Terms of Service

1. Service Description & Agreement

ShipReady (the “Service,” “we,” “our,” or “us”) is a production readiness platform for applications built with AI coding tools. The Service performs automated, primarily passive analysis of web applications and connected source repositories, and produces security findings, SEO and AI-visibility checks, performance and uptime signals, launch readiness scores, evidence-backed reports, and AI-generated remediation guidance.

These Terms of Service (“Terms”) form a binding agreement between you (“you” or “Customer”) and ShipReady, and govern your access to and use of our website, dashboard, APIs, MCP server, IDE integrations, and reports. These Terms incorporate by reference our Privacy Policy, Cookie Policy, Acceptable Use Policy, Disclaimer, Data Processing Addendum, and Subprocessor List, each of which forms an integral part of these Terms.

ShipReady is an informational service. It is not a substitute for professional security, legal, regulatory, compliance, or penetration-testing advice, and it does not certify any application as secure or compliant. See Section 12 and our Disclaimer.

2. Eligibility, Capacity & Authority

You represent and warrant, on a continuing basis, that each of the following is true:

• You are at least eighteen (18) years of age and legally capable of entering a binding contract.
• If you access the Service on behalf of a company or other legal entity, you have authority to bind that entity, and “you” refers to that entity.
• You are not located in, resident in, or subject to the jurisdiction of any country or party subject to applicable sanctions or export-control restrictions, and you are not identified on any government restricted-party or denied-party list.
• You have not previously been suspended, terminated, or banned from the Service by us.
• You will comply with all laws applicable to you, to your access, and to any system you target with the Service.

3. Account Registration & Security

When you create a ShipReady account, you agree to:

• Provide accurate, current, and complete registration information and keep it up to date.
• Maintain the confidentiality of your credentials, API keys, MCP tokens, and connected integration tokens at all times.
• Use a strong, unique password and enable multi-factor authentication where available.
• Notify us promptly of any actual or suspected unauthorized access, credential compromise, or security breach affecting your account.
• Accept full responsibility for all activity, scans, API calls, and charges incurred under your account, whether or not authorized by you.
• Not share, transfer, lease, or assign your account or credentials to any third party.

We may refuse registration, or suspend, restrict, or terminate any account, where we reasonably believe there is a security risk, fraud, abuse, or a violation of these Terms.

4. Authorization to Scan; Pre-Scan Warranties

This is a material condition of these Terms. You represent and warrant, for every scan you initiate, that:

• You own the targeted system, or you hold explicit, demonstrable authorization from its owner obtained before the scan began.
• You have authority to grant ShipReady and its subprocessors the right to send requests to that target, receive responses, and process those responses.
• Your scanning does not violate any applicable computer-misuse, unauthorized-access, or computer-crime law in any relevant jurisdiction.
• Your scanning does not breach the target’s terms of service, acceptable use policies, or any contractual or statutory restriction.
• You have given any notice and obtained any consent required from end users, employees, or data subjects whose data may be observed as a result of the scan.

Scanning a system without authorization may be a criminal offense. You assume sole responsibility for verifying your authority, for the consequences of scans you initiate, and for any claim brought by the owner or operator of a target. ShipReady has no obligation to verify your authority and does not do so.

Automated requests can trigger alerts, rate limits, blocks, third-party charges, or degraded performance on a target. You are responsible for backups, for choosing appropriate maintenance windows or test environments, for monitoring the target, and for stopping a scan that may cause harm. You accept all operational risk from scans you request.

5. Acceptable Use

You must use the Service lawfully and in accordance with our Acceptable Use Policy, which is incorporated into these Terms. Without limiting that policy, you must not, and must not permit any third party to:

• Scan, probe, or analyze any system you do not own or are not expressly authorized to scan.
• Use scan results to exploit vulnerabilities, gain unauthorized access, or conduct any malicious, fraudulent, or illegal activity against any system or person.
• Circumvent rate limits, quotas, paywalls, access controls, or any other technical restriction of the Service.
• Reverse-engineer, decompile, or attempt to derive the source code, detection rules, scoring models, or trade secrets of the Service, except where mandatory law permits it.
• Resell, sublicense, white-label, or otherwise commercially exploit access to the Service without our prior written consent.
• Access the Service with bots, scrapers, or headless clients other than through our documented APIs and within their published rate limits.
• Use the Service to develop, train, evaluate, or benchmark a competing scanner or machine-learning model.
• Impose a disproportionate load on our infrastructure, interfere with other users’ access, or endanger the security, integrity, or availability of the Service.

We may investigate suspected violations and take any action we consider appropriate, including removing content, suspending or terminating accounts without refund, and reporting the matter to law enforcement.

6. Plans, Fees & Payment

7. Communications & Notices

8. Intellectual Property

Ownership is clearly divided:

Subject to your compliance with these Terms, we grant you a limited, non-exclusive, non-transferable, revocable license to access and use the Service for your own internal business or personal use during your subscription. All rights not expressly granted are reserved.

You grant us and our subprocessors a worldwide, non-exclusive, royalty-free license to host, store, transmit, process, analyze, and display your content solely as necessary to provide, secure, support, and improve the Service for you, to comply with law, and to enforce these Terms. That license ends when the relevant content is deleted, except where retention is required for backups, audit, dispute resolution, or law.

You represent that you hold all rights, permissions, and lawful bases required for the content you submit. Do not submit production credentials, regulated data, or sensitive personal data unless strictly necessary and authorized. ShipReady is not your system of record and has no obligation to preserve your content beyond the retention periods stated in our Privacy Policy.

If you submit feedback, suggestions, bug reports, or feature requests, you grant us a perpetual, irrevocable, worldwide, royalty-free license to use and incorporate that feedback into our products without obligation to you. We may also collect and use aggregated, de-identified usage and performance data for any lawful purpose, including improving detection quality; such data does not identify you or your content.

9. Third-Party Services & Integrations

The Service depends on third-party infrastructure, data sources, and APIs — including hosting, database and authentication, payments, email delivery, error monitoring, analytics, AI model providers, public vulnerability databases, DNS resolvers, and the websites and repositories you submit. Our current providers are listed on our Subprocessors page.

When you connect an integration such as a GitHub repository or a Supabase project, you authorize us to access and process data from that integration as necessary to run the checks you request. You are responsible for having the rights to grant that access, and you may revoke it at any time by disconnecting the integration.

Third parties may change, restrict, delay, or discontinue their services at any time. To the maximum extent permitted by law, we are not responsible for resulting outages, data loss, incorrect output, or additional charges, and we have no obligation to maintain any particular provider.

10. Beta & Experimental Features

We may release pre-release, beta, preview, or early-access features. These are provided for evaluation, may contain defects, may be changed or withdrawn without notice, carry no service-level or support commitment, are excluded from any refund obligation, and are provided “AS IS.” You use them at your own risk.

11. AI & Automated Analysis

Detection in ShipReady is performed by deterministic scanner logic and evidence-based rules. AI is used to explain findings, improve readability, and generate remediation guidance and fix prompts — never to decide whether something is vulnerable.

AI-generated explanations, remediation steps, code examples, and fix prompts may nonetheless be incomplete, out of date, or wrong for your specific stack. Applying them without review may introduce vulnerabilities, outages, or data loss. Before using them you must obtain qualified human review, keep restorable backups, test outside production, and apply your own change control and rollback procedures. All decisions and actions taken on the basis of Service output are yours alone.

12. Disclaimer of Warranties

The Service, including all scan results, scores, reports, automated output, and beta features, is provided on an “AS IS,” “AS AVAILABLE,” and “WITH ALL FAULTS” basis, without warranties of any kind, whether express, implied, or statutory.

To the maximum extent permitted by law, we disclaim all implied warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy, and completeness; any warranty that the Service will be uninterrupted, error-free, or secure; any warranty that scan results, severity ratings, or remediation guidance are accurate, current, or suitable; and any warranty that the Service detects every vulnerability, misconfiguration, or threat. A clean report or a high readiness score does not mean an application is secure, compliant, or fit to deploy.

The Service is not designed or authorized for use in any application requiring fail-safe performance where failure could lead to death, personal injury, or severe property or environmental damage. Where a jurisdiction does not allow certain disclaimers, our liability is limited to the minimum extent that jurisdiction permits. Full detail is set out in our Disclaimer.

13. Limitation of Liability

To the maximum extent permitted by applicable law:

• Excluded damages. ShipReady and its founders, employees, contractors, licensors, and subprocessors are not liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, including lost profits, lost revenue, lost or corrupted data, loss of goodwill, business interruption, or cost of substitute services, arising out of or relating to these Terms, the Service, any scan, any result, or any unavailability — regardless of the legal theory and even if we were advised of the possibility.
• Aggregate cap. Our total cumulative liability for all claims arising out of or relating to these Terms or the Service will not exceed the total fees you actually paid us for the Service in the six (6) months immediately preceding the event giving rise to the first claim, or fifty US dollars (USD 50), whichever is greater. This cap is cumulative across all causes of action.
• Free plan. If you paid no fees in the six (6) months preceding a claim, the aggregate cap is fifty US dollars (USD 50).
• Time bar. Any claim arising out of or relating to these Terms or the Service must be brought within one (1) year after the cause of action accrues, unless a longer period is mandatorily required by law.
• Essential basis. These limitations are an essential basis of the agreement and apply even if a limited remedy fails of its essential purpose.

Nothing in these Terms excludes or limits liability that cannot lawfully be excluded, including liability for fraud, willful misconduct, gross negligence, or death or personal injury. Where a limitation is restricted by mandatory law, it is reduced only to the minimum extent necessary and every remaining protection continues to apply.

14. Indemnification

To the maximum extent permitted by law, you agree to defend, indemnify, and hold harmless ShipReady and its founders, employees, contractors, licensors, and subprocessors from any third-party claim, liability, damage, loss, or expense (including reasonable legal fees) arising out of or relating to:

• your access to or use of the Service;
• any URL, repository, credential, or other content you submit;
• your scanning of any system, including any claim brought by the owner or operator of a target or by any data subject;
• your reliance on, action upon, or failure to act upon any scan result, score, or remediation guidance;
• any fix, configuration change, deployment, or rollback you perform based on Service output;
• any report or deliverable you sell, brand, modify, or provide to a client;
• your breach of these Terms, the Acceptable Use Policy, or any applicable law or third-party right.

We will notify you of any claim subject to indemnification and may, at our own expense, assume its exclusive defense and control, in which case you will cooperate. You may not settle a claim in a way that imposes any obligation or admission on us without our prior written consent.

15. Suspension & Termination

16. Dispute Resolution

Before starting any formal proceeding, you and we agree to attempt in good faith to resolve the dispute informally for at least sixty (60) days. To begin, send a written notice describing the claim and the relief requested to the address in Section 19. The limitation period is paused while informal resolution is pending.

If informal resolution fails, disputes will be resolved on an individual basis. To the fullest extent permitted by law, you and we each waive any right to bring or participate in a class, collective, consolidated, or representative proceeding. Either party may still bring a qualifying individual claim in small-claims court, and either party may seek injunctive relief in any court of competent jurisdiction to protect its intellectual property or prevent unauthorized use of the Service. Nothing in this Section limits any mandatory right you have as a consumer under the law of your country of residence.

17. Governing Law & Jurisdiction

These Terms, and any non-contractual obligations arising from them, are governed by the laws applicable at ShipReady’s principal place of business, without regard to conflict-of-laws principles, and the courts of that jurisdiction have exclusive jurisdiction over any dispute, subject to Section 16. Where you are a consumer whose local law affords additional mandatory protection, this Section does not deprive you of it.

18. General Provisions

• Entire agreement. These Terms, together with the documents incorporated in Section 1, are the entire agreement between you and us regarding the Service and supersede any prior agreements or representations.
• Severability. If any provision is found unenforceable, it will be modified to the minimum extent necessary or severed, and the remainder stays in force.
• Waiver. A failure or delay in exercising a right is not a waiver of it; a waiver is effective only in writing and only for the instance given.
• Assignment. You may not assign these Terms without our prior written consent. We may assign them, including in connection with a merger, acquisition, financing, or sale of assets.
• Force majeure. Neither party (other than for payment obligations) is liable for delay or failure caused by circumstances beyond its reasonable control, including internet or cloud-provider outages, upstream API changes, denial-of-service attacks, or governmental action.
• No agency; no third-party beneficiaries. The parties are independent contractors, and these Terms confer no rights on third parties.
• Electronic communications. You consent to receive communications electronically, and your electronic acceptance constitutes a valid signature.
• Interpretation.Headings are for convenience only; “including” means “including without limitation”; the English version controls over any translation.
• Export & sanctions. You will comply with all applicable export-control, sanctions, and trade laws in connection with your use of the Service.

19. Changes to These Terms

We may modify these Terms. The current version is always available at /termswith a “Last updated” date. For material changes we will give reasonable notice — generally at least thirty (30) days — by email or by a prominent notice in the Service, and those changes apply prospectively only. Non-material changes such as clarifications or typographical corrections take effect on posting. Continued use after the effective date constitutes acceptance. If you do not accept an update, your remedy is to stop using the Service and cancel before the effective date.