Layer7 Technologies Inc.

Layer7 Terms of Service

Last updated 2 September 2026

These Terms of Service ("Terms") are a contract between you and Layer7 Technologies Inc., a Colorado corporation with its registered office at 1500 North Grant Street, Suite 429, Denver, CO 80302 ("Layer7", "we", "us", "our"). They govern your use of the Layer7 service at l7.gg, the dashboard at dash.l7.gg, and everything we provide through them (together, the "Service").

By creating an account, adding a domain, or paying for a plan, you agree to these Terms. If you are agreeing on behalf of a company or other organization, you confirm that you have the authority to bind it, and "you" then means that organization.

If you do not agree with these Terms, do not use the Service.

1. What Layer7 does

Layer7 is a reverse proxy that sits in front of your website or application and filters hostile traffic before it reaches your servers. When you point a domain at us, requests to that domain arrive at our edge first. We score every request, challenge the ones that look automated, and pass the clean ones through to your origin.

A few things worth being clear about up front, because they shape what you are and are not buying:

• Today the Service runs on Cloudflare's serverless edge network while we build our own scrubbing network. Our own network is in active development. When it is ready, your setup will not change: you will not need to repoint anything.
• Every filtering decision is made by Layer7's own engine. For traffic we handle, Cloudflare's application-layer mitigation and bot management are switched off, so the verdicts are ours, not theirs.
• We do not rate limit. We score and filter each request individually so that real users keep moving at full speed, including during an attack.
• You can add allow and block rules from the dashboard. These are simple rules you configure through the interface. There is no custom scripting language, and most sites never need a rule at all, because filtering works by default.

We may add, change, or remove features over time. We will not remove a core capability you are paying for without reasonable notice.

2. Your account

To use the Service you need an account. You must give us accurate information and keep it current. You are responsible for everything that happens under your account, so keep your password and any API tokens secret.

Before you can add a domain, you have to verify your email address. This is a real gate, not a formality: it confirms we can reach you about your services and about attacks on them.

We strongly encourage you to turn on two-factor authentication. Your account can control production traffic for live websites, and a compromised account is a serious problem for you and for anyone who depends on your sites. Certain sensitive actions, such as changing billing, require you to re-enter your password even when you are already logged in.

You must be at least 18 years old, or the age of majority where you live, and legally able to enter into this contract.

3. Domains you protect

You may only route a domain through Layer7 if you own it or are authorized to manage it. By adding a domain you confirm that you have that right, and that you are allowed to send its traffic through a third-party service.

You are responsible for the content and conduct of the sites and applications behind Layer7. That includes anything your own users upload or do through them. Your use of the Service must follow our Acceptable Use Policy, which is part of these Terms.

You also need to keep your origin secure. Layer7 reduces the traffic that reaches you, but it does not patch your servers, manage your DNS records for you, or protect an origin whose real address has already leaked. If someone can reach your origin directly, bypassing us, that is outside what the Service can control.

4. Plans, billing, and payment

We offer these plans, priced per protected domain and billed monthly:

• Free: given out by application only, at our discretion.
• Pro: 25 US dollars per month.
• Business: 175 US dollars per month.
• Enterprise: custom pricing, arranged directly.

You can protect different domains on different plans under one account. Pro and Business are self-serve: you choose the plan and pay, and protection starts as soon as payment clears. Free is reviewed by a person before it is granted, because a free service still costs us real resources and is what abusive signups reach for first. Enterprise is arranged through a conversation, not a checkout.

Payments are handled by Stripe. When you subscribe, you authorize us, through Stripe, to charge your payment method the recurring monthly fee until you cancel. Subscriptions renew automatically each month. Prices are exclusive of any taxes, which you are responsible for where they apply.

If a payment fails, we may retry it and may suspend the affected service until it is paid. We will tell you before a service is suspended for non-payment where we reasonably can.

We may change our prices. If we change the price of a plan you are on, we will give you at least 30 days' notice before it takes effect, and the new price applies from your next renewal after that notice period. If you do not want to continue at the new price, you can cancel before it takes effect.

5. Cancellation and refunds

You can cancel any service at any time from the dashboard. Cancellation takes effect at the end of the monthly period you have already paid for, and your protection continues until then. We do not give partial or pro-rated refunds for time left in a billing period, except where the law requires one.

Free services can be changed or withdrawn at any time, at our discretion, since they are provided as a courtesy rather than a paid product.

If you believe you were charged in error, contact billing@l7.gg and we will look into it.

6. Acceptable use

Your use of the Service is governed by our Acceptable Use Policy. Among other things, you may not use Layer7 to protect or deliver illegal content, to attack or interfere with anyone else, or to hide infrastructure that is itself used for abuse. We can suspend or remove a service that breaks the Acceptable Use Policy, and for the most serious cases, such as material that is illegal on its face, we can act immediately and without notice.

We do not routinely inspect the content of the sites behind us, and nothing in these Terms makes us responsible for that content. But when we become aware of abuse, whether through our own systems, a report to abuse@l7.gg, or a valid legal request, we will act on it.

7. Your data and your visitors' data

There are two kinds of data involved when you use Layer7, and they are treated differently.

The first is your account data: your email address, your plan, your domains, your billing records. How we handle that is described in our Privacy Policy.

The second is the traffic that flows through us to reach your sites, which includes information about your visitors such as their IP addresses. For that traffic, you are the data controller and we act as your processor: we handle it to provide the filtering you asked for, and we do so under our Data Processing Addendum, which forms part of these Terms when the Service processes personal data on your behalf. You are responsible for having your own lawful basis and your own privacy notice for the visitors whose traffic you send through us.

8. Availability and no guarantee of protection

We work hard to keep the Service up and to keep your sites reachable. One of our core design principles is that we will not deny your legitimate traffic because of a failure on our side: when our own systems are uncertain or degraded, they are built to let traffic through rather than block it.

That principle is not a warranty. We do not promise a specific uptime, and unless you have a separate written agreement with us that says otherwise, the Service is provided without a service level guarantee. Attacks, network conditions, changes at our upstream providers, and problems at your own origin can all affect availability.

We also cannot promise that every attack will be stopped or that no hostile request will ever reach you. Security is risk reduction, not a guarantee. New attack techniques appear constantly, and no provider can honestly promise perfect filtering. What we promise is to apply our filtering in good faith and to keep improving it.

We may perform maintenance, and we may occasionally offer features labelled as beta or preview. Those features are provided as-is, may change or disappear, and should not be relied on for anything critical.

9. Intellectual property

The Service, including our software, our edge logic, our filtering engine, the dashboard, and our name and logo, belongs to us and our licensors. These Terms do not give you any ownership of it. We grant you a limited, non-exclusive, non-transferable right to use the Service while your account is in good standing.

Your content stays yours. By routing your traffic and content through the Service, you give us the limited licence we need to receive, process, cache, and forward it for the purpose of providing the Service to you, and nothing more.

If you send us feedback or suggestions, we can use them to improve the Service without any obligation to you.

10. Suspension and termination

You can stop using the Service and close your account at any time.

We can suspend or terminate your access if you break these Terms or the Acceptable Use Policy, if you do not pay, if we are required to by law, or if your use puts the Service, our other customers, or third parties at risk. Where it is reasonable and lawful to do so, we will give you notice and a chance to fix the problem first. For serious or urgent cases we may act immediately.

When a service ends, for whatever reason, traffic for the affected domains stops passing through us, which means you need to repoint your DNS somewhere else to keep those sites reachable. We are not responsible for downtime caused by a service ending because of your breach or non-payment.

Sections that by their nature should survive termination, such as those on intellectual property, disclaimers, limitation of liability, and indemnification, continue to apply after your account ends.

11. Disclaimers

The Service is provided "as is" and "as available", without warranties of any kind, whether express or implied, to the fullest extent the law allows. We specifically disclaim any implied warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Service will be uninterrupted, error-free, or completely secure, or that it will stop every attack.

12. Limitation of liability

To the fullest extent the law allows, neither party will be liable to the other for any indirect, incidental, special, consequential, or punitive damages, or for lost profits, lost revenue, lost data, or the cost of substitute services, even if it was warned that they might happen.

Our total liability to you for any claims arising out of or relating to the Service or these Terms will not exceed the amount you paid us for the Service in the three months before the event that gave rise to the claim.

These limits do not apply to liability that cannot be limited by law, such as, in some places, liability for death or personal injury caused by negligence, or for fraud.

13. Indemnification

You agree to defend and indemnify us against claims, damages, and reasonable costs, including legal fees, that arise out of the content behind your protected services, your breach of these Terms or the Acceptable Use Policy, or your violation of the law or of anyone else's rights. We will tell you promptly about any such claim, let you control the defence of it, and cooperate reasonably with you.

14. Changes to these Terms

We may update these Terms from time to time. If we make a material change, we will give you reasonable notice, for example by email or through the dashboard, before it takes effect. The "last updated" date at the top always shows the current version. If you keep using the Service after a change takes effect, you accept the updated Terms. If you do not accept them, you should stop using the Service and cancel.

15. Governing law and disputes

These Terms are governed by the laws of the State of Colorado, USA, without regard to its conflict-of-laws rules. Before starting any formal proceeding, both sides agree to try to resolve the dispute informally by contacting the other and negotiating in good faith for at least 30 days. Any dispute that cannot be resolved that way will be subject to the exclusive jurisdiction of the state and federal courts located in Denver, Colorado, and you consent to venue there.

16. General

These Terms, together with the Acceptable Use Policy, the Privacy Policy, and, where it applies, the Data Processing Addendum, are the entire agreement between us about the Service and replace any earlier understanding.

If any part of these Terms is found to be unenforceable, the rest stays in effect. Our not enforcing a right on one occasion does not waive it. You may not transfer your rights under these Terms without our consent; we may transfer ours as part of a merger, acquisition, or sale of assets. Neither side is liable for delays or failures caused by events beyond its reasonable control. Any notice we give you may be sent to the email on your account; notices to us should go to the contact address below.

17. Contact

Layer7 Technologies Inc. 1500 North Grant Street, Suite 429 Denver, CO 80302, USA

General and account: support@l7.gg Billing: billing@l7.gg Abuse reports: abuse@l7.gg