Terms of Service

1. Business Information

• Trade Name: Zero to One Flow (021flow)
• Sole Proprietor / Representative: Sungtae Ryu
• Business Registration No.: 317-09-03418
• E-commerce Registration No.: To be announced
• Address: A-2704, 25 Beopjo-ro, Yeongtong-gu, Suwon-si, Gyeonggi-do, Republic of Korea
• Email: [email protected]
• Support Phone: 070-8676-0210

2. Service Description

heimdallX is an AI-powered security platform that assesses your digital assets from an attacker's perspective. For domains and assets you own or are authorized to test, it provides:

• Web & Asset Scanner: DNS/subdomain discovery, TLS/certificate analysis, security-header and cookie audits, technology fingerprinting and exposed-service detection, with AI-prioritized findings and remediation guidance.
• Digital Exposure Monitoring: continuous monitoring and alerts for breaches, leaked credentials and OSINT footprint.
• Code Security: business-logic vulnerability, secret and dependency-risk analysis via a connected repository.
• Exploitability validation: EPSS, CISA KEV and safe active testing to confirm the real-world risk of findings.

Free and paid plans (Pro and Business) are available; the number of assets, scan limits and modules per plan follow the Pricing page. Intrusive checks such as active port scanning are only performed on assets you have verified you own and explicitly consented to.

3. Accounts & Security

• You are responsible for providing accurate account information and keeping your login credentials secure.
• You are responsible for activity that occurs under your account.
• If misuse is detected — scanning assets you are not authorized to test, automation abuse, or attempted security breaches — the Company may restrict or terminate your account without prior notice.
• Notify the Company immediately if you become aware of any unauthorized account access or security incident.

4. Payments

• Paid web plans are processed by Paddle.com.
• Paddle.com is the Merchant of Record for all of the Company's web orders.
• The Company does not directly store payment-instrument data such as card numbers or CVC; this is processed and stored by Paddle or the relevant payment processor.
• Mobile (iOS/Android) subscriptions are handled separately through each app store's in-app purchase system and are subject to that store's policies.

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns.

5. Subscriptions & Auto-Renewal

• Paid plans are offered as monthly or annual subscriptions.
• Subscriptions may renew automatically for the same period until you cancel.
• If you cancel, you retain access until the end of your current billing period and are not charged for the next cycle.
• Where a free trial is offered, you may be charged for a paid subscription unless you cancel before the trial ends.
• If prices change, the Company will give reasonable advance notice, and the new price applies from renewals occurring after that notice.

6. Refunds

Detailed refund terms are set out on the Refund & Cancellation Policy page. Refunds are handled by Paddle as Merchant of Record. The Company processes refunds reasonably and does not limit any mandatory refund or withdrawal rights you have under applicable consumer protection law.

7. Prohibited Conduct

You must not:

• Use the Service unlawfully or in violation of applicable law.
• Scan or test assets you are not authorized to test, or infringe the rights of others.
• Reverse-engineer, extract source code from, or make unauthorized copies of the Service.
• Make excessive automated requests or otherwise disrupt normal operation of the Service.
• Exploit any discovered security vulnerability.
• Create or distribute spam, phishing, fraud, malware or illegal content.
• Use the Service in any way that would violate the Paddle Acceptable Use Policy.

8. Intellectual Property

• The Service, logos, UI, code, documentation and Company-provided content belong to the Company or its licensors.
• You retain rights to the data and scan targets you input; the Company processes them solely to provide the Service.
• AI-generated analysis and remediation guidance is not guaranteed to be accurate. You are responsible for verifying outputs before relying on them and must not use outputs in a way that infringes third-party rights.

9. Changes & Discontinuation

The Company may change the Service's features, plans or configuration, or temporarily suspend all or part of the Service for maintenance or incident response. For material changes, the Company will provide reasonable notice.

10. Disclaimers & Limitation of Liability

The Service is provided “as is,” and the Company does not warrant that it will always be error-free or uninterrupted. heimdallX security findings are informational and are not a substitute for professional judgment (medical, legal, financial) or high-risk decisions. To the extent permitted by law, the Company's liability may be limited; however, liability for the Company's willful misconduct or gross negligence, and any liability that cannot be excluded under mandatory law, is not limited.

11. Governing Law & Disputes

The governing law and competent court for these Terms are not yet finalized. [TODO: Confirm governing law and jurisdiction — legal review needed.] In the event of a dispute, the Company and the user will seek to resolve it in good faith. This does not limit any jurisdiction or rights guaranteed to you under applicable consumer protection law.

12. Contact

• Email: [email protected]
• Support Phone: 070-8676-0210