Terms of Service
Entity: IQGroup Adam Buhl, NIP: 9910389442, ul. Luboszycka 36/1, 45-128 Opole, Poland ("IQShield", "Service Provider", "we")
1. Definitions
| Term | Meaning |
|---|---|
| Service | The bot protection service "IQShield" provided electronically, including a Proof-of-Work based CAPTCHA system, behavioral analysis, and token verification |
| Client | An entity (business or individual conducting business activity) using the Service |
| End User | A person visiting a Protected Site whose browser solves an IQShield challenge |
| Protected Site | The Client's website on which the IQShield widget is integrated |
| Widget | JavaScript code provided by IQShield, integrated on the Protected Site |
| Site Key | A unique identifier assigned to a Protected Site |
| Secret Key | An API key used for server-side token verification |
| Challenge | A computational task (Proof-of-Work) generated by the IQShield server |
| Token | A single-use, HMAC-SHA256 signed token confirming successful challenge completion |
| Dashboard | The administration panel available at dashboard.iqshield.io |
| Plan | The service package selected by the Client (Free, Pro, Business, Enterprise) |
| Request Limit | The maximum number of challenges/verifications per calendar month, depending on the Plan |
2. Subject and scope of the Service
2.1. IQShield provides a service for protecting forms and web pages against automated programs (bots) using:
- Proof-of-Work (PoW) — a computational challenge solved by the End User's browser
- Behavioral scoring — analysis of interaction signals (mouse movements, keyboard, scroll) and browser environment
- Token verification — single-use HMAC-SHA256 tokens with TTL
2.2. The Service is intended exclusively for businesses (B2B). Consumers are not eligible to be Clients.
2.3. IQShield does not guarantee complete elimination of bot traffic. The Service makes automated use of sites more difficult, but cannot entirely prevent it.
3. Agreement and registration
3.1. The agreement is concluded upon:
- (a) completion of the registration process in the Dashboard and acceptance of these Terms, or
- (b) signing a separate order form (Enterprise).
3.2. The Client agrees to provide accurate identification and contact information.
3.3. The Client is responsible for the security of their API keys (Site Key, Secret Key). The Secret Key must never be exposed on the client side (frontend).
4. Plans and pricing
4.1. Current plans and prices are available at iqshield.io/pricing. Prices are listed in PLN gross (including VAT).
| Plan | Request limit/mo | Domains | Price/mo |
|---|---|---|---|
| Free | 10,000 | 1 | 0 PLN |
| Pro | 100,000 | 5 | 29 PLN |
| Business | 1,000,000 | unlimited | 99 PLN |
| Enterprise | custom | unlimited | custom pricing |
4.2. When the request limit is exceeded in a given month:
- Free Plan: challenges stop being generated (soft-fail — forms work but without protection)
- Paid Plans: overage fees apply according to the price list, unless the Client has configured a hard limit in the Dashboard
4.3. Upgrading to a higher plan is possible at any time (with prorated billing). Downgrading takes effect from the next billing period.
4.4. The free Free Plan may be offered indefinitely, but IQShield reserves the right to modify it with 30 days' notice.
5. Payments
5.1. Payments for paid plans are charged in advance, monthly or annually (with a discount), via Stripe / Paddle.
5.2. VAT invoices are issued automatically and available in the Dashboard.
5.3. If payment is overdue by more than 14 days, IQShield may:
- (a) downgrade the Plan to Free, or
- (b) suspend the Service after sending an email notice with a 7-day deadline.
5.4. Net prices are increased by the applicable VAT rate.
6. Client obligations
6.1. The Client agrees to:
- (a) use the Service in compliance with the law and these Terms
- (b) inform End Users about the use of IQShield in the Protected Site's privacy policy
- (c) not use the Service to protect critical infrastructure (power plants, medical systems, defense)
- (d) not attempt reverse engineering, decompilation, or circumvention of protective mechanisms
- (e) use the Service exclusively through the provided Widget and API, in accordance with the documentation
6.2. The Client may not share their API keys with third parties without IQShield's consent. Protecting sites of affiliated entities requires separate arrangement.
6.3. The Client is responsible for GDPR compliance regarding their Protected Site, including properly informing End Users.
7. Availability and SLA
7.1. IQShield strives to maintain Server Services availability at 99.9% monthly (measured at the CDN level).
7.2. Planned downtime (maintenance) is not included in SLA calculations, provided the Client is notified 48 hours in advance.
7.3. In case of SLA breach, the Client may request a credit:
- 99.0%–99.9%: 10% of monthly fee
- 95.0%–99.0%: 25% of monthly fee
- < 95.0%: 50% of monthly fee
7.4. Credits do not cover: outages caused by force majeure, Client-side failures, DDoS attacks, or third-party network issues.
7.5. The Free Plan is not covered by the SLA.
8. Liability
8.1. IQShield is liable for damages caused to the Client through willful misconduct or gross negligence without limitation.
8.2. In cases of slight negligence, IQShield's liability is limited to:
- (a) damages arising from breach of material contractual obligations
- (b) an amount equal to 12 times the monthly fee for the Client's Plan, not exceeding 10,000 PLN
8.3. IQShield is not liable for:
- loss of profit, data, or reputation of the Client
- actions of End Users
- damages resulting from improper Widget integration by the Client
- bots bypassing the protection system (see 2.3)
8.4. The above limitations do not apply to liability for personal injury.
9. Duration and termination
9.1. The agreement for the Free Plan is concluded for an indefinite period and may be terminated by either party at any time.
9.2. Agreements for paid Plans:
- Base period: 1 month (or 12 months for annual plans)
- Automatic renewal for subsequent periods, unless the Client terminates before the end of the current period
- Notice period: 7 days before the end of the billing period
9.3. Either party may terminate the agreement with immediate effect in case of material breach by the other party, after an unsuccessful request to remedy the breach within 14 days.
9.4. IQShield may terminate the agreement with immediate effect in case of:
- (a) use of the Service in violation of the law
- (b) attempts to circumvent or disrupt the Service
- (c) abuse of the Service (e.g., generating artificial traffic)
9.5. Upon termination:
- The Client loses access to the Dashboard and API keys
- Client data is deleted within 30 days (unless retention is required by law)
- End User data (verification logs) is deleted automatically in accordance with the retention policy (see Privacy Policy)
10. Modifications to the Service and Terms
10.1. IQShield may modify the Service (e.g., new features, changes to scoring algorithms, deprecation of outdated features) provided that such changes do not materially adversely affect the Client.
10.2. IQShield will notify Clients of material changes to these Terms by email with 30 days' notice. Failure to object before the effective date of the changes constitutes acceptance.
10.3. If the Client objects to the changes, the Client may terminate the agreement effective on the date the changes take effect.
11. Intellectual property
11.1. All rights to the Service, Widget, API, documentation, and IQShield trademarks remain the property of the Service Provider.
11.2. The Client receives a non-exclusive, non-transferable license to use the Widget solely for the purpose of integration with Protected Sites, for the duration of the agreement.
11.3. The license does not include the right to modify, decompile, sublicense, or distribute the Widget.
12. Confidentiality
12.1. Each party agrees to maintain the confidentiality of information obtained from the other party in connection with the performance of the agreement, unless:
- (a) the information is publicly available
- (b) disclosure is required by law or a public authority
- (c) the party has given written consent to disclosure
12.2. The Secret Key constitutes confidential information of IQShield made available to the Client.
13. Final provisions
13.1. The governing law is Polish law.
13.2. Disputes shall be resolved by the court having jurisdiction over the Service Provider's registered office.
13.3. If any provision of these Terms is found to be invalid, the remaining provisions shall remain in force.
13.4. IQShield may transfer the rights and obligations arising from the agreement to a third party (e.g., in case of a change in legal form), notifying the Client with 30 days' notice.
13.5. Matters not covered by these Terms are governed by the Polish Civil Code, the Act on Provision of Electronic Services, and the GDPR.
Contact:
IQGroup Adam Buhl
Email: legal@iqshield.io
Address: ul. Luboszycka 36/1, 45-128 Opole, Poland
NIP: 9910389442