Terms of engagement
These terms govern the Principal Intelligence service provided by LeakTrace to a family office, principal, or authorized representative ("Client"). Engagement is initiated by a signed engagement letter; these terms are incorporated by reference.
1. Scope of service
LeakTrace provides continuous intelligence coverage across public and monitored non-public sources. Coverage surfaces are defined at engagement scoping. LeakTrace does not access, intercept, or attempt access to any private account, mailbox, device, or non-public system belonging to Client, Client's household, or any third party.
2. Sources
LeakTrace draws from monitored breach databases, public search indexes, social platform monitoring, corporate registry data, certificate transparency logs, domain registry monitoring, and analyst OSINT. LeakTrace does not disclose vendor names or specific database identifiers in Client-facing materials; all sources are lawful and are used within their applicable terms.
3. Household coverage and consent
Where the engagement includes household members other than the primary contracted principal, Client warrants that appropriate consent has been obtained from each covered individual (or their legal guardian) using the LeakTrace household consent addendum. LeakTrace will suspend coverage of any household member whose consent Client withdraws in writing, within one business day of notice.
4. Data handling and retention
LeakTrace retains findings and associated context data for the duration of the engagement plus 90 days, after which findings are archived and personally identifying detail is minimized. Raw scan artifacts (breach record excerpts, source URLs) are retained for the shorter of 90 days from surfacing or the duration of active analyst review. Client may request expedited deletion of any specific finding at any time.
5. Confidentiality
LeakTrace treats all Client-linked findings, dashboards, and analyst work product as confidential. LeakTrace does not publish, share, or reference specific Client engagements without Client's written permission. Anonymized, aggregated observations may inform LeakTrace research publications where individual attribution is not possible.
6. What we do not do
- We do not remove content from third-party sites. We flag it; removal is Client's counsel or PR advisor.
- We do not initiate contact with adversaries, adversary infrastructure, or dark-web marketplaces to negotiate removal of exposed data.
- We do not provide legal advice, financial advice, or crisis PR services.
- We do not guarantee that all exposures will be surfaced. Coverage is continuous but not exhaustive.
7. Deliverables and cadence
Digest cadence and alert response times are defined by engagement tier. LeakTrace commits to the response times published for the applicable tier at the time of contract signing.
8. Term, billing, and cancellation
Engagements are annual commitments billed monthly in advance. Cancellation for cause is available on 30 days written notice. Cancellation for convenience is available at annual renewal; mid-term cancellation for convenience forfeits any remaining prepaid period.
9. Limitation of liability
LeakTrace's aggregate liability for any claim arising from or relating to the engagement is limited to the fees paid by Client in the twelve months preceding the claim. LeakTrace is not liable for consequential, incidental, or indirect damages.
10. Jurisdiction
These terms are governed by the laws of the Province of Ontario, Canada. Disputes are resolved in the courts of the City of Toronto.
11. Contact
Questions on these terms or the engagement should be directed to [email protected].