Back to home

Terms of Service

Effective Date: 4th February 2025

Introduction

Welcome to EdisonWatch ("EdisonWatch", "we", "our", or "us"), the common trading name of GPU-EVM LTD, our legally incorporated entity. These Terms of Service ("Terms") govern your access to and use of our security platform (the "Service").

The Service is available in two primary deployment models:

  • "SaaS Service": Hosted and managed by EdisonWatch.
  • "Self-Hosted Service": Deployed in your Virtual Private Cloud (VPC) or On-Premise infrastructure.

By accessing or using the Service, you agree to be bound by these Terms. If you do not agree to these Terms, do not use the Service.

General Terms

This Agreement is entered into between you ("you" or "your") and GPU-EVM LTD. These Terms govern your access and use of our smart contract security scanning services. By registering for or using any of our services, you represent that you have the authority to bind yourself or your organization to these Terms.

Changes to These Terms

We reserve the right to update or revise these Terms at any time. Any changes will be effective upon posting the revised Terms on our website. Your continued use of the Service constitutes acceptance of the updated Terms.

Access to the EdisonWatch Services

You may use the Service solely in strict compliance with these Terms and all applicable laws. We may, at our discretion, modify, suspend, or discontinue any part of the SaaS Service at any time. For Self-Hosted Services, updates and modifications are governed by the release schedule and your specific maintenance agreement.

Your Account (SaaS Service Only)

To access the SaaS Service, you must register for an account by providing accurate and complete information. You are responsible for maintaining the security of your account and all activity associated with it. If we determine that you have provided false information or violated these Terms, we may suspend or terminate your SaaS account. Note: Access controls for Self-Hosted Services are managed by you within your own infrastructure.

Contracting and Payments

  • SaaS Service: The use of paid SaaS services is subject to upfront payment as outlined in our pricing structure or checkout flow. Fees are non-refundable except as required by law. Payments are processed through third-party providers (e.g., Stripe).
  • Self-Hosted Service (VPC/On-Prem): Fees, payment schedules, and invoicing terms for VPC or On-Premise deployments are governed by a separate Enterprise Agreement, Order Form, or Invoice agreed upon in writing between you and EdisonWatch.

Suspension and Termination

SaaS Service: We reserve the right to suspend or terminate your access to the SaaS Service for any reason, including violation of these Terms or potential risk to our systems or other users.

Self-Hosted Service: Termination of licenses for Self-Hosted Services shall be governed by the applicable Enterprise Agreement or license terms.

Acceptable Use

You must not:

  • Use the Service to harm or exploit others.
  • Modify, resell, or reverse-engineer the Service.
  • Attempt to gain unauthorized access to any part of our system (for SaaS) or bypass license checks (for Self-Hosted).
  • Use the Service for illegal activities.
  • Exceed agreed usage limits or license seats.

Service Level Terms

SaaS Service: We aim for 99.9% uptime, excluding scheduled maintenance and force majeure events. Downtime credits may be issued under specific conditions upon request.

Self-Hosted Service: As the software is hosted in your environment, uptime is your responsibility. Support Response Times (SLAs) regarding software issues are defined in your specific Enterprise Agreement.

Intellectual Property

We retain all rights to our Service and technology. You do not acquire any ownership rights through use of the Service, regardless of deployment method.

No Warranty

The Service is provided "as-is" and "as-available." We do not warrant that it will meet your requirements, be uninterrupted, or error-free.

Limitation of Liability

To the fullest extent permitted by law, we are not liable for any indirect, incidental, or consequential damages, including data loss, lost profits, or security vulnerabilities not identified by our Service.

Confidentiality

Any confidential information shared between parties must be protected and used solely for the intended purpose.

Governing Law and Dispute Resolution

These Terms are governed by the laws of England and Wales. Any disputes will be resolved in the courts of England and Wales.

Trademarks

"EdisonWatch" and associated marks are our trademarks and cannot be used without permission.

Data Processing

SaaS Service: We process user data, including codebases and account details, in accordance with our Privacy Policy and the DPA below.

Self-Hosted Service: You retain full control and custody of your data within your environment. EdisonWatch does not process, store, or access your scanned code or results unless you explicitly configure the Software to send telemetry or usage data to us, or if required for support purposes as agreed in writing.

Software Access and Proprietary Rights

When using the EdisonWatch Services, you may have access to certain software (the "Software").

  • For SaaS, this software is stored at our data center.
  • For Self-Hosted, we provide the Software (e.g., Docker containers, binaries) for installation in your environment.

During the applicable Subscription Term you have the limited, non-exclusive, non-transferable, non-sublicenseable right to access and use the Software exclusively for your internal business purposes and solely in furtherance of your use of the EdisonWatch Services as expressly permitted under these Terms. We reserve all other rights to the Software. Any Software access is provided on a subscription basis, and is licensed and not sold. Unless we notify you otherwise, your right to access and use the Software ends when the applicable Subscription Term ends. The Software is subject to applicable export laws and regulations. You must comply with all domestic and international export laws and regulations that apply to the Software.

As between EdisonWatch and you, EdisonWatch or its licensors own and reserve all right, title and interest in and to the EdisonWatch Services, Software, and all other hardware, software and other items used to provide the EdisonWatch Services. No title to or ownership of any proprietary rights related to the EdisonWatch Services is transferred to you pursuant to these Terms.

Notices

We may send you, in electronic form, information about the EdisonWatch Service, additional information, and information the law requires us to provide. Any legal notices or other notices required by these Terms must be sent to us via email to [email protected], or via post to EdisonWatch's registered address.

Consent to Electronic Communications and Solicitation

By registering for the EdisonWatch Services, you understand that we may send you communications or data regarding the EdisonWatch Services, including but not limited to: (a) notices about your use of the EdisonWatch Services, including any notices concerning violations of use; (b) updates, via electronic mail.

Miscellaneous

These Terms apply to the maximum extent permitted by relevant law. If a court holds that we cannot enforce a part of these Terms as written, you and we will replace those terms with similar terms to the extent enforceable under the relevant law, but the rest of these Terms will remain in effect. This is the entire contract between you and us regarding the EdisonWatch Service. It supersedes any prior contract or oral or written statements regarding your use of the EdisonWatch Service. We may assign, transfer, or otherwise dispose of our rights and obligations under this contract, in whole or in part, at any time without notice. You may not assign this contract or transfer any rights to use the EdisonWatch Service.

Contact

If you have any questions, please contact us at [email protected].

Data Processing Addendum (DPA)

Note: This DPA applies primarily to the SaaS Service where EdisonWatch acts as a Data Processor. For Self-Hosted Services, EdisonWatch generally does not process Personal Data, and this DPA applies only to the limited extent that EdisonWatch processes telemetry or support data.

This Data Processing Addendum ("DPA") is incorporated into and subject to the EdisonWatch Terms of Service (the "Agreement") between you and GPU-EVM LTD. All capitalized terms not defined here have the meanings in the Agreement.

Definitions

"Data Protection Laws" means all national, federal, and state data protection laws and regulations applicable to EdisonWatch's processing of Personal Data, including:

  • The UK General Data Protection Regulation ("UK GDPR")
  • The General Data Protection Regulation (EU) 2016/679 ("GDPR")
  • The California Consumer Privacy Act ("CCPA")

"Personal Data" means any information relating to an identified or identifiable natural person processed by EdisonWatch as a data processor under the Agreement.

"Restricted Transfer" means any cross-border transfer of Personal Data that would be restricted by Data Protection Laws without appropriate safeguards.

Data Processing Details

Categories of data subjects:

  • Users of EdisonWatch Services
  • Smart contract developers and auditors
  • Individuals whose data may be contained in smart contract codebases (SaaS only)

Categories of personal data:

  • Name and email address
  • User credentials and authentication data (SaaS only)
  • Smart contract codebases and associated metadata (SaaS only)
  • Usage and interaction data with the EdisonWatch platform

Data retention: Personal Data is retained for 120 days unless otherwise required by law or specified in the Agreement.

Sub-processors: EdisonWatch maintains an up-to-date list of sub-processors. You may view the current list at subprocessor.edison.watch (or such other URL as we may provide).

Technical and Organizational Measures

EdisonWatch implements appropriate technical and organizational measures.

For SaaS deployments, these include: Infrastructure security, encryption in transit and at rest, access controls, regular updates, and audit trails.

For Self-Hosted deployments, the security of the environment hosting the Software is the responsibility of the Customer. EdisonWatch ensures the security of the software artifacts (e.g., containers/binaries) delivered to the Customer.

Sub-processor Management

We will provide 30 days' notice before adding or replacing sub-processors by updating our sub-processor list. If you reasonably object to a new sub-processor, notify us in writing with grounds for objection. We'll work to find a commercially reasonable solution or allow you to terminate the affected services.

Data Subject Rights

We'll assist you in responding to data subject requests as required by Data Protection Laws. We'll promptly notify you of any direct requests from data subjects and provide reasonable assistance in responding to such requests.

Security Incidents

We'll notify you without undue delay upon becoming aware of any Personal Data breach involving your data processed by us, provide reasonable assistance in investigating the incident, and take appropriate measures to address the breach.

International Transfers

For transfers of Personal Data outside the UK/EEA, we rely on appropriate safeguards including:

  • UK International Data Transfer Agreement (IDTA)
  • Standard Contractual Clauses (SCCs)
  • Adequate security measures and contractual commitments with sub-processors

Governing Law

This DPA is governed by the laws of England and Wales, and disputes will be resolved in the courts of England and Wales.