Legal

Terms and Conditions - B2B Service

Website: osintisnotacrime.com
Publisher: Manufacture Française d'OSINT
Legal form: SARL (Limited Liability Company)
Business registration: 925 183 550 R.C.S. Aix-en-Provence
Legal Representative: Yoan BLANC
Contact: [email protected]

Last updated: March 2026

Article 1 - Purpose and Scope

These Terms and Conditions (hereinafter "T&C") exclusively govern business-to-business commercial relationships between Manufacture Française d'OSINT (hereinafter "the Seller" or "the Publisher") and any professional (hereinafter "the Client") using the osintisnotacrime.com website.

The OSINTISNOTACRIME service is strictly reserved for professionals. Any use by a consumer (natural person acting for non-professional purposes) is excluded.

By professional, we mean any natural or legal person, public or private, acting for purposes falling within the scope of their commercial, industrial, artisanal, liberal or agricultural activity, including when acting on behalf of or for another professional.

Any use of the service implies acceptance without reservation of these T&C, which prevail over any other Client document. The Seller reserves the right to modify its T&C at any time. The applicable T&C are those in force on the date of use.

Article 2 - Service Description

OsintIsNotACrime.com offers OSINT (Open Source Intelligence) tools and services:

Username Search: Searches for a given username across multiple publicly accessible websites and returns detected profiles with associated public metadata.
RhinoScraper: Web scraping tool for extracting structured data from web pages.
EXIF Editor: Metadata viewer and editor for image files. Files are processed entirely in the browser — no data is sent to the server.
OpenDocScan: Document analysis tool. Files are processed entirely in the browser — no data is sent to the server.
Geoloc (Premium): AI-assisted geolocation analysis of images.
Watchlist (Premium): Monitoring of usernames over time, with periodic snapshots stored in encrypted form to detect changes in online presence.
Dork Enrichment (Premium): Automated search engine queries to complement username search results.

Tokens are consumable digital units granting access to premium features (Geoloc, Watchlist, Dork Enrichment). Each premium query consumes a determined number of tokens depending on the operation performed.

Article 3 - Pricing

Token prices are indicated in euros including all taxes (VAT included).

The Seller reserves the right to modify its prices at any time. Applicable prices are those in force at the time of purchase.

For professional clients established in the European Union with a valid intra-Community VAT number, prices may be displayed excluding taxes in accordance with current regulations.

Article 4 - Ordering and Payment

4.1 Ordering Process

The Client selects the desired token pack and proceeds with online payment via the payment methods offered on the website. Order validation constitutes acceptance of these T&C.

4.2 Payment

Payment is made online by bank card or any other payment method offered on the website. Payment is processed securely via Stripe. Tokens are credited to the Client's account immediately after payment validation.

4.3 Invoicing

An electronic invoice is made available to the Client after each purchase. The Client can download it from their account or receive it by email.

Article 5 - Refund Policy

5.1 No-Refund Principle

Purchased tokens are neither refundable nor exchangeable. Sales are firm and final, except in cases of force majeure or serious technical failure attributable to the Seller and duly proven.

5.2 Absence of Detailed Traceability

The Seller does not perform detailed logging of token usage beyond aggregate counters. It is impossible to verify retrospectively how tokens were used. The professional Client is solely responsible for their use of tokens.

5.3 Order Error

In case of obvious error during ordering (duplicate order, wrong pack), the Client must contact customer service immediately. The Seller will review requests on a case-by-case basis.

Article 6 - Token Validity Period

Unless otherwise stated, tokens have no limited validity period and remain usable as long as the service is available.

The Seller reserves the right to set a validity period for promotional packs, clearly indicated at purchase.

Article 7 - Privacy Policy

7.1 Search Data (Ephemeral)

Standard username search results are automatically deleted after 15 minutes. No permanent record of search queries or results is kept on the server for non-premium features.

7.2 Watchlist Data (Encrypted Storage)

Watchlist data is stored using envelope encryption (DEK/KEK) with AES-256-GCM:

A Master Key is held server-side in the application environment and is never stored in the database.
A per-user Key Encryption Key (KEK) is generated and stored encrypted by the Master Key.
A per-item Data Encryption Key (DEK) is generated and stored encrypted by the user's KEK.
Watchlist snapshots (OSINT results) are encrypted with the item's DEK before storage.

This architecture ensures that:
- If the database is compromised without the server environment, all watchlist data remains unreadable.
- If the server is compromised without the database, stored data cannot be accessed.
- Only the combination of both the application server and the database allows decryption of watchlist content.

Watchlist snapshots are limited in number per item. Older snapshots are automatically replaced when limits are reached.

7.3 User Accounts

Account data (email, hashed password) is stored in the application database. Passwords are hashed with bcrypt and never stored in plaintext.

7.4 Local Processing Tools

Some tools (EXIF Editor, OpenDocScan) process files entirely in your browser. Files never leave your device, no data is transmitted to our servers, ensuring complete privacy for sensitive documents.

7.5 Analytics

No tracking cookies are used. No third-party analytics service is employed.

7.6 Server Logs

Minimal technical logs may be kept for operational purposes:
- IP addresses (for rate limiting and abuse prevention)
- Request timestamps
- Error logs for debugging

These logs do not contain search queries or personal information.

7.7 GDPR Rights

In accordance with the GDPR and the French Data Protection Act, the Client has the right to access, rectify, erase, limit, object to and port their personal data. To exercise these rights, contact: [email protected]

Article 8 - Acceptable Use

This service is intended for:
- Legitimate OSINT research and investigations
- Security assessment of one's own digital footprint
- Educational and training purposes
- Defensive security analysis

This service must NOT be used for:
- Harassment or stalking
- Illegal surveillance
- Unauthorized penetration testing
- Any unlawful activities

Any violation may result in suspension or termination of the Client's account without refund of unused tokens.

Article 9 - Service Availability

The Seller strives to keep the service accessible 24/7, except in cases of force majeure or events beyond its control, and subject to maintenance periods.

The Seller reserves the right to suspend, interrupt or limit access to all or part of the service, particularly for maintenance, without entitlement to compensation.

Article 10 - Intellectual Property

All elements of the website (structure, texts, images, logos, databases, etc.) are protected by copyright, trademark law and/or database rights.

Any reproduction, representation, modification, publication or partial or total adaptation is strictly prohibited without prior written authorization.

Article 11 - Warranty and Liability

11.1 Service Disclaimer

The service is provided "as is". The Seller does not guarantee the accuracy, completeness or relevance of search results. The professional Client acknowledges using the service at their own risk.

11.2 Limitation of Liability

The Seller cannot be held responsible for:
- The Client's use of obtained results
- Indirect or consequential damages resulting from service use
- Temporary service unavailability
- Loss of tokens due to Client handling errors
- Accuracy of information returned by third-party websites

11.3 Maximum Compensation

The Seller's liability is limited to the total amount paid by the Client for purchasing the concerned tokens.

Article 12 - Third-Party Services

This service queries publicly available information from third-party websites. Users are responsible for complying with the terms of service of those third-party sites. All information is collected from publicly available sources only.

Article 13 - Service Modifications

The Seller reserves the right to evolve, modify or discontinue all or part of the service at any time.

In case of substantial evolution or service discontinuation, the Seller will endeavor to inform Clients in advance. Unused tokens may, as far as possible, be transferred to an equivalent service or refunded pro rata.

Article 14 - Claims and Disputes

14.1 Customer Service

For any claim or question: [email protected]

14.2 Applicable Law and Jurisdiction

These T&C are subject to French law. In case of dispute, and failing an amicable agreement, the dispute will be submitted to the competent courts of the Seller's registered office jurisdiction.

Article 15 - Acceptance

Using osintisnotacrime.com implies full and complete acceptance of these Terms and Conditions.

These Terms and Conditions can be downloaded and printed from osintisnotacrime.com

Remember: Always verify information from multiple sources and respect privacy laws in your jurisdiction.