SSHwatch Terms and Conditions

1. Introduction

Welcome to SSHwatch, a service designed for monitoring, analyzing, and protecting SSH access in your Linux-based environments. By accessing or using our services, you agree to comply with and be bound by the following terms and conditions. Please read them carefully as they govern your use of SSHwatch and affect your legal rights and obligations.

2. Definitions

Service: The comprehensive set of features provided by SSHwatch, including the online dashboard, real-time analytics, alerts, threat detection, security assessments, and other related functionalities.
User: Any individual or organization accessing or utilizing the SSHwatch service.
API Key: A unique identifier provided to users to enable access to SSHwatch services and facilitate integration.
Agent: A software component installed on users’ servers to facilitate log collection, monitoring, and security assessments.
Dashboard: The web-based interface through which users access SSHwatch features and analytics.
Subscription: The paid or free access to SSHwatch services for a defined period.
Logs: SSH and related system logs collected from users’ servers for analysis and threat detection.

3. Account Registration and Security

Users must register for an account and obtain an API key from the SSHwatch dashboard.
Users are responsible for providing accurate, current, and complete information during registration.
Users must maintain the confidentiality of their account credentials and API keys.
We recommend implementing strong passwords and multi-factor authentication where available.
Users must notify SSHwatch immediately at [email protected] if they suspect any unauthorized access to their account or any security breach.
Users are solely responsible for all activities conducted through their account or using their API keys.
SSHwatch reserves the right to suspend or terminate accounts showing suspicious activity patterns.

4. Service Description and Use

SSHwatch provides real-time SSH monitoring, threat detection, customizable alert rules, and security analytics for Linux-based environments.
Users are responsible for correctly installing and maintaining the SSHwatch agent on their servers.
The service is provided for legitimate security monitoring purposes only.
Users must use the service in compliance with all applicable local, state, national, and international laws and regulations.
SSHwatch reserves the right to modify, enhance, or discontinue any feature of the service at any time with reasonable notice.
We strive to maintain 99.9% uptime but do not guarantee uninterrupted service.

5. Subscriptions and Payment

SSHwatch offers various subscription tiers with different feature sets and monitoring capabilities.
Free trials may be provided at our discretion, subject to these same terms and conditions.
Subscription fees are billed in advance according to the billing cycle selected by the user.
All payments are non-refundable except as required by applicable law or as expressly stated in these terms.
We reserve the right to change subscription pricing with 30 days’ notice to users.
Failure to pay subscription fees may result in service limitation or account suspension.
Users may upgrade or downgrade their subscription tier subject to proration of fees and feature availability.

6. Data Collection and Privacy

SSHwatch collects logs from users’ Linux-based servers to perform security analysis and threat detection.
Data collected includes but is not limited to: login attempts, authentication events, user actions, IP addresses, timestamps, and system information.
Users explicitly consent to the collection, processing, storage, and analysis of this data.
We retain raw log data for 30 days and aggregated analytics data for 12 months by default.
All data is processed and stored in accordance with our Privacy Policy, which is incorporated by reference into these terms.
SSHwatch implements industry-standard security measures to protect user data.
We will not share your data with third parties except: (a) as required by law, (b) as necessary to provide the service, (c) with your explicit consent, or (d) in anonymized, aggregated form for service improvement.
Users in the European Union are entitled to rights under the GDPR, including data access, correction, and deletion rights.

7. Service Level Agreement (SLA)

SSHwatch strives to maintain 99.9% uptime measured on a monthly basis, excluding scheduled maintenance.
Scheduled maintenance will be announced at least 48 hours in advance whenever possible.
Emergency maintenance may occur without prior notice to protect the security and integrity of the service.
Critical security alerts will be processed and dispatched within 5 minutes of detection.
In the event of service unavailability exceeding 0.1% in a given month, users on paid plans may request service credit proportional to the downtime.
Service credit requests must be submitted within 30 days of the affected period.
This SLA does not apply during free trials or to free tier accounts.

8. User Obligations and Restrictions

Users must have legal authority to monitor the servers on which they install the SSHwatch agent.
Users shall not attempt to reverse engineer, decompile, or disassemble the SSHwatch agent or services.
Users shall not use the service to monitor third-party systems without proper authorization.
Users shall not use the service in any way that could damage, disable, or impair SSHwatch services.
Users shall not use the service to collect or process sensitive personal data outside the scope of legitimate security monitoring.
Users shall not attempt to gain unauthorized access to other users’ accounts or data.
Users shall not use automated methods to access the dashboard except through our official API.
Users shall not resell, redistribute, or create derivative services based on SSHwatch without prior written authorization.

9. Intellectual Property

All content, trademarks, logos, software, designs, and data related to SSHwatch are the exclusive property of SSHwatch or its licensors.
The SSHwatch name and logo are protected trademarks and may not be used without prior written permission.
Users are granted a limited, non-exclusive, non-transferable license to use the service solely for their security monitoring purposes.
User data and logs remain the property of the respective users, subject to our license to use such data for providing and improving the service.
Users may not reproduce, distribute, modify, or create derivative works from any part of the service without prior written permission.
Feature suggestions and feedback provided to SSHwatch may be used without restriction or compensation.

10. Limitation of Liability

SSHwatch is provided on an “as is” and “as available” basis without warranties of any kind, either express or implied.
We do not warrant that the service will be error-free, uninterrupted, or free from security vulnerabilities.
The service is a monitoring and detection tool, not a prevention system; we do not guarantee detection of all security threats.
In no event shall SSHwatch be liable for any direct, indirect, incidental, special, consequential, or exemplary damages arising from or in connection with:
- Use or inability to use the service
- Service interruptions or data loss
- Unauthorized access to your servers or data
- Decisions made based on the information provided by the service
- Any other matter relating to the service
Our total liability for any claims under these terms shall not exceed the amount paid by you to SSHwatch during the 12 months preceding the claim.
Some jurisdictions do not allow the exclusion of certain warranties or limitation of liability, so some of the above limitations may not apply to you.

11. Indemnification

Users agree to indemnify, defend, and hold harmless SSHwatch, its affiliates, officers, directors, agents, employees, and partners from and against any claims, liabilities, damages, losses, costs, expenses, or fees (including reasonable attorneys’ fees) arising from:
- User’s violation of these terms
- User’s use or misuse of the service
- User’s violation of any rights of a third party
- User’s violation of applicable laws or regulations
- Content or data submitted through user’s account

12. Term and Termination

These terms commence upon your first use of the service and continue until terminated.
Users may terminate their use of the service at any time by deactivating their account through the dashboard.
Upon termination, users must uninstall all SSHwatch agents from their servers.
SSHwatch may terminate or suspend access to the service immediately without prior notice for:
- Violation of these terms
- Failure to pay subscription fees
- Conduct that risks harm to other users or third parties
- Legal or regulatory requirements
- Extended inactivity
Upon termination, your right to use the service will immediately cease, and we may delete your account data after 30 days.
All provisions of these terms which by their nature should survive termination shall survive, including ownership, liability limitations, indemnity, and dispute resolution provisions.

12.1 Inactive Account Policy

For users on free subscription plans, the following inactive account policy applies:

Accounts that have not been accessed for a period of six (6) months will be considered inactive.
SSHwatch will send reminder notifications to the email address associated with inactive accounts at 14 days, 7 days, and 1 day prior to scheduled account deletion.
If no login activity occurs during this notice period, the inactive account will be deactivated, and all associated monitoring data, including log directories, will be permanently deleted.
This automated process helps us maintain service quality and efficiently allocate resources for all users.
Users who wish to maintain their free accounts must log in to the SSHwatch dashboard at least once every six months.
Upon deactivation due to inactivity, users may register for a new account using the same email address if they wish to use the service again in the future.
Paid subscription accounts are not subject to this inactive account policy while the subscription remains active.

SSHwatch reserves the right to modify the inactive account policy, including the inactivity period and notification schedule, with appropriate notice as described in Section 14 (Modifications to Terms).

13. Service-Specific Terms

13.1 Real-time SSH Monitoring

Real-time monitoring depends on the continuous operation of the SSHwatch agent and network connectivity.
Short delays in data transmission may occur due to network conditions beyond our control.
SSHwatch agents require specific system permissions to function properly.
Monitoring activities may have minimal impact on server performance, typically less than 1% CPU utilization.

13.2 Threat Detection

Our threat detection system employs pattern recognition and anomaly detection algorithms.
False positives and false negatives may occur despite our best efforts to minimize them.
Users should verify detected threats before taking critical security actions.
Threat detection effectiveness depends on proper agent installation and uninterrupted data flow.

13.3 Alert Rules

Users may create custom alert rules based on available parameters.
SSHwatch is not responsible for failures to alert due to misconfigured custom rules.
Default alert rules may be updated periodically to improve security coverage.
Alert delivery depends on the availability of notification channels (email, webhook, etc.).

13.4 Analytics and Reporting

Statistics and visualizations are provided for informational purposes only.
Users retain ownership of their specific analytics data but grant us license to use anonymized aggregated data.
Report generation may be subject to rate limiting on certain subscription tiers.
Historical data availability is subject to the data retention periods specified in Section 6.

14. Modifications to Terms

SSHwatch reserves the right to modify these terms at any time.
Material changes will be communicated via email or prominent notice on the dashboard at least 14 days before they take effect.
It is the user’s responsibility to review these terms periodically.
Continued use of the service after any modifications constitutes acceptance of the new terms.
If you disagree with the updated terms, you must stop using the service and cancel your subscription.

15. Force Majeure

Neither party shall be liable for failure or delay in performing obligations under these terms due to causes beyond reasonable control, including but not limited to:
- Acts of God, natural disasters, or extreme weather events
- War, terrorism, riots, civil disorders, or rebellions
- Fire, explosions, or accidents
- Strikes or labor disputes
- Government actions or restrictions
- Internet service provider failures or delays
- Denial of service attacks or other cyberattacks
The affected party shall notify the other party of such force majeure circumstances as soon as reasonably possible.

16. Dispute Resolution

Any dispute arising from these terms shall first be attempted to be resolved through good-faith negotiation.
If negotiation fails, disputes shall be resolved through binding arbitration in accordance with the rules of the Netherlands Arbitration Institute.
Arbitration shall take place in Amsterdam, The Netherlands, in the English language.
The arbitrator’s award shall be binding and may be entered as a judgment in any court of competent jurisdiction.
Nothing herein prevents either party from seeking injunctive relief in urgent circumstances.
Users waive any right to participate in class action lawsuits against SSHwatch.

17. Governing Law

These terms shall be governed by and construed in accordance with the laws of The Netherlands, without regard to its conflict of law principles.
The United Nations Convention on Contracts for the International Sale of Goods does not apply to these terms.

18. Severability

If any provision of these terms is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary so that these terms shall otherwise remain in full force and effect.
The unenforceable or invalid provision shall be replaced by a valid, enforceable provision that most closely matches the intent of the original provision.

19. Assignment

Users may not assign or transfer these terms or any rights or obligations hereunder without the prior written consent of SSHwatch.
SSHwatch may assign these terms and its rights and obligations to any successor entity resulting from a merger, acquisition, or sale of all or substantially all of its assets.

20. Entire Agreement

These terms, together with the Privacy Policy and any other legal notices published by SSHwatch, constitute the entire agreement between you and SSHwatch concerning the service.
These terms supersede all prior agreements, representations, and understandings between the parties regarding the subject matter herein.

21. Waiver

The failure of SSHwatch to enforce any right or provision of these terms will not be deemed a waiver of such right or provision.
No waiver of any term shall be deemed a further or continuing waiver of such term or any other term.

22. Feedback

We welcome feedback, comments, and suggestions for improvements to the service.
By submitting feedback, you grant us the right to use that feedback without restriction or compensation.

23. Contact Information

For questions or concerns regarding these terms and conditions, please contact us at [email protected]

By using SSHwatch, you acknowledge that you have read, understood, and agree to these Terms and Conditions.

Last Updated: March 3, 2025