Legal

Terms of service.

Effective 2026-05-08 · Last updated 2026-05-08

These terms govern your use of IlluminateRisk (illuminaterisk.ai, platform.illuminaterisk.ai, and every tenant subdomain of the form {your-org}.illuminaterisk.ai, collectively the "Service"). By creating an account, you accept them on behalf of yourself and, if you're signing up on behalf of an organization, on behalf of that organization.

Companion documents: the privacy policy explains what data we hold and how we use it; the GDPR statement describes data subject rights and sub-processors for EU/UK customers.

1. Account

You're responsible for the accuracy of your account information, keeping your password secure, and the actions taken under your account. We strongly recommend enabling 2FA — your Admin can require it for the whole organization.

You must be 18+ and authorized to enter into agreements on behalf of your organization (if you're signing up on its behalf).

2. Acceptable use

You agree not to:

• Upload content you don't have the right to use, including PII you haven't been authorized to process.
• Use the Service to investigate individuals in violation of applicable law (illegal background checks, stalking, doxxing, etc.).
• Attempt to break tenant isolation, access another customer's data, or probe security boundaries beyond a coordinated-disclosure context.
• Reverse-engineer or scrape the Service for the purpose of building a competing product.
• Use the Service to send spam or unauthorized commercial communications.

We may suspend accounts that violate these terms.

3. Subscription & billing

The Service is sold on a flat per-organization monthly subscription. New workspaces include a 7-day free trial. You may cancel at any time during the trial without charge. Cancellations after the trial take effect at the end of the current billing period; we don't pro-rate refunds.

Payment is processed by Stripe, Inc. (United States). Failed payments trigger Stripe's standard dunning retries; if all retries fail, write access is suspended until the card is updated. Read access remains available for 30 days following suspension to give you time to export your data; after 30 days, workspace data is deleted.

Promo codes issued by IlluminateRisk grant additional free days. Redemption stacks on top of any existing trial or paid period. Promo windows do not waive the underlying subscription terms; when a promo expires, normal billing resumes.

Prices are subject to change with 30 days' email notice. Your current billing period continues at the price you signed up at.

4. Your data

You retain all rights to the data you upload. We process it solely to provide the Service. We don't train ML models on your data outside of the per-tenant rule library, classifier, or templates that you explicitly create within your own workspace.

Export and erasure rights are described in the privacy policy. Customer-facing GDPR Art. 15 / 17 / 20 controls live at /portal/orgs/{slug}/export and /portal/orgs/{slug}/delete.

5. Service availability

We aim for high availability but don't promise 100% uptime in this starter contract. Status is at illuminaterisk.ai/status. SLA terms for enterprise contracts are negotiated separately — email support@illuminaterisk.ai.

6. Warranty disclaimer

The Service is provided "as is." Findings emitted by the structured-data rule library are advisory — they're meant to focus a human investigator's attention, not to substitute for one. We don't warrant that the Service will be error-free or that findings will be exhaustive.

7. Limitation of liability

To the maximum extent permitted by law, IlluminateRisk's aggregate liability under these terms is capped at the fees you've paid us in the 12 months preceding the claim. We're not liable for indirect or consequential damages.

8. Termination

Either party may terminate at any time. We'll keep your workspace data read-only for 30 days after termination so you can export, then delete. You can accelerate the deletion via the org-delete page.

9. Changes

We'll notify customers by email of any material change at least 30 days before it takes effect. Continued use after the effective date constitutes acceptance.

10. Governing law

These terms are governed by the laws of the State of Delaware, without regard to its conflict-of-laws principles. Disputes are resolved in the state and federal courts of Delaware, except where applicable law requires another venue.

Questions: support@illuminaterisk.ai.