ValtersIT Hub — Terms of Service

Effective date: 11.08.2026
Last updated: 24.09.2026
Operator: Valters Capital, SIA
Registration number: 40203105200
Registered address: Anninmuizas Bulvaris 41 - 87, Latvia, Riga, LV-1067
VAT: LV40203105200
Contact: https://www.valtersit.com/contacts/


1. Definitions

  • "Service" — the ValtersIT Hub API platform, dashboard, CVE intelligence feeds, and all related services accessible at valtersit.com and api.valtersit.com.
  • "We / Us / Company" — Valters Capital, SIA, registered in Latvia.
  • "User / You" — any individual or legal entity accessing the Service.
  • "Consumer" — a natural person accessing the Service for purposes outside their trade, business, or profession, as defined under EU Directive 2011/83/EU.
  • "Business User" — a legal entity or natural person accessing the Service for commercial, professional, or business purposes.
  • "Credits" — prepaid digital units used to access API endpoints. One (1) Credit equals one (1) API record returned (CVE or IP), except where IP threat feed access is included in the plan at no extra Credit cost (see Section 3).
  • "Subscription" — a recurring paid plan granting a monthly Credit allowance and additional features.
  • "API Key" — a unique authentication token issued to the User for accessing the API.
  • "Content" — CVE data, threat intelligence, IP feeds, security reports, and any other data provided through the Service.

2. Acceptance of Terms

By registering, accessing, or using the Service, you agree to these Terms. If you do not agree, do not use the Service.

If you are entering into these Terms on behalf of a legal entity, you represent that you have the authority to bind that entity. These Terms then apply to that entity.

We reserve the right to update these Terms. We will notify registered Users of material changes via email at least 30 days before they take effect. Continued use of the Service after changes constitutes acceptance.

3. Service Description

ValtersIT Hub provides:

  • Real-time and historical CVE (Common Vulnerabilities and Exposures) intelligence data
  • Vendor security dossiers and threat analysis reports
  • An IP threat intelligence feed of addresses observed in exploitation activity
  • API access to the above data for integration into third-party systems
  • A web interface at valtersit.com for manual browsing (free, no registration required)

API access to the IP threat intelligence feed: Pay-As-You-Go is charged 1 Credit per IP lookup, or up to 10 IPs for 1 Credit via ?ips=. Standard and Pro Subscriptions include the IP threat feed at no extra Credit cost, up to 500 (Standard) or 1,000 (Pro) rows per request; Pro also includes exclusive proprietary sources not in the public feed. No plan, including Pay-As-You-Go, has unlimited access.

The Service aggregates and enriches publicly available security data with proprietary analysis. The Service is informational only and does not constitute professional cybersecurity advice.

4. Account Registration and Security

4.1 To access paid features, you must register with a valid email address and create a password.

4.2 You are responsible for maintaining the confidentiality of your credentials and API Keys. You are responsible for all activity that occurs under your account.

4.3 You must notify us immediately of any unauthorized use of your account at the contact address above.

4.4 We reserve the right to suspend or terminate accounts that show signs of unauthorized access, fraudulent activity, or violation of these Terms.

4.5 You must be at least 18 years old to use the Service.

5. Subscriptions and Billing

5.1 Subscription Plans

We offer the following paid plans, at the list prices below:

PlanList PriceMonthly CreditsBilling
Standard€29/month5,000Monthly recurring
Pro€99/month20,000Monthly recurring

Prices shown are final, VAT-inclusive amounts where VAT applies. A discounted founding-member price may apply instead — see Section 5.6.

5.2 Pay-As-You-Go (PAYG)

Credits may be purchased on a pay-as-you-go basis at €0.08 per Credit, with a minimum purchase of €20 (250 Credits).

5.3 Billing

Subscriptions are billed monthly in advance via Stripe. Payment is due on the subscription start date and on the same date each subsequent month.

5.4 Failed Payments

If a payment fails, we will retry up to three (3) times over seven (7) days. If payment remains unsuccessful, your Subscription will be suspended and Subscription Credits will be removed. Top-up Credits are not affected.

5.5 Price Changes

We may change Subscription prices with 30 days' prior written notice to your registered email. If you do not accept the new price, you may cancel before the new price takes effect. Section 5.6 governs founding-member subscriptions.

5.6 Founding-Member Pricing

A Standard or Pro subscription that is started before 1 January 2027 (Europe/Riga time) is billed at the founding-member price instead of the price in section 5.1: €19/month for Standard and €65/month for Pro. The founding-member price is applied automatically at checkout, is attached to that subscription and to the plan it was started on, and stays in force for as long as that subscription remains continuously active. It is not transferable between accounts. It ends if the subscription is cancelled, expires, or is suspended for non-payment; any later subscription is a new subscription and is charged the price then in effect. While a subscription keeps its founding-member price, a general price change under section 5.5 does not apply to it.

6. Credits — Specific Terms

This section is critical. Read carefully.

6.1 Nature of Credits

Credits are prepaid digital tokens that enable API usage. One (1) Credit is consumed per record returned by the API (CVE or IP), except where IP threat feed access is included in the plan at no extra Credit cost (see Section 3).

6.2 Credit Types

  • Subscription Credits: Granted monthly with a Subscription plan. These Credits expire at the end of each billing cycle and do not roll over. They are consumed first before Top-up Credits.
  • Top-up Credits: Purchased separately. These Credits do not expire and accumulate across purchases.

6.3 No Refund on Consumed Credits

Credits that have been consumed through API usage are non-refundable under any circumstances.

By initiating an API request, you explicitly acknowledge and agree that:

  • (a) The Service is being delivered immediately and digitally upon your request;
  • (b) The delivery of digital content begins immediately upon API request execution;
  • (c) You expressly consent to the immediate performance of the Service;
  • (d) You explicitly waive your right of withdrawal for Credits consumed through completed API requests, in accordance with Article 16(m) of EU Directive 2011/83/EU on Consumer Rights, which provides that the right of withdrawal does not apply to the supply of digital content not supplied on a tangible medium where performance has begun with the consumer's prior express consent and their acknowledgment that they thereby lose their right of withdrawal.

This waiver applies to both Consumer and Business Users.

6.4 Unconsumed Credits — Consumer Right of Withdrawal

For Consumer Users only: You have a right to withdraw from the purchase of Top-up Credits within fourteen (14) calendar days of purchase, provided no Credits from that purchase have been consumed. Once any Credit from a purchase has been used in an API call, the right of withdrawal for the entire purchase is waived as described in 6.3.

To exercise your right of withdrawal for unconsumed Credits, contact us at the address above within the 14-day period. We will refund the proportional value of unconsumed Credits within fourteen (14) days.

For Business Users: No right of withdrawal applies. All Credit purchases are final.

6.5 Subscription Credit Refunds

Subscription Credits are not refundable. Upon cancellation, your Subscription remains active until the end of the current billing period. No partial refunds are issued for unused Subscription Credits.

6.6 PAYG and Top-up Minimum Purchase

The minimum Top-up purchase is €20. We do not issue refunds for minimum purchase amounts that were subject to the waiver in 6.3.

7. Cancellation and Termination

7.1 Cancellation by User

You may cancel your Subscription at any time through the Stripe Customer Portal accessible from your dashboard. Cancellation takes effect at the end of the current billing period. You retain access to the Service until that date.

Upon cancellation:

  • Subscription Credits are removed immediately at period end
  • Top-up Credits remain available (they do not expire)
  • Your CVE tracking history and change-detection records are retained but not accessible for 35 days after your account moves to Pay-As-You-Go, in case you resubscribe. During this period, calling the API for a CVE you previously tracked is billed as a new request, exactly like any other Pay-As-You-Go lookup. You will receive reminder emails immediately, and again after 15 and 30 days, before this history is deleted. If you resubscribe within the 35-day period, this history is automatically restored. After 35 days, the detailed content (CVE snapshots, hashes, and change details) is permanently erased; a minimal record of which CVE IDs were tracked and when is retained indefinitely for our audit and legal-compliance records.
  • API Keys remain valid until the billing period ends

7.2 Account Deletion

You may request full account deletion by contacting us. Deletion is permanent and irreversible. Remaining Top-up Credits are forfeited upon deletion.

7.3 Termination by Us

We may suspend or terminate your account immediately, without notice, if you:

  • (a) Violate these Terms;
  • (b) Engage in fraudulent activity;
  • (c) Abuse the Service (see Section 9);
  • (d) Fail to pay amounts owed;
  • (e) Act in a manner that causes harm to the Service or other Users.

Upon termination for cause, no refunds are issued.

8. Acceptable Use

8.1 You agree to use the Service only for lawful purposes and in accordance with these Terms.

8.2 You must not:

  • (a) Use the Service to facilitate cyberattacks, unauthorized access to systems, or any illegal activity;
  • (b) Redistribute, resell, sublicense, or commercially exploit the Content without our prior written consent;
  • (c) Scrape, bulk-download, or attempt to extract the full database in a manner designed to circumvent Credit consumption;
  • (d) Share API Keys with third parties;
  • (e) Reverse-engineer, decompile, or attempt to extract the underlying algorithms or data processing logic;
  • (f) Use the Service in violation of any applicable export control laws;
  • (g) Attempt to circumvent rate limits, authentication, or billing mechanisms;
  • (h) Use the Service to train machine learning models without prior written consent.

8.3 API Usage

API usage is subject to rate limits specified in your plan. We reserve the right to throttle or suspend API access if usage is inconsistent with normal usage patterns, regardless of Credit balance.

9. Content and Data

9.1 Source and Accuracy

Content is aggregated from public sources including the National Vulnerability Database (NVD), GitHub Security Advisories, CISA, and other sources, enriched with proprietary analysis.

9.2 No Warranty of Accuracy

THE CONTENT IS PROVIDED FOR INFORMATIONAL PURPOSES ONLY. WE DO NOT WARRANT THE ACCURACY, COMPLETENESS, TIMELINESS, OR FITNESS FOR ANY PARTICULAR PURPOSE OF ANY CONTENT.

CVE data, severity scores, exploitation status, and patch information may change after publication. You are responsible for verifying critical security information from primary sources before taking action.

9.3 Not Professional Advice

Nothing in the Service constitutes professional cybersecurity, legal, financial, or regulatory advice. Do not rely solely on our Content for security decisions affecting critical systems.

9.4 Intellectual Property

The Service, including its design, branding, software, and proprietary analysis, is owned by Valters Capital, SIA and protected by intellectual property laws. CVE data itself is not owned by us. You are granted a limited, non-exclusive, non-transferable license to use the Content for your own internal security purposes.

10. Limitation of Liability

10.1 TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:

  • (a) THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED;
  • (b) WE DISCLAIM ALL WARRANTIES INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT;
  • (c) WE ARE NOT LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOSS OF PROFITS, DATA, OR BUSINESS, ARISING FROM YOUR USE OF THE SERVICE;
  • (d) OUR TOTAL AGGREGATE LIABILITY TO YOU FOR ANY CLAIMS ARISING FROM OR RELATED TO THESE TERMS OR THE SERVICE SHALL NOT EXCEED THE AMOUNT YOU PAID TO US IN THE THREE (3) MONTHS PRECEDING THE CLAIM.

10.2 Consumer Protection

Nothing in Section 10.1 excludes or limits liability that cannot be excluded or limited under applicable law, including liability for death or personal injury caused by negligence, fraud, or fraudulent misrepresentation, or any other liability that cannot be limited under Latvian or EU consumer protection law.

10.3 Business Users

For Business Users, the limitations in 10.1 apply in full.

10.4 Service Availability

We do not guarantee uninterrupted availability of the Service. We are not liable for downtime, data loss, or service interruptions.

11. Indemnification

You agree to indemnify, defend, and hold harmless Valters Capital, SIA, its directors, employees, and agents from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising from:

  • (a) Your use of the Service in violation of these Terms;
  • (b) Your violation of any applicable law or regulation;
  • (c) Your infringement of any third-party rights;
  • (d) Any security incidents caused by your misuse of the Service or failure to protect your API Keys.

12. Data Protection and Privacy

12.1 We process personal data in accordance with our Privacy Policy, available at valtersit.com/privacy, and applicable data protection law, including the EU General Data Protection Regulation (GDPR) (Regulation 2016/679).

12.2 We act as Data Controller for account registration data and usage data. For API integrations where you process personal data using our Service, you act as Data Controller for your own processing.

12.3 We implement appropriate technical and organizational security measures to protect personal data.

12.4 For data protection inquiries, contact us at the address in Section 1.

13. Governing Law and Dispute Resolution

13.1 Governing Law

These Terms are governed by the laws of the Republic of Latvia, without regard to conflict of law principles.

13.2 Jurisdiction

For Business Users: Any dispute arising from these Terms shall be subject to the exclusive jurisdiction of the courts of Riga, Latvia.

For Consumer Users: You may also bring claims in the courts of your country of residence within the European Union. Your local consumer protection laws and mandatory statutory rights are not affected by these Terms.

13.3 EU Online Dispute Resolution

Consumer Users in the EU have the right to use the European Commission's Online Dispute Resolution platform at: https://ec.europa.eu/consumers/odr/

13.4 Consumer Rights Organization Latvia

Latvian Consumers can contact the Consumer Rights Protection Centre (PTAC): https://www.ptac.gov.lv/

13.5 US Users

We do not specifically target Users in the United States. If you are accessing the Service from the US, you do so at your own initiative. To the extent US law applies, you agree to resolve disputes through binding arbitration under AAA Commercial Arbitration Rules, and you waive the right to participate in class action lawsuits.

13.6 No Class Actions

To the maximum extent permitted by law, you waive any right to bring claims as a plaintiff or class member in any class action, consolidated, or representative proceeding.

14. Force Majeure

We are not liable for delays or failures in performance resulting from causes beyond our reasonable control, including natural disasters, cyberattacks on infrastructure, internet failures, government actions, pandemics, or other events of force majeure.

15. Specific B2B Provisions

The following applies exclusively to Business Users:

15.1 Consumer protection provisions, including withdrawal rights, do not apply to Business Users.

15.2 All Credit purchases and Subscription payments are final and non-refundable.

15.3 You represent that you have the authority to bind your organization to these Terms.

15.4 You are responsible for ensuring that your use of the Service complies with all applicable laws in your jurisdiction, including export control, data protection, and cybersecurity laws.

15.5 The Service may not be used in jurisdictions subject to EU, US, or UN sanctions.

16. Specific Consumer Provisions

The following applies to Consumer Users, in addition to the general Terms:

16.1 Right of Withdrawal — Digital Services

You have a right to withdraw from Subscription agreements within 14 days of purchase, provided the Subscription service has not yet been used (no API calls made). Once you make any API call, you expressly waive this right as described in Section 6.3.

To exercise this right: contact us at the address in Section 1 before any API usage.

16.2 Mandatory Consumer Rights

These Terms do not affect your statutory rights under applicable consumer protection law. If any provision of these Terms conflicts with mandatory consumer protection law in your jurisdiction, that provision is modified to the minimum extent necessary to comply.

16.3 Complaints

Consumer complaints can be submitted via our contact page at https://www.valtersit.com/contacts/. We aim to respond within 5 business days.

17. Miscellaneous

17.1 Entire Agreement

These Terms, together with our Privacy Policy and any plan-specific terms, constitute the entire agreement between you and Valters Capital, SIA regarding the Service.

17.2 Severability

If any provision of these Terms is found invalid or unenforceable, the remaining provisions remain in full force.

17.3 Waiver

Our failure to enforce any right or provision does not constitute a waiver of that right.

17.4 Assignment

You may not assign your rights or obligations under these Terms without our prior written consent. We may assign our rights to a successor entity in connection with a merger, acquisition, or sale of assets.

17.5 Language

These Terms are provided in English. In the event of conflict between translations, the English version prevails.

17.6 Contact

For all legal notices: https://www.valtersit.com/contacts/
Operator: Valters Capital, SIA, Latvia


These Terms of Service were last updated on 18.09.2026. We recommend reviewing them periodically.

Previous versions: v1