LeakNix for Business terms

What these terms cover

These terms apply when a company uses LeakNix for Business, on any plan, Free included. They add to the LeakNix Terms of Service, which still apply. Where the two differ, these terms decide for LeakNix for Business.

In these terms, "you" means the company that holds the account, and the people it invites act for it. "We" means LeakNix.

The service

LeakNix for Business watches the work email addresses you list on the domains you verify. It checks each address against the public breach records when it is added and again when a new breach is published, runs a one-time check of each address in breach data and infostealer logs as your plan allows, and sends alerts to the recipients you choose.

On verified domains it also reads public DNS, certificate transparency logs and registry data, and connects to your own hosts the way a browser would, to read certificates and response headers. Look-alike domains, suppliers and every other domain are read from public records only.

The audit log and the alert emails are part of the service. Every change made in the app is written to the audit log, and the audit log cannot be switched off.

Your domains and your people

• You add a domain only if you control it, and you prove it with a DNS TXT record before any address on it is checked.
• You watch an address only if it is on one of your verified domains and you have the right to have it monitored, such as an employee's work address or a shared mailbox.
• Where the law that applies to you requires it, you tell the people whose addresses you watch that they are watched.
• If you turn on employee notifications, you confirm that you have the right to email your own people about their exposures. LeakNix then sends those emails at your request, with your company's name in them.
• You are responsible for what the people you invite do in your account. Their roles decide what each of them can change.

Where the data comes from

The breach records, breach data, infostealer logs, DNS records, certificate logs, registry data and vulnerability catalogs LeakNix reads come from third parties and public records. No source holds everything that has ever leaked, and a check finds what the sources hold when it runs. We do not promise that an exposure will be found, or found by a given time.

Leaked passwords

A leaked password is shown only in a masked form: in the app, in alert emails, in exports and in the API. We never store, show or send it in full, and there is no way to ask for it.

Acceptable use

You will not:

• watch a domain you do not control, or an address you have no right to have monitored;
• resell the data the service shows you;
• try to recover a password from its masked form;
• test the service against another customer's data; the demo company is there for testing.

We may suspend or close an account that breaks these rules.

Plans, billing and cancelling

• Every account starts on Free, with every feature and the free limits. Paid plans add volume, not features. The current plans and prices are on the pricing page.
• Paid plans are billed in USD, monthly or yearly, excluding tax. Payments are handled by the payment processor; we never see a card number.
• A paid plan renews at the end of each period until it is cancelled. You cancel from Billing in the app; the plan runs to the end of the period you paid for, and the account then returns to Free.
• We do not refund part of a period, except where the law requires it.
• When you change plans, the new limits apply at once. Anything over a smaller plan's limits is paused, not deleted, and you choose what to keep.

Your data

What we store, where, for how long and who can see it is in the LeakNix for Business privacy notice and on the security page. When an owner deletes the company, its data is purged after 7 days.

Liability

The disclaimer of warranties and the limitation of liability in sections 7 and 8 of the LeakNix Terms of Service apply to LeakNix for Business. The service shows what its sources hold; it does not prevent a breach, and a finding it does not show is not a statement that none exists.

Changes, law and contact

We may change these terms. As with the LeakNix Terms of Service, we tell you about significant changes by email or in the app, and the date at the top of this page says when they last changed.

These terms are governed by the laws of Romania, like the LeakNix Terms of Service.

Questions about these terms: support@leaknix.com.