Terms of Service

1. Agreement and Scope

These Terms of Service (the "Terms") are an agreement between you and Avenyx, the company that operates OSINTNova, BosINT, OwlURL, osintnova.com, app.osintnova.com, related Discord services, APIs, documentation, subscriptions, tools, features, reports, and other services that link to these Terms (collectively, the "Services").

By accessing or using the Services, creating or linking an account, signing in with Discord or Google, purchasing OSINTNova Pro, using BosINT in Discord, using an API key, or otherwise interacting with the Services, you agree to these Terms. If you use the Services for a company, agency, organization, client, or other entity, you represent that you have authority to bind that entity, and "you" includes both you and that entity.

OSINTNova is a privacy-aware open-source intelligence platform for lawful research, personal online-footprint review, cybersecurity, threat intelligence, non-consumer-reporting due diligence, journalism, private investigation, law enforcement, fraud prevention, and related investigative workflows. The Services help locate, organize, analyze, enrich, or summarize information from public, user-provided, licensed, security, and other lawful sources. The Services are not a guarantee that information is complete, current, lawful for every use, or fit for a particular legal, investigative, employment, credit, housing, insurance, lending, or eligibility decision.

Some features may have additional posted terms, usage limits, checkout disclosures, Discord rules, API terms, payment processor terms, third-party service terms, or plan-specific notices. Those additional terms apply to the relevant feature. If they conflict with these Terms, the more specific terms control for that feature.

2. Eligibility and Accounts

You must be at least 18 years old and a legal adult in your jurisdiction to use the Services. The Services are not intended for minors. You may not create an account, subscribe, submit personal information, run searches, upload content, or use the Services if you are under 18 or otherwise unable to enter into these Terms.

OSINTNova research tools require authenticated access. We do not allow free or anonymous use of our tools, and every use must be tied to an authenticated account, session, server installation, or API key so we can enforce limits, audit misuse, investigate abuse, and protect users and third parties.

OSINTNova and BosINT generally use external sign-in providers such as Discord or Google. Those providers control their own credentials, authentication, security, profile records, and provider-side data. You are responsible for keeping your linked accounts secure and for all activity that occurs through your linked account, session, API key, Discord server, or payment method.

You agree to provide accurate, current, and complete information when you sign in, subscribe, request support, submit a blacklist request, report a vulnerability, or otherwise interact with us. You may not create a new identity, account, server installation, or payment path to avoid a ban, rate limit, suspension, chargeback decision, abuse review, or prior enforcement action unless we give written permission.

You are responsible for confirming that your use of the Services is lawful for your role, jurisdiction, employer, agency, client, and subject matter. If you are subject to professional, government, law enforcement, private investigator, journalist, employment, financial, education, healthcare, or regulated-industry rules, you are responsible for complying with those rules.

3. Responsible OSINT Use

OSINTNova is built for lawful, ethical open-source intelligence. You may use the Services only for legitimate purposes and only with a lawful basis to run the search, upload the data, analyze the identifier, use the output, or share the report.

Our tools may use public websites, search engines, public APIs, public records, user-provided information, licensed sources, security intelligence, historical archives, threat feeds, exposure indicators, and other sources that are intended to be available through lawful access. Some tools may check whether an identifier such as an email address or username appears in breach, exposure, threat-intelligence, or public-profile contexts. These checks are intended to use public, licensed, user-provided, or otherwise authorized sources. The Services are not a place to obtain raw breach dumps, stolen credentials, private databases, or unauthorized access to third-party systems.

You may not use the Services to violate the Computer Fraud and Abuse Act, identity-theft laws, wire fraud laws, state computer crime laws, anti-stalking or harassment laws, privacy laws, consumer protection laws, the Driver's Privacy Protection Act, the Fair Credit Reporting Act, export control or sanctions rules, or any other applicable law. You also may not use the Services to violate Discord, Google, PayPal, Patreon, Cash App, blockchain network, data-source, website, platform, API, or other third-party terms that apply to your activity.

No Consumer Reporting Use

OSINTNova is not a consumer reporting agency and does not provide consumer reports. You may not use the Services or any output for credit, employment, background screening, tenant screening, housing, insurance, lending, education admission, benefits eligibility, or any other purpose covered by the Fair Credit Reporting Act or similar laws unless we expressly provide a separate product and written terms designed for that purpose.

Vehicle and Regulated Data

If you use vehicle, license plate, phone, people, location, breach, dark web, or other sensitive investigative tools, you are solely responsible for having a permissible purpose and complying with all applicable federal and state laws, including the Driver's Privacy Protection Act where it applies.

4. Prohibited Conduct

You may not use, attempt to use, or assist another person in using the Services for any unlawful, harmful, abusive, deceptive, or unauthorized purpose. Prohibited conduct includes:

• Doxxing, stalking, harassment, intimidation, threats, swatting, extortion, blackmail, or singling out a person for abuse
• Searching for, sharing, selling, validating, or using stolen credentials, private keys, session tokens, payment data, Social Security numbers, identity documents, or raw breached records
• Attempting to access any account, computer, service, API, database, device, network, wallet, or system without authorization
• Using results to commit fraud, phishing, credential stuffing, account takeover, impersonation, identity theft, SIM swapping, financial crime, or evasion of law enforcement
• Scraping, crawling, automating, rate-limit bypassing, reselling, mirroring, or bulk extracting the Services except through documented, authorized API use
• Reverse engineering, decompiling, probing, or attacking the Services except as allowed under Section 9
• Removing attribution, hiding the source of AI-generated or OSINTNova-generated output, or presenting generated analysis as verified human fact without review
• Uploading content you do not have the right to use, including confidential employer data, client data, trade secrets, copyrighted works, private messages, intimate images, or protected personal data
• Investigating minors, victims, private individuals, protected classes, or vulnerable people without a legitimate, lawful, and proportionate purpose
• Using the Services for hate, discrimination, exploitation, non-consensual intimate imagery, child sexual abuse material, trafficking, weapons procurement, or other serious harm
• Interfering with the Services, overwhelming infrastructure, bypassing quotas, abusing support, abusing blacklist or data-removal forms, or disrupting other users

We may monitor for abuse, investigate suspected violations, throttle or block activity, remove content, disable features, revoke API keys, suspend access, ban users or servers, report unlawful activity, preserve evidence, cooperate with payment processors and law enforcement, and take any action we reasonably believe is necessary to protect the Services, users, the public, third parties, or ourselves.

5. User Content, AI Output, and Results

"User Content" means prompts, queries, uploads, identifiers, files, images, scripts, reports, notes, feedback, support messages, blacklist requests, vulnerability reports, API requests, and other information you submit to or through the Services. You represent that you have all rights, permissions, lawful bases, consents, and authority needed to submit User Content and to allow us to process it to provide, secure, improve, and enforce the Services.

As between you and OSINTNova, you retain your rights in your User Content. You grant OSINTNova a worldwide, non-exclusive, royalty-free license to host, process, transmit, display, reproduce, transform, analyze, cache, and use User Content as needed to operate, secure, support, improve, bill for, and enforce the Services. This license includes the right to use technical metadata, abuse signals, aggregate usage data, and de-identified operational data.

Subject to these Terms and third-party rights, we do not claim ownership of your lawful output generated by the Services. You are responsible for reviewing output before relying on it, publishing it, sharing it, acting on it, or using it in a report. AI and OSINT outputs can be incomplete, outdated, wrong, duplicated, biased, misattributed, hallucinated, or based on public sources that later change or disappear.

You may not instruct the Services to generate or transform output in a way that violates intellectual property rights, confidentiality duties, privacy rights, platform terms, court orders, contracts, or law. If you publish or share AI-generated analysis, you must not misrepresent its source, certainty, authorship, or evidentiary value. You should preserve source links, timestamps, screenshots, and independent verification when accuracy matters.

Third-party content, links, websites, APIs, public records, search results, blockchain records, social media content, archived pages, dark web links, and other external material remain the responsibility of their respective owners or publishers. We do not control those sources and are not responsible for their legality, accuracy, availability, security, policies, or future changes.

6. Privacy, Data, and Retention

We collect and retain data only as described in this section, including data needed to operate OSINTNova and BosINT, deliver search results, maintain security, prevent abuse, troubleshoot issues, improve the Services, and support account or payment-related needs. Most data categories have a defined retention period and are automatically deleted when no longer needed, except for the narrow long-term records described under "What We Store Permanently."

You may sign in with Discord or Google; those providers handle authentication security and provider-side records. We may receive limited external identifiers, profile details, email addresses, server IDs, role information, session data, and similar information needed to run the Services, apply subscriptions, provide support, and enforce limits. Payment information is processed by the applicable payment processor, wallet, blockchain network, or subscription platform.

Search Inputs

Search inputs may include lookup targets such as emails, phone numbers, usernames, domains, IP addresses, VINs, or similar values submitted by a user.

These inputs are treated as sensitive. We do not use search inputs to build a permanent search history, and we redact or remove them from operational, security, and usage logs wherever possible.

Search inputs may be temporarily retained only where necessary to provide the service, such as inside a generated report or short-term lookup cache.

Command-based report links are kept for up to 72 hours so you can reopen recent results from your dashboard or a report link; each report may include the submitted lookup target, generated analysis, and related public-source results from the command, and after 72 hours reports are automatically deleted. Anyone with a cached report or share link (or permission you grant) may be able to access it, so treat share links as sensitive.

Operational logs are retained for up to 90 days for platform health, troubleshooting, service investigation, and reliability. They may include timestamps, request status, error details, service events, admin actions, payment- and authentication-related events, and general request metadata; sensitive lookup values, credentials, tokens, cookies, and similar secrets are redacted before storage wherever possible. Routine successful requests are not kept unless they relate to meaningful operational, security, payment, authentication, or administrative activity.

Security-related logs are kept for up to 1 year to prevent abuse, enforce rate limits, investigate suspicious activity, respond to violations, and protect the platform. They may include event type, severity, timestamp, requesting IP address, account identifier when available, sanitized request path, user-agent information, rate-limit activity, abuse indicators, blacklist events, and short reason text. Security logs are not intended to store the raw search subject or a user's search history.

Basic usage records are kept for up to 1 year and may include account-related identifiers, general activity timestamps, limited usage metrics, IP addresses, and other connection or account metadata needed to run the service, prevent abuse, support account issues, and handle payment or dispute matters. Usage records are not intended to store a permanent search history.

What We Do Not Store

OSINTNova and BosINT are not an archive of your Discord, Google, or other linked accounts. We only work with the limited profile and account signals those providers share so we can recognize you, apply your plan, and keep the Services running, commonly items such as display name and email. We do not ingest unrelated profile or social content from your provider beyond what sign-in requires, and we do not copy provider credentials into our logs or audit trails as part of routine retention.

The time-bound categories earlier in this section describe the outer edge of what may exist on our side: brief report payloads, routine operational telemetry, security signals, and usage summaries, each with its own ceiling. What we do not do is keep an open-ended, queryable record of everything you have ever looked up tied to your identity. When those windows close, the practical link between your account and a given lookup is gone, subject to the narrow permanent exceptions below.

Nothing in these Terms or in a removal request gives us control over the wider internet. Publishers, registries, blockchains, search engines, archives, and other third parties keep their own copies; opting out here does not delete the open web.

If you want us to adjust OSINTNova-held operational data (for example command-limit counters), contact [email protected] with the minimum needed to match you to the correct Discord- or Google-linked profile. Please do not send card numbers, private keys, or unrelated sensitive material. Where law, security, billing, disputes, taxes, or abuse prevention require a stub record, a small amount of information may still need to stay on file.

What We Store Permanently

When these Terms say we keep something permanently, that means for as long as the Services exist.

Verified abuse reports stay on file for audit and enforcement, including decisions to suspend or ban accounts.

For actors our team has confirmed as malicious, whether attacking the infrastructure or breaking the law in connection with the Services, we keep supporting metadata (which may include IP addresses) on the same long-term basis.

One-Time Access Plans depend on stable identifiers so we can honor access; we retain what we need for that purpose until a One-Time Access Plan holder asks us to remove it through a channel we can verify.

Blacklist and Data Removal

Blacklist requests ask us to block a subject identifier from OSINTNova and BosINT search where technically and legally feasible. Website owners and organizations may submit crawl opt-out requests for sites, domains, or other hosted resources they control through the Blacklist page. A request does not prove ownership of data, guarantee removal from every tool, or erase third-party sources. We may reject incomplete, abusive, fraudulent, excessive, impossible, unverifiable, or bad-faith requests. See the Blacklist page for the current process and submission limits.

7. Subscriptions, Billing, and Access

OSINTNova Pro may be offered through monthly, yearly, One-Time Access, promotional, manual, crypto, Patreon, PayPal, Cash App, or other supported plans. Current public prices may include $7.99/month, $79.99/year, and $249.99 One-Time Access, but prices, plan names, features, quotas, payment methods, availability, promotions, and renewal options may change. The checkout screen or plan page controls the offer you accept at the time of purchase.

Before purchasing, review the price, billing interval, renewal status, included services, payment method, cancellation method, and any manual verification requirements. Monthly and yearly plans renew according to the payment processor or subscription platform you use unless canceled through that processor or platform. Cash App, cryptocurrency, and other manual payments may not renew automatically unless expressly stated at checkout.

You authorize the applicable processor, wallet, subscription platform, or payment service to charge your selected payment method for the plan you choose, including recurring charges where applicable, taxes, processing fees, currency conversion, network fees, or other amounts disclosed by that provider. You represent that you are authorized to use the payment method you provide.

Access and Manual Perks

Paid access may include OSINTNova Platform Pro, BosINT Discord Bot Pro, OwlURL premium features, Discord roles, API access, higher limits, priority support, and other plan-specific benefits. Some perks are automated; others may require manual review or activation and can take up to 48 hours or longer during outages, fraud review, holidays, or staffing constraints.

Refunds, Chargebacks, and Cancellations

Except where required by law, processor rules, or a specific written offer, fees are non-refundable once access is delivered or manual activation begins. Cancel recurring subscriptions through the payment processor or subscription platform you used. Access normally continues until the end of the paid period unless your access is terminated for violation of these Terms, fraud, chargeback abuse, payment failure, or risk review.

Chargebacks, payment reversals, fraudulent payments, or processor disputes may result in immediate suspension or removal of Pro access. Billing records are controlled by the processor or platform that handled the payment.

One-Time Access Plan

One-Time Access means a one-time purchase for access for as long as OSINTNova operates. It is not a guarantee that the business or service will operate indefinitely.

8. Platform Changes, Limits, and Termination

We may modify, replace, suspend, limit, throttle, discontinue, or remove any feature, plan, API, command, data source, model, report format, integration, documentation, quota, payment method, price, or service area at any time for security, legal, abuse-prevention, operational, cost, provider, licensing, accuracy, product, or business reasons.

We may update these Terms from time to time. The current version will be posted on this page with a last-updated date. Updated Terms take effect when posted unless a later date is stated. Your continued use of the Services after updated Terms take effect means you accept the updated Terms.

If you do not agree, stop using the Services and cancel any recurring subscription through your payment processor. We may suspend, restrict, disable, terminate, or refuse service to any user, Discord server, API key, session, subscription, payment method, or linked account with or without notice if continued access creates legal, security, payment, abuse, fraud, sanctions, operational, or third-party risk.

Examples

Reasons for changes or enforcement may include:

• Terms violations, abuse, fraud, chargebacks, sanctions concerns, or law enforcement concerns
• Third-party provider changes, source restrictions, model changes, security incidents, or infrastructure cost changes

Survival

After termination, your right to use the Services ends immediately. Sections that reasonably need to continue after termination still apply, including payment obligations, intellectual property rules, important disclaimers, dispute handling, and general terms.

9. Security Research and Penetration Testing

We permit good-faith vulnerability research against OSINTNova-owned websites and services, including osintnova.com and related domains, only under this section. This permission does not authorize testing of third-party services, payment processors, Discord, Google, users, customers, data sources, or systems we do not own or control.

10. Intellectual Property and Copyright

The Services, including software, interfaces, designs, text, logos, trademarks, documentation, workflows, prompts, models, report formats, databases, data compilations, algorithms, APIs, and other materials we provide, are owned by OSINTNova, Avenyx, or our licensors and are protected by intellectual property and other laws. We grant you a limited, personal, revocable, non-exclusive, non-transferable, non-sublicensable right to access and use the Services as permitted by these Terms.

You may not copy, sell, resell, rent, sublicense, publish, mirror, scrape, frame, modify, reverse engineer, build a competing dataset from, or create derivative services from the Services except where expressly permitted in writing or by applicable law that cannot be waived.

DMCA and Copyright Complaints

If you believe material available through the Services infringes your copyright, send a notice to [email protected] with: your physical or electronic signature; identification of the copyrighted work; identification of the material and where it appears; your contact information; a statement that you have a good-faith belief the use is not authorized by the owner, agent, or law; and a statement under penalty of perjury that the information is accurate and you are the copyright owner or authorized to act for the owner.

We may remove or disable access to allegedly infringing material and may terminate repeat infringers where appropriate. Misrepresentations in a copyright notice or counter-notice may create liability.

11. Important Disclaimers

The Services are provided as available. We work to keep OSINTNova useful, secure, and accurate, but we cannot promise that every tool, source, report, link, model, or output will always be available, complete, current, or correct.

OSINT and AI-assisted results require human review. You are responsible for checking important information before relying on it, publishing it, sharing it, or using it in an investigation, report, business decision, legal matter, or safety-sensitive situation.

We are not responsible for third-party websites, public records, social platforms, search engines, APIs, payment processors, Discord, Google, data sources, blockchain networks, or other outside services. Their content, availability, rules, accuracy, and actions are outside our control.

Nothing in the Services is legal, financial, employment, credit, insurance, medical, or professional advice. You are responsible for deciding whether your use is lawful and appropriate for your situation.

12. Questions and Disputes

If something goes wrong, contact us first at [email protected]. Include your linked account identifier, the feature involved, the date of the issue, and what you want us to review. We will make a reasonable effort to investigate and respond.

Most issues should be handled through support, the relevant payment processor, or the platform where the issue happened. For example, PayPal, Patreon, Cash App, Discord, Google, and blockchain networks each control their own accounts, payments, disputes, and records.

If a dispute cannot be resolved informally, you and OSINTNova may use any court or dispute process that is available under applicable law. Nothing in these Terms takes away rights that cannot legally be waived.

13. General Terms

Export, Sanctions, and Restricted Parties

You may not use, export, re-export, transfer, or provide access to the Services in violation of U.S. export controls, sanctions, embargoes, or restricted-party rules. You represent that you are not located in, organized under the laws of, ordinarily resident in, or acting on behalf of a sanctioned jurisdiction or restricted party where access would be prohibited.

Third-Party Services

The Services may depend on third-party platforms, APIs, models, payment processors, hosting providers, data sources, blockchains, Discord, Google, PayPal, Patreon, Cash App, and other services. We are not responsible for third-party availability, terms, moderation, billing decisions, outages, errors, data, or actions.

Assignment and Severability

You may not assign these Terms or your access without our written consent. We may assign these Terms in connection with a merger, acquisition, reorganization, asset sale, financing, change of control, or transfer of the Services. If any provision is found unenforceable, the remaining provisions will remain in effect, and the unenforceable provision will be modified to the minimum extent necessary to make it enforceable.

No Waiver and Entire Agreement

Our failure to enforce a provision is not a waiver. These Terms, together with any feature-specific terms and checkout disclosures, are the entire agreement between you and OSINTNova regarding the Services and replace prior or inconsistent understandings about the Services.

Contact

For questions or support, email [email protected]. Please do not send private keys, payment credentials, or other sensitive information you do not need to share.