Terms of Service

1. Agreement to Terms

These Terms of Service (“Terms”) constitute a legally binding agreement between you (“Customer,” “you,” or “your”) and Syncra Tech EOOD, a company organized under the laws of the Republic of Bulgaria (“we,” “us,” or “our”), owner and operator of the Fraud Intercept platform and services available at fraud-intercept.com (the “Service”).

By registering an account, accessing, or using the Service, you acknowledge that you have read, understood, and agree to be bound by these Terms. If you are entering into these Terms on behalf of a company or other legal entity, you represent that you have the authority to bind such entity to these Terms.

2. Service Description

Fraud Intercept is a Software-as-a-Service (SaaS) platform that provides digital businesses with tools for fraud detection, risk watchlist management, and shared intelligence. Key features include:

• Real-time Fraud Checks: API-based verification against a shared database of reported fraudsters
• Multi-Brand Management: Single account management for multiple brands or platforms
• Cross-Platform Detection: Identification of users across different platforms within the network
• Alerts & Notifications: Real-time alerts for fraud matches and system events
• Risk Watchlists: Proprietary database for identifying professional athletes and other risk categories
• Fingerprinting: Advanced detection using device fingerprinting and technical identifiers
• AI Assistant (Beta): Natural language interface powered by third-party AI models for querying fraud data, generating insights, and exploring platform information
• Risk Scoring: Machine learning-powered risk assessment with actionable recommendations

Important: The Service is provided as a decision-support tool only. Fraud Intercept does not make final determinations about whether a user is fraudulent or legitimate. All final decisions regarding user access, account suspension, or transaction approval remain the sole responsibility of the Customer.

3. License Grant & Restrictions

3.1. License Grant

Subject to your compliance with these Terms and payment of applicable fees, we grant you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to:

• Access and use the Service for your internal business operations
• Designate authorized users within your organization
• Integrate the Service with your systems according to provided documentation
• Use generated reports and data for internal analysis

3.2. License Characteristics

This license is:

• Personal: Granted specifically to your company/organization
• Limited: Only for defined purposes within these Terms
• Non-transferable: Cannot be transferred to third parties without our written consent
• Revocable: May be terminated under specified conditions
• Non-exclusive: We may provide similar licenses to other customers

3.3. License Restrictions

You shall NOT:

• Distribute, transmit, sell, or sublicense access to the Service
• Process data of third parties without our prior consent
• Use the Service to develop competitive products or services
• Provide access to our competitors
• Reverse engineer, decompile, disassemble, or attempt to derive the source code
• Use automated systems (bots, scrapers) to access the Service without authorization
• Use the Service for any illegal, fraudulent, or unauthorized purpose
• Circumvent any security or access controls
• Remove or alter any proprietary notices or marks
• Use the Service for marketing attribution, behavioral tracking, or cross-internet visitor profiling unrelated to fraud prevention
• Attempt to “poison” or corrupt the shared fraud database by submitting inaccurate, malicious, or misleading fraud data

4. Account Registration & Management

4.1. Registration Requirements

You must provide accurate, complete, and current registration information. You are responsible for keeping this information updated.

4.2. Multi-Brand Management

A single account (“Owner”) may register and manage multiple brands (“Brands”) subject to applicable pricing tiers. Each Brand may have its own configuration and API keys.

4.3. Access Management

• Each authorized user must have unique credentials
• You are solely responsible for all activities conducted under your account
• You must implement appropriate security measures including strong passwords
• You must immediately report any unauthorized access or security breaches

4.4. Account Security

We reserve the right to monitor usage patterns and may temporarily suspend access if unusual or potentially harmful activity is detected.

5. Data Sharing & Privacy

5.1. Your Data

By using the Service, you grant us a license to process, store, and analyze the fraud-related data you submit (“Customer Data”) solely to provide and improve the Service.

5.2. Customer Obligations - Consent and Legal Basis

You represent and warrant that:

• You have obtained all necessary consents from your end-users to collect and share their data with Fraud Intercept
• Your privacy policy clearly discloses that you use third-party fraud detection services and that user data may be shared with such services
• You have a lawful basis (under GDPR, CCPA, or other applicable privacy laws) to share end-user data with us
• You comply with all applicable privacy laws and regulations in your jurisdiction
• You will not submit data of individuals from whom you have not obtained proper consent or legal basis

If you fail to obtain proper consent or establish a lawful basis for data sharing, you shall indemnify and hold us harmless from any claims, fines, or penalties resulting from such failure.

5.3. Data Sharing Controls

• Internal Sharing: Customer Data is automatically used for detection within brands owned by your account
• Network Sharing: You may configure whether to share fraudster data with the broader Fraud Intercept network. Your configuration controls determine data sharing scope
• Cross-Brand Detection: When enabled, you will receive notifications if the same user is detected across multiple brands in the network

5.4. Third-Party Service Providers

We engage trusted third-party companies (“Subprocessors”) to operate and improve the Service. Current categories of Subprocessors include:

• Cloud Hosting: Infrastructure and database services
• Email Delivery: Transactional notifications and alerts
• AI Model Providers: Third-party large language models accessed via API for the AI Assistant feature. Query content is transmitted to these providers for processing and is not used for model training under our commercial agreements
• Device Intelligence: Fingerprinting and device identification services
• Analytics: Usage analytics and performance monitoring

All Subprocessors are contractually bound to protect your data and process it only as instructed by us.

Error Monitoring and Session Replay

We use third-party error monitoring and performance tracing services to detect, diagnose, and resolve software errors and performance issues. With your consent, these services may also record trigger-based session replay (recordings that only start when an error occurs) to help our engineers reproduce and resolve bugs. Key points you should know:

• What is collected: stack traces, error messages, performance spans, and (with your consent) masked session recordings where text and media fields are redacted before transmission
• When it runs: error monitoring captures events whenever an error occurs; session replay records only when an error is triggered, never during normal browsing
• Consent required: both error monitoring (as it involves cookies and device access) and session replay require your opt-in via the cookie consent banner. You can change your preferences at any time in our Cookie Policy
• Data location: the error monitoring service ingests data in the European Economic Area. The parent entity may be located in the United States; any transfers are protected under Standard Contractual Clauses or the EU-US Data Privacy Framework
• Retention: error events are retained for approximately 90 days; session replays are retained for approximately 30 days. See our Privacy Policy Section 7 for full retention periods

Device Intelligence Provider

Fraud Intercept integrates with a third-party device intelligence provider to enhance fraud detection capabilities. The provider's legal identity and registered seat are disclosed to customers as part of the Data Processing Agreement. Key points:

• What is collected: Device fingerprinting involves collecting publicly available browser and device information (such as browser type, operating system, screen resolution, and other technical identifiers) to generate a unique identifier for each device
• How it is used: This fingerprint data is used to identify and track devices across your platform and, when enabled, across the broader Fraud Intercept network to detect multi-account fraud and account takeover attempts
• Provider role: The provider acts as a data processor. We are a customer of their service, not a formal partner
• Your responsibility: You are responsible for ensuring that your use of device fingerprinting complies with applicable privacy laws. For GDPR compliance, device fingerprinting for fraud prevention typically falls under “Legitimate Interest” but depends on your specific use case and jurisdiction
• Routing queries: You do not have a direct contractual relationship with the provider. Questions about their data handling practices should be routed through legal@fraud-intercept.com and we will coordinate with the provider on your behalf

5.5. Data Accuracy and Network Integrity

You warrant that all fraud data you submit to Fraud Intercept is:

• Accurate to the best of your knowledge
• Submitted in good faith for legitimate fraud prevention purposes
• Not submitted maliciously, competitively, or to harm any individual or organization
• Based on reasonable evidence of fraudulent activity

We reserve the right to remove, ignore, or quarantine any Customer Data that we suspect is inaccurate, malicious, or corrupting the shared intelligence network. We may immediately suspend or terminate your account if we determine you are submitting false or malicious fraud data, and we may conduct investigations into suspicious data submissions.

5.6. Data Retention

We retain data as necessary to provide the Service. Upon termination, you may request export of your Customer Data within 30 days.

6. AI-Powered Features

6.1. Beta Status and Limitations

The AI Assistant is currently designated as a “Beta” feature. Features labeled “Beta” are made available for evaluation purposes and are subject to the following conditions:

• Beta features may be changed, suspended, or permanently removed without prior notice
• Beta features may contain bugs, produce unexpected behavior, or experience downtime at higher rates than generally available features
• Beta features are excluded from any uptime SLA or service level commitments stated elsewhere in these Terms
• User data processed by Beta features is handled under the same data protection terms as the rest of the platform, but we make no additional guarantees regarding output quality or consistency
• Continued use of a Beta feature constitutes acceptance of its experimental nature

Beta designation will be removed at our sole discretion, and continued use after removal is governed by the standard terms of this agreement.

6.2. AI Output Disclaimer and No-Reliance Clause

The AI Assistant generates responses using probabilistic language models. You acknowledge and agree that:

• AI-generated responses may be inaccurate, incomplete, or outdated, even when querying data sourced directly from your platform
• Outputs do not constitute legal, financial, compliance, or professional advice of any kind
• You are solely responsible for verifying any AI-generated output before acting on it
• We do not guarantee that responses accurately reflect the underlying data in all cases. Hallucination, misinterpretation of context, and formatting errors may occur
• Third-party model providers are not parties to this agreement, and their model behavior is outside our direct control

6.3. Third-Party AI Model Providers

The AI Assistant is powered by third-party large language models accessed via OpenRouter. You are informed that:

• Your queries and relevant context are transmitted to third-party model providers for processing
• Under our commercial API agreements, query data is not used by model providers for training purposes
• The identity of the underlying AI model in use may change without notice as we select different models to improve quality, performance, or cost efficiency
• AI responses are generated in real time and are not pre-reviewed by Fraud Intercept personnel

6.4. EU AI Act Compliance and Transparency Notice

In accordance with Regulation (EU) 2024/1689 (the “AI Act”), we provide the following transparency disclosures:

• The AI Assistant is powered by artificial intelligence and specifically by third-party General Purpose AI (GPAI) models
• The AI Assistant does not represent human judgment, is not operated by a human agent, and does not make binding decisions on behalf of the platform or the user
• Fraud Intercept operates as a “deployer” of AI systems under the AI Act. The underlying model providers bear provider-level obligations under Articles 53 and 55
• We comply with applicable deployer obligations under the AI Act, including this transparency notice per Article 50

6.5. Data Processing by AI Features

When you use the AI Assistant, the following data may be processed:

• Query Content: Your natural language questions and any attached images are transmitted to third-party model providers for response generation
• Contextual Data: Relevant fraud records, case data, and platform information scoped to your brand may be retrieved and included as context for the AI model
• Conversation History: Conversations may be stored for quality improvement and are retained in accordance with our data retention policies
• Feedback Data: Ratings and feedback you provide on AI responses are stored to improve the Service
• Audit Logs: All AI interactions are logged for security, compliance, and accountability purposes

For full details on data processing practices, please refer to our Privacy Policy.

7. Intellectual Property Rights

7.1. Our Ownership

We retain all right, title, and interest in and to the Service, including all software, technology, designs, trademarks, and related intellectual property. Nothing in these Terms transfers any ownership rights to you.

7.2. Your Ownership

You retain all rights to your Customer Data. By submitting it, you warrant you have necessary rights and permissions.

7.3. Feedback

Any feedback, suggestions, or improvements you provide may be used by us without obligation or compensation.

8. Fees & Payment

8.1. Pricing

Fees are based on your selected plan and usage. Current pricing is available on our website or in your service agreement.

8.2. Payment Terms

Fees are due as specified in your invoice. Late payments may incur interest and result in service suspension.

8.3. Taxes

You are responsible for all applicable taxes, except taxes on our net income.

9. Service Level & Support

9.1. Service Availability

We strive to maintain 99.5% uptime, excluding scheduled maintenance, Beta features, and circumstances beyond our reasonable control.

9.2. Updates

We may update the Service at our discretion. We will provide reasonable notice for significant changes affecting functionality.

9.3. Support

Technical support is provided according to your service plan. Support availability and response times vary by plan.

10. Disclaimer of Warranties

10.1. As-Is Service

The Service is provided “as is” and “as available” without warranties of any kind, express or implied. We disclaim all warranties including merchantability, fitness for a particular purpose, and non-infringement.

10.2. Decision-Support Tool and AI Outputs

Fraud Intercept is a decision-support tool. You are solely responsible for all decisions and actions taken based on information provided by the Service, including outputs generated by AI-powered features. We do not guarantee the accuracy, completeness, or reliability of any data, results, or AI-generated content.

AI-generated outputs are produced by third-party models and may contain errors, inaccuracies, or hallucinated information. Such outputs should not be treated as authoritative or relied upon without independent verification.

10.3. False Positives and False Negatives

Fraud detection systems inevitably produce both false positives (flagging legitimate users as fraudulent) and false negatives (failing to detect actual fraudulent activity). We do not guarantee that the Service will prevent all fraud or accurately identify all fraudulent users. You acknowledge that:

• The Service may flag legitimate users as potentially fraudulent
• The Service may fail to detect actual fraudulent activity
• Risk scores are probabilistic estimates, not certainties
• You must implement additional verification procedures before taking action against any user

10.4. No Liability for False Positives

We are not liable for any financial loss, reputational damage, legal claims, or other harm resulting from false positives, including but not limited to: blocking or suspending a legitimate user's account, declining a legitimate transaction, preventing a legitimate user from accessing your service, or any claims brought by end-users against you based on your use of the Service.

11. Limitation of Liability

11.1. Exclusion of Damages

To the maximum extent permitted by law, we shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenues, or data, including damages arising from reliance on AI-generated outputs.

11.2. Cap on Liability

Our total aggregate liability under these Terms shall not exceed the amount you paid for the Service in the twelve (12) months preceding the claim.

If Customer has not paid any fees, our total liability shall not exceed one thousand dollars (USD $1,000).

11.3. Essential Basis

The limitations in this section are fundamental elements of the basis of the bargain between us.

12. Fair Credit Reporting Act (FCRA) and Prohibited Uses

12.1. Not a Consumer Reporting Agency

Fraud Intercept is not a “Consumer Reporting Agency” as defined by the Fair Credit Reporting Act (15 U.S.C. § 1681 et seq.) or similar consumer protection laws in other jurisdictions. The Service is not intended to provide consumer reports or credit information.

12.2. Prohibited Uses

You shall NOT use the Service, including Risk Scores, Risk Watchlists, or any other Service data, for:

• Determining eligibility for credit, loans, or financing
• Making employment decisions or determining employment eligibility
• Determining eligibility for insurance or insurance rates
• Determining eligibility for housing or rental applications
• Any other purpose covered by the FCRA, CCPA, GDPR, or similar consumer protection laws

Violation of this section may result in immediate termination of your account and potential legal liability.

12.3. Permitted Uses

The Service is intended solely for:

• Fraud prevention and detection within your own platform or service
• Account security and abuse prevention
• Risk assessment for your own business purposes
• Compliance with your own internal policies

13. Indemnification

You agree to indemnify, defend, and hold us harmless from any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from:

• Your use of the Service
• Your violation of these Terms
• Your infringement of any third-party rights
• Your violation of any applicable laws or regulations
• Decisions or actions taken based on AI-generated outputs
• Your failure to obtain proper consent or legal basis to share end-user data with us
• Any claims brought by your end-users or third parties resulting from your use of the Service, including claims arising from false positives or your decisions based on Service data
• Your submission of inaccurate, malicious, or misleading fraud data to the Service

14. Termination

14.1. Termination Rights

We may suspend or terminate your access immediately if:

• You fail to pay fees when due
• You materially breach these Terms
• You engage in illegal or fraudulent activity
• You become insolvent or file for bankruptcy
• You submit inaccurate or malicious fraud data to the Service
• You attempt to poison or corrupt the shared fraud database
• You violate the FCRA or use the Service for prohibited purposes
• You exceed rate limits or cause network instability

14.2. Effects of Termination

Upon termination:

• All license rights immediately cease
• You must cease all use of the Service
• You must delete all copies of our software and documentation
• You may request export of your data within 30 days

14.3. Survival

Sections on AI-Powered Features, Intellectual Property, Disclaimer, Limitation of Liability, Indemnification, FCRA and Prohibited Uses, and Governing Law shall survive termination.

15. General Provisions

15.1. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the Republic of Bulgaria, without regard to conflict of law principles.

15.2. Dispute Resolution

Any dispute arising from these Terms shall be subject to the exclusive jurisdiction of the competent courts of Sofia, Bulgaria. The parties shall first attempt to resolve disputes through good-faith negotiations for at least 30 days before initiating legal proceedings.

15.3. Modifications

We may modify these Terms at any time. We will provide notice of material changes via email or through the Service. Continued use after changes constitutes acceptance.

15.4. Assignment

You may not assign these Terms without our prior written consent. We may assign these Terms in connection with a merger, acquisition, or sale of assets.

15.5. Force Majeure

We are not liable for failures due to circumstances beyond our reasonable control including natural disasters, war, terrorism, or internet service disruptions.

15.6. Severability

If any provision is found unenforceable, the remaining provisions remain in full effect.

15.7. Entire Agreement

These Terms constitute the entire agreement between us regarding the Service, superseding any prior agreements.

15.8. Waiver

Our failure to enforce any right or provision shall not constitute a waiver of such right.

15.9. Notices

Notices shall be sent to the email address associated with your account. Legal notices to us should be sent to legal@fraud-intercept.com, with postal copy to Syncra Tech EOOD, 34, 184-ta Str., Malinova Dolina, Studentski District, Sofia 1756, Bulgaria.

15.10. Relationship

These Terms do not create a partnership, joint venture, employment, or agency relationship between us.

16. Contact Information

For questions about these Terms, please contact us at: legal@fraud-intercept.com

Appendix A: Key Definitions

• “Customer Data” means any fraud-related data you submit to the Service, including user identifiers, device information, transaction data, and risk indicators.
• “Data Processing Agreement (DPA)” means the separate agreement governing the processing of personal data, which incorporates GDPR and CCPA requirements.
• “Fingerprinting” means the process of collecting publicly available browser and device information to generate a unique device identifier.
• “Network Sharing” means the optional sharing of your fraud data with other Fraud Intercept customers to improve cross-platform fraud detection.
• “Risk Score” means a probabilistic assessment of the likelihood that a user or transaction is fraudulent, expressed as a numerical value.
• “Subprocessor” means a third-party service provider that processes data on behalf of Fraud Intercept.