End-User License Agreement

Last updated 2026-08-31 -- full verbatim text as shipped with the Vardex installer
VARDEX END-USER LICENSE AGREEMENT
Vardex | melbius.com
Last updated: 2026-08-31

Vardex is developed and licensed by The Trustee for THE THREE WANDERERS
TRUST (ABN [add ABN here]) ("we", "us", "our"). Every reference to "we",
"us", or "our" in this Agreement means The Trustee for THE THREE WANDERERS
TRUST.

Purchases are processed by Lemon Squeezy LLC as merchant of record. Lemon
Squeezy is the seller of record for your transaction and is responsible for
payment processing, tax collection, invoicing, and refunds; we are the
licensor of the Software under this Agreement. Your purchase is also subject
to Lemon Squeezy's own buyer terms.

This is a legal agreement between you ("you" or "the user") and us, for
the software product Vardex, including its executable files, associated
components, and documentation (the "Software"). By clicking "I accept"
during installation, or by installing, copying, or otherwise using the
Software, you agree to be bound by the terms of this Agreement. If you
do not agree, do not install or use the Software.

1. LICENSE GRANT
   Subject to your compliance with this Agreement, we grant you a
   limited, non-exclusive, non-transferable license to install and use
   one copy of the Software on a machine you own or control, for as long as
   your license key remains active. A license key is tied to one activated
   installation ("instance") at a time; deactivating an instance (from
   within the Software) frees the key to be activated on another machine.
   You may use the Software without a license key in a reduced,
   unlicensed mode where offered.

   This license is for your own use monitoring networks you are authorized
   to monitor (see Section 2). It is not a license to resell, sublicense,
   rent, lease, or provide the Software to third parties as a hosted or
   managed service without our prior written consent.

2. AUTHORIZED USE ONLY — NETWORK MONITORING SCOPE
   Vardex captures and analyses network traffic on the network interface(s)
   you configure it to monitor, in order to detect and report potential
   security threats. This is powerful software, and using it responsibly is
   your obligation, not something the Software enforces on your behalf.

   You may only use Vardex to monitor networks and devices that you own,
   administer, or are otherwise expressly authorized to monitor (for
   example: your own home network, a network belonging to an organization
   you work for and have been authorized by that organization to monitor,
   or a network you have explicit written permission to monitor). You must
   not use Vardex to intercept, capture, or analyse network traffic on any
   network, or belonging to any device or person, without such
   authorization.

   Doing so may violate telecommunications interception, wiretapping,
   computer misuse, or privacy laws in your jurisdiction (in Australia,
   for example, the Telecommunications (Interception and Access) Act 1979
   and the Privacy Act 1988; equivalent laws exist in most other
   jurisdictions). You are solely responsible for ensuring your use of the
   Software complies with all laws that apply to you, including any
   obligations you may have to the people whose network activity the
   Software may observe (for example, other members of your household, or
   colleagues on a network you administer at work). We are not
   responsible for, and disclaim all liability arising from, any use of
   the Software that is not authorized as described in this Section.

3. RESTRICTIONS
   Except to the extent applicable law expressly permits (and then only to
   that extent), you must not: (a) reverse engineer, decompile, or
   disassemble the Software; (b) remove, obscure, or alter any proprietary
   notice on the Software; (c) use the Software to build a competing
   product; or (d) circumvent or attempt to circumvent the Software's
   license-activation mechanism.

   This Section does not apply to the open-source components described in
   Section 4, and nothing in this Agreement restricts, or imposes any
   further condition on, the rights you have in those components under
   their own licenses. In particular, the packet-capture program
   vardex_capture.py and the Scapy library it uses are licensed to you
   under the GNU General Public License, version 2, and you may use, copy,
   modify, and redistribute them on those terms. See Section 4 and
   THIRD-PARTY-NOTICES.txt.

4. THIRD-PARTY COMPONENTS
   The Software includes open-source components (including under GPL-2.0,
   LGPL-3.0, MPL-2.0, Apache-2.0, BSD, MIT, PSF, and HPND licenses).
   Details, required notices, and license texts are in
   THIRD-PARTY-NOTICES.txt, distributed alongside
   the Software. Where those licenses grant you rights beyond this
   Agreement (for example, LGPL-3.0's right to replace a linked library),
   this Agreement does not restrict them.

5. THIRD-PARTY SERVICES AND DATA
   Vardex offers optional integrations with third-party services —
   including AbuseIPDB and GreyNoise (IP threat-intelligence lookups),
   MaxMind GeoLite2 (IP geolocation data, obtained by you directly from
   MaxMind under MaxMind's own EULA at
   https://www.maxmind.com/en/geolite2/eula), Slack and Discord (webhook
   notifications you configure), email/SMTP notifications (sent via a mail
   server you configure), Lemon Squeezy (license-key activation and
   validation), and Anthropic's Claude API (optional AI-generated incident
   reports). Where a feature requires your own account, webhook, mail
   server, or API key with a provider, your use of that provider's or
   server's service is governed by that provider's own terms, not this
   Agreement, and we are not responsible for those services' availability,
   accuracy, or handling of your data. Data you send to these providers
   (for example, an IP address looked up against AbuseIPDB, a notification
   sent to a Slack or Discord webhook, an email sent via your configured
   mail server, or an incident summary sent to Anthropic for report
   generation) is sent directly from your machine to that provider or
   server — we do not operate infrastructure that receives or stores this
   data.

6. YOUR DATA
   Vardex stores captured/derived network event data, configuration, and
   threat-intelligence cache locally on your own machine. We do not
   collect, receive, or have access to this data. The only data sent to
   infrastructure we operate or select is your license key, for
   activation/validation with Lemon Squeezy as described in Section 5.

7. DISCLAIMER OF WARRANTY
   THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
   OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
   MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND
   NON-INFRINGEMENT. Vardex is a detection and assistance tool: it does not
   guarantee detection of any or all security threats, and must not be
   relied upon as your sole means of network protection. Nothing in this
   Section excludes or limits any consumer guarantee that cannot lawfully
   be excluded or limited under applicable law (including, for consumers in
   Australia, the Australian Consumer Law).

8. LIMITATION OF LIABILITY
   TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE SHALL NOT BE LIABLE FOR ANY
   INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR
   ANY LOSS OF DATA, PROFITS, OR REVENUE, ARISING FROM YOUR USE OF OR
   INABILITY TO USE THE SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
   SUCH DAMAGES. OUR TOTAL LIABILITY UNDER THIS AGREEMENT SHALL NOT
   EXCEED THE AMOUNT YOU PAID FOR THE SOFTWARE IN THE 12 MONTHS PRECEDING
   THE CLAIM.

   Nothing in this Section excludes, restricts, or modifies any right or
   remedy, or any guarantee, warranty, or other term or condition, implied
   or imposed by law that cannot lawfully be excluded, restricted, or
   modified. For consumers in Australia, our goods come with guarantees that
   cannot be excluded under the Australian Consumer Law: you are entitled to
   a replacement or refund for a major failure and compensation for any other
   reasonably foreseeable loss or damage, and you are entitled to have the
   goods repaired or replaced if they fail to be of acceptable quality and
   the failure does not amount to a major failure.

9. ENTIRE AGREEMENT
   This Agreement, together with THIRD-PARTY-NOTICES.txt where referenced,
   is the entire agreement between you and us about the Software, and
   supersedes any prior or contemporaneous agreements, understandings, or
   representations about the Software.

10. SEVERABILITY
    If any provision of this Agreement is found unenforceable or invalid
    under applicable law, that provision is limited or removed to the
    minimum extent necessary, and the remaining provisions continue in
    full force and effect.

11. TERMINATION
    This license terminates automatically if you breach this Agreement. On
    termination, you must stop using the Software and may be required to
    uninstall it. Sections 2, 3, 6-10, and 12 survive termination.

12. GOVERNING LAW
    This Agreement is governed by the laws of Victoria, Australia, and
    applicable Commonwealth of Australia law, without regard to
    conflict-of-law principles.

13. CONTACT
    Questions about this Agreement: support via melbius.com.

---
This document is a plain-language license template prepared for use by
The Trustee for THE THREE WANDERERS TRUST and has not been reviewed by
a lawyer. It is provided as a starting point, not legal advice. The
Trustee for THE THREE WANDERERS TRUST should have it reviewed by a
qualified lawyer (ideally one familiar with Australian Consumer Law and
privacy/interception law) before relying on it commercially.