Terms of Use

1. Who provides the service

NO-DO.DEV Technologies ("NO-DO.DEV", "we"), based in Spain, owns no-do.dev and the TRACEZ, GRIMZ and DEEPWIRE platforms. The address for legal notices and questions about these terms is contacto@no-do.dev; GRIMZ licenses are handled at licencias@no-do.dev. We provide full company registration and billing details to any user or customer who requests them at those addresses. The provider's identification details are set out in the legal notice.

2. Scope and order of precedence

These terms govern the use of the no-do.dev site and set the common framework for all our platforms. Each platform also publishes its own product-specific terms inside the product: TRACEZ's and GRIMZ's. DEEPWIRE is delivered as a security-engagement service under a written agreement with each customer. In case of conflict, a product's specific terms prevail over these terms in whatever they expressly regulate, and a signed agreement with NO-DO.DEV prevails over both. The privacy policy and the ethics and responsible use page complete this framework.

3. Acceptance and requirements

By browsing no-do.dev you accept these terms. The platforms will ask you to accept them again when you create an account or subscribe to a plan. To use TRACEZ, GRIMZ or DEEPWIRE you must be at least 18 years old and, if you act on behalf of an organization, have the authority to bind it. If you disagree with any of these conditions, do not use the platforms.

4. Accounts and licenses

You are responsible for safeguarding your credentials and for all activity carried out from your account. Accounts and licenses are personal: they may not be shared, transferred or resold, unless the plan you subscribed to expressly provides for several seats. Enable two-factor authentication whenever the platform offers it, and let us know without delay if you suspect unauthorized access.

5. Authorized use — GRIMZ

GRIMZ is an offensive operations console. It may only be used against assets you own or for which you hold explicit, written and current authorization from their owner, within the agreed scope, dates and rules of engagement. Before any active action you must define that scope in the tool itself and confirm each action; those controls help you, but they do not replace authorization. Using GRIMZ outside an authorized scope is prohibited and may constitute a criminal offence (in Spain, articles 197 bis et seq. and 264 of the Criminal Code). NO-DO.DEV is not responsible for any use of the platform outside these conditions.

6. Authorized use — TRACEZ

TRACEZ is intended for open-source investigation with a legitimate basis: journalism, risk analysis, due diligence, regulatory compliance and support for legal proceedings. You are the data controller for the personal data you collect with the platform and are responsible for complying with the GDPR and any regulation that applies to you, including with respect to the people you investigate. Using TRACEZ to harass, intimidate, dox, unlawfully surveil or discriminate against people is prohibited.

7. Acceptable use policy

On any of the platforms it is prohibited to:

• Attack, scan or access systems without authorization, or exceed the authorization received.
• Carry out denial-of-service attacks, distribute malware or run any action designed to damage third-party systems or data.
• Circumvent usage limits, quotas, authorization controls or licensing mechanisms, or interfere with the security or availability of the platforms.
• Resell, sublicense or give third parties access without our written agreement.
• Decompile, reverse engineer or extract the source code, except to the extent permitted by law.
• Extract data from the platforms by automated means or use them to build a competing product.
• Upload unlawful content or data you have no right to process.
• Use the platforms in a way that breaches applicable sanctions or export controls.

8. Suspension and termination

We may suspend or close an account if we detect, or credibly receive a report of, use contrary to these terms, a risk to third parties or to the platforms, or if a legal requirement demands it. Where urgency allows we will notify you first and give you the chance to fix the problem; in any case we will tell you the reason unless the law prevents it. You can close your account at any time from the platform itself; your data is deleted as described in each product's specific terms. Closing an account for breach does not entitle you to a refund of periods already paid.

9. Plans, payments and cancellation

Some features are offered under a paid subscription processed by Stripe; NO-DO.DEV does not store your card details. Prices are shown in euros and each platform states whether they include VAT. Subscriptions renew automatically for equal periods until you cancel. You can cancel at any time from the platform and keep access to the plan until the end of the period already paid. We may change prices with at least 30 days' notice; the new price applies at the next renewal.

If you subscribe as a consumer, you have the right to withdraw from the contract within 14 calendar days of subscribing. By activating a subscription you expressly request that the service start immediately; if you withdraw within that period, you will pay the proportional part of the service already provided. Beyond that case we do not issue refunds, except for billing errors or where the law provides otherwise. Usage credits included in a plan do not roll over between periods and are not refunded; if an operation fails for a cause attributable to the platform, the credit consumed is returned.

10. Your data and your content

The cases, findings, scopes, reports and other content you enter or generate on the platforms are yours. You grant us only the license needed to host, process and display it to you while we provide the service. We do not sell your data or use it for advertising. The processing of personal data is described in the privacy policy and in each product's own policy. When we process third-party personal data on your behalf, we act as a data processor under article 28 of the GDPR; customers who need it can request the corresponding data processing agreement from us.

11. Results, artificial intelligence and evidence

The platforms' results are an aid to your professional judgement, not verified conclusions: exploit rankings, risk scores and AI-generated expansions may be incomplete or wrong. You must verify them before acting, publishing or making decisions based on them. The signed evidence and timestamps the platforms produce attest to the technical integrity of a capture, not to the truth of its content or its admissibility before a court or authority, which depends on each jurisdiction and on how you submit it. Nothing the platforms offer constitutes legal advice.

12. Platform status and availability

TRACEZ is in public beta; DEEPWIRE is delivered as a service under a written agreement. TRACEZ's features, limits and prices may change, and those marked as beta may be withdrawn or reset with reasonable notice. We do not offer a service level agreement unless agreed in writing. We publish the platforms' status on the status page and try to give notice of scheduled maintenance.

13. Third-party services

The platforms depend on third-party services: Cloudflare for infrastructure, Stripe for payments, data and language-model providers in TRACEZ and, in the case of GRIMZ, the user's own Metasploit Framework installation. We are not responsible for their outages or for changes in their terms, and by using the features that rely on them you agree to comply with those third parties' terms.

14. Intellectual property

The software, brand, design and content of no-do.dev, TRACEZ, GRIMZ and DEEPWIRE belong to NO-DO.DEV or its licensors and are protected by intellectual and industrial property law. We grant you a limited, non-exclusive, non-transferable and revocable license to use the platforms in accordance with these terms. These terms do not transfer any ownership. If you send us suggestions about the platforms, we may use them without any obligation to you.

15. Warranties, liability and indemnity

The platforms are provided "as is" and "as available". To the extent permitted by law, we do not warrant that they are error-free or fit for a particular purpose, and we are not liable for indirect damages, loss of profit, loss of data or loss of business. Our total liability to you for any claim related to the platforms is limited to the amount you paid us in the twelve months before the event giving rise to it, or to 100 euros if you have paid nothing. These limitations do not apply to damage caused by wilful misconduct or gross negligence, to personal injury, or to any liability the law does not allow to be limited. If you contract as a consumer you keep all the rights the law grants you.

You agree to hold NO-DO.DEV harmless from third-party claims, penalties and reasonable defence costs arising from a use of the platforms contrary to these terms or to the law, in particular from actions run with GRIMZ outside an authorized scope.

16. Changes to these terms

We may amend these terms when the platforms, the business or the law change. We will publish the new version on this page with its date. If the change is material and you have an account, we will notify you by email or inside the platform at least 15 days in advance; if you disagree, you can cancel before it takes effect. Continuing to use the platforms after that date means you accept the new version.

17. Governing law and jurisdiction

These terms are governed by Spanish law. For any dispute, the parties submit to the courts of NO-DO.DEV's domicile. If you contract as a consumer, the courts of your own domicile have jurisdiction and you may also use the alternative consumer dispute resolution mechanisms available to you. The European Commission provides an online dispute resolution platform available at ec.europa.eu/consumers/odr.

18. General provisions

If any clause is held invalid, the rest remains in force. Our not exercising a right does not mean we waive it. You may not assign these terms without our consent; we may assign them to an entity that succeeds NO-DO.DEV in the business, with notice to you. These terms are published in Spanish and English; if the two versions differ, the Spanish version prevails.

19. Contact

Legal notices and questions about these terms: contacto@no-do.dev. GRIMZ licenses: licencias@no-do.dev. To report misuse or a vulnerability, see the ethics and responsible use page.