Terms of Service

By registering for, accessing, or using the Service, you represent that you have the legal authority to bind the organization on whose behalf you are acting (if any) to these Terms, and that you are at least 18 years old. If you do not agree to these Terms, you must not use the Service.

These Terms incorporate our Privacy Policy by reference, along with any order form, subscription confirmation, or other document that references these Terms.

GomuGuard ingests security log data from sources you connect ("Log Sources") and runs specialized AI agents to detect, hunt, triage, and help you respond to security incidents ("Incidents") across that data, alongside dashboards, analytics, reporting, and a conversational AI assistant.

The Service is a tool that assists your own security operations. It does not guarantee detection of every threat present in your environment, and does not replace your organization's own security judgment and processes.

The Service is organized around a tenant workspace created at registration. The person or entity that registers the workspace, and any user subsequently granted the Admin role within it, is the "Account Admin." The Account Admin can invite additional users ("Members"), assign roles, configure billing, and manage the workspace's Log Sources, integrations, and settings.

You are responsible for maintaining the confidentiality of your login credentials and for all activity that occurs under your account, whether authorized by you or not. You must notify us promptly at darshit@xhorizyn.com of any suspected unauthorized use.

• Provide accurate registration, billing, and profile information, and keep it current.
• Ensure you have the right to submit the log data, credentials, and integrations you connect to the Service.
• Review AI-generated findings, narratives, and proposed remediation before relying on them or acting on them against a live environment (see Section 6).
• Comply with all applicable laws, including computer-crime and data-protection laws, in every jurisdiction from which you access the Service.
• Not use the Service to access, disrupt, or gather information about any system belonging to Xhorizyn or another customer's workspace.

In addition to Section 4, you must not use the Service to:

• violate the rights of any third party, including privacy, intellectual property, or contractual rights;
• attempt to circumvent usage limits, rate limits, or plan entitlements, or to reverse-engineer, resell, or white-label the Service without our written consent;
• upload malware or content intended to harm the Service itself or other customers; or
• use the Service in violation of any export-control or sanctions law.

We may suspend or terminate access for any violation of this Section, as described in Section 12.

The Service uses AI models — including a self-hosted language model that Xhorizyn operates on its own infrastructure — to assist with detection, hunting, triage narratives, conversational assistance, and generated reports. AI-generated output is probabilistic, not deterministic.

The Service does not guarantee that its findings are complete, accurate, or exhaustive. Automated detection and AI models can produce false positives (flagging activity that is not a real incident) and false negatives (missing a real one). Findings, severity ratings, and generated reports are provided to assist your own security judgment, not as a substitute for it, and must be independently verified before you rely on them for compliance attestations or incident-response decisions.

Paid plans are billed in advance on a recurring basis (monthly, quarterly, or annual, as selected) through our payment processor. By subscribing, you authorize us and our payment processor to charge your designated payment method for all fees due.

Except where required by law or expressly stated otherwise, fees are non-refundable. We may change our pricing or plan entitlements prospectively, with notice, effective at your next renewal. If a payment fails, we may suspend access to paid features until the balance is resolved.

Each party may have access to the other's non-public information (including, for your workspace, log data and Incidents, and for us, non-public features of the Service). Each party agrees to use the other's confidential information only to perform its obligations under these Terms and to protect it with at least the same degree of care it uses for its own confidential information, and no less than reasonable care.

Xhorizyn retains all right, title, and interest in and to the Service, including its underlying software, models, detection logic, and branding. You retain all right, title, and interest in your own data — including connected Log Sources, Incidents, and findings generated from your use of the Service ("Customer Data"). You grant us a limited license to process Customer Data solely to provide, secure, and improve the Service, as described in our Privacy Policy.

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTY OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY. TO THE MAXIMUM EXTENT PERMITTED BY LAW, XHORIZYN DISCLAIMS ALL WARRANTIES, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. Without limiting the foregoing, Xhorizyn does not warrant that the Service will be uninterrupted, timely, secure, or error-free, or that it will detect every security incident present in your environment.

TO THE MAXIMUM EXTENT PERMITTED BY LAW: (A) XHORIZYN WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, OR BUSINESS OPPORTUNITY, ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES; AND (B) XHORIZYN'S TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE WILL NOT EXCEED THE FEES YOU ACTUALLY PAID TO XHORIZYN FOR THE SERVICE IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM.

Some jurisdictions do not allow the exclusion of certain warranties or the limitation of certain damages. In those jurisdictions, the exclusions and limitations in Sections 10 and 11 apply only to the maximum extent permitted by applicable law, and our liability is limited to the smallest amount permitted.

You (and, where you act on behalf of an organization, that organization and its Account Admin, jointly and severally) agree to defend, indemnify, and hold harmless Xhorizyn, its officers, employees, and agents from and against any and all claims, demands, damages, liabilities, losses, costs, and expenses (including reasonable attorneys' fees) arising out of or related to your breach of these Terms, your violation of any applicable law or third party's rights, or content or credentials you submit to the Service.

We may suspend or terminate your access to the Service, immediately and without notice, if we reasonably believe you have violated Section 4 or 5, if required to do so by law, or to prevent harm to the Service or other customers. You may cancel your subscription at any time; cancellation takes effect at the end of the current billing period unless stated otherwise.

Sections 8 through 12 and 15 through 17 survive termination of your account or these Terms.

Log data, Incidents, and findings generated by the Service belong to you as Customer Data (Section 9) and are retained as described in our Privacy Policy. You may delete Customer Data at any time through the Service where supported; deletion is not necessarily instantaneous across backups.

These Terms are governed by the laws of the State of Delaware, USA, without regard to its conflict-of-laws principles. Any dispute arising out of or relating to these Terms or the Service will be brought exclusively in the state or federal courts located in Delaware, and you consent to the personal jurisdiction of those courts.

We may update these Terms from time to time. If we make a material change, we will provide notice (for example, by email or an in-product notice) before the change takes effect. Continued use of the Service after a change becomes effective constitutes acceptance of the updated Terms.

Questions about these Terms can be sent to darshit@xhorizyn.com.