Shieldify Terms of Service

The agreement

These Terms of Service ("Terms") are an agreement between you and Shieldify.ee ("Shieldify", "we", "us"), which operates the website at shieldify.ee and the Shieldify panel at lynx.shieldify.ee. They apply to every use of the Shieldify service: the edge network that receives your websites' traffic, the panel, the API, alerts and everything else we provide (together, the "Service").

You accept these Terms when you create an account, when you tick the box that confirms you agree to them, or when you use the Service. If you accept them on behalf of a company or other organization, you confirm that you may bind it, and "you" means that organization.

These Terms include the documents they refer to: the Privacy Policy, the Data Processing Agreement (DPA), the cookie information and the list of subprocessors in our Trust Center. Where a document conflicts with these Terms, these Terms prevail, except that the DPA prevails for the processing of personal data on your behalf.

Definitions

Account: your login to the Shieldify panel and everything configured under it.
Website: a domain or hostname you add to the Service so that its traffic passes through Shieldify.
Origin: the server where your Website runs, to which Shieldify forwards the traffic it allows.
Visitor: any person, browser, application or machine that sends traffic to your Website.
Subscription: the paid plan of an Account, billed through Stripe. A Subscription taken out under an earlier version of these Terms may cover a single Website.
Consumer: an individual acting for purposes outside their trade, business, craft or profession.

Eligibility and accounts

You must be at least 18 years old and able to enter into a binding contract.
The Service is intended for use in a trade, business, craft or profession. By creating an account you confirm that you use it for such purposes, unless you tell us otherwise in writing. If you are nevertheless a Consumer, the rules for Consumers in these Terms and the mandatory consumer protection law that applies to you continue to apply.
You must give accurate information, keep it up to date, and keep your password, passkeys and other credentials secret. You are responsible for everything done under your Account. Tell us at once at contact@shieldify.ee if you suspect unauthorized access.
You may not use the Service if you are subject to sanctions of the European Union or the United Nations, or if providing the Service to you would break the law.

The Service

Shieldify is a reverse proxy that stands in front of your Website. It receives your Website's traffic, checks it for denial-of-service attacks, bots and web attacks, and forwards the traffic it allows to your Origin. The features available at any time are described on shieldify.ee and in the panel; they may change as described in section 13.

Shieldify must receive your Visitors directly. Another proxy, CDN or protection service in front of Shieldify is not supported.
The addresses of the Shieldify edge and the addresses from which Shieldify connects to your Origin can change. We publish them in the panel and in the docs, and we tell you before a planned change where we reasonably can. Using a CNAME record to shield.shieldify.ee lets your Website follow such changes without any action from you.
The Service applies the same technical limits to every Website, such as request rates, request body sizes and upload sizes. They are described in the docs and may be adjusted to protect the platform and other customers.

Your responsibilities

You may only add Websites whose domain you control or are authorized to manage.
Your Origin, its software, its security, its availability and its backups are your responsibility. Shieldify reduces attacks that reach your Website through Shieldify; it does not secure your server, and attacks sent to your Origin directly bypass Shieldify. Keep your Origin's address private and allow connections only from Shieldify's addresses where you can.
Keep your DNS pointed at Shieldify as described in the docs, and allow Shieldify's connection addresses in your server's firewall and in tools that block addresses automatically.
You are responsible for the content of your Websites and for complying with the laws that apply to them, including privacy law towards your Visitors. Where the law requires it, tell your Visitors that a security service processes their traffic.
Configure the Service with care. Settings you choose, such as rules that allow or block traffic, apply as you set them.

Acceptable use

You may not use the Service, or let anyone use it through your Account, to:

publish, store or distribute content that is illegal where it is published or in the European Union, including child sexual abuse material, content that incites violence or terrorism, and content that infringes intellectual property rights;
run phishing, fraud, scams, malware, ransomware, spyware or other harmful software, or command-and-control infrastructure for them;
offer or support denial-of-service attacks, including "booter", "stresser" or attack-for-hire services, botnets or open proxies used for abuse;
attack, scan, probe or test the security of any system without the owner's permission, or send spam;
attack, load-test or try to circumvent the Shieldify network, its limits or its protections, unless we have agreed to it in writing beforehand;
hide the operator of an illegal activity from authorities or from the people harmed by it;
resell, sublicense or provide the Service to third parties as a service of your own, unless we have agreed to it in writing;
abuse a trial or a free program, for example by creating several accounts or adding a domain again to obtain another trial.

We may act on any credible report of a breach of this section, including reports from authorities, rights holders and the public, as described in section 10. Reports can be sent to contact@shieldify.ee.

Trials and free programs

An Account can start one 7-day trial. The trial requires a payment method in Stripe Checkout; the paid Subscription starts automatically when the trial ends unless you cancel before then. Each account and each domain can have one trial, whichever account adds the domain.
Shieldify for Startups and other free programs are granted at our discretion, for the period and the Websites we confirm, and can be ended by us at any time with reasonable notice, or at once if the conditions we stated are no longer met.
Trials and free programs are provided as they are, without the commitments in section 12 that apply to paid Subscriptions where these differ.

Fees and billing

An Account has one Subscription, which covers every Website under the Account. Its fees are shown on the pricing page and at checkout, and include the tax stated there.
The base fee covers one registered domain with the number of subdomains and the monthly requests stated on the pricing page. Each further domain, and each subdomain beyond those included with its domain, adds a monthly fee. The monthly requests stated on the pricing page are the Account's quota, whatever the number of domains. Requests beyond the quota in a billing period are charged at the stated rate per request.
Requests are those Shieldify lets through to your Websites. Requests Shieldify blocks are not counted, and no request to a Website is counted during the minutes in which Shieldify records an attack on it.
Bandwidth is subject to fair use. We do not charge for bandwidth without your written agreement. If a Website's traffic goes well beyond fair use, we contact you first, and we do not slow down or stop a Website because of its bandwidth without telling you beforehand.
You can set a monthly limit in the panel. Once a billing period's charges reach it, requests beyond the quota are no longer charged for that period; the base fee and the fees for further domains still apply, and your Websites stay protected. We email you when the charges reach 50, 80 and 100 percent of the limit.
The base fee is billed in advance for each billing period. The fees for further domains, by the domains and subdomains under the Account at the end of the period, and for requests beyond the quota are billed at the end of the period. Billing runs through Stripe, and the Subscription renews automatically at the end of each period until you cancel. Stripe processes your payment details; we do not store your card data.
You can cancel the Subscription at any time in the billing portal in the panel. Cancellation takes effect at the end of the current paid period; your Websites stay protected until then, and that period's fees for further domains and for requests beyond the quota are still charged.
If a payment fails, Stripe may retry it. If the Subscription is not paid, the Websites it covers are paused: Shieldify stops forwarding their traffic until payment succeeds. Your settings are kept as described in section 11.
A Subscription for a single Website taken out under an earlier version of these Terms continues at its price until it ends or you cancel it. After that, the Website is covered by your Account's Subscription if you have one.
We may change prices for future billing periods. We tell you at least 30 days before a price change takes effect for an existing Subscription; if you do not agree, you can cancel before it takes effect.

No refunds and right of withdrawal

Payments are non-refundable. Except where mandatory law requires otherwise, we do not refund any fee, in full or in part, including for a billing period that has started, for a period in which you did not use the Service, for a Website you removed, for a cancellation during a billing period, or for a suspension or termination caused by your breach of these Terms. Cancelling stops future payments; it does not refund the current period.

If you are a Consumer in the European Union or the European Economic Area, you may have a statutory right to withdraw from a contract concluded online within 14 days. Before you start a paid Subscription, we ask you to confirm that you expressly request the Service to start immediately, within the withdrawal period, and that you acknowledge that you lose your right of withdrawal once the Service has been fully performed. If you withdraw before then, you pay for the Service provided up to the time you told us of your withdrawal, and only the remainder is refunded. To withdraw, write to contact@shieldify.ee within the withdrawal period with your account name and the Website concerned.

If we end the Service for a Website for our own convenience and not because of your breach (section 10), we refund the unused part of its current paid period.

Suspension and termination

We may suspend a Website or your Account, at once and without prior notice where the situation requires it, if: you breach these Terms, in particular section 6; a payment is not made; your Website or traffic endangers the Service, our network or other customers; an authority or court requires it; or we have reasonable grounds to suspect illegal use. We tell you the reason where the law allows it.
A suspension may pause only the Website's traffic, with its paid period running on, or pause the Website together with its billing. Where we suspend a Website for a reason other than your breach, we pause its billing or give back the paid time it had left when the suspension ends.
We may terminate your Account or a Website if a breach is serious or repeated, or is not remedied within a reasonable period after we told you about it, and for our own convenience with at least 30 days' notice.
You may stop using the Service at any time by cancelling your Subscriptions and deleting your Websites in the panel. To close your Account, write to contact@shieldify.ee from its email address.

Your data and privacy

For your Account, billing and support, Shieldify is the controller of your personal data and handles it as described in the Privacy Policy in the Trust Center.
For the traffic of your Websites, Shieldify processes personal data, such as Visitors' IP addresses, on your behalf as a processor under the DPA, which forms part of these Terms. You remain the controller of that data.
We keep logs and statistics for the periods stated in the Trust Center, and may keep data longer where the law, billing, security or the defence of legal claims requires it.
When a Website or Account is deleted, its configuration is deleted and its logs expire as stated in the Trust Center. A paused Website's settings are kept so that it can resume; ask us if you want them deleted.
We may use aggregated, anonymized data and security signals, such as attack fingerprints and abusive IP addresses, to protect all customers and improve the Service.

Availability and support

We work to keep the Service available and to stop attacks against your Websites, but we do not guarantee that the Service will be uninterrupted or error-free, that it will stop every attack, or that it will never block legitimate Visitors. Attacks can exceed any provider's capacity, and the networks we depend on can act on attacks in ways we do not control.
We may carry out maintenance, which can briefly interrupt the Service. We try to plan it for quiet hours.
Support is provided by email at contact@shieldify.ee and through tickets in the panel, on a best-effort basis unless we have agreed a service level with you in writing.

Changes to the Service and to these Terms

We develop the Service continuously and may add, change or remove features. We will not remove a feature that is essential to a paid Subscription during its current billing period without a reasonable replacement or a pro-rata refund.
We may change these Terms. We tell you about material changes by email or in the panel at least 14 days before they take effect, except for changes required by law or needed to fight abuse, which can take effect sooner. The new version applies once it takes effect; we may ask you to accept it when you next sign in. If you do not agree, you can cancel before it takes effect.

Intellectual property

The Service, its software, its documentation and the Shieldify and Breakwave names and logos belong to Shieldify or its licensors. You receive a non-exclusive, non-transferable right to use the Service under these Terms while your Account is active.
Your content and your Websites remain yours. You allow us to process them as needed to provide the Service.
If you send us feedback or suggestions, we may use them without obligation to you.

Liability

The Service is provided "as is" and "as available". To the extent permitted by law, we give no warranties beyond those stated in these Terms.
To the extent permitted by law, Shieldify is not liable for indirect or consequential loss, loss of profit, revenue, business, goodwill or data, or for the consequences of attacks, of your Origin's failures, or of settings you chose.
To the extent permitted by law, our total liability arising out of or in connection with the Service in any 12-month period is limited to the fees you paid for the Website concerned in the 12 months before the event that gave rise to the claim.
Nothing in these Terms limits liability for death or personal injury caused by negligence, for fraud, for intentional or grossly negligent conduct, or any other liability that cannot be limited under the applicable law, including the mandatory rights of Consumers.
You will compensate Shieldify for claims of third parties, and for fines and reasonable costs, that arise from your content, your Websites or your breach of these Terms.

Events beyond our control

Neither party is liable for a failure caused by events beyond its reasonable control, including attacks that exceed the capacity available to us, failures or measures of upstream networks, data centers and hosting providers, power failures, natural events, war, terrorism, strikes and acts of authorities. Payment obligations are not suspended by such events.

Governing law and disputes

These Terms and any dispute arising from them are governed by the law of the Republic of Estonia, without regard to its conflict-of-law rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply.
The courts of Estonia, with Harju County Court (Harju Maakohus) in Tallinn as the court of first instance, have exclusive jurisdiction.
If you are a Consumer, you keep the protection of the mandatory provisions of the law of the country where you live, and you may also bring proceedings in the courts of that country.
Before going to court, please write to contact@shieldify.ee; we will try to resolve the matter with you within 30 days.

General

Notices. We send notices to the email address of your Account or show them in the panel. You can send notices to contact@shieldify.ee.
Transfer. You may not transfer your Account or these Terms without our written consent. We may transfer them to a successor of our business, and we may use subcontractors and subprocessors as described in the Trust Center.
Severability. If a provision of these Terms is invalid, the rest remains in effect, and the invalid provision is replaced by a valid one that comes closest to its purpose.
No waiver. Not enforcing a provision is not a waiver of it.
Entire agreement. These Terms, with the documents referred to in section 1, are the entire agreement between you and Shieldify about the Service, unless we have signed a separate agreement with you.
Language. These Terms are written in English. A translation is provided for convenience only; the English version prevails.

Terms of Service.