Privacy, Terms and Refunds

Privacy Policy

Effective 1 November 2026.

1. Who we are

AI Honeypots is operated by Connor Weston LLC, an Arizona limited liability company. We run ai-honeypots.com, the AI Honeypot Observatory: decoy servers that imitate self-hosted AI services, and the threat intelligence we publish and sell about the traffic they receive. In this policy, "AI Honeypots", "we" and "us" mean Connor Weston LLC.

For anything about this policy or your personal information, email contact@ai-honeypots.com.

2. What this policy covers

This policy explains how we handle personal information when you:

• visit ai-honeypots.com, the live dashboard or the blog, or use our feeds and API;
• send us a request through a form on our site, or email us;
• ask for our weekly brief;
• start a trial, register for an API key, or buy a plan, service or product from us; or
• are a business contact we write to.

Section 9 covers a different kind of data: the traffic our decoy systems record.

3. Information you give us

Forms. When you use a form on our site (for example to request the Full feed or order a pilot), we collect the plan you chose; your name, work email address, company and role; what you need the data for and any notes you add; your confirmation that you've read this policy, with the wording version and the time; and which page and button you used. We also store a one-way, keyed hash of your IP address, which we use to limit spam and repeated submissions. We don't store your IP address itself with the request. We don't use third-party form, CAPTCHA or tracking services on our forms.

Email. If you email us, we receive your email address, your name, your message and anything you attach (for example a security questionnaire).

Weekly brief. If you ask for the brief, we keep your email address and when you subscribed or unsubscribed.

Orders, billing and contracts. When you buy from us, we collect what we need to supply and invoice you: your organisation's legal name and country, the billing contact's name and email address, the billing address, any tax or VAT ID, any purchase-order number, and a record of the terms and versions you accepted.

Payments. Payments will be processed by Stripe. You enter card or bank details on Stripe's pages, and they never reach our servers. Stripe will share with us only what we need to manage your plan, such as your name, email address, billing address, tax ID, the card brand and last four digits, and whether a payment succeeded. We never receive or store full card numbers. Stripe also handles payment data under its own privacy policy.

API keys and accounts. When API-key registration is available, we'll keep your email address, organisation, plan, the licence version you accepted, and usage records for your keys (requests, time, endpoint and the requesting IP address). Keys are stored only as keyed hashes: we show you a key once and can't recover it.

Downloadable products. If you buy a downloadable product from us, we record each download (account, product, version, file, time and a hashed network address), and the files carry your organisation's name and an order reference, so that licensed copies can be identified.

4. Information collected automatically

Web server logs. Like most websites, our web server records each request: the IP address, the time, the page or file requested, the response status, the browser or client identifier (user agent) and the referring page. We use these logs to run and secure the site and to fix problems. They're kept for about 14 days and then deleted.

Feed and API usage. When our feeds or API are requested, we record the requesting IP address, the time, the address requested, the response status and the user agent. We use these records to run and secure the feeds, prevent abuse and count usage. We don't try to find out who is behind an IP address that pulls our feeds. We keep these records only as long as we need them for those purposes, and we review this periodically.

Cookies and similar technology. We don't use cookies, analytics services, advertising pixels or tracking scripts. The live dashboard remembers whether you chose its light or dark theme in your browser's local storage; that setting stays on your device. Some pages, including the dashboard and the blog, load fonts from Google Fonts and scripts from jsDelivr, so those providers receive your IP address and browser details when your browser fetches them.

Source tags. Some links we share include a short tag (such as ?src=) showing which channel a visit came from. It's recorded in our web server logs like the rest of the address, and we use it only in totals.

5. How we use information, and our legal bases

Where the EU or UK GDPR applies, these are our purposes and the legal bases we rely on, in plain terms:

• Answering your request and setting up a trial, pilot or purchase: you asked us to (steps before a contract), and our legitimate interest in answering business enquiries.
• Providing what you've bought, issuing keys, supporting you and invoicing you: our contract with you.
• Keeping tax and accounting records: our legal obligations.
• Keeping our services secure and preventing spam, fraud and abuse, including rate limits and licence enforcement: our legitimate interest in security.
• Sending the weekly brief: your consent, which you can withdraw at any time by unsubscribing.
• Telling customers about changes to their plan or to these documents: our contract with you, and our legitimate interests.
• Writing to business contacts first: our legitimate interest in telling organisations about security data that may help them, with an opt-out in every email, and any consent the law requires.

The box you tick on our forms confirms that you've read this policy. We don't rely on it as consent to answer your request.

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects on you.

6. AI tools we use

We use AI assistants (currently Claude, provided by Anthropic) to help us read requests, draft replies and documents, and keep our sales records. They process the details you send us on our behalf. A person reviews and sends every reply, and no AI tool makes a decision about you on its own.

Our decoys use an AI model provider (OpenAI) to generate decoy responses, and we use it to help draft reports from aggregate statistics. It receives traffic sent to our decoys (section 9) and aggregate figures, never the information you give us through forms, email or billing.

7. Who we share information with

We don't sell the personal information described in sections 3 and 4, and we don't share it for targeted advertising. We share it only with the service providers that help us run the business, and only what each one needs:

• DigitalOcean: hosts our website, API, database and forms (United States).
• Namecheap: our domain name and DNS, and forwarding of email sent to our addresses.
• Our email provider: sending and receiving email.
• Stripe: payments, invoices, receipts and the billing portal, once online billing is live (United States and other countries).
• Anthropic: the AI assistant our team uses (United States).
• Google Fonts and jsDelivr: fonts and scripts for some pages (your IP address and browser details only).
• An e-signature provider, if you ask us for a signed copy of an agreement.

Section 9 explains who receives decoy data. We may also share information with our professional advisers (such as lawyers and accountants), with authorities when the law requires it or to protect our rights or someone's safety, and with a buyer or successor if our business is sold or reorganised.

8. International transfers

We're based in the United States, and our servers and most of our providers are there. If you're outside the United States, your information is transferred to and processed in the United States. Where the law of the EU, the UK or Switzerland requires a safeguard for that transfer, we rely on the mechanisms our providers make available, such as the European Commission's Standard Contractual Clauses (and their UK and Swiss versions) or a provider's certification under the Data Privacy Framework. Email us if you'd like details.

9. Data our decoys record

What it is. Our decoys are servers on the public internet that imitate self-hosted AI services. We don't offer them to anyone as a service, and they don't contact anyone: the traffic they receive is sent to them unasked, by scanners, automated tools and attackers. They record that traffic: the source IP address, the timing, and the content and technical details of each request, such as headers, text sent to decoy AI endpoints and any credentials the sender submits.

Whose data it can include. Mostly it describes the systems and tools that send the traffic. But the content can include personal information about the sender or about other people: for example, text that people sent through a service an attacker has set up or taken over, or details of systems an attacker is targeting.

Why we collect it. For security research and threat intelligence: to detect and understand attacks on AI infrastructure, to warn defenders, and to publish and sell defensive threat intelligence.

Our legal basis. Where the EU or UK GDPR applies, we rely on legitimate interests: ours, our customers' and the wider public's interest in the security of networks and information systems, which the GDPR recognises as a legitimate interest (recital 49).

What we publish and sell. Derived indicators, mainly the source IP addresses of traffic sent to our decoys, with behaviour labels, counts and timing, and aggregate statistics.

What we never publish or sell. The text sent to our decoys isn't in any public or standard paid product. Any future access to redacted text would be offered only under a separate licence, to vetted customers, after legal review; it isn't offered today. Captured credentials, such as API keys and tokens, are never sold, shared or tested, in full or in part. Where we report them, we report them only to the provider that issued them. We don't publish information that identifies our decoys.

Who receives decoy data. The cloud providers that host our decoys; DigitalOcean, which hosts the platform where we store and analyse captures; OpenAI, which receives the traffic so it can generate decoy replies; our AI assistant (Anthropic), for aggregate figures and, when a task needs it, individual records; and threat-intelligence lookup services, which receive the IP addresses we look up. Derived indicators go to the public through our free feeds and to customers through paid plans.

How long we keep it. We keep decoy data only as long as we need it for security research and threat intelligence, and we review this periodically.

If you think your IP address is listed in error (for example an address that's shared or has been reassigned), email us the address and the dates, and we'll review it. Decoy traffic usually can't be linked to a named person, so we may need details like these to find any records that relate to you.

10. How long we keep information

• Form requests that don't lead to a purchase: up to 12 months after our last contact, then deleted.
• The hashed IP address on a form request: only as long as we need it to prevent spam and abuse.
• Email correspondence: as long as we need it to deal with your request and keep a record of our business dealings, or longer if it's part of a customer record.
• Customer, contract and billing records: for the life of the contract and afterwards for as long as tax, accounting and legal requirements need (generally up to 7 years).
• Weekly brief: until you unsubscribe.
• Opt-out list: if you ask us not to write to you again, we keep your email address on an opt-out list, only so that we don't.
• API accounts and usage records: while your account is open; afterwards they're deleted or reduced to totals that no longer identify you.
• Web server logs: about 14 days.
• Feed and API usage records: see section 4.
• Decoy data: see section 9.

11. Your rights

Depending on where you are, you can ask us to:

• give you a copy of your personal information;
• correct it;
• delete it;
• restrict or object to how we use it, including for direct marketing (we always stop marketing on request);
• send it to you or to another company in a portable format; or
• withdraw your consent, where we rely on it.

Email contact@ai-honeypots.com. We answer within 30 days, may need to confirm your identity first, and don't charge. If you're in the EU, the UK or Switzerland, you can also complain to your data protection authority. If a US state privacy law gives you rights over your information, we'll honour them as that law requires. Every marketing email we send has a way to opt out.

12. Security

We use security measures suited to a business of our size. For the information you give us, they include HTTPS for the site, feeds and API; a database that isn't reachable directly from the internet; storing form IP addresses only as keyed hashes; and collecting as little as we can. Some measures are still being put in place, and we review our security regularly. We don't hold security certifications such as SOC 2 or ISO 27001. No system is perfectly secure. If a breach affects your personal information, we'll tell you and the authorities where the law requires.

13. Children

Our services are for businesses and security professionals. They aren't directed at children, and we don't knowingly collect information from anyone under 16.

14. Changes to this policy

We'll post any change on this page with a new effective date. If a change materially affects customers, we'll email them before it takes effect.

15. Contact

Connor Weston LLC (AI Honeypots), contact@ai-honeypots.com.

Terms of Service

Effective 1 November 2026.

1. Who these terms are with

These terms are an agreement between you and Connor Weston LLC, an Arizona limited liability company that operates AI Honeypots ("AI Honeypots", "we", "us"). They apply when you use ai-honeypots.com, the live dashboard, our feeds or our API, and when you buy a plan, service or product from us. By using our services or placing an order, you agree to these terms, the Acceptable Use Policy and the Cancellation and Refunds policy. Our Privacy Policy explains how we handle personal information.

If you accept these terms for an organisation, you confirm that you have authority to bind it, and "you" means that organisation.

2. Business customers only

We sell only to businesses and other organisations, for their professional use. Our paid plans, services and products aren't for consumers. You must be at least 18 to use our services. If we find that an order was placed by a consumer, we may cancel it and refund it in full.

3. What we provide

We provide threat intelligence about attacks on AI infrastructure, drawn from traffic sent to our decoy servers. That includes free public feeds, the live dashboard, reports and the blog; paid plans such as Pro, Pro with Attacker Behaviour, Enterprise and the Enterprise pilot; services such as briefings and custom research; and, where offered, downloadable products. What each plan includes, its limits and its price are described on our website or in your order confirmation when you buy. We may improve or change features over time, but we won't materially reduce a paid plan during a period you've paid for without refunding the unused part of that period, as set out in Cancellation and Refunds.

4. What we never provide

No plan, service or product includes the text sent to our decoys (except, if we ever offer it, under a separate licence to vetted customers after legal review), captured API keys or other credentials in full or in part, or information that identifies our decoys. We decline requests for them.

5. Ordering and payment

• Prices are in US dollars and are the ones shown on our website, order confirmation or invoice when you order.
• Taxes: prices don't include taxes. Where we're required to collect sales tax, VAT or a similar tax, we add it to your bill. You're responsible for any other taxes that apply to your purchase.
• How you pay: payments will be processed by Stripe. Once online checkout is available, you can pay by card and, for some plans, by US bank debit (ACH) or by invoice. Until then, we take orders by email or through the order form on our website and confirm the price and how to pay in writing before you pay.
• Invoices are due on receipt. Paid access starts when your payment clears.
• Failed payments: if a payment fails or an invoice is overdue, we'll tell you by email. If it isn't resolved within 7 days of that notice, we may suspend paid access or move you to the free plan until it is.
• We may decline or cancel an order, for example where the law doesn't allow us to sell to you, or where we reasonably believe the data would be misused. If we cancel an order you've paid for, we refund it in full.

6. Free trial

The Full feed trial gives you Pro access for 14 days, with no card needed. Nothing is charged unless you choose to buy. There's one trial per organisation (by email domain) every 90 days. When the trial ends, your access returns to the free Community plan. We may end a trial that breaks these terms.

7. Subscriptions, renewal and cancellation

• Monthly and annual plans renew automatically for the same period until you cancel.
• You can cancel at any time. Cancellation takes effect at the end of the period you've already paid for, and you keep access until then. Cancellation and Refunds explains how to cancel and when payments are refundable.
• Annual renewal reminder: we'll email you at least 30 days before an annual plan renews, with the renewal date, the price and how to cancel.
• Price changes: we won't change your price during a period you've paid for. We'll give you at least 30 days' notice by email before a new price applies at your next renewal.

8. Pilots

A pilot has a fixed scope, published on our website when you buy. It runs for 90 days from the day your keys are issued, which is when your payment clears. Pilots are paid in advance, and pilot invoices are due on receipt. Pilots don't renew: at the end, your access returns to the free Community plan. There's one pilot per organisation. Any credit toward an annual plan is as stated on our website or in your order confirmation when you buy.

9. Enterprise and separate agreements

Enterprise plans are annual and are provided on these terms, unless we've both signed a separate agreement. Rights to redistribute our data to your clients, embed it in your own product (OEM), or use it on custom terms exist only under a separate written agreement signed by both of us. If such an agreement conflicts with these terms, the signed agreement applies.

10. Your licence to use our data

Free public feeds. Data we publish free of charge in our public feeds is released under the licence marked in each feed (currently CC0 1.0 Universal). If we change the licence for future releases, we'll mark the new licence in the feed and on this page; releases already published under CC0 stay under CC0. The Acceptable Use Policy applies to your use of our services, including the free feeds.

Paid data (anything you receive under a trial, Pro, Pro with Attacker Behaviour, Enterprise or a pilot, including indicators, labels, exports, reports and API results). While your plan is active, we give you a non-exclusive, non-transferable licence, with no right to sublicense, to use paid data for internal security and defensive purposes within your organisation. For example, you may load it into your SIEM, firewall, threat-intelligence platform and detection tools, and use it in internal reports and investigations. Your employees and contractors may use it on your behalf, and you're responsible for their use. You may quote short excerpts in your own published research if you credit "AI Honeypot Observatory, ai-honeypots.com".

No resale or redistribution. You must not sell, resell, sublicense, publish, share or otherwise make paid data, or the indicators in it, available to anyone outside your organisation. That includes putting it into a feed, blocklist, dataset, threat-intelligence product or sharing platform for others, unless we've agreed otherwise in a separate signed agreement.

When your plan ends, your licence to paid data ends. Stop pulling paid data and delete bulk exports within 90 days. Indicators already recorded in alerts, cases and reports you made during your plan may stay in those records.

Downloadable products, where we offer them, come with their own licence terms, shown on the product page and at checkout, in addition to these terms.

Ownership. We keep all rights in our services, data and products except the licence these terms give you. If you send us suggestions, we may use them without any obligation to you.

11. Accounts and API keys

Keep your API keys and sign-in links secret, and use them only within your organisation. You're responsible for use of our services under your keys. Rotate or revoke a key if you think it's exposed. We may revoke a key that we believe is compromised or misused, and issue you a new one.

12. The nature of threat intelligence, and no warranty

Our data describes traffic sent to decoy servers, and it's probabilistic. An IP address may be shared, reassigned or used by more than one party. Some traffic comes from research scanners, which we label where we can verify them. Decoys draw deeper sessions than ordinary hosts, so the data shows what attackers do, not how common it is across the internet. We describe activity as "consistent with" a behaviour, not proof of it. You decide how to act on the data, and you should test it before you use it to block traffic automatically.

To the fullest extent the law allows, our services, data and products are provided "as is" and "as available", without warranties of any kind, including warranties of accuracy, completeness, availability, merchantability, fitness for a particular purpose or non-infringement. Nothing we provide is legal, regulatory or professional advice.

13. Support and availability

Support is by email, in writing. We aim to reply to Pro customers within 2 business days, and to Enterprise and pilot customers within 1 business day from a named contact. We don't offer phone support or meetings. Pro is provided on a best-effort basis. Enterprise has a 99.5% availability target, with no service credits in the first year. We may carry out maintenance, and we'll try to give notice of planned work.

14. Limitation of liability

To the fullest extent the law allows:

• neither of us is liable to the other for any indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, business, goodwill or data, arising out of or relating to these terms or our services, even if told that they were possible; and
• our total liability arising out of or relating to these terms or our services is limited to the greater of the fees you paid us in the 12 months before the event giving rise to the claim, or US$100.

These limits don't apply to liability that the law doesn't allow to be limited, or to your obligation to pay fees you owe.

15. Confidentiality

Each of us keeps the other's non-public information confidential, including the non-public data we deliver and the details of your order, and uses it only for our dealings under these terms. This doesn't apply to information that is or becomes public through no fault of the receiving party, that the receiving party already had or develops independently, or that it must disclose by law.

16. Personal information

Our Privacy Policy explains how we handle personal information about you and your staff, such as account contacts, billing details and API usage. If you need a data processing addendum, email us.

17. Suspension and termination

• Either of us may end these terms for a paid plan if the other materially breaches them and doesn't fix the breach within 30 days of written notice.
• We may suspend or end access immediately for a serious breach of the Acceptable Use Policy, for non-payment as described in section 5, or where the law requires. We'll tell you why in writing, unless the law prevents us.
• When a paid plan ends, your access moves to the free plan or ends, and section 10 continues to apply to data you already hold. Refunds follow Cancellation and Refunds. Sections 4, 10, 12, 14, 15, 18 and 22 continue after these terms end.

18. Sanctions and export

You confirm that you're not on a US or other applicable sanctions list, not owned or controlled by anyone who is, and not located in, or acting for anyone in, a country or region subject to comprehensive US sanctions. You won't use, export or re-export our data or products in breach of sanctions or export-control laws. We may refuse, suspend or cancel an order to comply with those laws, and if we cancel an order you've paid for, we refund it.

19. Publicity

We won't name you as a customer, use your logo or publish a case study about you without your written consent.

20. Changes to these terms

We may update these terms. We'll post the new version on this page with a new effective date. New versions apply to new orders straight away, and to existing subscriptions from their next renewal. We'll email customers about material changes at least 30 days before they apply.

21. Notices

We communicate by email. Notices to you go to the email address on your account or order. Notices to us go to contact@ai-honeypots.com.

22. Governing law and disputes

These terms, and any dispute arising out of or relating to them or our services, are governed by the laws of the State of Arizona, USA, without regard to its conflict-of-laws rules. Any such dispute will be resolved in the state or federal courts located in Arizona, and both of us agree to the jurisdiction of those courts.

23. General

These terms, your order confirmation, the policies on this page and any separate agreement signed by both of us are the whole agreement between us about their subject. Terms in a purchase order, vendor form or your own online terms don't change this agreement unless we agree to them in writing. You may not transfer this agreement without our written consent; we may transfer it to a successor to our business. Neither of us is responsible for delays caused by events beyond our reasonable control. If any part of these terms can't be enforced, the rest still applies. If we don't enforce a right straight away, we don't give it up. We're independent parties, and nothing here creates a partnership or agency.

Acceptable Use Policy

Effective 1 November 2026.

This policy applies to everyone who uses our website, dashboard, feeds, API, data, products or services. It's part of our Terms of Service.

1. Defensive use

Use our data and services to detect, prevent, investigate and research attacks, and to protect systems you own or are authorised to protect.

2. What you must not do

You must not, and you must not help or allow anyone else to:

• use our data or services to attack, scan, exploit, harass or gain unauthorised access to any system or person;
• try to identify, locate, fingerprint, contact, attack or interfere with our decoys or our infrastructure, or test whether a system is one of ours;
• try to identify individuals from our data, or contact or target anyone whose IP address appears in it, except to report abuse to the network's owner, to protect your own systems, or as the law allows;
• use our data as the basis for decisions about an individual's eligibility for employment, credit, insurance, housing or similar;
• use our data or products to build attack tools, or to train AI systems to carry out attacks;
• resell, redistribute or publish paid data or products outside your licence (Terms of Service, section 10);
• get around the limits of your plan, such as request limits, the free view's limits or the masking of IP addresses, or share API keys or sign-in links outside your organisation;
• overload or disrupt our services, or access them by automated means other than the feeds and API we document;
• use our services in breach of sanctions or export-control laws, or for anyone those laws bar; or
• use our services to break the law or to send spam.

3. Reporting misuse and security issues

If you see misuse of our data, or find a security issue in our website or services, email contact@ai-honeypots.com with the details. We don't authorise testing of our systems, but we welcome reports. Please don't access other people's data or disrupt our services.

4. What we do about breaches

If we reasonably believe this policy has been broken, we may suspend or end access, revoke API keys, and refuse future orders. We'll tell you why in writing, unless the law prevents us. We may report unlawful activity to the authorities.

Cancellation and Refunds

Effective 1 November 2026.

We sell to businesses only. This policy explains how to cancel and when we give refunds. If you have a separate agreement signed by both of us, it applies where it differs from this policy. Nothing in this policy takes away any right you have under a law that can't be excluded by contract.

1. How to cancel Pro

You can cancel Pro (including Pro with Attacker Behaviour) at any time, in either of these ways:

• in the Stripe customer portal, once online billing is live: the link is in your receipts and billing emails; enter your billing email address and Stripe sends you a sign-in link; or
• by email to contact@ai-honeypots.com, from the email address on your account or order. We'll confirm the cancellation in writing.

2. When access ends

Cancellation takes effect at the end of the period you've already paid for: the end of the month for monthly plans, or the end of the year for annual plans. You keep paid access until then, and we don't charge you again. After that, your access returns to the free Community plan.

3. Free trial

The 14-day Full feed trial is free and needs no card, so there's nothing to cancel or refund. It ends automatically after 14 days, and your access returns to the free Community plan.

4. Monthly plans

Monthly payments aren't refundable, and we don't refund part-months, except for billing mistakes (section 10) or if we end or materially reduce your plan (section 11).

5. Annual plans

Annual payments aren't refundable, and we don't refund the unused part of a year after you cancel, except for billing mistakes (section 10) or if we end or materially reduce your plan (section 11). We'll email you at least 30 days before an annual plan renews, with the renewal date, the price and how to cancel. If you cancel before the renewal date, you won't be charged for the next year.

6. Pilots

Pilots are paid in advance, and pilot invoices are due on receipt. The 90 days start when your keys are issued, which is when your payment clears. Pilots don't renew, so there's nothing to cancel. If we can't issue your keys within 10 business days after your payment clears, you can cancel and we'll refund the pilot fee in full. Once the pilot has started, the fee isn't refundable.

7. Enterprise

Enterprise plans are annual. Cancelling stops the next renewal. We don't refund the unused part of a year, except as in sections 10 and 11, or if you end the plan because we materially breached our terms and didn't fix the breach within 30 days of your written notice, in which case we refund the prepaid fees for the unused part of the term.

8. Briefings, the white-label brief and custom research

• Briefings and the white-label brief: if we don't deliver a briefing or a monthly brief you've paid for, we refund that item. You can cancel the white-label brief at any time, effective at the end of the month you've paid for.
• Custom research: we confirm in writing what our data can answer before you pay. If we can't deliver after you've paid, we refund the fee in full. Once we've delivered the written answer, the fee isn't refundable.

9. Downloadable products

Where we offer downloadable products (for example tabletop exercise kits or a detection pack):

• No refund once a file has been downloaded under your account, except for faulty files (below) or billing mistakes (section 10).
• If nothing has been downloaded within 14 days after you pay, you can ask for a full refund, and your access ends.
• Faulty files: if a file is damaged or doesn't materially match its description, tell us within 30 days of downloading it. We'll fix or replace it within 10 business days, and if we can't, we'll refund you.
• For annual download subscriptions, the annual rules in section 5 apply.
• When we refund a product, your licence to it ends: you delete the copies you downloaded and confirm that by email.

10. Billing mistakes

If we charge you twice, charge the wrong amount, or charge you after you cancelled, we refund the difference in full to the original payment method within 10 business days of confirming the mistake.

11. If we end or change a plan

If we discontinue a paid plan, or remove a core feature of it, during a period you've paid for, we refund the prepaid fees for the unused part of that period. If we cancel an order because of a legal restriction or because you aren't eligible for it, we refund it in full.

12. When we don't refund

We don't refund fees for a period in which we suspended or ended your access because of a serious breach of our terms (for example misuse of the data or unpaid invoices), except where the law requires.

13. How to ask for a refund

Email contact@ai-honeypots.com with your receipt or invoice number and the reason. We answer in writing within 5 business days. Refunds go back to the original payment method, in US dollars, and include any tax we charged on the refunded amount. We don't cover bank or currency-conversion charges on your side. Please contact us before disputing a charge with your bank, so that we can put it right quickly.