Terms of Service
These terms govern your use of CloudArq's website and service.
- Last updated
- 18 October 2026
- Contact
- [email protected]
About these terms
These terms are an agreement between you and CloudArq.
“CloudArq”, “we”, “us” and “our” mean CloudArq; “you” means the person or organisation that uses CloudArq. By creating an account or using the service, you accept these terms.
Contact us at [email protected], or by post at P.O. Box 37, Shefa-'Amr 2020015, Israel.
The service
CloudArq reads your cloud's trust policies and tells you who they let in.
- The Explorer analyses a policy you paste, entirely in your browser. It is free.
- A free account keeps the latest read of each cloud account. Beta workspaces and Starter keep every change from the last 90 days, and Organisation from the last 13 months, up to 90 reads of each account, so they can show what changed. What We Store lists what is kept, and for how long. Pricing says what is free during the beta.
- The engine that powers both is published on GitHub. v0.1 to v0.3.0 are under the Apache License 2.0. Releases after v0.3.0 are under the Functional Source License 1.1, and each becomes Apache 2.0 two years after it ships. Those licences, not these terms, govern the engine's code.
Your account
You are responsible for keeping your password and authenticator secure, and for what happens in your account.
Use an email address you have access to. Every sign-in requires your password and either a code from your authenticator app or one of your backup codes. If you believe someone else has used your account, contact us immediately at [email protected].
Acceptable use
Use CloudArq only on cloud accounts you own or are authorised to assess, and do not misuse the service.
- Upload findings only from cloud accounts you own or are authorised to assess.
- Do not attempt to access any account or system without authorisation, including ours.
- Do not overload, probe or disrupt the service, or circumvent its limits.
- Do not resell access to the service.
Your content
What you upload remains yours. We use it only to provide the service to you.
You permit us to store and process your uploads for that purpose only, for the periods listed on What We Store. We never use your content in examples or case studies without your written agreement.
Our rights
CloudArq owns the site, the service and the CloudArq name.
These terms give you the right to use the service, and no other right in the site, the service or the CloudArq name. The engine's code is covered by its own licence instead.
Paid plans
Paid plans are sold by Paddle. They are not on sale yet.
Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns.
When you buy a plan, Paddle's buyer terms also apply to the purchase. A plan renews each billing period until you cancel it, and Refunds explains how to request a refund.
Disclaimer
CloudArq helps you understand who can get into your cloud. It does not guarantee that your cloud is secure.
- The service is provided “as is” and “as available”.
- Where CloudArq meets something it does not yet support, it says so rather than guessing.
- A result that finds nothing is not proof that there is nothing to find: it covers only what the policies CloudArq read say.
- The service may be interrupted, and its features may change.
Limitation of liability
Our liability to you is capped, but never excluded.
Our total liability for all claims in any 12 months is limited to the greater of the amount you paid for your plan in the 12 months before the claim and 100 US dollars. We are not liable for indirect or consequential loss, such as lost profit, lost revenue or lost data.
These limits do not apply to loss we cause intentionally or through gross negligence, to death or personal injury, or to any liability that the law does not allow us to limit.
Closure and suspension
You can close your account at any time. We may suspend it if it is misused.
To close your account, email [email protected] from the address registered to it. We delete its data within 30 days of closure, as our Privacy Notice describes.
We may suspend or end your access if you break the acceptable use rules, or if the law requires it. We will tell you why, unless the law prevents us from doing so.
Changes to these terms
We tell you before a change that affects you takes effect.
We email account holders at least 30 days before a change that reduces what you receive or adds to your obligations. The date at the top of this page shows the current version.
Governing law
These terms are governed by the law of the State of Israel.
Either party may bring a claim in the competent courts of Israel. Nothing in these terms takes away your right to bring a claim in any other court available to you by law.
Legal details
CloudArq is a trading name of Abdallah Khaldi.