Terms of Service

Shipproof is an automated security and production-readiness audit for applications built with AI tools (Lovable, Bolt, Cursor, and similar). The service analyzes code statically, without executing it, and produces a report with findings and remediation guidance.

The report is the result of an automated analysis. It is not a legal guarantee of security and does not replace a professional security audit or a legal/compliance review.

Using the service requires registration — with email and password, or via GitHub. You must provide accurate information and keep your credentials confidential.

You are responsible for all activity that occurs under your account.

By connecting a repository or uploading an archive, you confirm that you have the right to give us access to that code for analysis.

We use access to your code solely to run the scan and produce the report. See the Privacy Policy for exactly how the code is handled and why we don't retain it.

The Free plan provides one scan with limited finding details. Paid plans (Start/Pro/Max) provide subscription access according to the selected plan.

Payments are processed by our payment partner, Paddle.com Market Limited, who act as the merchant of record. This means the purchase contract for your subscription is between you and Paddle, not directly with Shipproof; billing, refund, and tax matters are governed by Paddle's own terms.

Subscription management (plan changes, cancellation) is available in the "Subscription" section of your account.

• analyze code through the service that you don't have the rights to;
• attempt to gain unauthorized access to the service's infrastructure;
• use the service to create, test, or distribute malicious code;
• disrupt the service, including through automated requests beyond the applicable limits.

Your project's code and the results of its analysis (findings, report) belong to you.

The service itself, its software, the rule catalog, the design, and the Shipproof trademark belong to us (or are used under license) and are not transferred to you by using the service.

The service is provided "as is". We do not guarantee that the service will detect every possible security or production-readiness issue in your project — the absence of findings does not mean the absence of problems.

To the maximum extent permitted by law, Shipproof is not liable for indirect, incidental, or consequential damages arising from the use or inability to use the service, including damages from vulnerabilities the service failed to detect.

You may stop using the service and request account deletion at any time — see the Privacy Policy for how.

We may restrict or terminate access to the service if these terms are violated.

We may update these terms. For material changes, we will notify you — e.g. by email or an in-app notice — before the changes take effect.

[PLACEHOLDER: governing law and jurisdiction for dispute resolution will be determined once a legal entity is established — requires legal sign-off before accepting live payments.]

Questions about these terms: [PLACEHOLDER: contact email].