Terms of Service

1. Definitions

• "Platform" — The Gravitas threat intelligence platform, accessible at app.withgravitas.io
• "Services" — All monitoring, alerting, enrichment, analysis, and intelligence services provided through the Platform
• "Customer" — The organisation that has subscribed to the Services
• "User" — An individual authorised by a Customer to access the Platform
• "Organisation" — The business entity represented by the Customer
• "Threat Intelligence Data" — Data derived from breach databases, stealer logs, dark web sources, and other intelligence feeds processed by the Platform
• "Seed Data" — Domains, email addresses, IP addresses, and other identifiers submitted by the Customer for monitoring
• "We", "Us", "Our" — Laneden Ltd (trading as Gravitas), company number 12297903

2. Eligibility

The Platform is intended for business use only. By accessing the Platform, you confirm that:

• You are authorised by a subscribing Customer to access the Platform
• You are at least 18 years of age
• You will use the Platform solely for legitimate security operations on behalf of your Organisation

The Platform is not intended for consumer or personal use.

3. Account responsibilities

You are responsible for:

• Providing accurate and current information during registration
• Maintaining the security of your login credentials
• All activity that occurs under your account
• Notifying us immediately at security@withgravitas.io if you suspect your account has been compromised

We reserve the right to suspend accounts where we reasonably suspect unauthorised access.

4. Service description

Gravitas provides threat intelligence services including:

• Credential breach monitoring and alerting
• Information stealer log analysis
• Dark web and underground marketplace monitoring
• Service identification and risk scoring
• AI-powered enrichment and incident response recommendations
• Campaign attribution and threat actor profiling

Threat Intelligence Data is provided "as-is". It is derived from third-party sources including data breaches, malware logs, and underground forums. We make reasonable efforts to ensure accuracy but do not guarantee that Threat Intelligence Data is complete, current, or error-free. The absence of results does not mean the absence of compromise.

5. Acceptable use

Use of the Platform is subject to our Acceptable Use Policy. Key prohibitions include:

• Using exposed credentials to access any account or system
• Reselling, redistributing, or publicly disclosing raw breach data
• Using data to harass, stalk, or target individuals
• Monitoring organisations you are not authorised to monitor

Violation of the Acceptable Use Policy may result in immediate account termination.

6. Intellectual property

Our IP: The Platform, its source code, algorithms, enrichment logic, user interface, documentation, and all related intellectual property are owned by Laneden Ltd. Nothing in these Terms transfers any ownership rights to you.

Your data: You retain ownership of all Seed Data submitted to the Platform.

Intelligence outputs: Threat intelligence results, alerts, and reports generated by the Platform are licensed to you for your Organisation's internal security use only. You may not resell, sublicense, redistribute, or publicly disclose these outputs without our prior written consent.

7. Data and privacy

Our collection and use of personal data is described in our Privacy Policy.

Where the Customer acts as a data controller and Laneden Ltd processes personal data on the Customer's behalf, the terms of our Data Processing Agreement apply.

8. Availability

We use reasonable commercial efforts to maintain Platform availability, but do not guarantee any specific level of uptime. We may temporarily suspend the Platform for:

• Planned maintenance (we will provide reasonable advance notice where possible)
• Emergency security patches or critical updates
• Circumstances beyond our reasonable control (force majeure)

Force majeure events include, without limitation: natural disasters, acts of government, internet infrastructure failures, cyberattacks, and utility outages.

9. Liability limitations

Liability cap: Our total aggregate liability under these Terms shall not exceed the fees paid by the Customer in the 12 months immediately preceding the claim.

Exclusions: To the maximum extent permitted by law, we exclude liability for:

• Indirect, consequential, special, or punitive damages
• Loss of profits, revenue, data, or business opportunity
• Decisions taken or not taken based on Threat Intelligence Data
• The completeness, accuracy, or timeliness of Threat Intelligence Data
• Actions taken by third parties using information obtained through the Platform

Nothing in these Terms excludes or limits liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be excluded under English law.

10. Termination

By either party: Either party may terminate by providing 30 days' written notice to the other party.

Immediate termination: We may terminate or suspend your access immediately, without prior notice, for:

• Material breach of these Terms or the Acceptable Use Policy
• Non-payment of fees after reasonable notice
• Activity that poses a security risk to the Platform or other users

After termination: Customer data will be deleted within 30 days of termination, unless a longer retention period is required by law. Customers may request data export before termination takes effect.

11. Governing law

These Terms are governed by the laws of England and Wales. Any disputes arising from or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts of England.

If any provision of these Terms is found to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.