Terms of Service

Last updated: April 2, 2026

1. Agreement to Terms

These Terms of Service ("Terms") are a legally binding agreement between you ("Customer," "you") and El Orangutan LLC, doing business as Yod Security ("Yod," "we," "us"), governing your use of the Yod service available at app.yodsec.com and all related infrastructure, APIs, and documentation (collectively, the "Service").

By creating an account, completing payment, or using the Service, you agree to be bound by these Terms. If you are entering into these Terms on behalf of a company or other legal entity, you represent that you have the authority to bind that entity. If you do not agree, do not use the Service.

2. Description of Service

Yod provides attack-triggered deception for web applications. The Service operates as a reverse proxy that sits in front of your web application, detects malicious sessions in real time, and redirects attackers to AI-generated decoy replicas of your site. Specifically, the Service includes:

  • A dedicated virtual machine instance provisioned and managed by Yod on your behalf
  • Automatic TLS certificate provisioning via Let's Encrypt
  • Real-time attack detection and session monitoring via a web-based console
  • Automatic software updates with staged rollouts and rollback
  • Automatic DNS failover to your origin server if your Yod instance becomes unreachable
  • A customer dashboard for managing your instance, viewing status, and accessing billing

3. Account Registration

To use the Service, you must provide a valid email address and the fully qualified domain name (FQDN) of the web application you wish to protect. Access may require an invitation code during early access periods.

You are responsible for maintaining the security of your account credentials, including your session tokens and instance admin password. You must notify us immediately at admin@yodsec.com if you believe your account has been compromised.

You may not create multiple accounts for the same domain, share account credentials with unauthorized parties, or use the Service to protect domains you do not own or have authorization to manage.

4. Fees and Payment

The Service is billed monthly at the rate displayed at the time of signup. Payment is processed through Stripe. By subscribing, you authorize Stripe to charge your payment method on a recurring monthly basis.

All fees are exclusive of applicable taxes. You are responsible for any taxes, duties, or levies imposed by your jurisdiction.

Failed payments. If a payment fails, your instance enters a grace period during which the Service continues to operate. If payment is not resolved, your instance will be scheduled for teardown and your subscription cancelled.

No refunds. Fees are non-refundable. If you cancel mid-cycle, the Service remains active until the end of the current billing period.

Promotional pricing. Promotional pricing, including discounts applied via invitation codes, may be modified or revoked at our discretion. Changes to promotional pricing will take effect at the next billing cycle.

5. Cancellation and Termination

You may cancel your subscription at any time through Dashboard > Billing > Manage Subscription, or via Stripe's customer portal. Upon cancellation:

  • Your subscription ends and your dedicated instance is scheduled for teardown
  • Instance teardown may occur immediately upon cancellation or at the end of the billing period, depending on the cancellation method and billing provider behavior
  • Any data stored on your instance (detection logs, session data, configuration) is permanently deleted upon teardown

We may suspend or terminate your account immediately if you violate these Terms, use the Service for prohibited purposes (Section 6), or if required by law.

6. Acceptable Use

You agree not to use the Service to:

  • Protect domains hosting illegal content, phishing pages, malware distribution, or fraud
  • Interfere with, disrupt, or attempt to gain unauthorized access to Yod's infrastructure or other customers' instances
  • Reverse-engineer, decompile, or attempt to extract the source code of the Yod software running on your instance
  • Resell, sublicense, or redistribute the Service to third parties
  • Generate traffic to your instance that exceeds your plan's stated limits without prior arrangement
  • Use the Service in any manner that violates applicable law or regulation

Violation of this section may result in immediate suspension or termination of your account without refund.

7. Customer Responsibilities

You are responsible for:

  • DNS configuration. Pointing your domain's DNS A record to your Yod instance IP address and maintaining that configuration
  • Origin server. Maintaining your origin web application and ensuring it is reachable from your Yod instance
  • AI provider (optional). If you configure an AI provider (Anthropic API or Ollama) for attack analysis, you are responsible for any costs, compliance, and terms of service associated with that provider. Yod does not control, store, or have access to your AI provider API keys beyond the configuration stored on your dedicated instance
  • Compliance. Ensuring that your use of the Service complies with all laws applicable to your business and jurisdiction, including data protection regulations

8. Service Availability and Disclaimers

The Service is provided on an "as is" and "as available" basis. We do not guarantee uninterrupted or error-free operation. The Service includes automatic failover to your origin server in the event of instance unavailability, but we do not guarantee the timing or reliability of failover.

To the maximum extent permitted by law, Yod disclaims all warranties, express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, and non-infringement.

Specifically, we do not warrant that:

  • The Service will detect all attacks or malicious activity targeting your application
  • AI-generated decoys will be indistinguishable from your actual application in all cases
  • The Service will be compatible with all web applications or configurations
  • TLS certificate provisioning will succeed in all cases (subject to Let's Encrypt rate limits and domain validation requirements)

9. Limitation of Liability

To the maximum extent permitted by applicable law, Yod's total aggregate liability arising out of or relating to these Terms or the Service shall not exceed the total fees paid by you in the twelve (12) months preceding the event giving rise to the claim.

In no event shall Yod be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to: loss of revenue, loss of data, loss of business, security breaches of your origin application, damage resulting from attacks that the Service failed to detect, or costs of procuring substitute services — regardless of whether Yod was advised of the possibility of such damages.

10. Indemnification

You agree to indemnify and hold harmless Yod, its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable attorney's fees) arising out of or relating to: (a) your use of the Service; (b) your violation of these Terms; (c) your violation of any applicable law or third-party rights; or (d) the content or operation of the web application you protect using the Service.

11. Intellectual Property

The Service, including all software, documentation, and infrastructure, is the exclusive property of Yod Security and is protected by applicable intellectual property laws. These Terms grant you a limited, non-exclusive, non-transferable, revocable license to use the Service for its intended purpose during your active subscription.

You retain all rights to your web application, content, and data. Yod claims no ownership of traffic that passes through your instance or detection data generated by the Service.

12. Data and Security

Each customer receives a dedicated, isolated virtual machine. Your traffic and detection data are not shared with other customers. For full details on how we collect, use, and protect your data, see our Privacy Policy.

Upon termination of your subscription, all data on your dedicated instance is permanently deleted when the instance is torn down. We do not retain backups of customer instance data after teardown.

13. Modifications to Terms

We may update these Terms from time to time. If we make material changes, we will notify you by email at the address associated with your account at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the revised Terms. If you do not agree to the revised Terms, you may cancel your subscription before the changes take effect.

14. Governing Law and Disputes

These Terms are governed by and construed in accordance with the laws of the State of Maryland, without regard to its conflict of law provisions.

Any dispute arising out of or relating to these Terms shall first be attempted to be resolved through good-faith negotiation. If negotiation fails, disputes shall be resolved through binding arbitration administered by the American Arbitration Association under its Commercial Arbitration Rules. The arbitration shall take place in Maryland, and the arbitrator's decision shall be final and binding.

15. General Provisions

  • Entire agreement. These Terms, together with the Privacy Policy, constitute the entire agreement between you and Yod regarding the Service.
  • Severability. If any provision of these Terms is found to be unenforceable, the remaining provisions shall continue in full force and effect.
  • Waiver. Failure to enforce any provision of these Terms shall not constitute a waiver of that provision.
  • Assignment. You may not assign your rights under these Terms without our prior written consent. We may assign our rights and obligations without restriction.
  • Force majeure. Yod shall not be liable for any failure or delay in performance resulting from circumstances beyond our reasonable control, including but not limited to natural disasters, war, terrorism, infrastructure failures, or actions of third-party service providers.

16. Contact

For questions about these Terms, contact us at admin@yodsec.com.