Welcome to CodeShield (“CodeShield,” “we,” “us,” or “our”). These Terms of Service (“Terms”) govern your access to and use of the CodeShield platform at codeshield.sh, including our website, APIs, CLI, GitHub Action, and related services (collectively, the “Service”).

By creating an account, clicking “Sign in,” or using the Service, you agree to be bound by these Terms. If you do not agree, do not use the Service.

1. The Service

CodeShield provides automated code-security scanning, including OWASP vulnerability detection, secret detection, post-quantum cryptography (PQC) readiness checks, and AI-assisted remediation. Scan results are informational and do not guarantee that your code is free of vulnerabilities.

2. Accounts

You sign in with GitHub OAuth. You are responsible for the activity under your account and for keeping your API keys confidential. Notify us immediately at security@codeshield.sh if you suspect unauthorized access.

3. Plans, Billing & Refunds

Free plan. Limited to 10 scans/month and 5 repositories.
Paid plans (Team, Business). Billed monthly in advance via Stripe. Prices are listed on our Pricingpage and may change with 30 days’ notice.
Cancellation. You may cancel at any time from your Account page. You retain access until the end of the paid period.
Refunds. Monthly subscriptions are non-refundable. We may grant pro-rata refunds at our discretion.
Taxes. Prices are exclusive of applicable taxes (e.g. EU VAT), which will be added at checkout.

4. Acceptable Use

You agree not to:

Scan code, systems, or repositories you do not own or are not explicitly authorized to scan.
Reverse-engineer, copy, or resell the Service without written permission.
Use the Service to violate any law, infringe intellectual property, or generate malicious code.
Exceed the rate limits or quota of your plan, or share API keys across organizations.

We may suspend or terminate accounts that violate these rules.

5. Your Content

You retain ownership of the code and data you submit to the Service (“Your Content”). You grant CodeShield a limited, non-exclusive license to process Your Content solely to provide and improve the Service. We do not sell Your Content, and we do not train public AI models on it.

Scan results and metadata derived from Your Content are stored to show you history, generate reports, and audit billing.

6. Third-Party Services

The Service integrates with GitHub, Stripe, and Anthropic (Claude). Your use of those services is subject to their respective terms. CodeShield is not responsible for outages, data handling, or changes imposed by third parties.

7. Service Availability

We work hard to keep the Service online but do not guarantee uninterrupted availability. Business-plan customers receive a 99.5% monthly uptime target; Enterprise SLAs are negotiated separately.

8. Warranty Disclaimer

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL DETECT EVERY VULNERABILITY.

9. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, CODESHIELD’S TOTAL AGGREGATE LIABILITY SHALL NOT EXCEED THE AMOUNT YOU PAID TO US IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR ONE HUNDRED EUROS (€100), WHICHEVER IS GREATER. WE ARE NOT LIABLE FOR INDIRECT, CONSEQUENTIAL, OR INCIDENTAL DAMAGES.

10. Indemnification

You agree to defend and indemnify CodeShield against any claims arising from your violation of these Terms, your misuse of the Service, or your infringement of third-party rights.

11. Termination

Either party may terminate the agreement at any time. Upon termination, we may delete your account data after 30 days. Sections 5, 7, 8, 9, and 10 survive termination.

12. Changes

We may update these Terms. Material changes will be announced via email or in-app notice at least 14 days before taking effect. Continued use of the Service after the effective date constitutes acceptance.

13. Governing Law

These Terms are governed by the laws of Spain, excluding its conflict-of-law rules. Any dispute shall be resolved in the courts of Madrid, Spain, unless required otherwise by mandatory consumer-protection law.

14. Contact

Questions? Write to legal@codeshield.sh.