Terms of Service

1. Who this is between#

This agreement is between SuperDiffs, Inc., a Delaware corporation (“SuperDiffs”, “we”), and the individual or organisation that installs or pays for the service (“you”). Registered address published once incorporation completes.

If you accept these terms on behalf of an organisation, you are confirming you may bind it. Where your organisation has signed a separate written agreement with us, that agreement wins over anything on this page.

2. What the service does#

SuperDiffs reads the pull requests in repositories you connect, analyses them, and posts review comments. It uses third-party large language models to do that, which means its output is probabilistic: it will sometimes be wrong, and it will sometimes miss things.

It is a reviewing aid, not a substitute for human review, testing, or a security programme. Nothing we post approves a change, and a review that finds nothing is not a statement that there is nothing to find.

3. Your account#

• You need a GitHub account, and you must install the GitHub App on repositories you are authorised to install it on.
• You are responsible for what happens under your account, including what people you have given repository access do with it.
• You must be old enough to enter a contract where you live, and not barred from using the service under applicable sanctions or export law.
• Tell us at security@superdiffs.com promptly if you believe an account has been compromised.

4. Your content, and what we do with it#

Your code, pull requests, configuration and everything derived from them stay yours. Nothing in this agreement transfers ownership of any of it.

You grant us a limited, non-exclusive licence to host, copy, process, transmit and display that content strictly to provide the service to you: checking out a repository into a sandbox, sending relevant excerpts to a model provider to produce a review, storing findings so we do not repeat them, and showing you the result. The licence lasts as long as we hold the content, and ends when it is deleted.

You confirm you have the rights needed for us to do that with the repositories you connect.

5. What we may not do with your content#

These are commitments, not intentions.

• No training. We do not train or fine-tune any model on your code, and we do not transmit it to a provider under terms that permit them to train on it.
• No sale, no sharing for advertising. We do not sell your content or personal data, and we do not share it for cross-context behavioural advertising.
• No use across customers. Learnings captured from your reviews stay within your organisation. Quality work that spans customers uses metadata about our own output — which rule fired, whether it was addressed — never code.
• No human reading, except as needed. Our staff access customer content only to fix a fault you have reported, to investigate abuse or a security incident, or where the law requires it. Access is logged.

The technical detail behind these — retention periods, subprocessors, the isolation model — is on the trust centre.

6. Acceptable use#

The full list is in the acceptable use policy, which forms part of these terms. In summary: do not use the service to break the law, to attack us or anyone else, to reverse-engineer or benchmark-for-resale our models, to resell reviews as your own product, or to process content you have no right to process.

7. Plans, fees and taxes#

• Paid plans are billed per seat, in advance: $24 per seat per month, or $19 per seat per month billed annually. A seat is a person whose pull requests were reviewed during the billing period; bots and machine accounts are not seats.
• Fees are exclusive of VAT, GST and sales tax, which are added where applicable. You are responsible for withholding taxes.
• Subscriptions renew automatically for the same term unless cancelled before the renewal date. Cancelling stops the next renewal; it does not refund the current period.
• Fees are non-refundable except where these terms say otherwise or the law requires a refund. If we materially reduce a feature you paid for, you may cancel and receive a pro-rata refund of the unused period.
• Payment failures: we will tell you, and retry. Persistent failure after 14 days may suspend the paid features, not delete your data.
• We may change prices with 30 days notice before your next renewal. The change never applies mid-term.

8. Free and open-source plans#

Free and open-source plans carry usage limits and a monthly inference ceiling, published in the limits documentation. They are provided as-is, with no availability commitment, and we may change or withdraw them with 30 days notice. Eligibility for the open-source plan requires an OSI-approved licence and a public repository; we may verify and, if it no longer qualifies, move the repository to the free plan after notice.

9. Service levels and support#

We will use commercially reasonable efforts to keep the service available, and publish incidents at our status page. We do not offer a contractual uptime commitment on self-service plans — a number we have not yet operated at load to support would be decoration. Enterprise agreements include one.

Support on paid plans is by email at support@superdiffs.com, with a target first response of one business day.

10. Changes to the service#

We will improve, change and occasionally remove features. Where a change materially reduces core functionality of a paid plan, we will give 30 days notice, and you may cancel for a pro-rata refund. Models and prompts change more often than that, and those changes are recorded in the changelog — including when they change how much the reviewer says.

11. Confidentiality#

Each of us may learn the other’s confidential information. Both of us agree to protect it with at least reasonable care, use it only for this agreement, and disclose it only to people who need it and are under similar obligations. This does not cover information that is public through no fault of the receiver, was already known, or is independently developed. If the law compels disclosure, the compelled party will give notice where it is lawfully able to.

12. Warranties, and the big disclaimer#

We warrant that we will provide the service with reasonable skill and care, and that we will not materially reduce its security during a paid term.

Otherwise the service is provided as is. We disclaim all implied warranties, including merchantability, fitness for a particular purpose and non-infringement, to the extent the law allows. Specifically, and without weasel wording:

• We do not warrant that the service will find any particular defect, or any defect at all.
• We do not warrant that its findings are correct.
• We do not warrant that suggested patches are safe to apply. Read them; they are suggestions, and applying one is your change.
• We do not warrant uninterrupted or error-free operation.

13. Indemnities#

We will defend you against a third-party claim that the service, used as permitted, infringes their intellectual property, and pay damages finally awarded or agreed in settlement. This does not apply to claims arising from your content, your combination of the service with something else, or your use in breach of these terms.

You will defend us against a third-party claim arising from your content or your use of the service in breach of these terms or the acceptable use policy.

In each case the party seeking defence must give prompt notice, hand over control of the defence, and cooperate.

14. Limitation of liability#

Neither of us is liable for indirect, incidental, special or consequential loss, or for lost profits, revenue, goodwill or data, however caused.

Each party’s total liability under this agreement is capped at the greater of the fees you paid in the 12 months before the claim, or $100. Caps do not apply to your payment obligations, either party’s indemnity obligations, or liability that cannot be limited by law — including death or personal injury caused by negligence, and fraud.

You remain responsible for the code you merge. A defect we failed to find is not a defect we caused.

15. Term and termination#

• The agreement runs until you uninstall the GitHub App and close your account, or a paid term ends without renewal.
• You may terminate at any time, for any reason, from the dashboard.
• We may suspend immediately for a serious breach of the acceptable use policy, a security risk to others, or unpaid fees after notice — and will tell you why.
• We may terminate for convenience on 30 days notice, refunding the unused portion of any prepaid term.
• On termination, your content is deleted within 30 days through an audited erasure process. Export what you want to keep first.
• Sections that should obviously survive — content ownership, confidentiality, disclaimers, liability, and governing law — do.

16. Governing law and disputes#

These terms are governed by the laws of the State of Delaware, without regard to conflict of law rules, and the state and federal courts located in Delaware have exclusive jurisdiction. Nothing here removes a consumer protection right you have where you live.

Before filing anything, email legal@superdiffs.com. Most disputes with a small company are a misunderstanding that survives about one phone call.

17. Changes to these terms#

We will post a new version here and update the date at the top. Material changes get 30 days notice to your billing contact, and continuing to use the service after they take effect is acceptance. If you do not accept, cancel before the effective date and we will refund the unused part of your term.

Related: Privacy Policy · DPA · Acceptable use · Subprocessors. Questions: legal@superdiffs.com.