Terms of Service

1. Parties and scope

These Terms govern your use of MisterRoot at https://misterroot.com (the "Service"), operated by MisterRoot · Türkiye ("we").

Payments are processed by Creem.io (Creem IO Ltd.), which acts as Merchant of Record: it is the seller of record, issues invoices and handles taxes. Last updated: 14 October 2026. Effective: 14 October 2026.

2. The Service

MisterRoot provides hands-on incident response training: short lessons organised in learning paths with certificates of completion, SOC Lab case investigations with simulated tools, conversation-based tabletop exercises with ready-made scenarios and simulated organisational units, scoring and progress tracking and, for organisations, AI-generated scenarios, formal reports and team exercises.

Simulations never connect to real systems and never run scanning or attack tools. All evidence shown in exercises is fictional and drawn from documentation-only address ranges.

3. Educational purpose; no guarantee of outcomes

Scores, badges, rankings and reports measure performance inside a simulation. They are not a professional certification and do not guarantee competence in a real incident.

AI-generated content (scenarios, unit replies, evaluations) can be incomplete or wrong. Do not rely on it as the sole basis for decisions in a real incident.

4. Account and security

You can sign up with an e-mail address and password or with your Google account. You must provide a valid e-mail address and keep your password confidential. You are responsible for activity under your account. Individual plans are personal; in organisation plans each user occupies one seat.

• Tell us without delay at [email protected] if you suspect unauthorised access.
• You must be at least 16 years old to use the Service.

5. Acceptable use

Use the Service only for defensive training and exercises. You must not:

• enter real personal data, real confidential corporate information or real indicators of compromise into exercises;
• use the Service to produce attack content, malware or instructions for harming systems;
• probe, overload or attempt to bypass the Service's security, rate limits or quotas, or automate access to it;
• copy, resell or publicly redistribute ready-made scenarios or reports;
• share an account or impersonate another person.

6. Content you enter

You keep ownership of what you write in exercises and of the files you upload. You grant us the licence necessary to store, process and display it to operate the Service, including sending it to the AI provider listed in the Privacy Policy.

If you are a member of an organisation workspace, content you create there belongs to that organisation's workspace and is visible to its authorised members.

7. Plans and payment

The Free plan includes every Easy tabletop scenario and SOC Lab alert, the first course of every learning path and the incident of the week while it is featured. Pro is offered monthly or yearly and includes every ready-made scenario level, every course and path certificate and the whole of SOC Lab. AI-generated scenarios tailored to an organisation and formal exercise reports are part of the organisation plan. Prices are shown in USD on the pricing page; taxes are added by the Merchant of Record where applicable.

Verified students can buy Pro at the student price shown on the pricing page. Verification is by a one-time link sent to a school e-mail address, lasts 12 months and a school address can be used on only one account at a time. We may withdraw the student price for future periods if verification was obtained improperly.

Subscriptions renew automatically at the end of each period until cancelled. Organisation plans are agreed separately (quotation, seats, term).

8. Refunds, cancellation and consumer rights

You can cancel at any time from your account page. Cancellation takes effect at the end of the current paid period; you keep access until then and the subscription is not renewed.

Because access to digital content begins immediately after payment, fees already paid are not refunded, except where a refund is mandatory under applicable law or where we cannot provide the Service due to our own fault.

By starting a paid subscription you request immediate access to digital content and acknowledge that, to the extent permitted by law, your statutory right of withdrawal ends once access begins.

9. Free plan and quotas

The Free plan has no time limit. Each plan has a daily fair-use limit on AI calls, and the organisation plan also has a monthly allowance of AI-generated scenarios; unused allowance does not carry over.

10. Intellectual property

The Service, its software, design, ready-made scenarios, scoring methods and documentation belong to MisterRoot. Nothing in these Terms transfers them to you; you receive a limited, non-exclusive, non-transferable right to use the Service.

11. Third-party services

The Service relies on third parties for hosting, content delivery, AI processing, e-mail and payments (listed in the Privacy Policy). Their availability is outside our control; we choose them with care and replace them if necessary.

12. Availability and changes

We aim for continuous availability but do not guarantee uninterrupted service. We may change, add or remove features; for paid plans we will not remove a core feature during a paid period without notice.

13. Suspension and termination

We may suspend or close accounts that breach these Terms, endanger the Service or other users, or are required to be closed by law. You can delete your account at any time from your account page.

14. Limitation of liability

To the extent permitted by law, our total liability arising from the Service is limited to the amount you paid us in the 12 months before the event giving rise to the claim. We are not liable for indirect damages, lost profits or data loss caused by your own actions. Nothing in these Terms limits liability that cannot be limited by law.

15. Indemnity

You will indemnify us against third-party claims arising from content you enter or from your breach of these Terms.

16. Changes to these Terms

We may update these Terms. Material changes are announced by e-mail or in the Service at least 14 days before they take effect; continued use after that date means acceptance.

17. Governing law and disputes

These Terms are governed by the laws of the Republic of Türkiye. The courts and enforcement offices of İstanbul have jurisdiction, without prejudice to mandatory consumer protection rules of your country of residence.

This English text is binding; translations are provided for convenience.

18. Contact

General: [email protected] · Privacy requests: [email protected] · Security reports: [email protected]