Terms and Conditions

1. The service

MyDefense ("we") provides a toolbox of digital security and privacy services at mydefense.io. It includes checks for suspicious links, messages, websites and trackers, a password and breach check, lookalike-domain search, a photo metadata cleaner, Paste Guard, a security assessment with certificates, canary tokens, breach alerts, a Telegram bot, email and document analysis, security scans of domains you have verified, and erasure requests sent to companies that hold data about you. Some services work without an account. Connecting your accounts on social platforms to scan and delete content is paused at the moment. Our services are free to use; see section 4.

By creating an account you agree to these terms and to our Privacy Policy.

2. Eligibility

You must be at least 18 years old, or the age of majority where you live, and able to enter into a binding contract. You must give accurate registration details, including the country or region you live in — that answer decides which law we cite when we act on your behalf, so an inaccurate one weakens your own request.

3. Acceptable use

This is the part that matters most, and it is short: you may only use MyDefense on accounts you own and on data about you.

• Do not connect an account that is not yours, or use credentials you were not given for your own use.
• Do not send erasure requests about another person. An erasure request is a legal assertion that the data is yours; sending one about someone else is a misrepresentation, and we will suspend the account.
• Do not use the service to investigate, profile or harass anyone, or to gather information about a third party.
• Do not attempt to break, overload, reverse-engineer or circumvent the service or its rate limits, and do not resell access to it.
• Do not use the security scanning features against a domain you do not control. Domain ownership must be verified before those features act on it.
• Do not use the link, website, tracker, lookalike-domain, message or email checks to probe, scan or collect information about people or systems you have no right to examine, and do not submit content you have no right to submit.
• Use canary tokens only to detect misuse of your own documents, accounts and systems, never to track or monitor people without their knowledge or where the law forbids it.
• Do not present a certificate as issued by a public authority or as something other than what it is, and do not use or display a certificate that is not yours.

We may suspend or terminate an account that breaches this section, without notice where the breach is serious.

4. Your wallet, plans and payment

Our services are free to use. A free service can later be offered through a plan or a wallet; if that happens, we will tell you in the app and by email before the change takes effect for you. For any service that is paid, the following applies. The service is pay-as-you-go and runs on a wallet balance held in US dollars. You top the wallet up in advance, and each one-off action — a scan, a deletion, an erasure request, a risk analysis, a configuration audit, an email analysis — costs the amount shown for that action and is taken from your balance when you run it. Nothing is charged to a card at the moment you run an action. Current prices and per-action costs are shown on the pricing page and in your account, and are the ones that apply.

Premium and Premium+ raise the usage limits and add an amount to your wallet each month. Activating a plan is itself paid from your wallet balance, not from a card. A plan runs for the period you activated. If auto-renew is on, we take the next period's price from your wallet balance when the current period ends; you can turn auto-renew off at any time in your account settings, and if your balance is short the plan simply lapses instead. Your wallet balance does not expire while your account is open, and an amount added by a plan stays in your balance if you do not spend it that month.

You may also choose to save a card so that your wallet tops itself up automatically when the balance falls below a level you set. If you turn that on, you authorise us to charge that card for the top-up amount you chose, without you being present, until you turn it off in your account settings. We may change prices, and will tell you before a change takes effect for you; the price you are charged is always the one shown at the time.

5. Refunds

If you are in a jurisdiction that gives you a statutory right to withdraw from a distance contract — for example the 14-day right under EU consumer law — that right applies and nothing here limits it. Outside that, an amount already spent is not refundable, because the action it paid for was performed. If something went wrong on our side, write to support@mydefense.io and we will return the amount for the failed action to your wallet balance. Except where the law requires otherwise, refunds are made to your wallet balance rather than back to a card.

6. What deletion and our checks can and cannot do

Please read this before you rely on the service. We act through the platforms' own APIs and through legal requests. That means:

• We can delete content your account controls on a platform we support. We cannot delete someone else's repost, a screenshot, a cached copy, or an archive held by a third party.
• An erasure request is a request. The recipient decides how to answer it. We prepare it, send it from your account, track the statutory deadline and remind them, but we cannot compel compliance, and we do not represent you as your lawyer.
• A scan finds what the platform's API exposes to us. It is not a guarantee that nothing else about you exists on that platform or anywhere else.
• A platform may change or withdraw its API, or suspend our access, and a feature that worked last month may stop working. We will say so in the product rather than pretend otherwise.
• Connecting accounts on social platforms is paused for now. The other services do not depend on it.
• The results of our checks (links, messages, websites, trackers, lookalike domains, emails, documents and risk scores) are indicative. A clean result means that no red flags were found, never that something is safe, and an explanation produced by an AI model can be wrong. They are not a guarantee, and not professional security, legal or financial advice.
• A certificate is issued by MyDefense on the basis of your exam result and is valid for 12 months. MyDefense may revoke it if it is misused, and you can revoke your own certificate at any time. Issued by MyDefense; not issued by a public authority.

7. Your content and your accounts

You keep all rights in your data. You grant us permission to access and act on it only to the extent needed to provide the features you ask for, and only for as long as you keep the relevant platform connected. Disconnecting a platform deletes the tokens we hold for it. Deleting your account removes your tokens and findings as described in the Privacy Policy. An account that has been inactive for 24 months is deleted after we warn you by email 30 days earlier, unless it has an active paid plan or a wallet balance; signing in cancels the deletion.

8. Availability and changes

We do not promise uninterrupted availability. We may change, suspend or discontinue parts of the service, and we will give reasonable notice where a change materially reduces what you paid for.

9. Disclaimers and liability

The service is provided as-is. Nothing in it is legal advice, and we are not your lawyers. To the extent the law allows, our total liability to you for any claim arising out of the service is limited to the amount you paid us in the twelve months before the claim. Nothing here excludes liability that cannot lawfully be excluded — including for death or personal injury caused by negligence, for fraud, or under mandatory consumer protection law where you live.

10. Termination

You may stop using the service at any time, and you may ask us to delete your account by writing to the address in section 12 (deleting it yourself from Settings is not available yet). We may suspend or terminate an account for a breach of section 3, for non-payment, or where the law requires it. On termination your right to use the service ends; the Privacy Policy governs what happens to your data.

11. Governing law

These terms are governed by the laws of the Republic of Türkiye, and the courts of Istanbul have jurisdiction. If you are a consumer, this does not deprive you of the protection of the mandatory consumer law of the country you live in, or of your right to bring proceedings there.

12. Contact

Questions about these terms: hello@mydefense.io. Problems with the service: support@mydefense.io.