Last updated: [DATE]
This is a starting template, not a finished legal document. Replace every [bracketed placeholder] and have it reviewed by a lawyer before launch.
By creating an account or using TCL Advisory (“the Service”), operated by [COMPANY LEGAL NAME] (“we”, “us”), you agree to these Terms. If you don't agree, don't use the Service.
TCL Advisory aggregates and normalizes public vulnerability data (CVE, NVD, CISA KEV, EPSS, vendor advisories) and offers optional paid tiers (“Advisory Pro”, the “Advisory API”) with additional features. Public vulnerability data remains free to browse and search.
You're responsible for the security of your account credentials and API keys, and for all activity under them. Tell us immediately if you suspect unauthorized access. We may suspend or terminate accounts that violate these Terms.
Paid tiers are billed via Razorpay on the cadence you select (monthly/yearly) and auto-renew until canceled. Prices are shown at checkout in [CURRENCY]. Refunds: [REFUND POLICY — e.g. pro-rated, none, or within N days]. We reserve the right to change pricing with [N days'] notice for existing subscribers.
Don't: (a) attempt to circumvent API rate limits or trial quotas; (b) resell or redistribute bulk data feeds outside your plan's terms; (c) use the Service to attack, scan, or exploit systems without authorization; (d) reverse-engineer or scrape the web app in place of using the API.
API keys are personal to your account. Rate limits and quotas are enforced per the plan you're on (see /developers/billing) and may change with notice. We may revoke keys used in violation of these Terms or in a way that degrades Service availability for other customers.
Underlying vulnerability data (CVE, NVD, CISA KEV, EPSS) originates from public sources and remains subject to its original terms. Our aggregation, scoring (“TCL Priority”), and product itself are [COMPANY]'s intellectual property.
The Service is provided “as is.” Vulnerability data, severity scores, and exposure information are informational and not a guarantee of security posture or a substitute for your own security assessment. We don't warrant uninterrupted or error-free operation.
To the maximum extent permitted by law, [COMPANY] is not liable for indirect, incidental, or consequential damages arising from use of the Service, including decisions made based on data or priority scores it provides.
You may cancel your subscription and delete your account at any time from /profile. We may suspend or terminate access for Terms violations, non-payment, or as required by law.
We'll post updates here and, for material changes, notify account holders by email. Continued use after a change means you accept the updated Terms.
These Terms are governed by the laws of [JURISDICTION], without regard to conflict-of-law principles.
Questions about these Terms: [SUPPORT EMAIL].