Terms of Service | Vibe Security

Vibe Security – Terms of Service

Last updated: 13 August 2025

About us

The Service is provided solely by 6GL Software Inc., an Ontario corporation (“Vibe Security”, “6GL”, “we”, “us”). All obligations under these Terms are obligations of 6GL Software Inc. No director, officer, shareholder, employee, or contractor of 6GL Software Inc. assumes any personal obligations to you under these Terms.

Address: 1505 Laperriere Ave, Suite 509, Ottawa ON K1Z 7T1, Canada • Email: contact@vibesecurity.io

By accessing or using vibesecurity.io or any related software, plug-in, or service (collectively, the “Service”), you accept these Terms of Service (“Terms”) on behalf of yourself or the entity you represent. If you accept on behalf of an entity, you confirm you are authorized to bind that entity.

1. Eligibility

You must be at least 18 years old and able to form a legally binding contract.
You must comply with all applicable laws, including Canadian export-control rules.

2. Account & Access

Sign-in methods. Today we offer sign-in via GitHub OAuth and Google OAuth. We may add other authentication methods (e-mail/password, Apple, SSO, etc.) in the future.
Integrations. To run scans you currently install the Vibe Security GitHub App with read-only access to repositories you choose. Future options (e.g., an IDE plug-in, CLI upload, cloud-drive sync) may allow you to grant access to code in other ways. You agree to complete whatever installation or permission steps your chosen integration requires.
Your responsibility. You are responsible for safeguarding your credentials—whether GitHub, e-mail, or other—and for everything that happens under your account. We send service e-mails (alerts, receipts, etc.) to the address associated with your login method.

3. User-Generated Content & Code Licence

3.1 What counts as “User Content”

Code & repositories or workspaces you connect via any integration.
Profile data we fetch from your sign-in provider (e.g., GitHub username, avatar) or that you supply directly.
Any other material you upload or display through future features (comments, screenshots, logs, etc.).

3.2 Your rights & licence to us

By providing User Content you:

Grant us a worldwide, royalty-free licence to clone, store, copy, analyse, display, format, and otherwise use your Content solely to operate, maintain, and improve the Service.
Confirm you have all rights needed to give us that licence.
Acknowledge that some or all of your code (the “scan context”) is sent to a large-language model (LLM) for automated analysis and that the LLM may train on submitted data. We have no contractual data-processing guarantees with the LLM provider.
Consent to our engineers or automated systems reviewing vulnerability findings (including code snippets) for accuracy and to our creation of anonymised vulnerability descriptions—stripped of personal or project identifiers—so we can reduce false positives and train or improve our software. We will never disclose your proprietary code or secrets in that process.

We make a best effort to redact secrets, but you remain fully responsible for keeping keys or sensitive data out of your code.

3.3 Content retention & removal

Deleting a repository or workspace from the dashboard does not delete existing scan data.
To erase stored scan artefacts you must e-mail contact@vibesecurity.io with the project name(s); we will delete associated data within a reasonable period unless retention is required by law or for backup integrity.

4. Acceptable-Use Policy (AUP)

You agree not to:

Violate any law or third-party right.
Submit code or data you do not have permission to share.
Upload malware, secrets, or personal data you’re not entitled to share.
Reverse-engineer, probe, or overload the Service.
Use the Service to build or train a competing product.
Misrepresent the origin of any Content.

We may investigate, suspend, or terminate accounts that break this AUP.

5. Third-Party Links & Services

The Service may link to external sites or embed third-party components (e.g., GitHub, Stripe dashboards). We are not responsible for those sites or services; their own terms and privacy policies apply.

No Personal Warranties. No statements by our personnel (in demos, e-mails, or online) create any warranty or obligation unless expressly included in a written agreement signed on behalf of 6GL Software Inc.

6. Plans, Billing & Refunds

Payments are processed by Stripe. Prices, features, and usage limits are shown in-app.
Automatic renewal — subscriptions renew at the end of each billing cycle unless you cancel first.
Failed payment — we may retry; continued failure may lead to downgrade, suspension, or termination.
Cancellations or downgrades take effect at the next renewal; no pro-rated refunds.
Refunds — provided where required by consumer-protection law; otherwise at our sole discretion.

7. Support, Availability & Service Changes

The Service is offered as-is; we have no ongoing duty to provide feature updates, maintenance, or support.
We may modify, suspend, or discontinue features at any time. If we sunset a paid plan entirely, we will give you at least 30 days’ notice and refund any prepaid, unused fees.

8. Security Findings, Errors & Disclaimers

Scans are best-effort informational tools. They may contain errors, omissions, or false positives/negatives and must not be relied upon as a comprehensive security guarantee.
You remain solely responsible for auditing your code, managing secrets, and maintaining security practices.
We expressly disclaim liability for any loss, damage, or breach arising from (i) reliance on scan results, (ii) undetected vulnerabilities, or (iii) errors or omissions in our findings.
The Service is provided “as is” and “as available.” To the extent any non-waivable warranties apply, their duration is limited to the shorter of thirty (30) days or the minimum period required by law.
While we implement reasonable safeguards, we are not liable for unauthorised access to your code resulting from a compromise of our infrastructure (including any integration secrets), except to the extent liability cannot be disclaimed under applicable law.
These disclaimers apply to and benefit our directors, officers, employees, contractors, and agents to the same extent as they apply to the company.
No Advisory Duty. The Service and any communications from us are informational only and not security consulting or advisory services. We do not assume a fiduciary or professional advisory duty to you.

9. Export-Control Compliance

You agree not to export, re-export, or transfer the Service or any technical data in violation of Canadian, U.S., or other applicable export-control laws.

This section does not create any duty for us or our personnel to advise you on compliance obligations or regulatory requirements.

10. Indemnity

You will indemnify, defend, and hold harmless 6GL Software Inc. and its directors, officers, employees, contractors, and agents from any claim, loss, or liability (including reasonable legal fees and disbursements) arising out of or related to:

Your User Content or code,
Your use or misuse of the Service,
Your breach of these Terms or the law, or
Your violation of any third-party right (including IP or privacy).

This indemnity expressly includes any claim brought in a foreign jurisdiction against any officer, director, employee, or agent of 6GL Software Inc. in their personal capacity.

11. Limitation of Liability

To the fullest extent allowed by law, 6GL Software Inc. and its directors, officers, employees, contractors, and agents (“Vibe Parties”) will not be liable for:

Indirect, special, incidental, consequential, punitive, or exemplary damages, or
Loss of profits, data, or goodwill—even if advised of the possibility.

Our total liability for all claims within any 12-month period is limited to the fees you paid us in that period.

We are not liable for any security incident or breach that arises from third-party systems, hosting providers, or malicious actors, including any unauthorised access to your code via stolen credentials or secrets.

Some jurisdictions do not allow certain exclusions; parts of this section may not apply to you.

12. Termination

You may stop using the Service at any time.
We may suspend or terminate your access for AUP or Terms breaches, non-payment, or legal requirements.
Sections that by nature survive (e.g., licences, disclaimers, indemnity, limits of liability, jurisdiction, and no personal liability) will continue after termination.

13. Electronic Communications

You consent to receive all notices and communications electronically (e-mail, in-app banners, or dashboard messages). Such notices satisfy any legal requirement that communications be “in writing.”

14. Cookies & Tracking

See our Privacy Policy for details on cookies and analytics practices.

15. Copyright (Notice-and-Notice) Policy

If you believe content hosted by Vibe Security infringes your copyright, please send a notice to contact@vibesecurity.io or the postal address above containing:

Your contact information and signature;
Identification of the copyrighted work;
The URL or precise location of the allegedly infringing material;
A statement of good-faith belief that the use is not authorised;
A statement that the information is accurate and you are the owner or authorised agent.

We will respond under Canada’s Notice-and-Notice regime and disable or remove the material as required.

16. Updates to These Terms

We may change these Terms. We will give you 14 days’ notice by e-mail and an in-app banner. Continued use after the effective date means you accept the new Terms.

17. Governing Law & Dispute Resolution

These Terms and any dispute, claim, or proceeding arising out of or relating to them or the Service are governed by the laws of Ontario, Canada, excluding conflict-of-law rules. The parties irrevocably submit to the exclusive jurisdiction and venue of the provincial and federal courts located in Ottawa, Ontario, Canada and waive any objection to jurisdiction, venue, or forum non conveniens.

To the maximum extent permitted by law, you agree not to bring or participate in any claim against our directors, officers, employees, contractors, or agents in their personal capacities in any jurisdiction other than Ottawa, Ontario, Canada.

Collective Proceedings Waiver. To the fullest extent permitted by law, disputes must be brought on an individual basis only and not as a plaintiff or class member in any purported class, collective, consolidated, or representative action.

Jury Trial Waiver (where permitted). Each party waives any right to a jury trial in any action or proceeding arising out of or relating to these Terms or the Service.

18. Miscellaneous

Force Majeure — neither party is liable for events outside reasonable control.
Severability — if any clause is unenforceable, the rest remain in effect.
Assignment — you may not transfer these Terms without our consent; we may assign them as part of a merger or sale.
Signatures. Any agreement or order form related to the Service will identify 6GL Software Inc. as the contracting party, and signatures by our personnel are agency signatures (e.g., “Name, Title, for 6GL Software Inc.”).
Entire Agreement — these Terms (plus referenced policies) constitute the whole agreement between you and us regarding the Service.
No Reliance — You acknowledge you are not relying on any statements or representations about the Service other than those expressly set out in these Terms or an order form executed by 6GL Software Inc.

19. No Personal Liability of Individuals

You agree that any claim, suit, or other proceeding arising out of or relating to these Terms or the Service shall be brought solely against 6GL Software Inc., and not against any of its directors, officers, shareholders, employees, contractors, or agents in their personal capacity. This limitation applies regardless of the form of action, including contract, tort, statute, or otherwise, to the fullest extent permitted by law.