Terms of Use

1.1. These Terms of Use set out the terms and conditions governing access to and use of Altro, unified security posture management platform, which enables the Clients to manage their internal cyber security operations or to monitor and track the cyber security needs of their customers in the course of providing managed cyber security services.

1.2. The following capitalized terms used herein shall have the following meanings:

1.2.1. “Extendity” means Extendity, UAB, a private limited liability company established in the Republic of Lithuania, with the legal entity code 306011750 and registered address at Kareivių str. 11B, LT-09133 Vilnius, who administers the Platform.
1.2.2. “Client” means a natural or legal person registered on the Platform that uses the Platform for their internal cyber security operations or uses the Platform as a tool to track and monitor the cyber security needs of their customers in their activities as MSSP. The Client is responsible for all payments related to their subscription and for ensuring compliance with these T&C.
1.2.3. “Fee” means the amount of money payable by the Client to Extendity every month for the use of the Platform in accordance with the selected Plan.
1.2.4. “MSSP” means the Clients who operate as managed security service providers, utilizing the Platform to oversee and address the cyber security needs of their customers.
1.2.5. “Parties” mean Extendity and the Client collectively. “Party” means Extendity or the Client individually.
1.2.6. “Plan” means any subscription plan offered on the Platform, through which Clients are entitled to a specified allotment of User accounts and defined set of services, features, or content as specified therein. Full details of the Plans offered to Clients and their prices are available on the Platform and may be updated from time to time.
1.2.7. “Platform” means Altro Platform which helps to identify and assess potential security risks, vulnerabilities, and threats to Client’s or their customers’ cloud infrastructure, and provides recommendations for improving security, administered by Extendity and available at https://altrosecurity.com. The scope of services and functionalities available through the Platform are provided directly on the Platform. As the Platform is continuously evolving, Clients are encouraged to regularly check the Platform for updates, new features, and changes to available services.
1.2.8. “T&C” means these Terms of Use, including all amendments, modifications, and annexes, which set forth the terms and conditions governing the use of the Platform.
1.2.9. “User” – a natural person who registers on the Platform and acts on behalf of a Client. Users are granted access to the Platform based on the role assigned to them and may include:
- Owner – the User who registers the Client on the Platform and is deemed to have the authority to act on behalf of the Client in all matters relating to the use of the Platform. The Owner assumes full responsibility for the Client’s use of the Platform and may assign roles and permissions to other Users.
- Administrator – a User appointed by the Owner to manage the Client’s environment within the Platform. Administrators have rights to manage settings, invite and manage other Users, and assign tasks. The Owner and the Administrator may be the same person.
- User – a User is granted limited rights by the Administrator or Owner, typically to perform specific tasks assigned within the Platform, without administrative privileges.
Unless explicitly stated otherwise, all of the above roles are collectively referred to as „Users“ in these T&C.

1.3. These T&C must be adhered to by every Client, their representatives, and any Users assigned to the Client’s account. A Client is registered on the Platform by a User acting in the role of Owner. Each Client may only have one Owner account. Any individual creating an account on behalf of the Client is deemed to be an authorized representative of the Client. By accepting these T&C, such individual confirms their authority to act on the Client’s behalf, and such acceptance shall be considered binding upon the Client. Extendity will not be responsible for verifying whether such a person is duly authorized to represent the Client and shall not be held liable for any loss, damage, or consequence arising from registration or the use of the Platform by a person lacking proper authorization.

1.4. In addition to these T&C, the provisions of the laws of the Republic of Lithuania, the Privacy Policy, Data Processing Addendum available on the Platform, and the provisions of the additional agreements concluded by and between the Client and Extendity, if any, apply to the governance of the relationship between the Client and Extendity.

1.5. The usage of the Platform, as defined by these T&C, includes any action to or interaction with the Platform via Internet connection, as well as browsing the Platform without an active connection.

1.6. By accessing and using the Platform, the Client and all associated Users acknowledge that they have read, understood, and agreed to these T&C. The Client is responsible for ensuring that all of its Users comply with these T&C. Both the Client and its Users are bound by these T&C and commit to adhering to them. If the Client or any User disagrees with any part of the T&C or fails to understand them, they are not permitted to use the Platform.

2.1. To access and use the Platform, the Client must be registered on the Platform by a User acting in the role of the Owner. Each Client may only have one Owner account. The Owner is deemed to have the authority to act on behalf of the Client in all matters related to the use of the Platform.

2.2. When registering the Client, the Owner must complete the registration form available on the Platform and provide accurate and complete information, including but not limited to: full name, company name, address, email address, payment details, and a secure password. The Owner is solely responsible for maintaining the confidentiality and security of its login credentials and for all activities carried out under its account. The Owner must also indicate whether the Platform will be used for internal cyber security operations or in the capacity of a MSSP. The usage of the Platform for both purposes depending on the project is also available.

2.3. By registering on the Platform, the Client confirms and warrants that:

2.4. Upon successful registration, the Owner may assign additional roles within the Client’s account:

2.5. All Users must create individual accounts linked to the Client’s account and are, in addition to the Client, personally responsible for complying with these T&C.

2.6. Extendity reserves the right to verify the information provided during the registration process and has the right to request additional information, clarifications or documents. While Extendity may conduct such verifications, full responsibility for the accuracy, completeness, and validity of the submitted information remains solely with the person providing it.

2.7. Upon successful registration and acceptance of these T&C and the Privacy Policy, Extendity will confirm the creation of the Client’s account by sending a confirmation email to the address provided by the Client. This email address shall also be used for all subscription-related and administrative communications.

2.8. The Client and all Users must not disclose, share, or transfer their login credentials to any third party without Extendity’s prior written consent. Each User is individually responsible for maintaining the confidentiality and security of their own account credentials. In the event of loss, unauthorized access, or suspicion thereof, the Client or the affected User must immediately notify Extendity.

2.9. The Client is fully responsible for all activities carried out under all its account, including those performed by its Users.

2.10. If the Client or any of its Users provide incorrect, incomplete, inaccurate or outdated information, or fail to update such information in a timely manner, or if the Client or any of its Users violate these T&C, Extendity reserves the right, without prior notice, to take any of the following actions, as relevant:

2.11. In the event of any of the above actions, the relevant procedures set out in Section 6 of these T&C shall apply. Also, Extendity shall not be liable to the Client, any User or any third party for any resulting interruption, suspension, or loss of access to the services provided via the Platform.

2.12. Extendity retains the sole discretion to refuse or revoke any Client’s registration or User’s access to the Platform at any time, without obligation to provide justification.

3.1. The Clients are granted a limited, non-exclusive, non-transferable, and revocable license to access and use the Platform in accordance with these T&C and their active subscription Plan. This right does not grant the Client any ownership or intellectual property rights to the Platform or its content.

3.2. The Client is solely responsible for obtaining, maintaining, and covering the costs of all necessary equipment, devices, software, and a stable Internet connection required to access and use the Platform. Extendity shall not be liable for any limitations, errors, or interruptions in access caused by the Client’s hardware, software, network configuration, or third-party service providers.

3.3. The Clients shall not:

3.4. Any attempt to perform or enable the prohibited actions listed above, or any other unlawful actions committed through or in connection with the use of the Platform, shall constitute a material breach of these T&C and may result in immediate suspension or termination of access to the Platform, without prejudice to Extendity’s right to seek compensation for damages or other legal remedies.

3.5. Clients are encouraged to promptly report any service incidents or technical issues affecting access to or use of the Platform by contacting Extendity via the designated support channel or email indicated on the website of the Platform. The Client shall provide sufficient information (e.g., description, time of occurrence, screenshots if applicable) to allow effective troubleshooting. Extendity will make reasonable efforts to investigate and resolve reported incidents. The response time and priority will depend on the incident’s impact, the number of Clients affected, and the availability of a temporary workaround.

4.1. Registered Clients may use a selected range of services at no cost through a free preview or a time limited free trial, or subscribe to a paid Plan to access an extended set of features and functionalities.

4.2. Clients may subscribe to a selected Plan by logging into their account, providing valid payment details, and selecting the preferred payment method. By subscribing, the Client confirms that they have reviewed and accepted the scope of services included in the chosen Plan and the applicable Plan Fee.

4.3. Services that are included into the particular Plan may be subject to usage limits and restrictions, which may be specified in the description of the Plan including, without limitation, the locations at or through which you can use the Platform, usage volumes, etc. By subscribing the certain Plan the Client agrees to use the services included into the Plan within the usage limits communicated. It is the Client’s responsibility to ensure that they do not exceed those limits and restrictions. Additional fees in form of overage charges will apply if the Client exceeds any usage limits.

4.4. The Clients can change their subscribed Plan at any time by submitting a request to Extendity. If the Plan is upgraded to a more expensive option, the Client is required to pay the prorated difference for the remaining days of the current month. If the Plan is downgraded to a less expensive option, the adjustment in billing will take effect at the start of the following month. The Client may continue utilizing the benefits of the current Plan until the end of the month.

4.5. Extendity commits to change the Plan within 3 (three) business days after such request is submitted.

4.6. Extendity reserves the right to modify the Fees and/or scope of the Plans at any time. Should there be any changes in pricing or scope of services, Extendity will provide the Clients with a minimum of 2 (two) months’ advance notice before the changes take effect. During this notice period, Clients may cease using the Platform or switch to a different Plan at any time. If the Client continues to use the Platform after the changes take effect, it will be considered as an acceptance of the new terms.

4.7. The Fee for each Plan must be paid in full by the 15 (fifteenth) day of each month. Extendity will automatically debit the Fee from the Client’s designated account.

OR

4.8. Extendity shall issue and deliver an invoice for the Plan selected by the Client either by email or through the Platform no later than the 10 (tenth) day of each month. Upon receipt of the invoice, the Client is obligated to pay the bill within 15 (fifteen) days.

4.9. All paid Fees are non-refundable. The Client can cancel their Plan subscription at any time by contacting Extendity via the contact information provided below. Cancellation will take effect at the end of the current paid period.

4.10. In addition to the remedies available under Clause 5.3. of these T&C, Extendity reserves the right to immediately suspend the Client’s access to the Platform without prior notice if the Client fails to make any payment due within 10 (ten) days after Extendity has provided the Client with notice of such failure. Any suspension of the access to the Platform under this section shall not relieve the Clients of their payment obligations under these T&C. Extendity will not be liable to the Client nor to any third party for any suspension or service interruption resulting from Client’s non-payment of Fees.

5.1. The Platform is provided on an “as is” and “as available” basis. Extendity acts solely as the provider of technological tools that enable Clients to collect, process, and analyze cyber security related information according to their own parameters and objectives. As the Platform aggregates data from publicly available and licensed third-party sources using automated and AI-powered processes, Extendity does not warrant the accuracy, completeness, legality, or reliability of the information accessible through the Platform. Extendity expressly disclaims any liability for errors or omissions regarding the Platform’s content or operation, or any issues arising from the use or inability to use the Platform, including but not limited to interruptions, delays, or operational failures. Furthermore, Extendity takes no responsibility if the Client or the Client’s customers experience a cyber security incident, even while using the Platform. The Platform is designed to help Clients manage some of their cyber security concerns more conveniently and effectively; however, Extendity cannot guarantee complete cyber security, as it depends on various factors beyond its control. Extendity, therefore, is not responsible for any direct, indirect, special, incidental, consequential, or punitive damages or losses, whether caused in contract, tort, or otherwise, arising out of or in connection with the use of the Platform. The Clients agree to use the Platform at their own risk and assume full responsibility for any outcomes of their use. Furthermore, the Clients confirm and acknowledge that the use of the services provided by Extendity via the Platform does not constitute any guarantee of a particular outcome or otherwise make Extendity responsible in any way for the success or failure of any decision or conclusion made by the Clients due to the use of the Platform.

5.2. In the event of any breach by the Client or any of its Users of any representations and warranties made by them to Extendity, and in the event of any failure to comply with the obligations assumed under these T&C, the Client shall indemnify, defend, and hold Extendity harmless from and against any losses, damages, liabilities, claims, or reasonable legal expenses arising out of or in connection with such actions. Extendity, at the same time, shall have the right to suspend or cancel Client’s account or any associated User accounts.

5.3. If the Client fails to pay the Fee to Extendity in a timely and proper manner, the Client shall pay late interest on the overdue amount at a rate of 0.02 (zero point zero two) % per day for each day of delay until full payment is made, without prejudice to any other remedies available to Extendity under these T&C.

5.4. Extendity strives to ensure that the Platform is accessible 24 (twenty-four) hours a day, 7 (seven) days a week. However, uninterrupted availability cannot be guaranteed, as service interruptions may occur due to scheduled maintenance, technical issues, force majeure events, or other unforeseen circumstances. Extendity disclaims any liability for such interruptions but will use reasonable efforts to minimize their duration and impact.

5.5. The Client acknowledges and agrees that the Platform processes and refreshes Client data at certain intervals depending on the Plan. Accordingly, data displayed on the Platform may not reflect real-time information. Extendity does not warrant the continuous or immediate accuracy, completeness, or availability of data between refresh cycles. The Client remains solely responsible for verifying any time-sensitive information and for decisions made based on data displayed on the Platform. To the maximum extent permitted by law, Extendity shall not be liable for any loss, damage, or claims arising from data delays, temporary inaccuracies, or discrepancies attributable to the Platform’s refresh cycle.

5.6. Analyses, insights, reports, recommendations or any other content generated on the Platform through automated processing or AI functionalities are provided solely for informational purposes. They do not constitute professional advice, nor do they guarantee any specific business, security outcome. The Clients understand that all data interpretations and business decisions based on the information received via the Platform are made at their own discretion and risk.

5.7. The Platform may not function properly if misused, improperly configured, or used with inadequate hardware, software, or Internet connection. Extendity shall not be liable for any issues arising from such circumstances or from any unauthorized alterations or interference with the Platform.

5.8. Extendity shall not be liable for any data loss, unavailability, or corruption caused by factors beyond its reasonable control, including but not limited to infrastructure failures, third-party service interruptions, external system changes, or the Client’s own actions or omissions.

5.9. In no event shall Extendity’s total liability arising from or in connection with the use of the Platform exceed the total amount of the Fees paid by the Client during the 1 (one) month preceding the event giving rise to the claim.

5.10. Neither Party shall be liable for any failure or delay in performing its obligations under these T&C if such failure or delay results from circumstances beyond its reasonable control, including natural disasters, wars, cyberattacks, government restrictions, or failures of third-party service providers.

6.1. Upon cancelation or suspension of the Client’s account, all associated User accounts linked to that Client will also be cancelled or suspended automatically. Users will no longer have access to the Platform unless the Client’s account is reactivated.

6.2. Extendity reserves the right to suspend or cancel a Client’s account or any associated User account at any time if the Client or any of its Users:

6.3. In the event of suspension or cancellation, Extendity will inform the Client via email or through a notification on the Client’s account on the Platform, unless provided otherwise in these T&C. If the issue relates to a specific User, Extendity may inform the Client and/or the affected User accordingly. Alternatively, instead of suspending or cancelling the Client’s or a User’s entire account, Extendity reserves the right to restrict, suspend, or terminate access to specific features, functionalities, or content on the Platform for the Client or any individual User.

6.4. To request reactivation of an account (Client or User) that has been suspended or cancelled, the Client must submit a written reinstatement request to Extendity. Extendity will review the request and notify the Client of its decision to approve or deny reactivation at its sole discretion.

6.5. All obligations, rights, and liabilities incurred between the Parties prior to the suspension or cancellation of the Client’s or associated Users’ accounts shall survive and remain in effect following such action, to the extent permitted by law.

6.6. Following the suspension or cancellation of the Client’s account, Extendity will retain the Client’s data, including data associated with its Users, for a period of 90 (ninety) days, unless a longer retention period is required by applicable law. During this period, the Client may request to recover or export its data by contacting Extendity. Upon the expiry of the retention period, if the Client’s account is not reactivated, all Client data, including User data, will be permanently deleted from the Platform and Extendity’s systems, unless otherwise agreed in writing. Extendity shall not be liable for any loss of data resulting from the deletion of data in accordance with this Clause.

7.1. All intellectual property rights to the Platform and its components, including but not limited to the Platform itself, its structure, design, software code, underlying technology, documentation, and any original content created by Extendity (including copyrights, database rights, trademarks, know-how, trade secrets and other intellectual property rights), belong to Extendity or are lawfully licensed by Extendity from third parties. All rights to the Platform and the works on it are reserved. No part of the Platform may be copied, reproduced, made publicly available or distributed without the prior written consent of Extendity, except for sharing the information gathered through the use of the Platform with the Client’s customers, when Client acts as MSSP.

7.2. All trademarks displayed on the Platform are the property of Extendity or are lawfully used by Extendity, except for those trademarks uploaded by the Clients of the Platform.

7.3. By submitting any content to the Platform, the Client acknowledges and warrants to Extendity that they have all rights, permissions, consents and/or licenses to perform those actions with the content, which the Client performs, including the right to use it. Additionally, any feedback on the operations of the Platform, upon submission to Extendity, becomes the property of Extendity, and the Client may not make any claims regarding such feedback. Extendity may freely use, implement, or commercialize such feedback without obligation to compensate the Client.

7.4 As between the Client and Extendity, to the extent permitted by applicable law, the Client (or its customer): (a) retains all ownership rights in Client’s data; and (b) owns all content generated using Client’s data (reports, insights, outputs, etc.). Extendity will only use Client’s data and content as necessary to provide Client with the services via the Platform, comply with applicable law, enforce Extendity policies, prevent abuse. Extendity will not use Client’s data and content to develop or improve the services provided via the Platform, unless the Client explicitly agrees to such use.

8.1. The Client is solely responsible for ensuring that any personal data they process while using the Platform is collected and handled lawfully and does not infringe the rights or legitimate interests of data subjects or third parties. The Client assumes all risks related to the processing of such data.

8.2. Each Client’s data within the Platform is stored and processed in a logically separated environment to ensure confidentiality and data isolation. The Clients cannot access, view, or retrieve data belonging to other Clients. Extendity implements appropriate technical and organizational measures to maintain the security and segregation of Client data at all times.

8.3. Extendity may act either as a data (sub)processor or a data controller depending on the nature of the personal data it processes in connection with the Platform:

8.3.1. When processing personal data on behalf of the Client or its customers, Extendity acts as a data processor or a sub-processor, respectively.
8.3.2. When processing data related to the administration, development, and support of the Platform (e.g., account details, billing, usage logs, etc.) and for other independent purposes, Extendity acts as a data controller.

8.4. Where Extendity acts as a data processor or sub-processor, the processing of personal data shall be governed by the Data Processing Addendum, which is incorporated into these T&C by reference and forms an integral part of the T&C.

8.5. Where Extendity acts as a data controller, it shall process personal data in accordance with applicable data protection laws and its published Privacy Policy, which is available on the Platform.

9.1. Extendity shall send all notices and otherwise communicate using email addresses or telephone numbers provided in the Client’s registration form or in any other way by which the Client may be reached. All communication related to the use of the Platform shall be made electronically unless otherwise required by law.

9.2. The Clients shall send all notices and inquiries and otherwise contact Extendity by email: info@extendity.tech.

9.3. The Parties agree that a record of an email or system log showing dispatch to the Client’s registered contact address shall constitute sufficient proof of notice.

10.1. As Extendity continuously improves and develops the Platform, it reserves the right to amend these T&C unilaterally at any time to reflect service updates, regulatory changes, or improvements to the services.

10.2. Extendity will notify the Client of any such amendments to the T&C by publishing the updated version of the T&C on the Platform and/or through the Client’s account.

10.3. The amended T&C shall take effect upon publication on the Platform, unless a later effective date is specified. By continuing to use the Platform after the amendments take effect, the Client is deemed to have read, understood, and accepted the updated T&C. If the Client does not agree to the amended T&C, the Client must discontinue the use of the Platform before the effective date of the amendments.

10.4. The use of the Platform before the amendment of the T&C shall be governed by T&C in force at that time.

11.1. The Law of the Republic of Lithuania shall apply to the T&C.

11.2. Any disputes arising out of or relating to these T&C shall first be resolved through good-faith negotiations. If the Parties fail to reach an agreement within 30 (thirty) days from the initiation of such negotiations, such dispute shall be finally settled by the courts of the Republic of Lithuania, with jurisdiction determined by the location of Extendity’s registered office.

11.3. If any provision of these T&C is contrary to the law or becomes invalid in whole or in part for any reason, it shall not invalidate the remaining provisions of the T&C. Such provision will be separated from the remaining T&C, which will then continue in full force and will be implemented to the fullest extent permitted by law.

11.4. Extendity may assign or transfer its rights and obligations under these T&C to an affiliated entity or successor in interest without the Client’s prior consent. The Client may not assign its rights or obligations without Extendity’s prior written consent.

11.5. These T&C constitute the entire agreement between the Parties regarding the use of the Platform and supersede any prior understandings, proposals, or agreements, whether oral or written.

11.6. These T&C shall enter into force from the moment the Client confirms the acceptance of T&C, and shall remain in effect until the end of the provision of services to the Client. Any provisions which by their nature are intended to survive termination, including those relating to payments, intellectual property, and limitation of liability, shall further remain in force.