Terms of Service

1. Acceptance

By creating an account or installing the TLS Lane agent, you agree to these Terms. If you do not agree, do not use the service.

2. Description of Service

TLS Lane provides a software agent that monitors and optionally modifies TLS handshakes on your systems. The management dashboard collects aggregated cryptographic metadata from your agents.

3. Authorized Use Only

You agree to:

• Only deploy TLS Lane on systems you own or are explicitly authorized to manage
• Comply with all applicable laws, regulations, and organizational policies regarding network interception
• Not use TLS Lane to intercept traffic of third parties without their knowledge and consent
• Not use TLS Lane for any unlawful purpose, including but not limited to unauthorized surveillance, credential theft, or man-in-the-middle attacks on systems you do not control

4. Account Responsibility

You are responsible for maintaining the confidentiality of your agent token. Your token grants access to deploy agents and report data to your account. Treat it as a credential.

5. Data Collection

The agent collects TLS handshake metadata: domain (SNI), cipher suite, TLS version, key exchange group, direction, and action taken. Domain names are sent in plaintext over HTTPS to enable crypto inventory reporting. See our Privacy Policy for details.

We do not collect:

• Application-layer payloads or content
• IP addresses of endpoints
• Certificate private keys or session keys

Agent logs are only uploaded when you explicitly request retrieval from the Support page. A redaction tool is provided to remove personal information before submitting logs as part of a support ticket.

6. Disclaimer of Warranties

In particular:

• TLS interception may break applications that perform certificate pinning or mutual TLS authentication
• Splice mode modifies cryptographic properties of connections, which may have compliance implications for your organization
• The agent operates at the network level and may affect system stability if misconfigured
• Post-quantum cryptography standards are evolving; supported algorithms may change

7. Limitation of Liability

To the maximum extent permitted by law, TLS Lane and its creators shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of data, loss of profits, service interruption, or security incidents arising from use of the software.

8. Indemnification

You agree to indemnify and hold harmless TLS Lane and its creators from any claims, damages, losses, or expenses arising from your use of the service, including unauthorized deployment or violation of applicable laws.

9. Free Tier

Accounts with 10 or fewer registered agents may use all features at no cost. Free tier accounts are subject to automatic archival after 1 year of inactivity (no login and no agent heartbeat). Archived accounts enter a 30-day grace period during which you can log in and restore your account.

10. Paid Licenses

Accounts exceeding 10 agents require a paid license. Pricing is per-host and published on the Pricing page.

• License term: Annual. Includes software updates and management plane access for 1 year.
• Renewal: Same rate as the initial license. If you do not renew, your agents continue to function at the last installed version but lose management plane access (heartbeat, events, config, policy).
• Host count: Your license covers the number of hosts specified at purchase. If your registered agent count exceeds your licensed count, we will notify you to upgrade. We will not disable your agents without notice.
• Upgrades: You may upgrade from monitor to splice mid-term by paying the difference. You may add hosts at the applicable rate prorated for the remaining term.
• Refunds: If you are unsatisfied within the first 30 days, contact us for a full refund. After 30 days, licenses are non-refundable but remain valid for the full term.

11. Service Level

For paid accounts:

• Management plane uptime: We target 99.9% availability for the SaaS management dashboard. This does not affect your agents — agents operate independently and continue monitoring/splicing when the management plane is unreachable.
• Support response: We respond to support tickets within 1 business day. Critical issues (agent crashes, data loss) are prioritized.
• Data retention: Your connection events are retained per your configured retention period (default 90 days). We do not delete paid account data without notice.

On-premises deployments are self-hosted; uptime and availability are your responsibility.

12. Service Changes

We may modify, suspend, or discontinue the service at any time. We will make reasonable efforts to notify users of material changes. For paid users, we will provide at least 90 days notice before discontinuing the management plane service. Continued use after changes constitutes acceptance.

13. Account Termination

You may delete your account at any time. Deleted accounts enter a 30-day grace period before permanent data removal. During this period you can log in and cancel the deletion. We may also terminate accounts that violate these terms, with notice.

14. Open Source Components

The TLS Lane agent includes open source components governed by their respective licenses. Use of those components is subject to their terms.

15. Governing Law

These terms are governed by applicable law. Any disputes shall be resolved in a court of competent jurisdiction.

16. Contact

Questions about these terms: Contact us.