Terms of service

Service supplier and contact

Code Audit Studio is supplied by Needly Labs. Contact needlylabs@gmail.com. Paddle is the seller and merchant of record for paid transactions.

The service

Code Audit Studio is an AI-assisted, read-only review service for a public GitHub pull request, source explicitly supplied by the user, or a bounded pull-request diff supplied by the GitHub Action. An eligible same-repository private pull request can be reviewed through the Action; its GitHub token stays inside GitHub Actions. The service returns cited risks, missing tests, verification steps, release notes, and a remediation prompt. It does not execute source, install dependencies, change a repository, post a GitHub review, or merge or deploy code.

The output is automated advice, not a comprehensive security audit, certification, or substitute for engineering judgment. It may be incomplete or wrong. You must verify findings against the supplied source before using them for a merge, release, security, legal, or business decision.

Accounts and acceptable use

An account uses GitHub OAuth. You are responsible for activity under your account and for keeping Action access tokens private. You must have the right to submit the source you provide. Do not submit secrets, credentials, personal data, illegal material, or source that you are not authorized to disclose to Needly Labs and its model provider.

You may not share an account or token, evade plan limits, overload or probe the service, reverse engineer access controls, or use the service unlawfully. Needly Labs may revoke a token or suspend access affected by abuse, fraud, cancellation, refund, or a material breach of these terms.

Plans, payment, and renewal

Free includes three completed reviews per calendar month. The Pro plan is $12 USD per month for 50 completed reviews per calendar month, shared across the web app and GitHub Action. Unused reviews do not roll over. There is no free trial, annual plan, usage overage charge, team-seat minimum, or seat-based billing.

Paddle is the merchant of record and shows applicable tax, currency conversion, billing period, renewal terms, and the final total before payment is authorized. Pro renews monthly until cancelled before renewal. The Paddle buyer portal or receipt provides subscription management and cancellation. A scheduled cancellation normally leaves Pro active until the paid period ends.

Delivery and service data

A completed purchase upgrades the associated Code Audit Studio account. The account database keeps identity, entitlement, hashed session and Action-token values, and content-free usage records. Source and reports are processed for the requested review but are not kept as product history. The privacy policy explains providers, retention, controls, and deletion.

Cancellation, refunds, and mandatory rights

Cancellation stops a future renewal; it is not automatically a refund. Paddle handles eligible requests under the refund and cancellation policy. Nothing in these terms limits a mandatory consumer right that cannot legally be excluded or restricted.

Availability and responsibility

GitHub markup, provider services, models, and source formats change. Needly Labs may maintain, secure, modify, or discontinue the service and does not promise that every pull request will be readable or every finding will be correct. Liability that cannot legally be excluded remains unaffected.