions, legal notices, billing concerns, cancellation requests, and privacy requests may be sent to [email protected]. Include your account email and enough information to identify the issue, but never send passwords, one-time codes, API keys, private keys, recovery phrases, or complete payment-card data.