terms of service

last updated oct 22, 2026

These Terms of Service (“Terms”) are an agreement between you and Disjoint, Inc. (“BGICOE,” “we,” “us,” or “our”). They govern your use of BGICOE, including our website at bgicoe.com and our related apps, APIs, and services (together, the “Service”).

By creating an account, signing in, or otherwise using the Service, you agree to these Terms and acknowledge our Privacy Policy. If you use the Service on behalf of a company or other organization, you agree to these Terms for that organization and confirm you have authority to do so; “you” then includes the organization. If you don't agree, please don't use the Service.

1. An early-stage product

BGICOE is new and under active development. By using it, you understand and agree that:

• It will change. We may add, change, or remove features, change how the Service works or which third-party tools it supports, or change our plans and pricing (subject to Section 6), at any time and sometimes without notice.
• It won't always work. The Service may have bugs, errors, outages, or gaps in coverage, and may behave in ways we didn't intend.
• It may change direction or end. We may change the focus of the Service, or suspend or stop offering all or part of it.
• Don't rely on future plans. You aren't agreeing to these Terms, or paying for anything, based on any future feature or anything we've said publicly about where the Service is headed.

When we reasonably can, we'll give you advance notice of significant changes, including any decision to shut down the Service, so you have time to adjust. But we aren't liable to you for changing, suspending, or discontinuing any part of the Service.

2. What the Service does

The Service monitors third-party tools and services you use (each, a “Third-Party Service”) for reported security incidents and alerts you about them. For Third-Party Services that support it, and where you've turned it on, it can also rotate API keys and other credentials on your behalf.

2.1 Incident alerts

We gather incident information from third-party sources such as vendor disclosures, status pages, security advisories, vulnerability databases, news reports, and social media. We process it with automated systems, which may include AI models. We don't control these sources and generally can't verify them. As a result:

• We don't promise to detect every incident, or to alert you about any incident quickly, accurately, or at all.
• Alerts may be incomplete or wrong, including false alarms, and may arrive late or not at all (for example, because of an outage on our end or spam filtering on yours).
• The absence of an alert doesn't mean a Third-Party Service hasn't been compromised.
• Alerts are for information only. They aren't legal, compliance, or professional security advice.

You remain responsible for your own security, including deciding whether and how to respond to any incident.

2.2 Credential rotation

When you connect a Third-Party Service and turn on rotation, you authorize us to access it with the credentials and permissions you provide. You also authorize us to create, rotate, revoke, and delete credentials there according to your settings — including automatically, without checking with you first, if you've set it up that way (for example, in response to an incident alert). Please grant only the permissions the Service needs.

Rotation is powerful and can be disruptive. You understand and agree that:

• Rotating or revoking a credential can break anything that still uses the old one, such as applications, integrations, scripts, pipelines, or people, and can cause downtime, data loss, or other disruption.
• You're responsible for knowing where your credentials are used, making sure the systems that depend on them can receive new credentials, and testing your setup before relying on it.
• Rotation may fail, be delayed, or only partly complete — for example, because a Third-Party Service changes its API, has an outage, limits our requests, or changes your permissions, or because of an error on our end.
• A rotation may be triggered by an alert that later turns out to be inaccurate.
• We aren't responsible for losses or disruption caused by a rotation, or by a rotation that failed, was partial, or didn't happen, whether it was triggered automatically, manually, or by mistake.

Only turn on automatic rotation if you're comfortable with these risks. Always keep an independent way to access each Third-Party Service, such as an administrator login, so you can recover if something goes wrong.

2.3 Third-Party Services

Third-Party Services aren't operated or controlled by us, and your use of them is governed by their own terms and policies. You're responsible for making sure that connecting a Third-Party Service to BGICOE, and letting us act in it on your behalf, is allowed by that service's terms, your agreements with it, and your organization's policies.

Third-Party Services can change or discontinue their APIs at any time, which may limit or end our ability to support them. We may also add or remove support for any Third-Party Service at any time. We aren't responsible for Third-Party Services, including their security, availability, or handling of your data.

Third-party names and logos appear in the Service only to identify those services. They belong to their owners, and their appearance doesn't mean those owners endorse us or are affiliated with us.

3. Your account

• You sign in through a third-party identity provider, such as Google. You're responsible for keeping that account secure and for all activity under your BGICOE account.
• Keep your account information accurate, and tell us right away at team@disjoint.com if you think someone has accessed your account without permission.
• You must be at least 18 and able to form a binding contract to use the Service. The Service is intended for business and professional use.
• You may not use the Service if you're located in a country subject to comprehensive U.S. sanctions or are on a U.S. government list of restricted parties.

4. Your data

• What it is. “Your Data” means information you or your organization submit to or connect with the Service, including your list of tools, your settings, and credentials for Third-Party Services.
• You own it. You grant us a worldwide, non-exclusive, royalty-free license to host, copy, process, transmit, and use Your Data as needed to provide, maintain, secure, and improve the Service, and as described in our Privacy Policy.
• You have the right to share it. You confirm that you have all rights and permissions needed to give us Your Data and the access described in these Terms.
• Aggregated data. We may create aggregated or de-identified data that doesn't identify you or your organization, and use it to operate, improve, and develop our products and services.
• Keep your own copies. We don't promise to preserve Your Data, and it could be lost or deleted, for example if we discontinue the Service. Keep your own records of anything important.

5. Acceptable use

You agree not to:

• connect accounts, systems, or credentials you aren't authorized to use, or use the Service to access or interfere with systems you don't own or have permission to access;
• use the Service in a way that violates any law, anyone else's rights, or the terms of any Third-Party Service;
• probe, scan, or test the vulnerability of the Service, or bypass its security or authentication, except as allowed in Section 5.1;
• interfere with or overload the Service, or access it by automated means other than the interfaces we provide;
• reverse engineer the Service, except where the law expressly allows it;
• resell, sublicense, or provide the Service to others without our permission; or
• use the Service to build a competing product or service.

We may suspend or terminate your access if we reasonably believe you've violated these Terms, or that your use creates risk or potential legal exposure for us, our users, or anyone else.

5.1 Reporting security issues

If you think you've found a vulnerability in the Service, please report it to team@disjoint.com and give us a reasonable chance to fix it before disclosing it publicly. Good-faith research that follows this process, stays within your own account, avoids harming the Service or other users, and doesn't access anyone else's data doesn't violate this Section 5.

6. Fees

Parts of the Service may be free, and we may introduce paid plans or change our plans and pricing at any time. If you buy a paid plan:

• You agree to pay the fees shown at purchase, plus applicable taxes. Payments are handled by our third-party payment processor, and you authorize us, through them, to charge your payment method.
• Unless we say otherwise at purchase, subscriptions renew automatically at the end of each billing period until you cancel. You can cancel at any time, effective at the end of the current billing period.
• Except where required by law or stated in these Terms, fees are non-refundable, though we may give refunds or credits at our discretion.
• We'll give you notice before changing the price of a paid plan you're on.

We may change or end free plans and free trials at any time.

7. Feedback

If you send us ideas, suggestions, or other feedback, we may use them for any purpose without any obligation to you.

8. Our intellectual property

We and our licensors own the Service, including its software, design, and content, but not Your Data. Subject to these Terms, we grant you a limited, non-exclusive, non-transferable, revocable right to use the Service. Some components of the Service may be available under open-source licenses, and those licenses govern your use of those components.

9. Termination

• By you. You can stop using the Service at any time and delete your account by emailing team@disjoint.com.
• By us. We can suspend or terminate your access to the Service, or terminate these Terms, at any time and for any reason, including if we discontinue the Service. Where reasonably possible, we'll give you notice first. If we end a paid plan for any reason other than your breach of these Terms, we'll refund any prepaid fees for the rest of your billing period.
• What happens next. When your account ends, your right to use the Service ends, and we stop monitoring and rotating credentials for you. We may delete Your Data, including stored credentials, as described in our Privacy Policy. You should also revoke any credentials or access you granted us in your Third-Party Services.
• Survival. Any provision that by its nature should survive termination will survive, including Sections 2, 7, 8, and 10 through 15.

10. Disclaimers

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICE, INCLUDING ALL ALERTS, ROTATIONS, AND OTHER OUTPUT, IS PROVIDED “AS IS” AND “AS AVAILABLE,” WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, AND ACCURACY.

WITHOUT LIMITING THE ABOVE, WE DON'T WARRANT THAT: (A) THE SERVICE WILL BE UNINTERRUPTED, SECURE, OR ERROR-FREE; (B) ANY ALERT WILL BE ACCURATE, COMPLETE, OR TIMELY, OR THAT WE WILL DETECT ANY PARTICULAR INCIDENT; (C) ANY ROTATION WILL SUCCEED OR WON'T DISRUPT YOUR SYSTEMS; (D) THE SERVICE WILL PREVENT OR LIMIT ANY SECURITY INCIDENT OR UNAUTHORIZED ACCESS; OR (E) YOUR DATA WILL BE PRESERVED WITHOUT LOSS. YOU USE THE SERVICE AT YOUR OWN RISK.

11. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW:

(A) NEITHER WE NOR OUR AFFILIATES, OFFICERS, EMPLOYEES, CONTRACTORS, OR SUPPLIERS WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS, BUSINESS INTERRUPTION, OR COST OF SUBSTITUTE SERVICES, ARISING OUT OF OR RELATING TO THE SERVICE OR THESE TERMS. THIS INCLUDES DAMAGES RESULTING FROM ANY SECURITY INCIDENT AT A THIRD-PARTY SERVICE, ANY ALERT OR MISSED ALERT, AND ANY CREDENTIAL ROTATION OR FAILURE TO ROTATE, EVEN IF WE WERE TOLD SUCH DAMAGES WERE POSSIBLE.

(B) OUR TOTAL LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THE SERVICE OR THESE TERMS WILL NOT EXCEED THE AMOUNT YOU PAID US FOR THE SERVICE IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM.

(C) THESE LIMITATIONS APPLY UNDER ANY THEORY OF LIABILITY, INCLUDING CONTRACT, TORT (INCLUDING NEGLIGENCE), AND STRICT LIABILITY, AND EVEN IF A LIMITED REMEDY FAILS OF ITS ESSENTIAL PURPOSE. SOME JURISDICTIONS DON'T ALLOW SOME OF THESE LIMITATIONS, SO THEY MAY NOT ALL APPLY TO YOU.

These limits are a fair allocation of risk and an essential part of our agreement; we couldn't offer the Service without them. You agree to bring any claim only against Disjoint, Inc., and not personally against any of its officers, directors, employees, or contractors.

12. Indemnification

You will defend, indemnify, and hold harmless Disjoint, Inc. and its affiliates, officers, directors, employees, and contractors from any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising out of or relating to: (a) your use of the Service; (b) Your Data; (c) your violation of these Terms or any law; or (d) your violation of anyone else's rights or of the terms of any Third-Party Service you connect.

13. Changes to these Terms

We expect to update these Terms as BGICOE evolves. When we do, we'll post the updated Terms on this page and change the “Last updated” date. If a change is material, we'll make reasonable efforts to notify you before it takes effect, for example by email or in the Service.

Changes take effect on the date stated in the notice or, if no date is stated, when posted. If you keep using the Service after a change takes effect, you accept the updated Terms; if you don't agree, stop using the Service and delete your account. Changes won't apply to disputes that arose before they took effect.

14. Governing law and disputes

• Governing law. These Terms are governed by the laws of the State of New York, without regard to its conflict-of-laws rules.
• Talk to us first. Before filing a claim, you agree to contact us at team@disjoint.com and try in good faith to resolve the dispute informally for at least 30 days.
• Where disputes go. Any dispute arising out of or relating to these Terms or the Service will be resolved only in the state or federal courts located in New York County, New York, and you and we consent to personal jurisdiction there. Either of us may instead bring an individual claim in small claims court, or seek injunctive relief in any court of competent jurisdiction to protect intellectual property or the security of the Service.
• Jury waiver. YOU AND WE EACH WAIVE ANY RIGHT TO A JURY TRIAL.
• Time limit. To the extent permitted by law, any claim relating to these Terms or the Service must be filed within one year after it arises, or it is permanently barred.

15. General

• Entire agreement. These Terms, our Privacy Policy, and any additional terms we present for specific features are the entire agreement between you and us about the Service.
• Assignment. You may not assign or transfer these Terms without our written consent. We may assign or transfer them, including in connection with a merger, acquisition, reorganization, or sale of assets.
• Notices. We may send you notices by email to the address on your account or through the Service. You can send notices to us at team@disjoint.com.
• Electronic communications. You consent to receive agreements, notices, alerts, and other communications from us electronically.
• Force majeure. We aren't liable for delays or failures caused by events beyond our reasonable control, including outages or changes at Third-Party Services, hosting and infrastructure providers, or internet service providers.
• Severability; no waiver. If any provision of these Terms is found unenforceable, it will be enforced to the maximum extent possible, and the rest of these Terms will stay in effect. Our failure to enforce a provision isn't a waiver of it.
• Relationship. These Terms don't create a partnership, joint venture, agency, or employment relationship, or any rights for third parties.

16. Contact

Questions about these Terms? Email team@disjoint.com.