Dofo Teknoloji Anonim Şirketi (dba Deepinfo)
Registered Address: Necip Fazıl Mah. Günbatımı Sok. No:1, Ümraniye / Istanbul / Türkiye
Last Updated: March 11, 2026
Effective Date: March 11, 2026
These Terms and Conditions ("Terms") govern your access to and use of the services, platform, data feeds, API services, and website provided by Dofo Teknoloji Anonim Şirketi, doing business as Deepinfo ("Deepinfo," "we," "us," or "our"). By accessing or using any Deepinfo service, you agree to be bound by these Terms. If you do not agree, do not use our services.
1. Definitions
"Platform" means the Deepinfo web-based platform, including all modules (External Attack Surface Management, Cyber Threat Intelligence, Brand Risk Protection, Third-Party Risk Management, and Deep Search & Insights) and associated features.
"Services" means the Platform, Data Feeds, API Services, and any related services, tools, or features provided by Deepinfo.
"Data Feeds" means bulk data products delivered by Deepinfo, including domain, subdomain, DNS, Whois, SSL, and vulnerability datasets.
"API Services" means programmatic interfaces provided by Deepinfo for accessing internet intelligence data on demand.
"Customer" or "you" means the individual or legal entity that enters into an agreement with Deepinfo to use the Services.
"User" means any individual authorized by the Customer to access or use the Services.
"Customer Data" means data submitted by the Customer to the Platform, including but not limited to domain lists, asset inventories, third-party vendor information, and organizational identifiers. Customer Data does not include Deepinfo Data, platform usage analytics generated by Deepinfo, or aggregated and anonymized data that does not identify the Customer.
"Deepinfo Data" means all data collected, processed, generated, or made available by Deepinfo through the Services, including internet scan data, threat intelligence, vulnerability records, domain intelligence, and derived analytics.
"Derived Data" means analytics, insights, reports, scores, alerts, models, or other information created by the Customer using Deepinfo Data, where the original Deepinfo Data cannot be reconstructed or extracted in raw form.
"Authorized Purpose" means internal security operations, cyber defense, threat intelligence, digital risk monitoring, security research, incident response, asset discovery, vulnerability management, vendor risk analysis, or other lawful defensive cybersecurity purposes.
2. Acceptance of Terms
By creating an account, executing an order form, or otherwise accessing or using the Services, you acknowledge that you have read, understood, and agree to be bound by these Terms. If you are entering into these Terms on behalf of a legal entity, you represent and warrant that you have the authority to bind that entity to these Terms.
The Services are designed and intended for business, professional, and enterprise use. You represent and warrant that you are accessing the Services for commercial purposes and not as an individual consumer.
These Terms apply in addition to any order form, subscription agreement, or other written agreement between you and Deepinfo. In the event of a conflict between these Terms and a signed agreement, the signed agreement shall prevail.
3. Account Registration and Security
To access the Services, you must create an account and provide accurate, complete, and current information. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account.
You agree to notify Deepinfo immediately of any unauthorized use of your account or any other breach of security. Deepinfo shall not be liable for any loss or damage arising from your failure to comply with this section.
You may designate additional Users under your account. You are responsible for ensuring that all Users comply with these Terms and for all activities conducted by Users under your account.
The Customer is responsible for assigning access rights appropriately, maintaining the security of its own environments and devices used to access the Services, and promptly disabling access for Users who are no longer authorized.
4. Services and Platform Access
Subject to these Terms and payment of applicable fees, Deepinfo grants you a non-exclusive, non-transferable, revocable right to access and use the Services during your subscription period.
Deepinfo will use commercially reasonable efforts to make the Platform available 24 hours a day, 7 days a week, except for planned maintenance, emergency maintenance, or events beyond our reasonable control. Deepinfo does not guarantee uninterrupted or error-free access to the Services.
Deepinfo reserves the right to modify, update, or discontinue any feature or functionality of the Services at any time. We will provide reasonable notice of material changes where practicable.
Deepinfo may temporarily suspend, restrict, or limit access to the Services if such access threatens the security, stability, availability, or integrity of the Services, infrastructure, data sources, or other customers.
Certain features, datasets, modules, jurisdictions, or integrations may be subject to availability limitations, subscription scope, technical feasibility, legal restrictions, or third-party source availability.
5. Data Feeds and API Services
Data Feeds and API Services are provided under the terms of the applicable subscription or order form. Usage is subject to any rate limits, volume caps, or delivery specifications set forth in your subscription.
Data Feeds are delivered in CSV and JSON formats. Delivery schedules (daily, real-time streaming, or bulk) depend on the specific feed purchased. Deepinfo will use commercially reasonable efforts to maintain data freshness and delivery reliability.
API Services are subject to rate limits and fair use policies. Deepinfo reserves the right to throttle or suspend API access if usage patterns indicate abuse, excessive load, or behavior that degrades the service for other customers.
Customer acknowledges that Deepinfo Data may include large-scale internet intelligence gathered from publicly accessible sources, passive internet observations, automated internet-wide collection systems, and third-party intelligence providers. Data availability, freshness, and completeness may vary depending on source continuity, internet conditions, and legal or technical constraints.
Unless explicitly authorized in writing, Data Feeds and API Services may not be mirrored, republished, bulk-exported for third-party access, or used to create a substitute service that is substantially similar to the Services.
Customers may use Deepinfo Data to create Derived Data for internal use or as part of a value-added service only where the original Deepinfo Data is not disclosed, redistributed, or made reconstructable in raw or substantially similar form, unless explicitly permitted by the applicable subscription or written agreement.
6. Permitted Use and Scanning Authorization
You may use the Services and Deepinfo Data solely for your internal business purposes or, where your subscription explicitly permits, for integration into your own commercial products and services.
Authorization to Monitor. Because the Services include External Attack Surface Management (EASM) and active monitoring capabilities, you represent and warrant that you own, or have explicit, documented legal authorization to monitor, scan, and query all digital assets, domains, and IP addresses you submit to the Platform as Customer Data.
You shall not: (a) sublicense, resell, or redistribute Deepinfo Data in raw or minimally modified form to third parties, unless explicitly authorized by your subscription; (b) use the Services to conduct any illegal activity, including unauthorized access to computer systems or networks; (c) reverse engineer, decompile, or disassemble any part of the Services; (d) use the Services in a manner that could damage, disable, or impair the Services or interfere with any other party’s use; (e) attempt to gain unauthorized access to any part of the Services or any systems or networks connected to the Services; (f) use automated means to access the Services beyond the APIs provided, including scraping or crawling; or (g) use the Services to build a competing product or service.
Deepinfo Services are intended for Authorized Purpose use only. Customers are solely responsible for ensuring that any investigation, enrichment, analysis, scanning, validation, or other security activity conducted using the Services is lawful and properly authorized.
Deepinfo does not authorize, endorse, or license unauthorized intrusion, exploitation, denial-of-service activity, credential abuse, malware deployment, or offensive cyber operations against systems, networks, accounts, or data that the Customer does not own or have explicit permission to test.
Customer shall not use the Services in violation of export controls, sanctions laws, anti-corruption laws, privacy laws, cybercrime laws, or any other applicable legal or regulatory requirement.
Customer shall not remove, obscure, or alter source attribution, notices, metadata restrictions, or technical controls implemented by Deepinfo in connection with the Services.
7. Intellectual Property and Publicity Rights
Deepinfo retains all right, title, and interest in and to the Services, the Platform, Deepinfo Data, and all associated intellectual property rights. Nothing in these Terms transfers any ownership rights to you.
For the avoidance of doubt, Deepinfo retains all rights in and to Deepinfo Data, scanning outputs, internet intelligence datasets, enrichment layers, platform analytics, scoring logic, detection logic, taxonomies, and all improvements, enhancements, and derivative works created by Deepinfo.
You retain all right, title, and interest in and to your Customer Data. By submitting Customer Data to the Services, you grant Deepinfo a limited, non-exclusive right to process such data solely to provide and improve the Services.
Nothing in these Terms grants the Customer any ownership right in Deepinfo Data or any right to use Deepinfo trademarks, branding, reports, screenshots, or product outputs for public marketing, benchmarking, or comparative publication without prior written consent, except as otherwise expressly permitted by law or contract.
The Deepinfo name, logo, and all related marks are trademarks of Dofo Teknoloji Anonim Şirketi. You may not use our trademarks without prior written consent.
Publicity. Deepinfo may, subject to any written confidentiality or non-publicity restrictions agreed with the Customer, use the Customer’s name and logo on its website, marketing materials, and customer lists to identify the Customer as a user of the Services, unless the Customer explicitly opts out in writing by emailing [email protected].
8. Payment, Billing, and Auto-Renewal
Fees for the Services are set forth in your order form or subscription agreement. All fees are due in advance unless otherwise specified. Fees are non-refundable except as expressly stated in your agreement or required by applicable law.
If payment is not received within the specified period, Deepinfo reserves the right to suspend access to the Services until payment is received.
Deepinfo may adjust pricing upon renewal of your subscription by providing at least 30 days’ written notice prior to the start of the renewal period.
Auto-Renewal. Unless otherwise specified in an order form, your subscription will automatically renew for successive periods equal in length to the initial term, at the then-current rates, unless either party provides written notice of non-renewal at least thirty (30) days prior to the end of the current term.
Deepinfo may suspend or downgrade access to the Services for overdue accounts upon reasonable notice. Suspension of access does not relieve the Customer of its payment obligations accrued before or during the suspension period.
9. Confidentiality
Each party agrees to keep confidential all non-public information disclosed by the other party that is designated as confidential or that reasonably should be understood to be confidential ("Confidential Information"). Confidential Information includes, without limitation, business plans, pricing, customer data, and technical specifications.
The receiving party shall not disclose Confidential Information to any third party except to employees, contractors, or agents who have a need to know and are bound by confidentiality obligations at least as protective as those in these Terms. The receiving party shall use the same degree of care to protect Confidential Information as it uses to protect its own confidential information, but in no event less than reasonable care.
Confidentiality obligations do not apply to information that: (a) is or becomes publicly available without breach of these Terms; (b) was known to the receiving party prior to disclosure; (c) is independently developed by the receiving party without use of Confidential Information; or (d) is disclosed pursuant to a legal requirement, provided the receiving party gives reasonable notice to the disclosing party where permitted.
Confidentiality obligations shall survive termination of the Services for a period of five (5) years, except for trade secrets and information that remains confidential by nature, which shall remain protected for as long as such information remains confidential under applicable law.
10. Data Protection and Privacy
Deepinfo processes personal data in accordance with its Privacy Policy, which is incorporated into these Terms by reference. By using the Services, you acknowledge that you have read and understood our Privacy Policy.
To the extent that Deepinfo processes personal data on behalf of the Customer, Deepinfo acts as a data processor and the Customer acts as a data controller under applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Turkish Law on the Protection of Personal Data No. 6698 ("KVKK").
The parties acknowledge that Deepinfo may also act as an independent controller with respect to personal data processed for its own business operations, including account administration, billing, service security, fraud prevention, abuse detection, legal compliance, and service improvement, as described in the Privacy Policy.
Where required by applicable law or by the nature of the Services, the parties may enter into a separate Data Processing Agreement governing processor-controller activities, international transfer mechanisms, security measures, and data subject rights support. Deepinfo shall process personal data only in accordance with the Customer’s documented instructions and shall implement appropriate technical and organizational measures to protect personal data.
11. Warranties and Disclaimers
Deepinfo warrants that the Services will perform materially in accordance with the applicable documentation during your subscription period. If the Services fail to meet this warranty, Deepinfo will use commercially reasonable efforts to correct the non-conformity.
EXCEPT AS EXPRESSLY SET FORTH IN THESE TERMS, THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE." DEEPINFO DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ANY WARRANTY ARISING FROM COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
Deepinfo does not warrant that Deepinfo Data is complete, error-free, or suitable for any particular purpose. Deepinfo Data is derived from publicly available internet sources and third-party intelligence sources, and its accuracy depends on the quality and availability of those sources. You are responsible for evaluating the suitability of Deepinfo Data for your specific use case.
Deepinfo Data is derived from dynamic and sometimes imperfect sources. Internet infrastructure, ownership records, DNS, SSL, website content, threat indicators, breach data, and other intelligence may change rapidly, contain errors, be incomplete, or become unavailable without notice. Customer is responsible for independently evaluating the suitability of Deepinfo Data for its particular use case, workflow, product, or decision-making process.
Deepinfo does not access private systems or bypass authentication mechanisms in order to collect internet intelligence data.
No information made available through the Services constitutes legal advice, regulatory advice, financial advice, or a guarantee that any Customer environment is secure, compliant, or free from vulnerability or compromise.
12. Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL EITHER PARTY BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, OR BUSINESS OPPORTUNITY, ARISING OUT OF OR RELATED TO THESE TERMS, REGARDLESS OF THE THEORY OF LIABILITY.
DEEPINFO’S TOTAL AGGREGATE LIABILITY UNDER THESE TERMS SHALL NOT EXCEED THE TOTAL FEES PAID BY YOU TO DEEPINFO DURING THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM.
The limitations in this section shall not apply to: (a) liability arising from either party’s breach of confidentiality obligations; (b) liability arising from your breach of the Permitted Use section; or (c) either party’s indemnification obligations.
Deepinfo shall not be liable for any action or inaction taken by the Customer or any third party based on threat intelligence, scores, classifications, detections, correlations, or other outputs generated through the Services.
The exclusions and limitations in this Section apply whether a claim is based on contract, tort, negligence, strict liability, statutory duty, or any other legal theory, even if a party has been advised of the possibility of such damages.
13. Indemnification
You agree to indemnify and hold harmless Deepinfo, its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or related to: (a) your use of the Services in violation of these Terms; (b) your breach of any representation or warranty in these Terms; or (c) any third-party claim arising from your use of Deepinfo Data in violation of these Terms.
Deepinfo agrees to indemnify and hold harmless the Customer from and against any third-party claims that the Services, as provided by Deepinfo and used in accordance with these Terms, directly infringe any intellectual property right of a third party, provided that Deepinfo shall have no obligation to indemnify to the extent the claim arises from: (a) Customer Data; (b) modification of the Services by or for the Customer; (c) use of the Services in combination with products, services, or data not provided by Deepinfo; or (d) use of the Services in violation of these Terms or applicable documentation.
14. Term and Termination
These Terms are effective as of the date you first access or use the Services and continue until terminated. Your subscription period is as specified in your order form or subscription agreement.
Either party may terminate these Terms: (a) for convenience upon 30 days’ written notice prior to the end of the then-current subscription period; or (b) immediately upon written notice if the other party materially breaches these Terms and fails to cure such breach within 30 days of receiving written notice of the breach.
Upon termination: (a) the Customer’s right to access and use the Services shall immediately cease; (b) Deepinfo may delete or disable Customer access to the Services and associated environments; (c) Deepinfo shall delete or return Customer Data within 30 days of termination, upon written request and subject to legal, security, backup, and compliance retention requirements; and (d) any fees owed to Deepinfo for the period prior to termination shall become immediately due and payable.
Deepinfo may retain logs, metadata, billing records, security records, audit records, and aggregated or anonymized data where necessary for legal compliance, fraud prevention, platform security, dispute resolution, backup integrity, or legitimate business purposes.
Sections relating to Intellectual Property, Confidentiality, Limitation of Liability, Indemnification, and Governing Law shall survive termination of these Terms.
15. Governing Law and Dispute Resolution
These Terms shall be governed by and construed in accordance with the laws of the Republic of Turkey, without regard to its conflict of law provisions.
Any disputes arising out of or relating to these Terms shall first be attempted to be resolved through good faith negotiation between the parties. If a dispute cannot be resolved through negotiation within 30 days, either party may submit the dispute to the exclusive jurisdiction of the competent courts and execution offices of Istanbul, Turkey.
Nothing in these Terms limits any non-waivable rights that may apply under mandatory law.
16. Changes to Terms
Deepinfo reserves the right to modify these Terms at any time. We will notify you of material changes by posting the updated Terms on our website and, where practicable, by sending notice to the email address associated with your account at least 30 days before the changes take effect.
Your continued use of the Services after the effective date of any changes constitutes your acceptance of the updated Terms. If you do not agree to the updated Terms, you must stop using the Services before the changes take effect.
Changes required for legal, security, infrastructure, or compliance reasons may take effect immediately where necessary.
17. General Provisions
Security Incidents. Deepinfo may take reasonable actions it deems necessary to detect, prevent, investigate, contain, or mitigate cybersecurity threats, abuse, fraud, infrastructure attacks, data source compromise, or other events affecting the Services, including temporary suspension or limitation of access.
Entire Agreement. These Terms, together with any order form, subscription agreement, and Privacy Policy, constitute the entire agreement between you and Deepinfo regarding the Services and supersede all prior agreements and understandings.
Severability. If any provision of these Terms is held to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.
Waiver. The failure of either party to enforce any provision of these Terms shall not constitute a waiver of that provision or the right to enforce it at a later time.
Assignment. You may not assign or transfer these Terms without Deepinfo’s prior written consent. Deepinfo may assign these Terms in connection with a merger, acquisition, or sale of all or substantially all of its assets.
Force Majeure. Neither party shall be liable for any failure or delay in performance due to causes beyond its reasonable control, including but not limited to natural disasters, acts of government, internet disruptions, or cyberattacks.
Notices. Notices under these Terms shall be sent by email to the address associated with your account or, for notices to Deepinfo, to [email protected] or any successor legal contact published on the website.
18. Contact
For questions about these Terms, please contact us at:
Dofo Teknoloji Anonim Şirketi (dba Deepinfo)
Registered Address: Necip Fazıl Mah. Günbatımı Sok. No:1, Ümraniye / Istanbul / Türkiye
Email: [email protected]