Terms of Service

1. Operator

These Terms are published by ColorShield ID LLC (“ColorShield”, “we”, “us”, or “our”). ColorShield ID LLC is a U.S. cybersecurity software company registered in Delaware.

2. Services

ColorShield ID is a Form Identity & Anti-Phishing Protection Platform. Depending on the purchased plan, commercial agreement and deployment path, Services may include:

ColorShield Control Tower;
Protected Flows;
Form Identity Protection;
JavaScript SDK;
server bootstrap integration;
short-lived runtime proof;
fresh pre-submit authorization;
Guardian;
PERMIT / WARN / BLOCK policy handling;
Customer Platform;
protection activity and event logging;
AuditGuard;
licensing, updates and support;
Managed Protection / Managed Installation; and
developer / self-service integration.

These Terms describe currently offered ColorShield ID SaaS and related commercial services. They do not include future product lines that are not part of the current Services.

3. Service limitations

ColorShield ID is designed to reduce risk at protected web forms. It does not guarantee prevention of all phishing, detection of every attacker, prevention of every clone, uninterrupted availability, zero false positives, zero false negatives or absolute security.

Security controls reduce risk; they do not eliminate all cybersecurity risk.

4. Customer accounts and access

Customer accounts are provisioned after approved commercial onboarding. Authentication occurs through the ColorShield ID Customer Platform, not through a password form on the public website.

Customers are responsible for maintaining account credentials, not sharing credentials improperly and notifying ColorShield of suspected account compromise. Account-security controls are handled by the Customer Platform according to the applicable deployment.

5. License and subscription

An active subscription or license provides access according to the purchased plan or commercial agreement. Current public plans include Core Protection, Business Protection and Enterprise / Custom. Other commercial services include Protected Pilot, Managed Installation and Advanced Managed Deployment. See Pricing.

A subscription may define protected domains, Protected Flow count, authorization volume, event retention, AuditGuard access and support level. Automatic renewal, cancellation notice, refund rights, grace periods and late fees are not defined on this public page and remain subject to the applicable Order or commercial agreement.

6. Protected Flows

A Protected Flow is a sensitive form interaction configured for an authorized context. Examples include login, registration, checkout, payment, banking / IBAN, personal data and critical business forms.

Context may include authorized hostname, path, session / browser context, time, form context and the applicable protection policy.

7. Customer responsibilities

Customers are responsible for:

having authority over the domains and applications they protect;
providing accurate onboarding information;
configuring authorized domains and flows correctly;
maintaining their own application and backend security;
maintaining lawful notices and privacy obligations for their users;
protecting customer-side secrets and credentials;
using ColorShield only for authorized systems;
keeping integration components reasonably current; and
notifying ColorShield of suspected misuse or compromise.

ColorShield does not become responsible for the customer’s entire website or business application security merely because ColorShield is integrated with specific protected flows.

8. Business payload separation

ColorShield validates form identity and authorized interaction context. The customer’s business-form processing remains separate.

ColorShield does not require passwords, card numbers, IBAN values or other business-form field contents merely to perform Form Identity validation. This is not an absolute statement that no personal data is ever processed. Security telemetry and related processing are described in the Privacy Policy.

9. Acceptable use

Customers must not use the Services to:

protect systems they are not authorized to control;
attack or probe third-party systems;
interfere with Control Tower or the Customer Platform;
bypass licensing or usage controls;
copy, reverse engineer or misuse proprietary components except where applicable law expressly permits;
attempt unauthorized access;
distribute installation credentials or confidential technical materials; or
use the Services for unlawful activity.

10. Managed Installation

Managed Installation may require temporary, revocable customer-authorized access, such as a temporary cPanel API token, limited SFTP / SSH credentials or developer-managed deployment access.

ColorShield does not request customer cPanel passwords through public forms. Access should be limited to what is required. Customers should revoke temporary deployment access after work is complete. Runtime protection does not depend on persistent hosting-panel access.

11. Protected Pilot

The current published Protected Pilot offer is a $299 one-time evaluation for 30 days, covering 1 protected domain and 1–2 Protected Flows with assisted onboarding.

Under the current published commercial rule, 100% of the pilot fee may be credited toward the customer’s first annual ColorShield subscription if the customer continues under that published offer. These Terms do not invent a separate refund right for the pilot.

12. Fees and billing

Published prices for standard plans appear on Pricing. Enterprise and advanced deployment work may be quoted. Billing and license provisioning are finalized during commercial onboarding.

If a separately issued Order, quote or commercial agreement differs from public pricing, that commercial document controls for the applicable relationship. Taxes, payment-processing terms, automatic renewal, refund policy, cancellation periods and overdue-interest rates are not defined on this public page unless stated in the applicable commercial agreement.

13. Service changes

ColorShield may improve, update or modify Services as security, operational or product requirements evolve. Material commercial changes for an existing paid relationship remain subject to the applicable agreement and law. These Terms do not authorize arbitrary removal of paid contracted services contrary to that agreement.

14. Security events and fail-closed behavior

PERMIT, WARN and BLOCK are policy outcomes for protected interactions. In BLOCK mode, protected submission may fail closed when fresh authorization cannot safely be confirmed. WARN and BLOCK are distinct policies.

These outcomes apply to the protected interaction, not necessarily to the entire website. ColorShield does not guarantee that every attack will result in BLOCK.

15. Telemetry and privacy

Operation of security services may generate security and operational telemetry. Privacy and processing practices are governed by the Privacy Policy. These Terms do not claim zero telemetry.

16. Intellectual property

ColorShield ID LLC retains rights in ColorShield software, Control Tower, the SDK, Guardian, AuditGuard, documentation, platform design, trademarks / branding and proprietary security logic.

Customers retain rights in their websites, applications, content and business data. A subscription grants access and use rights only. These Terms do not transfer ColorShield intellectual property to customers and do not claim ownership of customer business data.

17. Confidential material

Certain SDK implementation materials, API / deployment documentation, security architecture details and proprietary integration material may be provided only to approved customers and may be subject to confidentiality obligations or a separate NDA. An NDA is not stated as mandatory for every customer.

18. Third-party services

Customer environments may use third-party platforms, hosting providers, e-commerce platforms, payment processors or other services. ColorShield is not responsible for third-party products merely because ColorShield is integrated with the customer’s environment. These Terms do not imply endorsement or certification of any third-party product.

19. Suspension for security protection

ColorShield may suspend or restrict access where reasonably necessary to address a security threat, prevent abuse, respond to unauthorized use, protect platform integrity, comply with law or address material violation of applicable commercial terms.

20. Warranties and disclaimers

Services are provided subject to the applicable agreement and law. Security software cannot eliminate all cybersecurity risk. No security product can guarantee complete prevention of loss.

21. Liability

Any limitation of liability applicable to a paid customer relationship will be governed by the applicable Order, subscription agreement or other commercial agreement, subject to applicable law.

22. Governing law and disputes

Any governing-law, venue or dispute-resolution provisions applicable to a customer subscription will be stated in the applicable commercial agreement.

23. Termination

Subscription suspension, cancellation or termination terms are governed by the applicable Order or commercial agreement.

24. Changes to these Terms

These Terms may be updated as the product evolves, the commercial model changes, laws change or operational practices change. Material contractual changes for an existing customer remain subject to the applicable agreement and law. The “Last updated” date at the top of this page will be revised when changes are published.

25. Order of precedence

If a customer has a separately signed Order Form, Enterprise Agreement, subscription agreement or Managed Deployment agreement, that agreement controls where it conflicts with these public Terms.