Terms of Service

These Terms of Service ("Terms") govern your use of alesiansecurity.com and the Alesian Security service (the "Service"). The Service is provided by Alesian Security LLC, a Colorado limited liability company("Alesian", "we", "us"). By creating an account, starting a trial, or using the Service, you agree to these Terms. If you use the Service for an organization, you agree on its behalf and confirm you have authority to do so. "You" then means that organization.

The Service is for business use. It is not offered to consumers or to anyone under 18.

1. The Service

Alesian helps organizations find and respond to lookalike domain names. The Service:

• generates lookalike variations of the names you watch;
• checks whether those names are registered and live, and reads their public DNS, WHOIS and mail settings;
• scores the risk each name presents;
• lets you request that a name be submitted to third-party blocklists (section 6).

Some pages of the Service, including /explore, show public data about third-party domains to anyone.

Mail-defense (DMARC) services, and invoiced plans, are sold under a signed Order Form and our Subscription Services Agreement. Where an Order Form applies, it and that agreement take precedence over these Terms.

2. Accounts

2.1 You must give accurate information and keep it current.

2.2 An account can have administrators, members, viewers and billing users. Administrators control who is invited and what they can do. You are responsible for the people you invite, for what they do in the Service, and for keeping credentials secure.

2.3 A second sign-in factor is available, and administrators can require it. Tell us promptly at admin@alesiansecurity.com if you believe your account has been accessed without authority.

3. Free level

We may offer a free level that watches one name. We offer it without any commitment to continue it, and we may limit, change or withdraw it at any time. We may also limit the number of new free accounts.

4. Watching names and verified properties

4.1 Watching. You may watch any domain name for lookalikes, including names you do not own. Watching a name gives you no rights in it, and does not make information about that name or its lookalikes your data.

4.2 Verified properties. Block requests and mail-defense (DMARC) features are available only for domains you own, or that you are authorized in writing to act for (for example, as an agency or managed service provider for a client). Before you can request a block for names that imitate a domain, you must verify control of that domain by sending an email from an administrative address at it (such as admin@ or postmaster@), as the Service describes. We may require verification before mail-defense features are enabled, and ask for evidence of authority where you act for someone else. A block request relates to the verified property it protects.

4.3 We may decline or remove any name, and our Acceptable Use Policy, which forms part of these Terms, sets out further rules.

5. Detections and accuracy

Detection is probabilistic. We do not promise to find every lookalike name, or that every name we flag is malicious or registered in bad faith. A risk score is guidance to help you decide what to do. It is not a statement of fact about any registrant, and you remain responsible for the decisions you make using it.

6. Block requests

6.1 What a request does. When you request a block, you authorize us to submit the name to one or more third-party blocklist operators in your name, identifying your organization as the party affected, together with the evidence we hold about the name.

6.2 Human review. A person at Alesian reviews every request before anything is submitted. We aim to review requests within one business day. This is a target, not a service level. We may decline any request.

6.3 Operators decide. Blocklist operators are independent. Each decides for itself whether to list a name, how widely the listing applies and for how long. We do not guarantee that a name will be listed, or that a listing will last.

6.4 What a credit pays for. A block credit pays for our evaluation of the domain and, if we approve the request, its submission. It does not pay for a listing. Each request uses one credit when you make it. The credit is not returned if our evaluation stops the request (for example, because we do not find a real threat, or because the domain belongs to you or your affiliates), if we later withdraw a submission, or if an operator declines, delays or removes a listing. Please request blocks only for domains you have reason to believe are harmful.

6.4A Requests are final. You can request a block for each detected name once. A request cannot be withdrawn by you, repeated or appealed for the same name, whatever the outcome.

6.5 Your promises. When you request a block you confirm that (a) the request protects a property you own or are authorized to act for under section 4.2, and the name being blocked is not yours or your affiliates'; (b) you have a genuine basis to believe it imitates you or is being used to harm you or people who deal with you; and (c) the information you give us is accurate. Our own checks are a safeguard. They do not replace these promises.

6.6 Monitoring. While your subscription is active, we watch names that have been listed at your request and tell you if a listing lapses.

6.7 Takedowns. A takedown asks a registrar or hosting provider to suspend or remove a domain. It is an escalation, not a standard feature:

• We consider a takedown only for a domain for which a block was already requested, and only where abuse continued afterward.
• You must give us direct evidence of the abuse, such as a phishing message sent from, or linking to, the domain.
• We decide each case individually and may decline to pursue a takedown without giving a reason.
• Registrars and hosts decide independently. We do not guarantee that any domain will be suspended or removed.

6.8 Withdrawal. We may withdraw a submission, and ask an operator to remove a listing, if we come to believe the request was mistaken or breached these Terms. Withdrawal does not return the block credit.

7. Fees and payment

7.1 Paid plans are charged per watched name, per month, at the level you choose. Changes during a month are prorated. Prices are shown at purchase and exclude taxes, which you pay.

7.2 Block credits you buy are valid for 12 months from the date of purchase. Block credits included with a plan are valid only for the month in which they are granted and expire at the end of that month. Credits not used within their validity period expire. Unused or expired credits have no cash value and are not refunded, carried over or returned as credit.

7.3 Payments are processed by Stripe. We do not receive or store full card numbers.

7.4 If a payment fails and is not resolved, we may suspend paid features after notice. Except where these Terms or the law say otherwise, fees are non-refundable.

8. Your data

8.1 You own the information you give us ("Customer Data"), such as the names you watch, notes, tags and your decisions on detections.

8.2 You grant us a license to host, copy and process Customer Data to provide, secure and support the Service.

8.3 We may create de-identified, aggregated information from use of the Service (for example, counts of lookalike registrations across all customers, or the accuracy of our checks) and use it to operate, improve and describe the Service. Such information does not identify you or any person.

8.4 We do not sell Customer Data. Our Privacy Policy explains how we handle personal information.

9. Our property

The Service, its software, and the detections, scores and evidence it produces are owned by Alesian or its licensors. During your subscription we grant you a non-exclusive, non-transferable license to use detections, scores and evidence for your internal security purposes, and to share them with your advisers, registrars, hosts and law enforcement in connection with protecting your names. You may not resell or republish them. If you send us feedback, we may use it without obligation to you.

10. Third-party services

The Service relies on third parties, including blocklist operators, WHOIS and DNS services, and payment processors. We are not responsible for their acts, availability or decisions.

11. Disclaimers

Except as expressly stated in these Terms, the Service is provided "as is" and "as available". To the fullest extent permitted by law, we disclaim all implied warranties, including merchantability, fitness for a particular purpose, non-infringement, and that the Service will be uninterrupted or error-free.

12. Limitation of liability

12.1 To the fullest extent permitted by law, neither party is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, goodwill or data, even if told they were possible.

12.2 Our total liability arising out of or relating to these Terms or the Service is limited to the amounts you actually paid us for the Service in the 12 months before the event giving rise to the claim. Amounts not yet paid, or payable for future periods, do not count toward this limit.

12.3 These limits do not apply to your payment obligations, your indemnity under section 13, or liability that cannot be limited by law.

13. Indemnity

You will defend and indemnify Alesian against third-party claims, and related losses and reasonable legal costs, arising from (a) domains you verified, or used block, takedown or mail-defense features for, without the right to do so; (b) block or takedown requests you made in breach of section 6.5 or the Acceptable Use Policy; (c) false or misleading information you gave us; or (d) your breach of law. We will tell you promptly about any such claim and let you control its defense, but you may not settle it in a way that admits fault on our behalf without our consent.

14. Suspension and termination

14.1 You may close your account at any time. Paid plans end at the close of the current billing period.

14.2 We may suspend or terminate your access (a) if you breach these Terms or the Acceptable Use Policy; (b) for non-payment; (c) if needed to protect the Service, other customers or third parties; or (d) if required by law. Where reasonable, we will give notice first.

14.3 If your subscription lapses without renewal, we keep your account and Customer Data for 90 days so that you can renew without losing anything. After that, or within 30 days of your request to close the account and delete your data, we delete Customer Data, except where the law requires us to keep it, or where it is needed to establish or defend a legal claim (including records of block requests). Backup copies expire on their normal cycle, as described in the Privacy Policy.

14.4 Public information about domain names (such as DNS and WHOIS history) is not Customer Data. We keep it after your account closes as part of the Service's historical record. We delete your association with those names: your watch list, tags, notes and decisions.

14.5 Sections 5, 6.5, 8.3, 9, and 11 to 17 survive termination.

15. Changes

We may change the Service. We will give at least 30 days' notice by email of material changes to these Terms. Continuing to use the Service after a change takes effect means you accept it. If you do not accept it, you may close your account before it takes effect.

16. Governing law and disputes

These Terms are governed by the laws of the State of Colorado, without regard to its conflict-of-laws rules. The state courts located in Jefferson County, Colorado, and the United States District Court for the District of Colorado, have exclusive jurisdiction, and each party consents to them.

17. General

These Terms, the Acceptable Use Policy, the Privacy Policy and any Order Form are the entire agreement about the Service. If a provision is unenforceable, the rest remains in effect. Failing to enforce a right is not a waiver. You may not assign these Terms without our consent. We may assign them to a successor to our business. Neither party is liable for delays caused by events beyond its reasonable control. We send notices to your account email. You send notices to admin@alesiansecurity.com.

Contact

Alesian Security LLC, Arvada, Colorado, admin@alesiansecurity.com.