Terms of Use

1. Introduction

These Terms of Use govern access to and use of the websites, applications, APIs, portals, platforms, software, reports, dashboards, automation tools, chatbot tools, scam-verification tools, threat-intelligence tools, takedown-support tools and related services provided by Cyberoo.ai, trading as Cyberoo Pty Ltd (Australia) (“Cyberoo.ai”, “Cyberoo”, “we”, “us” or “our”).

Our products and services may include, without limitation, Scams.Report, NothingPhishy, MuleHunt, customer portals, application programming interfaces, reporting workflows, scam-verification tools, artificial-intelligence-assisted analysis, cyber-fraud intelligence services, brand-protection tools, takedown-support workflows, automation services, and any future products or services released by Cyberoo.ai (collectively, the “Services”).

By accessing, registering for, integrating with, or using the Services, you agree to be bound by these Terms, our Privacy Policy, any product-specific terms, acceptable-use rules, data-processing terms, order form, subscription agreement or other written agreement that applies to your use of the Services. If you do not agree to these Terms, you must not access or use the Services.

2. Priority of Documents

If there is an inconsistency between these Terms and another written agreement signed or accepted by Cyberoo.ai and you or your organisation, the following order of priority applies, unless expressly stated otherwise:

1. any signed master services agreement, enterprise agreement or order form;
2. product-specific terms;
3. data-processing terms or privacy-specific terms;
4. these Terms;
5. online documentation, FAQs or support materials.

3. Eligibility and Authority

You may use the Services only if you are legally able to enter into a binding agreement. If you use the Services on behalf of a company, agency, institution or other organisation, you represent and warrant that you have authority to bind that organisation to these Terms. In that case, “you” and “your” include both you and that organisation.

The Services are not intended for children under 16 years of age. If a person under 16 accesses the Services, they must do so only with appropriate parent or guardian consent and only where permitted by law.

4. Nature of the Services

Cyberoo.ai provides technology services designed to assist with scam verification, cyber-fraud intelligence, phishing analysis, brand-impersonation detection, scammer infrastructure analysis, mule-account intelligence, reporting assistance, and disruption-support workflows. The Services may use artificial intelligence, machine learning, rules-based systems, third-party data, open-source intelligence, customer-submitted content, analyst review, automation and integrations with external systems.

The Services are intended to support human judgment. They do not guarantee that every scam, phishing attempt, impersonation event, mule account, fraudulent communication, malicious domain, fake application, social media impersonation, phone-based scam or cyber-fraud indicator will be detected, classified, reported or disrupted.

5. No Professional Advice

Unless expressly agreed in writing, the Services do not provide legal, financial, investment, banking, accounting, insurance, medical, psychological or other regulated professional advice. Outputs, reports, classifications, risk scores, confidence indicators, alerts, explanations and recommendations are provided for general cyber-safety, fraud-prevention, threat-intelligence and operational-support purposes only.

You remain responsible for obtaining professional advice before making decisions that may have legal, financial, regulatory, operational, safety or reputational consequences.

6. Accounts and Access

You may need an account to access certain Services. You must provide accurate, current and complete information and keep that information updated. You are responsible for:

• maintaining the confidentiality of credentials;
• ensuring that only authorised users access your account;
• all activity under your account;
• promptly notifying us of suspected unauthorised access;
• complying with any authentication, security and access-control requirements.

We may suspend or restrict access if we reasonably believe that an account has been compromised, misused, accessed unlawfully or used in a way that creates risk to Cyberoo.ai, users, customers, third parties or the public.

7. Customer Administrators and Authorised Users

Where the Services are provided to an organisation, that organisation is responsible for managing its authorised users, permissions, configurations, data submissions, integrations and internal use of outputs. Customer administrators may be able to access, export, review, restrict or delete information associated with their organisation’s account, subject to product functionality and applicable law.

You are responsible for ensuring that authorised users comply with these Terms.

8. Acceptable Use

You must use the Services only for lawful, ethical and authorised purposes. You must not:

• use the Services to commit, facilitate, conceal or promote fraud, scams, phishing, cybercrime, identity theft, money laundering, harassment, extortion, abuse or unlawful activity;
• use the Services to target, exploit or harm minors;
• upload malware, exploit code, credential-stealing tools or harmful payloads except where expressly permitted for legitimate security analysis in accordance with our instructions;
• interfere with, disrupt, overload, scan, probe, scrape, reverse-engineer or attempt unauthorised access to the Services;
• bypass rate limits, access controls, authentication measures, usage restrictions or security features;
• use the Services to develop, train, benchmark or improve a competing product, model, fraud-detection system, scam-verification service, cyber-intelligence service or machine-learning system, except with our prior written consent;
• misrepresent outputs as official determinations by Cyberoo.ai, law enforcement, regulators, banks, platforms or government bodies;
• use outputs to make fully automated decisions about individuals without appropriate lawful basis, human review and procedural fairness;
• submit content that you do not have the right to provide;
• submit excessive, irrelevant or unnecessarily sensitive personal information;
• use the Services in breach of privacy, surveillance, telecommunications, spam, consumer, financial crime, sanctions, export-control, intellectual-property or cybersecurity laws;
• resell, sublicense, white-label or commercially exploit the Services unless expressly authorised in writing;
• remove proprietary notices, disclaimers or attribution from outputs;
• use the Services in a manner that could damage the reputation, security or operations of Cyberoo.ai.

9. User Content and Submissions

You may submit content to the Services, including emails, SMS messages, screenshots, URLs, domains, phone numbers, bank account details, BSB numbers, social media links, fake business details, documents, attachments, scammer communications, incident notes and other materials (“User Content”).

You retain ownership of rights you hold in User Content. By submitting User Content, you grant Cyberoo.ai a worldwide, non-exclusive, royalty-free licence to host, store, copy, process, analyse, transform, display, transmit, use, reproduce and create derived data from that User Content for the purposes of:

• providing and improving the Services;
• verifying scams and suspicious communications;
• generating reports, alerts, classifications and explanations;
• detecting and disrupting fraud, scams and cyber abuse;
• creating threat intelligence;
• supporting takedown, reporting and escalation workflows;
• maintaining security and integrity;
• complying with law;
• developing, testing and improving models, systems and workflows, subject to our Privacy Policy and applicable law.

You represent and warrant that you have all rights, permissions and lawful bases required to submit User Content and permit Cyberoo.ai to process it.

10. Sensitive, Third-Party and Scam Evidence Information

The Services may involve the submission and analysis of material containing personal information, sensitive information, financial details, suspected scammer details, victim details, mule-account indicators or third-party information. You must take reasonable steps to ensure that User Content is relevant to the purpose for which it is submitted. You should redact information that is unnecessary for scam verification, threat analysis, investigation, reporting or disruption.

Cyberoo.ai may remove, restrict, de-identify, quarantine, preserve, disclose or report User Content where we reasonably believe it is unlawful, harmful, abusive, malicious, misleading, unsafe, infringing, irrelevant, excessive, or required for legal, security or fraud-prevention purposes.

11. AI-Assisted Outputs

The Services may produce AI-assisted or automated outputs, including risk scores, explanations, scam classifications, profile links, recommended actions, fraud indicators, generated reports, suspected infrastructure relationships and takedown-support information. You acknowledge that:

• AI-assisted outputs may be incomplete, inaccurate, outdated, probabilistic or unsuitable for a particular purpose;
• outputs may require human review before reliance;
• Cyberoo.ai does not guarantee that any output will prevent loss, fraud, cyber harm, reputational damage, regulatory exposure or operational disruption;
• false positives and false negatives may occur;
• outputs are not official legal, regulatory, banking, law-enforcement or government determinations.

You are responsible for reviewing outputs and deciding whether and how to act on them.

12. Threat Intelligence and De-Identified Data

Cyberoo.ai may generate, retain and use derived data, metadata, indicators, signatures, patterns, embeddings, classifications, statistical information, de-identified information, aggregated insights and threat-intelligence artefacts from use of the Services. Cyberoo.ai may use such information to improve detection, protect users and customers, support research, publish cyber-safety insights, collaborate with security partners, and enhance present or future Services, provided this is done in accordance with our Privacy Policy and applicable law.

13. Third-Party Services, Data and Integrations

The Services may integrate with or rely on third-party services, including cloud providers, AI model providers, authentication providers, hosting providers, analytics tools, payment processors, communication platforms, domain registrars, social media platforms, app stores, banks, telecommunications providers, takedown partners and threat-intelligence sources.

Cyberoo.ai is not responsible for third-party services, websites, data, platforms, policies, outages, errors, decisions, takedown outcomes or content. Your use of third-party services may be governed by separate terms and privacy policies.

14. APIs, Automation and Technical Integrations

Where we provide APIs, webhooks, automation features or integrations, you must:

• comply with documentation, authentication requirements and rate limits;
• keep API keys, tokens and credentials secure;
• not share credentials except with authorised personnel or systems;
• not use integrations to overload, disrupt, scrape or misuse the Services;
• promptly notify us of suspected credential compromise;
• comply with applicable privacy, security, data-retention and incident-response obligations.

We may rotate, revoke, suspend or restrict API keys, tokens or integrations where reasonably necessary for security, compliance, product integrity or operational reasons.

15. Fees, Subscriptions and Payment

Some Services may be free, trial-based, paid, usage-based, subscription-based or enterprise-only. Where fees apply, you must pay all fees, charges, taxes and other amounts in accordance with the applicable order form, invoice, pricing page or written agreement. Unless otherwise stated, fees are non-refundable except where required by law or expressly agreed in writing. We may change pricing, plans or features by giving reasonable notice where required.

16. Trials, Beta Products and Previews

We may offer trials, pilots, beta products, previews, experimental features or early-access functionality. Such Services may be incomplete, unstable, changed, withdrawn or discontinued at any time. They may be subject to additional limitations, confidentiality obligations, security controls or product-specific terms. To the extent permitted by law, beta, preview and experimental Services are provided for evaluation only and without any commitment that they will become generally available.

17. Intellectual Property

Cyberoo.ai and its licensors own all rights, title and interest in and to the Services, including software, models, workflows, systems, interfaces, designs, logos, trademarks, trade names, documentation, reports, templates, methods, analytics, threat-intelligence structures, databases, know-how and other materials.

Except as expressly permitted by these Terms or another written agreement, you must not copy, modify, adapt, translate, reproduce, distribute, publish, sell, lease, sublicense, reverse-engineer, decompile, disassemble or create derivative works from the Services. No rights are granted except as expressly stated.

18. Licence to Use the Services

Subject to your compliance with these Terms, Cyberoo.ai grants you a limited, revocable, non-exclusive, non-transferable, non-sublicensable licence to access and use the Services for lawful internal business or personal purposes, as applicable to your account type, subscription, product plan or written agreement. This licence ends when your access is terminated or when these Terms cease to apply.

19. Feedback

If you provide suggestions, ideas, comments, bug reports, improvement requests or other feedback, you grant Cyberoo.ai a perpetual, irrevocable, worldwide, royalty-free licence to use that feedback without restriction or compensation.

20. Confidentiality

If you receive non-public information about the Services, including product plans, security information, technical documentation, pricing, beta features, credentials or business information, you must keep it confidential and use it only for the purpose for which it was provided. This obligation does not apply to information that is public through no fault of yours, already known lawfully, independently developed, or required to be disclosed by law.

21. Privacy and Data Protection

Our handling of personal information is described in our Privacy Policy. You must comply with applicable privacy and data protection laws when using the Services, including when submitting personal information about third parties. If you are an organisation using the Services, you are responsible for providing required notices, obtaining required consents, establishing lawful bases for processing, managing user permissions and responding to privacy requests where applicable.

22. Security

Cyberoo.ai takes reasonable steps to protect the Services, but no system is completely secure. You must maintain appropriate technical, organisational and administrative safeguards for your systems, accounts, credentials, data exports and integrations. You must promptly notify us if you become aware of any actual or suspected security incident involving the Services, your account, your credentials, User Content or Cyberoo.ai data.

23. Service Availability and Changes

We may update, modify, suspend, restrict or discontinue any part of the Services at any time, including features, models, workflows, integrations, data sources, APIs, pricing, usage limits and documentation. We will use reasonable efforts to provide notice of material changes where practicable, but we may make immediate changes where needed for security, legal, operational, compliance or abuse-prevention reasons.

24. Takedown, Reporting and Disruption Workflows

Some Services may assist with reporting, escalation, infrastructure analysis or takedown-support workflows involving third parties such as hosting providers, domain registrars, social media platforms, app stores, telecommunications providers, financial institutions, regulators or law enforcement. Cyberoo.ai does not guarantee that any third party will accept, prioritise, process or act on a report, escalation or takedown request.

You acknowledge that takedown, suspension, blocking, removal, account closure, enforcement or regulatory outcomes may depend on third-party policies, evidence thresholds, legal requirements, jurisdiction, timing and operational factors outside Cyberoo.ai’s control.

25. Compliance with Laws

You must comply with all applicable laws and regulations when using the Services, including laws relating to privacy, surveillance, telecommunications, spam, consumer protection, financial crime, anti-money laundering, sanctions, export controls, intellectual property, cybersecurity, computer misuse, defamation and evidence handling. You must not use the Services in or for the benefit of any jurisdiction, person, entity or activity subject to sanctions or legal restrictions that would prohibit or restrict the provision of the Services.

26. Suspension and Termination by Cyberoo.ai

We may suspend, restrict or terminate your access to the Services, remove content, disable integrations, revoke credentials or close accounts if we reasonably believe that:

• you have breached these Terms;
• your use creates legal, security, operational, reputational or regulatory risk;
• your account has been compromised;
• your use may harm Cyberoo.ai, users, customers, third parties or the public;
• your use is unlawful, fraudulent, abusive or unsafe;
• continued service provision would breach sanctions, export controls or other legal obligations;
• required fees are unpaid;
• suspension is needed to protect the Services.

Where practicable and lawful, we may provide notice and an opportunity to remedy. We may act immediately where necessary.

27. Termination by You

You may stop using the Services at any time. If you have a paid subscription or enterprise agreement, termination rights, notice periods, refunds and data-return rights are governed by the applicable agreement or order form. Account deletion and data handling after termination are subject to our Privacy Policy, data-retention practices, legal obligations, security needs and any applicable customer agreement.

28. Effect of Termination

After termination:

• your right to access and use the Services ends;
• you must stop using the Services and any non-public materials;
• unpaid fees remain payable;
• we may retain information as required or permitted by law;
• provisions intended to survive termination will continue, including clauses relating to intellectual property, confidentiality, privacy, disclaimers, limitation of liability, indemnity, governing law and dispute resolution.

29. Australian Consumer Law

Nothing in these Terms excludes, restricts or modifies any rights, remedies, guarantees or protections that cannot be excluded, restricted or modified under the Australian Consumer Law or any other applicable law. Where we are permitted to limit liability for failure to comply with a consumer guarantee, our liability is limited, at our option and to the extent permitted by law, to supplying the Services again or paying the cost of having the Services supplied again.

30. Disclaimers

To the maximum extent permitted by law, the Services are provided “as is” and “as available”. Cyberoo.ai does not warrant that:

• the Services will be uninterrupted, secure, error-free or free from harmful components;
• outputs will be accurate, complete, current, reliable or suitable for your circumstances;
• all scams, threats, fraud indicators, mule accounts, impersonation events or cyber risks will be detected;
• reports, escalations or takedown workflows will produce any particular outcome;
• third-party data, systems, platforms or integrations will remain available or accurate;
• the Services will meet your operational, legal, regulatory, evidentiary or business requirements.

31. Limitation of Liability

To the maximum extent permitted by law, Cyberoo.ai and its officers, employees, contractors, agents, affiliates and licensors are not liable for indirect, consequential, incidental, special, exemplary or punitive loss or damage, including loss of profit, revenue, goodwill, data, opportunity, business interruption, reputational damage, loss caused by scam activity, loss caused by reliance on outputs, or loss arising from third-party decisions or failures.

To the maximum extent permitted by law, Cyberoo.ai’s aggregate liability arising out of or in connection with the Services or these Terms is limited to the greater of:

• the amount paid by you to Cyberoo.ai for the relevant Services in the 12 months before the event giving rise to liability; or
• AUD 100, if no amount was paid.

This limitation does not apply to liability that cannot be excluded or limited by law.

32. Indemnity

You indemnify Cyberoo.ai and its officers, employees, contractors, agents, affiliates and licensors against all claims, losses, liabilities, damages, costs and expenses, including reasonable legal costs, arising from or connected with:

• your breach of these Terms;
• your misuse of the Services;
• User Content you submit;
• your infringement of third-party rights;
• your breach of privacy, data protection, surveillance, telecommunications, spam, financial crime, sanctions, export-control, intellectual-property or cybersecurity laws;
• your unauthorised use or disclosure of outputs;
• your decisions, actions or omissions based on the Services.

This indemnity applies to the extent permitted by law.

33. Dispute Resolution

Before starting court proceedings, a party must give the other party written notice describing the dispute and allow at least 30 days for good-faith discussions, unless urgent injunctive relief, security action, debt recovery or legal compliance requires earlier action. The parties must attempt to resolve the dispute in good faith. Nothing prevents either party from seeking urgent interlocutory, injunctive or equitable relief.

34. Governing Law and Jurisdiction

These Terms are governed by the laws of New South Wales, Australia. Each party submits to the non-exclusive jurisdiction of the courts of New South Wales and the courts competent to hear appeals from those courts.

35. Changes to These Terms

We may update these Terms from time to time. If changes are material, we will take reasonable steps to notify users, such as by posting notice on our website, sending email notice or providing in-product notice. The updated Terms apply from the stated effective date. Your continued use of the Services after that date means you accept the updated Terms.

36. General Provisions

You must not assign or transfer your rights or obligations under these Terms without our prior written consent. We may assign or transfer our rights or obligations as part of a restructure, merger, acquisition, sale of assets or by operation of law. If any provision is invalid or unenforceable, the remaining provisions continue in effect. A failure to enforce a provision is not a waiver. These Terms do not create a partnership, joint venture, employment, fiduciary or agency relationship between you and Cyberoo.ai.

37. Contact

For questions about these Terms, contact:

Cyberoo.ai, trading as Cyberoo Pty Ltd (Australia)
Attn: Legal / Privacy Officer
Email: legal@cyberoo.ai