Terms of Service

1. The service

Legwork investigates software incidents by reading the code of GitHub repositories you connect, at the specific commit involved, together with the incident data you send. It produces a diagnosis with cited evidence. Access to your repositories is read-only, and the working copy used for an analysis is destroyed when the analysis ends. The service does not modify your code, your infrastructure, or your production systems.

2. Accounts and organizations

You sign in through our authentication provider and act within an organization. Organization admins control repository connections, services, members, and billing. You are responsible for the accuracy of your account information, for the actions taken under your account, and for keeping credentials confidential — in particular service API keys and callback signing secrets, which are displayed once at creation. If you believe a key has been exposed, rotate it in the dashboard immediately.

3. Acceptable use

You agree not to:

• connect repositories or submit incident data you do not have the right to share with us;
• use the service for unlawful purposes or to analyze code for the purpose of exploiting systems you are not authorized to test;
• probe, interfere with, or attempt to escape the analysis sandbox or any other isolation boundary of the service;
• circumvent rate limits or plan quotas, or share one subscription across organizations;
• resell or offer the service to third parties without our written agreement.

4. Plans, payment, and cancellation

The Developer plan is free within its quotas. Paid plans are billed monthly or annually through Dodo Payments, which acts as the merchant of record: your payment relationship, including tax calculation, invoices, and payment methods, is with Dodo Payments. Subscriptions renew automatically until cancelled. You can cancel at any time from the billing portal; cancellation takes effect at the end of the current billing period, and you keep access until then. Each plan carries monthly investigation and model-token quotas; when a quota is exhausted, new investigations are declined until the next billing month while existing findings remain available. We may change prices with advance notice, effective from your next billing period.

5. Your content

You retain all rights to your repositories, incident data, and the diagnoses produced from them. You grant us the limited rights needed to operate the service: to fetch and transiently process repository contents during an analysis, to store the incident data you send and the resulting diagnoses for the retention period described in our Privacy Policy, and to deliver results to the destinations you configure. We do not use your code or incident data to train models.

6. Automated analysis, no guarantee

Diagnoses are produced by automated analysis, including large language models. Every claim is cited to the code it came from, and citations are validated against the analyzed snapshot, but a diagnosis can still be wrong, incomplete, or miss the actual cause. Diagnoses are an aid to your engineers, not a substitute for their judgment. You are responsible for verifying findings before acting on them, especially before changing production systems.

7. Our intellectual property

The service, including its software, design, and documentation, remains ours. If you send us feedback, we may use it without obligation to you.

8. Termination

You may stop using the service and disconnect your repositories at any time. We may suspend or terminate access for material breach of these terms, for security reasons, or if required by law; where reasonable, we will notify you first. After termination, stored analysis data is deleted under the retention schedule in the Privacy Policy, and you can request earlier deletion.

9. Disclaimers and limitation of liability

The service is provided “as is” and “as available”, without warranties of any kind, express or implied, including fitness for a particular purpose and non-infringement. To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, or consequential damages, or for lost profits, revenue, or data. Our total liability arising out of the service is limited to the amounts you paid us in the twelve months before the event giving rise to the claim. Nothing in these terms excludes liability that cannot be excluded by law.

10. Governing law

[Governing law and venue — to be completed.]

11. Changes to these terms

We may update these terms as the service evolves. For material changes we will give notice — by email or in the dashboard — before they take effect. Continuing to use the service after the effective date means you accept the updated terms.

12. Contact

Questions about these terms: hello@legwork.cloud.