Wratum Guard Terms of Service

Provider: AVALW SRL, a company incorporated in Romania, sole registration number (CUI) 40966413, trade register number J2019001539228, EUID ROONRC.J2019001539228, with registered contact address contact@avalw.com ("AVALW", "we", "us", "our").

Service: Wratum Guard, the invalid traffic, bot and fraud detection service offered at wratumguard.com and through its API ("Wratum Guard", the "Service").

Customer: the company or individual that creates an account, installs the tag, or calls the API ("Customer", "you", "your").

Effective date: these Terms apply from the date you first create an account, install the tag, or call the API, whichever is earlier.

By creating an account, generating an API key, installing the Wratum Guard tag, or sending a request to the Wratum Guard API, you agree to these Terms of Service ("Terms"). If you are accepting on behalf of a company, you confirm that you are authorized to bind that company. If you do not agree, do not use the Service.

1. Definitions

1.1 "Account" means the Wratum Guard account registered to you.

1.2 "API" means the Wratum Guard application programming interface, including the /check endpoint and any related endpoints.

1.3 "API Key" means the secret credential (in the form wfg_...) that authenticates requests made under your Account.

1.4 "Tag" means the JavaScript snippet (fraudguard.js) that you place on your own web properties to collect signals from a visitor's browser.

1.5 "Signals" means the technical and network data evaluated by the Service, which may include the connecting IP address, an approximate location derived from that IP, network type (for example VPN, hosting or datacenter, Tor, or proxy indicators), a TLS or connection fingerprint, WebRTC information, device and browser characteristics, time zone, and coarse behavioral indicators such as request patterns. Signals do not include names, email addresses, government identifiers, payment card data, or any special category of personal data as defined by the GDPR.

1.6 "Verdict" means the output of the Service for a given evaluation, expressed as a category such as "clean", "flagged", or "fake", together with a short reason and, where applicable, a category label. A Verdict is a probabilistic risk indicator, not a statement of fact about any person.

1.7 "Check" means a single evaluation performed by the Service that consumes quota or is metered for billing.

1.8 "Customer Data" means the Signals and request metadata that you or your End Users transmit to the Service in connection with your use of Wratum Guard.

1.9 "End User" means a visitor to your web property or a user of your application whose traffic you submit to the Service for evaluation.

1.10 "Threat Intelligence" means the aggregated, de-identified insights that AVALW derives across its customer base to improve detection quality.

2. The Service

2.1 Wratum Guard evaluates traffic in real time and returns a Verdict that helps you distinguish genuine human visitors from automated, fraudulent, or invalid traffic. The Service is designed to judge the live connection rather than to rely solely on static reputation lists.

2.2 The Service may be used through the browser Tag, through direct server to server API calls, or both. You control which of your properties use the Service and which policy is applied to each signal category through your Account.

2.3 The Service is provided as software as a service. We may add, change, deprecate, or remove features, signals, models, endpoints, or thresholds at any time in order to maintain and improve detection quality, provided that we will not materially reduce the core functionality of a paid plan during a paid period without offering you a comparable alternative or a pro rata refund of the unused paid period.

2.4 Detection methods, thresholds, model weights, and signal logic are confidential and are not published, because disclosing them would help fraudulent actors evade detection.

3. Accounts, API Keys, and Security

3.1 You must provide accurate registration information and keep it current.

3.2 Your API Key and account credentials are confidential. You are solely responsible for keeping them secret and for all activity that occurs under your Account or API Key, whether or not authorized by you. The full API Key secret is shown only once at creation. Store it securely.

3.3 You must notify us without undue delay at contact@avalw.com if you know or suspect that your API Key or credentials have been lost, disclosed, or used without authorization. We may rotate or revoke a key that we reasonably believe has been compromised.

3.4 You must not share, transfer, sell, or sublicense your Account or API Key, and you must not create multiple accounts to obtain additional free or trial quota. Doing so is a material breach and may result in suspension.

3.5 You must respect the rate limits, quotas, and fair use limits communicated to you or applied by the Service. We may throttle or suspend requests that exceed those limits or that threaten the stability or security of the Service.

4. Acceptable Use and Restrictions

4.1 You may use the Service only to protect your own traffic, campaigns, applications, and web properties, or those of clients on whose behalf you are authorized to act, and only for lawful purposes.

4.2 You must not, and must not permit any third party to:

(a) resell, republish, redistribute, sublicense, or otherwise make available the Service, the API, the Verdicts, or any underlying data to any third party except as expressly permitted in writing by us;

(b) reverse engineer, decompile, disassemble, scrape, or attempt to derive the source code, models, thresholds, signal logic, or datasets of the Service, except to the limited extent this restriction is prohibited by applicable law;

(c) use the Service, the Verdicts, or any data obtained from the Service in any way intended to evade, bypass, or contravene any data protection, privacy, or consumer protection law, including the GDPR, the ePrivacy rules, the CCPA/CPRA, or the LGPD;

(d) use the Service for any unlawful, harmful, discriminatory, deceptive, or abusive purpose, including social engineering, identity impersonation, account takeover, harassment, stalking, unlawful surveillance, or the targeting of individuals;

(e) submit to the Service any special category of personal data, any government identifier, any payment card data, or the data of a person you know to be a child, or any data you are not lawfully entitled to process;

(f) use the Service to build, train, or improve a competing product, or to benchmark the Service for the benefit of a competitor, without our prior written consent;

(g) interfere with, disrupt, overload, or attempt to gain unauthorized access to the Service or its infrastructure;

(h) remove, obscure, or alter any notice, or misrepresent the source or authenticity of a Verdict.

4.3 Export controls and sanctions. You represent and warrant that you are not located in, organized under the laws of, or ordinarily resident in any country or territory that is the subject of comprehensive sanctions or an embargo administered by the European Union, the United Nations, the United States, or any other competent authority, that you are not owned or controlled by, or acting on behalf of, any party on an applicable restricted or sanctioned party list, and that you will not use, export, re-export, or make the Service available in violation of any applicable export control or economic sanctions law. We may suspend or terminate access without liability if we reasonably believe continued provision would breach these laws.

4.4 We may investigate suspected violations and cooperate with law enforcement. We may suspend access immediately where we reasonably believe continued use presents a security, legal, or reputational risk.

5. Nature of the Verdicts, Accuracy, and Customer Responsibility

This Section is fundamental to the Service and to the allocation of risk between the parties.

5.1 A Verdict is a probabilistic risk assessment generated by automated means from technical Signals available at the moment of evaluation. It is an opinion, not a certified fact, and it is not a statement about the identity, character, reputation, or intentions of any individual.

5.2 No detection system is perfect. The Service will produce false positives (genuine traffic flagged as suspicious) and false negatives (fraudulent or invalid traffic not detected). You acknowledge this is inherent to all fraud and bot detection and does not constitute a defect or a breach of these Terms. We do not warrant any particular detection rate, false positive rate, accuracy, completeness, or fitness for a particular purpose.

5.3 You are solely responsible for how you configure the Service, for the detection policy you choose for each signal category, and for every action, decision, or omission you take on the basis of a Verdict, including blocking, allowing, charging, refunding, suppressing a conversion, or reporting a party. We are not responsible for the consequences of those actions.

5.4 The Service is not a consumer reporting agency, and Verdicts are not consumer reports. You must not use Verdicts, alone or in combination with other data, to make decisions about a person's eligibility for credit, insurance, employment, housing, or any other purpose that is regulated by consumer reporting laws.

5.5 You must not rely solely on a Verdict to take a decision that produces legal effects concerning an individual or that similarly significantly affects an individual, without meaningful human review. Where you apply automated decision making, you are responsible for complying with Article 22 of the GDPR and any equivalent law, including providing the safeguards, information, and rights that those laws require.

5.6 The Service supports you in your own fraud prevention and traffic quality efforts. It does not replace your own judgment, controls, or legal compliance.

6. Plans, Fees, and Billing

6.1 The Service is offered on a free trial plan, a prepaid pay as you go plan, and subscription plans, each with a monthly volume of Checks and a per Check rate as described at wratumguard.com or in your Account at the time of purchase.

6.2 Pay as you go balances are prepaid and are consumed as Checks are performed. Subscription plans are billed in advance and, where you have provided a payment method, are charged automatically each billing period through our payment processor until cancelled.

6.3 Except where required by applicable law, all fees are non-refundable, and unused Checks, quota, or balance do not roll over, are not exchangeable for cash, and are not pro rated on cancellation. Cancelling a subscription stops future renewals and takes effect at the end of the current paid period.

6.4 Prices are exclusive of taxes. You are responsible for all applicable taxes, duties, and charges, other than taxes on our net income.

6.5 We may change plans, prices, quotas, and rates on a prospective basis. Changes apply to your next renewal or purchase. Continued use after a change takes effect is acceptance of the change.

6.6 If a charge fails, is reversed, or is disputed without a valid basis, we may suspend the Service and the Account until the balance is resolved.

7. Data Protection and Privacy

7.1 Roles. When we process Customer Data to return Verdicts to you, we act as a processor acting on your documented instructions, and you act as the controller. When we process de-identified data to produce and improve Threat Intelligence and to secure and operate the Service, we act as an independent controller for that limited purpose. The data protection terms in this Section, together with any separate Data Processing Agreement we make available, govern this processing. Where a separate Data Processing Agreement is signed, it prevails over this Section to the extent of any conflict.

7.2 Personal data. You acknowledge that an IP address and certain device or network Signals can be personal data under the GDPR. The Service is designed to minimize personal data. It records coarse Signals and Verdicts and does not build a persistent cross site profile of an individual, does not set advertising identifiers, and does not require a name, email, or account identity of the End User.

7.3 Lawful basis. Fraud prevention and ensuring network and information security are recognized as legitimate interests under the GDPR (see Recitals 47 and 49). You are responsible for determining and documenting the lawful basis for your submission of Customer Data to the Service, for providing End Users with a clear privacy notice that describes the use of a fraud prevention provider, and for obtaining any consent required by the ePrivacy rules for the storage of or access to information on an End User's device by the Tag.

7.4 Your obligations. You warrant that you have the right to submit the Customer Data to the Service for evaluation, that you will not submit special category data, payment data, or knowingly the data of children, and that you will handle End User rights requests for which you are the controller. We will provide reasonable assistance to you in responding to such requests to the extent the data is within our control.

7.5 Our commitments. We will process Customer Data only to provide, secure, and improve the Service as described in these Terms, will apply appropriate technical and organizational security measures, will impose confidentiality on personnel with access, will engage sub processors only under written terms no less protective than these, and will notify you without undue delay after becoming aware of a personal data breach affecting Customer Data.

7.6 International transfers. Where personal data is transferred outside the European Economic Area, we rely on an approved transfer mechanism such as the European Commission Standard Contractual Clauses or an adequacy decision.

7.7 Retention and deletion. We retain Verdict and Signal records for the period needed to operate the Service, provide your dashboard and analytics, support billing, and maintain security and Threat Intelligence, after which they are deleted or aggregated into non identifying form. On termination we will delete or de-identify Customer Data associated with your Account within a reasonable period, unless retention is required by law.

7.8 Supervisory authority. The competent supervisory authority for AVALW is the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP). Privacy questions and data protection requests may be sent to contact@avalw.com.

8. Intellectual Property

8.1 As between the parties, we and our licensors own all right, title, and interest in and to the Service, the API, the Tag, the models, the detection logic, the Threat Intelligence, and all related intellectual property. We grant you a limited, non exclusive, non transferable, non sublicensable, revocable license to use the Service and to display Verdicts for your internal business purposes during the term, subject to these Terms.

8.2 You own your Customer Data. You grant us a non exclusive, worldwide license to process Customer Data to provide the Service and, in de-identified and aggregated form, to produce Threat Intelligence and to secure and improve the Service.

8.3 If you send us feedback or suggestions, you grant us a perpetual, irrevocable, royalty free license to use them without restriction or obligation to you.

8.4 We may identify you as a customer by name and logo in a customer list, unless you notify us in writing that you prefer we do not.

9. Confidentiality

9.1 Each party may receive confidential information of the other, including, in our case, the API, non public features, thresholds, and detection logic. The receiving party will protect confidential information with reasonable care, use it only to exercise its rights and perform its obligations under these Terms, and not disclose it except to personnel and advisors who need it and are bound by confidentiality.

9.2 Confidentiality does not apply to information that is or becomes public without breach, was known before disclosure, is independently developed, or is rightfully received from a third party, and does not prevent disclosure required by law provided reasonable notice is given where lawful.

10. Warranties and Disclaimers

10.1 Each party warrants that it has the authority to enter into these Terms.

10.2 Except as expressly stated in these Terms, the Service, the API, the Tag, the Verdicts, and all related materials are provided on an "as is" and "as available" basis, without warranty of any kind, whether express, implied, or statutory. To the maximum extent permitted by law, we disclaim all implied warranties, including merchantability, fitness for a particular purpose, title, non infringement, and any warranty that the Service will be uninterrupted, timely, secure, error free, or that any Verdict will be accurate, complete, effective, or reliable.

10.3 Some jurisdictions do not allow the exclusion of certain warranties, so some of the above exclusions may not apply to you to the extent prohibited by mandatory law.

11. Limitation of Liability

11.1 To the maximum extent permitted by law, neither party is liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenue, goodwill, data, or business, arising out of or related to these Terms or the Service, even if advised of the possibility of such damages.

11.2 To the maximum extent permitted by law, our total aggregate liability for all claims arising out of or related to these Terms or the Service, in contract, tort, or otherwise, will not exceed the greater of one hundred euros (EUR 100) or the total amount you actually paid to us for the Service in the twelve months immediately preceding the event giving rise to the claim.

11.3 The limitations in this Section reflect the allocation of risk between the parties and the fact that the Service returns probabilistic risk signals on which you exercise your own judgment. They apply even if a limited remedy fails of its essential purpose. Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable law, such as liability for death or personal injury caused by negligence, or for fraud.

12. Indemnification

12.1 You will defend, indemnify, and hold harmless AVALW and its officers, employees, and agents from and against any claim, liability, damage, loss, and expense, including reasonable legal fees, arising out of or related to (a) your use or misuse of the Service, (b) any action or decision you take on the basis of a Verdict, (c) your breach of these Terms or of any applicable law, including data protection law, or (d) Customer Data that you were not entitled to submit.

13. Suspension and Termination

13.1 You may stop using the Service and close your Account at any time.

13.2 We may suspend or terminate your access, in whole or in part, immediately and with or without notice, if you breach these Terms, fail to pay, exceed limits, create a security or legal risk, or use the Service unlawfully, and otherwise on reasonable notice.

13.3 On termination, your right to use the Service ceases, outstanding fees become due, and each party returns or deletes the other's confidential information on request, subject to retention required by law and to our right to retain de-identified Threat Intelligence.

13.4 Sections that by their nature should survive, including Definitions, Accuracy and Customer Responsibility, Fees accrued, Data Protection, Intellectual Property, Confidentiality, Disclaimers, Limitation of Liability, Indemnification, and General, survive termination.

14. Changes to These Terms

14.1 We may update these Terms from time to time. If a change is material, we will take reasonable steps to notify you, for example by email or through the Account. Changes take effect when posted or on the date stated. Your continued use after that date is acceptance. If you do not agree, you must stop using the Service.

15. Force Majeure

15.1 Neither party is liable for any failure or delay caused by events beyond its reasonable control, including acts of nature, outages of upstream networks or providers, denial of service attacks, changes in law, or governmental action. This does not excuse payment obligations for the Service already provided.

16. Governing Law and Disputes

16.1 These Terms are governed by the laws of Romania, without regard to conflict of law rules, and, where applicable, by the mandatory law of the European Union.

16.2 The courts of Romania competent for the registered seat of AVALW have exclusive jurisdiction over any dispute, subject to any mandatory consumer protection rules that grant you a different venue. Before starting proceedings, the parties will attempt in good faith to resolve the dispute by contacting contact@avalw.com.

16.3 Any claim must be brought within one year after it arises, except where a longer period is required by mandatory law.

17. General

17.1 Assignment. You may not assign these Terms without our prior written consent. We may assign these Terms to an affiliate or in connection with a merger, acquisition, or sale of assets.

17.2 Entire agreement. These Terms, together with any order, plan description, and any Data Processing Agreement, are the entire agreement between the parties and supersede all prior understandings on their subject.

17.3 Severability. If a provision is held unenforceable, the rest remain in effect and the unenforceable provision is limited to the minimum extent necessary.

17.4 No waiver. Failure to enforce a provision is not a waiver of it.

17.5 No agency. Nothing in these Terms creates a partnership, agency, or employment relationship.

17.6 Notices. Legal notices to us must be sent to contact@avalw.com. We may give notice to you through the Account or the email associated with it.

17.7 Language. The English version of these Terms is the controlling version. Any translation is provided for convenience only.

Contact: AVALW SRL, Romania, CUI 40966413, J2019001539228. Questions about these Terms or about data protection: contact@avalw.com.

Last updated: 5 August 2026.