Terms and Conditions

March 30, 2026

These Terms and Conditions ("Terms") govern your access to and use of the website, platform, and any related tools, data, or services (collectively, the "Services") provided by ScamInfo.ai, operated by Transparent Business Solutions B.V. ("we", "us", or "our"), a company incorporated in the Netherlands.

By accessing or using the Services, you confirm that you have read, understood, and agreed to be bound by these Terms. If you do not agree, you must refrain from using the Services.

These Terms apply to all users, including individual consumers and business users accessing the Services via the platform or API. Where provisions differ between consumer and business users, this is explicitly indicated.

We may update these Terms at any time. Changes will be announced via the Services at least fourteen (14) days before taking effect for consumers, and seven (7) days in advance for business users. Continued use after the effective date constitutes acceptance.

1. Services

ScamInfo.ai is a digital fraud-prevention and scam-intelligence platform. The Services include:

Automated scam risk assessments and domain analysis (Scam Radar);
Site categorisation and contextual risk scoring;
Community-submitted scam reports and intelligence;
Educational content and scam awareness resources;
API access for business users (subject to a separate agreement or subscription).

The Services are provided on an "as-is" and "as-available" basis. Output from the Services constitutes informational assessments only and does not constitute legal, financial, or investment advice. You are solely responsible for independently verifying any information obtained through the Services and for decisions made based on such information.

We do not guarantee completeness, accuracy, or continuous availability of the Services. We reserve the right to modify, suspend, or discontinue any aspect of the Services at any time. For free-tier users, we may do so without notice. For paid subscribers, we will provide reasonable advance notice.

2. Eligibility and Registration

To register for an account, you must be at least 18 years of age (or the applicable age of legal capacity in your jurisdiction). By registering, you represent and warrant that:

You have full legal capacity to enter into these Terms;
All registration information you provide is accurate, complete, and up to date;
You will maintain the security of your account credentials and notify us immediately of any unauthorised access.

Accounts are personal and non-transferable. You may not share account access with third parties, except where authorised third parties are engaged by a business user to operate the Services on their behalf.

We reserve the right to suspend or terminate accounts at our sole discretion, including in cases of suspected misuse, breach of these Terms, or to protect the integrity of the platform.

3. Subscriptions and Fees

ScamInfo.ai offers both free and paid access tiers. Paid subscription plans, pricing, and features are set out on our website and may be updated from time to time.

3.1 Free Tier

Free-tier access is provided without charge and on a best-efforts basis. We may change or discontinue free features at any time without notice or compensation.

3.2 Paid Subscriptions

Paid subscriptions are subject to the fees specified at the time of purchase. Unless agreed otherwise:

Fixed fees are payable in advance;
Usage-based fees are invoiced monthly in arrears;
All prices are in Euros and exclusive of VAT and applicable taxes;
Invoices are due within thirty (30) days of the invoice date.

We reserve the right to adjust pricing once per year in line with the Dutch Consumer Price Index (as published by Statistics Netherlands / CBS) for the preceding year, plus up to five percent (5%).

3.3 Cancellation and Refunds

Subscriptions for a defined term renew automatically for equivalent periods unless either party provides written notice of termination at least two (2) months before the renewal date. Termination does not entitle you to a refund of prepaid fees, except where we discontinue a paid service, in which case a pro-rata refund may apply.

4. Acceptable Use

You agree to use the Services only for lawful purposes and in compliance with these Terms. You must not:

Violate any applicable laws or regulations;
Submit false, misleading, or fabricated information, reports, or reviews;
Use the Services to harass, defame, or harm any individual or organisation;
Attempt to probe, scan, or test the vulnerability of our systems or circumvent any security mechanism;
Scrape, harvest, or extract data from the Services by automated means without our prior written consent;
Reverse engineer, decompile, or otherwise attempt to derive source code from the platform;
Use the Services to distribute malware, spam, or unlawful content;
Impersonate another person or entity, or misrepresent your affiliation;
Transfer, sublicense, or resell access to the Services without authorisation.

Where we identify a breach of these rules, we may suspend or terminate your access, remove offending content, and pursue all available legal remedies. We shall not be liable for any losses resulting from such measures.

5. User-Submitted Content

You may submit scam reports, reviews, or other content through the Services ("User Content"). By submitting User Content, you:

Warrant that it is based on genuine experience and is accurate to the best of your knowledge;
Warrant that it does not infringe any third-party rights, including intellectual property rights;
Grant us a worldwide, non-exclusive, royalty-free, perpetual licence to use, reproduce, adapt, and display your User Content for the purpose of operating and improving the Services.

You retain ownership of your User Content. We do not make proprietary claims over submissions but may use them to improve risk assessments and intelligence databases.

We may remove or hide User Content that we determine violates these Terms or applicable law, including following a valid Notice and Takedown request from an affected party.

6. Intellectual Property

All intellectual property rights in the Services, platform, risk scoring methodologies, data, software, and content developed or made available by ScamInfo.ai are owned by or licensed to Transparent Business Solutions B.V.

We grant you a limited, non-exclusive, non-transferable, revocable licence to access and use the Services for the purposes permitted under these Terms. This licence does not permit you to:

Copy, distribute, or create derivative works from any part of the Services;
Remove or obscure any proprietary notices;
Use our trademarks or branding without prior written consent.

7. Third-Party Services and Links

The Services may contain links to or integrations with third-party websites and services. We are not responsible for the content, accuracy, or privacy practices of those third parties. Their use is governed by their own terms and policies.

8. Disclaimer of Warranties

To the maximum extent permitted by applicable law, we disclaim all warranties, express or implied, including but not limited to:

The completeness, accuracy, or reliability of risk assessments or platform data;
The fitness of the Services for any particular purpose;
Uninterrupted or error-free access to the Services.

Nothing in these Terms affects your statutory rights as a consumer under applicable law.

9. Limitation of Liability

9.1 Consumers

Our aggregate liability to you for any loss or damage arising from use of the Services is limited to five hundred euros (EUR 500) per event, except where loss or damage results from our wilful misconduct, gross negligence, death, or personal injury.

9.2 Business Users

Our aggregate liability to business users is limited to the amount paid by you under the most recent invoice immediately preceding the event giving rise to liability (exclusive of VAT), and in any event shall not exceed two thousand euros (EUR 2,000) on an annual basis.

Any right to compensation is subject to you notifying us in writing within six (6) months of discovering the loss or damage. We are not liable for indirect, consequential, or special losses, including loss of profit, revenue, or business opportunity.

These limitations do not apply where prohibited by law.

10. Privacy

We collect and process personal data as described in our Privacy Policy, available at scaminfo.ai/privacy-policy. The Privacy Policy forms an integral part of these Terms.

Where ScamInfo.ai processes personal data on behalf of a business user, the Data Processing Addendum set out in Appendix A applies and forms an integral part of these Terms.

11. Governing Law and Disputes

These Terms are governed exclusively by Dutch law. Any disputes arising from or in connection with these Terms shall be submitted to the competent court in the Netherlands in the district where Transparent Business Solutions B.V. has its registered office.

For consumers, this clause does not affect your right to rely on mandatory consumer protection rules applicable in your country of residence, or to bring proceedings before courts in that country.

12. Miscellaneous

"In writing" includes communication by email, provided the identity of the sender and the integrity of the content can be sufficiently established.
We may transfer these Terms and our rights and obligations to a third party that acquires the relevant business operations, without requiring your consent.
If any provision of these Terms is found to be unenforceable, the remaining provisions shall continue in full force.
Failure to enforce any provision of these Terms shall not constitute a waiver of that provision.

13. Contact

Transparent Business Solutions B.V.

Trading name: ScamInfo.ai
Kalvermarkt 53, 2511 CB

The Hague, The Netherlands

Email: contact@scaminfo.ai

Appendix A

Data Processing Addendum

("DPA")

Article 1. Applicability and Definitions

1.1 This Data Processing Addendum ("DPA") applies when ScamInfo.ai ("Processor") processes personal data on behalf of a business user ("Controller") in connection with the Services.

1.2 This DPA forms an integral part of the Terms. In the event of conflict between this DPA and the Terms regarding data protection matters, this DPA shall prevail.

1.3 The terms "Data Subject", "Personal Data", "Processing", and "Personal Data Breach" have the meanings given in Article 4 of the GDPR.

1.4 Additional definitions:

"Data Protection Laws" means any applicable laws and regulations governing the processing of personal data, including the GDPR;
"EEA" means the European Economic Area;
"GDPR" means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016;
"Sub-Processor" means any processor engaged by the Processor to carry out specific processing activities on behalf of the Controller.

Article 2. Subject Matter and Instructions

2.1 The categories of personal data, categories of data subjects, processing purposes, and duration of processing are as set out in the relevant datasheet agreed between the parties or specified in the applicable service agreement.

2.2 Processor shall process personal data only on documented instructions from Controller, unless required to do so by applicable law. Where Processor is legally required to process personal data without Controller's instruction, it will inform Controller before processing unless prohibited by law.

2.3 Processor shall inform Controller if, in its reasonable opinion, any instruction from Controller would infringe applicable Data Protection Laws. This does not constitute legal advice.

2.4 Controller remains solely responsible for determining the lawful basis and purposes for processing personal data under this DPA.

Article 3. Sub-Processors

3.1 Processor shall not engage Sub-Processors without prior written authorisation from Controller, whether specific or general.

3.2 Controller hereby grants general authorisation for Processor to engage Sub-Processors as listed in the applicable service documentation. Processor will notify Controller of any intended addition or replacement of a Sub-Processor with reasonable advance notice, allowing Controller to object. If Controller objects, Processor will use reasonable efforts to offer an alternative without the new Sub-Processor.

3.3 Where Sub-Processors are engaged, Processor will impose equivalent data protection obligations on them and shall remain fully responsible for their compliance.

Article 4. International Transfers

4.1 Any transfer of personal data to a third country outside the EEA shall be made only on the basis of documented instructions from Controller or where required by applicable law, and in compliance with Chapter V of the GDPR.

4.2 Where Sub-Processors outside the EEA are engaged, Processor shall ensure compliance with Chapter V of the GDPR through appropriate safeguards, including standard contractual clauses adopted by the European Commission.

Article 5. Security and Confidentiality

5.1 Processor shall implement appropriate technical and organisational measures to protect personal data against unlawful or accidental loss, destruction, alteration, disclosure, or access.

5.2 Access to personal data shall be limited to personnel strictly required for performance of the Services. All authorised personnel are bound by confidentiality obligations.

5.3 In the event of a Personal Data Breach, Processor shall, without undue delay: (a) notify Controller; (b) investigate and provide available details of the breach; and (c) take reasonable steps to mitigate damage. Processor shall cooperate with Controller in any post-breach response.

Article 6. Data Subject Rights and Assistance

6.1 Processor shall notify Controller without undue delay upon receiving any request from a data subject regarding their rights under applicable Data Protection Laws. Processor shall not respond to such requests without authorisation from Controller, unless required by law.

6.2 Processor shall provide reasonable assistance to Controller in fulfilling its obligations under applicable Data Protection Laws, including in relation to:

Data protection impact assessments;
Prior consultation with supervisory authorities;
Accuracy and currency of personal data processed;
Security obligations under Article 32 of the GDPR.

6.3 Where assistance requested under this Article is unreasonable or outside industry norms, the parties will negotiate in good faith a reasonable additional fee.

Article 7. Audit Rights

7.1 Controller has the right, at reasonable intervals or where there are indications of non-compliance, to audit Processor's compliance with this DPA through a certified internal or independent external auditor who is not a competitor of Processor. Processor may require the auditor to sign a non-disclosure agreement.

7.2 Audits shall take place during regular business hours with reasonable advance notice and with minimal disruption to Processor's operations. Processor shall provide reasonable cooperation.

7.3 Following an audit, a preliminary report will be shared with Processor before finalisation. The parties will meet to review findings and agree remediation steps.

Article 8. Termination and Return of Data

8.1 Upon termination of the underlying agreement or processing activities, Processor shall, at Controller's choice, delete or return all personal data and certify compliance upon request, unless applicable law requires continued storage.

8.2 If Controller does not issue instructions within thirty (30) days following termination, Processor is authorised to delete all relevant personal data. Until deletion or return, Processor shall continue to comply with this DPA.

Article 9. Governing Law

9.1 This DPA is governed by the same law that governs the Terms. Disputes arising from this DPA shall be resolved by the courts designated in the Terms.

9.2 Processor may amend this DPA where required by a supervisory authority, to comply with Data Protection Laws, or to implement standard contractual clauses or other approved compliance mechanisms. Processor will provide reasonable advance notice of any such amendments.

Datasheet: ScamInfo.ai Platform Services

This datasheet describes the processing activities carried out by ScamInfo.ai as Processor on behalf of business user Controllers:

Categories of Data Subjects:

End users of the Controller's platform or services;
Individuals whose domains or contact details are submitted for analysis.

Categories of Personal Data:

IP addresses and network identifiers;
Domain names and associated technical metadata;
Any personal data included in user-submitted scam reports.

Processing Purposes:

To perform domain risk assessments and return results to the Controller;
To fulfil API requests submitted by the Controller.

Processing Duration:

Personal data is processed for the duration of the API session or as required to complete the requested analysis. Retention beyond this point is governed by the Privacy Policy and applicable law.

Sub-Processors:

Hosting and infrastructure providers based in the EEA. A current list is available upon written request.