Terms & Conditions

Service provider: Prime Modality Teknoloji A.Ş. ("Primod", "we", "us") Registered Address: Orhangazi Mahallesi Teknopark Caddesi No: 1/123 Merkez Düzce Phone: +90 (537) 749-8189 E-mail: support@primod.io Website: https://primod.io

Customer: the business or organisation that creates a Primod account, accepts these Terms, or signs an order form ("Customer", "you").

These Terms & Conditions ("Terms") govern access to and use of the Primod service. By creating an account, installing the Primod sensor, or using the Service, you accept these Terms on behalf of the Customer. If you accept for an organisation, you confirm that you have authority to bind it.

The Service is provided only to businesses and other organisations for use in their trade, business or profession. It is not offered or sold to consumers. By accepting these Terms you confirm that the Customer is not acting as a consumer.

If mandatory consumer protection law nevertheless applies to a Customer, nothing in these Terms limits the rights that law gives it.

Service: the Primod runtime security platform, including the web application, APIs, the Sensor, and related documentation and support. Sensor: the Primod runtime software that the Customer installs on its own nodes or hosts, for example as a Kubernetes DaemonSet, to collect security telemetry. Customer Data: data that the Customer or its systems send to the Service, including runtime evidence, workload and cloud metadata, and account information. Runtime Evidence: the process, workload, network and request data the Sensor records and the Service stores for investigation. Plan: the Free, Core, Scale or Enterprise plan, or another plan, with the limits shown on the pricing page or in an Order. Order: an in-app purchase, an order form, a quote accepted by the Customer, or a marketplace purchase. Marketplace: a cloud marketplace through which the Service is sold, such as AWS Marketplace or Microsoft Marketplace. Users: individuals the Customer allows to use its account.

Marketplace purchases. If the Customer buys the Service through a Marketplace, the agreement the Customer accepted in that Marketplace governs the purchase. Examples are the Standard Contract for AWS Marketplace (SCMP), the Standard Contract for Microsoft Marketplace, or the terms of a private offer, including any amendments. That agreement prevails over these Terms where they conflict, and these Terms apply only to matters it does not address. Billing, payment, cancellation and refunds for a Marketplace purchase follow the Marketplace provider's terms.

Direct purchases. For purchases made directly from Primod, the following apply in this order of precedence: (a) an Order signed by both parties, for the matters it expressly covers; (b) these Terms; (c) the Subscription, Cancellation and Refund Policy; (d) the Privacy Policy; (e) the documentation and plan descriptions on our website.

Terms printed on a Customer's purchase order or in its procurement portal do not apply, even if we accept or sign the purchase order.

5.1. We provide the Service according to the Customer's Plan. Plan limits, such as runtime coverage in vCPU, cloud accounts, users, cloud objects and retention, are shown on the pricing page or in the Order.

5.2. Free plan. The Free plan is provided at no charge, as is, without a service level or support commitment beyond community support. We may change the Free plan's limits or discontinue it with at least 30 days' notice.

5.3. Technical previews. Features marked as a technical preview, including response enforcement and AI runtime security, are provided for evaluation. They may change or be withdrawn at any time, and are provided as is and excluded from any warranty or service commitment.

5.4. We may improve and change the Service. We will not materially reduce the core functionality of a paid Plan during the Customer's current paid term.

6.1. The Customer decides where to install the Sensor and must have the right to install it and to monitor the systems and workloads on which it runs, including any required notices to or consents from its own personnel and users.

6.2. The Sensor needs elevated privileges on the nodes where it runs in order to load eBPF programs. The Customer is responsible for reviewing those privileges, testing the Sensor in a representative environment before production use, and for the compute and infrastructure costs of running it.

6.3. Enforcement and response policies are enabled by the Customer's operators. The Customer is responsible for deciding which policies to enforce and for their effect on its workloads and availability.

6.4. The Customer is responsible for its Users, for keeping credentials and enrollment tokens confidential, and for all activity in its account.

The Customer must not, and must not allow anyone to:

8.1. Fees are stated in US dollars and exclude taxes unless stated otherwise. The Customer pays all applicable taxes other than taxes on our income.

8.2. Paid Plans renew automatically for a period of the same length unless cancelled before the renewal date. We will give at least 30 days' notice of a price change, which applies from the next renewal.

8.3. Payments are processed by our payment service providers or, for Marketplace purchases, by the Marketplace provider. The Customer confirms that it is authorised to use the selected payment method.

8.4. Cancellations, downgrades and refunds are governed by the Subscription, Cancellation and Refund Policy.

8.5. Invoices are issued electronically to the billing details the Customer provides. The Customer is responsible for keeping them accurate.

9.1. Non-payment. If an undisputed amount is overdue, we will notify the Customer. If it is still unpaid 14 days after that notice, we may suspend paid features and apply the Free plan limits until the amount is paid. Suspension does not cancel amounts already due.

9.2. Risk or breach. We may suspend access immediately, in whole or in part, if we reasonably believe it is necessary to prevent a security risk to the Service or others, a breach of Section 7, or a violation of law. We will give notice where practicable and restore access once the cause is resolved.

9.3. Customer Data is kept during a suspension, subject to the retention periods in Section 11.

10.1. No security product detects every attack, vulnerability or misconfiguration. Primod does not guarantee that the Service will detect, prevent or report every threat, intrusion or vulnerability, or that the Customer's systems will be secure.

10.2. The evidence the Service records is limited by what the Sensor can capture on each node, kernel and runtime, by the instrumentation available, and by delivery and capture gaps. An incident timeline groups related alerts; it is not proof that one actor caused them or that every step was captured.

10.3. Observed execution of a vulnerable component is one input to prioritisation. It is not proof of exploitation, and the absence of observed execution is not proof that a component is safe.

10.4. The Service supports, and does not replace, the Customer's own security program, monitoring and judgement. The Customer remains responsible for its security decisions, remediation and incident response.

11.1. Ownership. The Customer keeps all rights in Customer Data. The Customer grants us the rights needed to host, process and display Customer Data to provide, secure and support the Service.

11.2. Retention by Plan. Runtime Evidence is kept for the retention period of the Customer's Plan and is deleted automatically once it is older than that period:

If the Plan changes, the new Plan's retention period applies from the date the change takes effect.

11.3. Export. Before the end of the subscription, or within the deletion window in Section 11.4, the Customer may ask us at support@primod.io to export its Customer Data. We will provide the export in a commonly used, machine-readable format within a reasonable time.

11.4. Deletion after termination. We delete Customer Data from our active systems within 30 days after the end of the Customer's subscription or the deletion of its account, unless the law requires us to keep it. Copies in backups are deleted as the backups expire in the normal course. If a paid subscription ends and the account continues on the Free plan, Section 11.2 applies instead.

11.5. Personal data. We process personal data as described in our Privacy Policy. Where we process personal data on the Customer's behalf, we will enter into a data processing agreement on request.

11.6. Service data. We may use data about how the Service operates, and Customer Data in aggregated and de-identified form that does not identify the Customer or any individual, to maintain, secure and improve the Service.

We maintain technical and organisational measures designed to protect Customer Data against unauthorised access, loss and alteration, appropriate to the nature of the Service. We will notify the Customer without undue delay after becoming aware of a security incident that affects its Customer Data.

We and our licensors own all rights in the Service, the Sensor, detection rules and documentation. Subject to these Terms and payment of applicable fees, we grant the Customer a non-exclusive, non-transferable right during its subscription to use the Service and to install and run the Sensor for its internal business purposes, within its Plan limits.

If the Customer gives us feedback or suggestions, we may use them without obligation.

Each party will keep the other's non-public business, technical and security information confidential, use it only for the purposes of these Terms, and protect it with at least reasonable care. This does not apply to information that is public through no fault of the receiving party, already known to it, independently developed, or that must be disclosed by law, in which case the receiving party will give notice where permitted.

15.1. For paid Plans, we warrant that the Service will perform materially as described in its documentation during the paid term. If it does not, the Customer must notify us in writing. Our sole obligation, and the Customer's exclusive remedy, is that we use reasonable efforts to correct the failure and, if we cannot do so within 30 days of the notice, the Customer may terminate the affected subscription and receive a pro-rata refund of prepaid fees for the unused part of the term.

15.2. Except for the warranty in Section 15.1, and to the maximum extent permitted by law, the Service, the Sensor, the Free plan and technical previews are provided "as is" and "as available". We disclaim all other warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, non-infringement, and that the Service will be uninterrupted, error-free, or detect every threat.

16.1. Neither party is liable for indirect, incidental, special or consequential damages, or for loss of profits, revenue, business or goodwill, or for loss or corruption of data, even if advised of the possibility.

16.2. Each party's total liability arising out of or relating to these Terms is limited to the fees paid and payable by the Customer for the Service in the 12 months before the event giving rise to the claim. Where the Customer has paid no fees, our total liability is limited to USD 100.

16.3. These limits do not apply to the Customer's obligation to pay fees, to a party's breach of Section 7 or Section 14, or to liability that cannot be limited or excluded under applicable law.

The Customer will defend and indemnify Primod against third-party claims arising from the Customer's installation of the Sensor on, or monitoring of, systems it was not authorised to monitor, or from its breach of Section 7.

18.1. These Terms apply for as long as the Customer has an account or uses the Service. Paid subscriptions run for the term of the Order and renew as described in Section 8.

18.2. Either party may terminate a subscription if the other materially breaches these Terms and does not cure the breach within 30 days of written notice. The Customer may cancel as described in the Subscription, Cancellation and Refund Policy.

18.3. When a subscription ends, access to paid features ends, fees accrued up to that date remain payable, and Section 11 applies to Customer Data. Sections 10, 11, 13 to 17, 20 and 22 survive termination.

We may update these Terms. We will post the updated version on this page with a new effective date and, for material changes that affect paid Customers, give at least 30 days' notice. Changes apply to a paid Customer from its next renewal, unless they are required by law. Continued use of the Service after a change takes effect means the Customer accepts it.

20.1. These Terms are governed by Turkish law.

20.2. The parties irrevocably submit to the exclusive jurisdiction of the Istanbul (Central) Courts and Enforcement Offices.

20.3. Where a Marketplace agreement governs a purchase under Section 4, its governing-law and dispute terms apply to that purchase.

We send notices by e-mail to the account owner's address or through the app. The Customer sends notices to support@primod.io. Notices take effect when received.

22.1. Entire agreement. These Terms, together with the documents listed in Section 4, are the entire agreement on their subject matter.

22.2. Assignment. The Customer may not assign these Terms without our written consent. We may assign them to an affiliate or to a successor in a merger, acquisition or sale of assets.

22.3. Force majeure. Neither party is liable for delay or failure caused by events beyond its reasonable control, other than payment obligations.

22.4. Severability and waiver. If a provision is held invalid, the rest remains in effect. No waiver is effective unless in writing.

22.5. Headings are for convenience only.

For any questions about these Terms, please contact us.
Via Email: support@primod.io
Or use the contact options on primod.io/contact