Terms of Service

Version 2026-10-01 · Effective October 1, 2026

These Terms of Service ("Terms") are a binding agreement between you and Lilytrap ("Lilytrap", "we", "us"). They govern your use of the Lilytrap website, dashboard, API, GitHub Action and related services (the "Service").

You accept these Terms by ticking "I agree", creating or claiming a workspace, or using the Service. If you accept on behalf of a company or other organization, "you" means that organization. You confirm you have authority to bind it. If you don't agree, don't use the Service.

Section 15 contains a binding arbitration agreement and a class action waiver. These affect how disputes are resolved. Please read it.

1. The Service

Lilytrap adds decoy credentials and endpoints to software you build. It records requests that follow those decoys, and alerts you. Decoys are fake. They grant no access to anything real. We may change, add or remove features at any time.

2. Accounts

• You must be at least 18 and able to form a binding contract.
• Give accurate information and keep your sign-in credentials and API keys secure.
• You're responsible for all activity under your account and workspace. This includes activity by people and AI agents you allow to act for you, such as an agent using your API key.
• An agent may create a workspace for you. That workspace is governed by these Terms from creation, and you accept them for it when you claim it.

3. Acceptable use

Use the Service only to protect software you own or are authorized to protect, and only lawfully. You won't:

• plant decoys in software, systems or networks you don't control;
• use the Service or trap data to attack, retaliate against, "hack back" at, harass or deceive anyone;
• configure decoys to impersonate real third-party services, brands or credentials;
• probe, scan, overload, reverse engineer or attack the Service, or get around its limits or security;
• resell, sublicense or offer the Service to others, or use it to build a competing product;
• use the Service in violation of export controls or sanctions, or from a sanctioned country.

We may investigate suspected violations. We may also remove content, suspend workspaces and cooperate with law enforcement.

4. Your data and your responsibilities

You own the data you provide ("Customer Data"). You grant us a worldwide, royalty-free license to host, process and use Customer Data. This lets us provide, secure, support and improve the Service, as described in our Privacy Policy.

Trap events contain information about the people and systems that follow your decoys. You decide where decoys are deployed. You're solely responsible for that decision, and for having any notices, consents or legal basis that applicable law requires. That includes privacy, computer-misuse and monitoring laws. You're also responsible for the alert destinations you configure and for any action you take based on trap data.

We may use aggregated or de-identified data derived from the Service for any lawful purpose. Examples include threat research, product improvement and publishing statistics. That data won't identify you.

5. Our intellectual property

The Service, including its software, decoy designs, detection methods and branding, belongs to Lilytrap and its licensors. We give you a limited, non-exclusive, non-transferable, revocable right to use the Service under these Terms. We reserve all other rights.

If you send us feedback or suggestions, we may use them without restriction or payment.

6. Plans, billing and cancellation

• Paid plans are billed in advance, monthly, through Stripe. They renew automatically until canceled. You authorize us to charge your payment method on each renewal.
• Cancel anytime from the dashboard. Cancellation takes effect at the end of the current billing period.
• Fees are non-refundable, including for partial periods and unused features, unless the law requires otherwise.
• We may change prices with at least 30 days' notice. New prices apply from your next billing period. If you keep using the Service after that, you accept them.
• Fees exclude taxes. You pay all applicable taxes, except taxes on our income.
• If a payment fails, we may suspend paid features or downgrade the workspace until it's paid.

7. Free plan and beta features

The free plan and any feature labeled beta, preview or experimental are provided as-is, without any commitment. We may change or end them at any time.

8. Suspension and termination

You may stop using the Service and close your workspace at any time. We may suspend or end your access, with or without notice, if:

• you breach these Terms;
• your use creates risk or possible legal exposure for us or others;
• we're required to by law;
• we discontinue the Service.

We may also end free workspaces for any reason. When access ends, your right to use the Service stops. We may delete Customer Data after 30 days. Sections 4, 5, 9–17 survive termination.

9. No guarantee of detection

Lilytrap is one layer of defense. It won't detect every agent, attacker or attack. Classifications, scores and alerts may be wrong, late or missing. You're responsible for your own security program. You shouldn't rely on the Service as your only safeguard.

10. Disclaimer of warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE", WITH ALL FAULTS. TO THE FULLEST EXTENT PERMITTED BY LAW, LILYTRAP AND ITS AFFILIATES, OFFICERS, EMPLOYEES, AGENTS AND SUPPLIERS DISCLAIM ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY OR OTHERWISE. THIS INCLUDES WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT AND ACCURACY. WE DON'T WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, SECURE OR ERROR-FREE. WE DON'T WARRANT THAT IT WILL DETECT OR PREVENT ANY ATTACK, OR THAT ANY DATA WILL BE ACCURATE OR PRESERVED.

11. Limitation of liability

TO THE FULLEST EXTENT PERMITTED BY LAW, IN NO EVENT WILL LILYTRAP OR ITS AFFILIATES, OFFICERS, EMPLOYEES, AGENTS OR SUPPLIERS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES. NOR WILL WE BE LIABLE FOR ANY LOSS OF PROFITS, REVENUE, BUSINESS, GOODWILL OR DATA. THIS ALSO COVERS ANY SECURITY BREACH, INTRUSION OR ATTACK, AND ANY FAILURE TO DETECT OR ALERT. THESE EXCLUSIONS APPLY WHETHER THE CLAIM IS IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY OR ANY OTHER THEORY. THEY APPLY EVEN IF WE WERE TOLD SUCH DAMAGES WERE POSSIBLE.

OUR TOTAL LIABILITY FOR ALL CLAIMS RELATING TO THE SERVICE OR THESE TERMS IS LIMITED TO THE AMOUNT YOU PAID US FOR THE SERVICE IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE LIABILITY. IF YOU PAID NOTHING, THE LIMIT IS FIFTY US DOLLARS ($50). THESE LIMITS ARE AN ESSENTIAL BASIS OF OUR AGREEMENT. THEY APPLY EVEN IF A LIMITED REMEDY FAILS OF ITS ESSENTIAL PURPOSE.

Some jurisdictions don't allow certain exclusions or limits. There, ours apply to the fullest extent the law allows.

12. Indemnification

You will defend, indemnify and hold harmless Lilytrap and its affiliates, officers, directors, employees, agents and suppliers. This covers any claim, demand, investigation or proceeding by a third party or government authority, and all related losses, damages, liabilities, settlements, costs and expenses, including reasonable attorneys' fees. It applies to anything arising from or related to:

• your use or misuse of the Service;
• your Customer Data, your software, or where and how you deploy decoys;
• any action you take, or fail to take, based on trap events or alerts;
• your breach of these Terms, or your violation of any law or third-party right;
• anyone using your account, workspace or API keys.

We may control the defense of any claim at your expense. You'll cooperate with us. You may not settle a claim that affects us without our written consent.

13. Time limit for claims

Any claim relating to the Service or these Terms must be brought within one (1) year after it arises. Otherwise it is permanently barred, to the extent the law allows.

14. Governing law

These Terms are governed by the laws of the State of Delaware and the Federal Arbitration Act. Conflict-of-laws rules don't apply. Subject to Section 15, the state and federal courts in Delaware have exclusive jurisdiction, and you consent to venue there.

15. Arbitration and class action waiver

You and Lilytrap agree to resolve any dispute relating to the Service or these Terms by binding individual arbitration, not in court. The American Arbitration Association will administer it under its Commercial Arbitration Rules. If you're an individual using the Service for personal purposes, its Consumer Arbitration Rules apply instead. A single arbitrator decides, and the arbitrator's decision is final. Either party may instead bring an individual claim in small-claims court. Either party may also seek an injunction in court to protect intellectual property or prevent misuse of the Service.

Disputes will be resolved only individually, not as a class, collective or representative action. You and Lilytrap waive any right to a jury trial.

You can opt out of this Section 15. To do so, email legal@lilytrap.com within 30 days of first accepting these Terms. If the class action waiver is found unenforceable for a claim, that claim goes to court, and the rest of this section still applies.

16. Changes to these Terms

We may update these Terms. For material changes, we'll update the version above and ask you to accept them in the dashboard or notify you by email. Changes take effect when accepted, or 30 days after notice, whichever comes first. If you keep using the Service after that, you accept the new Terms.

17. General

• These Terms, the Privacy Policy and any order form are the entire agreement between us about the Service. They replace any prior agreement. Terms in your purchase orders don't apply.
• You may not assign these Terms without our written consent. We may assign them freely, including in a merger, acquisition or sale of assets.
• We aren't liable for delays or failures caused by events beyond our reasonable control.
• If any provision is unenforceable, it's modified to the minimum extent needed, and the rest stays in effect. Our not enforcing a provision isn't a waiver.
• We may send notices by email or in the dashboard. You consent to electronic agreements, notices and records.
• We're independent contractors. Nothing here creates a partnership, agency or employment relationship.

Contact

Questions about these Terms: legal@lilytrap.com.