Terms of Service

1. Parties and Conclusion of the Contract

These Terms are a contract between you (the “User”) and the service provider Robert Pałka ChainGuard, Zawiercie, Poland · Tax ID (NIP) 6492230699 · contact@humankey.io(“we”, “us”). HumanKey is the name of the service (“the Service”); where these Terms refer to HumanKey as a party, they mean the service provider. The contract is concluded when you create an account and accept the current version of these Terms. You can end it at any time by deleting your account; we can end it as described in Section 12. If you do not agree with these Terms, do not create an account.

2. Business Use Only (B2B)

The Service is offered only to businesses and to persons acting for a business; it is not offered to consumers. Nothing in these Terms limits the rights that mandatory law gives to a natural person who concludes a contract directly connected with their business when the contract is not of a professional nature for that person (Article 385⁵ of the Polish Civil Code, Article 7aa of the Polish Consumer Rights Act).

3. Description of Service

HumanKey (AI Traffic Intelligence) detects and classifies AI crawlers and other automated visitors to your websites and provides traffic analytics. The Service consists of a web dashboard, a tracking script that you add to your websites, and the other features and interfaces available on your plan as described on the pricing page.

To use the Service you need a current web browser with JavaScript enabled and an e-mail address; to measure a website you need to be able to add our tracking script to it and to prove control of its domain (Section 4).

The Service includes: (a) detection of AI crawlers and other automated visitors, and traffic classification; (b) a bot analytics dashboard; (c) a JavaScript tracking script for your web pages; (d) Bot Evidence Reports for exporting bot detection data (Business and above); (e) Heatmaps of clicks and scrolling (Business and above, Beta); (f) GEO Analytics: country-level traffic analysis (Business and above); (g) Smart Bot Configuration: recommendations for your robots.txt rules (Pro and above); (h) a comparison of your live robots.txt file with recommended rules (Business and above). Beta features may be changed or removed without notice.

Where the Service generates a robots.txt file for your website, that file includes a machine-readable content-usage declaration (the Content Signals Policy format). A default declaration applies. The declaration states your preferences; it is advisory, and well-behaved crawlers may honour it while others ignore it.

Depending on your plan, as described on the pricing page, the Service may also include: checks of your public pages against criteria shown in the dashboard; generation of draft data (for example robots.txt rules, an llms.txt file or structured data) for you to review and publish yourself; a check of an llms.txt file at an address you give; and optional texts drafted with an AI model, which you review before use. You decide what to publish.

Accuracy and Limitations

Classification results: Each classification is an assessment made from the signals available for that request. It can be wrong in either direction: a person can be classified as automated and an automated visitor as a person. No accuracy level is stated or guaranteed. Use results as information that supports your decisions, not as their only basis. HumanKey is not liable for business decisions made solely on the basis of bot detection results.

Country data: Country information is an estimate derived from the IP address with a third-party IP-location database. It can be wrong and is given at country level only; no accuracy level is stated. GEO data should not be relied upon for regulatory compliance decisions without independent verification.

Usage and Rate Limits

Rate Limits

Rate limits apply automatically to requests to the Service, including requests sent by the tracking script (for example, a limit of requests per website key per minute). Requests above a limit are refused for a short time.

Definition of a Check

1 check = 1 page view: Each page view that the Service processes for your website — normally a detection request sent by the tracking script — counts as one check against your plan's monthly limit. Above that limit, the Service may stop recording checks until the limit resets or your plan changes.

Prohibited Uses

You may not use the Service, including its API endpoints, to: (a) identify or track individual natural persons; (b) build surveillance systems or mass profiling tools; (c) process data in violation of applicable privacy law including the GDPR; (d) resell or redistribute API access without written consent from HumanKey.

Plan Changes and Data Effects

Downgrade Effects on Data: When your plan is lowered — including when a trial or a paid subscription ends — a grace period of 7 daysapplies, during which you retain access to your previous plan's features. During the grace period you may choose which sites remain active within the new plan's site limit; sites you do not choose are paused, and if you make no choice, the sites that most recently received traffic remain active. The number of team members with access to your account is limited to the team seats included in your plan; members above that number may lose access after the grace period until you move to a plan with enough seats. After the grace period ends, traffic records older than the new plan's retention period are automatically and permanently deleted for all sites in your account, including paused sites. You are advised to export your data before the grace period ends. Exported data is not affected by plan changes.

4. Account Responsibilities

• You must provide accurate registration information
• You are responsible for maintaining the security of your API keys
• You must not share your secret API keys (sk_...) publicly
• You are responsible for all activity under your account

Verification. Signing in with a password may require you to confirm your e-mail address first. To measure a website you prove that you control its domain (verification); until a website is verified, its visits are not recorded. On the Free plan a website that is not verified within 7 days after it was added expires, and on the Pro plan within 1 day; on Business and higher plans an unverified website does not expire. When a website's verification has expired, another account that proves control of the same domain through DNS can take the website over: it then moves to that account and the keys used on it stop working. Verify your websites and keep control of your domains to avoid this.

5. Acceptable Use

You agree not to:

• Use the Service for any unlawful purpose
• Attempt to circumvent rate limits or security measures
• Reverse-engineer the bot detection algorithms
• Resell the Service without written permission
• Use the Service to track individuals without proper legal basis
• Provide unlawful content through the Service
• Copy or extract substantial parts of the Service's databases, including the list of known crawlers, beyond what your own use of the Service requires

If this Section is breached, we may restrict or suspend an account, a website or a feature, or end the contract (Section 12). Such decisions are taken by a person; we do not use automated decision-making for them. Some limits apply automatically, because of your plan or of verification, without a decision about your conduct: usage limits, rate limits and the number of websites (Sections 3 and 7); team seats and the pause of websites at the end of a downgrade grace period (Section 3); e-mail verification, domain verification and its expiry, and the transfer of a website whose verification has expired to an account that proves control of its domain (Section 4). The AI Assistant may also decline a message automatically (Section 9).

6. Free Trial

New accounts include a 14-day free trial of the Proplan. No payment method is required to start. When the trial ends without a paid subscription, your account moves to the Free plan at no charge, and the grace period described in Section 3 ("Plan Changes and Data Effects") applies. To keep a paid plan after the trial, you need to add a payment method and start a paid subscription.

7. Plan Limits

Your plan sets the monthly number of checks, the number of websites and the number of team seats, as shown on the pricing page. Rate limits apply as described in Section 3. Attempts to get around these limits breach Section 5.

8. Email Notifications

We send the e-mails your account needs — for example about verification, password reset, billing and security, and notices about your plan, your websites or a new version of these Terms. They are part of the Service and cannot be turned off while the account exists. You can turn each of the following optional e-mails on or off in Dashboard → Settings → Email Notifications: Daily Bot Report, Weekly AI Insights (Business and higher plans), New Crawler Alerts (paid plans), Quota Warnings, and AI Tips & Suggestions (a short AI-written insight in the daily report and occasional suggestions to upgrade your plan). AI Tips & Suggestions is off unless you turn it on. Some e-mails contain text drafted with an AI model; such text is information, not a decision about your account.

9. AI Assistant

HumanKey provides an AI chatbot assistant (“AI Assistant”) on our website and in the dashboard for product support. It is powered by an AI language model. It is shown with a visible “AI” label, and its generated answers carry machine-readable marks that identify them as generated by AI. The AI Assistant does not make binding legal, financial or contractual decisions; its answers are information only. It may decline some messages automatically. Conversations are held in server memory while in use and removed about 30 minutes after the last message; we do not store them in our database. The text of the conversation is sent to our AI provider to generate the answers; the provider is listed in the register of sub-processors and, under its own terms, keeps inputs and outputs for up to 30 days, with limited exceptions. No e-mail address, name, IP address or session identifier is sent to the AI model; for signed-in users, general account context (for example the plan) is included; messages contain other personal data only if you type it. You must not try to obtain proprietary information, source code, algorithms or internal system details through the AI Assistant. You can reach a person through the contact page.

10. Data Ownership

You retain ownership of your website data. We process it to provide the Service, as set out in the Data Processing Agreement (Section 20). We may use statistics computed across all customers' websites (for example, how many websites a known crawler visited) to run and improve the Service and the shared list of known crawlers, and we may show such statistics in the Service and on our website. Such statistics do not name your website or any visitor. To recognise crawlers for that list, we may also use the User-Agent strings of visits that the Service classifies as automated, from all customers' websites; the list does not name your website.

You may delete individual sites from your account at any time. Deleting a site permanently removes all associated visit data, API keys, and analytics. This action is irreversible.

11. Service Availability

The Service is provided without a guarantee of uninterrupted availability or of any particular level of availability. HumanKey is not liable for data loss or service interruptions except as provided in Section 13.

12. Ending the Contract

You can end the contract at any time by deleting your account in Dashboard → Settings; this takes effect at once. Your sites, visit data, API keys and analytics are then deleted from the Service; copies in backups expire on the database provider's backup cycle; records the law requires us to keep are kept only as long as the law requires (Privacy Policy). We can end the contract by e-mail to your account address: at once if you seriously or repeatedly breach these Terms or if the law requires it, and otherwise for an important reason (for example, if we stop providing the Service), with an appropriate period, stated in the e-mail, during which you can download your data.

Deleting your account immediately cancels any active paid subscription. Cancellation takes effect at once; the remaining unused portion of your current paid billing period is forfeited and is not refunded or pro-rated, except where mandatory provisions of applicable law require otherwise. To use a paid period you have already purchased, do not delete your account before it ends.

13. Limitation of Liability

Disclaimer of Warranties

The Service is provided “as is” and “as available” without warranties of any kind, express or implied, including fitness for a particular purpose, merchantability, or non-infringement.

Financial Liability Cap (Tiered by Plan)

To the maximum extent permitted by applicable law, HumanKey's total aggregate liability arising from or in connection with these Terms is limited as follows, in each case calculated by reference to the period immediately preceding the event giving rise to the claim:

• Free and Pro plan users: the total fees paid by the User to HumanKey during the twelve (12) month period (Free plan: where no fees have been paid, liability is limited to the fullest extent permitted by applicable law).
• Business and Enterprise (Starter, Growth) plan users: the total fees paid by the User to HumanKey during the three (3) month period.
• Enterprise Custom plan users: the total fees paid by the User to HumanKey during the three (3) month period.

The exceptions listed at the end of this Section 13 apply on every plan.

Exclusion of Indirect Damages

In no event shall HumanKey be liable for: (a) loss of profits, revenue, or savings (utracone korzyści / lucrum cessans); (b) data loss or corruption; (c) indirect, incidental, special, or consequential damages; (d) business decisions made based on Service results; (e) Service unavailability due to external factors.

Results Are Assessments — Not Legal Proof

Detection results are assessments (Section 3) and do not constitute standalone legal evidence in judicial, arbitration or administrative proceedings. Users are solely responsible for decisions made based on Service data.

The liability caps and damage exclusions in this Section 13 do not apply to: (a) gross negligence or willful misconduct; (b) liability towards data subjects that cannot be limited by contract; (c) liability that mandatory law does not allow to be limited or excluded, in particular liability for damage caused intentionally (Article 473 § 2 of the Polish Civil Code).

Severability of Limitations

Each limitation in this Section 13 — the liability caps and the damage exclusions — operates independently. If any one is held invalid or unenforceable, the others (in particular the exclusion of indirect, consequential, and lost-profit damages) remain in full force to the fullest extent permitted by applicable law.

14. Indemnification

You agree to defend, indemnify, and hold HumanKey harmless from any claims, losses, and costs (including legal fees) arising from: (a) breach of these Terms; (b) violation of third-party rights; (c) use of Service data as sole legal evidence without independent verification; (d) unauthorized account access due to failure to secure credentials.

Services of third parties that we use remain subject to their own terms and licences.

15. Force Majeure

HumanKey is not liable for delays or failures caused by events beyond its reasonable control, including internet infrastructure outages, cyberattacks, acts of government, changes in law, natural disasters, or other force majeure events.

16. Age and Legal Capacity

You must be at least 18 years old and have full legal capacity to conclude a contract. We do not verify age. We may close an account that does not meet these requirements.

17. Governing Law & Jurisdiction

These Terms are governed by Polish law. Disputes are resolved by the common court competent for the place where we carry on business (Zawiercie, Poland), unless mandatory law provides otherwise.

18. Changes to Terms

We may publish a new version of these Terms and of the Data Processing Agreement. Before a new version applies to your account, we show it with a list of the changes in the dashboard, and you accept it there; we may also tell you by e-mail. A new version applies to your account only from the moment you accept it; until then the version you accepted earlier applies, and access to the dashboard requires the current version. If you do not accept it, you may end the contract at any time by deleting your account (Section 12); before that, without accepting, you can download your data, turn off optional e-mails and manage a paid subscription.

19. Contact, Notices and Complaints

Contact. E-mail contact@humankey.io or use the contact form at humankey.io/contact, in Polish or English; this is also our point of contact for public authorities.

Notices. To report information in the Service that you consider unlawful or contrary to these Terms, write to the same address and state where it is (for example the website or URL), why you consider it unlawful, your name and e-mail address, and a statement that the notice is accurate and complete to the best of your knowledge.

Complaints. You can file a complaint about the Service at the same address; describe the issue and give the e-mail address of your account. We consider it and reply by e-mail. If we restrict your account or a website because we consider information you provided unlawful or contrary to these Terms, we tell you the reason by e-mail unless the law forbids it.

20. Data Processing Agreement and Language Versions

The Data Processing Agreement at humankey.io/legal/dpa is an annex to these Terms and forms part of them on every plan. If these Terms and the Data Processing Agreement differ on the processing of personal data, the Data Processing Agreement prevails. These Terms and the Data Processing Agreement are published in Polish and English; if the versions differ, the Polish version prevails.