TERMS OF SERVICE

Welcome to CreepyCORE

These Terms of Service ("Terms") govern your access to and use of CreepyCORE, our web-based OSINT (Open Source Intelligence) platform, cybersecurity tools, and related services (collectively, the "Services").

By accessing or using our Services, you agree to be bound by these Terms. If you do not agree to these Terms, you may not access or use the Services.

1. Acceptance of Terms

By creating an account, accessing, or using any part of CreepyCORE Services, you acknowledge that you have read, understood, and agree to be bound by these Terms, as well as our Privacy Policy.

We reserve the right to modify these Terms at any time. Any changes will be effective immediately upon posting to our platform. Your continued use of the Services following the posting of revised Terms means that you accept and agree to the changes.

Note:

You must be at least 18 years old to create an account. By registering or signing in with OAuth, you confirm your age and agree to use CreepyCORE lawfully.

2. Service Provider (Trader Information)

Under the Electronic Commerce (EC Directive) Regulations 2002, we provide the following information about the operator of CreepyCORE:

Legal name

Stepan Parkulab

Trading as

CreepyCORE

Registered address

• Suite RA01, 195-197 Wood Street
• London, E17 3NU
• United Kingdom

Registration

Sole trader — not registered at Companies House

Contact

legal@creepycore.com

3. Service Description

CreepyCORE provides the following services:

• OSINT (Open Source Intelligence) data collection and analysis tools
• Network scanning and vulnerability assessment capabilities for authorized systems only
• Device management and monitoring systems
• OSINT-driven alerts and security notifications
• Comprehensive reporting and analytics dashboards
• API access for integration with external systems (available on select subscription plans)
• Online Mode collaborative workspaces (availability depends on your subscription plan)
• Subscription-based access to advanced features and modules

CreepyCORE is designed for legitimate security research, network administration, and educational purposes. The platform provides tools that must be used responsibly and in compliance with all applicable laws.

Important:

Network scanning and vulnerability assessment features are intended solely for systems owned by you or for which you have explicit written authorization. Unauthorized scanning is prohibited and may constitute a violation of computer fraud laws.

3.1 CreepyCORE and CreepyEYE Relationship

CreepyCORE is a web-based platform that may operate independently or in conjunction with compatible CreepyEYE software. CreepyEYE licenses (Genesis, PRO, Titan) are separate products and are not included in CreepyCORE subscriptions unless explicitly stated. Each product has its own licensing terms and feature sets.

4. Intellectual Property

4.1 Ownership

All intellectual property rights in and to CreepyCORE, including but not limited to trademarks, copyrights, patents, and trade secrets, are owned by or licensed to CreepyCORE. You acknowledge and agree that you do not acquire any ownership rights in CreepyCORE by using the Services.

4.2 License Grant

Subject to your compliance with these Terms, CreepyCORE grants you a limited, non-exclusive, non-transferable, and non-sublicensable license to access and use the Services for lawful personal, educational, or professional purposes in accordance with your active subscription or CreepyEYE license. Commercial or organizational use is permitted only under a paid plan that explicitly allows it, within your plan limits. You may not sublicense, resell, or white-label the Services except where explicitly allowed by your plan or a separate written agreement.

4.3 Restrictions

You may not:

• Modify, copy, distribute, or create derivative works of the Services
• Use the Services in any manner that could damage, disable, overburden, or impair the Services
• Remove, alter, or obscure any proprietary notices or labels on the Services

4.4 Feedback

Any feedback, suggestions, or ideas you provide to CreepyCORE regarding the Services will be considered non-confidential and non-proprietary. CreepyCORE may use such feedback for any purpose without compensation to you.

Important:

Feedback provided by users may be used by CreepyCORE without any compensation and does not grant users any rights in CreepyCORE intellectual property. By providing feedback, you waive any claim to ownership or compensation for such feedback.

5. User Accounts

5.1 Account Registration

To access certain features, you must create an account by providing accurate, complete, and current information. You are responsible for maintaining the confidentiality of your account credentials.

5.2 Account Security

• You must use a strong, unique password for your CreepyCORE account
• We strongly recommend enabling Two-Factor Authentication (2FA)
• You are responsible for all activities that occur under your account
• Notify us immediately of any unauthorized access or security breach

5.3 User Identity System

CreepyCORE supports progressive account security features:

• Level 1 (Standard): Email verification
• Level 2 (Enhanced): Optional two-factor authentication (2FA)
• Level 3 (Maximum): Optional device registration and fingerprinting for multi-device management and fraud prevention

5.4 Account Suspension

We reserve the right to suspend or terminate accounts that violate these Terms, engage in fraudulent activity, or pose a security risk to our platform or other users.

6. Acceptable Use Policy

6.1 Permitted Uses

You may use CreepyCORE Services for:

• Security research and vulnerability assessments on systems you own or have permission to test
• Network administration and monitoring of your own infrastructure
• Educational purposes and cybersecurity training
• OSINT research using publicly available information
• Legitimate threat intelligence gathering

6.2 Prohibited Uses

You must NOT use CreepyCORE Services to:

• Access, scan, or probe systems without explicit authorization
• Conduct any illegal activities, including unauthorized hacking or data theft
• Violate any laws, including privacy, data protection, or computer fraud laws
• Harass, stalk, threaten, or dox individuals (publish private personal data to harm or intimidate)
• Conduct non-consensual surveillance of individuals without a legitimate legal basis
• Target, profile, or discriminate against individuals based on protected characteristics
• Distribute malware, viruses, or other malicious code
• Interfere with or disrupt the Services or servers
• Attempt to gain unauthorized access to other user accounts
• Sell, resell, or exploit the Services without authorization
• Use the Services to attack, compromise, or exploit third-party systems

6.3 Compliance

Users are solely responsible for ensuring their use of CreepyCORE complies with all applicable local, national, and international laws and regulations. This includes, but is not limited to, the UK Computer Misuse Act 1990 (unauthorised access to computer systems and related offences), the US Computer Fraud and Abuse Act (CFAA), UK GDPR / EU GDPR and other data protection laws, and the Protection from Harassment Act 1997 where your research involves individuals.

6.4 Ethical OSINT Principles

CreepyCORE is an OSINT platform, not a surveillance tool. You agree to use it ethically: collect only information you are legally permitted to access; respect reasonable expectations of privacy; minimize data collection to what is necessary for your stated purpose; and handle any personal data in accordance with applicable data protection laws. We may suspend accounts that use the Services in ways that are lawful on paper but clearly abusive, harmful, or inconsistent with these principles.

7. Security & Privacy

7.1 Our Commitment

CreepyCORE implements industry-standard security measures including encryption in transit (TLS), encryption at rest for sensitive data (including stored API keys), secure authentication, and comprehensive audit logging to protect your data.

7.2 User Responsibility

• You are responsible for securing your own devices and networks
• Do not share your API keys or authentication tokens
• Report any security vulnerabilities to our security team
• Use secure connections (HTTPS) when accessing the platform

7.3 Device Fingerprinting

We may collect device fingerprinting data for security purposes only, including fraud prevention, account protection, and multi-device authentication. This data is never used for advertising or tracking.

7.4 Privacy Policy

Our Privacy Policy, which is incorporated into these Terms by reference, explains how we collect, use, and protect your personal information. Please review our Privacy Policy to understand our practices.

7.5 Cookie Policy

Our use of cookies and similar technologies is described in our Cookie Policy. By using the Services, you consent to our use of cookies as outlined there, including essential cookies for authentication and security, functional cookies for preferences, and analytics cookies for service improvement.

You can manage your cookie preferences at any time through the Cookie Settings available in the website footer. However, disabling certain cookies may affect platform functionality.

7.6 No Law Enforcement Backdoor

Transparency Commitment:

We do not provide special access, backdoors, or privileged data access to any third party, including law enforcement agencies, outside of legally binding court orders. We will always challenge overly broad requests and notify users when legally permissible.

8. Data Collection & Usage

8.1 User Data

We collect and process the following types of data:

• Account information (email, username, profile data)
• Authentication data (passwords are encrypted, 2FA codes)
• Usage data (scans performed, API calls, feature usage)
• Device information (IP addresses, browser fingerprints for security)
• Activity logs (login attempts, system access, security events)

8.2 Scan Data

Data collected through scans and OSINT research is stored securely and is accessible only to you. We do not sell or share your scan results with third parties.

8.3 Data Retention

We retain your data as long as your account is active. Upon account deletion, we will delete or anonymize your data within 90 days, except where retention is required by law.

8.4 Data Export

You have the right to export your data at any time through the Settings page. We provide data in standard formats (JSON, CSV) for portability.

9. API Usage Policy

9.1 API Access

API access is available on select subscription plans. API keys are unique to your account and must be kept confidential. Specific feature availability depends on your active subscription tier.

9.2 Rate Limits and Quotas

API usage limits depend on your active subscription plan and are defined on the pricing page and within the platform UI. Rate limits may be adjusted to ensure fair usage and platform stability. Exceeding your plan's limits may result in temporary throttling or require a plan upgrade.

Current usage and limits are visible in your user dashboard.

9.3 Third-Party API Keys (BYOK)

CreepyCORE may allow you to use third-party services through user-provided API keys (BYOK - Bring Your Own Key).

Important:

When you provide third-party API keys (BYOK), we store them encrypted at rest and use them only to transmit requests you initiate. We do not access plaintext key values, sell them, or use them for purposes unrelated to your account. You remain responsible for key security and compliance with each provider's terms.

CreepyCORE is not responsible for billing, availability, data usage, or terms of third-party APIs accessed through user-provided API keys. You are solely responsible for compliance with third-party provider terms and costs.

9.4 API Security

• Use HTTPS for all API requests
• Include your API key in the Authorization header
• Rotate API keys regularly for security
• Do not expose API keys in client-side code or public repositories

9.5 Abuse Prevention

We monitor API usage for abuse. Excessive requests, automated attacks, or violations of our Terms may result in API key revocation and account suspension.

9.6 Lawful Use Attestation (Programmatic Scans)

Every POST /api/v1/scan/start request must include `"lawfulUseAttested": true`, confirming that the scan is for a lawful purpose and that you have authorization where required (Terms §6). Requests without this field are rejected. We log attestations in our audit system (timestamp, API key, hashed target) for compliance and abuse prevention.

10. Subscription & Billing

10.1 Subscription Plans

CreepyCORE offers Observer (free), Hunter, Seeker, and Spectre subscription tiers. CreepyEYE is sold as separate one-time Genesis, PRO, and Titan licenses. Exact features and usage limits for each tier are listed on the Store page and in the Customize Plan builder. Some plans or CreepyEYE products may be marked as roadmap or coming soon on the Store page. Availability, pricing, and features for roadmap items are subject to change until officially released.

10.2 Billing

Paid subscriptions are billed monthly or annually in advance. Payments are processed via Stripe and/or other approved third-party payment providers (including cryptocurrency options when offered at checkout). All prices are in USD unless otherwise stated. Prices may change, but any price change will be communicated at least 30 days before it takes effect for existing subscribers.

10.3 Automatic Renewal

Subscriptions automatically renew at the end of each billing period unless you cancel before the renewal date. You can cancel from Settings → Billing at any time; you keep access until the end of the current billing period.

10.4 Failed Payments & 30-Day Grace Period

If a renewal payment fails, your subscription enters a past-due state and we continue retrying the card via Stripe for 30 days. Your plan remains active during this grace window so short-lived payment issues do not interrupt operations. If no payment is recovered within 30 days, your subscription is automatically downgraded to Observer and you receive an email notification.

10.5 Refund Policy

We offer a 14-day money-back guarantee on your first paid subscription, counted from the date of the first successful payment. Refunds for partial months, for renewal payments, or for requests made after the 14-day window are not available. CreepyEYE one-time license purchases are non-refundable once a device activation token has been issued.

Cryptocurrency payments cannot be reversed once the transaction is confirmed on-chain, and we are unable to return funds to the paying wallet. If a cryptocurrency purchase would otherwise qualify for a refund under this section, contact support@creepycore.com and we will assess the request under this section and applicable consumer law.

Gift purchases are refundable to the purchaser only, only within the 14-day window, and only while the recipient has not yet redeemed the gifted plan. Once a gift has been redeemed and applied to the recipient account, it is non-refundable.

To request a refund, email support@creepycore.com from the address registered on the account and include the order or invoice reference. A refund ends the access it paid for: when we refund a subscription we cancel it at the same time and the account is downgraded to Observer, and when we refund a CreepyEYE license we revoke that license so it can no longer be activated. Nothing in this section limits your non-excludable statutory rights, including the UK Consumer Contracts Regulations 2013 and the Consumer Rights Act 2015 where they apply to you.

10.6 Plan Changes

You may upgrade or downgrade your subscription at any time. Upgrades take effect immediately and are prorated; downgrades take effect at the next billing cycle.

10.7 Free Trial

We may occasionally offer free trials for paid plans. Credit card information may be required. If you do not cancel before the trial ends, you will be charged for the subscription at the listed price.

10.8 UK Consumer Subscriptions (DMCCA 2024)

For UK consumers, we comply with the Digital Markets, Competition and Consumers Act 2024 (consumer subscription rules effective from 2025–2027 as implemented). Before you subscribe we show the price, billing interval, auto-renewal terms, and how to cancel. You can cancel at any time from Settings → Billing or the Stripe Customer Portal (click-to-cancel). After cancellation you retain access until the end of the paid period. We send renewal reminders where required before charging you again.

11. Limitation of Liability

11.1 Disclaimer

THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED. CreepyCORE DISCLAIMS ALL WARRANTIES, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

11.2 No Liability for Misuse

CreepyCORE is not responsible for how you use the Services. You are solely responsible for ensuring your use complies with all applicable laws and regulations.

11.3 Limitation of Damages

TO THE MAXIMUM EXTENT PERMITTED BY LAW, CreepyCORE SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUES, WHETHER INCURRED DIRECTLY OR INDIRECTLY.

11.4 Maximum Liability

Our total liability for any claims arising from your use of the Services is limited to the amount you paid us in the 12 months preceding the claim.

11.5 Availability Disclaimer

We do not guarantee uninterrupted, timely, secure, or error-free operation of the Services. The Services may be temporarily unavailable for scheduled maintenance, upgrades, emergency repairs, or due to circumstances beyond our control. We are not liable for any loss or damage resulting from service interruptions or downtime.

12. Indemnification

12.1 Indemnification by You

You agree to indemnify, defend, and hold harmless CreepyCORE, its affiliates, officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses, including reasonable attorneys' fees, arising out of or in connection with your use of the Services, violation of these Terms, or any activity that you engage in using the Services.

13. Termination

13.1 Termination by You

You may terminate your account at any time through the Settings page. Upon termination, you will lose access to all Services and data associated with your account.

13.2 Termination by Us

We may suspend or terminate your account if:

• You violate these Terms of Service
• Your account is involved in fraudulent or illegal activity
• You fail to pay for subscription services
• Your use of the Services poses a security risk
• We are required to do so by law

13.3 Effect of Termination

Upon termination, your right to use the Services will immediately cease. We will delete your data within 90 days unless retention is required by law. No refunds will be provided for partial months.

14. Force Majeure

14.1 Force Majeure Events

We are not liable for any delay or failure to perform our obligations under these Terms due to events beyond our reasonable control, including but not limited to acts of God, war, terrorism, strikes, labor disputes, power outages, internet failures, or other similar events.

15. Governing Law & Dispute Resolution

15.1 Governing Law

These Terms shall be governed by and construed in accordance with the laws of England and Wales, without regard to conflicts of law provisions. For users in the European Economic Area (EEA), UK, or Switzerland, UK GDPR, EU GDPR, and equivalent data protection regulations apply. For users in other jurisdictions, applicable local consumer protection and data privacy laws apply to the extent they provide greater protections.

Jurisdiction:

CreepyCORE is operated from the United Kingdom. Unless mandatory consumer protection laws in your country require otherwise, disputes shall be resolved in the courts of England and Wales.

15.2 Data Protection Rights

Nothing in these Terms shall limit your rights under applicable data protection laws, including but not limited to the General Data Protection Regulation (GDPR) and equivalent regulations. You retain all rights granted to you under such laws, including rights to access, rectify, erase, and port your data.

15.3 Dispute Resolution

If you have a dispute regarding these Terms or the Services, please contact us first at legal@creepycore.com so we can try to resolve it in good faith. If we cannot resolve the matter within 30 days, either party may bring proceedings in the courts of England and Wales, except where mandatory consumer protection laws in your jurisdiction require resolution in your local courts.

15.4 Class Action Waiver

Where permitted by law, you agree to resolve disputes with us on an individual basis and waive any right to participate in a class action lawsuit or class-wide arbitration. This clause does not apply where such waivers are prohibited by applicable law (including for many UK and EEA consumers).

15.5 Language

These Terms were originally drafted in English. We may provide translations into other languages for your convenience. In the event of any conflict, ambiguity, or inconsistency between the English version and any translation, the English version shall prevail and be the legally binding version, except where mandatory law in your jurisdiction (including consumer protection law in the EEA and UK) requires the version in your local language to govern.

Binding version:

The authoritative text of these Terms is the English version available at creepycore.com. Translations are provided for readability only.

Contact Us

If you have any questions about these Terms of Service, please contact us:

Email: legal@creepycore.com

Support: support@creepycore.com

Security: security@creepycore.com