Terms of Service

1. Acceptance of Terms

By accessing or using CodeSlick ("Service"), you agree to be bound by these Terms of Service ("Terms"). If you disagree with any part of these terms, you do not have permission to access the Service.

2. Description of Service

CodeSlick is a security-first code analysis platform that provides:

• Automated security vulnerability detection
• GitHub Pull Request integration and automated code reviews
• AI-powered code fix suggestions
• Team collaboration and dashboard features
• Compliance reporting (OWASP Top 10, CWE, PCI-DSS)

3. User Accounts

3.1 Account Creation

You must sign in with a valid GitHub account to use the Service. You are responsible for:

• Maintaining the security of your GitHub account
• All activities that occur under your account
• Notifying us immediately of any unauthorized access

3.2 Account Eligibility

You must be at least 18 years old to use this Service. By creating an account, you represent that you have the legal capacity to enter into this agreement.

4. Subscription and Billing

4.1 Pricing Plans

CodeSlick offers multiple pricing tiers:

• Free Plan: Limited features (20 PR analyses/month, 1 repository)
• Team Plan: €99/month for enhanced features
• Enterprise Plan: €299/month for unlimited features

4.2 Payment Terms

Paid subscriptions are billed monthly in advance. You authorize us to charge your payment method on a recurring basis until you cancel. All fees are non-refundable except as required by law.

4.3 Cancellation

You may cancel your subscription at any time through your account settings. Cancellation takes effect at the end of the current billing period. No partial refunds are provided.

5. Acceptable Use

You agree NOT to:

• Use the Service for any illegal purpose
• Attempt to gain unauthorized access to our systems
• Interfere with or disrupt the Service
• Upload malicious code or viruses
• Reverse engineer or attempt to extract source code
• Resell or redistribute the Service without permission
• Use the Service to analyze code you don't have rights to

6. Intellectual Property

6.1 Your Code

You retain all rights to your source code. By using the Service, you grant us a limited license to analyze your code and provide security reports. We do not claim ownership of your code.

6.2 Our Service

The Service, including all software, algorithms, and documentation, is protected by copyright and other intellectual property laws. CodeSlick and its licensors retain all rights not expressly granted.

7. Data Security and Privacy

We take data security seriously. Your code is analyzed in secure, isolated environments. We do not store your source code permanently. See our Privacy Policy for details on how we handle your data.

8. Limitation of Liability

• Security Breaches: Any damages resulting from security vulnerabilities not detected by our analysis (false negatives)
• False Positives: Wasted development time or business delays caused by incorrect security warnings
• AI-Generated Code Issues: Bugs, security vulnerabilities, or broken functionality introduced by AI-powered fix suggestions
• Data Loss: Code corruption, data loss, or system failures from applying automated fixes
• Compliance Violations: Regulatory penalties, audit failures, or compliance violations despite using our service
• Third-Party AI Failures: Inaccuracies, downtime, or inappropriate content from third-party AI providers (OpenAI, Anthropic, Together.ai, Groq, Google)
• Service Interruptions: Downtime, bugs, or unavailability of the Service
• Business Losses: Lost profits, revenue, customers, or opportunities

In no event shall CodeSlick's total liability exceed the amount you paid for the service in the 12 months preceding the claim. We are not liable for indirect, incidental, consequential, punitive, or special damages.

9. Disclaimer

CodeSlick is a security analysis tool that helps identify potential vulnerabilities. However, no automated tool can detect all security issues. You acknowledge and agree that:

9.1 No Guarantee of Completeness (False Negatives)

CodeSlick may miss critical vulnerabilities in your code. The tool does not guarantee detection of all security issues. Your code may contain:

• SQL injection, XSS, or other vulnerabilities that our patterns don't detect
• Logic flaws that automated analysis cannot understand
• Zero-day vulnerabilities in dependencies
• Business logic security issues unique to your application

9.2 No Guarantee of Accuracy (False Positives)

CodeSlick may report issues that are not actual vulnerabilities. Not all warnings indicate real security problems. You must:

• Manually review each security finding before taking action
• Understand the context of your application
• Verify that reported issues are exploitable in your specific scenario

9.3 AI-Generated Fix Disclaimers

AI-powered fix suggestions are generated by third-party AI models and may:

• Introduce new bugs: AI suggestions may break existing functionality
• Introduce new vulnerabilities: Fixes may create different security issues
• Be incorrect: AI may misunderstand your code's intent
• Generate nonsensical code: AI hallucinations can produce invalid syntax or logic

You MUST review, test, and validate all AI-generated fixes in non-production environments before deploying to production.

9.4 Compliance Framework Mapping

CodeSlick maps vulnerabilities to OWASP Top 10, CWE, and PCI-DSS references for educational purposes only. This does not constitute:

• Compliance certification or attestation
• Legal or regulatory advice
• Guarantee that your code meets any specific compliance standard

9.5 Your Responsibilities

You are solely responsible for:

• The security of your production systems and code
• Conducting professional security audits and penetration testing
• Implementing appropriate security controls and monitoring
• Maintaining backups before applying any automated fixes
• Validating all findings and fixes before deployment
• Ensuring compliance with all applicable regulations

10. Termination

We reserve the right to suspend or terminate your account if you violate these Terms or engage in fraudulent, abusive, or illegal activity. Upon termination, your right to use the Service ceases immediately.

11. Changes to Terms

We may modify these Terms at any time. We will notify you of material changes via email or through the Service. Continued use after changes constitutes acceptance of the new Terms.

12. Governing Law

These Terms are governed by the laws of the European Union and Portugal, without regard to conflict of law principles. Any disputes shall be resolved in the courts of Portugal.

13. Contact Information

For questions about these Terms, please contact us:

• Email: support@codeslick.dev
• Website: https://codeslick.dev