Terms & conditions

FarosGuard AI reviews the configuration of your Microsoft 365 tenant using read-only Microsoft Graph access, explains the risks it finds and produces prioritised remediation guidance, compliance mapping and optional attack-path simulations.

The service never changes your tenant configuration, never sends email on your behalf and never attempts exploitation, password guessing or phishing. All findings are advisory.

• You must provide accurate registration and billing details and keep them up to date.
• You are responsible for the confidentiality of your sign-in credentials and for the activity of users you invite to your organisation.
• You confirm that you are authorised to connect the Microsoft 365 tenants you add and to consent to the read-only permissions requested.

• Plans are billed monthly in euro through our payment provider. Prices are shown on the pricing page and exclude VAT where applicable.
• Upgrades take effect immediately with pro-rated charges; downgrades and cancellations take effect at the end of the current billing period.
• As a business customer buying a digital service supplied immediately, the statutory consumer right of withdrawal does not apply. Unused periods are not refunded unless required by law.
• We may change prices with at least 30 days' notice before your next renewal.

You may only use the service against tenants and domains you own or are contracted to manage. You must not attempt to circumvent plan limits, reverse engineer the service, resell it without written agreement, or use it to conduct unauthorised testing against third parties.

For personal data contained in the tenant configuration we assess, you act as data controller and ETE FAROS LTD acts as processor, processing that data only on your instructions and only to deliver the service. For your own account and billing data we act as controller. Our privacy notice describes the lawful bases, retention periods, sub-processors and your rights under the EU General Data Protection Regulation.

We apply appropriate technical and organisational measures, including tenant-level access isolation, encryption in transit and least-privilege read-only credentials. We notify you without undue delay if a personal data breach affecting your data occurs.

We aim for high availability but do not guarantee uninterrupted service. Maintenance, Microsoft API limits, licence limitations in your tenant or missing permissions may mean some checks return "needs review" instead of a result.

The service supports, but does not replace, your own security and compliance decisions. To the maximum extent permitted by law, our total liability in any 12-month period is limited to the fees you paid in that period, and we are not liable for indirect or consequential loss, loss of profit or loss of data. Nothing limits liability that cannot be limited by law.

You may stop using the service and delete your organisation at any time. We may suspend or terminate access for non-payment or serious breach of these terms. On termination we delete or anonymise your assessment data in line with the retention periods in our privacy notice.

We may update these terms; material changes are announced in the application and you will be asked to accept the new version. These terms are governed by the laws of Cyprus and the courts of Cyprus have exclusive jurisdiction, without affecting your mandatory local rights.

Questions about these terms: info@etefaros.eu