Legal Documents

Terms of Service

Effective Date: October 1, 2026

1. Introduction

Welcome to BaseLock. These Terms of Service ("Terms") govern your use of our services.

By accessing or using our Services, you agree to be bound by these Terms. If you do not agree to these Terms, do not access or use our Services.

2. Definitions

Throughout these Terms, the following definitions apply:

  • "BaseLock," "we," "our," or "us" refers to AB Foundry LLC, a Wyoming limited liability company, and its subsidiaries and affiliates. BaseLock is a product of AB Foundry LLC.
  • "User," "you," or "your" refers to any individual or entity that accesses or uses our Services.
  • "Services" means the endpoint security, device management, and protection services provided by BaseLock, including the BaseLock dashboard and the endpoint agents installed on your devices.
  • "Endpoint Agents" means the security and management software (currently the CrowdStrike Falcon agent and the JumpCloud agent) that BaseLock arranges to be installed on your devices to deliver the Services.
  • "Content" means any information, data, text, software, graphics, or materials that appears on or is available through our Services.

3. Eligibility

To use our Services, you must be at least 18 years old and capable of forming a binding contract with us. If you are using our Services on behalf of an organization, you represent and warrant that you have the authority to bind that organization to these Terms.

4. Account Registration

To access certain features of our Services, you may need to create an account. When registering for an account, you agree to provide accurate, current, and complete information, including a valid mobile phone number for authentication. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. You must notify us immediately of any unauthorized use of your account or any other breach of security.

5. License and Restrictions

5.1. License

Subject to your compliance with these Terms, we grant you a limited, non-exclusive, non-transferable, and revocable license to access and use our Services for your personal or internal business purposes, and to install and use the Endpoint Agents on devices that you own or are authorized to manage.

5.2. Restrictions

You agree not to:

  • Use our Services for any illegal purpose or in violation of any applicable laws or regulations
  • Attempt to gain unauthorized access to our Services or related systems or networks
  • Interfere with or disrupt the integrity or performance of our Services
  • Reverse engineer, decompile, or disassemble any portion of our Services or the Endpoint Agents, except to the extent expressly permitted by applicable law
  • Copy, modify, distribute, sell, or lease any part of our Services
  • Remove or alter any proprietary notices or markings on our Services
  • Use our Services to transmit harmful code or malware
  • Use the Services or Endpoint Agents to attack, intrude into, or compromise systems you do not own or are not authorized to test
  • Install the Endpoint Agents on devices you do not own or are not authorized to manage
  • Use the Services to evade lawful detection, monitoring, or law enforcement

6. Fees and Payment

6.1. Subscription Plans

We offer various subscription plans with different features and pricing. The details of each plan, including pricing, billing frequency, and included features, are provided on our website or in separate agreements. BaseLock does not offer free trials; service begins on the date of your first paid subscription.

6.2. Payment Terms

You agree to pay all fees associated with your selected subscription plan. Payments are processed by Stripe; BaseLock does not store full payment card numbers. We may change our prices with at least thirty (30) days' notice to you, and such changes will apply to subsequent billing cycles.

6.3. 30-Day Money-Back Guarantee

If you are within thirty (30) days of your first paid signup with BaseLock, you may cancel and request a refund of what you have paid during that period, including any additional devices you added, by contacting support@getbaselock.com. After thirty (30) days, payments are non-refundable except as required by applicable law.

The guarantee applies once per account, to your first paid subscription only. Renewals, and any subscription started after the first, are non-refundable.

6.4. Automatic Renewal and Cancellation

Your subscription will automatically renew at the end of each billing period at the then-current price, and you authorize us to charge your payment method for each billing period until you cancel. You may cancel auto-renewal at any time from your account settings or by contacting support@getbaselock.com. Cancellation takes effect at the end of your current billing period, and you retain access to the Services through that period. For annual subscriptions, we will send a renewal reminder at least fifteen (15) days before the renewal date.

6.5. Additional Devices

Your plan includes a set number of devices. You may add additional devices at any time from your account dashboard. Additional devices are charged at the rate shown on our pricing page, prorated for the remainder of your current billing period and then at the full rate on each renewal.

Additional devices are part of the term you have already paid for. You may remove a device from your dashboard at any time, and doing so frees that slot so you can enroll a replacement device, but it does not reduce the fees for the current billing period and does not create a refund or a credit. To reduce the number of devices on your plan from your next renewal, contact support@getbaselock.com before your renewal date.

Fees for additional devices are non-refundable, except as required by applicable law.

6A. Endpoint Agents and Device Consent

The Services rely on the Endpoint Agents to monitor, detect threats on, and remotely manage your devices. By installing the Endpoint Agents, you authorize BaseLock and its security partners (currently CrowdStrike and JumpCloud) to:

  • Install, update, and reconfigure the Endpoint Agents on the devices you enroll;
  • Collect the device telemetry and threat-detection metadata described in our Privacy Policy;
  • Apply security policies, including blocking known-bad files and quarantining suspicious activity;
  • Execute remote commands necessary for support, troubleshooting, or removing the Endpoint Agents on offboarding.

You represent that you own each device you enroll, or that you have full authority to install the Endpoint Agents and consent to monitoring on that device. You may remove a device at any time from your account dashboard; on offboarding, BaseLock will issue commands to uninstall the Endpoint Agents from that device.

6B. Reported Messages and the Shared Threat Corpus

You may report a suspicious message by forwarding it to the reporting address on your dashboard or by texting it to our messaging number. Either way, we store the message itself before extracting technical indicators from it, and what we can collect depends on the channel: a forwarded email carries its full headers, the sender's complete email address, any attachments, and the authentication result for the sending domain, while a texted message carries only its own text, since texting gives us no headers, attachments, or sender address to collect. Both are described fully in our Privacy Policy.

We do not certify that a reported message is safe. Our response describes what we found, and it is not a guarantee. We may report that we found no signs of a problem, and that is not the same as telling you the message is genuine. Treat unexpected messages carefully regardless of what we report.

A reported message, especially a forwarded email, will usually contain information about the person who sent it and may contain information about others. That person is a third party: not a BaseLock customer, and someone who has not agreed to these Terms. By reporting the message you confirm you are entitled to share that information with us for this purpose, and we handle it as described in our Privacy Policy.

We attempt to remove anything that looks like a password or other credential from what you send us before we examine it, but this is not guaranteed to catch everything, so avoid including passwords or other credentials in a message you report.

We delete the message content itself, including any attachments, within seven (7) days of receiving it, and we do not share it with other customers. See our Privacy Policy for the narrow case in which a full link is sent to a reputation vendor to check where it leads.

We extract technical indicators from the message, such as registrable domains, file hashes, sender domains, and a non-reversible hash of the sender address, and add them to a threat catalog shared across every BaseLock customer, not only the one who reported it. There is no opt-out from this. Retention differs by indicator type; see the Shared Threat Corpus section of our Privacy Policy for how long each type is kept and what happens to it when you delete your account.

6C. Remote Investigative Access

You authorize BaseLock security personnel to remotely access an enrolled device to investigate a security event and to remediate it, using a live, interactive session through the Endpoint Agents already installed on that device. This is a further description of the remote-command authorization in Section 6A, not a separate grant of rights, and it exists to protect you, other BaseLock customers, and the shared threat catalog described in Section 6B.

We will notify you by email and text message about this access. Depending on how the session starts, you may receive the notice before access begins, with the option to have it start right away, or you may receive it once access has already started because the waiting period elapsed or a supervisor authorized an immediate start. Where BaseLock has identified a security detection on the device, or is following up on one, this access does not require your approval and proceeds whether or not you respond to the notice. For all other purposes, including routine maintenance and investigating an issue you reported, BaseLock will not access the device unless you confirm the notice. The notice tells you what is happening and, where possible, lets you make it start sooner. We will follow up again once the work is done.

Each session is time limited and logged. A session lasts up to four hours from when it starts, and BaseLock personnel may extend an active session in additional four hour increments, but no single session may run longer than twenty-four (24) hours in total, counted from when it started. That limit is enforced independently of any extension and is checked automatically at least once per minute. Access is removed automatically when a session ends, that limit is reached, or no valid session covers a given account, regardless of what our internal records say at the time, so a missed step or a system failure cannot leave access in place. A small number of administrative accounts that BaseLock uses to operate its own security tooling are held to a different standard and are not subject to the automatic time limit in this paragraph, because they administer the tooling itself rather than investigate a specific customer device. Every session under this Section, on any account, is logged regardless.

Only BaseLock security personnel authorized for incident response may open a session under this Section, and only through a monitored process limited to that team.

7. Intellectual Property Rights

Our Services and all content, features, and functionality are owned by us, our licensors, or other providers and are protected by copyright, trademark, and other intellectual property laws. These Terms do not transfer any ownership rights to you.

8. Privacy

Your privacy is important to us. Please review our Privacy Policy to understand how we collect, use, and disclose information about you.

9. Term and Termination

9.1. Term

These Terms will remain in effect until terminated by you or us.

9.2. Termination by You

You may terminate your account or subscription at any time by following the instructions on our website or contacting our support team.

9.3. Termination by Us

We may suspend or terminate your access to our Services at any time for any reason, including if we believe you have violated these Terms. We will provide notice of termination when appropriate.

9.4. Effect of Termination

Upon termination, your right to use our Services will cease at the end of your current billing period (or immediately, in the case of termination for breach). BaseLock will issue commands to uninstall the Endpoint Agents from your enrolled devices. Your account data is deleted within thirty (30) days, except for a minimal tombstone record retained to honor your deletion request and meet legal obligations, as described in our Privacy Policy. Any provisions of these Terms that by their nature should survive termination will survive termination.

10. Warranty Disclaimers

THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED. TO THE FULLEST EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.

WE DO NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE, OR THAT ANY DEFECTS WILL BE CORRECTED.

11. Limitation of Liability

TO THE FULLEST EXTENT PERMITTED BY LAW, IN NO EVENT WILL WE BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING OUT OF OR RELATING TO YOUR USE OF OR INABILITY TO USE THE SERVICES.

OUR TOTAL LIABILITY TO YOU FOR ALL CLAIMS ARISING FROM OR RELATING TO THESE TERMS OR THE SERVICES WILL NOT EXCEED THE AMOUNT YOU HAVE PAID TO US FOR THE SERVICES IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

12. Indemnification

You agree to indemnify and hold harmless BaseLock and its affiliates from any claims arising from your use of the Services.

13. Governing Law and Jurisdiction

These Terms and any disputes arising out of or relating to these Terms or the Services will be governed by the laws of the State of California, without regard to its conflict of law principles. Any legal action or proceeding arising out of these Terms will be brought exclusively in the federal or state courts located in San Francisco, California.

14. Miscellaneous

14.1. Entire Agreement

These Terms, together with our Privacy Policy and any other agreements expressly incorporated by reference, constitute the entire agreement between you and us regarding the Services.

14.2. Severability

If any provision of these Terms is found to be unenforceable, that provision will be limited or eliminated to the minimum extent necessary, and the remaining provisions will remain in full force and effect.

14.3. No Waiver

Our failure to enforce any right or provision of these Terms will not be considered a waiver of such right or provision.

14.4. Assignment

You may not assign or transfer these Terms without our prior written consent. We may assign or transfer these Terms without your consent.

15. SMS Communications and Consent

15.1. Consent to Receive SMS Messages

When you create a BaseLock account you are asked to check a separate box consenting to receive text messages from BaseLock at the number you provide. We send only these kinds of message to that number:

  • One-time passcodes: an eight-digit code to verify your number when you sign up, and an eight-digit code each time you sign in. BaseLock accounts have no password, so your phone number is how you sign in.
  • Security alerts: a notice when we detect a new or suspicious program on one of your devices. These may include a single-use link that lets you allow or block that program.
  • Account notifications: a notice about activity on your account, such as when someone joins your team.

We do not send marketing or promotional text messages, and we do not send bulk messages. Every message is triggered by your own action or by activity on one of your devices.

15.2. Message Frequency and Charges

Message frequency varies. Expect about one message each time you sign in, plus security alerts only when we detect something on a device. Message and data rates may apply. BaseLock does not charge for text messages, but your wireless carrier may. Wireless carriers are not liable for delayed or undelivered messages.

15.3. Opting Out with STOP

Reply STOP to any BaseLock message to stop all text messages from us. On our toll-free number, STOP is processed by the wireless carrier and takes effect right away. Reply UNSTOP to start receiving messages again.

Please understand what this means before you do it. Because your phone number is how you sign in, turning off texts means we cannot send you a sign-in code, so you will not be able to sign in until you reply UNSTOP or contact us at support@getbaselock.com. Your subscription and your devices are not cancelled by replying STOP.

15.4. Getting Help with HELP

Reply HELP to any BaseLock message for help, text us on +1 877 907 2525, or email us at support@getbaselock.com.

15.5. Phone Number Changes

You are responsible for keeping your phone number up to date. If your phone number changes, update it in your account settings so you can continue to sign in and receive security alerts.

15.6. Privacy

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Messages are delivered through our telecommunications and cloud providers solely for the purposes described above. For more information, see our Privacy Policy.

16. Contact Us

If you have any questions about these Terms, please contact us at:

Email: legal@getbaselock.com