Terms of Service
Terms of Service
Last updated 2026-10-23.
The service
Protet provides behavioral supply-chain attack detection for npm CI/CD build sessions, provided as a free, cloud-hosted service; on-prem and air-gapped deployments are available on request under a separate agreement. These terms govern your use of the service and, unless that agreement says otherwise, of any such deployment. Protet is operated by Robin Frehner – Protet, Switzerland (see our Impressum).
Accounts
You're responsible for the security of your account credentials and any pull tokens issued to you. Notify us promptly at hello@protet.io if you believe a credential has been compromised — we can revoke it on our end.
Acceptable use
You may not use Protet to monitor infrastructure you don't have the right to monitor, attempt to circumvent license or usage limits, or attempt to extract, reverse-engineer, or resell the Protet detection content.
Plans, limits, and changes
Your plan determines your license limits and session caps, as described on our pricing page. We may change plan definitions going forward; changes don't retroactively alter a license already issued to you.
Free tier
The free plan is provided as-is and may be modified, limited, or discontinued at our discretion, with reasonable notice where practical.
Data processing
Our handling of personal data is described in our Privacy Policy. Where we process personal data on your behalf as part of the cloud-hosted tier, our Data Processing Agreement applies and forms part of these terms. On-prem deployments are additionally governed by our End-User License Agreement.
Termination
You may stop using the service at any time. We may suspend or terminate an account for violation of these terms, or abuse of the service.
Disclaimer & limitation of liability
The service is provided "as is" and "as available," without warranties of any kind to the extent permitted by law. Protet is one layer of detection, not a guarantee against compromise, and should be used as part of a broader security posture, not as a sole control.
To the maximum extent permitted by applicable law, our total aggregate liability arising out of or in connection with the service is limited to the fees you paid for the service in the twelve (12) months preceding the event giving rise to the claim. We are not liable for indirect, incidental or consequential damages, lost profits, lost or corrupted data, or business interruption. Nothing in these terms excludes or limits liability that cannot be excluded or limited under mandatory law, including liability for unlawful intent or gross negligence, or for death or personal injury.
Governing law and jurisdiction
These terms are governed by the substantive laws of Switzerland, excluding its conflict-of-law rules and the United Nations Convention on Contracts for the International Sale of Goods (CISG). The exclusive place of jurisdiction for any dispute arising out of or in connection with these terms is the court competent for the provider's domicile in Switzerland, subject to any mandatory statutory place of jurisdiction.
Changes to these terms
We'll post updates here and adjust the "last updated" date above. Material changes will be communicated to active account holders directly.