Terms of Service

By accessing or using BootIntel ("the Service"), operated by Zenofex LLC ("Company," "we," "us," or "our"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, you may not use the Service. These Terms constitute a legally binding agreement between you (or the organization you represent) and Zenofex LLC. By creating an account, you confirm that you have authority to accept these Terms on behalf of yourself or your organization.

BootIntel is a hardware security intelligence platform designed to assist authorized security researchers, penetration testers, and embedded systems engineers in analyzing the security posture of hardware devices. The Service provides UART serial capture, boot log analysis, vulnerability identification, CVE correlation, and AI-powered security analysis. All features are intended exclusively for authorized security research and testing of devices you own or have explicit written permission to test. We make no representation that the Service will identify all vulnerabilities in a given device. Security analysis results should be treated as one component of a comprehensive security assessment, not as a definitive certification of security.

You agree to use the Service exclusively for lawful purposes and only with devices you own or for which you have obtained explicit written authorization from the device owner prior to testing. You must not: • Use the Service to attack, probe, compromise, or gain unauthorized access to any device, network, system, or infrastructure you do not own or have permission to test • Use analysis results, findings, or exploit guidance from the Service to harm others or conduct unauthorized intrusions • Attempt to circumvent security controls on devices you do not own or have written permission to test • Share access credentials, API keys, or session tokens with unauthorized parties • Resell, sublicense, or provide access to the Service to third parties outside of authorized team seat arrangements • Attempt to reverse engineer, decompile, or extract the Service's source code, algorithms, or proprietary methods • Scrape, crawl, or use automated means to extract data from the Service beyond normal API usage within your plan limits • Use the Service to develop competing products or services • Upload or transmit malware, exploits, or other malicious code to the Service infrastructure You are solely responsible for ensuring your use complies with all applicable laws, including computer crime laws, export regulations, and any contractual obligations you have with device manufacturers or employers. Violation of these Terms may result in immediate account termination and may expose you to civil or criminal liability. We reserve the right to report suspected illegal activity to appropriate law enforcement authorities.

Regardless of authorization, you may not use the Service to: • Conduct attacks against critical infrastructure, utilities, government systems, financial systems, or healthcare systems • Develop malware, ransomware, spyware, or other destructive or intrusive tools intended for harmful deployment • Perform unauthorized penetration testing, red team operations, or vulnerability disclosure against third-party systems • Violate any applicable local, state, national, or international law or regulation • Interfere with or disrupt the integrity, performance, or availability of the Service or its underlying infrastructure • Harass, abuse, threaten, or harm any individual • Circumvent any content filtering, rate limiting, or access controls imposed by the Service

To use the Service, you must create an account with a valid email address. You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. You must immediately notify us at [email protected] if you suspect unauthorized access to your account. We reserve the right to refuse service, terminate accounts, or remove content at our sole discretion, including for violation of these Terms, suspected fraud, or abuse of the Service.

Paid plans that include team seats allow you to invite additional users ("Members") to your organization account. The account owner ("Owner") is responsible for all activity by Members under the organization account. You may not exceed the seat limits of your plan. The Owner is responsible for revoking access for Members who are no longer authorized. All Members are individually bound by these Terms. Organization data (devices, scan results, findings) is owned by the organization subscription holder. Upon cancellation, data is subject to the retention and deletion policy described below.

Paid subscriptions are billed through Stripe. By subscribing, you authorize Zenofex LLC to charge your payment method on a recurring basis at the selected billing interval (monthly or annual). Subscriptions automatically renew unless cancelled at least 24 hours before the renewal date. You may cancel at any time through the billing portal in your account dashboard; cancellation takes effect at the end of the current billing period. No refund is issued for unused time in the current period unless required by applicable law. Refunds: First-time subscribers who believe the Service did not perform as described may request a refund within 7 days of initial purchase by contacting [email protected]. Refund eligibility is determined at our sole discretion and is limited to one refund per customer. Price changes: We may change subscription prices with 30 days' notice. Continued use of the Service after the effective date of a price change constitutes acceptance of the new pricing. Failure to pay: We reserve the right to suspend or terminate your account for non-payment. Disputed charges must be raised with us directly before initiating a chargeback; chargebacks may result in immediate account suspension.

All content, features, and functionality of the Service, including the software, algorithms, machine learning models, documentation, UI design, and trade secrets, are owned by Zenofex LLC and are protected by applicable copyright, trademark, trade secret, and other intellectual property laws. You retain ownership of all data you submit to the Service (UART logs, device data, boot logs). By using the Service, you grant Zenofex LLC a limited, non-exclusive, worldwide, royalty-free license to process, store, and analyze that data solely to provide the Service to you. We do not use your device data to train AI models or for any purpose other than delivering the Service. The "BootIntel" name and logo are trademarks of Zenofex LLC. You may not use our trademarks without prior written consent.

Security analysis is inherently probabilistic. The Service identifies potential vulnerabilities based on pattern matching, CVE correlation, and AI analysis, but cannot guarantee that all vulnerabilities will be detected, or that all identified findings are true positives. THE SERVICE IS PROVIDED FOR INFORMATIONAL PURPOSES ONLY. RESULTS SHOULD NOT BE RELIED UPON AS THE SOLE BASIS FOR SECURITY DECISIONS. WE MAKE NO WARRANTY THAT THE SERVICE WILL IDENTIFY ALL VULNERABILITIES IN ANY DEVICE OR SYSTEM. We are not responsible for any security incident, breach, or harm arising from vulnerabilities that the Service did not identify.

Plans that include API access are subject to the rate limits specified in your plan (requests per day). Exceeding your rate limit will result in requests being rejected until the limit resets. We reserve the right to adjust rate limits with notice if usage threatens Service stability. API keys are credentials that provide authenticated access to the Service. You are responsible for securing your API keys. Do not embed API keys in client-side code, public repositories, or shared environments. If a key is compromised, revoke it immediately from your account dashboard. We reserve the right to revoke API access for abuse, excessive usage, or violation of these Terms.

The Service includes security analysis software and tools that may be subject to U.S. Export Administration Regulations (EAR) and other applicable export control laws. By using the Service, you represent and warrant that: • You are not located in, or acting on behalf of a person or entity located in, a country subject to U.S. economic sanctions or export restrictions (including but not limited to Cuba, Iran, North Korea, Russia, Syria, and the Crimea/Donetsk/Luhansk regions of Ukraine) • You are not on any U.S. government denied parties list, including the Entity List, Denied Persons List, or Specially Designated Nationals list • You will not export, re-export, or transfer the Service or any results obtained from the Service in violation of applicable export control laws Violation of export control laws may result in immediate account termination and may be reported to appropriate government authorities.

We respect intellectual property rights. If you believe that content available through the Service infringes your copyright, please send a written notice to [email protected] with the following information: • Identification of the copyrighted work claimed to be infringed • Identification of the infringing material and its location within the Service • Your contact information • A statement of good faith belief that the use is not authorized • A statement under penalty of perjury that the information is accurate • Your signature (electronic or physical) We will respond to valid DMCA takedown notices in accordance with applicable law.

You agree to indemnify, defend, and hold harmless Zenofex LLC, its officers, directors, employees, agents, and successors from and against any and all claims, damages, losses, costs, and expenses (including reasonable attorneys' fees) arising out of or related to: • Your use of the Service in violation of these Terms • Your use of the Service against devices or systems you do not own or have no authorization to test • Any violation of applicable law by you • Any data or content you submit to the Service • Any claim that your use of the Service has caused harm to a third party This indemnification obligation survives termination of your account and these Terms.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, ZENOFEX LLC SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, LOSS OF DATA, LOSS OF GOODWILL, OR BUSINESS INTERRUPTION, ARISING OUT OF OR RELATED TO YOUR USE OF OR INABILITY TO USE THE SERVICE. IN NO EVENT SHALL OUR TOTAL CUMULATIVE LIABILITY TO YOU FOR ALL CLAIMS RELATED TO THE SERVICE EXCEED THE GREATER OF (A) THE TOTAL AMOUNT YOU PAID TO US IN THE 12 MONTHS PRECEDING THE CLAIM OR (B) ONE HUNDRED U.S. DOLLARS ($100). SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF CERTAIN WARRANTIES OR LIMITATION OF LIABILITY. IN SUCH JURISDICTIONS, OUR LIABILITY IS LIMITED TO THE MINIMUM EXTENT PERMITTED BY LAW.

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ACCURACY. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, SECURE, OR FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS. WE DO NOT WARRANT THAT ANY SECURITY FINDINGS OR ANALYSIS PRODUCED BY THE SERVICE ARE COMPLETE, ACCURATE, OR UP-TO-DATE.

PLEASE READ THIS SECTION CAREFULLY. IT AFFECTS YOUR LEGAL RIGHTS. Informal Resolution: Before initiating formal legal proceedings, you agree to contact us at [email protected] and attempt to resolve the dispute informally for at least 30 days. Binding Arbitration: If informal resolution fails, you and Zenofex LLC agree that any dispute, claim, or controversy arising out of or relating to these Terms or the Service shall be resolved by binding arbitration administered by the American Arbitration Association (AAA) under its Commercial Arbitration Rules. The arbitration shall take place in Delaware. The arbitrator's decision shall be final and binding. Class Action Waiver: YOU AND ZENOFEX LLC AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN AN INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY CLASS, COLLECTIVE, OR REPRESENTATIVE ACTION. The arbitrator may not consolidate more than one person's claims and may not preside over any class proceeding. Exceptions: Either party may seek injunctive or other equitable relief in a court of competent jurisdiction for matters involving intellectual property or unauthorized use of the Service.

These Terms shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of law provisions. To the extent any dispute is not subject to arbitration, the parties consent to the exclusive jurisdiction of the state and federal courts located in Delaware.

You may terminate your account at any time by cancelling your subscription and requesting account deletion at [email protected]. We may suspend or terminate your account immediately, without notice or liability, for any reason, including if we reasonably believe you have violated these Terms. Upon termination, your right to use the Service ceases immediately. Provisions of these Terms that by their nature should survive termination (including intellectual property, indemnification, limitation of liability, and dispute resolution) shall survive.

We reserve the right to modify these Terms at any time. We will provide at least 14 days' notice of material changes by email to your registered address or by posting a prominent notice on the Service. Your continued use of the Service after the effective date of revised Terms constitutes your acceptance of the changes.

For legal inquiries or notices under these Terms: Zenofex LLC [email protected] For general support: [email protected]