Effective: 28 September 2026 · Version 1.0

The short version

  • Use Nimbus Vault lawfully, and only against targets you are authorized to test.
  • Your workspace content is yours. You give us the limited license needed to run the service for you.
  • The service is provided “as is.” Engine suggestions and AI output are aids, not guarantees — verify before you act.
  • Paid plans renew automatically until you cancel. Your first purchase is refundable within 14 days.
  • Questions? Contact [email protected].

This summary is for readability — the full terms below govern.

01 Agreement to these terms

By accessing or using Nimbus Vault — the website, the workspace app, or the Chrome extension — you agree to these terms. If you do not agree to these terms, do not use the service.

02 Who we are

Nimbus Vault is a knowledge-management tool for security researchers. In these terms, “we” and “us” mean Nimbus Vault; “you” means the person or organization using the service. Contact: [email protected].

03 The service

Nimbus Vault provides workspace management, asset tracking, component mapping, playbook authoring, and the Nexus Engine’s contextual suggestions. Free and paid plans are described on our pricing page; plan features and limits may change as the product evolves. We may modify, improve, or discontinue features. If a change materially and adversely affects your use of a paid plan, we will give you reasonable advance notice and the option to cancel (see section 07).

04 Eligibility and accounts

You must be at least 16 years old. You must provide accurate information and keep your credentials secure; you are responsible for activity under your account. If you administer a shared workspace, you are responsible for your members’ compliance with these terms, and members’ activity records are visible to workspace administrators (see our Privacy Policy).

05 Acceptable use

You represent and warrant that, for every target you test or interact with while using Nimbus Vault, you have all authorizations required by law and by the target owner (including applicable bug-bounty program policies). Using Nimbus Vault does not grant you authorization to test anything, and Nimbus Vault is not a party to your engagements.

You must not:

  • use the service to access, scan, or attack any system without authorization;
  • use the service for malware, denial-of-service, extortion, spam, or any unlawful purpose;
  • interfere with, disrupt, overload, or attempt to gain unauthorized access to the service, its infrastructure, or other users’ workspaces;
  • reverse engineer, resell, or sublicense the service, or use it to build a competing product;
  • bypass usage limits or access restrictions;
  • use the service in violation of export-control or sanctions laws.

06 Workspace content and intellectual property

You own your workspace content. You grant us a worldwide, non-exclusive, royalty-free license to store, copy, process, transmit, and display your content solely to provide and improve the service for you — nothing more (and see our Privacy Policy for our commitments). We own the service, including its software, design, and the CAVET methodology as embodied in it. If you send us feedback, we may use it without obligation. No rights are granted except as stated here.

07 Plans, billing, and cancellation

Current plans and prices are listed on our pricing page. Paid subscriptions bill in advance per billing cycle and renew automatically until cancelled; you can cancel at any time from your account settings, and access continues until the end of the paid period. If you’re not satisfied, you can request a full refund of your first purchase within 14 days; after that, payments are non-refundable except where required by law, and later refunds are considered case-by-case. We may change prices with reasonable advance notice before your next renewal. You are responsible for applicable taxes.

08 The Chrome extension

Use of the extension is governed by these terms and the extension’s store listing. Its permissions and data behavior are described in our Privacy Policy.

09 Optional AI features

If you enable AI analysis, you connect it with your own third-party AI provider account and API key. Your use of that provider is governed by their terms; you are responsible for their fees. AI output can be wrong — see section 12.

10 Availability and support

We work to keep the service available, but we do not promise any uptime level. Features may change during this beta period. Support: [email protected].

11 Termination

You may stop using the service at any time and cancel paid plans per section 07. We may suspend or terminate access if you materially breach these terms (with notice and a reasonable chance to fix, except where a breach creates legal risk or harm, in which case we may act immediately). On termination, your right to use the service ends; content handling follows our Privacy Policy’s retention section.

12 Disclaimers

The service is provided “as is” and “as available.” To the maximum extent permitted by law, we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the service will be uninterrupted, error-free, or secure, or that suggestions, playbooks, or AI output will be accurate, complete, or suitable. Output is an aid, not advice. You are responsible for independently verifying anything before acting on it, including authorization for any test.

13 Limitation of liability

To the maximum extent permitted by law, we are not liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, data, or goodwill. Our total aggregate liability for all claims is limited to the greater of (a) the fees you paid us in the twelve months before the claim, or (b) US$100. These limits apply regardless of the theory of liability and survive termination.

14 Indemnification

You will defend and indemnify us against third-party claims arising from: your misuse of the service; testing or interacting with any target without authorization; your content; or your breach of these terms.

15 Governing law and disputes

These terms are governed by the laws of the State of Delaware, USA, without regard to conflict-of-law rules. The state and federal courts located in Delaware will have exclusive jurisdiction over any dispute arising out of or relating to these terms, and both parties consent to their jurisdiction.

16 Changes to these terms

We may update these terms; we will post changes here with a new effective date, and email registered users about material changes. Continued use after changes take effect means you accept them.

17 General

If a provision is found unenforceable, the rest remains in effect. Our failure to enforce a provision is not a waiver. These terms and the Privacy Policy are the entire agreement between us. You may not assign these terms; we may assign them in a merger or sale. Sections that by their nature should survive (content license, disclaimers, liability, indemnity) survive termination. Third-party sites we link to are not our responsibility.

18 Contact

[email protected]