Terms of Service

1. Agreement to Terms

These Terms and Conditions ("Agreement") govern your use of xonPlus and XposedOrNot services ("Services"), SaaS-based tools designed to help individuals and organizations enhance their security posture by providing data breach monitoring, automated alerts, and threat intelligence. By accessing or using the Services, you agree to be bound by this Agreement.

We reserve the right to modify these terms at any time. Material changes will be communicated to users via email or through the Service with 14 days advance notice. Continued use of the Services after such changes constitutes your acceptance of the new terms.

2. Services Provided

Our platform provides data breach monitoring services, including email breach lookups across 10+ billion breach records, continuous monitoring with real-time breach detection, and automated alerts via email, Slack, Teams, and webhooks.

Subscribers also receive detailed breach information and threat intelligence, API access for integration with existing security tools, domain monitoring for organizational security, and executive dashboards with compliance reporting.

3. Account Responsibilities

You must maintain accurate account information at all times and are responsible for keeping your account credentials confidential. Account access must not be shared with unauthorized parties.

You accept full accountability for all activities that occur under your account, including all charges incurred through it. Any unauthorized access must be reported immediately to deva [at] xposedornot [dot] com.

4. Acceptable Use Policy

You agree to use the Services only for lawful purposes. You must not use the Services for any illegal activity, attempt unauthorized access to systems or data, or upload malware, viruses, or other malicious code. Bulk scraping, excessive automated queries beyond API limits, circumvention of rate limits, and any other automated abuse or disruption of service infrastructure are prohibited.

You must not redistribute breach data without explicit permission, resell or white-label the Services without authorization, impersonate other users or entities, or violate the privacy rights of individuals or organizations.

5. API Usage Terms

Developers and partners using our API must follow the documented rate limits for their subscription tier and must not attempt to circumvent rate limits or usage restrictions. Appropriate attribution is required when displaying breach data, and commercial use of API data requires appropriate licensing.

API keys must be kept secure and not shared publicly. Premium API features require an active paid subscription, and API endpoints and formats may be modified with notice.

6. Intellectual Property Rights

While portions of our source code are open-source and available on GitHub, our brand names, logos, and trademarks (xonPlus, XposedOrNot) remain protected intellectual property.

The same applies to our breach database compilation and data aggregation methods, proprietary algorithms and threat intelligence processing, dashboard designs and user interface elements, and our documentation, marketing materials, and content.

7. Privacy and Data Handling

We never sell personal information to third parties. The emails and domains you look up through the API or exposure check are processed in memory and not stored; only request metadata is retained, for billing, rate limiting, security, and abuse prevention. Email subscriptions and domain monitoring require storage of the registered identifiers for alert functionality.

All data is encrypted in transit (TLS 1.3) and at rest (AES-256), and we comply with GDPR, CCPA, and relevant data protection regulations. Users can request data deletion by contacting deva [at] xposedornot [dot] com.

8. Accuracy Limitations and Disclaimers

Important: the absence of breach results does not guarantee your data is safe. We report only publicly disclosed breaches we have access to, and not all breaches are discovered or reported immediately, so breach data may be incomplete, delayed, or contain inaccuracies, and historical breach data may have gaps or missing information.

We cannot prevent breaches, only notify you of exposures, and our Services should not be your sole security measure.

9. No Warranties

The Services are provided "as is" and "as available" without warranties of any kind, either express or implied. In particular, we do not warrant continuous, uninterrupted service availability, complete detection of all data breaches, or the accuracy or completeness of breach information.

Nor do we warrant prevention of future security incidents, compatibility with all systems or platforms, or that the Services will meet specific security or compliance requirements.

10. Limitation of Liability

To the maximum extent permitted by law, we shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, revenue, data, or business opportunities. This also applies to service outages, delays, or interruptions; inaccuracies or errors in breach data or alerts; and actions taken based on information provided by the Services.

We are likewise not liable for unauthorized access to or alteration of your data, or for damages arising from third-party services or integrations. Our total liability under this Agreement shall not exceed the amount paid by you for the Services in the preceding 12 months.

11. Subscription and Payment Terms

Subscriptions are billed monthly or annually based on your selected plan, with transparent pricing displayed before purchase. Payment is required at the beginning of each subscription period, and subscriptions automatically renew unless cancelled. You may cancel your subscription at any time.

We provide 30 days notice for any price changes to existing subscribers. Failure to pay may result in suspension or termination of access.

30-Day Money-Back Guarantee

New subscribers are eligible for a full refund within 30 days of their initial purchase. To request one, contact us at deva [at] xposedornot [dot] com with your account details, and the refund will be processed within 5-7 business days to the original payment method.

The guarantee applies only to first-time subscribers and initial purchases. After the 30-day period, subscription fees are non-refundable, as are renewals and subsequent subscription periods. Refunds for exceptional circumstances will be evaluated case-by-case.

12. Service Availability and Maintenance

We strive to ensure high availability of the Services but do not guarantee uninterrupted or error-free operation. Scheduled maintenance may occur with advance notice when possible, while emergency maintenance may be performed without prior notice. Current service status is available on our status page (Freshping).

External factors beyond our control may also affect service availability. We will make reasonable efforts to minimize disruptions, but no compensation is provided for temporary service interruptions.

13. Termination Rights

User Termination: You may close your account at any time through account settings, and you can export your data before account closure. Cancelled subscriptions remain active until the end of the billing period.

Our Termination Rights: We may suspend accounts that violate these terms, and serious violations may result in immediate account suspension. We will provide notice before termination when possible; upon termination, your access will be immediately revoked.

14. Third-Party Services and Links

Our Services may contain links to third-party websites, services, or integrations. We are not responsible for third-party content, accuracy, or availability, and we do not endorse or guarantee third-party services, which have their own terms and privacy policies.

Integration issues with third-party services are not our responsibility, and use of third-party services is at your own risk.

15. Community Contributions and Open Source

We welcome and appreciate community contributions to our open-source components. Contributors retain ownership of their contributions, but by contributing you grant us a perpetual, royalty-free license to use them, and we may modify or incorporate contributions into the project.

Contributions must comply with our code of conduct, and contributors are credited in project documentation.

16. Dispute Resolution

If you have any concerns or disputes regarding the Services, contact us first at deva [at] xposedornot [dot] com to resolve the issue — most issues can be resolved through direct communication. Documenting your concerns with specific details helps us resolve them faster.

We will attempt good-faith resolution before any legal action.

17. General Legal Terms

If any provision of this Agreement is found unenforceable, the remaining provisions continue in effect. This Agreement does not create a partnership, joint venture, or agency relationship between you and us, and our failure to enforce any right does not constitute a waiver of it.

We may assign our rights under this Agreement; you may not assign yours without our consent. These terms constitute the entire agreement between you and us and are governed by the laws of India.

18. Contact Information

For questions, concerns, or support regarding these terms or our Services, please contact us:

Email: deva [at] xposedornot [dot] com

GitHub: github.com/xposedornot

Twitter: @xposedornot

Last Updated: 23-August-2026. These terms cover both xonPlus enterprise solutions and XposedOrNot community tools. We encourage you to review them periodically for updates.