Terms of Service

1. Binding arbitration and class-action waiver

Except where applicable law does not permit it, you and HANS Society Foundation agree to resolve disputes through final and binding individual arbitration rather than in court, and you waive the right to participate in a class, collective, coordinated, or representative action. Please review Sections 18 and 19 carefully. Nothing in these Terms prevents either party from bringing an eligible individual claim in small-claims court or seeking appropriate injunctive relief for misuse of intellectual property or unauthorized access.

2. Who we are and what IRIS does

IRIS is a security and privacy intelligence service. Depending on availability and your Account status, the Services may help you review exposure associated with a verified email address, search public information, check breach intelligence, inspect public blockchain approvals, link independently verified wallets, prepare user-directed approval revocations, manage security monitoring, or receive security assessments, remediation guidance, and investigation-related information.

IRIS is a software and information provider. Unless a separate written agreement expressly says otherwise, IRIS is not a law firm, financial institution, broker, investment adviser, fiduciary, custodian, digital-asset recovery guarantor, law-enforcement agency, or insurer. IRIS does not hold your private keys or take custody of your digital assets.

3. Eligibility, authority, and acceptance

You must be at least 18 years old and have the legal capacity to enter into these Terms. If you use the Services for an organization, you represent that you have authority to bind that organization.

You may submit or assess only an identity, email address, account, device, system, wallet, contract, or other target that you own, control, or are expressly authorized to assess. You are responsible for obtaining any permission required by law or contract. You may not use the Services to investigate, monitor, access, or interfere with another person or system without lawful authority.

Some features may have additional disclosures, scopes of work, or feature-specific terms. Those additional terms become part of these Terms when presented and accepted or otherwise agreed in writing.

4. Accounts and authentication

IRIS may permit authentication through Google, a proof-based wallet signature, or another supported method. You are responsible for safeguarding your devices, Google Account, wallet, and other authentication methods and for promptly reporting suspected unauthorized access.

Wallet login and wallet linking are signature-only ownership proofs. They do not authorize IRIS to initiate a blockchain transaction, approval, transfer, payment, or other wallet action. Linking multiple wallets requires a separate proof of control for each wallet. A wallet already bound to another IRIS Account may be rejected to prevent silent Account merging.

IRIS may use conflict-safe linking and Account-security controls that delay, reject, or require you to repeat an operation if the active Account, session, wallet, or browser context changes.

5. Identity and public-exposure reviews

Creating an Account and accepting these Terms does not silently authorize a live identity review. Before each identity review, IRIS presents a concise, feature-specific disclosure identifying the downstream providers and data involved and asks you to take a fresh affirmative action. You can decline the review. If you withdraw while the browser request remains active, IRIS will attempt to stop further processing, but data already transmitted to a provider cannot be retracted.

Identity results may include public webpages and breach-intelligence records associated with the verified email submitted for review. Results can be incomplete, delayed, outdated, duplicated, or incorrectly attributed. A result does not prove that an account remains compromised, that a particular person caused an event, or that no other exposure exists.

6. Wallet Exposure and blockchain actions

IRIS may scan a public wallet address without connecting that wallet. Public blockchain data can be incomplete, reorganized, delayed, incorrectly indexed, or affected by third-party RPC and indexing providers.

A revoke or other blockchain action is separate from login, linking, and passive scanning. Before opening a supported wallet request, IRIS is designed to recheck the selected Account-linked address, connected signer, active chain, target approval, and any disclosed IRIS service fee. You alone decide whether to approve a wallet prompt. You must independently inspect the address, chain, contract, calldata, value, permissions, fee, and gas displayed by your wallet.

Blockchain transactions are generally public, final, and irreversible. Network conditions, smart contracts, tokens, wallet software, RPC providers, and malicious interfaces can cause failure or loss. IRIS does not guarantee that a revocation will be mined, succeed, remove every risk, or prevent a later approval or compromise.

7. Acceptable use

You agree not to:

• violate law, sanctions, export controls, privacy rights, intellectual-property rights, or contractual restrictions;
• submit information or targets without the authority described in Section 3;
• use results to harass, stalk, discriminate, extort, dox, defraud, steal, facilitate unauthorized access, or cause harm;
• misrepresent your identity, authorization, affiliation, findings, or relationship with HANS Society Foundation;
• probe, bypass, disable, overload, scrape, reverse engineer, or interfere with security controls, rate limits, authentication, provider restrictions, or the Services, except to the limited extent such restriction is prohibited by law;
• introduce malware, malicious instructions, deceptive content, or automated traffic that burdens the Services; or
• resell, redistribute, mirror, frame, or use the Services or their proprietary outputs to build a competing product without written permission.

We may investigate suspected misuse and preserve or disclose information when reasonably necessary to protect users, providers, HANS Society Foundation, or the public, or to comply with law.

8. Third-party services

The Services rely on third parties for authentication, public-web search, breach intelligence, blockchain data and RPC access, wallet interfaces, hosting, storage, communications, and payment processing. These services may be unavailable, change their terms, retain information under their own policies, or return inaccurate results. Your use of a third-party product may also be governed by that provider’s terms.

IRIS’s use of third parties does not make HANS Society Foundation responsible for their independent acts, omissions, security, availability, or content. Provider-specific identity-review disclosures and our principal data practices are described in the Privacy Notice.

9. Fees, recurring subscriptions, and payments

9.1 Stripe recurring subscriptions

IRIS may offer monthly and annual recurring PRO subscriptions. The price, billing period, currency, included access, and any taxes will be displayed before you submit payment. By starting a recurring subscription, you authorize Stripe and HANS Society Foundation to charge the selected payment method at the beginning of each billing period until cancellation.

You can cancel recurring billing through the Stripe Customer Portal linked from IRIS Account. Cancellation access remains available to an authenticated Stripe-billed Account without requiring acceptance of later Terms. Signing out, deleting browser data, or stopping use does not cancel. Cancellation stops future renewals and ordinarily takes effect at the end of the then-current paid period; access generally continues until that date. To avoid the next charge, cancel before the renewal date. Except where required by law or expressly stated at checkout, paid subscription fees are non-refundable and HANS Society Foundation does not provide prorated refunds for unused time.

We may change future subscription prices or features with advance notice when required by law. A price change will apply prospectively. If a payment fails, access may be limited or suspended while Stripe retries or while the subscription remains unpaid.

9.2 Fixed-term cryptocurrency purchases

If offered, a fixed-term cryptocurrency purchase is not an automatically renewing subscription. The interface will identify the token, network, recipient, amount, and access period before a wallet request. You are solely responsible for using the correct network, token, recipient, amount, and payer wallet. On-chain payments are generally final and non-refundable except where applicable law requires otherwise or HANS Society Foundation expressly agrees.

9.3 Wallet-action fees and network gas

If IRIS offers a paid revoke or other wallet action, the interface will disclose the IRIS service fee and distinguish it from blockchain gas before any wallet request. Network gas is paid to blockchain participants, not HANS Society Foundation. A service fee does not guarantee that the related blockchain transaction will succeed or achieve a particular security outcome.

9.4 Taxes

You are responsible for taxes, duties, and reporting obligations arising from your purchases or blockchain activity, except taxes imposed on HANS Society Foundation itself. IRIS does not provide tax advice.

10. Security information, AI, and no professional advice

IRIS may use automated systems and artificial intelligence to classify, summarize, prioritize, or explain information. AI and security outputs may be wrong, incomplete, biased, or unsuitable for your circumstances. They are starting points for independent verification, not guarantees or authoritative findings.

The Services do not constitute legal, investment, financial, tax, accounting, insurance, medical, or other licensed professional advice. They do not guarantee privacy, security, recovery, attribution, compliance, or a particular outcome. You should obtain qualified professional advice before acting on consequential information.

These Terms do not create a fiduciary, agency, partnership, employment, joint-venture, or attorney-client relationship. The only duties HANS Society Foundation owes are those expressly stated in these Terms or a separate signed agreement.

11. Professional services and investigations

Paid assessments, remediation work, investigations, recovery assistance, or other professional engagements may require a separate written proposal, statement of work, authorization, scope, fee, and deliverable terms. If a separate signed agreement conflicts with these Terms for that engagement, the separate agreement controls to the extent of the conflict.

No investigation, attribution, recovery effort, takedown request, remediation, or report guarantees identification, cooperation, recovery of assets, acceptance by a third party, or prevention of future harm.

12. Intellectual property and feedback

The Services, including original software, interfaces, designs, workflows, reports, text, graphics, trademarks, models, scoring methods, and other HANS Society Foundation materials, are owned by HANS Society Foundation or its licensors and protected by law. Subject to these Terms, HANS Society Foundation grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable right to use the Services for their intended lawful purpose.

You retain rights in content you lawfully provide. You grant HANS Society Foundation a limited license to process that content only as reasonably necessary to provide, secure, and improve the Services, comply with law, and enforce these Terms. If you provide feedback, you permit HANS Society Foundation to use it without restriction or compensation.

13. Privacy

Our Privacy Notice explains how HANS Society Foundation handles personal information in connection with IRIS. You acknowledge that public wallet addresses and blockchain transactions are publicly observable and cannot be deleted from a blockchain by HANS Society Foundation.

14. Disclaimers

To the maximum extent permitted by law, the Services are provided “as is” and “as available.” HANS Society Foundation disclaims all express, implied, and statutory warranties, including merchantability, fitness for a particular purpose, title, non-infringement, accuracy, quiet enjoyment, and uninterrupted or error-free operation.

HANS Society Foundation does not warrant that the Services will identify every issue, remain available, be free of harmful components, preserve data, prevent loss, or work with every provider, wallet, chain, contract, browser, or jurisdiction. You assume the risks of relying on security information, public data, AI output, third-party services, digital assets, smart contracts, and blockchain networks.

Nothing in these Terms excludes a warranty or right that cannot lawfully be excluded.

15. Limitation of liability

To the maximum extent permitted by law, HANS Society Foundation, its affiliates, and their founders, members, managers, directors, officers, employees, contractors, agents, and advisers will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages; loss of profits, revenue, opportunity, goodwill, data, credentials, digital assets, or funds; trading or market loss; or damages arising from third-party systems, unauthorized access, public-data errors, blockchain activity, smart contracts, or failed recovery—even if advised that such damages were possible.

To the maximum extent permitted by law, the aggregate liability of HANS Society Foundation for all claims arising out of or relating to the Services or these Terms will not exceed the greater of (a) the fees you actually paid to HANS Society Foundation for the Services during the 12 months before the event giving rise to the claim or (b) one hundred U.S. dollars (US $100).

Some jurisdictions do not permit certain exclusions or limits. In those jurisdictions, liability is limited to the fullest extent permitted by law. Nothing in these Terms limits liability that cannot legally be limited, including liability for HANS Society Foundation’s fraud or for death or personal injury caused by gross negligence where applicable.

16. Entity-only claims, release, and indemnification

To the fullest extent permitted by law, claims relating to the Services lie solely against HANS Society Foundation as an entity, not against any founder, owner, member, manager, director, officer, employee, contractor, agent, adviser, or representative in an individual capacity (“Protected Persons”). This protection does not apply to liability that cannot lawfully be waived, including a Protected Person’s own fraud.

To the maximum extent permitted by law, you release HANS Society Foundation and the Protected Persons from claims arising solely from risks you expressly assume under these Terms, including public-data inaccuracies, third-party outages, wallet-provider conduct, blockchain irreversibility, smart-contract failure, and your approval of a wallet transaction. This release does not waive non-waivable rights.

You agree to indemnify and defend HANS Society Foundation and the Protected Persons against third-party claims, liabilities, damages, penalties, and reasonable legal costs arising from your unlawful use of the Services, lack of authority to submit a target, breach of these Terms, infringement of another person’s rights, or violation of law. HANS Society Foundation may control the defense of an indemnified matter, and you agree to reasonably cooperate.

17. Suspension and termination

You may stop using the Services at any time and may cancel recurring billing as described in Section 9. HANS Society Foundation may suspend or terminate access where reasonably necessary to address a Terms violation, fraud, abuse, security threat, provider requirement, legal obligation, nonpayment, or material risk to users, HANS Society Foundation, or third parties.

Upon termination, your right to use the Services ends, but provisions that by their nature should survive—including payment obligations already incurred, intellectual property, disclaimers, liability limits, indemnification, dispute resolution, and general terms—will survive.

18. Dispute resolution

18.1 Informal resolution

Before filing a claim, you and HANS Society Foundation agree to attempt in good faith to resolve the dispute for at least 30 days after written notice. Notices to HANS Society Foundation should be sent to support@joinhans.io with “Undercover IRIS dispute” in the subject. Your notice must identify you, describe the dispute, and state the relief requested.

18.2 Individual arbitration

Except for eligible individual small-claims matters and requests for injunctive relief concerning unauthorized access or intellectual-property misuse, a dispute arising out of these Terms or the Services will be resolved by final and binding individual arbitration administered by the American Arbitration Association (“AAA”) under its applicable consumer or commercial rules. The Federal Arbitration Act governs this arbitration provision. Unless the parties agree otherwise or applicable law requires another location, arbitration will occur in New York or remotely.

18.3 Class-action waiver

To the fullest extent permitted by law, disputes must proceed only on an individual basis. Neither party may bring or participate in a class, collective, coordinated, consolidated, mass, or representative action or arbitration. If this waiver is found unenforceable for a particular claim, that claim must proceed in a court of competent jurisdiction and not in class arbitration.

19. Governing law and courts

These Terms are governed by the laws of the State of New York, without regard to conflict-of-law rules, except that the Federal Arbitration Act governs Section 18. Subject to Section 18 and mandatory consumer law, the state and federal courts located in New York, New York have exclusive jurisdiction over disputes that may lawfully proceed in court.

20. Changes and general terms

HANS Society Foundation may update these Terms prospectively. Material changes will carry a new effective date and may require renewed Account acceptance. Changes do not retroactively alter an existing dispute. If you do not agree to revised Terms, stop using the Services; however, you may still authenticate and open your IRIS Account solely to manage or cancel existing billing. Doing so alone does not constitute acceptance of revised Terms.

These Terms and incorporated policies are the entire agreement concerning the Services unless a separate signed agreement applies. If a provision is unenforceable, it will be enforced to the maximum lawful extent and the remaining provisions remain effective. HANS Society Foundation’s failure to enforce a provision is not a waiver. You may not assign these Terms without written consent; HANS Society Foundation may assign them in connection with a merger, acquisition, reorganization, or transfer of the Services. HANS Society Foundation is not liable for delay or failure caused by events beyond reasonable control.

21. Contact

Questions about these Terms or the Services may be sent to HANS Society Foundation at support@joinhans.io with “Undercover IRIS” in the subject, or through the official @UndercoverIRIS account.