End User Agreement

Effective date: 2026-05-26
Dataforge Inc. ("Dataforge," "we," "us")
6-783 King Road, Burlington, Ontario L7T 3K7, Canada
legal@dataforge.on.ca

This End User Agreement ("Agreement") governs your access to and use of Dataforge Honeypot (the Service): the hosted director, user portal, public API, documentation, and related support at honeypot.app.dataforgecanada.com, and the detector clients you deploy.

By creating an account or otherwise using the Service, you agree to this Agreement and our Privacy Policy. If you do not agree, do not use the Service.

1. Definitions

2. Eligibility

You must be at least 18 years old, have legal capacity to enter into a binding contract, and not be prohibited from using the Service under applicable law (including Canadian sanctions and export-control rules). You represent that the information you provide at registration is accurate.

The Service is offered publicly on the internet. It is not limited to private or internal networks.

3. Account responsibilities

You are responsible for:

• Providing a valid email address and keeping your contact information current;
• Protecting your portal password, MFA devices, API keys, and generated deploy commands;
• Enabling MFA where available (recommended);
• Ensuring one human uses each Account (do not share portal credentials across individuals);
• Rotating detector API keys when personnel or systems change.

We may suspend or terminate Accounts for abuse, non-payment, security incidents, or violations of this Agreement. Where practicable, we will tell you why.

4. Beta status

The Service is currently in beta. Features, APIs, configuration, and deployment steps may change between releases.

The Service is provided on a best-effort basis. We do not guarantee uninterrupted availability, compatibility with every environment, or detection of every attack.

5. Acceptable use

You agree not to use the Service to:

• Violate applicable law or the rights of others;
• Probe, attack, or misuse production systems unrelated to authorized honeypot operations;
• Exfiltrate honeypot event data to unauthorized recipients;
• Reverse engineer, scrape, or circumvent technical limits except where permitted by law;
• Create accounts through automated means or interfere with rate limits, abuse controls, or other tenants;
• Operate decoys on networks you do not own or have written authorization to monitor;
• Use the Service to capture data unlawfully in your jurisdiction;
• Host malware, send spam, or share credentials with unauthorized parties.

You confirm that decoys you deploy are placed on networks you control or are authorized to monitor for defensive security purposes.

6. Detector data and lawful collection

Honeypot events may include IP addresses, ports, session metadata, and captured command or banner text from interactions with decoy services. That data may incidentally include personal information about third parties.

You are responsible for lawful collection and retention in your environment. For data your decoys capture, you are typically the controller and Dataforge acts as a processor storing and displaying that data on your behalf. See our Privacy Policy.

7. Fees, billing, trial, cancellation, and refunds

Platform administrators designated by Dataforge may be exempt from billing and detector limits.

8. Suspension and termination

We may suspend or terminate your Account immediately for cause, including breach of this Agreement, abuse, non-payment, or a legal or regulatory requirement.

We may terminate for convenience with 30 days' notice to the email on your Account.

On termination:

• Your detectors lose access to the Service and stop receiving configuration updates;
• Your right to use the Service ends;
• Account and event data are handled per our Privacy Policy retention schedule.

You may stop using the Service at any time by cancelling your subscription and ceasing use of detectors.

9. Third-party services

The Service integrates with third parties, including PayPal, Google reCAPTCHA Enterprise, Docker Hub, and Telegram (when you enable it). Your use of those features is also subject to their terms and privacy notices. See the "Service providers we share data with" section of our Privacy Policy.

Dataforge is not responsible for third-party services outside our control.

10. Intellectual property

Dataforge owns the Service, director software, portal, and related documentation, except as stated below.

The detector container image (dataforgecanada/honeypot) is licensed under GPL-3.0 (see the detector LICENSE). The director and portal are proprietary.

Subject to this Agreement, we grant you a non-exclusive, non-transferable, revocable right to use the Service while your Account is active and in good standing.

11. Confidentiality

API keys, deploy commands, MFA secrets, and honeypot event data associated with your Account are confidential to you. You must not disclose them to unauthorized parties.

Dataforge may use aggregated, non-identifying metrics to operate and improve the Service.

12. Disclaimer of warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY LAW, DATAFORGE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

We do not warrant that the Service will detect every attack, be error-free, or operate without interruption.

13. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW:

• DATAFORGE WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, DATA, OR GOODWILL; AND
• DATAFORGE'S AGGREGATE LIABILITY UNDER THIS AGREEMENT WILL NOT EXCEED THE GREATER OF (A) CAD $100, OR (B) THE TOTAL FEES YOU PAID TO DATAFORGE FOR THE SERVICE IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM.

Some jurisdictions do not allow certain limitations; in those cases, the above applies to the fullest extent permitted.

14. Indemnification

You will indemnify and hold harmless Dataforge, its officers, directors, and employees from claims, damages, and expenses (including reasonable legal fees) arising from:

• Your use of the Service in violation of this Agreement or applicable law;
• Placement or operation of decoys on networks without proper authorization; or
• Content or data captured by your decoys, to the extent you are responsible as controller.

15. Export control and sanctions

You represent that you are not located in, organized under the laws of, or ordinarily resident in a country subject to comprehensive Canadian sanctions, and that you will not use or export the Service in violation of applicable export-control or sanctions laws.

16. Governing law and venue

This Agreement is governed by the laws of Ontario, Canada, without regard to conflict-of-law rules. The courts of Ontario have exclusive jurisdiction, subject to mandatory consumer-protection rights that cannot be waived by contract.

17. Changes to this Agreement

We may update this Agreement from time to time. For material changes, we will provide at least 30 days' notice (for example, by email or portal banner) before the effective date. Continued use after the effective date constitutes acceptance. The "Effective date" at the top reflects the latest version.

18. General

19. Contact

Dataforge Inc.
6-783 King Road, Burlington, Ontario L7T 3K7, Canada
Email: legal@dataforge.on.ca

© Dataforge Inc. All rights reserved.