Terms of service

Your agreement with us

Heretic is provided by HYPR PTE. LTD., a company incorporated in Singapore with UEN 202520273N, at 408B FERNVALE ROAD, SINGAPORE 792408. In these terms, "Heretic", "we", "us", and "our" mean HYPR PTE. LTD. "You" means the person or organisation registering for or using the services.

By creating an account, placing an order, or using the services, you agree to these terms. If you act for an organisation, you confirm that you have authority to bind it. Accounts are for business use. You must be at least 18 and legally able to enter into this agreement. If you do not agree, do not create an account or use the services.

A separate agreement or order signed by both parties takes precedence over these terms where they conflict. An agreed data processing addendum takes precedence on personal data processing matters. Visitors who encounter a Heretic check on your website do not become our subscribing customers merely by completing that check.

What the service provides

Heretic tests browser claims against browser and connection measurements, then returns findings and a verdict. Phone challenges add movement checks and passkey verification. You decide how your application uses the results, including whether to allow access, refuse a request, or require a challenge.

A result describes the measurements obtained for that session. An uncontradicted result or a passed challenge does not guarantee a unique person, a unique physical device, lawful activity, or the absence of fraud. Matching identifiers indicate matching inputs within their documented scope and version. Different devices can share those inputs.

Required measurements must complete. Blocked scripts, missing telemetry, failed verification steps, or interrupted connections can produce a Refused verdict or a challenge that is not completed. Your integration must handle these outcomes and service errors. You must verify results on your server as documented and protect secret keys.

Heretic does not provide identity verification for legal purposes, age verification, regulatory eligibility checks, geolocation certification, sanctions screening, or anti-money-laundering compliance. You are responsible for any such controls your business requires, and for decisions made using our results.

Accounts and permitted use

Keep your account, contact, and billing information accurate. You are responsible for authorised users, your integrations, and activity through your credentials. Use Heretic only on websites and applications you own or are authorised to operate, and complete domain verification when required. Tell us promptly if you suspect unauthorised access.

Subject to these terms and payment of applicable fees, we grant you a limited, non-exclusive right to use the services and integrate the supplied client software into your applications during your subscription. Your visitors may run that software as part of your authorised integration. Separately supplied software and open source components remain subject to their applicable licences.

• Do not use the services unlawfully, infringe others' rights, or collect data without authority.
• Do not attack the service, distribute malware, access another customer's data, or bypass authentication, metering, quotas, or plan restrictions.
• Do not misrepresent your business or use multiple accounts to evade applicable fees or use restrictions.
• Do not sell access to Heretic or offer it as a standalone service without our written agreement.
• Do not reverse engineer non-public service components except where applicable law permits it. Coordinate intrusive security testing with us in advance.
• Do not use Heretic in life-critical systems where a failure could cause death, physical injury, or severe environmental harm.

You must comply with laws and sanctions applicable to you and your use of the services.

Plans, usage, and payments

Your selected plan, checkout, or signed order sets the fees and allowances. Published prices are in US dollars unless stated otherwise. Applicable taxes are additional unless included in the quoted price. You are responsible for taxes on your purchase, excluding taxes on our net income.

A probe counts when its measurement session opens. A challenge counts when it is created, even if the visitor does not finish. Sandbox stops new usage at its limits. Self-service paid plans continue beyond their included allowances and incur the overage rates shown on the pricing page and at purchase. An allowance is not a spending cap. You are responsible for usage generated through your integration, including automated traffic.

Usage allowances reset each UTC calendar month and do not roll over. Your subscription invoice period may differ. Subscription fees are charged for the upcoming service period; metered usage can be invoiced afterwards. Enterprise allowances and billing follow the signed order.

Monthly subscriptions renew until cancelled. For automatic card billing, you authorise us and our payment processor to charge the subscription, applicable overage, and taxes to your payment method. Manual invoice subscriptions require payment of each renewal invoice. Crypto renewal payments require you to initiate a new payment; we do not automatically debit your wallet. Paid access can stop when the paid period ends if a renewal invoice remains unpaid.

Stripe processes billing and card payments. MoonPay Commerce processes supported crypto payments against the invoice. Use only the asset, network, address, and amount specified by checkout. You bear network fees and errors in transfers you initiate. Access depends on confirmation that the invoice is paid. Sending a transaction or closing the payment window does not establish payment. Applicable payment-provider terms also apply.

We may suspend paid access for overdue fees. Contact us promptly about a billing error so we can investigate and correct it. Good-faith billing disputes do not remove your obligation to pay undisputed amounts.

Cancellation, refunds, and price changes

Manage or cancel a self-service subscription through dashboard billing. The billing confirmation shows when the change takes effect. Cancel before the next renewal to avoid another subscription period. Contact us if you cannot access billing. Enterprise cancellation follows the signed agreement.

Stopping traffic, deleting a site, or revoking a key does not cancel a subscription. Cancellation does not remove charges already incurred, including overage invoiced later. Abandoning an unpaid checkout is separate from cancelling an active subscription.

Fees are non-refundable and unused allowances receive no credit, except where required by law, expressly agreed in writing, or provided below for termination by us. We will correct duplicate or erroneous charges. An approved crypto refund is based on the original invoice value in US dollars, not later changes in the asset's market price; we will confirm the refund method with you.

We will give existing paying customers at least 30 days' notice of an increase to recurring or overage rates by email or dashboard notice. The increase applies from the first renewal after that notice period. You can cancel before it takes effect. A signed order's price commitments take precedence.

Your data and privacy responsibilities

You retain your rights in data you provide. You authorise us to process that data and measurements collected through your integration to provide, secure, and support the services, subject to the privacy and retention notice, applicable law, and any agreed data processing addendum.

You determine the purpose of checks on your sites and the actions taken on the results. You must provide the required privacy notices, establish a lawful basis for processing, and obtain any consent required for browser measurements, device access, or verification. A browser permission prompt does not replace those obligations. Send only data needed for the integration; do not put passwords, payment-card details, identity documents, or other sensitive content in account references or action metadata.

Where the law requires a data processing agreement or international transfer terms, contact us to put them in place before sending the affected personal data. These terms do not by themselves provide a completed data processing addendum or transfer mechanism. Each party remains responsible for its own legal obligations.

Retention and erasure follow the privacy notice and any agreed schedule. Keep your own copies of records you lawfully need before their retention period ends. Heretic is not an archival service. Cancelling a subscription does not itself erase all account, measurement, credential, or billing records. Use the documented deletion controls or contact us. Records required by law may be retained for the required period.

Ownership and confidentiality

We and our licensors retain ownership of Heretic's software, detection logic, documentation, and branding. You may use the results returned to your account for your lawful business purposes under this agreement. No ownership of our service or intellectual property transfers to you. If you voluntarily provide feedback, we may use it without an obligation to pay you; this does not grant rights in your confidential information or personal data.

Each party must protect the other's non-public information that is marked confidential or should reasonably be understood to be confidential, and use it only for this agreement. Disclosure is limited to people and service providers who need access and are bound by confidentiality obligations. This does not cover information independently developed, lawfully received from another source, or public through no breach. Legally required disclosure is permitted, with advance notice where lawful.

Availability and service changes

We will provide the services with reasonable care and skill. Detection rules and supported checks may change as browsers, protocols, and the service evolve. You must maintain your integration against the documented contract.

Unless a signed agreement says otherwise, there is no uptime guarantee, response-time commitment, or service-credit entitlement. Maintenance, network failures, third-party services, and other interruptions can affect availability. We will give reasonable advance notice of planned material reductions to paid functionality or breaking API changes where practicable; urgent security or legal changes may take effect immediately.

Except for express commitments in this agreement and rights that cannot lawfully be excluded, the services are provided "as is" and "as available". We exclude implied warranties, including fitness for a particular purpose and non-infringement, to the extent permitted by law. We do not warrant uninterrupted or error-free operation, detection of every attack, or prevention of every loss. Free, trial, and beta features may change or be withdrawn.

Limits on liability

To the extent permitted by law, Heretic is not liable for indirect or consequential losses, or loss of profits, revenue, business opportunities, goodwill, or anticipated savings arising from the services. We do not reimburse transaction losses, customer payouts, chargebacks, stolen funds, or penalties arising from your business or your decisions about access, transactions, or regulatory compliance.

Our total aggregate liability arising out of or relating to this agreement, whether in contract, negligence, or otherwise, is limited to the greater of US$100 and the fees you paid or owe to Heretic for the services in the 12 months immediately before the first event giving rise to the claim. Related claims share that limit.

Nothing in these terms excludes or limits liability for fraud, fraudulent misrepresentation, death or personal injury caused by negligence, or any other liability that cannot lawfully be excluded or limited. All exclusions and limits apply only to the extent permitted by applicable law. A signed Enterprise agreement may expressly provide different limits.

Claims arising from your use

You will defend and indemnify Heretic against third-party claims, resulting damages, and reasonable legal costs to the extent caused by your unlawful use, an unapproved Restricted Use, infringement of another person's rights by data you supply, or your decisions about your users in breach of these terms. This does not apply to the extent a claim results from our own breach, negligence, or wilful misconduct.

We must notify you promptly of the claim, provide reasonable cooperation at your expense, and allow you to control its defence with suitable counsel. You may not settle a claim in a way that admits fault by us, imposes a non-monetary obligation on us, or leaves us liable without our prior written consent, which we will not unreasonably withhold.

Suspension and termination

We may suspend access immediately where reasonably necessary to address a security threat, unlawful use, an unapproved Restricted Use, non-payment, or a material breach of these terms. We will explain the reason and how it can be resolved unless doing so would be unlawful or compromise security.

Either party may terminate for a material breach that the other party has not remedied within 14 days of written notice. A breach that cannot be remedied, or use that must stop by law, may result in immediate termination. We may otherwise end the service or your subscription on 30 days' notice.

If we end a paid subscription for convenience, or you terminate because of our unremedied material breach, we will refund prepaid subscription fees for the unused period. Usage already incurred remains payable. When this agreement ends, your right to use the services ends, and data is handled under the privacy notice and any agreed data processing terms. Accrued payment duties, ownership, confidentiality, liability, indemnity, and dispute provisions survive termination.

Changes to these terms

We may update these terms and will publish the new version and effective date here. We will give existing account holders at least 30 days' notice of material changes by email or dashboard notice. Changes required by law or needed to address an urgent security threat may take effect sooner, with notice explaining the reason.

Changes apply prospectively. If you disagree, stop using the services and cancel before the changes take effect. Continuing to use the services after that date constitutes acceptance of the updated terms. Changes to a signed agreement follow that agreement's amendment provisions.

Governing law and general terms

Singapore law governs this agreement. The courts of Singapore have exclusive jurisdiction over disputes, subject to any mandatory rights under applicable law. Contact us first so we can try to resolve a dispute; this does not prevent either party from seeking urgent relief or meeting a legal deadline.

These terms, your applicable order, and any signed agreements form the agreement for the services and replace earlier discussions on the same subject. Purchase-order boilerplate does not amend it. If a provision is unenforceable, the remaining provisions continue to apply. A delay in enforcing a right is not a waiver.

You may not assign this agreement without our written consent, which we will not unreasonably withhold. We may assign it as part of a merger, reorganisation, or sale of the relevant business if the successor assumes our obligations. Neither party is responsible for delays caused by events beyond its reasonable control, except payment obligations already due. No third party has a right to enforce these terms under Singapore's Contracts (Rights of Third Parties) Act 2001.

Contact

Send legal notices, Enterprise requests, and service questions to hello@heretic.tech. We may send account notices to your registered email address or through the dashboard. Keep your contact details current.