The service and operator
NotHoly is a platform for security research, including model-assisted code analysis, investigation and supported pentesting workflows. It is operated by 59.611.478 MATHEUS DE MORAIS CAETANO - ME, Brazil, CNPJ 59.611.478/0001-09.
NotHoly provides access to hosted models and builds the surrounding interface, integration and account controls. It does not train or own the underlying model weights. Base-model references and actual capabilities are shown in the current catalog.
Accounts and credentials
Provide accurate account information and protect your credentials and API keys. Use available security controls and tell us promptly if you suspect compromise. You must have legal capacity to enter the agreement and authority to act for any organization you represent.
Registration and email verification do not reserve a paid place or grant inference. Access depends on confirmed entitlement or credit, admission where applicable, permissions and operational limits. A waitlist entry does not itself grant an account, paid place or credit.
Use of the platform
Use the service lawfully, respect the rights of others and obtain permission for activity that requires it. You are responsible for the material you submit and for actions you take with generated results. Do not use the platform for unlawful access, credential theft, fraud, harassment or infringement.
A prompt, response or proposed tool call cannot grant access or permission. Platform execution is limited by the actual scope, budget and approval controls. Function calls returned through the native API may be proposals for your own application to execute.
Your material and model results
You retain rights you hold in your submitted material. You permit the processing needed to provide the requested service, as explained in the Privacy document. Third-party rights and applicable model or content restrictions remain relevant.
Results can be incomplete, incorrect or unsuitable for a particular environment. Review code and evidence, test changes appropriately and verify important conclusions before acting. Similar results may be generated for others; originality or freedom from third-party rights is not guaranteed.
Prices, subscriptions and usage
Current prices are shown in USD before purchase. The current catalog and checkout define the plan, credit allowance, consumption schedule, request limits and concurrency ceiling. Historical usage preserves its transaction rate. Credits are service usage units, not withdrawable money or a fixed number of messages.
The current offering uses shared credits across chat, CLI and API. Eligible included credits are used first; purchased credits never expire and can be used without a subscription. Reaching a limit does not authorize an automatic recharge or unexpected purchase. The terms disclosed for a purchase and mandatory consumer rights continue to apply.
Annual subscriptions and monthly credits
An annual subscription is charged in full in advance and renews annually at the amount shown in the catalog and checkout. The annual offer and any discount are shown before purchase. Annual payment does not release a full year of included credits at once.
For new subscriptions, included credits are granted for each monthly service period within the paid subscription term, including annual plans. Unused credits expire at the end of that monthly grant period and do not roll over. Monthly grants follow the subscription’s UTC anchor. Existing grants and already-paid annual contracts keep their recorded policy where Billing identifies different terms; this launch policy does not rewrite those records. Purchased credits never expire and can be used without a subscription, with a basic limit of 1 concurrent request. Eligible included credits are used first, then purchased credits. Automatic top-ups are off. Account, security and financial checks still apply.
Canceling automatic renewal preserves the paid annual term and its monthly grants until that term ends. Immediate cancellation stops future grants. Under the new monthly-expiry policy, eligible credits already issued and not revoked remain usable until their recorded monthly expiry, with a basic limit of 1 concurrent request when paid coverage is no longer active. Refunds, disputes and source restrictions can affect availability under the applicable purchase terms, account controls and mandatory rights. A request does not promise an automatic refund or an additional grant.
Changes between monthly and annual billing, or between plan tiers, are scheduled for the end of the paid billing period. A change request does not itself authorize an immediate charge or silently convert existing funding.
Renewal, cancellation and refunds
A recurring subscription renews at the amount and cadence shown at checkout until canceled. Use Billing to review invoices, payment information and available cancellation options. Canceling renewal preserves paid coverage until the confirmed term end. Immediate cancellation stops future included grants. Under the new monthly-expiry policy, eligible, unrevoked credits already issued remain usable until their recorded expiry, with a basic limit of 1 concurrent request without active paid coverage. Existing grants and paid annual contracts keep their recorded source policy.
Send refund requests to support@notholy.com. Applicable consumer withdrawal, cancellation and refund rights remain available. These terms do not waive mandatory rights.
Availability and limits
Model availability, supported controls and practical request limits come from the current catalog. A concurrency limit is a service ceiling, not guaranteed upstream throughput or uninterrupted availability. Admission limits for new customers do not block existing entitled customers from their normal billing and renewal access.
Tools, storage and collaboration are available only where implemented and included in the applicable access terms. Inference credit does not authorize unlimited scanning, execution or storage. Changes remain subject to existing paid obligations and applicable law.
Data and processing
Chat and native inference requests have different retention rules. Read Privacy before submitting sensitive material and confirm that your organization permits the processing. The native processing-cache policy does not guarantee identical retention by every external processor or erase historical records.
Organization-specific processing terms apply when separately agreed and define the relevant parties and responsibilities.
Restrictions and account closure
Work may be restricted when credentials or permission are revoked, funding is unavailable, a safety or legal obligation applies, or service limits are reached. We may investigate misuse and enforce applicable terms. Reasons and remedies should be explained where law and security permit.
You can stop using the service and use supported account controls to request closure. Closure does not automatically remove financial obligations, required records or the rights you retain under law.
Legal rights, changes and contact
Nothing in these terms excludes rights or remedies that cannot lawfully be excluded. Applicable law continues to govern the rights and responsibilities of the operator and its customers, including mandatory consumer rights.
These terms take effect upon publication. Material changes are published with any notice required by law and remain subject to existing purchase obligations. Questions: support@notholy.com.