Legal Documents

Terms of Service

Effective Date: October 1, 2026. Last updated: October 4, 2026.

1. Introduction

Welcome to BaseLock. These Terms of Service ("Terms") govern your use of our services.

By accessing or using our Services, you agree to be bound by these Terms. If you do not agree to these Terms, do not access or use our Services.

2. Definitions

Throughout these Terms, the following definitions apply:

  • "BaseLock," "we," "our," or "us" refers to AB Foundry LLC, a Wyoming limited liability company, and its subsidiaries and affiliates. BaseLock is a product of AB Foundry LLC.
  • "User," "you," or "your" refers to any individual or entity that accesses or uses our Services.
  • "Services" means the endpoint security, device management, and protection services provided by BaseLock, including the BaseLock dashboard and the endpoint agents installed on your devices, and BaseLock's Security Advisor service ("Security Advisor" or "Advisor"), a text-message security advisor that answers security questions, checks content you forward, scans a mailbox you choose to connect, and alerts you to data breaches.
  • "Endpoint Agents" means the security and management software (currently the CrowdStrike Falcon agent and the JumpCloud agent) that BaseLock arranges to be installed on your devices to deliver the Services.
  • "Content" means any information, data, text, software, graphics, or materials that appears on or is available through our Services.

3. Eligibility

To use our Services, you must be at least 18 years old and capable of forming a binding contract with us. If you are using our Services on behalf of an organization, you represent and warrant that you have the authority to bind that organization to these Terms.

4. Account Registration

To access certain features of our Services, you may need to create an account. When registering for an account, you agree to provide accurate, current, and complete information, including a valid mobile phone number for authentication. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. You must notify us immediately of any unauthorized use of your account or any other breach of security.

5. License and Restrictions

5.1. License

Subject to your compliance with these Terms, we grant you a limited, non-exclusive, non-transferable, and revocable license to access and use our Services for your personal or internal business purposes, and to install and use the Endpoint Agents on devices that you own or are authorized to manage.

5.2. Restrictions

You agree not to:

  • Use our Services for any illegal purpose or in violation of any applicable laws or regulations
  • Attempt to gain unauthorized access to our Services or related systems or networks
  • Interfere with or disrupt the integrity or performance of our Services
  • Reverse engineer, decompile, or disassemble any portion of our Services or the Endpoint Agents, except to the extent expressly permitted by applicable law
  • Copy, modify, distribute, sell, or lease any part of our Services
  • Remove or alter any proprietary notices or markings on our Services
  • Use our Services to transmit harmful code or malware
  • Use the Services or Endpoint Agents to attack, intrude into, or compromise systems you do not own or are not authorized to test
  • Install the Endpoint Agents on devices you do not own or are not authorized to manage
  • Use the Services to evade lawful detection, monitoring, or law enforcement
  • Use Security Advisor to test content against our checks, to probe or investigate other people, or through automated means rather than by a person sending their own messages

We may limit or suspend free use of the Services that looks like abuse.

6. Fees and Payment

6.1. Subscription Plans

We offer various subscription plans with different features and pricing. The details of each plan, including pricing, billing frequency, and included features, are provided on our website or in separate agreements. Security Advisor is free and needs no payment. Paid plans have no free trial; a paid plan begins on the date of your first payment. When an Individual subscription ends, your account continues on the free Advisor plan.

6.2. Payment Terms

You agree to pay all fees associated with your selected subscription plan. Prices are exclusive of tax: every price is plus applicable tax. Applicable sales and similar taxes are calculated from your billing address, shown before you pay, and added to each charge, including renewals and additional devices. Payments are processed by Stripe; BaseLock does not store full payment card numbers. We may change our prices with at least thirty (30) days' notice to you, and such changes will apply to subsequent billing cycles.

6.3. 30-Day Money-Back Guarantee

If you are within thirty (30) days of your first paid subscription on your account, including one you started from the free plan, you may cancel and request a refund of what you have paid during that period, including any additional devices you added, by contacting support@getbaselock.com. After thirty (30) days, payments are non-refundable except as required by applicable law.

The guarantee applies once per account, to your first paid subscription only. Renewals, and any subscription started after the first, are non-refundable. A refunded Individual subscription ends, and your account continues on the free Advisor plan.

6.4. Automatic Renewal and Cancellation

Your subscription will automatically renew at the end of each billing period at the then-current price, and you authorize us to charge your payment method for each billing period until you cancel. You may cancel auto-renewal at any time from your account settings or by contacting support@getbaselock.com. Cancellation takes effect at the end of your current billing period, and you retain access to the Services through that period. For annual subscriptions, we will send a renewal reminder at least fifteen (15) days before the renewal date.

Cancelling an Individual subscription does not close your account. When the paid period ends, your account moves to the free Advisor plan, and you keep your sign-in and your phone number. Business and Enterprise subscriptions do not move to the free plan: when one ends, the Services stop for the business and for every member of it.

If a payment fails, the Services continue while we retry the payment for up to ten (10) days. If it has still not been paid by then, the subscription ends as described in this Section.

When a paid subscription ends, the services it paid for stop. We remove your enrolled devices and issue commands to uninstall the Endpoint Agents from them, remove your records from our web filtering and device management providers, end any remote access under Section 6C, and disconnect the services you connected, revoking our access at the provider where the provider allows it, and we delete the findings those services produced. An Individual account that moves to the free plan keeps its oldest connected mailbox, every connected service that does not read mail, and its data breach alerts and their results. Any other mailbox is disconnected as described above, together with anything else connected through the same account, such as its calendar or files, which you can connect again on their own.

If you dispute a charge with your bank or card issuer, we lock the account, including sign-in, until we have reviewed the dispute, and the paid services stop as described above.

6.5. Additional Devices

Your plan includes a set number of devices. You may add additional devices at any time from your account dashboard. Additional devices are charged at the rate shown on our pricing page, prorated for the remainder of your current billing period and then at the full rate on each renewal.

Additional devices are part of the term you have already paid for. You may remove a device from your dashboard at any time, and doing so frees that slot so you can enroll a replacement device, but it does not reduce the fees for the current billing period and does not create a refund or a credit. To reduce the number of devices on your plan from your next renewal, contact support@getbaselock.com before your renewal date.

Fees for additional devices are non-refundable, except as required by applicable law.

6.6. The Free Plan

The free plan includes a limited number of Advisor questions and checks, one connected mailbox, and the other services you can connect from Advisor Connectors. We may change what the free plan includes, and we will tell you before a change takes effect. Fees and refunds do not apply to the free plan.

6A. Endpoint Agents and Device Consent

The Services rely on the Endpoint Agents to monitor, detect threats on, and remotely manage your devices. By installing the Endpoint Agents, you authorize BaseLock and its security partners (currently CrowdStrike and JumpCloud) to:

  • Install, update, and reconfigure the Endpoint Agents on the devices you enroll;
  • Collect the device telemetry and threat-detection metadata described in our Privacy Policy;
  • Apply security policies, including blocking known-bad files and quarantining suspicious activity;
  • Execute remote commands necessary for support, troubleshooting, or removing the Endpoint Agents on offboarding.

You represent that you own each device you enroll, or that you have full authority to install the Endpoint Agents and consent to monitoring on that device. You may remove a device at any time from your account dashboard; on offboarding, BaseLock will issue commands to uninstall the Endpoint Agents from that device.

6B. Reported Messages and the Shared Threat Corpus

You may report a suspicious message by forwarding it to the reporting address on your dashboard or by texting it to our messaging number. Either way, we store the message itself before extracting technical indicators from it, and what we can collect depends on the channel: a forwarded email carries its full headers, the sender's complete email address, any attachments, and the authentication result for the sending domain, while a texted message carries only its own text, since texting gives us no headers, attachments, or sender address to collect. Both are described fully in our Privacy Policy.

We do not certify that a reported message is safe. Our response describes what we found, and it is not a guarantee. We may report that we found no signs of a problem, and that is not the same as telling you the message is genuine. Treat unexpected messages carefully regardless of what we report.

A message or file you report or forward, whether an email, a text message or a file, and especially a forwarded email, will usually contain information about the person who sent it and may contain information about others. That person is a third party: not a BaseLock customer, and someone who has not agreed to these Terms. By reporting the message you confirm you are entitled to share that information with us for this purpose, and we handle it as described in our Privacy Policy.

We attempt to remove anything that looks like a password or other credential from what you send us before we examine it, but this is not guaranteed to catch everything, so avoid including passwords or other credentials in a message you report.

We delete the message content itself, including any attachments, within seven (7) days of receiving it, and we do not share it with other customers. See our Privacy Policy for the narrow case in which a full link is sent to a reputation vendor to check where it leads.

We extract technical indicators from the message, such as registrable domains, file hashes, sender domains, and a non-reversible hash of the sender address, and add them to a threat catalog shared across every BaseLock customer, not only the one who reported it. There is no opt-out from this. Retention differs by indicator type; see the Shared Threat Corpus section of our Privacy Policy for how long each type is kept and what happens to it when you delete your account.

6C. Remote Investigative Access

You authorize BaseLock security personnel to remotely access an enrolled device to investigate a security event and to remediate it, using a live, interactive session through the Endpoint Agents already installed on that device. This is a further description of the remote-command authorization in Section 6A, not a separate grant of rights, and it exists to protect you, other BaseLock customers, and the shared threat catalog described in Section 6B.

We will notify you by email and text message about this access. Depending on how the session starts, you may receive the notice before access begins, with the option to have it start right away, or you may receive it once access has already started because the waiting period elapsed or a supervisor authorized an immediate start. Where BaseLock has identified a security detection on the device, or is following up on one, this access does not require your approval and proceeds whether or not you respond to the notice. For all other purposes, including routine maintenance and investigating an issue you reported, BaseLock will not access the device unless you confirm the notice. The notice tells you what is happening and, where possible, lets you make it start sooner. We will follow up again once the work is done.

Each session is time limited and logged. A session lasts up to four hours from when it starts, and BaseLock personnel may extend an active session in additional four hour increments, but no single session may run longer than twenty-four (24) hours in total, counted from when it started. That limit is enforced independently of any extension and is checked automatically at least once per minute. Access is removed automatically when a session ends, that limit is reached, or no valid session covers a given account, regardless of what our internal records say at the time, so a missed step or a system failure cannot leave access in place. A small number of administrative accounts that BaseLock uses to operate its own security tooling are held to a different standard and are not subject to the automatic time limit in this paragraph, because they administer the tooling itself rather than investigate a specific customer device. Every session under this Section, on any account, is logged regardless.

Only BaseLock security personnel authorized for incident response may open a session under this Section, and only through a monitored process limited to that team.

6D. Security Advisor

Advisor's answers are general security guidance produced with the help of an AI model, and they may be wrong. They are not professional, legal or incident-response advice. Do not send Advisor passwords, sign-in codes or financial details.

Advisor may keep short notes from your own questions, such as the devices you use or that you are travelling, to give you better advice. You can see and delete them in Settings, and turn note-keeping off there. Notes cannot be deleted by text message. Notes are erased 12 months after you last use Advisor, or when you delete your account.

We keep your Advisor conversations for ninety (90) days. Texting LOST or STOLEN to our number pauses Advisor for that number until you turn it back on from the website. Your use of Advisor is subject to the limits of your plan.

6E. Connected Mailboxes

You may connect a mailbox only if you own it or are authorized to connect it. We use that access only to read: we never send, move, change or delete your mail or your mail settings. You can disconnect a mailbox at any time from Settings or from your mail provider's own account settings, and we stop reading it as soon as you disconnect.

7. Intellectual Property Rights

Our Services and all content, features, and functionality are owned by us, our licensors, or other providers and are protected by copyright, trademark, and other intellectual property laws. These Terms do not transfer any ownership rights to you.

8. Privacy

Your privacy is important to us. Please review our Privacy Policy to understand how we collect, use, and disclose information about you.

9. Term and Termination

9.1. Term

These Terms will remain in effect until terminated by you or us.

9.2. Termination by You

You may terminate your account or subscription at any time by following the instructions on our website or contacting our support team.

9.3. Termination by Us

We may suspend or terminate your access to our Services at any time for any reason, including if we believe you have violated these Terms. We will provide notice of termination when appropriate.

9.4. Effect of Termination

Ending a paid subscription and closing your account are separate actions. Ending a subscription is described in Section 6.4, and it does not close an Individual account. If we terminate your access, your right to use our Services will cease at the end of your current billing period (or immediately, in the case of termination for breach), and BaseLock will issue commands to uninstall the Endpoint Agents from your enrolled devices. When your account is closed, whether by you from Settings or by us, your account data, including the threat detection records and device security status for your devices, is deleted within thirty (30) days of closing it, except for a minimal tombstone record retained to honor your deletion request and meet legal obligations, as described in our Privacy Policy. Any provisions of these Terms that by their nature should survive termination will survive termination.

10. Warranty Disclaimers

THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED. TO THE FULLEST EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.

WE DO NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE, OR THAT ANY DEFECTS WILL BE CORRECTED.

11. Limitation of Liability

TO THE FULLEST EXTENT PERMITTED BY LAW, IN NO EVENT WILL WE BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING OUT OF OR RELATING TO YOUR USE OF OR INABILITY TO USE THE SERVICES.

OUR TOTAL LIABILITY TO YOU FOR ALL CLAIMS ARISING FROM OR RELATING TO THESE TERMS OR THE SERVICES WILL NOT EXCEED THE AMOUNT YOU HAVE PAID TO US FOR THE SERVICES IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM OR, IF YOU HAVE PAID NOTHING, FIFTY US DOLLARS (US$50).

12. Indemnification

You agree to indemnify and hold harmless BaseLock and its affiliates from any claims arising from your use of the Services.

13. Governing Law and Jurisdiction

These Terms and any disputes arising out of or relating to these Terms or the Services will be governed by the laws of the State of California, without regard to its conflict of law principles. Any legal action or proceeding arising out of these Terms will be brought exclusively in the federal or state courts located in San Francisco, California.

14. Miscellaneous

14.1. Entire Agreement

These Terms, together with our Privacy Policy and any other agreements expressly incorporated by reference, constitute the entire agreement between you and us regarding the Services.

14.2. Severability

If any provision of these Terms is found to be unenforceable, that provision will be limited or eliminated to the minimum extent necessary, and the remaining provisions will remain in full force and effect.

14.3. No Waiver

Our failure to enforce any right or provision of these Terms will not be considered a waiver of such right or provision.

14.4. Assignment

You may not assign or transfer these Terms without our prior written consent. We may assign or transfer these Terms without your consent.

15. SMS Communications and Consent

15.1. Consent to Receive SMS Messages

When you create a BaseLock account you are asked to check a separate box consenting to receive text messages from BaseLock at the number you provide. We send only these kinds of message to that number:

  • One-time passcodes: an eight-digit code to verify your number when you sign up, and an eight-digit code each time you sign in. BaseLock accounts have no password, so your phone number is how you sign in.
  • Security alerts: a notice when we detect a new or suspicious program on one of your devices. These may include a single-use link that lets you allow or block that program.
  • Account notifications: a notice about activity on your account, such as when someone joins your team.
  • Mailbox and service alerts: a notice when our checks find something that needs your attention in a mailbox or other service you connected.
  • Remote-access notices: a notice when our staff will remotely access one of your devices, as described in section 6C, and when that access ends. These may include a link to review the access.
  • Advisor conversations: replies to questions you text Security Advisor, and the results of checks on texts, emails and files you forward to us.
  • Breach alerts: a notice when your email address or phone number appears in a newly published data breach.

We do not send marketing or promotional text messages, and we do not send bulk messages. Every message is triggered by your own action, by activity on one of your devices or connected accounts, by our staff accessing one of your devices, or, for a breach alert, by a newly published data breach that includes your information.

Our text messages come from +1 877 907 2525, a verified toll-free number. On phones that support RCS, our messages may instead arrive from the verified BaseLock RCS agent, which shows our name and logo.

15.2. Message Frequency and Charges

Message frequency varies with your conversation. Expect about one message each time you sign in, a reply for each message you send Advisor, plus alerts only when we detect something on a device or find your information in a new data breach. Message and data rates may apply. BaseLock does not charge for text messages, but your wireless carrier may. Wireless carriers are not liable for delayed or undelivered messages.

15.3. Opting Out with STOP

Reply STOP to any BaseLock message, whether it arrived as a text or as an RCS message, to stop all messages from us, including Advisor. STOP takes effect immediately. Reply START or UNSTOP to start receiving messages again.

Please understand what this means before you do it. Because your phone number is how you sign in, turning off texts means we cannot send you a sign-in code, so you will not be able to sign in until you reply START or UNSTOP, or contact us at support@getbaselock.com. STOP does not close your account, cancel a subscription or remove BaseLock from your devices.

15.4. Getting Help with HELP

Reply HELP to any BaseLock message for help, text us on +1 877 907 2525, or email us at support@getbaselock.com.

15.5. Phone Number Changes

You are responsible for keeping your phone number up to date. If your phone number changes, update it in your account settings so you can continue to sign in and receive security alerts.

15.6. Privacy

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Messages are delivered through our telecommunications and cloud providers solely for the purposes described above. For more information, see our Privacy Policy.

16. Contact Us

If you have any questions about these Terms, please contact us at:

Email: legal@getbaselock.com