Terms of Service

By accessing or using Misconfigured.app (the "Service"), operated by Zenofex LLC (the "Operator", "we", "us", or "our"), you agree to be bound by these Terms of Service (the "Terms"). If you do not agree to these Terms, you must not access or use the Service. Your continued use of the Service following any changes to these Terms constitutes acceptance of those changes.

Misconfigured.app is a security research and educational tool that indexes and displays information about publicly-accessible, misconfigured cloud storage resources (such as Amazon S3 buckets, Azure Blob containers, Google Cloud Storage buckets, and similar services). The Service provides a browsable interface for viewing the contents of these publicly-exposed resources.

The Service does not bypass any access controls, authentication mechanisms, or security measures. It only indexes and displays information that is already publicly accessible on the internet due to misconfigurations by the resource owners.

The Service is provided exclusively for educational purposes, security research, and responsible disclosure. By using the Service, you agree to the following:

• You will use the Service only for lawful purposes and in compliance with all applicable local, state, national, and international laws and regulations.
• You will not use any information obtained through the Service to exploit, harm, harass, or target any individual, organization, or entity.
• You will not download, copy, distribute, or otherwise misuse data found in misconfigured storage resources for any unauthorized or malicious purpose.
• You will not attempt to gain unauthorized access to any system, network, or resource beyond what is already publicly exposed due to misconfiguration.
• You will not use the Service to facilitate identity theft, fraud, extortion, blackmail, or any other criminal activity.
• You will not use the Service to compile data for the purposes of spamming, phishing, or conducting social engineering attacks.
• Where possible, you are encouraged to practice responsible disclosure by notifying affected parties of their misconfigured resources.

We reserve the right to terminate or suspend your access to the Service immediately, without prior notice, for any conduct that we determine, in our sole discretion, violates these Terms or is harmful to other users, third parties, or the Service.

Certain features of the Service require you to create an account via third-party authentication (Google OAuth or email-based authentication). You are responsible for maintaining the confidentiality of your account and for all activities that occur under your account. You agree to notify us immediately of any unauthorized use of your account.

We reserve the right to refuse service, terminate accounts, or remove or edit content at our sole discretion and without notice.

The Service provides a process for submitting takedown and moderation requests, including claims related to ownership, sensitive data exposure, and illegal content. We may temporarily remove findings from public visibility while a request is under review.

Moderation outcomes are determined by the operator in its sole discretion. Requests may be approved, dismissed, or require additional information. We may request supporting evidence and may deny or limit requests that appear abusive, duplicative, fraudulent, or unsupported.

We reserve the right to keep findings removed when a request is approved and to restore visibility when a request is dismissed. We may also suspend or restrict accounts that repeatedly submit abusive moderation requests.

The Service offers both free and paid subscription tiers. Paid subscriptions are processed through Stripe, a third-party payment processor. By purchasing a subscription, you also agree to Stripe's terms of service.

Monthly Subscriptions

Monthly subscriptions are billed on a recurring basis at the interval specified at the time of purchase. You may cancel a monthly subscription at any time, and cancellation will take effect at the end of the current billing period. No partial refunds will be issued for the remaining portion of a billing period.

Lifetime Subscriptions

A "Lifetime" subscription grants you access to the paid features of the Service for the lifetime of the Service, not for the lifetime of the purchaser. This means your access continues for as long as the Service remains operational and available.

• A Lifetime subscription does not guarantee that the Service will be available indefinitely, for any specific duration, or without interruption.
• The operator reserves the right to modify, suspend, or discontinue the Service (or any part thereof) at any time, with or without notice, for any reason.
• In the event the Service is permanently discontinued, Lifetime subscription holders will not be entitled to a full or partial refund, as the purchase price reflects a discounted rate for access over an indefinite but not guaranteed period.
• The features, functionality, and scope of what is included in a Lifetime subscription may change over time as the Service evolves. The operator is not obligated to maintain any specific feature set.
• Lifetime subscriptions are non-transferable and are bound to the account that made the purchase.

Refund Policy

All sales are final. Due to the nature of the digital services provided, refunds are generally not offered. Exceptions may be made at the sole discretion of the operator on a case-by-case basis. Chargebacks filed without first contacting us may result in immediate account termination.

The Service, including its design, code, interface, and original content, is owned by the operator and is protected by applicable intellectual property laws. You may not reproduce, modify, distribute, or create derivative works from any part of the Service without express written permission.

Data displayed through the Service that originates from third-party cloud storage resources belongs to the respective owners of those resources. The Service makes no claim of ownership over such data. The display of this data does not constitute an endorsement, affiliation, or authorization by the data owners.

THE SERVICE IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY. THE OPERATOR EXPRESSLY DISCLAIMS ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, COMPLETENESS, AND NON-INFRINGEMENT.

The operator does not warrant that: (a) the Service will meet your requirements; (b) the Service will be uninterrupted, timely, secure, or error-free; (c) the information provided through the Service will be accurate, complete, or current; or (d) any defects in the Service will be corrected.

The information displayed by the Service is derived from publicly-accessible sources and may be incomplete, outdated, or inaccurate. You acknowledge that any reliance on such information is at your own risk.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL THE OPERATOR, ITS AFFILIATES, DIRECTORS, EMPLOYEES, OR AGENTS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, USE, OR GOODWILL, ARISING OUT OF OR RELATED TO YOUR USE OF OR INABILITY TO USE THE SERVICE, REGARDLESS OF THE CAUSE OF ACTION OR THE THEORY OF LIABILITY (WHETHER IN CONTRACT, TORT, OR OTHERWISE), EVEN IF THE OPERATOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

IN NO EVENT SHALL THE OPERATOR'S TOTAL AGGREGATE LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATED TO THE SERVICE EXCEED THE GREATER OF (A) THE AMOUNT YOU HAVE PAID TO THE OPERATOR IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED U.S. DOLLARS ($100.00).

You agree to indemnify, defend, and hold harmless the operator and its affiliates, officers, directors, employees, and agents from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising out of or related to: (a) your use of the Service; (b) your violation of these Terms; (c) your violation of any applicable law or regulation; or (d) your violation of any rights of a third party.

The operator may terminate or suspend your access to the Service at any time, with or without cause, with or without notice, and without liability to you. Upon termination, your right to use the Service ceases immediately.

All provisions of these Terms that by their nature should survive termination shall survive, including but not limited to ownership provisions, warranty disclaimers, indemnification, and limitations of liability.

The operator reserves the right to modify these Terms at any time. Changes will be effective immediately upon posting the revised Terms on the Service. The "Last updated" date at the top of this page will be revised accordingly. Your continued use of the Service after any changes constitutes your acceptance of the new Terms. It is your responsibility to review these Terms periodically.

These Terms shall be governed by and construed in accordance with the laws of the jurisdiction in which the operator resides, without regard to its conflict of law provisions. Any disputes arising under or in connection with these Terms shall be resolved through binding arbitration in accordance with the rules of the applicable arbitration association in the operator's jurisdiction, rather than in court, except that either party may seek injunctive or equitable relief in court for matters relating to intellectual property or unauthorized access.

You agree that any dispute resolution proceedings will be conducted on an individual basis and not as a class action, class arbitration, or other representative proceeding.

If any provision of these Terms is held to be invalid or unenforceable, the remaining provisions shall continue in full force and effect. The invalid or unenforceable provision shall be modified to the minimum extent necessary to make it valid and enforceable.

If you have any questions about these Terms of Service, please contact us at [email protected].