Terms of Service

These Terms of Service ("Terms") constitute a legally binding agreement between you ("Customer", "you") and Sentinel Edge Networks LTD, a private limited company registered in England and Wales (company number 17150600, registered address 134a West Hendon Broadway, London, NW9 7AA, United Kingdom) ("Maskbreak", "we", "us"). By accessing or using any Maskbreak service, API, dashboard, or website, you agree to these Terms in full.

If you are entering into these Terms on behalf of a company or other legal entity, you represent that you have authority to bind that entity. If you do not have such authority, do not use our services.

The Services are offered only to persons aged 18 or over who use them wholly for business or professional purposes, not as consumers. If you are acting mainly outside your trade, business, craft, or profession, you may browse the public Website but must not create an account or use an API key without our written agreement.

September 2026 clarification: this revision describes the existing public-interest programme and sign-in options, and clarifies data-protection wording. It does not change prices, liability limits, notice periods, or the existing backup-retention commitment.

1. Services

Maskbreak provides bot detection, VPN/proxy identification, antidetect browser detection, device intelligence, and fraud prevention services via a REST API and JavaScript SDK ("Services"). Account creation is available via email/password, Google Sign-In, and other sign-in options where offered, including an emailed link through Auth0. Services are currently free during open beta. The standard allowance is 1,000 visitor checks per hour; approved quota overrides and public-interest access are described in Section 4. We reserve the right to modify, suspend, or discontinue any part of the Services with reasonable notice.

2. Account Registration

To access the Services you must create an account. You agree to:

• Provide accurate, current, and complete information during registration.
• Maintain the security of your account credentials and API keys.
• Notify us immediately at support@maskbreak.com of any unauthorized access.
• Not share your API key with third parties or use it across multiple unrelated projects without our written consent.

You are solely responsible for all activity that occurs under your account. We are not liable for any loss or damage arising from unauthorized account access where you failed to maintain credential security.

3. Acceptable Use

You agree to use the Services only for lawful purposes and in compliance with all applicable laws. You must NOT:

• Use the Services to engage in any activity that violates applicable local, national, or international law.
• Attempt to reverse-engineer, decompile, or extract the underlying algorithms or models of the Maskbreak API, except to the limited extent the restriction is prohibited by law or activity is expressly authorised by our Responsible Disclosure Policy.
• Use the Services to build a competing product or service.
• Resell or sublicense API access without our prior written approval.
• Conduct automated stress testing or load testing against the API without prior written permission.
• Use the Services to discriminate against individuals based on protected characteristics (race, gender, religion, nationality, disability, etc.).
• Circumvent, disable, or interfere with bot detection, rate limiting, or anti-scraping measures.

We reserve the right to suspend or terminate access immediately and without prior notice for violations of this section.

4. API Usage Limits & Fair Use

Maskbreak is currently in open beta and free of charge. During beta:

• Standard free allowance: 1,000 visitor checks per hour, with no monthly cap. An explicitly approved higher quota continues to apply to the relevant account.

There are currently no paid plans. A paid Growth tier was previously announced and was withdrawn on 16 August 2026; nobody was charged. We may introduce paid plans in future, and if we do, billing will not begin without at least 30 days' notice to existing account holders, and access already provided free of charge will not be charged retroactively. Requests that exceed fair-use thresholds may be rate-limited (HTTP 429). For enterprise-scale volumes, contact us at support@maskbreak.com.

4.1 Approved public-interest access

Our public-interest programme removes the hourly API-key quota for approved government bodies, hospitals, public-health and medical-research organisations, education providers, emergency services, and other eligible public-interest organisations. Approval applies to the organisation and systems we confirm; it does not authorise resale or use for unrelated clients. Programme access is free, has no scheduled expiry, and uses the same API and existing key. Approval does not confer a certification or a contractual service-level guarantee.

“No hourly cap” describes the approved key’s usage quota, not unlimited infrastructure capacity or permission to bypass authentication, abuse prevention, or security controls. Authentication and other endpoint-specific limits can still apply. Contact support if a legitimate approved integration is throttled.

5. Pricing & Future Billing

All services are provided free of charge. There is no paid plan and no billing. If that ever changes:

• We will provide at least 30 days' notice before requiring payment for any feature.
• Fees will be exclusive of VAT. UK VAT (20%) applies where required. EU VAT rules apply to customers in EU member states.
• Your free-tier access will not be retroactively charged.

6. Free Access

Access is provided "as-is" for evaluation, development, and production use during the open beta. We reserve the right to modify or discontinue free access at any time with 30 days' notice. There are no SLA guarantees outside an executed enterprise agreement, and you may experience rate-limiting during high load periods.

7. Intellectual Property

All intellectual property rights in the Services, including but not limited to the Maskbreak API, SDK, dashboard, documentation, branding, and underlying machine learning models, remain the exclusive property of Sentinel Edge Networks LTD. These Terms do not grant you any ownership rights in the Services. Where an SDK or component is released under a separate open-source licence, that licence governs the rights it grants in that component.

You retain all rights to the data you submit to the API. You grant us a limited, non-exclusive license to process that data solely for the purpose of providing the Services.

8. Confidentiality

Each party may receive confidential information from the other. Both parties agree to keep such information confidential using at least the same degree of care used for their own confidential information, and not to disclose it to third parties without prior written consent. This obligation does not apply to information that is publicly available, independently developed, or required to be disclosed by law.

9. Data Processing & GDPR

When you use the Services to evaluate your users, you normally act as controller and Maskbreak acts as processor under the UK GDPR and, where applicable, EU GDPR. Our Data Processing Addendum (DPA), including the Article 28 terms and applicable transfer safeguards, is published self-serve at maskbreak.com/dpa and forms part of these Terms when Maskbreak processes personal data on your behalf. A countersigned copy is available on request at support@maskbreak.com.

You are responsible for ensuring you have a valid legal basis to submit your end-users' data to our API, and for informing your end-users of such processing in your own privacy policy.

Data Retention: Account data is retained for the duration of your account. Account deletion removes personal data and API keys from live systems promptly. Our existing commitment is that encrypted disaster-recovery backups expire within 60 days and are not used to restore a deleted account. The current retention-assurance note describes the implementation review; it does not extend that commitment. Data may be retained longer only where required by law, to resolve a dispute, or to establish or defend legal claims.

Your Right to Erasure: You may request deletion of your account and all associated personal data at any time by emailing support@maskbreak.com or using the account deletion feature in your dashboard settings. We will respond without undue delay and normally within one calendar month. Where the law permits an extension because of the complexity or number of requests, we will explain the reason within the initial month. Erasure is subject to applicable legal exceptions; see the Privacy Policy.

10. Disclaimer of Warranties

THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, OR NON-INFRINGEMENT. MASKBREAK DOES NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR COMPLETELY SECURE.

Bot detection and fraud prevention are probabilistic by nature. Maskbreak does not guarantee that all bots will be detected or that no legitimate users will be flagged. You are responsible for how you act upon our risk scores in your application.

11. Limitation of Liability

Nothing in these Terms excludes or limits liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, breach of title, or any other liability that cannot lawfully be excluded or limited. Subject to those carve-outs and to the maximum extent permitted by law, Maskbreak's total cumulative liability arising out of or related to these Terms or the Services shall not exceed the greater of (a) the fees paid by you to Maskbreak in the three months preceding the claim or (b) £100.

IN NO EVENT SHALL MASKBREAK BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOSS OF PROFITS, DATA, BUSINESS, OR GOODWILL, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

12. Indemnification

You agree to defend, indemnify, and hold harmless Maskbreak and its officers, directors, employees, and agents from any claims, damages, losses, liabilities, and expenses (including reasonable legal fees) arising out of or related to: (a) your use of the Services in violation of these Terms; (b) your violation of any applicable law; (c) your infringement of any third-party rights.

13. Term & Termination

These Terms remain in effect as long as you use or access the Services. You may terminate your account at any time via the dashboard or by emailing support@maskbreak.com. We may suspend or terminate your account immediately for breach of these Terms or any activity we reasonably believe is harmful to Maskbreak or other users.

Upon termination, your right to access the Services ceases immediately. Provisions that by their nature should survive termination (including Sections 7, 10, 11, 12, and 15) shall survive.

Before terminating a non-suspended account, you may export the account and usage information made available in the dashboard. We may retain limited records after termination only as described in our Privacy Policy.

14. Changes to Terms

We may update these Terms from time to time. We will notify you of material changes by email to your registered address at least 14 days before they take effect. Your continued use of the Services after the effective date constitutes acceptance of the updated Terms.

15. Governing Law & Dispute Resolution

These Terms are governed by and construed in accordance with the laws of England and Wales, without regard to conflict-of-law principles.

Any dispute arising from or related to these Terms shall first be subject to good-faith negotiation. If unresolved within 30 days, disputes shall be submitted to the exclusive jurisdiction of the courts of England and Wales.

16. Miscellaneous

• Entire Agreement: These Terms, together with our Privacy Policy, Cookie Policy and (where Maskbreak processes personal data on your behalf) the DPA, constitute the entire agreement between the parties regarding the Services.
• Severability: If any provision is found invalid or unenforceable, the remaining provisions remain in full force.
• Waiver: Failure to enforce any provision shall not constitute a waiver of future enforcement rights.
• Assignment: You may not assign your rights under these Terms without our written consent. We may assign our rights freely.
• Language: These Terms are executed in English. In case of conflict between any translated version and the English version, the English version prevails.
• Order of precedence: an executed order form or MSA prevails over these Terms for its subject matter, followed by the DPA for personal-data processing and an executed SLA for service levels.

17. Procurement & Enterprise Contracts

For procurement, security, or legal review teams, the following documents are available — self-serve where linked, otherwise on request from support@maskbreak.com:

• Data Processing Agreement (DPA) aligned to UK GDPR / EU GDPR Article 28, including the applicable international-transfer terms — published self-serve at /dpa, with a countersigned copy available on request. The current named sub-processor list is supplied with the DPA and published at /sub-processors. Our Cookie Policy separately describes the providers used by the public website.
• Vendor security questionnaire responses (including answers to common SIG-Lite, CAIQ, and bespoke questionnaires).
• Master Services Agreement (MSA) for customers requiring contracting outside our standard click-through Terms.
• Beta service-level expectations. Our public service-level objectives are non-contractual during open beta. Contractual availability, support targets, and service credits are available only in an executed enterprise agreement. We will give 30 days' notice before any change to commercial terms.
• Sub-processor change notification: we will notify customers at least 30 days before adding a new sub-processor that processes customer data, with a right to object before the change takes effect.
• Audit posture: Maskbreak is pre-audit for SOC 2 Type II. We do not currently hold SOC 2, ISO 27001, HIPAA BAAs, or PCI DSS attestation, and we will not claim otherwise. Roadmap detail is shared on request under NDA.
• Vulnerability disclosure: see our Responsible Disclosure policy for how to report security issues, scope, and safe-harbour commitments.

18. Contact