Terms of Service

Last updated: November 7, 2025

1. Acceptance of Terms

By accessing and using Vulnalyze's services ("Service"), you agree to be bound by these Terms of Service ("Terms"). These Terms constitute a legally binding agreement between you and Vulnalyze AB, a company registered in Sweden with its principal place of business in Stockholm, Sweden.

2. Description of Service

Vulnalyze provides an AI-powered code security analysis platform that integrates with GitHub repositories to automatically scan code for security vulnerabilities. The Service operates on a token-based usage model where customers pay per tokens consumed.

3. User Accounts and Responsibilities

To use the Service, you must create an account and provide accurate, complete, and current information. You are responsible for:

  • Maintaining the confidentiality of your account credentials
  • All activities that occur under your account
  • Notifying us immediately of any unauthorized use of your account
  • Ensuring compliance with all applicable laws and regulations

4. Usage and Restrictions

You agree not to:

  • Use the Service for any unlawful purpose or in violation of these Terms
  • Attempt to gain unauthorized access to any portion of the Service
  • Interfere with or disrupt the Service or servers connected to the Service
  • Reverse engineer, decompile, or disassemble any aspect of the Service
  • Use the Service to scan code you don't have the right to analyze

5. Payment Terms

The Service operates on a pay-as-you-go model with pricing per million tokens. Free tier users receive 10,000 tokens at no charge. Enterprise customers may negotiate custom pricing agreements. All prices are exclusive of applicable taxes, including Swedish VAT where applicable.

5.1 Token/Credit Expiration

All purchased tokens or credits expire twelve (12) months from the date of purchase. Expired tokens cannot be used, refunded, or transferred. It is your responsibility to monitor your token balance and expiration dates. We recommend using your purchased tokens within the validity period to maximize your investment. Tokens from the free tier do not expire as long as your account remains active.

6. Intellectual Property Rights

All intellectual property rights in the Service remain the property of Vulnalyze AB. Your code and repository content remain your property. By using the Service, you grant us a limited license to analyze your code solely for the purpose of providing the Service.

7. Data Protection and Privacy

We process personal data in accordance with the General Data Protection Regulation (GDPR) and Swedish data protection laws. Please refer to our Privacy Policy for detailed information about how we collect, use, and protect your data.

8. Limitation of Liability

To the maximum extent permitted by Swedish law, Vulnalyze AB shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, use, goodwill, or other intangible losses. Our total liability shall not exceed the amount paid by you for the Service in the twelve (12) months preceding the claim.

9. Disclaimer of Warranties

The Service is provided "as is" and "as available" without warranties of any kind, either express or implied. While we strive to provide accurate security analysis, we do not guarantee that all vulnerabilities will be detected or that the Service will be error-free or uninterrupted.

10. Indemnification

You agree to indemnify, defend, and hold harmless Vulnalyze AB, its officers, directors, employees, and agents from any claims, damages, losses, liabilities, and expenses arising from your use of the Service or violation of these Terms.

11. Term and Termination

These Terms commence upon your first use of the Service and continue until terminated. Either party may terminate the agreement at any time. Upon termination, your right to use the Service will immediately cease.

12. Modifications to Terms

We reserve the right to modify these Terms at any time. We will notify users of material changes via email or through the Service. Your continued use of the Service after such modifications constitutes acceptance of the updated Terms.

13. Governing Law and Jurisdiction

These Terms shall be governed by and construed in accordance with the laws of Sweden, without regard to its conflict of law provisions. Any disputes arising from these Terms or the use of the Service shall be subject to the exclusive jurisdiction of the courts of Stockholm, Sweden.

14. Dispute Resolution

In accordance with Swedish law, we encourage resolution of disputes through negotiation. If a dispute cannot be resolved through negotiation within 30 days, either party may initiate proceedings in the Stockholm District Court.

15. Consumer Rights (Swedish Konsumentköplagen)

If you are a consumer under Swedish law, you have certain statutory rights that cannot be waived. These Terms do not limit any rights you may have under Swedish consumer protection laws, including the Swedish Consumer Purchase Act (Konsumentköplagen) and the Swedish Consumer Services Act (Konsumenttjänstlagen).

16. Force Majeure

Neither party shall be liable for any failure or delay in performance under these Terms which is due to circumstances beyond the reasonable control of such party, including but not limited to acts of God, natural disasters, war, terrorism, riots, embargoes, acts of civil or military authorities, fire, floods, or pandemic.

17. Severability

If any provision of these Terms is held to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.

18. Contact Information

For questions about these Terms of Service, please contact us at legal@vulnalyze.com

Vulnalyzeulnalyze