Terms of Service

These Terms of Service (the “Terms”) are a binding agreement between you and StrataSpace, Inc. (“StrataSpace,” “we,” “us”). They govern your use of Bowshock: the website at bowshock.space, the Bowshock dashboard, software and service, and the alerts it sends (together, the “Service”). By joining the waiting list, creating an account, installing our software or using the Service, you agree to these Terms. If you do not agree, do not use the Service.

If you accept these Terms for a company or other organization, you confirm that you have authority to bind it, and “you” means that organization. If you have signed an order form or other written agreement with us, it controls where it differs from these Terms.

1. The Service and early access

Bowshock watches your app for attacks, investigates what it finds, and can respond within the limits you set. The Service is in early access with a small group of customers. Features may change or be withdrawn, and unless we agree otherwise in writing, the Service comes with no uptime or support commitment.

2. Accounts

The Service is for businesses. You must be at least 18 and use it for your work. You are responsible for your account, for the people you invite to it and for everything done through it. Tell us at once at security@strata.space if you suspect someone has gained access to your account.

3. What Bowshock does in your systems

You decide what Bowshock may do. You grant it access roles in your cloud account, add our software to your app, and choose how much it may do on its own (Disarmed, Home or Away). Within those settings you authorize Bowshock to take actions in your systems, such as blocking a network address, disabling a user account in your app, or placing decoy credentials and endpoints (traps) in your app to catch attackers.

You are responsible for these settings, including the users and addresses you protect from automatic action. Every action appears in the dashboard, and you can reverse most of them there. Ending a user’s sessions cannot be undone. You can withdraw Bowshock’s access at any time by removing the roles and our software.

4. No guarantee

Bowshock reduces the risk of attacks. It cannot remove that risk. It may miss an attack, and it may act against a legitimate user it judged to be an attacker. You remain responsible for the security of your systems and for how you use what Bowshock tells you.

5. Your data

“Customer Data” means the security evidence your app and cloud account send us, your settings, and the information about your staff in your account. You keep all rights in Customer Data. You grant us a worldwide, royalty-free license to host, copy, process and otherwise use it to provide, secure and improve the Service for you.

You confirm that you have the right to send us Customer Data, including the network addresses, email addresses and account identifiers of your app’s users, and that you have given your users any notice and obtained any consent the law requires. If you need a data processing agreement, email legal@strata.space.

6. Attack indicators and aggregate data

We may use attack indicators from the Service (such as the network addresses, networks and techniques attackers use), and de-identified statistics drawn from it, to improve Bowshock and protect our other customers, as our Privacy Policy describes. We never tell another customer who you are or anything about your app’s users.

7. AI

Bowshock uses AI models to investigate and decide. Their conclusions may be wrong, which is why every action is recorded and most can be reversed. The terms of Amazon Bedrock and Anthropic, through which we run AI models, do not allow them to train their models on the Customer Data we send them.

8. Text messages

Bowshock security alerts is an optional text message program for your staff. Each person opts in by adding their own mobile number in Bowshock’s notification settings, agreeing to receive texts, and entering the six-digit code we text to it. You can use Bowshock with email and Slack alone.

When you add your number we text you a verification code. Once it is verified, we may text you security alerts for your organization, following its notification settings: notices about what Bowshock did, or held for you, while your team was away, a question Bowshock needs answered when no one has replied by email or Slack, and test messages a security admin sends.

• Message frequency varies with the attacks on your app and your organization’s settings.
• Message and data rates may apply.
• Reply STOP to stop receiving texts. You will get one reply confirming it. To receive texts again, reply START and then verify your number again in Bowshock.
• Reply HELP for help, or email support@strata.space.
• Texts go only to mobile numbers in the United States and Canada.
• Carriers are not liable for delayed or undelivered messages.

Our Privacy Policy explains how we handle your number. We never share it, or your consent to receive texts, with anyone for marketing.

9. Acceptable use

You agree not to, and not to let anyone else:

• break any law or anyone else’s rights through the Service
• connect Bowshock to systems you do not own or are not authorized to protect
• try to learn which customer an attack indicator came from, or anything about another customer’s users
• probe, scan or test the Service’s own security, or try to get around its limits or sign-in, without our written permission (please report vulnerabilities to security@strata.space)
• reverse engineer the Service, except where the law forbids this restriction
• resell the Service, or use it to build a competing product
• send spam or malware through the Service

We may investigate suspected violations and suspend or end access where we reasonably believe one has happened.

10. Fees

Fees, if any, are set out in your order form or the plan you choose. Unless that says otherwise, fees are paid in advance, are not refundable except where the law requires, and do not include taxes, which you pay (other than taxes on our income). If a payment fails, we may suspend the Service until it is resolved.

11. Our intellectual property

Apart from Customer Data, the Service, including its software, detection rules, documentation and trademarks, belongs to StrataSpace or its licensors. We give you a limited, non-exclusive, non-transferable right to use the Service under these Terms. If you send us feedback or ideas, we may use them without restriction or payment.

12. Other services

The Service works with services we do not control, such as your cloud provider and Slack. Their own terms govern your use of them. When you connect one, you authorize us to exchange information with it on your behalf to run the connection.

13. Ending these Terms

These Terms last until your account ends. You may stop at any time by removing Bowshock’s access and our software and asking us to close your account. We may suspend or end your access if you materially breach these Terms, if the law requires it, or if the early access program ends, in which case we will give you reasonable notice.

Before you remove Bowshock’s access, lift any action still in force from the dashboard. Actions left in your systems after our access ends stay there until you remove them. After your account ends, Customer Data is kept and then deleted on the schedule in our Privacy Policy, except what the law requires us to keep.

14. Disclaimers

Each party confirms it has the authority to enter into these Terms. Except as these Terms expressly say, the Service is provided “as is” and “as available,” without warranties of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, non-infringement, or that the Service will be uninterrupted, error-free or catch every attack.

15. Indemnification

You will defend, indemnify and hold harmless StrataSpace and its officers, directors, employees and agents against any third-party claims, liabilities, damages and expenses (including reasonable attorneys’ fees) arising from your Customer Data, your settings, your use of the Service in breach of these Terms, or your violation of any law or anyone else’s rights.

16. Limitation of liability

To the fullest extent the law allows, neither party is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, goodwill or data, even if told they were possible. This includes losses from an attack Bowshock did not stop and from an action Bowshock took within your settings.

Each party’s total liability arising from these Terms will not exceed the greater of US $100 and the fees you paid us in the 12 months before the event that gave rise to the claim. These limits apply even if a remedy fails of its essential purpose.

17. Governing law and disputes

These Terms are governed by the laws of the State of Delaware, without regard to its conflict-of-laws rules. The state and federal courts in Delaware have exclusive jurisdiction over any dispute.

Before filing a claim, you agree to try to resolve the dispute informally by writing to legal@strata.space. If we cannot resolve it within 60 days, either party may bring a formal claim. To the extent the law allows, you and StrataSpace each waive any right to a jury trial and to take part in a class or representative action.

18. Changes

We may change the Service, including by adding or removing features. We may revise these Terms by posting the new version here and updating the date at the top. For a material change, we will tell you by email or in the dashboard before it takes effect. If you keep using the Service after a change takes effect, you accept it.

19. General

Entire agreement. These Terms, with any order form, data processing agreement or other written agreement we sign with you, are the entire agreement between you and StrataSpace about the Service.

Assignment. You may not assign these Terms without our written consent. We may assign them as part of a merger, acquisition, reorganization or sale of substantially all our assets.

Severability. If a court holds any part of these Terms unenforceable, the rest stays in effect, and that part is changed only as much as needed to make it enforceable.

No waiver. If we do not enforce a provision, we can still enforce it later.

Force majeure. Neither party is liable for failing to perform because of causes beyond its reasonable control, such as natural disasters, war, terrorism, labor disputes, internet or utility failures, or government action.

Export and sanctions. You must comply with U.S. export control and sanctions laws. You may not use the Service from an embargoed region or if you are prohibited from receiving U.S. services.

Notices. We may send notices to the email address on your account or show them in the dashboard. Send notices to us at legal@strata.space.

20. Contact

Questions about these Terms? Write to StrataSpace, Inc. at legal@strata.space.