Terms of Service

MergeSafe (mergesafe.io, app.mergesafe.io and related services) is an early-stage product operated by its founder and not yet incorporated; these terms will be updated when a company is formed. You can reach us anytime at contact@mergesafe.io. To use MergeSafe you must be legally capable of entering into a contract.

MergeSafe analyzes codebases — uploaded as ZIP archives, connected from GitHub, or submitted through our MCP integration — and produces an audit report: scores, findings, verdicts and AI-ready fix prompts.

MergeSafe is currently in early access: it's free, without analysis limits, and under active development — features may change, improve or be removed. If paid plans arrive, we'll announce them clearly before anything changes; you'll never be silently charged, and your reports and history remain yours either way.

• You sign in with GitHub or Google; keep control of that provider account, since it is your key to MergeSafe.
• Your API keys are secrets: anyone holding one can run analyses as you. Rotate a key immediately if you think it leaked.
• You're responsible for activity on your account, and for keeping your account information accurate.

You keep every right to the code you submit. You grant MergeSafe only the narrow, temporary technical permission needed to analyze it and produce your report — and that permission ends when the analysis does, at which point your code is deleted (see the security page). We claim no ownership, no license to reuse, and no right to train anything on it.

In return, you promise you have the right to submit what you submit. Don't upload code you've no permission to analyze — your employer's proprietary repository, a client's codebase without their blessing, someone else's leaked source.

MergeSafe runs rigorous static analysis, but no automated tool finds everything. Reports can contain false positives (flagged issues that turn out fine) and false negatives (real issues that go undetected). A high score, a "Ready to ship" verdict, or a clean report is our honest assessment — not a certification, a security audit in the regulatory sense, or a promise that your app cannot be breached.

The same goes for fix prompts: they are carefully written, but it's your AI assistant that applies them and you who ships the result. Decisions about what to deploy, sell or launch remain yours.

Analyzing vulnerable, ugly or broken code is literally what MergeSafe is for — that's always welcome. What isn't:

• Attacking, probing or overloading the service itself, or trying to bypass its safety limits and rate limits.
• Submitting code you have no right to analyze (see section 4) or content that is illegal to possess.
• Reselling or white-labeling MergeSafe reports as your own service without our agreement.
• Automated bulk usage far beyond what a person or small team plausibly needs during free early access.

MergeSafe is early-access software provided without an uptime commitment: it may be unavailable, interrupted or updated at any time. If we ever discontinue the service, we'll give you notice and you'll be able to export your data first — the export button already exists today.

• You can leave anytime: deleting your account erases your data immediately and permanently (see the privacy policy).
• We can suspend or close accounts that break these terms — abuse of the service or of other people's code — with notice where practicable.

MergeSafe is provided as is. To the maximum extent permitted by law, we are not liable for indirect damages — lost profits, lost data you didn't export, consequences of shipping code (audited or not) — and our total liability is capped at the amount you paid us in the last 12 months, which during free early access is zero.

Nothing in these terms excludes liability that cannot legally be excluded (such as gross negligence or willful misconduct), and if you use MergeSafe as a consumer, your statutory rights remain untouched.

The MergeSafe name, logo, site, software and report formats belong to us. If you send us feedback or ideas, you let us use them to improve the product — that's the only thing we take.

These terms are governed by French law, and French courts have jurisdiction — subject to any mandatory consumer-protection rules of your country of residence, which always prevail. If something goes wrong, email us first at contact@mergesafe.io — most problems are fixable faster than any procedure.

If these terms change materially, we'll announce it on the site before the new version takes effect, and the date at the top will always tell you which version you're reading. Continuing to use MergeSafe after a change means you accept it.