Terms of Service

By creating an account or subscribing to a plan, you agree to these terms. If you do not agree, please do not use Intrudly.

How we handle your personal data is explained in our Privacy Policy and Cookie Notice. If your organisation has a signed Enterprise agreement with us, that agreement takes priority wherever it differs from these terms.

Intrudly helps you find out where your personal data has leaked and get it deleted. Depending on your plan, the service includes:

• Dark web monitoring. We check the email addresses you add against breach dumps, dark web forums, and paste sites, using automated scans, AI tools, and manual review. When we find an exposure, we list it in your dashboard and email you.
• Deletion requests. On Complete and Family, we send erasure requests under Article 17 of the GDPR to companies you choose, on your behalf. We track each request's 30-day deadline and follow up with companies that miss it.
• Dormant account discovery. On Complete and Family, we use what your breaches reveal, such as old usernames and email addresses, to find accounts you may have forgotten.

What each plan includes is listed on our pricing page. We keep improving Intrudly, so features may change over time. If we remove something central to a plan you have paid for, we will tell you in advance, and you can cancel.

• You must be at least 18 years old to create an account.
• Give accurate details, and keep your sign-in email address up to date. That is where we send alerts and updates about your requests.
• Keep your sign-in details secure. You are responsible for what happens under your account. If you think someone else has accessed it, contact Intrudly straight away.
• An account is for one person. A Family plan covers one household under one account and one bill.

Only add email addresses that belong to you. On Family, you may also add addresses of people in your household who have agreed to it. For a child, you must be their parent or guardian. Never add someone else's address to find out what has been exposed about them.

Essential and Complete cover one address, and Family covers up to five. When you remove an address, we stop monitoring it and delete its findings.

A deletion request only goes out when you ask for it, and each one goes to a single company you chose. When you submit a request, you authorise Intrudly to:

• send that request to that company on your behalf;
• receive and read the company's replies about it;
• send reminders if the company misses its deadline; and
• record the outcome in your dashboard.

The request names you as the person the data is about and states that Intrudly is acting on your instruction. It includes the details you give us: the email address, what you want deleted, and your name if you provide it. See how a request works for the full process.

By submitting a request, you confirm that:

• the data is about you or, on Family, about a household member who has asked you to act for them; and
• the details you give us are true and accurate.

Some companies ask for proof of identity before they act. If one does, we will contact you. We only pass on identity documents if you agree, and a company may decline to act without them.

A sent request cannot be recalled, so check the details before you submit.

If a company ignores a request or refuses it without a valid reason, we help you prepare a complaint to a data protection authority. The complaint is yours: you decide whether to send it, and the authority decides what happens next.

• Monitoring is not exhaustive. We search the sources we can reach, and no service can see every leak. If we find nothing, that does not guarantee your data has never been exposed.
• Dormant accounts are a best guess. We list accounts we believe are yours, but we cannot confirm it. Review each one before you ask for it to be deleted.
• We cannot force a company to act. The GDPR only applies to companies within its reach. Some companies will not reply, and others may lawfully keep part of your data. See what companies may keep.
• We are not a law firm. Intrudly does not give legal advice. What we publish about your rights is general information.
• Monitoring does not secure your accounts. When we find an exposure, it is still up to you to change passwords and secure the affected accounts.

When you use Intrudly, you must not:

• monitor addresses, or send requests, for anyone who has not authorised you to;
• submit requests you know to be false or misleading;
• use Intrudly to harass a company or flood it with requests;
• use anything we find to access, or try to access, anyone's accounts;
• probe, disrupt, or get around Intrudly's security or plan limits;
• scrape the service, or copy or reverse-engineer it;
• resell Intrudly, or give others access to it, without our written agreement; or
• use Intrudly in any way that breaks the law.

If a request breaks these rules, we may refuse to send it.

• Essential, Complete, and Family are billed monthly or yearly, in US dollars, at the price shown at checkout. Taxes may be added depending on where you live.
• Payments are handled by Clerk, our account and billing provider, and processed by Stripe. We never see or store your full card details.
• Your subscription renews automatically at the end of each billing period until you cancel.
• You can cancel at any time from the billing section of your account settings, with no notice period. Your plan stays active until the end of the period you have paid for, then stops. Until then, monitoring continues and we keep tracking requests you have already sent.
• Payments are not refunded for unused time, except under the withdrawal right in section 9 or where the law requires a refund.
• If we change the price of your plan, we will email you at least 30 days before the new price applies. The change takes effect at your next renewal, and you can cancel before then.
• Enterprise pricing and terms are agreed separately with each organisation.

If you are a consumer in the EU, the EEA, or the UK, you can withdraw from a new subscription within 14 days of taking it out, without giving a reason. To withdraw, contact Intrudly within those 14 days.

Intrudly starts monitoring as soon as you subscribe, so by subscribing you ask us to begin during the withdrawal period. If you withdraw, we refund what you paid, less an amount in proportion to the service you received before you told us. We send the refund within 14 days, to the payment method you used.

The Intrudly website, software, design, and content belong to Intrudly or its licensors. While your account is open, we give you a personal, non-transferable right to use Intrudly under these terms.

Your data, including everything we find about you, remains yours. We use it only to provide the service, as described in our Privacy Policy.

Intrudly relies on other providers for parts of the service, such as Clerk for sign-in and billing and Stripe for payments. Their own terms may apply when you use those parts. We are not responsible for websites we link to, or for how the companies you contact handle your requests.

You can delete your account at any time from Settings in your dashboard. To avoid being billed again, cancel your subscription first. We then erase your data as described in our Privacy Policy.

We may suspend or close your account if you seriously or repeatedly break these terms, if the law requires it, or to protect other people or the service. We will tell you why, unless the law prevents us. If we close your account when you have not broken these terms, we refund any prepaid time you have not used.

If we stop offering Intrudly altogether, we will give you at least 30 days' notice and refund any prepaid time you have not used.

Intrudly is provided “as is” and “as available”. To the fullest extent permitted by law, we exclude all warranties, conditions, and other terms not set out in these terms, whether express or implied. In particular, we do not warrant that Intrudly will be uninterrupted, error-free, or secure, that it will find every exposure, or that any company will act on a request.

What we are not liable for

To the fullest extent permitted by law, we are not liable for any loss or damage arising from:

• Intrudly being unavailable, interrupted, delayed, or not working as expected, including software errors and the loss or corruption of data held in your account;
• exposures we do not find, find late, or report inaccurately, and accounts we list that turn out not to be yours;
• how a company handles, or fails to handle, a request you sent, including a refusal to delete your data;
• a data breach, cyberattack, or other unauthorised access to our systems or those of our service providers, unless it happened because we failed to take the security measures the law requires of us;
• the acts or omissions of our service providers, such as our hosting, sign-in, and payment providers;
• anything a third party does with your data once it has been exposed, including fraud and identity theft;
• your failure to act on an alert, secure your accounts, or keep your sign-in details safe;
• events beyond our reasonable control, such as internet or third-party outages, attacks on our systems, power failures, industrial action, or acts of government; or
• any indirect or consequential loss, or any loss of profit, revenue, business, goodwill, opportunity, or anticipated savings.

If Intrudly does not work

If Intrudly does not work as these terms describe, tell us and we will try to fix it within a reasonable time. If we cannot, we will refund the part of your subscription fee that covers the affected period. To the fullest extent permitted by law, this is your sole remedy for a service that does not work.

Limit on our liability

To the fullest extent permitted by law, our total liability to you for all claims combined, whether in contract, tort (including negligence), breach of statutory duty, or otherwise, arising out of or in connection with Intrudly or these terms, is limited to the amount you paid us in the 12 months before the first event giving rise to a claim.

Your responsibility to us

You are responsible for any loss, claim, or cost we incur because you broke these terms, for example by monitoring an address or sending a request that you were not authorised to.

What these terms do not limit

Nothing in these terms excludes or limits any liability that cannot be excluded or limited by law. That includes liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, for intentional or grossly negligent conduct, and under data protection law where it cannot be limited. If you are a consumer, nothing in these terms affects your statutory rights, and the exclusions and limits in this section apply only as far as the consumer law of your country allows.

We may update these terms. If a change matters to you, we will email you at least 30 days before it applies. If you do not agree, you can cancel before the change takes effect. Small changes, such as clearer wording, apply once they are published, and the date at the top of this page shows when the terms last changed.

If something goes wrong, write to us first at [email protected]. Most problems can be solved that way.

If you are a consumer, you keep the protection of the mandatory consumer laws of the country where you live. You can also bring a claim in the courts of that country.

• If any part of these terms turns out to be invalid, the rest still applies.
• If we do not enforce a term straight away, we can still enforce it later.
• You may not transfer your account or these terms to someone else.
• We may transfer them to a company that takes over Intrudly. We will tell you if that happens, and your rights under these terms will not be reduced.

For questions about these terms, your account, or billing, write to [email protected]. For anything about your personal data, write to our data protection officer at [email protected].