Terms of Service

These Terms of Service (the “Terms”) form a binding agreement between you and the operator of CrossCheck (“we”, “us”, “CrossCheck”). By creating an account, installing the CrossCheck GitHub App on a repository you control, or otherwise using the service, you agree to these Terms. If you are agreeing on behalf of an organisation, you represent that you have authority to bind that organisation, and “you” in these Terms refers to both you and the organisation.

If you do not agree to these Terms, do not use the service.

You must be at least 18 years old (or the age of legal majority in your place of residence, if higher) to use CrossCheck. You must also have the legal authority to grant access to any repositories you connect.

CrossCheck is not offered to residents of the European Economic Area, the United Kingdom, or Switzerland. Residents of those regions should not sign up, install the GitHub App on accounts they control, or otherwise use the service. We do not represent that the service complies with the GDPR, the UK GDPR, or any equivalent regime, and we may suspend accounts found to be operated from those regions.

You are responsible for the security of your account credentials and for all activity that occurs under your account, whether or not authorised by you. Notify us promptly at [email protected] if you suspect unauthorised access. Account information you provide must be accurate and kept up to date.

CrossCheck is a hosted code-review service. When you install the CrossCheck GitHub App on a repository, we receive webhook notifications about pull requests on that repository and run an automated reviewer against each pull request. The reviewer evaluates a configurable set of natural-language “statements” against the code in the pull request and posts the results back to the pull request as a comment, a check run, and (if you have configured it) an approval.

The reviewer reads the pull-request diff inside an isolated, single-use sandbox that is destroyed at the end of each review. See the Privacy Policy for what we do and do not store.

When you install the CrossCheck GitHub App you grant us the ability to receive webhook events and to mint short-lived installation tokens scoped to the repositories you have selected. We use those tokens to fetch pull-request metadata, clone the repository at the head commit for the duration of a review, and post comments, check runs, and approvals on pull requests. You can revoke this authorisation at any time from GitHub’s “Installed GitHub Apps” settings.

You agree not to:

• Use the service to violate any law or to infringe the rights of any person.
• Use the service on repositories or content you are not authorised to share with a third-party automated system.
• Attempt to reverse-engineer, decompile, scrape, or extract the model weights, prompts, or implementation details of the reviewer.
• Probe, scan, or test the vulnerability of the service except through a coordinated disclosure as described in our Privacy Policy.
• Use the service to generate or distribute malware, spam, or content designed to harm others.
• Resell the service or use it to provide a substantially similar service to third parties without our prior written consent.
• Circumvent or attempt to exceed published rate limits, capacity limits, or credit allowances, or share an account across more than one organisation.

You retain all rights, including all intellectual-property rights, in the source code, pull requests, configuration, and other materials you make accessible to the service (“Customer Content”). You grant us a worldwide, non-exclusive, royalty-free licence to host, process, transmit, and display Customer Content solely as necessary to operate, maintain, and improve the service for you, and to comply with applicable law. We do not use Customer Content to train any machine-learning model.

You represent that you have all rights necessary to grant the licence above with respect to every repository connected to the service.

The reviewer produces output by calling third-party large language models. Its findings are probabilistic and may be wrong, incomplete, or out of date. You must not rely on the reviewer’s output as a substitute for human code review, security audit, legal compliance review, or any other professional judgement. We make no representation that automated output is correct, that it will identify any particular defect, or that it is fit for any particular purpose. You are solely responsible for decisions you make based on the reviewer’s output, including any decision to merge, deploy, or release code.

The service, the website, all underlying software, all statement libraries we publish, our trademarks, and any documentation are and remain our property or our licensors’ property. Except for the limited right to use the service granted by these Terms, no rights are granted to you by implication, estoppel, or otherwise.

The service depends on third-party providers including GitHub, Stripe, large-language-model providers, and the analytics and error-monitoring tools listed in our Privacy Policy. Your use of those providers is governed by their own terms. We are not responsible for outages, errors, or changes in pricing or behaviour by third-party providers, although we will use reasonable efforts to mitigate their impact on you.

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY. WE EXPRESSLY DISCLAIM THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT, AND ANY WARRANTIES ARISING OUT OF COURSE OF DEALING OR USAGE OF TRADE. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, SECURE, OR ERROR-FREE; THAT DEFECTS WILL BE CORRECTED; OR THAT AUTOMATED OUTPUT WILL BE ACCURATE OR USEFUL.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT WILL WE BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS OPPORTUNITY, ARISING OUT OF OR RELATING TO THESE TERMS OR YOUR USE OF THE SERVICE, WHETHER BASED ON CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, OR ANY OTHER LEGAL THEORY, AND WHETHER OR NOT WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

OUR TOTAL CUMULATIVE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE WILL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU PAID US FOR THE SERVICE IN THE TWELVE MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM AND (B) ONE HUNDRED U.S. DOLLARS ($100). THESE LIMITS APPLY EVEN IF A REMEDY FAILS OF ITS ESSENTIAL PURPOSE.

You will defend, indemnify, and hold us harmless from and against any third-party claims, damages, liabilities, costs, and expenses (including reasonable attorneys’ fees) arising out of or relating to (a) your use of the service in violation of these Terms or applicable law, (b) Customer Content, including any claim that Customer Content infringes a third party’s rights, or (c) decisions you make based on automated output from the service.

You may stop using the service and cancel your subscription at any time. We may suspend or terminate your access to the service immediately and without notice if (a) you breach these Terms, (b) we reasonably suspect fraud or abuse, (c) payment on your account fails and is not remedied, or (d) we are required to do so by law. On termination, your right to use the service ends; sections that by their nature should survive (including sections on customer content, intellectual property, disclaimers, limitation of liability, indemnification, and governing law) will survive.

We may also discontinue the service in whole or in part on reasonable advance notice. If we discontinue a paid feature you have already paid for, we will offer a prorated refund of unused fees attributable to that feature.

We may update these Terms from time to time. When we make material changes we will update the effective date at the top of this page and, where practicable, notify account owners by email or in-product notification before the changes take effect. Your continued use of the service after the effective date of an updated version constitutes acceptance of the updated Terms.

These Terms are governed by the laws of the State of Delaware, United States, without regard to its conflict-of-laws rules. The exclusive venue for any dispute arising out of or relating to these Terms or the service is the state and federal courts located in Delaware, and you and we consent to the personal jurisdiction of those courts.

Before filing a claim, the parties agree to attempt to resolve the dispute informally by contacting [email protected] and allowing at least 30 days for a good-faith response.

• Entire agreement. These Terms, together with the Privacy Policy and any policies referenced here, are the entire agreement between you and us regarding the service.
• Severability. If any provision is held unenforceable, the remaining provisions remain in full effect, and the unenforceable provision will be enforced to the maximum extent permitted by law.
• No waiver. Our failure to enforce a provision is not a waiver of our right to enforce it later.
• Assignment. You may not assign or transfer these Terms without our prior written consent. We may assign these Terms in connection with a merger, acquisition, or sale of assets.
• Independent contractors. Nothing in these Terms creates a partnership, joint venture, employment, or agency relationship.
• Notices. Notices to us should be sent to [email protected]. Notices to you may be sent to the email address on your account.

Questions about these Terms should be sent to [email protected]. For general product support, see the support page.