Terms of Service

Cyber Crisis Desk is a trading name and online service operated by Miro Global Services LTD, registered in England and Wales under company number 14466196, registered office 7 The Colliery, Donnington Wood, Telford, England, TF2 7FQ. In these Terms "we", "us" and "our" mean Miro Global Services LTD, and "you" means the person or organisation using the service.

By creating an account or using the platform you agree to these Terms. If you do not agree, do not use the service.

You confirm that you:

• are at least 18 years old;
• have the legal capacity to enter into this agreement;
• will provide accurate and current information;
• will use the service only in relation to accounts, systems, devices, websites and information that you own or are legally authorised to manage;
• have authority to bind your organisation to these Terms if you register on its behalf.

Depending on your plan and entitlements, the platform provides:

• an emergency triage questionnaire and immediate guidance;
• deterministic playbooks that generate an initial Rescue Plan for your incident type;
• a single clear Client Next Action to reduce decision paralysis;
• structured evidence requests, uploads and organisation in private storage;
• technical indicator analysis using third-party reputation services;
• recovery tracks and actions for accounts, money, systems, files and notifications;
• report generation, including client summaries, technical and authority-facing reports;
• monitoring checks and a structured case-closure workflow;
• secure case messaging with our team;
• AI-assisted drafts for review by a human;
• subscription plans and a one-time Emergency Pass.

Feature availability depends on your plan, your current entitlements, your payment status, active and annual case limits, storage limits, and technical availability. We may add, change or retire features as described under Availability and changes.

You must not use the service to attempt or assist:

• hack-back or retaliation of any kind;
• unauthorised access to any system, account, device or network;
• credential theft, phishing or account takeover;
• creating, testing or deploying malware;
• tracing or identifying attackers through unlawful means;
• harassment, intimidation or doxxing;
• surveillance or monitoring of people without lawful authority;
• uploading or processing unlawfully obtained information;
• activity directed at systems you do not own or are not authorised to manage.

The service is provided for lawful, authorised, defensive incident response only. If you are unsure whether you have authority over a system, stop and take professional legal advice.

• This platform is not an emergency service.
• If money is being stolen right now, contact your bank or payment provider immediately.
• If there is immediate danger to a person, or a crime in progress, contact the appropriate emergency services.
• The platform does not replace the police, Action Fraud, the NCSC, the ICO, legal counsel, insurers, banks, qualified digital-forensics practitioners or any other competent authority.
• Guidance provided in the platform is general operational assistance, not legal, regulatory, insurance, accounting or forensic advice.
• AI-generated text is a draft for review and is not professional advice.

We do not guarantee:

• recovery of accounts, funds or data;
• removal or eradication of malware;
• identification, attribution or prosecution of attackers;
• acceptance of a report by a bank, provider, insurer, regulator or law-enforcement body;
• prevention of future incidents;
• uninterrupted or error-free availability of the platform.

You are responsible for:

• keeping your account credentials confidential and using a strong, unique password;
• keeping your contact email accurate, since we send case notifications to it;
• telling support@cybercrisisdesk.com promptly if you suspect your account has been compromised;
• not sharing an account where separate users should each have their own;
• following security instructions we give you during an incident;
• the acts and omissions of anyone you allow to use your account.

See /pricing for the current offer. After the paid functionality of an Emergency Pass ends, your case data is preserved subject to our retention policy; you can restore full functionality by subscribing or buying another pass where eligible.

• Subscriptions renew automatically at the end of each billing period, monthly or annually, until you cancel.
• Renewal is charged at the price for your plan and interval in force at the time of renewal. We will tell you in advance if the renewal price changes.
• You can cancel at any time from the billing portal in your account. Cancellation stops future renewals; it takes effect at the end of the current paid period unless mandatory law requires otherwise.
• Your access continues until the end of the paid period.
• You may be able to reactivate before the cancellation takes effect, from the same billing portal.
• Upgrades normally take effect immediately, with proration applied by Stripe.
• Downgrades normally take effect at the end of the current period.
• If a payment fails we apply the configured grace period; after it expires we may restrict new paid actions until payment succeeds.
• Activation does not wait on payout settlement — confirmation from Stripe is enough to activate your entitlements.

• Prices are displayed and charged in US dollars (USD).
• Your bank or payment provider may convert the charge into your local currency.
• Your bank or payment provider may add currency-conversion or international-transaction fees. We do not control and do not receive those fees.
• You are responsible for your own accounting and tax treatment of amounts you pay us. We do not advise on whether a subscription is deductible for you.

• Cancelling a subscription prevents future renewals. It does not automatically reverse charges already taken for a period that has started.
• The Emergency Pass is a one-time purchase of a digital service that begins as soon as it is linked to a case.
• We provide refunds where applicable law requires it, or where we expressly agree to one. Contact support@cybercrisisdesk.com to ask.
• We do not exclude your mandatory consumer rights. Nothing in these Terms removes or limits a right that cannot lawfully be waived.
• If you are a consumer, you may have a statutory right to cancel a distance contract within a cooling-off period. That right can be lost or reduced where you asked us to begin supplying a digital service immediately and acknowledged that; because incident response is usually urgent, this often applies here. We will assess any request on its facts rather than refusing it automatically.
• The rules may differ depending on your country of residence and on whether you are acting as a consumer or as a business.

Hands-on human specialist work is not part of a self-service subscription. It may require a case assessment, an agreed scope, a separate quotation, separate payment and additional terms.

A subscription does not include:

• unlimited analyst time;
• guaranteed specialist review of your case;
• digital forensic imaging or evidential acquisition;
• remote remediation of your systems;
• legal representation;
• ransomware negotiation;
• 24/7 SOC monitoring.

• You keep ownership of the content and evidence you upload.
• You grant us a limited licence to host, store, process, transmit and analyse that content, and to generate the outputs you request, solely to provide and support the service.
• You are responsible for collecting and uploading content lawfully, including having any authority or lawful basis needed for information about other people.
• Uploads must be relevant and proportionate to the incident.
• You must not upload passwords, one-time codes, CVV numbers, private keys, seed phrases or access tokens.
• We may restrict, quarantine or remove material that is unlawful, harmful, irrelevant or prohibited by these Terms.
• Reports and evidence you download may contain sensitive information. You are responsible for handling and sharing them securely.

We and our licensors own the platform software, its design and user interface, the incident workflows, the crisis playbooks, report and document templates, the Cyber Crisis Desk brand and our documentation. Nothing in these Terms transfers that ownership to you.

We grant you a limited, revocable, non-exclusive, non-transferable licence to use the service in accordance with your plan and these Terms. You must not copy, resell, reverse engineer or create derivative works from the platform except where the law permits.

We claim no ownership over your original evidence, your case narrative or your business records.

The service depends on third parties, including Stripe for payments, Supabase for authentication, database and private storage, OpenAI for AI-assisted drafting, a transactional email provider, threat-intelligence services for indicator lookups, and our hosting provider.

Those services operate under their own terms and their own availability commitments. We are not responsible for their acts or omissions beyond our own responsibilities under these Terms and applicable law. The providers we use are listed in our Privacy Policy.

We aim to keep the service available but we do not promise uninterrupted access. We may carry out maintenance, apply urgent security changes, and add, modify or retire features.

Where a change is material and adverse to you, we will give reasonable notice where it is practicable to do so. Urgent security or legal action may have to take effect immediately.

We may suspend or terminate access where:

• you breach these Terms;
• the service is being used in an unauthorised or harmful way;
• there is a security threat to the platform or its users;
• we detect fraud or payment abuse;
• payment fails and the applicable grace period has passed;
• we are required to do so by law.

Where practicable we will tell you and, unless prevented by law or by an ongoing investigation, give you a reasonable opportunity to put things right. On termination your data is handled as described in our Privacy Policy and your statutory rights are unaffected. You may also stop using the service and close your account at any time.

Nothing in these Terms limits or excludes liability for fraud or fraudulent misrepresentation, for death or personal injury caused by negligence, for breach of statutory consumer rights, or for any other liability that cannot lawfully be limited or excluded.

If you are a consumer

We are responsible for loss or damage you suffer that is a foreseeable result of our breach of these Terms or our failure to use reasonable care and skill. We are not responsible for loss or damage that is not foreseeable, or for loss arising because you used the service for a business purpose. We do not ask consumers to indemnify us.

If you are a business customer

We exclude all implied terms to the fullest extent permitted by law. We are not liable for loss of profit, loss of business, loss of goodwill, loss of anticipated savings, loss or corruption of data, or any indirect or consequential loss. Subject to the paragraph above, our total liability arising out of or in connection with the service in any 12-month period is limited to the greater of the fees you paid us in that period and USD 100.

In all cases, we are not liable for the underlying cyber incident itself, for the acts of the attacker, for decisions taken by your bank, provider, insurer or an authority, or for your decision to act or not act on guidance provided through the platform.

These Terms and any dispute arising from them are governed by the laws of England and Wales, and the courts of England and Wales have jurisdiction.

If you are a consumer resident outside England and Wales, this does not remove the mandatory legal protections available to you under the law of your country of residence, and you may be able to bring proceedings in your local courts.

For contractual questions and complaints, contact support@cybercrisisdesk.com. We aim to resolve issues informally first.

We may update these Terms. The version identifier and last-updated date at the top of this page show the current version. For material changes we will give reasonable notice — by email to your account address or by an in-app notice — and, where required, ask you to accept the new version before continuing to use the affected features. Continuing to use the service after the stated effective date means you accept the updated Terms.

Cyber Crisis Desk is operated by Miro Global Services LTD, registered in England and Wales under company number 14466196. Registered office: 7 The Colliery, Donnington Wood, Telford, England, TF2 7FQ.

Contractual and support contact: support@cybercrisisdesk.com
Privacy contact: privacy@cybercrisisdesk.com