Terms of Service

These Terms of Service ("Terms") constitute a legally binding agreement between you ("User," "you," or "your") and VibeSafe ("VibeSafe," "we," "us," or "our"), governing your access to and use of the VibeSafe platform, including the website located at vibesafe.tech, all associated APIs, tools, and services (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by these Terms. If you do not agree, you must immediately discontinue use of the Service. We reserve the right to modify these Terms at any time. Continued use of the Service following any such modification constitutes your acceptance of the revised Terms.

VibeSafe provides an automated web application security scanning and analysis platform. The Service includes, but is not limited to:

• Automated scanning of publicly accessible web applications for common security vulnerabilities, including but not limited to missing security headers, exposed secrets, misconfigured CORS policies, and outdated dependencies;
• AI-powered security code review of source code repositories connected via GitHub OAuth integration;
• Automated generation of pull requests containing proposed security fixes to connected GitHub repositories;
• Generation of security grade assessments and detailed vulnerability reports; and
• Export of reports in various formats including Markdown.

You must be at least eighteen (18) years of age, or the age of legal majority in your jurisdiction, whichever is greater, to use this Service. By using the Service, you represent and warrant that you meet this eligibility requirement and have the legal capacity to enter into these Terms.

Certain features of the Service require registration of an account. You agree to: (a) provide accurate, current, and complete information during registration; (b) maintain and promptly update your account information; (c) maintain the security and confidentiality of your login credentials; and (d) accept responsibility for all activities occurring under your account.

You must notify us immediately at hello@nivo.run upon becoming aware of any unauthorized use of your account or any other breach of security.

You may only use the Service to scan web applications and repositories that you own or for which you have obtained explicit, written authorization from the owner to conduct security testing. You expressly agree that you will NOT:

• Use the Service to scan, test, or assess any web application, system, or network without proper authorization;
• Use the Service to conduct any form of denial-of-service attack, penetration testing beyond the scope of the Service's automated scanning, or any activity that disrupts the availability or integrity of third-party systems;
• Use the Service to discover vulnerabilities for the purpose of exploitation, blackmail, or any other unlawful purpose;
• Reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code of the Service;
• Sublicense, sell, resell, or otherwise commercially exploit the Service without our prior written consent;
• Interfere with or circumvent any security features or access controls of the Service;
• Use the Service in violation of any applicable law, regulation, or third-party right; or
• Transmit any malware, viruses, or other harmful code through the Service.

The Service offers optional integration with GitHub via OAuth authentication. By connecting your GitHub account, you:

• Authorize VibeSafe to access your repositories, read source code files, create branches, commit file changes, and create pull requests on your behalf, solely for the purpose of providing security analysis and fixes;
• Acknowledge that VibeSafe will store an OAuth access token associated with your GitHub account, which you may revoke at any time through your VibeSafe account settings or directly through GitHub;
• Accept sole responsibility for reviewing and approving any pull requests generated by the Service before merging them into your codebase; and
• Acknowledge that AI-generated code changes carry inherent risk and may introduce regressions, and that you are solely responsible for testing and validating all proposed changes.

VibeSafe is not affiliated with, endorsed by, or sponsored by GitHub, Inc. Your use of GitHub is governed by GitHub's own Terms of Service.

The Service utilizes artificial intelligence models, including third-party large language models, to analyze code, generate security assessments, and propose fixes. You acknowledge and agree that:

• AI-generated outputs, including but not limited to security grades, vulnerability assessments, fix suggestions, and code changes, are provided on an "as is" basis and may contain errors, inaccuracies, or omissions;
• The Service does not guarantee the detection of all security vulnerabilities, nor does it warrant that any AI-generated fix will be correct, complete, or free of side effects;
• AI-generated code changes should NEVER be merged into production without thorough human review and testing;
• A passing grade or clean scan does not constitute a certification of security and should not be relied upon as the sole basis for any security assessment; and
• You bear sole responsibility for the security of your applications and for any decision to implement AI-suggested changes.

VibeSafe offers both free and paid subscription plans. Paid subscriptions are billed on a recurring basis at the interval specified at the time of purchase (monthly or annually). All fees are stated in United States Dollars (USD) unless otherwise indicated.

Payment is processed by our third-party payment processor, Razorpay. By subscribing to a paid plan, you agree to Razorpay's Terms of Service and authorize recurring charges to your designated payment method.

You may cancel your subscription at any time through your account settings. Cancellation will take effect at the end of the current billing period. No refunds or credits will be issued for partial billing periods, except as required by applicable law or at our sole discretion.

We reserve the right to modify pricing at any time. Price changes for existing subscriptions will take effect at the start of the next billing cycle following notice to you.

The Service, including all software, algorithms, user interfaces, designs, text, graphics, and other content provided by VibeSafe (excluding User Content), is the exclusive property of VibeSafe and is protected by copyright, trademark, and other intellectual property laws.

You retain all ownership rights in your source code, repositories, and other content that you provide to or connect with the Service ("User Content"). By using the Service, you grant VibeSafe a limited, non-exclusive, revocable license to access, read, and analyze your User Content solely for the purpose of providing the Service.

We do not claim ownership of any code generated by AI models through the Service. Such generated code is provided to you without warranty, and you may use it subject to these Terms.

Your use of the Service is also governed by our Privacy Policy, which is incorporated herein by reference. You acknowledge that source code submitted to the Service may be transmitted to third-party AI providers for analysis. We do not permanently store the contents of your source code files after processing is complete.

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ACCURACY. VIBESAFE DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, SECURE, OR FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS.

VIBESAFE MAKES NO REPRESENTATION OR WARRANTY THAT THE SERVICE WILL DETECT ALL SECURITY VULNERABILITIES OR THAT ANY SUGGESTED FIX WILL BE EFFECTIVE OR WILL NOT INTRODUCE ADDITIONAL ISSUES. THE SERVICE IS NOT A SUBSTITUTE FOR PROFESSIONAL SECURITY AUDITING.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL VIBESAFE, ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, OR AFFILIATES BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, LOSS OF DATA, LOSS OF GOODWILL, BUSINESS INTERRUPTION, OR DAMAGES RESULTING FROM: (A) YOUR USE OF OR INABILITY TO USE THE SERVICE; (B) ANY CHANGES, MODIFICATIONS, OR DELETIONS MADE TO YOUR CODE OR REPOSITORIES THROUGH THE SERVICE; (C) UNAUTHORIZED ACCESS TO YOUR ACCOUNT OR DATA; (D) ANY AI-GENERATED OUTPUT, INCLUDING CODE CHANGES THAT CAUSE SYSTEM FAILURES, DATA LOSS, OR SECURITY BREACHES; OR (E) ANY OTHER MATTER RELATING TO THE SERVICE.

IN NO EVENT SHALL VIBESAFE'S TOTAL AGGREGATE LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE EXCEED THE GREATER OF (I) THE AMOUNTS PAID BY YOU TO VIBESAFE IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM OR (II) ONE HUNDRED UNITED STATES DOLLARS ($100.00).

You agree to indemnify, defend, and hold harmless VibeSafe and its officers, directors, employees, and agents from and against any and all claims, damages, obligations, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from: (a) your use of the Service; (b) your violation of these Terms; (c) your violation of any third-party right, including intellectual property or privacy rights; or (d) your scanning of any web application or repository without proper authorization.

We may suspend or terminate your access to the Service at any time, with or without cause, and with or without notice. Upon termination, your right to use the Service will immediately cease. All provisions of these Terms which by their nature should survive termination shall survive, including without limitation ownership provisions, warranty disclaimers, indemnity, and limitations of liability.

These Terms shall be governed by and construed in accordance with the laws of India, without regard to its conflict of law principles. Any dispute arising out of or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts located in Bangalore, Karnataka, India.

If any provision of these Terms is held to be invalid or unenforceable, such provision shall be struck and the remaining provisions shall be enforced to the fullest extent under law.

These Terms, together with the Privacy Policy and any other legal notices published by us on the Service, constitute the entire agreement between you and VibeSafe concerning the Service and supersede all prior or contemporaneous communications and proposals, whether oral or written.

For questions, concerns, or notices regarding these Terms, please contact us at: