Terms of Service | unJaena AI

These Terms of Service ("Terms") constitute a legally binding agreement between you and unJaena (Korean registered name: 언제나, Business Registration No. 857-21-02506, represented by 함륜석 / Ryunseok Ham) ("Company"), a Korean business, governing your access to and use of the unJaena AI platform at https://app.unjaena.com (the "Service"). By creating an account or using the Service, you agree to these Terms. Effective date: April 6, 2026.

1. Acceptance of Terms and Eligibility

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by these Terms. To use the Service, you must: (a) be at least 18 years of age; (b) have legal capacity to enter a binding agreement; (c) not be located in any country subject to comprehensive sanctions by Korea, the US, the EU, or the UN. If using the Service on behalf of an organization, you represent authority to bind that entity.

2. Definitions

The following terms used in these Terms of Service have the meanings set forth below: 1. "Service" refers to the AI-powered digital intelligence analysis platform provided by the Company at https://app.unjaena.com. 2. "User" or "Member" refers to a person or entity that agrees to these Terms and uses the Service. 3. "Artifact" refers to digital evidence data uploaded for forensic analysis. 4. "Credits" refers to prepaid units purchased by the User and consumed through Service usage. 5. "Analysis Report" or "Generated Report" refers to the analysis results produced by the Service based on User Data. 6. "User Data" refers to all data, files, and materials uploaded or submitted by the User to the Service. 7. "Collector" refers to the data collection tool provided by the Company for gathering digital artifacts.

3. Description of Services

unJaena AI provides: (1) AI Forensic Analysis — artifact analysis across 5 platforms (Windows, macOS, Linux, iOS, Android) with MITRE ATT&CK mapping, kill-chain reconstruction, timeline analysis, and incident narrative generation; (2) AI Malware Lab — malware analysis and ordinary program trust verification; (3) AI Contract Review — structured contract information and risk-clause analysis. The Service is designed for law enforcement, corporate IR teams, forensic examiners, security researchers, and software review teams. It does not replace qualified forensic or legal professionals. We may modify or discontinue the Service with reasonable notice for material changes.

4. Account Registration and Security

You must provide accurate, current information. You are responsible for maintaining credential confidentiality, enabling MFA when available, and notifying us immediately of unauthorized access at contact@unjaena.com. You are responsible for all activities under your account. We may suspend compromised or violating accounts. One account per individual/entity unless authorized in writing. The Company may refuse registration in the following cases: (a) false or misleading information provided; (b) previously lost membership eligibility due to Terms violations; (c) violation of applicable laws or regulations.

5. User Warranties and Lawful Authority

By uploading data to the Service, you warrant and represent that: (a) You have the legal authority to analyze the uploaded data in your jurisdiction, arising from one or more of: device ownership, written authorization from the device owner or data subject, a valid warrant or court order, or a lawful forensic mandate (incident response, insurance investigation). (b) You will not rely on AI output as the sole basis for court admission, termination of employment, criminal referral, or any other legally significant decision without independent expert validation. (c) You will not use the Service to analyze data obtained via coercion, without legal process, or in violation of ECPA (18 U.S.C. §2511), the UK Computer Misuse Act, Korean 통신비밀보호법, or equivalent intercept-restriction laws. (d) You are not on any sanctioned-entity list (OFAC SDN, EU Consolidated, UN 1267, MOFAT) and are not located in a comprehensively sanctioned jurisdiction. (e) You will not use the Service for state-sponsored surveillance targeting journalists, dissidents, civil society, or other protected groups in violation of the UN Guiding Principles on Business and Human Rights. Breach of these warranties is a material breach of these Terms and grounds for immediate termination. You indemnify the Company for claims, fines, or damages arising from your breach.

6. Data Ownership and Licensing

You retain all rights to data you upload ("User Data") and to analysis reports generated by the Service ("Generated Reports"). We claim no ownership of your User Data. Our license to your User Data is solely for operating the Service on your behalf — non-exclusive, non-transferable, and terminates upon data deletion or account termination. We will not use your User Data for model training, sharing with third parties, marketing, or cross-user data aggregation. We may use anonymized, non-identifiable aggregate statistics for service improvement as described in the Privacy Policy. IMPORTANT: Generated Reports are produced by AI systems and carry no guarantee of legal admissibility. Admissibility is determined by applicable rules of evidence. We strongly recommend independent verification by a qualified forensic examiner before use in legal proceedings.

7. Acceptable Use Policy

PERMITTED: (a) Uploading forensic artifacts for investigation; (b) uploading malware samples to the Malware Lab for analysis; (c) generating forensic/malware reports; (d) use for law enforcement, corporate IR, academic research, and personal security assessments. LEGAL AUTHORITY: By uploading data, you represent that you have legal right and authorization to possess, access, and submit such data for analysis. PROHIBITED: (a) Weaponizing analysis results or developing malware; (b) attacking third-party systems; (c) uploading CSAM — immediate termination, evidence preservation, and law enforcement reporting; (d) uploading data without legal authority; (e) reverse engineering the Service; (f) circumventing security controls; (g) automated scraping without consent; (h) reselling the Service; (i) violating any applicable law.

8. Service Availability

The Service is provided on an 'as-available' basis. We target 99.0% monthly availability, excluding scheduled maintenance (announced at least 48 hours in advance), force majeure, and essential third-party provider outages. We do not offer a contractual Service Level Agreement (SLA) or service credits. Your sole remedy for an extended outage affecting a specific analysis is pro-rata restoration of credits consumed during the affected window, subject to verification by our support team.

9. Sub-Processors and DPA Availability

The current sub-processor list is maintained at https://unjaena.com/legal/subprocessors. We notify subscribers of additions or replacements at least 30 days in advance via email and the Service. B2B customers may execute our Data Processing Agreement (DPA) incorporating GDPR Art. 28(3) terms by emailing dpa@unjaena.com. Our standard DPA includes EU Standard Contractual Clauses (2021/914) and UK IDTA where applicable. Objection to a new sub-processor: B2B customers may terminate the affected portion of their subscription with a pro-rata refund of unused credits. Consumer customers may terminate their account in full with a pro-rata refund.

10. Credits, Payments, and Refunds

CREDIT PACKS: 100 credits ($9.90), 500 credits ($44.90), 1,000 credits ($79.90), 5,000 credits ($349.90). Prices are displayed in USD; applicable taxes (VAT/GST/sales tax) are calculated and added by Paddle at checkout based on your billing location. Prices subject to change with 30 days' notice. USAGE RATES: Parsing 10 credits/GB, AI queries 3 credits/1,000 tokens, reports 10 credits/report. VALIDITY: Purchased credits do not expire and remain valid as long as your account is active. [MERCHANT OF RECORD DISCLOSURE] · Service Provider / Seller of Record: unJaena AI (Republic of Korea) · Merchant of Record / Payment Processor: Paddle.com Market Ltd (United Kingdom, Company No. 08172133, registered at Judd House, 18-29 Mora Street, London, EC1V 8BT, UK) Paddle is responsible for: (i) worldwide payment processing, (ii) collection and remittance of taxes (VAT/GST/sales tax), (iii) issuance of invoices and receipts, (iv) refund processing, (v) chargeback and payment dispute handling, and (vi) compliance with local consumer protection laws applicable to the transaction. For these functions, Paddle acts as an independent data controller and its own privacy policy applies. unJaena AI is responsible for: (i) the technical provision of the Service, (ii) credit management, (iii) storage of user account and case data, and (iv) first-line customer support. By purchasing, you also agree to Paddle's terms at https://www.paddle.com/legal/terms. REFUNDS: Used credits are non-refundable. Unused credits: full refund within 14 days of purchase (per EU Consumer Rights Directive Art. 9 and Korean Electronic Commerce Act §17). Partially used packs are refunded pro-rata for the unused balance. EU/EEA consumers retain their 14-day withdrawal right under CRD Art. 16(m) until credit use begins. Refund requests: contact@unjaena.com or through the Paddle receipt link. Credits are non-transferable and have no cash value.

11. Intellectual Property

The platform, software, algorithms, models, UI, and documentation remain the Company's exclusive property. You receive a limited, non-exclusive, non-transferable, revocable license to use the Service. You retain all rights to your User Data and Generated Reports (see Data Ownership section). Feedback you provide grants us a perpetual, royalty-free license to use it — this does not extend to your User Data or Generated Reports.

12. DMCA / Copyright Complaints

We respect intellectual property rights. If you believe content on our Service infringes your copyright, send a notice to dmca@unjaena.com including: (i) your physical or electronic signature; (ii) identification of the copyrighted work; (iii) identification of the allegedly infringing material and its location; (iv) your contact information; (v) a good-faith statement that the use is not authorized; (vi) a statement under penalty of perjury that the information is accurate and you are authorized to act for the rights holder (17 U.S.C. §512(c)(3)). We will respond to valid notices, including removing or disabling access to the material. Repeat infringers' accounts will be terminated.

13. Forensic and Malware Analysis Disclaimer

ADVISORY ONLY: All analysis outputs are advisory and not determinative of any factual, legal, or technical conclusion. NO EXPERT TESTIMONY: The Service does not constitute expert testimony or qualified forensic examination. AI LIMITATIONS: AI may produce: (a) false positives; (b) false negatives; (c) hallucinated findings that appear plausible but are incorrect; (d) errors in timeline, correlation, or attribution; (e) inconsistent results across separate analyses. NO FORENSIC SOUNDNESS GUARANTEE: The Service does not establish chain of custody. Output integrity depends on input data quality. INDEPENDENT VERIFICATION RECOMMENDED before: legal proceedings, criminal investigations, court presentations, employment decisions, or any significant decision with legal/financial consequences.

14. AI Output — Accuracy, Bias, and Admissibility

You acknowledge and agree to the following regarding AI-generated output from the Service: (a) HALLUCINATION: Large language model outputs may fabricate file paths, timestamps, MITRE technique attributions, IOC values, and Korean-language artifact references. You must independently verify every citation against raw source data before relying on the output in any legal, administrative, or HR context. (b) BIAS: Training data is imbalanced toward English Windows artifacts; macOS, mobile, and certain Korean-localized artifacts may be under-detected or misclassified. We do not warrant parity across platforms or languages. (c) ADMISSIBILITY: Output of the Service is NOT an expert report under Fed. R. Evid. 702, Korean 형사소송법 §313②, or UK CPR 35. No employee of the Company is offered as expert witness except under a separately executed engagement agreement. The Service does not establish a Chain of Custody admissible under Fed. R. Evid. 901 or Korean 형사소송법 §313. (d) MODEL VERSIONING: Underlying AI models may be updated or withdrawn; outputs are not guaranteed reproducible across model versions. The Service stamps model version into report metadata. (e) NO AUTOMATED LEGAL DECISIONS: Per GDPR Art. 22, the Service is decision-support; a qualified human investigator must make the final legal determination. A qualified-investigator review (analyst review) mechanism is available from the analysis UI. (f) CONTRACT REVIEW SPECIFIC: The Contract Review feature provides automated information analysis of contract clauses for educational purposes only. It does NOT constitute legal advice, legal opinion, or attorney services under the Korean Attorney-at-Law Act (변호사법) or equivalent foreign laws, and no attorney-client relationship is formed by use of the Service. unjaena does not provide attorney matching, referral, mediation, or any introduction to legal counsel. Users requiring legal advice must consult a licensed attorney in their jurisdiction independently.

15. Warranty Disclaimer

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND. WE DISCLAIM ALL WARRANTIES INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. Some jurisdictions do not allow warranty exclusions. In the EU/EEA, this does not affect your statutory consumer rights under the Consumer Rights Directive (2011/83/EU) or Unfair Contract Terms Directive (93/13/EEC).

16. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, the Company is not liable for indirect, incidental, special, consequential, or punitive damages, including lost profits, data loss, or business interruption. TOTAL LIABILITY shall not exceed fees paid in the 12 months preceding the claim, or $100 USD, whichever is greater. EXCEPTIONS: These limitations do not apply to gross negligence, willful misconduct, or mandatory consumer protections that cannot be excluded by law.

17. Indemnification

You agree to indemnify and hold harmless the Company from claims arising from: (a) uploading data without legal authority; (b) misuse of analysis results; (c) export control violations; (d) third-party claims related to your use; (e) Acceptable Use Policy violations; (f) regulatory actions from your violations.

18. Export Control and Sanctions

The Service may be subject to the Wassenaar Arrangement, US EAR, Korean Foreign Trade Act, and EU Dual-Use Regulation. You represent that: (a) you are not in a sanctioned country (Cuba, Iran, North Korea, Syria, Russia, Belarus, and the Crimea, Donetsk, and Luhansk regions); (b) you are not on restricted party lists (SDN, Entity List, EU Consolidated List); (c) you will not export the Service or outputs in violation of applicable laws; (d) you will not use the Service for WMD development. Violations result in immediate termination and reporting to authorities.

19. Law Enforcement and Legal Process

We require valid legal process before disclosing User Data to any third party, including law enforcement. Valid process includes: a search warrant issued by a court of competent jurisdiction, a subpoena under 18 U.S.C. §2703(c) or 28 U.S.C. §1782, an MLAT request, or a Korean 수사기관 영장. Emergency Disclosure: We may disclose non-content information without legal process only when we have a good-faith belief that an emergency involving imminent danger of death or serious physical injury requires immediate action (18 U.S.C. §2702(b)(8); 통신비밀보호법 §13조의4). Notification: We will notify affected users of legal demands unless prohibited by court order, national security letter, or similar legal restriction. Where notification is initially prohibited, we will notify the user as soon as permitted. Transparency Reports: We may publish aggregate statistics about legal requests received.

20. Preservation Orders

On receipt of a lawful preservation order (court order, 18 U.S.C. §2703(f), 민사소송법 preservation order), we will preserve existing User Data for 90 days, renewable upon request. Preservation does not suspend automated deletion of unrelated data. Users receiving such orders should contact dpo@unjaena.com promptly. Case-specific preservation controls may be applied to pause retention-based deletion pending resolution.

21. Termination and Data Handling

BY YOU: Terminate anytime via account settings or contact@unjaena.com. BY COMPANY: We may suspend/terminate for: Terms violations, harmful conduct, 12-month inactivity, non-payment, law enforcement requests, or Service discontinuation. We will notify you via email before restricting your account. In cases requiring urgent action for platform security, notification may follow the restriction. DATA EXPORT: 30-day window after termination to download your data. After that, permanent irreversible deletion within 30 additional days. CREDITS: Unused credits forfeited upon termination, except: EU 14-day refund rights, and pro-rata refund if Company terminates without cause. SURVIVAL: Data Ownership, IP, Disclaimers, Liability, Indemnification, Export Control, and Governing Law sections survive termination.

22. Force Majeure

Neither party is liable for failure to perform due to circumstances beyond reasonable control: natural disasters, pandemics, war, terrorism, government actions, infrastructure failures, cyberattacks, or power outages. The affected party must notify the other promptly and use reasonable efforts to mitigate. If a Force Majeure Event exceeds 90 days, either party may terminate with 30 days' notice.

23. Changes to These Terms

We may update these Terms from time to time. Changes are classified as follows: MATERIAL CHANGES (requiring affirmative click-through acceptance): price increases, new paid features made non-optional, removal of rights, new dispute-resolution forum, new data-processing practices that reduce privacy, changes affecting refund or cancellation. On your next login after publication, you will be prompted to review and accept the updated Terms. If you decline, you may use the Service in read-only mode for 30 days to export your data; after that, your account is suspended. NON-MATERIAL CHANGES (typos, clarifications, contact updates, non-substantive edits that do not reduce your rights): take effect 14 days after publication; continued use thereafter is deemed acceptance. This two-tier approach complies with Korean 약관규제법 §3 (duty to explain material terms), UCTD 93/13/EEC Schedule 2 (unilateral modification without valid reason is presumptively unfair), and EU Consumer Rights Directive.

24. Modification of Terms

We may modify these Terms with at least 30 days' advance notice via email and in-service notification. Continued use after the effective date constitutes acceptance. If you disagree, stop using the Service and request account termination with applicable credit refund. Non-material changes (typos, contact updates) may be made without prior notice. Current version always available at https://app.unjaena.com/terms.

25. Severability

If any provision is held invalid or unenforceable, the remaining provisions continue in full force. The invalid provision shall be modified to the minimum extent necessary to make it enforceable while preserving original intent.

26. Governing Law and Dispute Resolution

[GOVERNING LAW] These Terms are governed by the laws of the Republic of Korea, excluding conflict-of-laws principles. Mandatory consumer protection rules of your habitual residence (e.g., EU Consumer Rights Directive, California CCPA) apply where required by law. [JURISDICTION] · Business-to-business (B2B) disputes: Seoul Central District Court, Republic of Korea, as the court of first instance with exclusive jurisdiction. · Korean consumer disputes: Under Article 14 of the Korean Act on the Regulation of Terms and Conditions (약관규제법 §14), Korean consumers may bring proceedings in the court having jurisdiction over their residence or domicile (pursuant to Articles 3 and 8 of the Korean Civil Procedure Act). No provision of these Terms restricts this right. · EU/EEA consumers: You retain your right to bring proceedings in your country of domicile under the Brussels I bis Regulation (No 1215/2012) Articles 17-19. Mandatory consumer protections of your habitual residence apply. EU Online Dispute Resolution platform: https://ec.europa.eu/consumers/odr · UK consumers: You retain mandatory consumer protection rights under the Consumer Rights Act 2015 and UK CPRs and may choose UK jurisdiction. · California consumers: CCPA/CPRA rights apply regardless of these Terms. You may file complaints with the California Privacy Protection Agency (CPPA) and the California Attorney General. [INFORMAL RESOLUTION] The parties agree to negotiate in good faith for at least 30 days via dpo@unjaena.com before initiating any formal proceeding or arbitration. This provision does not restrict a consumer's right to bring proceedings or seek urgent relief. [ARBITRATION] For B2B commercial disputes, either party may elect arbitration administered by the Korean Commercial Arbitration Board (KCAB) in Seoul, in English, before a single arbitrator. This arbitration clause does not apply to individual consumer (B2C) disputes; consumers may choose their competent local court. Any class action waiver applies only to the extent permitted by law. [INDEPENDENCE OF PRIVACY RIGHTS] Even where Korean law governs these Terms, privacy rights apply independently under the law of the user's region of residence: · EU/EEA/UK users: all GDPR / UK GDPR rights · California users: all CCPA / CPRA rights · Brazilian users: all LGPD rights · Japanese users: all APPI rights · Korean users: all PIPA rights

27. Dispute Resolution — US Residents

US residents: Disputes between you and the Company arising from these Terms or the Service shall be resolved by individual arbitration before the American Arbitration Association (AAA) under its Consumer Arbitration Rules, in your home state or by videoconference. The Federal Arbitration Act (9 U.S.C. §§1-16) governs interpretation of this clause. Class Action Waiver: You and the Company agree to resolve disputes only on an individual basis; class, collective, representative, or consolidated proceedings are waived. If any court determines this waiver is unenforceable, the affected dispute is carved out to a court of competent jurisdiction while the remainder remains in arbitration. California McGill carve-out: Claims for public injunctive relief, as defined in McGill v. Citibank, 2 Cal.5th 945 (2017), may be brought in California state court notwithstanding the arbitration clause. Small Claims: Either party may bring individual claims within the jurisdictional limit of a small-claims court instead of arbitration. 30-day Opt-Out: You may opt out of arbitration by emailing optout@unjaena.com within 30 days of first accepting these Terms.

28. Entire Agreement

These Terms, the Privacy Policy, and Paddle's terms constitute the entire agreement. No waiver is effective unless in writing. Section headings are for convenience only.

29. Contact Information

General: contact@unjaena.com Data Protection: dpo@unjaena.com Billing: Through Paddle or contact@unjaena.com Security: contact@unjaena.com (subject: Security Vulnerability) Response time: Within 2 business days. Last updated: April 6, 2026.