Terms of Service
Last updated: December 2025
§ 1 Scope and Subject Matter
(1) These Terms of Service govern all contracts between OSINTCHECKBOX (hereinafter "Provider") and the user (hereinafter "Client") regarding the use of the OSINT platform.
(2) OSINTCHECKBOX is an Open Source Intelligence (OSINT) platform that enables users to research and aggregate publicly available information about themselves.
Primary Purpose
The platform primarily serves to allow users to check their own digital presence. This enables them to determine where personal data is available on the internet in order to exercise deletion rights under Art. 17 GDPR (Right to be Forgotten).
§ 2 Data Processing Agreement
(1) The Provider processes personal data on behalf and under instruction of the Client within the meaning of Art. 28 GDPR.
(2) The Client remains the data controller within the meaning of the GDPR for the processing of personal data. The Provider acts exclusively as a data processor.
(3) Subject and duration of processing:
- Subject: Research and aggregation of publicly available information from the internet
- Types of data: Names, email addresses, usernames, phone numbers, public profile information
- Data subjects: Persons specified by the Client (primarily: the Client themselves)
- Duration: For the duration of service usage
(4) By using the service, the Client instructs the Provider to process the entered data for the purpose of OSINT research.
(5) Technical and organizational measures: The Provider ensures processing security in accordance with Art. 32 GDPR through:
- Encryption of data transmission (TLS/SSL)
- Access control and authentication
- Regular security updates
- Deletion of search results upon request
§ 3 Client Obligations
(1) The Client is obligated to use the platform only for lawful purposes.
(2) The Client warrants that they:
- Use the platform primarily to research their own person, or
- Have a legal basis for researching third parties (e.g., consent, legitimate interest, legal authorization)
- Do not use the platform for illegal purposes (stalking, harassment, identity theft)
(3) The Client bears sole responsibility for the lawfulness of the data processing they initiate.
§ 4 Use of Artificial Intelligence (EU AI Act)
(1) OSINTCHECKBOX uses Artificial Intelligence for analyzing and aggregating search results. In accordance with the EU Regulation on Artificial Intelligence (EU AI Act, Regulation (EU) 2024/1689), we transparently inform about its use:
- AI systems used: xAI Grok API for intelligent analysis and aggregation of OSINT data
- Purpose: Automatic categorization, verification, and summarization of search results (Personagram generation)
- Risk category: Minimal risk under Art. 6 EU AI Act (not a high-risk AI system)
- Human oversight: All AI-generated results are labeled as such and require human review
(2) Transparency requirement: Users are informed that AI-generated content may contain inaccuracies. Final evaluation of results is the user's responsibility.
(3) Data processing by AI: When using AI analysis, search results are transmitted to xAI (Grok) for processing. Government agencies and enterprise customers can optionally use a local AI model where no data leaves their own infrastructure.
§ 5 Data Protection Rights (GDPR)
(1) The Client has the following rights regarding their personal data under GDPR:
- Right of access (Art. 15 GDPR): Information about processed data
- Right to rectification (Art. 16 GDPR): Correction of inaccurate data
- Right to erasure (Art. 17 GDPR): Deletion of data ("Right to be Forgotten")
- Right to restriction (Art. 18 GDPR): Restriction of processing
- Right to data portability (Art. 20 GDPR): Receipt of data in machine-readable format
- Right to object (Art. 21 GDPR): Objection to processing
(2) To exercise these rights, contact us at: privacy@osintcheckbox.com
(3) Right to complain: You have the right to lodge a complaint with a data protection supervisory authority.
§ 6 Limitation of Liability
(1) The Provider is only liable for damages caused by intentional or grossly negligent conduct.
(2) No liability for search results: The Provider does not guarantee the accuracy, completeness, or timeliness of information found through the platform. Search results originate from publicly available third-party sources.
(3) No liability for third-party content: The Provider is not responsible for content on external websites found through searches.
(4) Liability in data processing: The Provider is liable for damages under Art. 82 GDPR insofar as it has failed to meet its specific obligations as a processor.
§ 7 Prohibited Use and Termination
(1) The Provider reserves the right to exclude users who violate these Terms from using the platform.
(2) Use is specifically prohibited for:
- Stalking or harassment of persons
- Identity theft or fraud
- Economic espionage
- Political surveillance or repression
- Any form of illegal use
(3) Users may terminate their account at any time. Upon termination, all stored data will be deleted.
§ 8 Changes to Terms
(1) The Provider reserves the right to modify these Terms.
(2) Changes will be communicated to users by email or by notice upon login.
(3) Continued use after notification of changes constitutes acceptance of the modified Terms.
§ 9 Final Provisions
(1) The laws of the Federal Republic of Germany apply.
(2) The place of jurisdiction, where legally permissible, is the Provider's place of business.
(3) Should individual provisions of these Terms be invalid, the validity of the remaining provisions shall remain unaffected.