Terms of Service

Last updated: October 2026

1. Acceptance of Terms

By accessing or using ValidatePIIClasses.com (the "Service"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, do not use the Service.

We reserve the right to modify these Terms at any time. Continued use of the Service after changes constitutes acceptance of the modified Terms.

2. Service Description

ValidatePIIClasses.com provides:

  • Breach Validation: Validating which persons had which PII classes exposed in data breaches, using independent breach-data providers selected for each project
  • PII Classification: Analysis and classification of personally identifiable information in uploaded datasets
  • Field Mapping: AI-powered mapping of dataset columns to standardized PII field types
  • Export Functionality: CSV/XLSX export of breach analysis results

3. Account Registration

To use the Service, you must:

  • Provide accurate and complete registration information
  • Maintain the security of your account credentials
  • Keep multi-factor authentication enabled on your account
  • Notify us immediately of any unauthorized account access
  • Accept responsibility for all activities under your account

You may not share your account credentials or allow others to access your account.

4. Acceptable Use Policy

You agree NOT to:

  • Upload data you do not have the legal right to analyze
  • Use the Service to harass, stalk, or harm individuals
  • Attempt to reverse engineer, decompile, or hack the Service
  • Exceed API rate limits or abuse system resources
  • Resell or redistribute breach data obtained from the Service
  • Use the Service for illegal purposes or in violation of applicable laws
  • Upload malicious files (malware, viruses, scripts)
  • Scrape or automatically extract data from the Service
Violation of this policy may result in immediate account termination.

5. Data Breach Monitoring Limitations

Important Disclaimers:

  • No Guarantee: We rely on third-party breach databases. We do not guarantee detection of all breaches.
  • Delayed Reporting: Breaches may not be immediately available in public databases. There can be delays of weeks or months.
  • False Positives: Email addresses may match breached data without actual compromise (e.g., typos, fake accounts).
  • Not a Security Tool: This Service is for informational purposes only and does not replace comprehensive security practices.
  • Data Accuracy: We do not verify the accuracy of breach data provided by third-party sources.
You are responsible for taking appropriate security measures based on breach monitoring results.

6. Platform Usage Terms

  • Upload Limits: File uploads are rate-limited (10 per hour per user, 20 per hour per IP) to ensure fair usage
  • Data Retention: Project data is kept, encrypted, until you instruct us to delete it (see Section 7).
  • Export Results: You are responsible for securing exported breach reports and limiting access to authorized personnel

7. Data Retention

Our data retention policy:

  • Project Data: VPC keeps the personal data in your project, encrypted, until you instruct us to delete it. Finishing a project does not delete it, and completed projects have no automatic deletion timer.
  • Uploaded Files: Your uploaded file is encrypted on arrival. The original file is deleted automatically when processing completes; the imported data is kept, encrypted, as described above.
  • Breach Results: VPC keeps the breach records its data providers return for each person, so results can be reproduced and you are not charged again for a search already run for your project.
  • Deletion: On your written instruction, VPC deletes a project by destroying its encryption key. That makes the encrypted personal data unreadable, including in backups. To guard against mistakes, the key can be restored for 14 days; after that the deletion is permanent. Database backups roll off after 35 days.
  • Account Data: Account information is retained until you request deletion

You may request data deletion at any time by contacting privacy@validatepiiclasses.com

Enterprise data processing terms are governed by our Data Processing Agreement.

8. Fees and Payment

Fees are quoted for each engagement before processing starts:

  • Pricing: Unless a fixed price is agreed for a project, you are charged for each breach-data provider selected for that project, based on the number of unique values searched in each selected field. Volume price bands may apply.
  • Prior Results: Values already searched for your project are served from stored results and are not charged again.
  • Engagement Ceiling: For projects without a fixed price, total charges across one engagement are capped at a ceiling based on the price of one full run over the engagement's population (plus any sampling work the full run does not repeat); amounts already paid toward those projects are credited against that ceiling.
  • Payment: Unless your agreement provides otherwise, charges are deducted from your account's prepaid balance when processing starts, and processing cannot start without a sufficient balance.
  • Cancellation: A run in progress can be cancelled only by VPC at your request. Cancelling a run does not refund or credit any part of its charge.

9. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW:

  • The Service is provided "AS IS" without warranties of any kind
  • We are not liable for any damages arising from use or inability to use the Service
  • We are not liable for missed breach detections or false positives
  • We are not liable for actions you take based on breach alerts
  • Total liability is limited to the amount paid for the Service in the past 12 months
Some jurisdictions do not allow limitation of liability, so these limitations may not apply to you.

10. Indemnification

You agree to indemnify and hold harmless ValidatePIIClasses.com from any claims, damages, or expenses (including legal fees) arising from:

  • Your use of the Service
  • Your violation of these Terms
  • Your violation of any third-party rights
  • Data you upload to the Service

11. Termination

We reserve the right to suspend or terminate your account at any time for:

  • Violation of these Terms
  • Fraudulent or illegal activity
  • Non-payment
  • Abuse of Service resources

You may terminate your account at any time through account settings or by contacting support.

12. Governing Law

These Terms are governed by the laws of the State of Florida, United States, without regard to conflict of law principles. Any disputes shall be resolved in the state or federal courts located in Florida.

13. Changes to Service

We reserve the right to modify or discontinue the Service (or any part thereof) at any time, with or without notice. We are not liable for any modification, suspension, or discontinuation of the Service.

14. Contact

For questions about these Terms, contact us at:

Email: legal@validatepiiclasses.com

By using ValidatePIIClasses.com, you acknowledge that you have read, understood, and agree to be bound by these Terms of Service.