Terms of Service

1. Agreement and eligibility

These Terms form an agreement between you and PhiShark. You must be at least 18 and legally capable of contracting. If you use the service for an organization, you represent that you are authorized to bind it. Order forms, product terms and a signed enterprise agreement prevail over these Terms for conflicts within their scope.

2. Accounts and credentials

You must provide accurate information, protect credentials and API keys, use reasonable access controls and promptly report compromise. You are responsible for activity under your account except to the extent caused by PhiShark’s breach of duty. Accounts may not be shared or resold except under an approved plan.

3. Service use and authority

PhiShark provides security analysis and decision-support tools. You may analyze only systems, URLs, messages, files and data you own or are authorized to test. You must comply with the Acceptable Use Policy and applicable law and maintain independent security controls, backups, review and incident-response procedures.

4. AI and cybersecurity results

Verdicts, scores, explanations and alerts are probabilistic decision support, not legal, financial or professional advice. False positives, false negatives, delay and incomplete detection can occur. PhiShark does not promise that every attack, malicious file, data loss or harmful instruction will be detected or blocked. You must independently verify important results.

5. Fees, renewal and cancellation

Prices, taxes, billing period and included usage are shown at checkout or in an order form. Unless stated otherwise, paid subscriptions renew automatically for the same period until cancelled before renewal. Dodo Payments processes payment under its terms. Consumer pre-contract information, withdrawal and mandatory refund rights apply where required; see the Cancellation & Refund Policy.

6. Customer content and privacy

You retain rights in content you submit and grant PhiShark a limited right to host, process, reproduce and transmit it only to provide, secure and support the service and comply with law. You represent that you have the required rights, notices and lawful basis. PhiShark retains its service, software, models, documentation, aggregated statistics and feedback, excluding your confidential content.

7. Availability and changes

We may maintain, improve or change features and may impose reasonable limits to protect security and capacity. Any service levels apply only if expressly agreed. Beta and free features may be changed or withdrawn. We will use reasonable efforts to give notice of a material reduction to paid core functionality.

8. Suspension and termination

We may suspend access reasonably necessary to address security risk, unlawful use, non-payment or material breach, and will provide notice where practicable. Either party may terminate as allowed by the subscription or order. Provisions that by nature should survive—including accrued payment, confidentiality, intellectual property, disclaimers and liability—remain effective.

9. Warranties and disclaimers

To the maximum extent allowed by law, the service is provided “as is” and “as available” and implied warranties are excluded. PhiShark does not warrant uninterrupted or error-free operation or that outputs are complete or suitable for a particular risk decision. Nothing excludes express commitments in a signed agreement or non-waivable consumer rights.

10. Limitation of liability

For B2B use and to the extent permitted by law, neither party is liable for indirect, incidental, special, punitive or consequential loss, or lost profits, revenue, goodwill or data. PhiShark’s aggregate liability relating to the affected service is capped at fees paid for that service in the 12 months before the event; for free services, the cap is the Turkish-lira equivalent of EUR 100.

These limits do not apply to intent, gross negligence, death or personal injury where liability cannot be limited, fraud, breach of confidentiality or data-protection liability to the extent it cannot lawfully be limited, or mandatory consumer rights. Each party remains responsible to the extent its acts caused the loss.

11. Governing law and disputes

Turkish law applies without depriving consumers of mandatory protections of their habitual residence. For B2B disputes, Istanbul Anatolian Courts and Enforcement Offices have exclusive jurisdiction. Consumers may use courts, consumer arbitral committees and other authorities competent under mandatory law.

12. Changes and contact

Material changes will be versioned and notified where required. Continued use after an effective change constitutes acceptance only where legally valid; renewed affirmative acceptance will be requested when necessary. Contact [email protected] for service questions and [email protected] for privacy matters.