Terms of Service

These Terms form a contract between you (or the organisation you represent) and ScanDrix AI Inc. They apply to the hosted service, the self-hosted deployment, the CLI, and this website. If your organisation has a separate signed agreement, order form, or Data Processing Addendum with us, those documents take precedence where they conflict with these Terms.

You confirm you have authority to bind the organisation you represent. If you do not have that authority, do not accept these Terms.

You must be at least 16 years old and able to form a binding contract. You are responsible for activity under your account, for keeping credentials secure, and for telling us promptly if you believe an account has been compromised. You may not share one account across organisations.

Workspace administrators control membership, plan, and repository access. We may suspend an account that poses a security risk to us or to other customers, and will tell you why unless doing so would be unlawful or would compromise another party.

ScanDrix analyses pull request diffs you submit, runs static analysis over the resulting code, and produces review comments, findings, and suggested changes. We integrate with third-party Git providers, and — where you configure it — with model providers you supply credentials for.

Features, limits, and model availability change as the product develops. We may add, change, or remove features, but we will not reduce the core functionality of a paid plan during its committed term without giving you the option to cancel.

You agree not to use the service to:

• Analyse code you do not have the right to analyse.
• Violate a third party’s intellectual property rights, or use the service to build a competing product by scraping, reverse engineering, or systematically extracting our rule logic.
• Probe, overload, or attempt to breach the service, including rate limits, authentication, or tenant isolation.
• Use the service to distribute malware or to facilitate harm.
• Resell or provide the service to a third party as a standalone offering without a written agreement.

You keep all right, title, and interest in your source code, repositories, pull requests, and Drixy rules. We claim no ownership of them. We receive only the limited licence needed to host, process, and display them back to you for the purpose of running the service.

You grant us a limited, worldwide, non-exclusive licence to use your content solely to operate and support the service for you. That licence ends when you delete the content or close the account, subject to the retention periods in our privacy policy.

Review output is generated for you by automated systems, including third-party models. Automated output may be wrong. You are responsible for reviewing it before merging changes, and we assign to you, without additional charge, the rights we hold in that output so you can use it as you see fit. We make no representation that output is unique to you, and we do not claim ownership of it.

Paid plans are billed in advance, monthly or annually, at the rate published on our pricing page. Prices are exclusive of tax. You are responsible for taxes arising from your use, excluding taxes based on our net income.

Cancellation. You can cancel at any time from workspace settings or by emailing us. Cancellation stops renewal; it does not entitle you to a refund of the unused part of a period you have already paid for.

Refunds. We offer a 7-day money-back guarantee on any first paid subscription, refunded to the original payment method on request within 30 days of the charge. This guarantee is in addition to your statutory rights and does not apply to renewals of a plan you have already used beyond the guarantee period.

Failed payments. If a renewal fails we retry and then restrict the workspace to the free plan. We do not delete your data, and you can restore access by updating your payment method.

Model costs. If you bring your own model keys, token charges are billed to you directly by that provider. We do not mark them up, and we are not responsible for those charges.

The service integrates with GitHub, GitLab, Bitbucket, Azure Repos, and other providers, and optionally with model providers and cloud platforms you configure. We do not control those services. We are not responsible for their availability, security, or terms, and your use of them is governed by your agreements with them.

• Free plan — provided on an as-available basis with no uptime commitment.
• Team — 99.9% monthly API availability target.
• Scale — 99.95% monthly API availability target, with priority support.
• Enterprise — 99.99% availability with service credits, as defined in the signed order form.

Availability is measured monthly, excludes scheduled maintenance announced at least 48 hours in advance, and excludes downtime caused by your own infrastructure, your Git or model provider, or force majeure. Where a signed order form defines service credits, those credits are the exclusive remedy for downtime.

Each party will protect the other’s confidential information with reasonable care and use it only to perform under these Terms. This obligation does not apply to information that is public, already known to you without restriction, or independently developed. We will tell you promptly if we are required by law to disclose your confidential information.

Except as expressly stated, the service is provided as is and as available. We do not warrant that it will be uninterrupted, error-free, or free of harmful components, or that findings will be complete or correct. Automated review can produce false positives and false negatives.

Static analysis, taint tracking, and model-generated suggestions are decision support. Final decisions about what enters your codebase remain yours.

To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, lost data, or lost revenue, arising out of the service.

To the maximum extent permitted by law, each party’s total liability under these Terms is limited to the greater of the fees you paid us in the 12 months before the event giving rise to the claim, or USD 100. Nothing here excludes liability that cannot be excluded by law, including for death or personal injury caused by negligence, or fraud.

Nothing in these Terms limits our obligations to you under the Data Processing Addendum.

You agree to defend and indemnify ScanDrix against third-party claims arising from your use of the service, your breach of these Terms, or your infringement of another party’s rights, and to pay damages finally awarded or agreed in settlement. We will notify you promptly, let you control the defence, and not settle anything that admits fault by you without your consent.

These Terms apply while you use the service. Either party may terminate for material breach that remains uncured 30 days after written notice. You may stop using the service at any time.

On termination we will make your data available for export for a reasonable period, then delete it in line with the retention schedule in our privacy policy, except where law requires us to keep it. Sections that by their nature survive termination — payment obligations, confidentiality, disclaimers, limitation of liability, and indemnity — continue to apply.

We may update these Terms as the product or the law changes. Material changes are announced by email to workspace administrators and in-product at least 14 days before they take effect. If you do not accept the change, you may cancel before it takes effect and we will refund any prepaid, unused portion of your current term.

[GOVERNING LAW AND JURISDICTION TO BE CONFIRMED] These Terms are governed by the laws of [JURISDICTION], without regard to conflict-of-laws rules, and the parties submit to the exclusive jurisdiction of the courts located there. Where you deal with us as a consumer, mandatory protections and the courts of your place of residence still apply.

If a provision is found unenforceable, the rest stays in force. Neither party may assign these Terms without the other’s written consent, except in a merger or sale of substantially all assets. We may assign ours on notice to you. Our failure to enforce a right is not a waiver of it. Notices to you are sent to the email on your account; notices to us must go to the address below.

Questions about these Terms can go to legal@scandrix.dev. Written notices should be addressed to ScanDrix AI Inc. at [REGISTERED ENTITY ADDRESS].